last executing test programs:

3.477747782s ago: executing program 2 (id=1699):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000}, 0x0)

3.383631237s ago: executing program 2 (id=1700):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

1.032832285s ago: executing program 2 (id=1722):
syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="c53f02e68cca1e6e7b23b5d6308a22ad535bec1c2dca082fb119340cede5087459239841ea04cc4c1f1d068ebb23a1b985e6cb208935facdee487a75f9d9e59e45f7a982ed5f934ee64d54c432200ddb28a027350aa315fbe70d481d62a4916e62", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRES8, @ANYRESOCT], 0x1, 0x5b32, &(0x7f0000005b80)="$eJzs3Q2MXWWdMPBz7p1pZzptmaJALR8doPQtvAJTii/QYBx4I+BqEUGLCtJWOi2D/YBOa6GKLSSiQZZtshtlTSSEaMKGENwl6/qxpphFzMoam7hscXddCGhWdoM1SLVLibOZuefcmXvmPPfcufdOaeH3C8ydc+a5/+f/f84zZ8459/TeCAAAgLeEpz4//PsrF7z3x3cNHth5xXc33hn1lMfWd6UNepPH296oDDmcZnbMH3vMzovdAzOees+9H3j2a5/4xgsvzluy9Os3X3bo1tkr7rln4GcXHPrJH+8oipvOpzPHl+OX4yg6+adLvnz3D58+YXRdHEVROe7dFUXz4tIP5sWZEP2vRVG0tppn7Q8fP7Bs3ejjri/NrFl/TCaI+f7W1pXMsy98f/NJvz7nsmf3/PzSA/1dr23ZNd4k7pown6Jo7uqJz+8cnaNRFD2fTKyR1PMHOqMk9qiroiiaNeF5FxbkdVqD+Z8dWF6QPM5IHnsK4qQ/PzWz3NlgHh2Zx64Gn9es0jTHT6Xbb/Y095/duWX7mZc8fit5PHOK8cvp/3FUiqOOancb4vE5Ek3YbnEUj2378eVSzVyIM3MjjqI4s1zKLJc7M3WN9ZtMtHIc165P22XW9yXrO5L1pxbMtWsC69+R1lv58xYdzNSfDdoz6ZtqXWPSvJ6vk8vhMDpOM+usT/PtSjZGT7KuJz520nNGcqQ/W/nifY+9sOOBRb2BPOJvxkn8uKn4z2y8aN/iHb/YPz8Uf3UpiV9qKv7wOa88+tLVPzohGH93Gr/cVPznzl/8le/t3H4wOD6/Tceno6n45eVnHVp6V//KYP4PpvG7mor/0KWPfHXuu558NJh/fzo+3c2Nz9C21697+Lj9wfhRGn9WU/EvefX4M5ZvfmR9MP4T6fj0NBX/6eGhFXfftHB7Xyj+3jT+nKbin/bL66/bs2/wuWD+A+n49DYV/92LLrlqxf5N94b2nfGuw/UXFuDN6W3JMdYXk+VmzzNbNeF84f7euHLMNzv5f047O8oY7WfuNMYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4K3pod61g3/8zimvdyTLM5NvTilXHtP1M6Io7o6iaHjrmi1bhzat77t587Ytm9Zs6FuztW9w09Ytt/ed/86+LYO3bFhz++hP+89eVnnesVFceYxPntT3yMjISKm3dl3a36cu+PPH+07Z969R1H/cz07pCOb/wTsW/P95OV8z4oGRDX92xg0vzf7HbZUVvUlevYG8okBeFz/88vJff7f7T6Oo//h6ef3nkst/WJPQ2IrxOInSzKg09s3MeFZuHtWsk3zS8epYN7RhsL94fMuBOn518G8+sn34xl2V8e0K1tHg+HYPjPxh07efuPHiHVdVVhyp271ovNMq0vzS8etKxntuUtfcQF0dgbruPuPU//iXv9z48q6ov+N3Cyf3XVRXZzIBOuN3NNRv2sOsuHZMupL26RZPn3fu1o23nDt8+46zhzauWT+4fnDTsmXLLjx/2XkXnPf/zh0rvfK1bfWn/f+fBus/PPNp8wUDQ+nXxuZTUV5F4zGaV/F4TMwo9Pv39g9f/m93/u3uqysriuZ52rq6P0keZ41u5qXRhPk2eazy6ioah87AOKy/puevXu3b/D9F+6GJW2bi14x4YOR3Q//0ntl7Tr+hsuKw7OcnJtTkfr6adZJP58T9ztIjd3xnRuWkrp7cvE6/65WP/vN34r5qfjNmRLet2bp1y9LK18NU19uv+Wx767pw8X/fumP1nfMm1XVe5evsJNPZ8Ym5eWXXpnUtHPtajpJhSR+irlJ+fZ1RJb/s34X0edlR7Ul+1hMfm1tXVvqzlS/e99gLOx5YFBrp+JuVHrujOZXH+KRAyw2ZJ5arCef1XzQ/oihaPXFdOo5PfPsv+vb8eN7GwvlRmRmTvmbLGxj53EWzfzV87d4VlRWHZ78yIaEm9yvVrMfzGRuvsf3KeUdOHW/cdq75xYoHRvac9M71y/5+a/JrXzS+1dZ547ssior2Awszy9O1H8j2M94+P15fZrknKje133ju/MVf+d7O7QeD+43fNrrf+GzNUrnF/UYcmE/7PvfXf/jMvmfe1779xvsWlz/+7wuXJQN6pPy+dSXzuiswr6tZJ/nEE+f1OTdu3rC2sv7IPf5NHsPnP3HHhOOs4dt3fGrNhg2DW4Ybq6vR45K0ruwoj1ZUauK4JP3tO7bgvC7dXuN1Td83jYxXo79vaf5rs+PV5O8b5OmJ4qb+nj2z8aJ9i3f8Yn9vIG68upTELzUVf/icVx596eofnRCMvzuN39FU/PLysw4tvat/ZTD+g3ESv6up+A9d+shX577ryUeD8fvT/LubO54Y2vb6dQ8fFx7/KI3f01T8p4eHVtx908Ltwfh746Sf0WO7KHr8wLJ1leU46kz2w2kenTV5RdnlOLNcyiyXJy6XKtfgqx2U47h2fdouWX/qhFzyXBtYnx49ds2vPB5Ml6PsN/XXH2lKE44J8tYXHV8DwJtJ+vp/eqyRvv6/MPmDOOH1/8pjPKPm+fOT46n546vGzvPu7Kv8IZ3qdb00j+x1vTT+ktNrYzR7Xa/outxpmeVKXt3JdbSOaj51jhtmRw1cl5vcT/3rcpnyi6+b9X0xs6Jj7NpeaLt1Jlcq8l5nzuQ7ezRCq8fZ8/Ozrh5nh+Zd9npH+jp93OC8y94Xkc677H0RafwFmQtozd4X0dy8i6rzLr2sUWfejVVWfD118ryI6ozr+LzIj5adF1OYR72VeTS9r0sd/ef703v93fWEQPzk78iRfr6frk/3Dx0NXgdYGVjfrusA6e4izev5nL5m1Mmv3VwHAIDx8//0b/Do+f/o3+q+zHF+0XlL9iwjjRe8j6Wcn0/R+e/k+9lmNXXcd8mrx5+xfPMj64PHxU80el/KLTVLswruSykax0WZ5cJxDNwKUnTdYXGmfU80p6lxPO2X11+3Z9/gc8FxHKgcSBWP4+6apTktjuOSzHLhOHbmZ1U0jtl+iubvmZnlnuSOoKmO+7sXXXLViv2b7g2O+65Gx/3BmqXegnFPztPj2Hl6bXzn6UfEefp0X498w64DJNetp+s6wDWB9VO9DtAz6ZtqXWPqXQc4nBq+DhD4uwAAR7P0/L96v3xy/v8PmXatnh8Gj9sG2nM/a/C4rXpc29pxeTD/6nF5a69fBuNXz4taO28Jjk/1vKW1865g/Op5V2vXaYLj80Q6Pq0d94f+uUB63H/0nxdN73WGt+h5UWfkvAgAgKNIev6fHq6m9/8/mSxnj42n/zx3us9Dp/s8erqvM0z3dZKj/Tz3aL/OMN3X2VwH8PpoMdcBAADeHN6bPN7QYPuOsXuIo+iTN9503qq1g59etW7L4ODwLWtuHFw1tGloa7Vd59iZ1+T7pEP9Fd0nndd+Vp32q4Lxa/O5LNA+pNX6Q/0V1Z/Xvl79q4Pxa/O5PNA+pNX6Q/0V1Z/Xvl79a4Lxa/O5ItA+pNX6Q/0V1Z/Xvl79nwzGr83nfYH2Ia3WH+qvqP689vXqvzEYvzafPwm0D2m1/lB/RfWPtZ8R5cTPb599v8xQ/e8PtA9ptf5Qf0X157WvV/9gMH5tPh8ItA9ptf5Qf0X157WvV/+6YPzafFYE2ofk1J9m0FD9of6K6s9rX6/+9cH4tflcGWgf0ur2D/VXVH9e+3r13xSMX5vPBwPtQ1qtP9RfUf157evVPxSMX5vPVYH2Ia3WH+qvqP689vXqvzkYvzafDwXah7Raf6i/ovrz2ter/1PB+LX5XB1oH9Jq/aH+iurPa1+v/g3B+LX5XBNoH9Jq/aH+iurPa1+v/o3B+LX5fDjQPqTV+kP9FdWf175e/ZuC8Wvz+UigfUir9Yf6K6o/r329+jcH49fmszLQPqTV+kP9FdWf175e/bcE49fmc22gfUir9Yf6K6o/r329+m8Nxq/N56OB9iGt1h/qr6j+vPb16t8SjF+bz8cC7UNarT/UX1H9ee3r1T8cjF+bz8cD7UNarT/UX1H9ee3r1b81GL82n+sC7UNarT/UX1H9ee3r1b8tGL82n+sD7UNarT/UX1H9ee3r1f/pYPzafD4RaB/Sav2h/orqz2tfr/7twfi1+dwQaD9JciNOq/WH+iuqP699vfpvC8avzWdVoH1Itf6tWwYHV227Ze2arYOrNm1eOzi8avuWoa1bB5MDtVbvSwzeV5bcl9gZddStf0Fm+Zjk/YGOCbw/ULZ9GvbEsW8mvz9QttuOgvfJKdpe2f6L3mdoQeYdrUPzLbR9i/YHjc6HrJrfj8okGdo0PLhl8v67u+54TJwT0dhtc92Vx/j4htpn364z0E2hxuvpqltPdvXM5EbAmfFxDbWPAp8HN1WN1xMH68nLY6qfY5eGndLn2GW+TJLzHq019a4bHttJD63ZMLRjcHL+s46A/N+YcSxNyqNo+8eZPOYlmcwLfd5bIO/t3/qvh37zm797fxT1H1c+qaXxiwdGVh88/pM/vXjmuaP5l+rmX22Zfq5ywecfZtun9XRs2Dy89f+u27xtU/4raOn9zqXq8jTd75zUWW7w/uXQ/R5TvX85nvTNkanR+5cBAADeKtJ//5+er85PLn3Py1wiaPw6cGv/Pjp4HXhvY9eBs1cjiq4DZ9unZTd6HbinxevA2f5D12lLddrXe92l0evAHw+0n6rG50lr7wMQnCfJSBXNk+y/wy+aJ9n2U50n3S3Ok2z/RfMkr32916cbnSfXBtqHND4fWnvfieB86G9sPmQ/V7NoPmTbT3U+dLU4H7L9F82HvPb17tdpdD58ONC+UY3Pj9beFyY4P1Y3Nj+yn5dSND+y7ac6P+IW50e2/6L5kde+3v2Mjc6PDwXapxrf/q29b09w++9ubPtnP7elaPtn2091+5da3P7Z/ou2f177evdzN7r9rwy0T9Vu/9ENP7bdB1dt37xl4j3Q0/25LSGN5ze9n1vTrMbzn973fZr+/Kf3faWmP//WzpuC+e9t7ZWuxvOf3s8latZhez02+beaRe8/VfQ67ccC66f6Ou2MSd8cmbxOCwAAANMvff0//Tj+9P3hv5Q8Bj6mv2lH/+d7+/zt3Pht+vztouuYrufV6ewI4HoeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAe8zsmD/2+NTnh39/5YL3/viuwQM7r/juxjt3D8x46j33fuDZr33iGy+8OG/J0q/ffNmhW2evuOeegZ9dcOgnf7yjMHBv5eHMZLEriuKX4yg6+adLvnz3D58+YXRdHEVROe7dFUXz4tIP5sWZCP2vRVG0tppn7Q8fP7Bs3ejjri/NrFl/TCZItq6op5zmU5NndFthRRyFupJ59oXvbz7p1+dc9uyen196oL/rtS27xpvEXRPmUxTNXT3x+Z1RFHUn/49KZ9v89MnJ41VRFM2a8LwLC/I6rcH8zw4sL0geZySPPQVx0p+fmlnubDCPjsxjV4PPa1ZpmuOn0u03e5r7z+7csv3MSx6/lTyeOcX45fT/OCrFUUe1uw3x+ByJJmy3OIrHtv34cqlmLsSZuRFHUZxZLmWWy52Zusb6TSZaOY5r16ftMuv7kvUdyfpTC+baNYH170jrTX5RD2bqzwbtmfRNta4xaV7P18nlcChN2AflrU/z7Uo2Rk+yric+dtJzRnKkP1v54n2PvbDjgUW9gTzib8ZJ/Lip+M9svGjf4h2/2D8/FH91KYlfair+8DmvPPrS1T86IRh/dxq/3FT8585f/JXv7dx+MDg+v03Hp6Op+OXlZx1aelf/ymD+D6bxu5qK/9Clj3x17ruefDSYf386Pt3Njc/Qtteve/i4/cH4URp/VlPxL3n1+DOWb35kfTD+E+n49DQV/+nhoRV337Rwe18o/t40/pym4p/2y+uv27Nv8Llg/gPp+PQ2Ff/diy65asX+TfeG9p3xrsP1FxbgzeltyTHWF5PlZs8zWzXhfOH+3rhyzDc7+X9OOzvKGO1n7jTGBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgzWnw8vt3Xr531RUdcRTFgTYjOdKflWcMDPQ10W95+VmHlt7Vv3LiuvlNxAEAAACKpefhpeqarmh+tD3ujk7MbZ9eIzgxXYpr12evIXSPt2xLnFKb4pTbFKejTXE62xRnRpvizGxTnK6COF1RY3G668YpNZzPrDbF6WlTnNktx6nM5Dltymdum+Ic06Y4vXXjND4P57UpzrFtivO2NsV5e5viHNemOMe3Kc4JbYqTvaY81Xk4J2m5IBRn7JtyYZyOuFz9Qd719LSfkzM7zNIU++lpsJ/sNfup9tPdYD+nt9hPV4P9LG6xn7jBfs5ssZ9SQT/pvL0tm1/aT7pUPP8PjkRRdHvrccYed7QpzmfaFOezbYpzR5vifK5NcXa2GAegUen5//h5Y280s+PiaFayx8leBUjPdxdWnj1pf9SVPUFPpPFOyqyfURQve6KeibewzfmdllnfWROvo3rcVCde78R4izI/LKw3e0Ehk9+SqcbLXlgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGk0ePn9Oy/fu+qKKI5G/8s1kiP9WXnGwEBfE/2ufPG+x17Y8cCiietmdjQRCAAAACiUnof/L7v2FyNXVT8A/Nydv2wLv+kvUAdS6EhpxYi0dFH+pIaLPswSgxLAaMB0t5Shbth2kd2msCJrfSA+aCDRxNUnwxOG8KAGRSVZHjQGJWETxSaC8iJRNEACJNTEZMzu3Dv/OrOzjmgX+Hwezr33nO8533tmmybfM5Nr9hRDIbs75KN8R1wxOQcoJs+ZUuMaVUZWr6PRljXjs0n87rnDd+2evXf+w1OHDxyqHaodGRsbu/Lysb1X7P3o7jumpmt7Gm0oDFgvl6w3e+/8nQemp2t3zzaeu9+7nMwrt7omV5rjyXv//4A8URLfyvPfuxn81wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNOrVl1cqC5PjI9GIUR9Yuo9pGOZfBxXhsh77Ztbd1498+ih9r5CdoiFAAAAgIHSOjzX7CmGQjYTMuHc1acLW6GlEFp1PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8N5Tqy4uVJcnxjdFIUR9Yuo9pGOZfBxXhsj7m9mp6x/4wvZj7X3lNeILQ+QAAAAAGtI6fKTZUwzlsCPkonM74tKzgfO65nfHpeucv8647rODfnE71hm3a51xHxwQ96nkek8AAACAd760/s82e0qhkD2zb/0/qK5P47Z3xWWS6zC/FQAAAAD+M2n9n2/2lEMhW27W6+ut9y/sikvnD/rePp0/6Hv7NO7iPnm6v88HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADauWnVxobo8MZ6JQoj6xNR7SMcy+TiuDJH3xct3ffvnC8dOtvcVskMsBAAAAAyU1uGt0rsYCtnRkAubVuv+K3f9/Yvzk8e35ErJcD4f7jkwN3f33kabxu346uuf+91Po8opcZc12tOyOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4G1Vqy4uVJcnxs+IQoj6xNR7SMcy+TiuDJH3xamj/7z1kXNea+8rD7EOAAAAMFhah7dq/2Ioh3zIh62rT+21/oqRrvn9zgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAd4/Ze+fvPDA9Xbt7I91kwoZ4DTdu3rs3p/t/JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKOoVRcXqssT48UohKhPTL2HdCyTj+PKEHkf/vij3z3rI794rL2vPMQ6AAAAwGBpHd6q/YuhHHIhF85Zfep1JrBa/5f+hy8JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsCLXq4kJ1eWL8zCiEqE9MvYd0LJOP48oQeS/88+dvXTpRe7G9r5AdYiEAAABgoLQOzzd7iqGQvSwUwrbkebpzQpRJrr3PBVrz7uqYNrruefd1zMuse97XunaWTXbTmFdM1ys1rs15lVPnVUII5WReuTUw2TEvPNQx68x1v+f3OuaVBswLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsAHVqosL1eWJ8SgKIeoTU+8hHcvk47gyRN7nDl91Ytf8H19r7ysPsQ4AAAAwWFqHt2r/YiiH88NZ4fzVuj+UOuPTuH2PvHL1X392xjdC2LP1txdk+67/l4urv+xuQhjpDBoJ4f+SfFGffMd+/LeHX331J58MYc85mW2n5Muuna9zybg+eXLrbc/uK+we8OEAAADAu0Ra/+eaPaVQyB7pW/+nhfa/Vf/PnH3TfVuSNqnIu2aMlJJ8I33y3XnFN39UueDEH1bq/7XyffrL531iS5i5Ip5K20ZPlyiuTz+4c//Lm58+mu66kT/TlT/9XF46+cPPHJs9+JVG/mIoJv3nZXvlP7XtckZcf+vIE08d3Dd/Q2f+bJ/9P7Dz/X/6/XcOv7KS/43to838H1hj/2vnP/vm6vPHH3/oxs78uT75D9206ftvVmb+0b3/0a6Fk0++8Qdv+yt0ieL6G1PPXLN5acf+zvwhhMn2wPTzf+qJb1WWfr3lcJo//a3IxTu68rf9U2tvu86cori+tO2SQ2NPzm3qzB915U/3f+L+H7z1pRPPXde9/9u79983f/f+r9uVueWF7WPD/HgGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAdoFZdXKguT4yHTAhRn5h6D+lYJh/HlSHyfuyia2+4/rUjX2/vK2SHWAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB429SqiwvV5YnxkSiEqE9MvYd0LJOP48oQeWcvff2xl2/81fva+8pDrAMAAAAMltbhrdq/GMohH/JhdLXunzy59bZn9xV2h1JjNEqu2emZ2bkP3TFz9Mjtp+nNAQAAgPVK6/9ss6cUCtmLQi6p/5e2XXJo7Mm5TWn9H0KYXGmKd0xN18ZC85zgul2ZW17YPlZpnhO0x116cGY6OSZI173/qs0vzX52+fqe6+5txb0x9cw1m5d27E/jcsl1Ne6yVtz0gzv3v7z56aNp3Eh6TrESt6cV99aRJ546uG/+hnQ8075eW9zZN1efP/74Qzc210muo0leAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf7EDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWF/ToKsaqI4wA8c++uXr3rtluUmxSpmGiQrFRUQrQKSQ9tSIEvFviQlZFJLWEI4SZkYRI+VQRFREEgUhD0UIQFZZBEQYT2EIb2UA+xEW2IGxW7O7N79+hpt1OrIN8Hh3Hm3POb/5kznr0XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPNrblvPWHv46YHf71x02+e7twzvuv39bU/t75tz+NZ9dxx75d43T5zsXrH6jYfWjzza0b93b9/XN4588eeT0wY/Md6sTN1GCPHnGMKVX654Yc+nRxaOjsUQQj12DYbQHWsfd8dCQu/pEMJ9E3VOPfnu8HX3j7aDz82dMn5RIaR4X6FZz/WM65paLxeWRtpnz3y4/YofV60/dujbdcO9jdOPDU5+JDZa9lMInZtbr28PIcxLx6i823ryxandEEKY33LdTdPUtXSG9V9b0l+U2jmpbU6Tk88vKfTbZ1hHW6FtzPC6qmqznJ/l59cxy/MXX27FebpT+15qV/7L/Ho+YqjF0DYx3cNxco+ElucWQxx79pP92pS9EAt7I4YQC/1aoV9vL9zX2Lxpo9VjnDqeP1cYX5zG29L4kmn22t0l45fn+03/UU8V7r8Y2jzjHxP3NSbX9f0/1HIu1FreQWcbz/U20sNoprFmvPiMa/46i3xu48nn3z6x89VlXSV1xHdiyo+V8r/ZdvPR5Tu/G+opy99cS/m1SvkDq349+NNdny0szd+f8+uV8o9fv/zFD3btOFW6Pr/k9WmrlF9fc83I6t29G0vrfy3nNyrlv77uwMudN3xysLT+3rw+86qtz9bH/9j01qVDpfkh58+vlL/2t8uuXrP9wAOl+R/l9WlWyj8ysLV/z4NX7Vhclv9Vzl9QKX/pD/dsOnR0y/HS+vvy+nRVyr9l2doN/UOP7Ct7d8bBc/UXFuDCdEn6jvVs6lf9nflftfxeeKkrjn/n60jHgv9zooLReTpnMR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgb3bggAQAAABA0P/X7QgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICnAgAA//+R8GA9")

824.132473ms ago: executing program 0 (id=1726):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v")
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000380)={0x0, 0xfb, 0xbed, 0x1, 0x0, "9861f3f56b276b4e3714de29b5995aba", "8ac38968f52b73e6cd5b3fd27e0c69221b784420656191cfcbb89b9356cfcebae066407236d9fae90ff71c7b99c0b104a920f873f2f4949719fa3b18c4652b9b17ceb19fa799570754b294120f58174bbf3dc346645fb96d77f23ce9fbebffff35de29f4514c94a3e84ccfd398cc0088aee1ed8f5d372efd7ca5db04b79419c60a828c1d72f21e1ee31101d13953d61636fe7d2059e11260b765e170e3fa37a3444e2d88a8f1d721a02967f581daa40989f11290b9b7375c2447c8d9610f856439367d43678107463c5fafb304c3821b22b5ac8f4ca54773de1140f56fe679aad118d89f9451478fbd1662d11937a994e833c88cb8a6fee5ab2bf17281fe4fc6c5ab3e424f226729367ab3d3a3d246f9e18e34e94d39a54d71a08a5c2bc5165138bb2da114703a44a8911b0eb1bad09f9be6fea8ca19125b8f5bb5953fdbaf7156898f084557fcfdd0196ed5fa0f1499acc69cde56c4e481764b3ba05c421abdabf07d54b645c8354f00e03f982d63fcd1c8894583892ea84cd53f0b72f5deb298b9ba84fd741774dcdb6d244a98ffba21ff1375924d78d575984e7fda7d1b7e6855f2c0f6f1d9d35495a7679442bee086fd37f8302b62e91336d1b0ac99d0cf5ba5feed9fb53a475ec309fc56eb5f766778f4e1322a81d03707a74ae0e0956cc5ab97aad8059c28247dbe186dbed98cd3b32fe367c157f4b71f9e7c0c90d5769b2257a29ad5870b9eff1629188db64415994f1aefd43e07a298da31b427d75f37eca9d676f5811e55b5844fbe04524de008bdda4494654c5a61bc805900cf1bca83a33160442564b6977e2892d83ca267c2b0fa577d6cda2685b2c88f96069f5d352f9109c9aab2dcb51db9acc5653535f011e3b5481494edeb94370f67e74463113bc01e7e733da06850d9cc23fa87d3902cad79910c316e18f3328976331789d29eba0eea55cc870aaa5ed7f1c9dabb2b9c561fb05e50c6907ea3539342f3bfb0f28844c4ce4a36e20a697dac227eb149355b24ceb3b7ed39c8c0906fb16af8f49566d3504865e238d9e09eb7f6cb6a42cbf18beb66548d05eea113a5611dda003cd7d53fe2f81e1e151f56b09a5e67adb3105ad232ac5267d878399ef2f07b92ddb69cf71b7b66514bdff53642fa15e37bf67cbd685f2f96abf43637ae2366b9a8522b8b232262bc32d6b70394b74f920f5bd85e2ad08fa709ff27e29e024da505ff1dbea6a254da59569ad690e72d911e7ccaaf171c526712487fc3179df063912553ef8cbd2608f945f1e006832b61ba06da30da029855fe90b47b94501162987205758fdc4adceded419d0fdfdd25b1f47ff26bcb17c3ab06a0f2af75cb397f539ce7e5ae50a6d016d0b69013bc49f57611726d1a1f76ee7c5f5b5fba386bce32d03b428f925a5d1258902ad2690c6928b44b26befd31b7b35eb9355e215d02c2e265bebae9356d83e4d186e71b11f96c023729f62ef0cfc1b92780f603659a52c59419906f5b632f6399145a696f7310e01ec752820e9c2cbf8aa308a5ac8e54fb19e58cddedae19b210c482d7959c0f138280da4201393f678d792fd9a635a9316069c9cfa5d0228dde26b49c9cc0f4d45bc6483b2f0c0d7d7236c7d4d76895724ccd6dd2d7b6d04dd110f8a5ae3dd5b9b83ce71ee2885345c0fcd006ce931a4aff94909a177e9068f11dfb13c25cefef7150b562fda57c84473d6d150cb6babe29a54881357d58cc0527e465dd1d359bb07cd299e4dee07eb8fbf325f70913f484b00d83704fba9f59e2324a651947c4dc6db0a7858de6888ca7b3a508c678120917adc9a88f8fa52894f18abeb4217241b6854b67d8c01726c545980d9a3d31d1825fd8385a4c6ddba6313f38c1bf20794b07ca381cf49f14030d4effd647602983aa8a5bef3ae3b6560d4a719e1a3f616d7392cc8fc2be132e9f82136d724ef67a9ff957208ff001ebe1dd8db6907c630cbc30a71e0ac17fcfa2467a535debf0d62d99870e0144c06c4baa50cde453daabfc037dcbed08fcf577b14d016961dddb9ea451b84056da774b63162a6c7875cf2437a417a57206f46aa118c27aae9514a490bb534053142f6afe34898169d546f7af937efc1be4a21848f7027025286da2db932acfc0843c2655dffde444ce8749628100043533aaf394e3d81fbc53b8b88d9473ce84986b85d956fd466a7ed52f7174af2f81549d5f2a0a11500957ef062b1c7ea977a83a828e8d83acb09eeca2d5c7b5b9a8cd96de9d0d6b91fa6308de62274a7584c9e76d19b8288a9287e881db420f4ef31814786b4c33817ffe1b57a8004f749345fb49b17b8070a977eca98fc918dab670f7ef4777df7c2595f47c1894d781a3d6da3811ba8a347bb342583b35b3ce8ce7c811f839a4c8fd396789eab2967dfecd7ecd0c4e5d15ece2b81da0dd901fcdd00a51f299c05bcde23e9fca08c6a48499ba9106620c97d575de50d49cc9d1b289db034167cafccd374318ce6564cbce2cdc48c786cdbc2961108c8563e77090bd5443f5e9fa48e3d95e2160e01169f6532fbdb6f1d3c8900c091bb53211f715c10581929011bb6f0fc65764eecd7b35a839033c473fac01852a89eb0afcfc62739c5f7a98a1773060ac6f12258254138bffe144b7542f6e6814b064ef0ed3012b7d8d75e0303a94aa35b1296ad1b47687099f361f6ea5c2358367be81c1679b598a93564bb9b2422cd7c4e2e91686b65ca23628083600f6719dbeb435887696a7e32838e702eb5eff5ecdb32a6f9784e3f512839753e3296bacfa557a7455912c6c00e07ac0ac0b6781b275c16c8121b9b1e7dea9293cbfd99f6f47e8138824533b010c5abff887aba277d7e39e0d911ed586530f4b1dd67934469599536cc7c4a38e96c8ef2e990400b4dd3da43d4a0808b8591f5573beb3fd96c577868470ebbdd1d6786b825ea5b199d70973650b452c04b61c117b91b50775eae3ebe860d7c082fa3fb864d56f27051d15d9bd819e99f13f787ce546b8a90ef0132ab788bd7e93c41dd611822620a145d7bd936c6db156e472269bb969daa626d89a520913e734a9477077fdb23caf833d2a390fd5db1921d9f76a512ecead8c97a3be544c3b3f44939a3163ff4fffe6ffaa0c3f7e14fde1607294734680390fc37863af995b605fb618d2e245c254faa5ee089a8d751d7c61ea6a23f710117b8e9b23f118a8f95fbe264ed2b356b8031e6ab65efe8c4dbc978e3aacc904ddad8bb12af55930cebff8d749563e031ef82c17513a4591b0dcf3dddc115122a0916e5d710e555afb51197a2256fc52c79f8c1b0a1d2b7cc433e30f41f73cf58635a0da25efe6496e6b8018dfb2d5cdd6db4faeba153d208808c7fbe1c6e5fbac6904856a7ad5e18fda39c060bfa4da09ef027c200ab77b348598e5671e8b42d5d457cfd35471ef43e6f52e96ab7fc03f95f354cffb4216237ce8f471fc273b27b9803a8dacab3555b1c25128cbfd9de1d20eecb649532d80f799c2089a78afb3eef4d2ac38bc0b89dd129b063fa8f8aaa4e077efeab938927fcd5cda0765ad81d5bc0c89612521cc6936132c96fbbcf3fa92145180944fd00195bf1cbf6f710aed8c94005d4227c435be83ec390a96b8081d22350eea6cb36512dc01b4023958986d81a87ea646722a9d9fe94392039761feef7e2ac03c38a47a5639fcf56c9ab0b215405d582c881ef2dc96ec99b4cc69d3ad6b44c46d9d7db79def59e61b63702fbc767eb8cbb750f8f694e6c699d9ea0d42d072838d3bae30ad7f14bc3ba0817586ec0bc88951adf11a430cd02419df47bcda188176a560f870c04cb3f5ab2281dcb4a7bcc51063354dcae0242c593d933dbb2b459c74cd2ea897e1750b8ef4fcc67474c8e7f29dceaa452fba19f58aab873e1ae912f0fc03ad5470194e1e833e338102d1eee1daef45598d431431be00f51b5f3c3e42a660a0645b64a8488a9e50699ebbd494649bc7231b0f6e57099899d37f713f0925a753f633ba44a67b8180d2cf694acc6a7de4be47775633fe86751c36f3c4c3d31507c3e054a37f25fd21e197d3b99bf7cac928ed52ad70b81a68743feaa6e920ad2c8860f17761571afea2c575932c955501f32d5c05148f8780f6bc1069a8aa2ed407e608672b48487f5025cc7edf542952037c6784da2d9d7fa317888cbc35bc32117f01565ab9b96cabc162f0e22578d723951a89d0fad13bf1f1c844cdd85e1613afdbd1955dc3fdb7910dd577ae8e8f673cbc7efb90701dd02cf0fd6c8a8235c9d07190ed"}, 0xbed, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)

493.740009ms ago: executing program 2 (id=1731):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x1}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

457.582073ms ago: executing program 1 (id=1732):
syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfc, 0x15e, &(0x7f0000000480)="$eJzs0U1rE0Ecx/Hv7E4ewIQoRggeTG5Gg5AH9CYhKwYDxgVFEE+BuKKQEDGgPTb02kOg1xz6cC19C0nbQ2lJLn0VveRW6HHL7CYs7Wv4f27zm+H3n519/3ZRVETeDfp//nrDofej8NltN79cTacNk8eB5J398PysAb/QzDQsR2Di0zT8/N3zrO6gZ9bLBiQA58Eqp59Zz3OympGGCr69zk4SwTlrNTLMnsA3el6NWLB+qsHJhH1lYL4Hz/FxHoVZBbgGbFDKXN5PhEWtUv6xgo1J6ejw4tP8vPXqZd3brjbHL1I5uwTs46jkmRU9yWLe/ui23UWtWn2TLFcsXl+aQjbH6A+pf/BdgTZ9FkFfnNwz/RW2FOwEs5bHKm0+YvfG7Yf3qJuC/3YBVH7S7eRiB53sQwu7qM2uzz3mFwU70YsIIYQQQgghhBBCCCGEEEIIIYQQkdsAAAD//7ILTbU=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
getpid()
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

453.098093ms ago: executing program 0 (id=1733):
setresuid(0xee00, 0xee00, 0x0)
setfsgid(0xee01)

395.059101ms ago: executing program 2 (id=1734):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)

394.715564ms ago: executing program 1 (id=1735):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4, 0x30}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}}, 0x4)

271.801812ms ago: executing program 1 (id=1736):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

265.94618ms ago: executing program 2 (id=1737):
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

133.072573ms ago: executing program 0 (id=1738):
futex_waitv(&(0x7f0000007840)=[{0x1400, 0x0, 0x6}, {0xe, 0x0, 0x2}], 0x2, 0x0, 0x0, 0x1)

132.750871ms ago: executing program 1 (id=1739):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000})
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b02000000d86e6c1d0002ffff03f32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

132.641232ms ago: executing program 0 (id=1740):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0})

53.071383ms ago: executing program 1 (id=1741):
r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1})
io_uring_enter(r0, 0x3c57, 0x2936, 0x21, 0x0, 0x0)

52.682981ms ago: executing program 0 (id=1742):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x4, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000050)

198.124µs ago: executing program 1 (id=1743):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb63}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000e00)="0005d8a4ca71a74d19e83e665100", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 0 (id=1744):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0x3f}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10)

kernel console output (not intermixed with test programs):

: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  111.060817][    T9] pvrusb2: Important functionality might not be entirely working.
[  111.064093][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  111.071520][    T9] pvrusb2: **********
[  111.108850][ T7095] input: syz0 as /devices/virtual/input/input4
[  111.255243][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  111.265425][ T2397] pvrusb2: Invalid write control endpoint
[  111.318592][ T2397] pvrusb2: Invalid write control endpoint
[  111.323469][ T2397] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  111.327705][ T2397] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  111.330795][ T2397] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  111.334276][ T2397] pvrusb2: Device being rendered inoperable
[  111.340126][ T2397] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  111.342580][ T2397] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  111.351054][ T2397] pvrusb2: Attached sub-driver cx25840
[  111.353071][ T2397] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  111.357696][ T2397] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  111.415149][   T10] usb 1-1: Using ep0 maxpacket: 16
[  111.419926][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.423179][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  111.427192][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  111.430812][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  111.434477][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  111.441082][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  111.443962][   T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  111.446611][   T10] usb 1-1: Manufacturer: syz
[  111.456060][   T10] usb 1-1: config 0 descriptor??
[  111.504743][ T5917] usb 2-1: USB disconnect, device number 7
[  111.566704][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  111.715196][   T10] rc_core: IR keymap rc-hauppauge not found
[  111.717734][   T10] Registered IR keymap rc-empty
[  111.720197][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  111.735440][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  111.740978][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  111.747378][    T9] usb 3-1: config index 0 descriptor too short (expected 64776, got 27)
[  111.750557][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.754052][    T9] usb 3-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  111.761514][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[  111.764769][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  111.773946][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  111.779652][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5
[  111.786882][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.790241][    T9] usb 3-1: Product: syz
[  111.794378][    T9] usb 3-1: Manufacturer: syz
[  111.797500][    T9] usb 3-1: SerialNumber: syz
[  111.799648][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  111.825370][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  111.855405][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  111.885244][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  111.915408][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  111.945304][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  111.975573][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  112.005295][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  112.023750][    T9] usb 3-1: USB disconnect, device number 5
[  112.026221][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  112.055572][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  112.087957][   T10] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  112.090952][   T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  112.129264][   T47] usb 1-1: USB disconnect, device number 4
[  113.139507][ T7145] Invalid ELF header len 8
[  113.165591][ T5917] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  113.247302][ T7155] netlink: set zone limit has 4 unknown bytes
[  113.291601][ T7159] veth0: entered promiscuous mode
[  113.294729][ T7158] veth0: left promiscuous mode
[  113.329537][ T5917] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  113.333241][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.351985][ T5917] usb 2-1: config 0 descriptor??
[  113.365195][ T5917] gspca_main: cpia1-2.14.0 probing 0813:0001
[  113.783407][ T5917] cpia1 2-1:0.0: unexpected state after lo power cmd: 00
[  113.984432][ T5917] gspca_cpia1: usb_control_msg 01, error -32
[  113.993241][ T5917] gspca_cpia1: usb_control_msg 01, error -32
[  113.998512][ T5917] gspca_cpia1: usb_control_msg 01, error -71
[  114.001332][ T5917] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  114.008727][ T5917] usb 2-1: USB disconnect, device number 8
[  114.579347][ T7199] loop1: detected capacity change from 0 to 136
[  114.609382][ T7201] loop2: detected capacity change from 0 to 2048
[  114.618567][ T7201] EXT4-fs: Ignoring removed bh option
[  114.646495][ T7201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.658684][ T7206] netlink: 108 bytes leftover after parsing attributes in process `syz.1.492'.
[  114.662630][ T7206] netlink: 108 bytes leftover after parsing attributes in process `syz.1.492'.
[  114.667667][ T7206] netlink: 48 bytes leftover after parsing attributes in process `syz.1.492'.
[  114.678473][ T7206] netlink: 108 bytes leftover after parsing attributes in process `syz.1.492'.
[  114.682615][ T7206] netlink: 108 bytes leftover after parsing attributes in process `syz.1.492'.
[  114.688903][ T7206] netlink: 48 bytes leftover after parsing attributes in process `syz.1.492'.
[  116.141220][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.854802][ T7255] syz_tun: entered allmulticast mode
[  116.863093][ T7257] loop0: detected capacity change from 0 to 764
[  116.885527][ T7255] dvmrp1: entered allmulticast mode
[  116.911175][ T7254] syz_tun: left allmulticast mode
[  117.319833][ T7265] loop0: detected capacity change from 0 to 32768
[  117.356313][   T33] audit: type=1800 audit(1755047885.856:8): pid=7265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.516" name="file1" dev="loop0" ino=7 res=0 errno=0
[  118.535091][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  118.575169][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  118.710110][    T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  118.713748][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.717370][    T9] usb 1-1: Product: syz
[  118.719405][    T9] usb 1-1: Manufacturer: syz
[  118.721120][    T9] usb 1-1: SerialNumber: syz
[  118.730690][    T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  118.745505][   T10] usb 2-1: Using ep0 maxpacket: 16
[  118.751778][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.758838][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  118.762794][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  118.771436][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  118.777022][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.780481][   T10] usb 2-1: Product: syz
[  118.782447][   T10] usb 2-1: Manufacturer: syz
[  118.784525][   T10] usb 2-1: SerialNumber: syz
[  118.800768][   T10] usb 2-1: config 0 descriptor??
[  118.806392][    T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  118.812330][   T10] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  118.836330][   T10] gspca_stv06xx: st6422 sensor detected
[  119.085170][   T47] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[  119.115843][   T10] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71
[  119.124472][   T10] usb 2-1: USB disconnect, device number 9
[  119.226057][ T5917] usb 1-1: USB disconnect, device number 5
[  119.237428][   T47] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  119.241034][   T47] usb 3-1: config 179 has no interface number 0
[  119.243752][   T47] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  119.252480][   T47] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  119.256796][   T47] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  119.261638][   T47] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[  119.268708][   T47] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  119.274472][   T47] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  119.278452][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.285811][ T7311] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  119.292454][   T47] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  119.299483][   T47] xpad 3-1:179.65: probe with driver xpad failed with error -90
[  119.502361][   T10] usb 3-1: USB disconnect, device number 6
[  119.604181][ T7315] loop1: detected capacity change from 0 to 16
[  119.613878][ T7315] erofs (device loop1): mounted with root inode @ nid 36.
[  119.624106][ T7315] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[  119.633372][ T7315] erofs (device loop1): failed to decompress -11 in[52, 4044] out[1851]
[  119.637945][ T7315] erofs (device loop1): read error -117 @ 43 of nid 36
[  119.712823][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.537'.
[  119.882518][ T7331] loop1: detected capacity change from 0 to 512
[  119.913210][    T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  119.920361][    T9] ath9k_htc: Failed to initialize the device
[  119.923838][ T5917] usb 1-1: ath9k_htc: USB layer deinitialized
[  119.940786][ T7331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.948933][ T7331] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.983225][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.033050][ T7340] overlayfs: failed lookup in lower (newroot/63, name='file1', err=-40): overlapping layers
[  120.212024][   T33] audit: type=1326 audit(1755047888.716:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.0.553" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9618b8ebe9 code=0x0
[  120.684564][ T7367] block device autoloading is deprecated and will be removed.
[  120.820884][ T7365] loop0: detected capacity change from 0 to 32768
[  120.824893][ T7365] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.558 (7365)
[  120.842216][ T7365] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.846613][ T7365] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  120.850193][ T7365] BTRFS info (device loop0): using free-space-tree
[  121.122947][ T6740] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.278859][ T7392] loop2: detected capacity change from 0 to 8
[  121.282371][ T7392] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  121.483239][ T7402] loop2: detected capacity change from 0 to 128
[  121.488375][ T7402] hpfs: Unexpected value for 'help'
[  121.737323][ T7404] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  122.008507][ T7404] loop0: detected capacity change from 0 to 32768
[  122.055689][ T7404] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  122.077530][ T7404] XFS (loop0): Ending clean mount
[  122.454588][ T7418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.531838][ T7418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.593553][ T7418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.651233][ T7418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.733561][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.746537][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.756782][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.768639][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.863762][ T6740] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  122.908891][ T7424] loop2: detected capacity change from 0 to 256
[  122.918423][ T7424] exfat: Deprecated parameter 'utf8'
[  122.948663][ T7424] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  124.196522][ T7444] sock: sock_timestamping_bind_phc: sock not bind to device
[  124.359913][   T12] tipc: Subscription rejected, illegal request
[  124.630525][ T7461] loop0: detected capacity change from 0 to 4096
[  124.662624][ T7451] loop2: detected capacity change from 0 to 32768
[  124.668417][ T7461] ntfs3(loop0): ino=b, mi_enum_attr
[  124.670764][ T7461] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  124.673897][ T7461] ntfs3(loop0): Failed to load $Extend (-22).
[  124.678460][ T7451] bcachefs (/dev/loop2): error validating superblock: Filesystem has incompatible version 1.7: mi_btree_bitmap, current version 1.28: inode_has_case_insensitive
[  124.679073][ T7461] ntfs3(loop0): Failed to initialize $Extend.
[  124.704491][ T7451] bcachefs: bch2_fs_get_tree() error: invalid_sb_features
[  124.894730][ T7469] netlink: 'syz.2.594': attribute type 10 has an invalid length.
[  124.899814][ T7469] netlink: 40 bytes leftover after parsing attributes in process `syz.2.594'.
[  124.911183][ T7469] batman_adv: batadv0: Adding interface: virt_wifi0
[  124.914593][ T7469] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.928383][ T7469] batman_adv: batadv0: Interface activated: virt_wifi0
[  125.037950][ T7473] loop2: detected capacity change from 0 to 4096
[  125.049275][ T7473] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  125.062733][ T7473] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  125.072245][ T7473] ntfs3(loop2): Failed to load $LogFile (-22).
[  125.230320][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'.
[  125.320858][ T7487] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  125.323936][ T7487] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  125.331216][ T7487] hsr_slave_0: left promiscuous mode
[  125.338009][ T7487] hsr_slave_1: left promiscuous mode
[  125.511633][ T7500] IPv6: Can't replace route, no match found
[  125.555573][ T7502] loop1: detected capacity change from 0 to 256
[  125.560740][ T7502] exfat: Deprecated parameter 'namecase'
[  125.562858][ T7502] exfat: Deprecated parameter 'utf8'
[  125.576268][ T7502] exFAT-fs (loop1): bogus fat length
[  125.578094][ T7502] exFAT-fs (loop1): failed to read boot sector
[  125.580272][ T7502] exFAT-fs (loop1): failed to recognize exfat type
[  125.655194][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  125.675125][   T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  125.807002][   T10] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[  125.810558][   T10] usb 3-1: config 0 has no interface number 0
[  125.813076][   T10] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  125.819997][   T10] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  125.827169][   T47] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  125.827371][   T10] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  125.835111][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.837355][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.841934][   T10] usb 3-1: Product: syz
[  125.842574][   T47] usb 1-1: config 0 descriptor??
[  125.844001][   T10] usb 3-1: Manufacturer: syz
[  125.847611][ T7508] loop1: detected capacity change from 0 to 32768
[  125.854419][   T47] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  125.857444][   T10] usb 3-1: SerialNumber: syz
[  125.871014][   T10] usb 3-1: config 0 descriptor??
[  125.873930][ T7492] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  125.884605][   T10] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  125.898695][   T10] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  125.899685][ T7508] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  125.942583][ T7508] XFS (loop1): Ending clean mount
[  125.966856][ T7508] XFS (loop1): Quotacheck needed: Please wait.
[  125.997657][ T7508] XFS (loop1): Quotacheck: Done.
[  126.069807][   T47] usb 1-1: USB disconnect, device number 6
[  126.090095][    C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  126.141286][ T5862] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  126.291279][   T47] usb 3-1: USB disconnect, device number 7
[  126.298688][   T47] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  126.302621][   T47] cyberjack 3-1:0.69: device disconnected
[  126.328051][ T7520] netlink: 'syz.1.615': attribute type 1 has an invalid length.
[  126.823279][ T7536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.620'.
[  127.274982][ T7540] loop2: detected capacity change from 0 to 32768
[  127.288284][ T7540] bcachefs (/dev/loop2): error reading default superblock: Bad minimum version 1.536: (unknown version), greater than version field 1.7: mi_btree_bitmap
[  127.306365][ T7540] bcachefs (/dev/loop2): error validating superblock: Invalid option invalid compression opt 7
[  127.310750][ T7540] bcachefs: bch2_fs_get_tree() error: invalid_sb_opt_compression
[  127.544762][ T7552] loop2: detected capacity change from 0 to 128
[  127.625181][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  127.795166][    T9] usb 1-1: Using ep0 maxpacket: 8
[  127.821944][    T9] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  127.832698][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.849184][    T9] usb 1-1: config 0 has no interface number 0
[  127.870219][    T9] usb 1-1: config 0 interface 122 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  127.926512][    T9] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  127.951343][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.973816][    T9] usb 1-1: Product: syz
[  128.007045][    T9] usb 1-1: Manufacturer: syz
[  128.013500][    T9] usb 1-1: SerialNumber: syz
[  128.026749][    T9] usb 1-1: config 0 descriptor??
[  128.243158][    T9] usb 1-1: NFC: intf ffff88802ee07000 id ffffffff8eb509a0
[  128.249573][    T9] usb 1-1: USB disconnect, device number 7
[  128.745848][ T7567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.635'.
[  128.753841][ T7567] bond0: entered promiscuous mode
[  128.757395][ T7567] bond_slave_0: entered promiscuous mode
[  128.760981][ T7567] bond_slave_1: entered promiscuous mode
[  128.764719][ T7567] bond0: left promiscuous mode
[  128.767161][ T7567] bond_slave_0: left promiscuous mode
[  128.769135][ T7567] bond_slave_1: left promiscuous mode
[  128.856008][ T7569] loop1: detected capacity change from 0 to 8
[  129.009119][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'.
[  129.012353][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'.
[  129.121098][ T7581] libceph: resolve '400' (ret=-3): failed
[  129.439491][ T7604] netlink: 60 bytes leftover after parsing attributes in process `syz.1.652'.
[  129.861926][ T7619] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.659'.
[  129.876711][ T7619] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.659'.
[  129.977488][ T7617] loop1: detected capacity change from 0 to 32768
[  130.030252][ T7617] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  130.037367][ T7617] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  130.058517][ T7617] (syz.1.658,7617,1):ocfs2_read_blocks:239 ERROR: status = -12
[  130.061167][ T7617] (syz.1.658,7617,1):ocfs2_xattr_block_find:2831 ERROR: status = -12
[  130.097975][ T7627] loop0: detected capacity change from 0 to 4096
[  130.105106][ T7627] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  130.132538][ T5862] ocfs2: Unmounting device (7,1) on (node local)
[  130.566131][ T7636] loop2: detected capacity change from 0 to 40427
[  130.572236][ T7636] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  130.575635][ T7636] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  130.580653][ T7636] F2FS-fs (loop2): invalid crc value
[  130.625337][ T7636] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  130.644405][ T7636] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  130.647918][ T7636] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  130.679133][ T7646] loop0: detected capacity change from 0 to 1024
[  130.724033][ T7646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  130.729382][ T7646] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.746532][ T6740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  130.814612][ T7655] bridge1: entered promiscuous mode
[  130.816473][ T7655] bridge1: entered allmulticast mode
[  131.097567][   T33] audit: type=1800 audit(1755047899.416:10): pid=7657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.667" name="file1" dev="loop2" ino=10 res=0 errno=0
[  132.468823][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.472994][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.685488][ T1090] kworker/u10:4: attempt to access beyond end of device
[  132.685488][ T1090] loop2: rw=1048577, sector=77824, nr_sectors = 2112 limit=40427
[  132.717604][ T1090] kworker/u10:4: attempt to access beyond end of device
[  132.717604][ T1090] loop2: rw=1048577, sector=79936, nr_sectors = 1984 limit=40427
[  132.861091][ T1090] kworker/u10:4: attempt to access beyond end of device
[  132.861091][ T1090] loop2: rw=1048577, sector=49152, nr_sectors = 4096 limit=40427
[  133.086765][ T1090] kworker/u10:4: attempt to access beyond end of device
[  133.086765][ T1090] loop2: rw=1048577, sector=57344, nr_sectors = 7912 limit=40427
[  133.314655][ T1090] kworker/u10:4: attempt to access beyond end of device
[  133.314655][ T1090] loop2: rw=1048577, sector=65256, nr_sectors = 11264 limit=40427
[  133.409623][ T1090] kworker/u10:4: attempt to access beyond end of device
[  133.409623][ T1090] loop2: rw=1048577, sector=76520, nr_sectors = 1304 limit=40427
[  133.588714][ T7702] [U] 2
[  133.591765][ T7701] [U] 2
[  133.613339][ T1090] kworker/u10:4: attempt to access beyond end of device
[  133.613339][ T1090] loop2: rw=1048577, sector=81920, nr_sectors = 3952 limit=40427
[  133.656880][ T5855] syz-executor: attempt to access beyond end of device
[  133.656880][ T5855] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  133.664118][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  133.664138][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.664146][ T5855] Call Trace:
[  133.664152][ T5855]  <TASK>
[  133.664158][ T5855]  dump_stack_lvl+0x189/0x250
[  133.664182][ T5855]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.664197][ T5855]  ? __pfx_queue_work_on+0x10/0x10
[  133.664211][ T5855]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  133.664227][ T5855]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  133.664249][ T5855]  f2fs_handle_critical_error+0x37c/0x540
[  133.664272][ T5855]  f2fs_write_end_io+0x886/0xb60
[  133.664306][ T5855]  __submit_merged_bio+0x27a/0x6a0
[  133.664319][ T5855]  ? up_write+0x1c4/0x420
[  133.664338][ T5855]  __submit_merged_write_cond+0x44c/0x530
[  133.664359][ T5855]  f2fs_sync_node_pages+0x1479/0x15e0
[  133.664391][ T5855]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  133.664431][ T5855]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  133.664452][ T5855]  ? up_write+0x1c4/0x420
[  133.664467][ T5855]  f2fs_write_checkpoint+0xe6f/0x1df0
[  133.664502][ T5855]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  133.664554][ T5855]  ? kill_f2fs_super+0x298/0x6c0
[  133.664575][ T5855]  kill_f2fs_super+0x2c3/0x6c0
[  133.664596][ T5855]  ? __pfx_kill_f2fs_super+0x10/0x10
[  133.664610][ T5855]  ? radix_tree_delete_item+0x2b6/0x400
[  133.664628][ T5855]  ? shrinker_free+0x2ce/0x3e0
[  133.664644][ T5855]  deactivate_locked_super+0xbc/0x130
[  133.664659][ T5855]  cleanup_mnt+0x425/0x4c0
[  133.664673][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.664691][ T5855]  task_work_run+0x1d4/0x260
[  133.664710][ T5855]  ? __pfx_task_work_run+0x10/0x10
[  133.664723][ T5855]  ? __x64_sys_umount+0x122/0x160
[  133.664742][ T5855]  ? exit_to_user_mode_loop+0x40/0x110
[  133.664760][ T5855]  exit_to_user_mode_loop+0xec/0x110
[  133.664776][ T5855]  do_syscall_64+0x2bd/0x3b0
[  133.664788][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.664801][ T5855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.664813][ T5855]  ? exc_page_fault+0x9f/0xf0
[  133.664827][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.664838][ T5855] RIP: 0033:0x7f70dfb8ff17
[  133.664851][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  133.664860][ T5855] RSP: 002b:00007ffcd0632528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  133.664874][ T5855] RAX: 0000000000000000 RBX: 00007f70dfc11c05 RCX: 00007f70dfb8ff17
[  133.664881][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd06325e0
[  133.664888][ T5855] RBP: 00007ffcd06325e0 R08: 0000000000000000 R09: 0000000000000000
[  133.664895][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd0633670
[  133.664901][ T5855] R13: 00007f70dfc11c05 R14: 00000000000201f9 R15: 00007ffcd06336b0
[  133.664922][ T5855]  </TASK>
[  133.664955][ T5855] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  133.740385][ T7706] nfs: Deprecated parameter 'nointr'
[  133.955658][   T33] audit: type=1326 audit(1755047902.466:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  133.964426][   T33] audit: type=1326 audit(1755047902.466:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  134.025573][   T33] audit: type=1326 audit(1755047902.496:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.698" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  134.034544][   T33] audit: type=1326 audit(1755047902.496:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  134.067459][   T33] audit: type=1326 audit(1755047902.496:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.0.698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  134.599705][ T7745] netlink: 'syz.2.713': attribute type 4 has an invalid length.
[  134.656869][ T7743] loop1: detected capacity change from 0 to 4096
[  134.661352][ T7743] ntfs3(loop1): ino=3, Correct links count -> 2.
[  134.829329][ T7753] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  135.159733][ T7755] loop1: detected capacity change from 0 to 32768
[  135.164754][ T7755] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.717 (7755)
[  135.226524][ T7755] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  135.230843][ T7755] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  135.234453][ T7755] BTRFS info (device loop1): using free-space-tree
[  135.335493][   T47] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  135.586251][   T47] usb 3-1: Using ep0 maxpacket: 16
[  135.595576][   T47] usb 3-1: unable to get BOS descriptor or descriptor too short
[  135.601414][   T47] usb 3-1: config 218 has an invalid interface number: 135 but max is 0
[  135.605498][   T47] usb 3-1: config 218 has no interface number 0
[  135.608255][   T47] usb 3-1: config 218 interface 135 has no altsetting 0
[  135.616275][   T47] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=38.d9
[  135.623303][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.627608][   T47] usb 3-1: Product: syz
[  135.629516][   T47] usb 3-1: Manufacturer: syz
[  135.631582][   T47] usb 3-1: SerialNumber: syz
[  135.667529][ T5862] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  135.873407][   T33] audit: type=1326 audit(1755047904.376:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.1.726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7ffc0000
[  135.892160][   T47] usb 3-1: USB disconnect, device number 8
[  135.895907][   T33] audit: type=1326 audit(1755047904.376:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.1.726" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fbe73f8ebe9 code=0x7ffc0000
[  135.916243][ T7792] netlink: 96 bytes leftover after parsing attributes in process `syz.1.727'.
[  135.926314][   T33] audit: type=1326 audit(1755047904.376:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.1.726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7ffc0000
[  135.951051][ T7794] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  135.958053][   T33] audit: type=1326 audit(1755047904.376:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.1.726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7ffc0000
[  136.106165][ T7799] loop0: detected capacity change from 0 to 65
[  136.128389][ T7799] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  136.137488][ T7799] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  136.376335][ T7811] loop0: detected capacity change from 0 to 1024
[  136.394973][   T33] audit: type=1800 audit(1755047904.896:20): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.736" name="file1" dev="loop0" ino=20 res=0 errno=0
[  136.598515][ T7814] loop2: detected capacity change from 0 to 40427
[  136.604234][ T7814] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  136.606939][ T7814] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  136.610885][ T7814] F2FS-fs (loop2): invalid crc value
[  136.638333][ T7814] F2FS-fs (loop2): access invalid blkaddr:0
[  136.640614][ T7814] CPU: 1 UID: 0 PID: 7814 Comm: syz.2.737 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  136.640628][ T7814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  136.640634][ T7814] Call Trace:
[  136.640638][ T7814]  <TASK>
[  136.640642][ T7814]  dump_stack_lvl+0x189/0x250
[  136.640658][ T7814]  ? __pfx_dump_stack_lvl+0x10/0x10
[  136.640675][ T7814]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  136.640691][ T7814]  sanity_check_extent_cache+0x1a3/0x620
[  136.640706][ T7814]  f2fs_iget+0x3a7f/0x5550
[  136.640729][ T7814]  f2fs_fill_super+0x494a/0x6ff0
[  136.640759][ T7814]  get_tree_bdev_flags+0x40e/0x4d0
[  136.640771][ T7814]  ? __pfx_f2fs_fill_super+0x10/0x10
[  136.640781][ T7814]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  136.640795][ T7814]  vfs_get_tree+0x92/0x2b0
[  136.640806][ T7814]  do_new_mount+0x2a2/0x9e0
[  136.640818][ T7814]  ? ns_capable+0x8a/0xf0
[  136.640825][ T7814]  ? __pfx_do_new_mount+0x10/0x10
[  136.640835][ T7814]  ? path_mount+0x61c/0xfe0
[  136.640844][ T7814]  ? user_path_at+0x44/0x60
[  136.640856][ T7814]  __se_sys_mount+0x317/0x410
[  136.640869][ T7814]  ? __pfx___se_sys_mount+0x10/0x10
[  136.640882][ T7814]  ? do_syscall_64+0xbe/0x3b0
[  136.640897][ T7814]  ? __x64_sys_mount+0x20/0xc0
[  136.640909][ T7814]  do_syscall_64+0xfa/0x3b0
[  136.640947][ T7814]  ? lockdep_hardirqs_on+0x9c/0x150
[  136.640955][ T7814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.640963][ T7814]  ? exc_page_fault+0x9f/0xf0
[  136.640972][ T7814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.640979][ T7814] RIP: 0033:0x7f70dfb9038a
[  136.640989][ T7814] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.640995][ T7814] RSP: 002b:00007f70dddf5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  136.641005][ T7814] RAX: ffffffffffffffda RBX: 00007f70dddf5ef0 RCX: 00007f70dfb9038a
[  136.641010][ T7814] RDX: 0000200000000280 RSI: 0000200000000040 RDI: 00007f70dddf5eb0
[  136.641014][ T7814] RBP: 0000200000000280 R08: 00007f70dddf5ef0 R09: 0000000000000000
[  136.641019][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040
[  136.641023][ T7814] R13: 00007f70dddf5eb0 R14: 000000000000559f R15: 0000200000000340
[  136.641034][ T7814]  </TASK>
[  136.726456][ T7814] F2FS-fs (loop2): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 1280] is incorrect, run fsck to fix
[  136.732150][ T7814] F2FS-fs (loop2): Failed to read root inode
[  137.131237][ T7837] netlink: 3 bytes leftover after parsing attributes in process `syz.2.746'.
[  137.145727][ T7837] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.240582][ T7841] loop2: detected capacity change from 0 to 8
[  137.271100][ T7841] SQUASHFS error: zlib decompression failed, data probably corrupt
[  137.297500][ T7841] SQUASHFS error: Failed to read block 0x9b: -5
[  137.300199][ T7841] SQUASHFS error: Unable to read metadata cache entry [99]
[  137.303294][ T7841] SQUASHFS error: Unable to read inode 0x127
[  137.322193][ T7843] loop0: detected capacity change from 0 to 512
[  137.330672][ T7843] EXT4-fs: Ignoring removed nobh option
[  137.366646][ T7843] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.750: iget: bad i_size value: 38620345925642
[  137.389641][ T7843] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.750: couldn't read orphan inode 15 (err -117)
[  137.411334][ T7843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.432999][ T7843] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.750: bg 0: block 5: invalid block bitmap
[  137.441899][ T7843] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  137.462045][ T7843] EXT4-fs (loop0): This should not happen!! Data will be lost
[  137.462045][ T7843] 
[  137.470525][ T7843] EXT4-fs (loop0): Total free blocks count 0
[  137.473969][ T7843] EXT4-fs (loop0): Free/Dirty block details
[  137.478716][ T7843] EXT4-fs (loop0): free_blocks=0
[  137.480524][ T7843] EXT4-fs (loop0): dirty_blocks=2
[  137.482555][ T7843] EXT4-fs (loop0): Block reservation details
[  137.486791][ T7843] EXT4-fs (loop0): i_reserved_data_blocks=2
[  137.517468][ T6740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.836513][ T7874] loop1: detected capacity change from 0 to 256
[  137.851580][ T7874] FAT-fs (loop1): Directory bread(block 64) failed
[  137.854393][ T7874] FAT-fs (loop1): Directory bread(block 65) failed
[  137.858926][ T7874] FAT-fs (loop1): Directory bread(block 66) failed
[  137.861007][ T7874] FAT-fs (loop1): Directory bread(block 67) failed
[  137.863130][ T7874] FAT-fs (loop1): Directory bread(block 68) failed
[  137.866233][ T7874] FAT-fs (loop1): Directory bread(block 69) failed
[  137.868363][ T7874] FAT-fs (loop1): Directory bread(block 70) failed
[  137.870483][ T7874] FAT-fs (loop1): Directory bread(block 71) failed
[  137.872633][ T7874] FAT-fs (loop1): Directory bread(block 72) failed
[  137.874770][ T7874] FAT-fs (loop1): Directory bread(block 73) failed
[  138.057237][ T7882] loop1: detected capacity change from 0 to 2048
[  138.079410][ T7882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.083812][ T7882] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.117880][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.217941][   T47] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  138.365352][   T47] usb 3-1: Using ep0 maxpacket: 16
[  138.369213][   T47] usb 3-1: config 5 has an invalid interface number: 206 but max is 0
[  138.372060][   T47] usb 3-1: config 5 has no interface number 0
[  138.374666][   T47] usb 3-1: config 5 interface 206 has no altsetting 0
[  138.381342][   T47] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44
[  138.386820][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.390433][   T47] usb 3-1: Product: syz
[  138.392284][   T47] usb 3-1: Manufacturer: syz
[  138.393248][ T7868] loop0: detected capacity change from 0 to 131072
[  138.394129][   T47] usb 3-1: SerialNumber: syz
[  138.398430][ T7868] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  138.402694][ T7868] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  138.408807][ T7868] F2FS-fs (loop0): invalid crc value
[  138.467408][ T7868] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  138.474561][ T7868] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  138.477744][ T7868] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  138.502737][ T7890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  138.653546][   T47] usb_ehset_test 3-1:5.206: probe with driver usb_ehset_test failed with error -32
[  138.664753][   T47] usb 3-1: USB disconnect, device number 9
[  139.885677][ T7898] loop1: detected capacity change from 0 to 32768
[  139.914270][ T7898] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  139.943382][ T7898] XFS (loop1): Ending clean mount
[  139.948567][ T7898] XFS (loop1): Quotacheck needed: Please wait.
[  139.981481][ T7898] XFS (loop1): Quotacheck: Done.
[  140.077806][ T5862] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  140.585569][ T5917] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  140.746078][ T5917] usb 1-1: Using ep0 maxpacket: 8
[  140.760189][ T5917] usb 1-1: config 162 has an invalid interface number: 97 but max is 0
[  140.763963][ T5917] usb 1-1: config 162 has no interface number 0
[  140.770080][ T5917] usb 1-1: config 162 interface 97 has no altsetting 0
[  140.784306][ T5917] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  140.793502][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.803369][ T5917] usb 1-1: Product: syz
[  140.810787][ T5917] usb 1-1: Manufacturer: syz
[  140.813193][ T5917] usb 1-1: SerialNumber: syz
[  141.130173][ T5917] metro_usb 1-1:162.97: Metrologic USB to Serial converter detected
[  141.161728][ T5917] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  141.190133][ T5917] usb 1-1: USB disconnect, device number 8
[  141.220482][ T5917] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  141.286117][ T5917] metro_usb 1-1:162.97: device disconnected
[  141.928926][ T7950] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  142.698858][ T7972] bond1: entered promiscuous mode
[  142.701335][ T7972] bond1: entered allmulticast mode
[  142.704299][ T7972] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.984344][ T7985] loop1: detected capacity change from 0 to 8
[  143.040542][ T7985] SQUASHFS error: xz decompression failed, data probably corrupt
[  143.044331][ T7985] SQUASHFS error: Failed to read block 0x108: -5
[  143.070841][ T7985] SQUASHFS error: Unable to read metadata cache entry [106]
[  143.095206][ T7985] SQUASHFS error: Unable to read inode 0x11f
[  143.189528][ T7985] loop1: detected capacity change from 0 to 1024
[  143.194314][ T7985] hfsplus: Bad value for 'gid'
[  143.413789][ T7977] loop0: detected capacity change from 0 to 32768
[  144.126654][ T7994] loop2: detected capacity change from 0 to 4096
[  144.326413][ T7994] ntfs3(loop2): try to read out of volume at offset 0x3fffffc7000
[  144.360923][ T7994] ntfs3(loop2): ino=21, The size of extended attributes must not exceed 64KiB
[  144.626985][ T8000] loop2: detected capacity change from 0 to 4096
[  144.647616][ T8000] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  144.690475][ T8000] ntfs3(loop2): ino=1a, mi_enum_attr
[  144.692821][ T8000] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  145.129655][ T8037] netlink: 'syz.2.825': attribute type 5 has an invalid length.
[  145.385133][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  146.080798][ T8063] loop0: detected capacity change from 0 to 128
[  146.086960][    T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  146.091282][    T9] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  146.094682][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  146.103185][ T8063] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  146.107841][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.113366][ T8063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.369943][ T5860] Bluetooth: hci2: Malformed LE Event: 0x0d
[  146.371256][    T9] usb 2-1: USB disconnect, device number 10
[  147.186605][ T8074] loop2: detected capacity change from 0 to 736
[  147.643994][ T8094] loop2: detected capacity change from 0 to 128
[  147.659489][ T8094] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  147.666601][ T8094] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  147.738707][ T5855] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  147.901685][   T33] audit: type=1326 audit(1755047916.406:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.0.856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  147.921373][   T33] audit: type=1326 audit(1755047916.406:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.0.856" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  147.956812][   T33] audit: type=1326 audit(1755047916.406:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.0.856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  147.988636][   T33] audit: type=1326 audit(1755047916.406:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.0.856" exe="/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  148.015240][   T33] audit: type=1326 audit(1755047916.406:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.0.856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  148.187515][ T8106] loop2: detected capacity change from 0 to 40427
[  148.265313][ T8106] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  148.270558][ T8106] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  148.322983][ T5855] syz-executor: attempt to access beyond end of device
[  148.322983][ T5855] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  148.334223][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  148.334237][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.334242][ T5855] Call Trace:
[  148.334245][ T5855]  <TASK>
[  148.334248][ T5855]  dump_stack_lvl+0x189/0x250
[  148.334263][ T5855]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.334272][ T5855]  ? __pfx_queue_work_on+0x10/0x10
[  148.334280][ T5855]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.334289][ T5855]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  148.334301][ T5855]  f2fs_handle_critical_error+0x37c/0x540
[  148.334316][ T5855]  f2fs_write_end_io+0x886/0xb60
[  148.334333][ T5855]  __submit_merged_bio+0x27a/0x6a0
[  148.334344][ T5855]  __submit_merged_write_cond+0x255/0x530
[  148.334355][ T5855]  f2fs_write_data_pages+0x261d/0x3000
[  148.334377][ T5855]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  148.334404][ T5855]  ? check_path+0x21/0x40
[  148.334412][ T5855]  ? check_noncircular+0xe0/0x160
[  148.334438][ T5855]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  148.334448][ T5855]  do_writepages+0x32e/0x550
[  148.334463][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[  148.334473][ T5855]  filemap_fdatawrite+0x199/0x240
[  148.334483][ T5855]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  148.334511][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[  148.334521][ T5855]  f2fs_sync_dirty_inodes+0x31f/0x830
[  148.334537][ T5855]  f2fs_write_checkpoint+0x95a/0x1df0
[  148.334557][ T5855]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  148.334584][ T5855]  ? kill_f2fs_super+0x298/0x6c0
[  148.334596][ T5855]  kill_f2fs_super+0x2c3/0x6c0
[  148.334608][ T5855]  ? __pfx_kill_f2fs_super+0x10/0x10
[  148.334617][ T5855]  ? radix_tree_delete_item+0x2b6/0x400
[  148.334628][ T5855]  ? shrinker_free+0x2ce/0x3e0
[  148.334637][ T5855]  deactivate_locked_super+0xbc/0x130
[  148.334648][ T5855]  cleanup_mnt+0x425/0x4c0
[  148.334656][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.334666][ T5855]  task_work_run+0x1d4/0x260
[  148.334677][ T5855]  ? __pfx_task_work_run+0x10/0x10
[  148.334685][ T5855]  ? __x64_sys_umount+0x122/0x160
[  148.334696][ T5855]  ? exit_to_user_mode_loop+0x40/0x110
[  148.334709][ T5855]  exit_to_user_mode_loop+0xec/0x110
[  148.334719][ T5855]  do_syscall_64+0x2bd/0x3b0
[  148.334727][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.334735][ T5855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.334742][ T5855]  ? exc_page_fault+0x9f/0xf0
[  148.334751][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.334758][ T5855] RIP: 0033:0x7f70dfb8ff17
[  148.334767][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  148.334773][ T5855] RSP: 002b:00007ffcd0632528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  148.334782][ T5855] RAX: 0000000000000000 RBX: 00007f70dfc11c05 RCX: 00007f70dfb8ff17
[  148.334787][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd06325e0
[  148.334791][ T5855] RBP: 00007ffcd06325e0 R08: 0000000000000000 R09: 0000000000000000
[  148.334795][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd0633670
[  148.334799][ T5855] R13: 00007f70dfc11c05 R14: 00000000000242d7 R15: 00007ffcd06336b0
[  148.334811][ T5855]  </TASK>
[  148.334814][ T5855] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  148.451026][ T8137] netlink: 'syz.1.869': attribute type 1 has an invalid length.
[  148.473052][ T8137] netlink: 144 bytes leftover after parsing attributes in process `syz.1.869'.
[  148.477387][ T8137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.869'.
[  148.684287][ T8146] loop1: detected capacity change from 0 to 136
[  148.740760][ T8148] netlink: 'syz.1.874': attribute type 29 has an invalid length.
[  149.491414][ T8168] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.882'.
[  149.689959][ T8180] sctp: [Deprecated]: syz.0.888 (pid 8180) Use of int in max_burst socket option.
[  149.689959][ T8180] Use struct sctp_assoc_value instead
[  149.737049][ T8183] loop0: detected capacity change from 0 to 2048
[  149.758270][ T8183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.800195][   T33] audit: type=1800 audit(149.674:26): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.889" name="file0" dev="loop0" ino=13 res=0 errno=0
[  149.813505][ T8183] fs-verity (loop0, inode 13): Error -22 reading file data
[  149.814412][ T8187] loop2: detected capacity change from 0 to 1024
[  149.819119][ T8183] fs-verity (loop0, inode 13): Error -22 building Merkle tree
[  149.826445][ T8187] EXT4-fs: Ignoring removed bh option
[  149.841833][ T8187] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  149.860809][ T6740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.908939][ T8187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.984720][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.892'.
[  149.988770][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.892'.
[  150.070352][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.538033][ T8204] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  150.547524][ T8205] loop2: detected capacity change from 0 to 4096
[  151.098062][ T8219] loop2: detected capacity change from 0 to 32768
[  151.106417][ T8219] bcachefs (/dev/loop2): error validating superblock: Bad dev_idx (got 5, nr_devices 1)
[  151.110419][ T8219] bcachefs: bch2_fs_get_tree() error: invalid_sb_dev_idx
[  151.176972][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'.
[  151.903785][ T8251] loop2: detected capacity change from 0 to 64
[  152.571669][ T8273] loop2: detected capacity change from 0 to 1024
[  152.672438][ T1154] hfsplus: b-tree write err: -5, ino 4
[  152.830298][ T8279] netlink: 'syz.1.930': attribute type 2 has an invalid length.
[  152.956965][ T8282] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004
[  153.068670][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'.
[  153.229333][ T8306] netlink: 71 bytes leftover after parsing attributes in process `syz.2.943'.
[  153.733561][   T33] audit: type=1326 audit(153.604:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.1.950" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x0
[  155.009880][ T8363] loop2: detected capacity change from 0 to 256
[  155.635558][   T47] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  155.801022][   T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.805870][   T47] usb 3-1: config 0 has no interfaces?
[  155.812257][   T47] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  155.817227][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.837275][   T47] usb 3-1: config 0 descriptor??
[  156.049406][   T10] usb 3-1: USB disconnect, device number 10
[  156.326519][ T8397] netlink: 'syz.0.981': attribute type 1 has an invalid length.
[  156.330278][ T8397] netlink: 'syz.0.981': attribute type 1 has an invalid length.
[  156.855124][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  157.105264][   T10] usb 1-1: Using ep0 maxpacket: 8
[  157.109465][   T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  157.113010][   T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  157.120069][   T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  157.123955][   T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  157.127783][   T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  157.132663][   T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  157.136813][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.572011][   T10] usb 1-1: usb_control_msg returned -32
[  157.573915][   T10] usbtmc 1-1:16.0: can't read capabilities
[  157.612725][ T8420] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma?
[  157.941651][ T8435] tmpfs: Bad value for 'mpol'
[  157.991308][ T8441] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  158.035714][ T8440] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  158.208615][ T8452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.213187][ T8452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.231537][ T8450] usbtmc 1-1:16.0: usb_control_msg returned -32
[  158.992449][   T96] usb 1-1: USB disconnect, device number 9
[  159.285169][ T5917] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  159.437101][ T5917] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  159.441132][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.446868][ T5917] usb 3-1: config 0 descriptor??
[  159.662409][ T5917] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  159.867416][ T5917] [drm:udl_init] *ERROR* Selecting channel failed
[  159.890466][ T5917] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 3
[  159.893267][ T5917] [drm] Initialized udl on minor 3
[  159.900759][ T5917] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  159.912266][ T5917] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  159.920255][   T96] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  159.924260][   T96] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  159.930705][ T5917] usb 3-1: USB disconnect, device number 11
[  160.228176][ T8479] loop0: detected capacity change from 0 to 164
[  160.237555][ T8479] iso9660: Corrupted directory entry in block 2 of inode 1920
[  160.434938][ T8491] mkiss: ax0: crc mode is auto.
[  160.982374][ T8515] loop2: detected capacity change from 0 to 1024
[  161.004739][ T8515] EXT4-fs: Ignoring removed bh option
[  161.021017][ T8515] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  161.043236][ T8515] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  161.057693][ T8515] EXT4-fs (loop2): orphan cleanup on readonly fs
[  161.062169][ T8515] EXT4-fs error (device loop2): ext4_quota_enable:7124: comm syz.2.1032: inode #2304: comm syz.2.1032: iget: illegal inode #
[  161.069060][ T8515] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1032: Bad quota inode: 2304, type: 2
[  161.074175][ T8515] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  161.104199][ T8515] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  161.111398][ T8515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  161.198714][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.438172][ T8528] infiniband syz0: set active
[  161.440747][ T8528] infiniband syz0: added bond_slave_1
[  161.511526][ T8528] RDS/IB: syz0: added
[  161.516803][ T8528] smc: adding ib device syz0 with port count 1
[  161.519925][ T8528] smc:    ib device syz0 port 1 has pnetid 
[  161.624155][ T8548] loop2: detected capacity change from 0 to 4096
[  161.628912][ T8548] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  161.652376][ T8548] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  162.235428][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  162.415148][   T10] usb 3-1: Using ep0 maxpacket: 8
[  162.419760][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  162.424268][   T10] usb 3-1: config 7 has an invalid interface number: 148 but max is 0
[  162.432569][   T10] usb 3-1: config 7 has no interface number 0
[  162.437759][   T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=1c.76
[  162.441579][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.445994][   T10] usb 3-1: Product: syz
[  162.447869][   T10] usb 3-1: Manufacturer: syz
[  162.449958][   T10] usb 3-1: SerialNumber: syz
[  162.535210][ T5890] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  162.612348][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'.
[  162.615685][ T8590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1068'.
[  162.622359][ T8590] geneve2: entered promiscuous mode
[  162.624105][ T8590] geneve2: entered allmulticast mode
[  162.671973][   T10] ldusb 3-1:7.148: Interrupt in endpoint not found
[  162.685708][   T10] usb 3-1: USB disconnect, device number 12
[  162.699602][ T5890] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  162.703212][ T5890] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  162.708598][ T5890] usb 1-1: config 220 has an invalid descriptor of length 119, skipping remainder of the config
[  162.717133][ T5890] usb 1-1: config 220 has no interface number 2
[  162.720381][ T5890] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  162.727166][ T5890] usb 1-1: config 220 interface 0 has no altsetting 0
[  162.733172][ T5890] usb 1-1: config 220 interface 76 has no altsetting 0
[  162.739956][ T5890] usb 1-1: config 220 interface 1 has no altsetting 0
[  162.747676][ T5890] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  162.751609][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.756395][ T5890] usb 1-1: Product: syz
[  162.758277][ T5890] usb 1-1: Manufacturer: syz
[  162.760272][ T5890] usb 1-1: SerialNumber: syz
[  162.958566][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1075'.
[  162.977250][ T5890] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  162.981326][ T5890] usb 1-1: No valid video chain found.
[  162.991949][ T5890] usb 1-1: selecting invalid altsetting 0
[  163.002709][ T5890] usb 1-1: selecting invalid altsetting 0
[  163.005977][ T5890] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  163.011724][ T5890] usb 1-1: USB disconnect, device number 10
[  163.545334][ T5890] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  163.652089][ T8644] delete_channel: no stack
[  163.727740][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.732481][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  163.737947][ T5890] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  163.741795][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  163.747033][ T5890] usb 3-1: SerialNumber: syz
[  163.925470][   T96] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  163.959698][ T5890] usb 3-1: 0:2 : does not exist
[  163.968759][ T5890] usb 3-1: USB disconnect, device number 13
[  163.987910][ T6748] udevd[6748]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  164.076490][   T96] usb 1-1: Using ep0 maxpacket: 32
[  164.080931][   T96] usb 1-1: config 4 has an invalid interface number: 128 but max is 0
[  164.084190][   T96] usb 1-1: config 4 has no interface number 0
[  164.087787][   T96] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.092456][   T96] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.097574][   T96] usb 1-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00
[  164.101661][   T96] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.112740][   T96] hub 1-1:4.128: USB hub found
[  164.316072][   T96] hub 1-1:4.128: 2 ports detected
[  164.318412][   T96] hub 1-1:4.128: Using single TT (err -22)
[  164.525443][   T96] hub 1-1:4.128: hub_hub_status failed (err = -71)
[  164.529154][   T96] hub 1-1:4.128: config failed, can't get hub status (err -71)
[  164.556483][ T8652] loop2: detected capacity change from 0 to 1024
[  164.566044][ T8652] EXT4-fs: Ignoring removed oldalloc option
[  164.568559][ T8652] EXT4-fs: Ignoring removed bh option
[  164.579097][   T96] usb 1-1: USB disconnect, device number 11
[  164.602863][ T8652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.635512][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.153015][ T8688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.157259][   T96] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  166.326664][   T96] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  166.355081][   T96] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  166.359512][   T96] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  166.363635][   T96] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  166.377098][   T96] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  166.383130][   T96] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.388869][ T8698] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1117'.
[  166.393251][ T8698] tipc: Invalid UDP bearer configuration
[  166.393300][ T8698] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  166.393890][   T96] usb 3-1: config 0 descriptor??
[  166.411445][ T8680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  166.712116][ T8719] syzkaller1: tun_chr_ioctl cmd 1074025672
[  166.714922][ T8719] syzkaller1: ignored: set checksum enabled
[  166.819076][ T8725] loop0: detected capacity change from 0 to 256
[  166.829471][   T96] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd
[  166.865676][   T96] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  167.088123][   T96] usb 3-1: USB disconnect, device number 14
[  167.136984][   T33] audit: type=1326 audit(167.004:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.0.1139" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9618b8ebe9 code=0x0
[  167.440958][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'.
[  167.479724][ T8761] 2g,{: renamed from lo (while UP)
[  167.595233][   T96] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  167.736755][ T8777] loop2: detected capacity change from 0 to 128
[  167.748381][   T96] usb 1-1: Using ep0 maxpacket: 16
[  167.760465][   T96] usb 1-1: unable to get BOS descriptor or descriptor too short
[  167.766532][   T96] usb 1-1: config 1 has an invalid interface descriptor of length 5, skipping
[  167.769653][   T96] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.773380][   T96] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  167.790842][   T96] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  167.794355][   T96] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.798201][   T96] usb 1-1: Product: syz
[  167.800038][   T96] usb 1-1: Manufacturer: syz
[  167.805583][   T96] usb 1-1: SerialNumber: syz
[  168.028123][   T96] usb 1-1: USB disconnect, device number 12
[  168.708432][ T8813] sctp: [Deprecated]: syz.0.1168 (pid 8813) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.708432][ T8813] Use struct sctp_sack_info instead
[  168.768824][ T8816] Illegal XDP return value 4294967274 on prog  (id 109) dev N/A, expect packet loss!
[  168.774136][ T8816] netlink: 'syz.0.1169': attribute type 6 has an invalid length.
[  168.798967][ T8816] loop0: detected capacity change from 0 to 2048
[  168.804810][ T8816] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  168.810519][ T6748] udevd[6748]: incorrect nilfs2 checksum on /dev/loop0
[  168.827258][ T8819] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.071370][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'.
[  169.078281][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'.
[  169.167837][ T8836] loop0: detected capacity change from 0 to 1024
[  169.183037][ T8836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.197657][ T8836] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.1178: reserved inode found cleared - inode=2
[  169.206904][ T8836] EXT4-fs (loop0): Remounting filesystem read-only
[  169.223514][ T6740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.700766][ T8860] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.842652][ T8870] loop2: detected capacity change from 0 to 2048
[  169.847650][ T8870] NILFS (loop2): invalid segment: Magic number mismatch
[  169.850167][ T8870] NILFS (loop2): trying rollback from an earlier position
[  169.858669][ T8870] NILFS (loop2): recovery complete
[  169.862812][ T8872] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.862989][ T8905] loop0: detected capacity change from 0 to 128
[  170.888975][ T8905] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  170.921286][ T6740] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  171.136545][ T8919] loop2: detected capacity change from 0 to 1024
[  171.140148][ T8919] EXT4-fs: Ignoring removed orlov option
[  171.160252][ T8919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.175570][   T33] audit: type=1800 audit(171.044:29): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1213" name="bus" dev="loop2" ino=18 res=0 errno=0
[  171.186357][   T33] audit: type=1804 audit(171.064:30): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1213" name="/newroot/382/bus/bus" dev="loop2" ino=18 res=1 errno=0
[  171.275207][ T5852] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  171.438526][ T5852] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  171.442147][ T5852] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  171.447649][ T5852] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  171.451268][ T5852] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  171.461381][ T5852] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  171.464674][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.468432][ T5852] usb 1-1: Product: syz
[  171.470799][ T5852] usb 1-1: Manufacturer: syz
[  171.478231][ T5852] usb 1-1: SerialNumber: syz
[  171.491137][ T8913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  171.496524][ T5852] cdc_mbim 1-1:1.0: skipping garbage
[  171.697277][ T8913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  171.701110][ T8913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  172.081612][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.310119][ T8913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  172.318068][ T8913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  172.321745][ T5852] cdc_mbim 1-1:1.0: setting tx_max = 184
[  172.341063][ T5852] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  172.352540][ T5852] wwan wwan0: port wwan0mbim0 attached
[  172.386497][ T5852] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, a2:ce:66:ee:78:7d
[  172.528427][ T5890] usb 1-1: USB disconnect, device number 13
[  172.540428][ T5890] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  172.649624][ T5890] wwan wwan0: port wwan0mbim0 disconnected
[  174.226547][   T96] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  174.387321][   T96] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  174.393530][   T96] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  174.399593][   T96] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  174.403704][   T96] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  174.409656][   T96] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  174.413490][   T96] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.422970][   T96] usb 3-1: config 0 descriptor??
[  174.433909][   T96] hdpvr 3-1:0.0: Could not find bulk-in endpoint
[  174.437059][   T96] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[  174.638137][   T96] usb 3-1: USB disconnect, device number 15
[  175.550634][ T9020] hub 8-0:1.0: USB hub found
[  175.568671][ T9020] hub 8-0:1.0: 1 port detected
[  175.917335][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'.
[  176.301560][ T9043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1259'.
[  176.553549][   T33] audit: type=1107 audit(176.424:31): pid=9047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  179.108984][ T9092] loop0: detected capacity change from 0 to 512
[  179.156058][ T9092] EXT4-fs (loop0): blocks per group (34) and clusters per group (32768) inconsistent
[  179.566616][ T9124] C: renamed from team_slave_0 (while UP)
[  179.571089][ T9124] netlink: 'syz.1.1296': attribute type 3 has an invalid length.
[  179.574391][ T9124] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1296'.
[  179.579030][ T9124] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  179.588354][ T9125] tipc: Started in network mode
[  179.590566][ T9125] tipc: Node identity cac5a6a5b999, cluster identity 4711
[  179.596950][ T9125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.600510][ T9125] syzkaller0: entered promiscuous mode
[  179.602861][ T9125] syzkaller0: entered allmulticast mode
[  179.699962][ T9133] geneve3: entered promiscuous mode
[  179.751682][ T9119] tipc: Resetting bearer <eth:syzkaller0>
[  179.772207][ T9119] tipc: Disabling bearer <eth:syzkaller0>
[  179.859172][ T9144] sctp: [Deprecated]: syz.0.1304 (pid 9144) Use of int in maxseg socket option.
[  179.859172][ T9144] Use struct sctp_assoc_value instead
[  179.871092][ T9145] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1299'.
[  179.927190][ T9149] loop0: detected capacity change from 0 to 512
[  179.943059][ T9149] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  179.964445][ T9149] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  179.969513][ T9151] binder: 9150:9151 ioctl c018620b 0 returned -14
[  179.975845][ T9149] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  180.000967][ T9149] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  180.006119][ T9149] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  180.013760][ T9149] System zones: 0-2, 18-18, 34-35
[  180.042665][ T9149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.102778][ T6740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.444534][ T9176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.539381][ T9163] loop2: detected capacity change from 0 to 32768
[  180.589539][ T9163] JBD2: Ignoring recovery information on journal
[  180.592165][ T9163] JBD2: Journal too short (blocks 2-2).
[  180.596684][ T9163] JBD2: journal reset failed
[  180.602114][ T9163] (syz.2.1313,9163,1):ocfs2_journal_load:1167 ERROR: Failed to load journal!
[  180.608468][ T9163] (syz.2.1313,9163,1):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -22
[  180.611695][ T9163] (syz.2.1313,9163,1):ocfs2_check_volume:2432 ERROR: status = -22
[  180.627349][ T9163] (syz.2.1313,9163,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  180.643079][ T9163] (syz.2.1313,9163,1):ocfs2_fill_super:1177 ERROR: status = -22
[  181.752027][ T9172] loop0: detected capacity change from 0 to 262144
[  182.150874][ T9172] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  182.159623][ T9172] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  182.981516][ T9224] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1336'.
[  183.514183][ T9236] loop9: detected capacity change from 0 to 8
[  183.522905][ T9236]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  183.526166][ T9236] loop9: partition table partially beyond EOD, truncated
[  183.530649][ T9236] loop9: p1 size 81768186 extends beyond EOD, truncated
[  183.600347][ T9238] geneve2: entered promiscuous mode
[  183.610065][ T6748] udevd[6748]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  183.834389][ T9247] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1346'.
[  184.135248][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  184.178220][ T9257] loop2: detected capacity change from 0 to 512
[  184.192937][ T9257] EXT4-fs: Ignoring removed oldalloc option
[  184.200290][ T9257] EXT4-fs: Ignoring removed mblk_io_submit option
[  184.204015][ T9257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  184.228308][ T9257] EXT4-fs (loop2): orphan cleanup on readonly fs
[  184.233557][ T9257] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5
[  184.240570][ T9257] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  184.243707][ T9257] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1350: Failed to acquire dquot type 1
[  184.258247][ T9257] EXT4-fs (loop2): 1 truncate cleaned up
[  184.265465][ T9257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  184.287647][ T9257] EXT4-fs: Ignoring removed orlov option
[  184.290333][ T9257] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  184.294433][ T9257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  184.302411][   T10] usb 1-1: config 0 has an invalid interface number: 71 but max is 0
[  184.311059][ T9257] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  184.318648][   T10] usb 1-1: config 0 has no interface number 0
[  184.321799][   T10] usb 1-1: config 0 interface 71 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  184.330372][   T10] usb 1-1: config 0 interface 71 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  184.336957][ T9257] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.1350: Abort forced by user
[  184.342842][ T9257] EXT4-fs (loop2): Remounting filesystem read-only
[  184.347764][ T9257] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  184.353739][   T10] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=cc.c0
[  184.358395][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.361920][   T10] usb 1-1: Product: syz
[  184.363893][   T10] usb 1-1: Manufacturer: syz
[  184.368177][   T10] usb 1-1: SerialNumber: syz
[  184.378073][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.389457][   T10] usb 1-1: config 0 descriptor??
[  184.394832][ T9250] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  184.398236][ T9250] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  184.418241][   T10] kvaser_usb 1-1:0.71: error -ENODEV: Cannot get usb endpoint(s)
[  184.642829][ T9250] loop0: detected capacity change from 0 to 1024
[  184.657793][ T9250] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  184.686468][ T9250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.186515][ T9261] loop2: detected capacity change from 0 to 131072
[  185.193537][   T10] usb 1-1: USB disconnect, device number 14
[  185.207667][ T9261] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  185.211788][ T9261] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  185.217687][ T9261] F2FS-fs (loop2): invalid crc value
[  185.279286][ T9261] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  185.295568][ T9261] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  185.299187][ T9261] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  185.402049][ T9275] netlink: 'syz.1.1355': attribute type 2 has an invalid length.
[  185.764095][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1362'.
[  185.833767][ T6740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.273360][ T9319] loop0: detected capacity change from 0 to 128
[  186.495675][ T9325] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  186.855976][ T9311] loop2: detected capacity change from 0 to 32768
[  186.952610][ T9311] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  186.952610][ T9311] members_v2 (size 152):
[  186.952610][ T9311] Device:                        0
[  186.952610][ T9311]   Label:                       (none)
[  186.952610][ T9311]   UUID:                        7af6772b-00de-4159-84cd-1faead7f0000
[  186.952610][ T9311]   Size:                        0
[  186.952610][ T9311]   read errors:                 0
[  186.952610][ T9311]   write errors:                0
[  186.952610][ T9311]   checksum errors:             0
[  186.952610][ T9311]   seqread iops:                0
[  186.952610][ T9311]   seqwrite iops:               0
[  186.952610][ T9311]   randread iops:               0
[  186.952610][ T9311]   randwrite iops:              0
[  186.952610][ T9311]   Bucket size:                 131072
[  186.952610][ T9311]   First bucket:                0
[  186.952610][ T9311]   Buckets:                     0
[  186.952610][ T9311]   Last mount:                  1714681267
[  186.952610][ T9311]   Last superblock write:       83886122
[  186.952610][ T9311]   State:                       rw
[  186.952610][ T9311]   Data allowed:                journal,btree,user
[  186.952610][ T9311]   Has data:                    (none)
[  186.952610][ T9311]   Btree allocated bitmap blocksize:256
[  186.952610][ T9311]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  186.952610][ T9311]   Durability:   
[  186.952791][ T9311] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  187.419498][ T9346] loop2: detected capacity change from 0 to 2048
[  187.433069][ T9346] EXT4-fs: inline encryption not supported
[  187.440498][ T9346] EXT4-fs: Ignoring removed oldalloc option
[  187.443159][ T9346] ext4: Unknown parameter 'appraise_type'
[  187.595864][   T33] audit: type=1326 audit(187.454:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.1.1391" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7ffc0000
[  187.627298][   T33] audit: type=1326 audit(187.464:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.1.1391" exe="/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fbe73f8ebe9 code=0x7ffc0000
[  187.635495][   T33] audit: type=1326 audit(187.464:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.1.1391" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7ffc0000
[  188.761793][ T9383] loop0: detected capacity change from 0 to 40427
[  188.773581][ T9383] F2FS-fs (loop0): invalid crc value
[  188.815213][ T9383] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  188.819327][ T9383] F2FS-fs (loop0): Start checkpoint disabled!
[  188.825682][ T9383] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  188.850393][ T9383] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  188.886085][  T984] kworker/u9:3: attempt to access beyond end of device
[  188.886085][  T984] loop0: rw=1, sector=45096, nr_sectors = 128 limit=40427
[  188.897146][  T984] kworker/u9:3: attempt to access beyond end of device
[  188.897146][  T984] loop0: rw=2049, sector=45224, nr_sectors = 16 limit=40427
[  188.903868][  T984] CPU: 0 UID: 0 PID: 984 Comm: kworker/u9:3 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  188.903887][  T984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.903895][  T984] Workqueue: writeback wb_workfn (flush-7:0)
[  188.903918][  T984] Call Trace:
[  188.903924][  T984]  <TASK>
[  188.903930][  T984]  dump_stack_lvl+0x189/0x250
[  188.903950][  T984]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.903965][  T984]  ? __pfx_queue_work_on+0x10/0x10
[  188.903976][  T984]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  188.903990][  T984]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  188.904020][  T984]  f2fs_handle_critical_error+0x37c/0x540
[  188.904043][  T984]  f2fs_write_end_io+0x886/0xb60
[  188.904073][  T984]  __submit_merged_bio+0x27a/0x6a0
[  188.904093][  T984]  __submit_merged_write_cond+0x255/0x530
[  188.904113][  T984]  f2fs_write_data_pages+0x261d/0x3000
[  188.904157][  T984]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  188.904233][  T984]  ? f2fs_write_meta_pages+0x357/0x450
[  188.904257][  T984]  ? __lock_acquire+0xab9/0xd20
[  188.904279][  T984]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  188.904295][  T984]  do_writepages+0x32e/0x550
[  188.904316][  T984]  ? reacquire_held_locks+0x127/0x1d0
[  188.904327][  T984]  ? writeback_sb_inodes+0x384/0x1010
[  188.904349][  T984]  __writeback_single_inode+0x145/0xff0
[  188.904364][  T984]  ? do_raw_spin_unlock+0x4d/0x240
[  188.904383][  T984]  writeback_sb_inodes+0x6c7/0x1010
[  188.904418][  T984]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  188.904467][  T984]  ? rcu_is_watching+0x15/0xb0
[  188.904487][  T984]  wb_writeback+0x43b/0xaf0
[  188.904509][  T984]  ? queue_io+0x331/0x590
[  188.904526][  T984]  ? __pfx_wb_writeback+0x10/0x10
[  188.904548][  T984]  ? _raw_spin_unlock_irq+0x23/0x50
[  188.904565][  T984]  wb_workfn+0x409/0xef0
[  188.904590][  T984]  ? __pfx_wb_workfn+0x10/0x10
[  188.904607][  T984]  ? __lock_acquire+0xab9/0xd20
[  188.904633][  T984]  ? process_scheduled_works+0x9ef/0x17b0
[  188.904650][  T984]  ? _raw_spin_unlock_irq+0x23/0x50
[  188.904662][  T984]  ? process_scheduled_works+0x9ef/0x17b0
[  188.904671][  T984]  ? process_scheduled_works+0x9ef/0x17b0
[  188.904685][  T984]  process_scheduled_works+0xae1/0x17b0
[  188.904746][  T984]  ? __pfx_process_scheduled_works+0x10/0x10
[  188.904779][  T984]  worker_thread+0x8a0/0xda0
[  188.904795][  T984]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  188.904814][  T984]  ? __kthread_parkme+0x7b/0x200
[  188.904836][  T984]  kthread+0x711/0x8a0
[  188.904854][  T984]  ? __pfx_worker_thread+0x10/0x10
[  188.904866][  T984]  ? __pfx_kthread+0x10/0x10
[  188.904882][  T984]  ? _raw_spin_unlock_irq+0x23/0x50
[  188.904894][  T984]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.904905][  T984]  ? __pfx_kthread+0x10/0x10
[  188.904922][  T984]  ret_from_fork+0x3fc/0x770
[  188.904937][  T984]  ? __pfx_ret_from_fork+0x10/0x10
[  188.904955][  T984]  ? __switch_to_asm+0x39/0x70
[  188.904968][  T984]  ? __switch_to_asm+0x33/0x70
[  188.904983][  T984]  ? __pfx_kthread+0x10/0x10
[  188.905020][  T984]  ret_from_fork_asm+0x1a/0x30
[  188.905048][  T984]  </TASK>
[  189.038684][  T984] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  189.042980][  T984] CPU: 0 UID: 0 PID: 984 Comm: kworker/u9:3 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  189.042998][  T984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.043008][  T984] Workqueue: writeback wb_workfn (flush-7:0)
[  189.043028][  T984] Call Trace:
[  189.043033][  T984]  <TASK>
[  189.043039][  T984]  dump_stack_lvl+0x189/0x250
[  189.043060][  T984]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.043075][  T984]  ? __pfx_queue_work_on+0x10/0x10
[  189.043087][  T984]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  189.043101][  T984]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.043123][  T984]  f2fs_handle_critical_error+0x37c/0x540
[  189.043146][  T984]  f2fs_write_end_io+0x886/0xb60
[  189.043175][  T984]  __submit_merged_bio+0x27a/0x6a0
[  189.043195][  T984]  __submit_merged_write_cond+0x255/0x530
[  189.043216][  T984]  f2fs_write_data_pages+0x261d/0x3000
[  189.043261][  T984]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  189.043341][  T984]  ? f2fs_write_meta_pages+0x357/0x450
[  189.043365][  T984]  ? __lock_acquire+0xab9/0xd20
[  189.043386][  T984]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  189.043402][  T984]  do_writepages+0x32e/0x550
[  189.043423][  T984]  ? reacquire_held_locks+0x127/0x1d0
[  189.043436][  T984]  ? writeback_sb_inodes+0x384/0x1010
[  189.043456][  T984]  __writeback_single_inode+0x145/0xff0
[  189.043472][  T984]  ? do_raw_spin_unlock+0x4d/0x240
[  189.043490][  T984]  writeback_sb_inodes+0x6c7/0x1010
[  189.043526][  T984]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  189.043579][  T984]  ? rcu_is_watching+0x15/0xb0
[  189.043600][  T984]  wb_writeback+0x43b/0xaf0
[  189.043623][  T984]  ? queue_io+0x331/0x590
[  189.043641][  T984]  ? __pfx_wb_writeback+0x10/0x10
[  189.043664][  T984]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.043681][  T984]  wb_workfn+0x409/0xef0
[  189.043740][  T984]  ? __pfx_wb_workfn+0x10/0x10
[  189.043758][  T984]  ? __lock_acquire+0xab9/0xd20
[  189.043794][  T984]  ? process_scheduled_works+0x9ef/0x17b0
[  189.043811][  T984]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.043823][  T984]  ? process_scheduled_works+0x9ef/0x17b0
[  189.043834][  T984]  ? process_scheduled_works+0x9ef/0x17b0
[  189.043847][  T984]  process_scheduled_works+0xae1/0x17b0
[  189.043884][  T984]  ? __pfx_process_scheduled_works+0x10/0x10
[  189.043920][  T984]  worker_thread+0x8a0/0xda0
[  189.043936][  T984]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.043957][  T984]  ? __kthread_parkme+0x7b/0x200
[  189.043980][  T984]  kthread+0x711/0x8a0
[  189.043998][  T984]  ? __pfx_worker_thread+0x10/0x10
[  189.044010][  T984]  ? __pfx_kthread+0x10/0x10
[  189.044026][  T984]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.044039][  T984]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.044051][  T984]  ? __pfx_kthread+0x10/0x10
[  189.044065][  T984]  ret_from_fork+0x3fc/0x770
[  189.044081][  T984]  ? __pfx_ret_from_fork+0x10/0x10
[  189.044099][  T984]  ? __switch_to_asm+0x39/0x70
[  189.044114][  T984]  ? __switch_to_asm+0x33/0x70
[  189.044127][  T984]  ? __pfx_kthread+0x10/0x10
[  189.044143][  T984]  ret_from_fork_asm+0x1a/0x30
[  189.044173][  T984]  </TASK>
[  189.044178][  T984] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  189.189786][ T9393] tipc: Started in network mode
[  189.199105][ T9393] tipc: Node identity ac14140f, cluster identity 4711
[  189.208254][ T9393] tipc: New replicast peer: 255.255.255.255
[  189.211235][ T9393] tipc: Enabled bearer <udp:syz2>, priority 10
[  189.340502][ T9402] loop2: detected capacity change from 0 to 512
[  189.364541][ T9402] EXT4-fs: Ignoring removed bh option
[  189.384542][ T9402] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  189.420548][ T9402] EXT4-fs (loop2): 1 truncate cleaned up
[  189.424560][ T9402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.522445][ T9406] loop0: detected capacity change from 0 to 4096
[  189.553758][ T9407] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  190.011491][ T9424] overlayfs: failed to clone upperpath
[  190.151707][ T9436] loop0: detected capacity change from 0 to 512
[  190.184479][ T9436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  190.319568][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.335332][   T47] tipc: Node number set to 2886997007
[  190.562414][ T9447] evm: overlay not supported
[  190.866005][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  191.151753][ T6740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  191.313050][ T9464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1435'.
[  191.378881][ T9468] loop0: detected capacity change from 0 to 1024
[  191.752897][ T9494] loop0: detected capacity change from 0 to 128
[  191.800590][ T9494] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  191.843882][ T9498] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  191.848823][ T9498] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  191.849547][ T6740] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  192.208571][ T9506] loop0: detected capacity change from 0 to 8
[  192.221210][ T9506] Page size > filesystem block size (0).  This is currently not supported!
[  193.471637][ T9546] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1469'.
[  193.476452][ T9546] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1469'.
[  193.481926][ T9546] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1469'.
[  193.908283][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.911182][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.081640][ T9562] loop2: detected capacity change from 0 to 16
[  194.104083][ T9562] erofs (device loop2): mounted with root inode @ nid 36.
[  194.169856][ T9562] erofs (device loop2): readahead error at folio 3600 @ nid 36
[  194.173341][ T9562] erofs (device loop2): readahead error at folio 3599 @ nid 36
[  194.291419][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1478'.
[  195.018206][ T9576] bpf: Bad value for 'gid'
[  195.772219][ T9593] netlink: 'syz.2.1490': attribute type 1 has an invalid length.
[  195.779236][ T9593] netlink: 'syz.2.1490': attribute type 4 has an invalid length.
[  195.782592][ T9593] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1490'.
[  195.788474][ T9593] netlink: 'syz.2.1490': attribute type 1 has an invalid length.
[  195.791754][ T9593] netlink: 'syz.2.1490': attribute type 4 has an invalid length.
[  195.794927][ T9593] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1490'.
[  196.269239][ T9603] loop0: detected capacity change from 0 to 32768
[  196.299815][ T9603] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  196.332197][ T9603] XFS (loop0): Ending clean mount
[  196.361877][   T33] audit: type=1326 audit(196.234:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.1499" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70dfb8ebe9 code=0x0
[  196.481695][ T6740] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  196.652964][ T9627] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1503'.
[  197.258425][ T9652] netlink: 'syz.1.1512': attribute type 2 has an invalid length.
[  197.261109][ T9652] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1512'.
[  197.264497][ T9652] nbd: must specify at least one socket
[  197.601370][ T9643] loop2: detected capacity change from 0 to 40427
[  197.672142][ T9643] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  197.677588][ T9643] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  197.703509][ T5855] syz-executor: attempt to access beyond end of device
[  197.703509][ T5855] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  197.705119][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  197.710975][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  197.710996][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.711003][ T5855] Call Trace:
[  197.711009][ T5855]  <TASK>
[  197.711014][ T5855]  dump_stack_lvl+0x189/0x250
[  197.711038][ T5855]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.711055][ T5855]  ? __pfx_queue_work_on+0x10/0x10
[  197.711068][ T5855]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  197.711086][ T5855]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  197.711105][ T5855]  f2fs_handle_critical_error+0x37c/0x540
[  197.711124][ T5855]  f2fs_write_end_io+0x886/0xb60
[  197.711152][ T5855]  __submit_merged_bio+0x27a/0x6a0
[  197.711169][ T5855]  __submit_merged_write_cond+0x255/0x530
[  197.711186][ T5855]  f2fs_write_data_pages+0x261d/0x3000
[  197.711224][ T5855]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  197.711277][ T5855]  ? folios_put_refs+0x559/0x640
[  197.711300][ T5855]  ? __lock_acquire+0xab9/0xd20
[  197.711322][ T5855]  ? do_raw_spin_lock+0x121/0x290
[  197.711342][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[  197.711354][ T5855]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  197.711369][ T5855]  do_writepages+0x32e/0x550
[  197.711394][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[  197.711413][ T5855]  filemap_fdatawrite+0x199/0x240
[  197.711431][ T5855]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  197.711476][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[  197.711491][ T5855]  f2fs_sync_dirty_inodes+0x31f/0x830
[  197.711516][ T5855]  f2fs_write_checkpoint+0x95a/0x1df0
[  197.711545][ T5855]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  197.711595][ T5855]  ? kill_f2fs_super+0x298/0x6c0
[  197.711621][ T5855]  kill_f2fs_super+0x2c3/0x6c0
[  197.711640][ T5855]  ? __pfx_kill_f2fs_super+0x10/0x10
[  197.711679][ T5855]  ? radix_tree_delete_item+0x2b6/0x400
[  197.711698][ T5855]  ? shrinker_free+0x2ce/0x3e0
[  197.711711][ T5855]  deactivate_locked_super+0xbc/0x130
[  197.711730][ T5855]  cleanup_mnt+0x425/0x4c0
[  197.711745][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.711762][ T5855]  task_work_run+0x1d4/0x260
[  197.711781][ T5855]  ? __pfx_task_work_run+0x10/0x10
[  197.711794][ T5855]  ? __x64_sys_umount+0x122/0x160
[  197.711811][ T5855]  ? exit_to_user_mode_loop+0x40/0x110
[  197.711829][ T5855]  exit_to_user_mode_loop+0xec/0x110
[  197.711844][ T5855]  do_syscall_64+0x2bd/0x3b0
[  197.711856][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.711868][ T5855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.711880][ T5855]  ? exc_page_fault+0x9f/0xf0
[  197.711895][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.711906][ T5855] RIP: 0033:0x7f70dfb8ff17
[  197.711939][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  197.711950][ T5855] RSP: 002b:00007ffcd0632528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  197.711963][ T5855] RAX: 0000000000000000 RBX: 00007f70dfc11c05 RCX: 00007f70dfb8ff17
[  197.711971][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd06325e0
[  197.711978][ T5855] RBP: 00007ffcd06325e0 R08: 0000000000000000 R09: 0000000000000000
[  197.711984][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd0633670
[  197.711991][ T5855] R13: 00007f70dfc11c05 R14: 00000000000303c5 R15: 00007ffcd06336b0
[  197.712010][ T5855]  </TASK>
[  197.713386][ T5855] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  197.888073][    T9] usb 1-1: config index 0 descriptor too short (expected 3133, got 61)
[  197.891643][    T9] usb 1-1: config 0 has an invalid interface number: 156 but max is 1
[  197.897443][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.901772][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  197.908242][    T9] usb 1-1: config 0 has no interface number 0
[  197.910896][    T9] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  197.917034][    T9] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  197.927030][    T9] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  197.944873][    T9] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  197.949981][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.960069][    T9] usb 1-1: config 0 descriptor??
[  197.990035][    T9] gspca_main: spca561-2.14.0 probing abcd:cdee
[  198.175168][    T9] spca561 1-1:0.156: probe with driver spca561 failed with error -22
[  198.178607][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  198.181443][    T9] usb 1-1: MIDIStreaming interface descriptor not found
[  198.217628][ T9671] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1520'.
[  198.317831][    T9] usb 1-1: USB disconnect, device number 15
[  198.659682][   T96] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  198.796559][   T33] audit: type=1326 audit(198.674:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.0.1535" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  198.804538][   T33] audit: type=1326 audit(198.674:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.0.1535" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  198.812427][   T96] usb 3-1: Using ep0 maxpacket: 16
[  198.814602][   T96] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  198.814625][   T96] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.824238][   T96] usb 3-1: config 0 descriptor??
[  198.830328][   T33] audit: type=1326 audit(198.674:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.0.1535" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  198.843449][   T96] gspca_main: sonixj-2.14.0 probing 0471:0327
[  198.849572][   T33] audit: type=1326 audit(198.724:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9711 comm="syz.0.1535" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9618bc14a5 code=0x7ffc0000
[  198.858101][   T33] audit: type=1326 audit(198.724:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.0.1535" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  198.871228][   T33] audit: type=1326 audit(198.744:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.0.1535" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9618b8d84a code=0x7ffc0000
[  198.880767][   T33] audit: type=1326 audit(198.744:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.0.1535" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9618bc14a5 code=0x7ffc0000
[  199.001719][   T33] audit: type=1326 audit(198.874:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9711 comm="syz.0.1535" exe="/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  199.066224][   T33] audit: type=1326 audit(198.944:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.0.1535" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9618b8ebe9 code=0x7ffc0000
[  199.253182][   T96] gspca_sonixj: reg_r err -71
[  199.255549][   T96] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  199.263105][   T96] usb 3-1: USB disconnect, device number 16
[  199.764711][ T9719] netlink: 'syz.1.1540': attribute type 21 has an invalid length.
[  199.769454][ T9719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1540'.
[  199.773362][ T9719] netlink: 'syz.1.1540': attribute type 1 has an invalid length.
[  201.281545][ T9749] loop0: detected capacity change from 0 to 128
[  201.287837][ T9749] EXT4-fs: Ignoring removed nomblk_io_submit option
[  201.298170][ T9749] EXT4-fs: Ignoring removed nomblk_io_submit option
[  201.301915][ T9749] EXT4-fs (loop0): Test dummy encryption mode enabled
[  201.310074][ T9749] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  201.327943][ T9749] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  201.364771][ T6740] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  201.409557][ T9753] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  201.619744][ T9762] netlink: 'syz.0.1558': attribute type 1 has an invalid length.
[  201.838777][ T9778] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1566'.
[  201.980777][ T9784] loop2: detected capacity change from 0 to 512
[  201.990769][ T9784] EXT4-fs: Ignoring removed nobh option
[  202.017245][   T33] kauditd_printk_skb: 20 callbacks suppressed
[  202.017259][   T33] audit: type=1326 audit(201.884:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7ffc0000
[  202.030621][ T9772] loop0: detected capacity change from 0 to 32768
[  202.032501][ T9784] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1569: corrupted inode contents
[  202.034081][ T9772] XFS: noattr2 mount option is deprecated.
[  202.041764][ T9772] XFS (loop0): attr2 and noattr2 cannot both be specified.
[  202.057131][   T33] audit: type=1326 audit(201.884:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7ffc0000
[  202.090082][ T9784] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1569: mark_inode_dirty error
[  202.108165][   T33] audit: type=1326 audit(201.894:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fbe73f8ebe9 code=0x7ffc0000
[  202.133762][ T9784] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1569: corrupted inode contents
[  202.145892][   T33] audit: type=1326 audit(201.894:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7ffc0000
[  202.176505][ T9784] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1569: mark_inode_dirty error
[  202.183607][   T33] audit: type=1326 audit(201.894:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fbe73f8ebe9 code=0x7ffc0000
[  202.206275][   T33] audit: type=1326 audit(201.894:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7ffc0000
[  202.210311][ T9784] Quota error (device loop2): write_blk: dquota write failed
[  202.221867][ T9784] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  202.224779][ T9793] loop0: detected capacity change from 0 to 512
[  202.228746][ T9784] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1569: Failed to acquire dquot type 0
[  202.238614][ T9784] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1569: corrupted inode contents
[  202.249066][ T9784] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1569: mark_inode_dirty error
[  202.254281][ T9784] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1569: corrupted inode contents
[  202.262770][ T9793] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1572: bad orphan inode 11862016
[  202.267806][ T9784] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1569: mark_inode_dirty error
[  202.271162][ T9793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  202.275820][ T9784] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1569: corrupted inode contents
[  202.285713][ T9784] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  202.305228][ T9784] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1569: corrupted inode contents
[  202.386999][ T9784] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1569: mark_inode_dirty error
[  202.397614][ T9784] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  202.403547][ T9784] EXT4-fs (loop2): 1 truncate cleaned up
[  202.407972][ T9784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.429385][ T9784] EXT4-fs error (device loop2): ext4_empty_dir:3124: inode #12: block 13: comm syz.2.1569: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0
[  202.681364][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.689140][ T1091] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  202.694767][ T1091] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u10:5: Failed to release dquot type 1
[  203.379764][ T6740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  203.675176][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  203.839889][   T10] usb 1-1: Using ep0 maxpacket: 32
[  203.845755][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  203.851758][   T10] usb 1-1: config 0 has an invalid interface number: 223 but max is 0
[  203.854557][   T10] usb 1-1: config 0 has no interface number 0
[  203.857222][   T10] usb 1-1: config 0 interface 223 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  203.861107][   T10] usb 1-1: config 0 interface 223 altsetting 2 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  203.867006][   T10] usb 1-1: config 0 interface 223 has no altsetting 0
[  203.874385][   T10] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=86.21
[  203.880341][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.883909][   T10] usb 1-1: Product: syz
[  203.887147][   T10] usb 1-1: Manufacturer: syz
[  203.890271][   T10] usb 1-1: SerialNumber: syz
[  203.899346][   T10] usb 1-1: config 0 descriptor??
[  203.909357][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  204.043264][ T6751] udevd[6751]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.223/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  204.109837][   T10] usb 1-1: USB disconnect, device number 16
[  204.160772][ T9825] loop2: detected capacity change from 0 to 32768
[  204.195789][ T9825] o2cb: This node has not been configured.
[  204.198187][ T9825] o2cb: Cluster check failed. Fix errors before retrying.
[  204.200998][ T9825] (syz.2.1584,9825,1):ocfs2_dlm_init:3354 ERROR: status = -22
[  204.215124][ T9825] (syz.2.1584,9825,1):ocfs2_mount_volume:1735 ERROR: status = -22
[  204.222429][ T9825] (syz.2.1584,9825,1):ocfs2_fill_super:1177 ERROR: status = -22
[  204.381717][ T5715] tipc: Subscription rejected, illegal request
[  204.531326][ T9843] openvswitch: netlink: Missing key (keys=40, expected=100)
[  204.845237][   T96] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  204.976116][ T9855] loop0: detected capacity change from 0 to 32768
[  205.000362][ T9855] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  205.005206][   T96] usb 3-1: Using ep0 maxpacket: 32
[  205.008834][   T96] usb 3-1: config 5 has an invalid interface number: 222 but max is 1
[  205.011563][   T96] usb 3-1: config 5 has no interface number 1
[  205.014239][   T96] usb 3-1: config 5 interface 222 altsetting 11 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  205.019587][   T96] usb 3-1: config 5 interface 222 altsetting 11 endpoint 0x9 has an invalid bInterval 100, changing to 10
[  205.024101][   T96] usb 3-1: config 5 interface 222 has no altsetting 0
[  205.027217][   T96] usb 3-1: config 5 interface 0 has no altsetting 0
[  205.032344][   T96] usb 3-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=f1.81
[  205.036887][   T96] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.039652][   T96] usb 3-1: Product: syz
[  205.041032][   T96] usb 3-1: Manufacturer: syz
[  205.042576][   T96] usb 3-1: SerialNumber: syz
[  205.050401][ T9855] XFS (loop0): Ending clean mount
[  205.066389][ T9855] XFS (loop0): Quotacheck needed: Please wait.
[  205.111797][ T9855] XFS (loop0): Quotacheck: Done.
[  205.153478][ T6740] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  205.259744][   T96] rtl8150 3-1:5.222: couldn't find required endpoints
[  205.279841][   T96] rtl8150 3-1:5.222: probe with driver rtl8150 failed with error -5
[  205.293993][   T96] rtl8150 3-1:5.0: couldn't find required endpoints
[  205.297701][   T96] rtl8150 3-1:5.0: probe with driver rtl8150 failed with error -5
[  205.303863][   T96] usb 3-1: USB disconnect, device number 17
[  205.349021][ T9865] loop0: detected capacity change from 0 to 4096
[  205.355434][ T9865] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  205.377216][ T9865] ntfs3(loop0): ino=19, mi_enum_attr
[  205.390408][ T9865] ntfs3(loop0): failed to convert "c46c" to macinuit
[  205.397958][ T9865] ntfs3(loop0): ino=20, mi_enum_attr
[  205.591482][ T9874] netlink: 'syz.0.1602': attribute type 14 has an invalid length.
[  205.688178][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'.
[  205.846761][ T9892] loop2: detected capacity change from 0 to 22
[  205.888964][ T9892] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  205.899198][ T9892] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  207.399882][ T9903] loop0: detected capacity change from 0 to 32768
[  207.445239][ T9903] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  207.470497][ T9903] XFS (loop0): Ending clean mount
[  207.516753][ T6740] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  207.676482][ T9911] loop2: detected capacity change from 0 to 32768
[  207.682719][ T9911] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1619 (9911)
[  207.739165][ T9911] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  207.760347][ T9911] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  207.766112][ T9911] BTRFS info (device loop2): using free-space-tree
[  208.032906][ T5855] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  208.094004][ T9952] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1627'.
[  209.101854][T10001] loop0: detected capacity change from 0 to 32768
[  209.181110][T10001] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  209.181137][T10001]   allowing incompatible features above 0.0: (unknown version)
[  209.181145][T10001]   features: 
[  209.195574][T10001] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  209.198960][T10001] bcachefs (loop0): initializing new filesystem
[  209.209456][T10001] bcachefs (loop0): going read-write
[  209.219328][T10001] bcachefs (loop0): marking superblocks
[  209.245695][T10001] bcachefs (loop0): initializing freespace
[  209.256090][T10001] bcachefs (loop0): done initializing freespace
[  209.264277][T10001] bcachefs (loop0): reading snapshots table
[  209.272711][T10001] bcachefs (loop0): reading snapshots done
[  209.311124][T10001] bcachefs (loop0): done starting filesystem
[  209.407917][ T6740] bcachefs (loop0): shutting down
[  209.410029][ T6740] bcachefs (loop0): going read-only
[  209.412229][ T6740] bcachefs (loop0): finished waiting for writes to stop
[  209.418299][ T6740] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  209.454713][ T6740] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  209.459742][ T6740] bcachefs (loop0): clean shutdown complete, journal seq 4
[  209.462903][ T6740] bcachefs (loop0): marking filesystem clean
[  209.480001][ T6740] bcachefs (loop0): shutdown complete
[  210.135166][   T33] audit: type=1326 audit(210.004:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.2.1653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70dfb8ebe9 code=0x7fc00000
[  210.412817][   T33] audit: type=1326 audit(210.284:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10020 comm="syz.1.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7fc00000
[  210.421770][   T33] audit: type=1326 audit(210.284:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10020 comm="syz.1.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe73f8ebe9 code=0x7fc00000
[  210.429685][   T33] audit: type=1326 audit(210.284:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10020 comm="syz.1.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7fc00000
[  210.437694][   T33] audit: type=1326 audit(210.284:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10020 comm="syz.1.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7fc00000
[  210.445831][   T33] audit: type=1326 audit(210.284:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10020 comm="syz.1.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7fc00000
[  210.453702][   T33] audit: type=1326 audit(210.284:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10020 comm="syz.1.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7fc00000
[  210.461404][   T33] audit: type=1326 audit(210.284:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10020 comm="syz.1.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7fc00000
[  210.470564][   T33] audit: type=1326 audit(210.284:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10020 comm="syz.1.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7fc00000
[  210.480001][   T33] audit: type=1326 audit(210.284:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10020 comm="syz.1.1651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73f8ebe9 code=0x7fc00000
[  210.883047][   T47] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  211.046308][   T47] usb 3-1: Using ep0 maxpacket: 32
[  211.050445][   T47] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  211.053833][   T47] usb 3-1: config 0 has no interface number 0
[  211.065517][   T47] usb 3-1: config 0 interface 184 has no altsetting 0
[  211.071535][   T47] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  211.078854][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.082197][   T47] usb 3-1: Product: syz
[  211.083928][   T47] usb 3-1: Manufacturer: syz
[  211.089010][   T47] usb 3-1: SerialNumber: syz
[  211.094318][   T47] usb 3-1: config 0 descriptor??
[  211.281159][   T47] smsc75xx v1.0.0
[  211.450316][   T47] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  211.460811][   T47] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  211.475572][   T47] usb 3-1: USB disconnect, device number 18
[  211.778912][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'.
[  211.783074][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'.
[  212.061044][T10081] loop0: detected capacity change from 0 to 4096
[  212.146487][T10087] syz.1.1679(10087): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  212.172135][ T4143] ntfs3(loop0): ino=5, mi_enum_attr
[  212.285192][   T47] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  212.447232][   T47] usb 3-1: Using ep0 maxpacket: 32
[  212.457051][   T47] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  212.460553][   T47] usb 3-1: config 0 has no interface number 0
[  212.463240][   T47] usb 3-1: config 0 interface 184 has no altsetting 0
[  212.473754][   T47] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  212.478617][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.482357][   T47] usb 3-1: Product: syz
[  212.484507][   T47] usb 3-1: Manufacturer: syz
[  212.487212][   T47] usb 3-1: SerialNumber: syz
[  212.493189][   T47] usb 3-1: config 0 descriptor??
[  212.506059][   T47] smsc75xx v1.0.0
[  212.507720][   T47] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  212.512163][   T47] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[  212.607531][T10109] loop0: detected capacity change from 0 to 2048
[  212.648202][T10109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.658540][T10109] EXT4-fs (loop0): Online resizing not supported with bigalloc
[  212.681196][ T6740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.771267][T10123] loop0: detected capacity change from 0 to 512
[  212.780012][T10123] EXT4-fs: Ignoring removed nobh option
[  212.790064][T10123] EXT4-fs (loop0): Test dummy encryption mode enabled
[  212.797583][T10123] EXT4-fs error (device loop0): __ext4_iget:5464: inode #11: block 1: comm syz.0.1692: invalid block
[  212.802546][T10123] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1692: couldn't read orphan inode 11 (err -117)
[  212.811628][T10123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.839337][ T6740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.944016][T10083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.955848][T10083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.964053][    T9] usb 3-1: USB disconnect, device number 19
[  213.215256][   T47] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  213.367420][   T47] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  213.372057][   T47] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.377907][   T47] usb 1-1: config 0 interface 0 has no altsetting 0
[  213.380757][   T47] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  213.384534][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.390427][   T47] usb 1-1: config 0 descriptor??
[  213.795715][   T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  213.814987][   T47] hid-steam 0003:28DE:1102.0005: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0
[  213.956365][   T10] usb 3-1: Using ep0 maxpacket: 32
[  213.961498][   T10] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  213.967318][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.973342][   T10] usb 3-1: config 0 descriptor??
[  213.991108][   T10] gspca_main: sunplus-2.14.0 probing 041e:400b
[  214.003781][    T9] usb 1-1: USB disconnect, device number 17
[  215.402217][   T10] gspca_sunplus: reg_w_riv err -71
[  215.407427][   T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  215.412724][   T10] usb 3-1: USB disconnect, device number 20
[  215.616439][T10181] netlink: 'syz.0.1718': attribute type 39 has an invalid length.
[  215.953672][T10187] nfs: Unknown parameter 'ntext'
[  216.065205][T10193] erspan1: entered allmulticast mode
[  216.220139][T10189] loop2: detected capacity change from 0 to 32768
[  216.234766][T10189] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry (unknown data_type 224): 1/245 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 4 5 5 6 10 11 11 11 26 33 34 45 45 56 80]
[  216.234766][T10189] replicas_v0 (size 40):
[  216.234766][T10189] (unknown data_type 224): 15 [0 0 0 0 0 0 255 255 255 255 255 255 255 255 255] (unknown data_type 224): 245 [5 0 0 0 0 1 0 0 0 0 0 0 0 80 0 0 0 10 0 0 0 0 0 0 0 0 0 0 0 56 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 34 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 45 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  216.234906][T10189] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  216.435988][T10197] loop0: detected capacity change from 0 to 32768
[  216.444985][T10197] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  216.462109][T10197] XFS (loop0): Ending clean mount
[  216.535191][ T6740] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  216.965908][   T96] usb 3-1: new low-speed USB device number 21 using dummy_hcd
[  217.064106][T10246] ==================================================================
[  217.067053][T10246] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  217.069647][T10246] Read of size 4 at addr ffff888125df52c4 by task syz.1.1746/10246
[  217.073020][T10246] 
[  217.074227][T10246] CPU: 0 UID: 0 PID: 10246 Comm: syz.1.1746 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  217.074240][T10246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.074246][T10246] Call Trace:
[  217.074251][T10246]  <TASK>
[  217.074255][T10246]  dump_stack_lvl+0x189/0x250
[  217.074269][T10246]  ? __kasan_check_byte+0x12/0x40
[  217.074282][T10246]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.074291][T10246]  ? lock_release+0x4b/0x3e0
[  217.074303][T10246]  ? __virt_addr_valid+0x4a5/0x5c0
[  217.074314][T10246]  print_report+0xca/0x240
[  217.074321][T10246]  ? xfrm_alloc_spi+0x570/0xf30
[  217.074332][T10246]  kasan_report+0x118/0x150
[  217.074342][T10246]  ? xfrm_alloc_spi+0x570/0xf30
[  217.074353][T10246]  xfrm_alloc_spi+0x570/0xf30
[  217.074363][T10246]  ? xfrm_alloc_spi+0x2a0/0xf30
[  217.074375][T10246]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  217.074385][T10246]  ? xfrm_find_acq+0x87/0xa0
[  217.074396][T10246]  xfrm_alloc_userspi+0x70b/0xc90
[  217.074406][T10246]  ? apparmor_capable+0x137/0x1b0
[  217.074414][T10246]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  217.074422][T10246]  ? __nla_parse+0x40/0x60
[  217.074432][T10246]  xfrm_user_rcv_msg+0x7a3/0xab0
[  217.074440][T10246]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  217.074452][T10246]  ? __pfx___mutex_trylock_common+0x10/0x10
[  217.074460][T10246]  ? rcu_is_watching+0x15/0xb0
[  217.074468][T10246]  ? trace_contention_end+0x39/0x120
[  217.074484][T10246]  ? __mutex_lock+0x335/0x1360
[  217.074495][T10246]  netlink_rcv_skb+0x208/0x470
[  217.074507][T10246]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  217.074514][T10246]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  217.074526][T10246]  ? netlink_deliver_tap+0x2e/0x1b0
[  217.074535][T10246]  ? netlink_deliver_tap+0x2e/0x1b0
[  217.074544][T10246]  xfrm_netlink_rcv+0x79/0x90
[  217.074553][T10246]  netlink_unicast+0x82f/0x9e0
[  217.074563][T10246]  ? __pfx_netlink_unicast+0x10/0x10
[  217.074597][T10246]  ? netlink_sendmsg+0x642/0xb30
[  217.074607][T10246]  ? skb_put+0x11b/0x210
[  217.074617][T10246]  netlink_sendmsg+0x805/0xb30
[  217.074629][T10246]  ? __pfx_netlink_sendmsg+0x10/0x10
[  217.074638][T10246]  ? aa_sock_msg_perm+0xf1/0x1d0
[  217.074648][T10246]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  217.074658][T10246]  ? __pfx_netlink_sendmsg+0x10/0x10
[  217.074667][T10246]  __sock_sendmsg+0x21c/0x270
[  217.074676][T10246]  ____sys_sendmsg+0x505/0x830
[  217.074687][T10246]  ? __pfx_____sys_sendmsg+0x10/0x10
[  217.074698][T10246]  ? import_iovec+0x74/0xa0
[  217.074705][T10246]  ___sys_sendmsg+0x21f/0x2a0
[  217.074715][T10246]  ? __pfx____sys_sendmsg+0x10/0x10
[  217.074730][T10246]  ? __fget_files+0x2a/0x420
[  217.074741][T10246]  ? __fget_files+0x3a0/0x420
[  217.074752][T10246]  __x64_sys_sendmsg+0x19b/0x260
[  217.074762][T10246]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  217.074773][T10246]  ? rcu_is_watching+0x15/0xb0
[  217.074781][T10246]  ? do_syscall_64+0xbe/0x3b0
[  217.074791][T10246]  do_syscall_64+0xfa/0x3b0
[  217.074799][T10246]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.074807][T10246]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.074814][T10246]  ? exc_page_fault+0x9f/0xf0
[  217.074822][T10246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.074829][T10246] RIP: 0033:0x7fbe73f8ebe9
[  217.074837][T10246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.074844][T10246] RSP: 002b:00007fbe74df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  217.074854][T10246] RAX: ffffffffffffffda RBX: 00007fbe741b5fa0 RCX: 00007fbe73f8ebe9
[  217.074860][T10246] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  217.074864][T10246] RBP: 00007fbe74011e19 R08: 0000000000000000 R09: 0000000000000000
[  217.074869][T10246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.074873][T10246] R13: 00007fbe741b6038 R14: 00007fbe741b5fa0 R15: 00007fffbadabe48
[  217.074881][T10246]  </TASK>
[  217.074883][T10246] 
[  217.117012][   T96] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  217.117274][T10246] Allocated by task 8613:
[  217.118928][   T96] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  217.120771][T10246]  kasan_save_track+0x3e/0x80
[  217.122379][   T96] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  217.124252][T10246]  __kasan_slab_alloc+0x6c/0x80
[  217.127604][   T96] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  217.127920][T10246]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  217.129637][   T96] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  217.131355][T10246]  xfrm_state_alloc+0x24/0x2f0
[  217.133934][   T96] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  217.134590][T10246]  __find_acq_core+0x8a7/0x1c00
[  217.136670][   T96] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  217.138010][T10246]  xfrm_find_acq+0x78/0xa0
[  217.138025][T10246]  xfrm_alloc_userspi+0x6b3/0xc90
[  217.138033][T10246]  xfrm_user_rcv_msg+0x7a3/0xab0
[  217.138039][T10246]  netlink_rcv_skb+0x208/0x470
[  217.138049][T10246]  xfrm_netlink_rcv+0x79/0x90
[  217.138055][T10246]  netlink_unicast+0x82f/0x9e0
[  217.138061][T10246]  netlink_sendmsg+0x805/0xb30
[  217.139464][   T96] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  217.141058][T10246]  __sock_sendmsg+0x21c/0x270
[  217.142825][   T96] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  217.144466][T10246]  ____sys_sendmsg+0x505/0x830
[  217.144480][T10246]  ___sys_sendmsg+0x21f/0x2a0
[  217.144490][T10246]  __x64_sys_sendmsg+0x19b/0x260
[  217.144499][T10246]  do_syscall_64+0xfa/0x3b0
[  217.144509][T10246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.144517][T10246] 
[  217.144519][T10246] Freed by task 96:
[  217.144525][T10246]  kasan_save_track+0x3e/0x80
[  217.144535][T10246]  kasan_save_free_info+0x46/0x50
[  217.144542][T10246]  __kasan_slab_free+0x5b/0x80
[  217.144551][T10246]  kmem_cache_free+0x18f/0x400
[  217.144585][T10246]  xfrm_state_gc_task+0x52d/0x6b0
[  217.144596][T10246]  process_scheduled_works+0xae1/0x17b0
[  217.144603][T10246]  worker_thread+0x8a0/0xda0
[  217.144610][T10246]  kthread+0x711/0x8a0
[  217.144618][T10246]  ret_from_fork+0x3fc/0x770
[  217.144626][T10246]  ret_from_fork_asm+0x1a/0x30
[  217.144636][T10246] 
[  217.144639][T10246] The buggy address belongs to the object at ffff888125df5200
[  217.144639][T10246]  which belongs to the cache xfrm_state of size 928
[  217.144646][T10246] The buggy address is located 196 bytes inside of
[  217.144646][T10246]  freed 928-byte region [ffff888125df5200, ffff888125df55a0)
[  217.144654][T10246] 
[  217.144658][T10246] The buggy address belongs to the physical page:
[  217.144664][T10246] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888125df5b00 pfn:0x125df4
[  217.144673][T10246] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  217.144680][T10246] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  217.144689][T10246] page_type: f5(slab)
[  217.144697][T10246] raw: 057ff00000000040 ffff888104f82780 dead000000000122 0000000000000000
[  217.144703][T10246] raw: ffff888125df5b00 00000000800e000a 00000000f5000000 0000000000000000
[  217.144710][T10246] head: 057ff00000000040 ffff888104f82780 dead000000000122 0000000000000000
[  217.144717][T10246] head: ffff888125df5b00 00000000800e000a 00000000f5000000 0000000000000000
[  217.144723][T10246] head: 057ff00000000002 ffffea0004977d01 00000000ffffffff 00000000ffffffff
[  217.144729][T10246] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  217.144733][T10246] page dumped because: kasan: bad access detected
[  217.144739][T10246] page_owner tracks the page as allocated
[  217.144742][T10246] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8044, tgid 8042 (syz.2.828), ts 145228108255, free_ts 134517882895
[  217.144756][T10246]  post_alloc_hook+0x240/0x2a0
[  217.149402][   T96] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  217.149728][T10246]  get_page_from_freelist+0x21e4/0x22c0
[  217.155532][   T96] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  217.156115][T10246]  __alloc_frozen_pages_noprof+0x181/0x370
[  217.158094][   T96] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  217.159447][T10246]  alloc_pages_mpol+0x232/0x4a0
[  217.161110][   T96] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  217.162757][T10246]  allocate_slab+0x8a/0x370
[  217.164513][   T96] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  217.166043][T10246]  ___slab_alloc+0xbeb/0x1410
[  217.166057][T10246]  kmem_cache_alloc_noprof+0x283/0x3c0
[  217.166066][T10246]  xfrm_state_alloc+0x24/0x2f0
[  217.166075][T10246]  xfrm_add_sa+0x17d1/0x4070
[  217.166081][T10246]  xfrm_user_rcv_msg+0x7a3/0xab0
[  217.166087][T10246]  netlink_rcv_skb+0x208/0x470
[  217.166095][T10246]  xfrm_netlink_rcv+0x79/0x90
[  217.166100][T10246]  netlink_unicast+0x82f/0x9e0
[  217.166107][T10246]  netlink_sendmsg+0x805/0xb30
[  217.166115][T10246]  __sock_sendmsg+0x21c/0x270
[  217.166122][T10246]  ____sys_sendmsg+0x505/0x830
[  217.166133][T10246] page last free pid 5295 tgid 5295 stack trace:
[  217.166138][T10246]  __free_frozen_pages+0xbc4/0xd30
[  217.166148][T10246]  __put_partials+0x156/0x1a0
[  217.166158][T10246]  put_cpu_partial+0x17c/0x250
[  217.166164][T10246]  __slab_free+0x2d5/0x3c0
[  217.166170][T10246]  qlist_free_all+0x97/0x140
[  217.166179][T10246]  kasan_quarantine_reduce+0x148/0x160
[  217.166187][T10246]  __kasan_slab_alloc+0x22/0x80
[  217.166196][T10246]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  217.166204][T10246]  getname_flags+0xb8/0x540
[  217.166211][T10246]  do_readlinkat+0xbc/0x500
[  217.166218][T10246]  __x64_sys_readlink+0x7f/0x90
[  217.166225][T10246]  do_syscall_64+0xfa/0x3b0
[  217.166234][T10246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.166243][T10246] 
[  217.166245][T10246] Memory state around the buggy address:
[  217.166250][T10246]  ffff888125df5180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  217.166256][T10246]  ffff888125df5200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  217.166261][T10246] >ffff888125df5280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  217.166265][T10246]                                            ^
[  217.166269][T10246]  ffff888125df5300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  217.166274][T10246]  ffff888125df5380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  217.166277][T10246] ==================================================================
[  217.166432][T10246] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  217.166442][T10246] CPU: 0 UID: 0 PID: 10246 Comm: syz.1.1746 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  217.166453][T10246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.166458][T10246] Call Trace:
[  217.166462][T10246]  <TASK>
[  217.166465][T10246]  dump_stack_lvl+0x99/0x250
[  217.166477][T10246]  ? __asan_memcpy+0x40/0x70
[  217.166486][T10246]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.166494][T10246]  ? __pfx__printk+0x10/0x10
[  217.166507][T10246]  vpanic+0x281/0x750
[  217.166516][T10246]  ? __pfx_vpanic+0x10/0x10
[  217.166524][T10246]  ? irqentry_exit+0x74/0x90
[  217.166535][T10246]  panic+0xb9/0xc0
[  217.166543][T10246]  ? __pfx_panic+0x10/0x10
[  217.166551][T10246]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  217.166584][T10246]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  217.166596][T10246]  ? xfrm_alloc_spi+0x570/0xf30
[  217.166607][T10246]  check_panic_on_warn+0x89/0xb0
[  217.166619][T10246]  ? xfrm_alloc_spi+0x570/0xf30
[  217.166629][T10246]  end_report+0x78/0x160
[  217.166639][T10246]  kasan_report+0x129/0x150
[  217.166649][T10246]  ? xfrm_alloc_spi+0x570/0xf30
[  217.166661][T10246]  xfrm_alloc_spi+0x570/0xf30
[  217.166671][T10246]  ? xfrm_alloc_spi+0x2a0/0xf30
[  217.166684][T10246]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  217.166694][T10246]  ? xfrm_find_acq+0x87/0xa0
[  217.166706][T10246]  xfrm_alloc_userspi+0x70b/0xc90
[  217.166715][T10246]  ? apparmor_capable+0x137/0x1b0
[  217.166724][T10246]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  217.166731][T10246]  ? __nla_parse+0x40/0x60
[  217.166742][T10246]  xfrm_user_rcv_msg+0x7a3/0xab0
[  217.166750][T10246]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  217.166761][T10246]  ? __pfx___mutex_trylock_common+0x10/0x10
[  217.166772][T10246]  ? rcu_is_watching+0x15/0xb0
[  217.166781][T10246]  ? trace_contention_end+0x39/0x120
[  217.166789][T10246]  ? __mutex_lock+0x335/0x1360
[  217.166799][T10246]  netlink_rcv_skb+0x208/0x470
[  217.166808][T10246]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  217.166815][T10246]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  217.166825][T10246]  ? netlink_deliver_tap+0x2e/0x1b0
[  217.166834][T10246]  ? netlink_deliver_tap+0x2e/0x1b0
[  217.166842][T10246]  xfrm_netlink_rcv+0x79/0x90
[  217.166849][T10246]  netlink_unicast+0x82f/0x9e0
[  217.166857][T10246]  ? __pfx_netlink_unicast+0x10/0x10
[  217.166865][T10246]  ? netlink_sendmsg+0x642/0xb30
[  217.166874][T10246]  ? skb_put+0x11b/0x210
[  217.166884][T10246]  netlink_sendmsg+0x805/0xb30
[  217.166894][T10246]  ? __pfx_netlink_sendmsg+0x10/0x10
[  217.166903][T10246]  ? aa_sock_msg_perm+0xf1/0x1d0
[  217.166913][T10246]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  217.166923][T10246]  ? __pfx_netlink_sendmsg+0x10/0x10
[  217.166932][T10246]  __sock_sendmsg+0x21c/0x270
[  217.166939][T10246]  ____sys_sendmsg+0x505/0x830
[  217.166950][T10246]  ? __pfx_____sys_sendmsg+0x10/0x10
[  217.166961][T10246]  ? import_iovec+0x74/0xa0
[  217.166969][T10246]  ___sys_sendmsg+0x21f/0x2a0
[  217.166979][T10246]  ? __pfx____sys_sendmsg+0x10/0x10
[  217.166993][T10246]  ? __fget_files+0x2a/0x420
[  217.167004][T10246]  ? __fget_files+0x3a0/0x420
[  217.167016][T10246]  __x64_sys_sendmsg+0x19b/0x260
[  217.167026][T10246]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  217.167038][T10246]  ? rcu_is_watching+0x15/0xb0
[  217.167045][T10246]  ? do_syscall_64+0xbe/0x3b0
[  217.167055][T10246]  do_syscall_64+0xfa/0x3b0
[  217.167063][T10246]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.167071][T10246]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.167078][T10246]  ? exc_page_fault+0x9f/0xf0
[  217.167086][T10246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.167093][T10246] RIP: 0033:0x7fbe73f8ebe9
[  217.167101][T10246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.167108][T10246] RSP: 002b:00007fbe74df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  217.167118][T10246] RAX: ffffffffffffffda RBX: 00007fbe741b5fa0 RCX: 00007fbe73f8ebe9
[  217.167124][T10246] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  217.167129][T10246] RBP: 00007fbe74011e19 R08: 0000000000000000 R09: 0000000000000000
[  217.167134][T10246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.167138][T10246] R13: 00007fbe741b6038 R14: 00007fbe741b5fa0 R15: 00007fffbadabe48
[  217.167146][T10246]  </TASK>
[  217.168761][T10246] Kernel Offset: disabled

VM DIAGNOSIS:
01:19:45  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001405 RDI=0000000000001406 RBP=00000000000003f8 RSP=ffffc900073a69f0
R8 =ffff888107770237 R9 =1ffff11020eee046 R10=dffffc0000000000 R11=ffffffff854e7220
R12=dffffc0000000000 R13=ffffffff99af1912 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e729c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbe74df66c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3dfee2 CR3=000000002fd7e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbe74187498 00007fbe74187470 XMM03=00007fbe741874a8 00007fbe741874a0
XMM04=00007fbe74ced100 00007fbe74187460 XMM05=00007fbe74187478 00007fbe741874c0
XMM06=00007fbe741874b8 00007fbe741874b0 XMM07=00007fbe741874a8 00007fbe741874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fbe74012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc900077c0000 RBX=1ffff110043c725a RCX=000000000000009d RDX=ffff888021e392d0
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900001e0c28 RSP=ffffc900001e0a80
R8 =ffff888021e396bf R9 =1ffff110043c72d7 R10=dffffc0000000000 R11=ffffed10043c72d8
R12=dffffc0000000000 R13=0000000000000fa0 R14=0000000000232800 R15=0000000000000001
RIP=ffffffff8697e4ab RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f76bbe91800 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005597b57a37e8 CR3=000000010e836000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
