last executing test programs:

14m58.061817031s ago: executing program 1 (id=366):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

14m58.061500316s ago: executing program 1 (id=367):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC], 0xff, 0x5a85, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
fallocate(r0, 0x0, 0x4, 0x5)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000280)="41206e0f00e29d34a96fb608721a71ec863f7ca0bb815eda0eba030bda0b67b95c7d1a5c240f3b6294f5235b647e10a4a548158b0c310e7de11dc30c424da2ecbb246277261eb83b1aafd0780b6c7b030c72dbd64433f0bfc2a90bc729e114e98079da7812d1890126ca7a732d07b91443e4e97b029a352b436467b9c6ac49e05f9a207e5bac878c1471cc9848ecde19c85296b90a337a0d51c1ba76e767270e33fff19bba77152ba196f864187bd8f200551729e33a0953cafdaf3bbdec46b80d9ed7e780d8aeafcb", 0xc9}, {&(0x7f0000006b40)="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", 0x330}], 0x2)

14m57.550209489s ago: executing program 1 (id=372):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000180)='.dead\x00', &(0x7f00000002c0)='\x00')

14m55.851634932s ago: executing program 1 (id=384):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r1, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20, 0x5}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r2)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)

14m55.29537578s ago: executing program 1 (id=389):
syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008fcc0920e80401a18e800102030109021b0001000010000904810001ffef9800090506"], 0x0)

14m54.291399731s ago: executing program 1 (id=391):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)

14m54.074469231s ago: executing program 32 (id=391):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)

13m48.683952514s ago: executing program 3 (id=1273):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x24, 0x24, 0xd27, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

13m48.305187712s ago: executing program 3 (id=1274):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
shutdown(r0, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3000c084)
sendmsg$kcm(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x4c8d3)

13m48.223446996s ago: executing program 3 (id=1275):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@default_permissions}]}})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020)

13m48.220806827s ago: executing program 3 (id=1276):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

13m48.158252227s ago: executing program 3 (id=1277):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x22, 0x7c, 0x0, @loopback}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

13m48.155905768s ago: executing program 3 (id=1278):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = dup2(r0, r1)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020)
write$vhost_msg_v2(r2, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0xffffffd9, 0x0, 0x0, 0x2}}, 0x48)

13m47.966937234s ago: executing program 33 (id=1278):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = dup2(r0, r1)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020)
write$vhost_msg_v2(r2, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0xffffffd9, 0x0, 0x0, 0x2}}, 0x48)

13m13.761700825s ago: executing program 2 (id=1666):
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x67, 0x1, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x6}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)

13m13.709954169s ago: executing program 2 (id=1668):
r0 = socket(0x2, 0xa, 0x300)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', 0x0})

13m13.651718815s ago: executing program 2 (id=1670):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f00000001c0)={[{@gid}]}, 0x1, 0x61f3, &(0x7f0000013940)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

13m13.26815721s ago: executing program 2 (id=1676):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000b00)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES32, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC, @ANYBLOB="ca5ec00d40bc9a442139516045e7e6dcd407cddd7a135914bd7a3296ca462d0d76f211c5402d582cf0bd91b1061504cd1168a65e76f7332f1540e5b40e78c74f2d20debe41993e86b2203b19b671dc97c7d0f7c8171a3d71b4aa0e414c4fa42f8fb1db5d380575b51f2a3bf875e77600c302eeadcb317fd5ac0ba7bd99e0ce002acf70df16da62626a1502b5b6ee97f40e", @ANYRES32, @ANYRES8=0x0], 0x1, 0x6ec, &(0x7f0000000400)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12dc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

13m12.707259961s ago: executing program 2 (id=1686):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb09001800000000000c0000ffffffff"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28)

13m12.391414396s ago: executing program 2 (id=1691):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3200c02, &(0x7f0000000140)=ANY=[], 0x3, 0xa9c, &(0x7f0000001340)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x0, 0x7, 0x4fe4, 0x2401})

13m12.252184477s ago: executing program 34 (id=1691):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3200c02, &(0x7f0000000140)=ANY=[], 0x3, 0xa9c, &(0x7f0000001340)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x0, 0x7, 0x4fe4, 0x2401})

7m7.417143952s ago: executing program 0 (id=6755):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1}, 0x48)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)

7m7.342753766s ago: executing program 0 (id=6756):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20)
setresuid(0xee01, 0xee00, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x3, 0x0, 0x40, 0x8}, 0x20)

7m7.342562466s ago: executing program 0 (id=6757):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000280)={0x5, 0x7, 0x9, 0x8, 0x7, 0x3})
ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0)

7m7.279794489s ago: executing program 0 (id=6759):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180), 0x1, 0x979b, &(0x7f0000009780)="$eJzs3QWcrWWhsP3ZsIFNhyCIlJSYpISBdCiipCghSEsKiIDSoYQKioAKCijd3d1Id3d3d3y/DRvU7QUv5/3Oe/BwXdfPPWtWzJp73f/nfpw1z7DWMgssMc/AwDgDb/fO6T86f4+7VlhyzEU2OGG3wTfus/Oijw67eOS3T8ada9jp3MNO5xkYGBg07H4GvX3Z4DmPP2GEgcEDQ//3j8YYdbQRxhgYGG3Y2WH3MzDb2yejH/jO7d4cLh7oFEO/3U5v/3urMYfeydBPllvx9XUHBgaG/NPXDx3XDP/2QKUtM/eCC/zD6l23EYZdPegf1711Ovjtf6PvPzAw+r4D7719DL3tSP/0tf+TDf2e40w1sNRdH8L3/l/XMnMvuPBw/kPX4ojDLptt6Boffg0aG34733mJtR4eNoWDhk3c4H9aLx/Gdv9/1TJzL7DIwHuv44FF59/8oTff2m8Onm9gYPD8AwODFxgYGLzgh+1R/z19qBtfVVVVfSjNPc/MQ5+zjzDczwND3vm5ln4uvPi1Ge8bGBi86NvPEwev+M5zwaqqqqqqqqr6z2zueWaeF57/j/N+z/+nOG27cXv+X1VVVVVVVfW/p4Xnnmfmoc/1h3v+P9H7Pf9/6pEjDnj7b//nmu3tr3rjw30QVVVVVVVVVfW+LbAwPv+f4v2e/196/BRX9Py/qqqqqqqq6n9Pi7/55ptb/tPr7A27eLp3rqfn/2c8eMfyH9qAq6qqqqqqquq/3BuPn3rmP17zfbKB4V7v/a2G/V5g0NFnX3XVhzbQ/4wG/fvvQ7b6sMf0/7ehzkMOnWJgYN2lPuyh1IfQ/5rXqq//J+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uLe4/j/u6//f8axK7/zXvCfnmbmm079x1e+9d7/gxdd+PGtP6Shfxh9VI//D6w5aGBgmO84aw4MDCw69+JLTjcwMHDqTTNPM/XAu9fNPvS6r4w34ltvEP/OfyYy/7h8x1tN+fbp0A1lYPx37+Pot+5/4Tf3G3HQcIP4p8Y98YAD1ljmxVmGP532vR/HCO9+NuYJj7zz37KMMNyNhrzHF79z/+88luGdh419uqFjn36jddaffsNNN/vCmuustPqqq6+67hwzzTrjLHPMMeus06+25tqrzvD2x/easyne+jjvB5mzMYafs8fn/uc5G/6xvdecTfH+c/bWPe5+yZCvvzNng/+Lczbv+8/ZFGsO+0bjzjXSwIpvzc2ggYFx5xtpYJOhZ2YcZWBg3PmH3Xaiobf96ngjDAzs+o8HOvSzUd7dBgdtNfQ2yyywxDxv76YGBv5x+o/e4/3sRx428rmGnc497HSet7/NOAP/2BQHz3n8CSMMnYt/mY4xRh1thDEGBkYbdnbY/QzM8fbJaKe9c7v3eJ/14Qb61sus7PT2v7cac2BgYPShn0y20hnbD536/4H3af+/+v//f/OafdC72+OgYf+G3eZtr7kXXPgf3+utaRg6dyMOu2y2oSb/zW9t/y/923inGDIwxfuM931eF+etaPta+9QJtvnvel0cGu9E7zPe93kd3/cc79L37fXw23f13zbe4fZ1i7z1ca4Psq8beP993Yh0B6tePunw+7pvvvcQ/2V3+c4cjTLcjd5rXzfR3pNvNfT+53r/fd0iQ8c+0r/s60YYGBh33nf2dUN3fAuMNLDr0DMzDT2z4EgDBw89M/NbZ0YdOHvomS+uvN7aqwy9YKF/3w6mG/Qvf6AJ62yB4dbZoH967IOG+/vOwW+fjr7/O+/h9B77zUHDHtb/cV9B2+047zPe93n/KZznoZetcsyQCf673n+Kxjvk/cf7Xu+X/Z7j3eWFM+76bx7vu+tspH+aroU+yDqb4l/X2dCHOOI/rYwP+nPYKnD7tz+f6N1723iLR979mWKk4e73//QzxULvv87GWXO4r9tx34FB7zc3C36QuZnk3/ZBW//z3HzQn7emm+rt60d8n7kZZY4Vpn1nbkb+L87Ngv/VuZlrYMR/nZvBA/MPDAxMPWz/sMAHmZuJ3n9uPuh2Mxrc/u3PV333ovl2PvTCd+Zm+Ln4P83NAv/VuZni3e1m6reum3KEgZFHHthkpY022mDGtz++c3amtz++/xqc74PM5Tj/PXM58eD3mst/bKpj3HfF/v+HNfhv+/R37n++/+pcDrw7lwNrDr9Y6j+1fv/nLn93+bvL313+7vJ3l7+49zj+/+7r/+85zld2G/bLjZGumHzCHT7s8X7IfaSP/w/z/Zfj/ztMOPkVIwy8e937Hp99+zb/kcdnZ3v7ZPQD37nd8McHeaDvfXx23zlm2+5/6Pjs/1XvrNUP8Hu49v/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/ce9x/H+Gd/4O4MEZF3tm2IHQkR7ddtnFPuzxfsh9pI//D/P9l+P/iy277aMjDLx73fse/3/7No7j//e8usAu/8nH/99Zqx3/r/9D+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uPc4/j/XO38HcMQRe232zt8DXDfuTqd+2OP9kPuoHv/v/f+9tf93l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5ixt2/H9guLe3/E7bBQbH//939x7+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/3fzxyz+y+SPWfy/lz9m8f9+/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8f5A/ZvFfMX/M4r9S/pjF/4f5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/j/LHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/j/PHLP4b5I9Z/DfMH7P4b5Q/ZvH/Sf6YxX/j/DGL/0/zxyz+m+SPWfw3zR+z+G+WP2bx/1n+mMX/5/ljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx/kT9m8f9l/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8f5U/ZvH/df6Yxf83+WMW/13zxyz+u+WPWfx/mz9m8f9d/pjFf/f8MYv/7/PHLP575I9Z/PfMH7P475U/ZvH/Q/6Yxf+P+WMW/z/lj1n8984fs/jvkz9m8f9z/pjF/y/5Yxb/ffPHLP775Y9Z/PfPH7P4/zV/zOL/t/wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4v/3/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH5P4DxrIH7P4D8ofs/iPkD9m8R8xf8ziPzh/zOI/Uv6YxX/k/DGL/yj5Yxb/IfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfw/lj9m8R8/f8ziP0H+mMX/4/ljFv8J88cs/hPlj1n8P5E/ZvGfOH/M4v/J/DGL/yT5Yxb/SfPHLP6T5Y9Z/CfPH7P4T5E/ZvH/VP6YxX/Kd/yHfEjj+g/N4j9V6x+z+E+dP2bxnyZ/zOI/bf6Yxf/T+WMW/+nyxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/KX/M4j9r/pjFf7b8MYv/7PljFv858scs/l/OH7P4fyV/zOL/1fwxi//X8scs/nPmj1n8v54/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMX/G/ljFv9v5o9Z/BfJH7P4fyt/zOK/aP6Yxf/b+WMW/+/kj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/+/mj1n8l8kfs/h/L3/M4v/9/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4/yB/zOK/Yv6YxX+l/DGL/w/zxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/H+WPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+ePWfw3yB+z+G+YP2bx3yh/zOL/k/wxi//G+WMW/5/mj1n8N8kfs/hvmj9m8d8sf8zi/7P8MYv/z/PHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/j/In/M4v/L/DGL/475Yxb/nfLHLP47549Z/HfJH7P4/yp/zOL/6/wxi/9v8scs/rvmj1n8d8sfs/j/Nn/M4v+7/DGL/+75Yxb/3+ePWfz3yB+z+O+ZP2bx3yt/zOL/h/wxi/8f88cs/n/KH7P4750/ZvHfJ3/M4v/n/DGL/1/yxyz+++aPWfz3yx+z+O+fP2bx/2v+mMX/b/ljFv8D8scs/gfmj1n8D/pX/wf+x8f1H5rF/+DWP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjE/63y//ck/oMuyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+Y9MF1r8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMS/7c+zf/fs/gPyh+z+I+QP2bxHzF/zOI/OH/M4j9S/pjFf+T8MYv/KPljFv8h+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/D+WP2bxHz9/zOI/Qf6Yxf/j+WMW/wnzxyz+E+WPWfw/kT9m8Z84f8zi/8n8MYv/JPljFv9J88cs/pPlj1n8J88fs/hPkT9m8f9U/pjFf8r8MYv/VPljFv+p88cs/tPkj1n8p80fs/h/On/M4j9d/pjF/zP5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfynzx+z+M+QPzbo/D1GGhgY+Mj7z5g/Zln/M+WPWfxnzh+z+M+SP2bx/1L+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfznzB+z+H89f8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/zfyxyz+38wfs/gvkj9m8f9W/pjFf9H8MYv/t/PHLP7fyR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP7fzR+z+C+TP2bx/17+mMX/+/ljFv9l88cs/svlj1n8l88fs/ivkD9m8f9B/pjFf8X8MYv/SvljFv8f5o9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/j/KH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/OH7P4b5A/ZvHfMH/M4r9R/pjF/yf5Yxb/jfPHLP4/zR+z+G+SP2bx3zR/zOK/Wf6Yxf9n+WMW/5/nj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx/0X+mMX/l/ljFv8d88cs/jvlj1n8d84fs/jvkj9m8f9V/pjF/9f5Yxb/3+SPWfx3zR+z+O+WP2bx/23+mMX/d/ljFv/d88cs/r/PH7P475E/ZvHfM3/M4r9X/pjF/w/5Yxb/P+aPWfz/lD9m8d87f8ziv0/+mMX/z/ljFv+/5I9Z/PfNH7P475c/ZvHfP3/M4v/X/DGL/9/yxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/3/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M39M4j/iQP6YxX9Q/pjFf4T8MYv/iPljFv/B+WMW/5Hyxyz+I+ePWfxHyR+z+A/JH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8zi/7H8MYv/+PljFv8J8scs/h/PH7P4T5g/ZvGfKH/M4v+J/DGL/8T5Yxb/T+aPWfwnyR+z+E+aP2bxnyx/zOI/ef6YxX+K/DGL/6fyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6Yxf/T+WMW/+nyxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/KX/M4j9r/pjFf7b8MYv/7PljFv858scs/l/OH7P4fyV/zOL/1fwxi//X8scs/nPmj1n8v54/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMX/G/ljFv9v5o9Z/BfJH7P4fyt/zOK/aP6Yxf/b+WMW/+/kj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/+/mj1n8l8kfs/h/L3/M4v/9/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4/yB/zOK/Yv6YxX+l/DGL/w/zxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/H+WPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+ePWfw3yB+z+G+YP2bx3yh/zOL/k/wxi//G+WMW/5/mj1n8N8kfs/hvmj9m8d8sf8zi/7P8MYv/z/PHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/j/In/M4v/L/DGL/475Yxb/nfLHLP47549Z/HfJH7P4/yp/zOL/6/wxi/9v8scs/rvmj1n8d8sfs/j/Nn/M4v+7/DGL/+75Yxb/3+ePWfz3yB+z+O+ZP2bx3yt/zOL/h/wxi/8f88cs/n/KH7P4750/ZvHfJ3/M4v/n/DGL/1/yxyz+++aPWfz3yx+z+O+fP2bx/2v+mMX/b/ljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf/v+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZPybxHzyQP2bxH/TB/Ef+fzau/9As/iO0/jGL/4j5Yxb/wfljFv+R8scs/iPnj1n8R8kfs/gPyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4v+x/DGL//j5Yxb/CfLHLP4fzx+z+E+YP2bxnyh/zOL/ifwxi//E+WMW/0/mj1n8J8kfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+n8scs/lPmj1n8p8ofs/hPnT9m8Z8mf8ziP23+mMX/0/ljFv/p8scs/p/JH7P4fzZ/zOL/ufwxi//n88cs/l/IH7P4fzF/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fyl/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5z5o9Z/L+eP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjF/xv5Yxb/b+aPWfwXyR+z+H8rf8ziv2j+mMX/2/ljFv/v5I9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv/v5o9Z/JfJH7P4fy9/zOL//fwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+P8gf8ziv2L+mMV/pfwxi/8P88cs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/x/lj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/x/nj1n8N8gfs/hvmD9m8d8of8zi/5P8MYv/xvljFv+f5o9Z/DfJH7P4b5o/ZvHfLH/M4v+z/DGL/8/zxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P4/yJ/zOL/y/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+P8qf8zi/+v8MYv/b/LHLP675o9Z/HfLH7P4/zZ/zOL/u/wxi//u+WMW/9/nj1n898gfs/jvmT9m8d8rf8zi/4f8MYv/H/PHLP5/yh+z+O+dP2bx3yd/zOL/5/wxi/9f8scs/vvmj1n898sfs/jvnz9m8f9r/pjF/2/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/7/ljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT8m8R9pIH/M4j8of8ziP0L+mMV/xPwxi//g/DGL/0j5Yxb/kfPHLP6j5I9Z/Ifkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bx/1j+mMV//Pwxi/8E+WMW/4/nj1n8J8wfs/hPlD9m8f9E/pjFf+L8MYv/J/PHLP6T5I9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjF/1P5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4v/p/DGL/3T5Yxb/z+SPWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lD9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/znzxyz+X88fs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOL/jfwxi/8388cs/ovkj1n8v5U/ZvFfNH/M4v/t/DGL/3dc/oM/6A0t/ou5/D9wFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8zi/938MYv/MvljFv/v5Y9Z/L+fP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/H+SPWfxXzB+z+K+UP2bx/2H+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL/o/wxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/4/wxi/8G+WMW/w3zxyz+G+WPWfx/kj9m8d84f8zi/9P8MYv/JvljFv9N88cs/pvlj1n8f5Y/ZvH/ef6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv9f5I9Z/H+ZP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/X+WPWfx/nT9m8f9N/pjFf9f8MYv/bvljFv/f5o9Z/H+XP2bx3z1/zOL/+/wxi/8e+WMW/z3zxyz+e+WPWfz/kD9m8f9j/pjF/0/5Yxb/vfPHLP775I9Z/P+cP2bx/0v+mMV/3/wxi/9++WMW//3zxyz+f80fs/j/LX/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+P89f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyT+Iw/kj1n8B+WPWfxHyB+z+I+YP2bxH5w/ZvEfKX/M4j9y/pjFf5T8MYv/kPwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP4fyx+z+I+fP2bxnyB/zOL/8fwxi/+E+WMW/4nyxyz+n8gfs/hPnD9m8f9k/pjFf5L8MYv/pPljFv/J8scs/pPnj1n8p8gfs/h/Kn/M4j9l/pjFf6r8MYv/1PljFv9p8scs/tPmj1n8P50/ZvGfLn/M4v+Z/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/5fyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/Z/6Yxf/r+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/L+RP2bx/2b+mMV/kfwxi/+38scs/ovmj1n8v50/ZvH/Tv6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvH/bv6YxX+Z/DGL//fyxyz+388fs/gvmz/2EfUfNJz1yMvlj31E/d/qn9f/8vljFv8V8scs/j/IH7P4r5g/ZvFfKX/M4v/D/DGL/8r5Y4POHzRsZj7a/qvkj1nW/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/Uf6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/cf6YxX+D/DGL/4b5Yxb/jfLHLP4/yR+z+G+cP2bx/2n+mMV/k/wxi/+m+WMW/83yxyz+P8sfs/j/PH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/8v8scs/r/MH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/r/LHLP6/zh+z+P8mf8ziv2v+mMV/t/wxi/9v88cs/r/LH7P4754/ZvH/ff6YxX+P/DGL/575Yxb/vfLHLP5/yB+z+P8xf8zi/6f8MYv/3vljFv998scs/n/OH7P4/yV/zOK/b/6YxX+//DGL//75Yxb/v+aPWfz/lj9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/P+eP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8u/4FR4TKL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj0n8RxnIH7P4D8ofs/iPkD9m8R8xf8ziPzh/zOI/Uv6YxX/k/DGL/yj5Yxb/IfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3HzH9aQfzln8R8vf8zi/7H8MYv/+PljFv8J8scs/h/PH7P4T5g/ZvGfKH/M4v+J/DGL/8T5Yxb/T+aPWfwnyR+z+E+aP2bxnyx/zOI/ef6YxX+K/DGL/6fyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6Yxf/T+WMW/+nyxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/KX/M4j9r/pjFf7b8MYv/7PljFv858scs/l/OH7P4fyV/zOL/1fwxi//X8scs/nPmj1n8v54/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMX/G/ljFv9v5o9Z/BfJH7P4fyt/zOK/aP6Yxf/b+WMW/+/kj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/+/mj1n8l8kfs/h/L3/M4v/9/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4/yB/zOK/Yv6YxX+l/DGL/w/zxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/H+WPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+ePWfw3yB+z+G+YP2bx3yh/zOL/k/wxi//G+WMW/5/mj1n8N8kfs/hvmj9m8d8sf8zi/7P8MYv/z/PHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tujf1uExX+HtDGL/y/yxyz+v8wfs/jvmD9m8d8pf8ziv/Pb/q+/+WGN6z80i/8urX/M4v+r/DGL/6/zxyz+v8kfs/jvmj9m8d8tf8zi/9v8MYv/7/LHLP67549Z/H+fP2bx3yN/zOK/Z/6YxX+v/DGL/x/yxyz+f8wfs/j/KX/M4r93/pjFf5/8MYv/n/PHLP5/yR+z+O+bP2bx3y9/zOK/f/6Yxf+v+WMW/7/lj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/v+ePWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6YxH/IQP6YxX9Q/pjFf4T8MYv/iPljFv/B+WMW/5Hyxyz+I+ePWfxHyR+z+A/JH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8zi/7H8MYv/+PljFv8J8scs/h/PH7P4T5g/ZvGfKH/M4v+J/DGL/8T5Yxb/T+aPWfwnyR+z+E+aP2bxnyx/zOI/ef6YxX+K/DGL/6fyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6Yxf/T+WMW/+nyxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/KX/M4j9r/pjFf7b8MYv/7PljFv858scs/l/OH7P4f+V9/ff6fz+u/9As/l9t/WMW/6/lj1n858wfs/h/PX/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/838scs/t/MH7P4L5I/ZvH/Vv6YxX/R/DGL/7fzxyz+38kfs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+380fs/gvkz9m8f9e/pjF//v5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Qf6YxX/F/DGL/0r5Yxb/H+aPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP4/yh+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/zh+z+G+QP2bx3zB/zOK/Uf6Yxf8n+WMW/43zxyz+P80fs/hvkj9m8d80f8ziv1n+mMX/Z/ljFv+f549Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9F/pjF/5f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/Vf6Yxf/X+WMW/9/kj1n8d80fs/jvlj9m8f9t/pjF/3f5Yxb/3fPHLP6/zx+z+O+RP2bx3zN/zOK/V/6Yxf8P+WMW/z/mj1n8/5Q/ZvHfO3/M4r9P/pjF/8/5Yxb/v+SPWfz3zR+z+O+XP2bx3z9/zOL/1/wxi//f8scs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/9/zxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PHzP4Dxo8MOSJ/DGD/9D1/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjEf9SB/DGL/6D8MYv/CPljFv8R88cs/oPzxyz+I+WPWfxHzh+z+I+SP2bxH5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMX/Y/ljFv/x88cs/hPkj1n8P54/ZvGfMH/M4j9R/pjF/xP5Yxb/ifPHLP6fzB+z+E+SP2bxnzR/zOI/Wf6YxX/y/DGL/xT5Yxb/T+WPWfynzB+z+E+VP2bxnzp/zOI/Tf6YxX/a/DGL/6fzxyz+0+WPWfw/kz9m8f9s/pjF/3P5Yxb/z8v8Z/yAt7P4f0Hm/0Gz+H8xf8ziP33+mMV/hoGBLT+sIf0nZ/GfsfWPWfxnyh+z+M+cP2bxnyV/zOL/pfwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+M+ZP2bx/3r+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/b+SPWfy/mT9m8V8kf8zi/638MYv/ovljFv9v549Z/L+TP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/L+bP2bxXyZ/zOL/vfwxi//388cs/svmj1n8l8sfs/gvnz9m8V8hf8zi/4P8MYv/ivljFv+V8scs/j/MH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n8f5Q/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8f5w/ZvHfIH/M4r9h/pjFf6P8MYv/T/LHLP4b549Z/H+aP2bx3yR/zOK/af6YxX+z/DGL/8/yxyz+P88fs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/i/wxi/8v88cs/jvmj1n8d8ofs/jvnD9m8d8lf8zi/6v8MYv/r/PHLP6/yR+z+O+aP2bx3y1/zOL/2/wxi//v8scs/rvnj1n8f58/ZvHfI3/M4r9n/pjFf6/8MYv/H/LHLP5/zB+z+P8pf8ziv3f+mMV/n/wxi/+f88cs/n/JH7P475s/ZvHfL3/M4r9//pjF/6/5Yxb/v+WPWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv+/549Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjEf7SB/DGL/6D8MYv/CPljFv8R88cs/oPzxyz+I+WPWfxHzh+z+I+SP2bxH5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMX/Y/ljFv/x88cs/hPkj1n8P54/ZvGfMH/M4j9R/pjF/xP5Yxb/ifPHLP6fzB+z+E+SP2bxnzR/zOI/Wf6YxX/y/DGL/xT5Yxb/T+WPWfynzB+z+E+VP2bxnzp/zOI/Tf6YxX/a/DGL/6fzxyz+0+WPWfw/kz9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9S/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n858wfs/h/PX/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/838scs/t/MH7P4L5I/ZvH/Vv6YxX/R/DGL/7fzxyz+38kfs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+380fs/gvkz9m8f9e/pjF//v5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Qf6YxX/F/DGL/0r5Yxb/H+aPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP4/yh+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/zh+z+G+QP2bx3zB/zOK/Uf6Yxf8n+WMW/43zxyz+P80fs/hvkj9m8d80f8ziv1n+mMX/Z/ljFv+f549Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9F/pjF/5f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/Vf6Yxf/X+WMW/9/kj1n8d80fs/jvlj9m8f9t/pjF/3f5Yxb/3fPHLP6/zx+z+O+RP2bx3zN/zOK/V/6Yxf8P+WMW/z/mj1n8/5Q/ZvHfO3/M4r9P/pjF/8/5Yxb/v+SPWfz3zR+z+O+XP2bx3z9/zOL/1/wxi//f8scs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/9/zxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/TOI/+kD+mMV/UP6YxX+E/DGL/4j5Yxb/wfljFv+R8scs/iPnj1n8R8kfs/gPyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4v+x/DGL//j5Yxb/CfLHLP4fzx+z+E+YP2bxnyh/zOL/ifwxi//E+WMW/0/mj1n8J8kfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+n8scs/lPmj1n8p8ofs/hPnT9m8Z8mf8ziP23+mMX/0/ljFv/p8scs/p/JH7P4fzZ/zOL/ufwxi//n88cs/l/IH7P4fzF/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fyl/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5fzh+z+M83JH/K4v/V1j9m8f9a/pjFf878MYv/1/PHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/h/I3/M4v/N/DGL/yL5Yxb/b+WPWfwXzR+z+H87f8zi/538MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8zi/938MYv/MvljFv/v5Y9Z/L+fP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/H+SPWfxXzB+z+K+UP2bx/2H+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL/o/wxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/4/wxi/8G+WMW/w3zxyz+G+WPWfx/kj9m8d84f8zi/9P8MYv/JvljFv9N88cs/pvlj1n8f5Y/ZvH/ef6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv9f5I9Z/H+ZP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/X+WPWfx/nT9m8f9N/thHzv+fkP/Zf9f8sY+c/3us/93yxyz+v80fs/j/Ln/M4r97/pjF//f5Yxb/PfLHLP575o9Z/PfKH7P4/yF/zOL/x/wxi/+f8scs/nvnj1n898kfs/j/OX/M4v+X/DGL/775Yxb//fLHLP77549Z/P+aP2bx/1v+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf+wd/4EhAwMfZf/T88cs6/+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8f97/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD/m8E/+vXL4D4z+aFsBZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5YxL/MQbyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5Y9Z/MfPH7P4T5A/ZvH/eP6YxX/C/DGL/0T5Yxb/T+SPWfwnzh+z+H8yf8ziP0n+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfw/lT9m8Z8yf8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+n84fs/hPlz9m8f9M/pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/6fPHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/0v5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvGfM3/M4v/1/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/t/IH7P4fzN/zOK/SP6Yxf9b+WMW/0Xzxyz+384fs/h/J3/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/h/N3/M4r9M/pjF/3v5Yxb/7+ePWfyXzR+z+C+XP2bxXz5/zOK/Qv6Yxf8H+WMW/xXzxyz+K+WPWfx/mD9m8V85f8ziv4rR/wM8YIv/qkb/D5DFf7X8MYv/6vljFv818scs/mvmj1n8f5Q/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8f5w/ZvHfIH/M4r9h/pjFf6P8MYv/T/LHLP4b549Z/H+aP2bx3yR/zOK/af6YxX+z/DGL/8/yxyz+P88fs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/i/wxi/8v88cs/jvmj1n8d8ofs/jvnD9m8d8lf8zi/6v8MYv/r/PHLP6/yR+z+O+aP2bx3y1/zOL/2/wxi//v8scs/rvnj1n8f58/ZvHfI3/M4r9n/pjFf6/8MYv/H/LHLP5/zB+z+P8pf8ziv3f+mMV/n/wxi/+f88cs/n/JH7P475s/ZvHfL3/M4r9//pjF/6/5Yxb/v+WPWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv+/549Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/sI+o/zXCXjvFg/thH1P+t/nn9P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH5P4jzmQP2bxH5Q/ZvEfIX/M4j9i/pjFf3D+mMV/pPwxi//I+WMW/1Hyxyz+Q/LHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/h/LH/M4j9+/pjFf4L8MYv/x/PHLP4T5o9Z/CfKH7P4fyJ/zOI/cf6Yxf+T+WMW/0nyxyz+k+aPWfwnyx+z+E+eP2bxnyJ/zOL/qfwxi/+U+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bx/3T+mMV/uvwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/l/KH7P4z5o/ZvGfLX/M4j97/ti/+A+7bJwPeUz/v3oP/znyxyzr/8v5Yxb/r+SPWfy/mj9m8f9a/pjFf878MYv/1/PHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/h/I3/M4v/N/DGL/yL5Yxb/b+WPWfwXzR+z+H87f8zi/538MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8zi/938MYv/MvljFv/v5Y9Z/L+fP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/H+SPWfxXzB+z+K+UP2bx/2H+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL/o/wxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/4/wxi/8G+WMW/w3zxyz+G+WPWfx/kj9m8d84f8zi/9P8MYv/JvljFv9N88cs/pvlj1n8f5Y/ZvH/ef6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv9f5I9Z/H+ZP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/X+WPWfx/nT9m8f9N/pjFf9f8MYv/bvljH1X/IcP5/zZ/7KPqPzCc/+/yxyz+u+ePWfx/nz9m8d8jf8ziv2f+mMV/r/wxi/8f8scs/n/MH7P4/yl/zOK/d/6YxX+f/DGL/5/zxyz+f8kfs/jvmz9m8d8vf8ziv3/+mMX/r/ljFv+/5Y9Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/7/nj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/+Dw/lv9D4/rPzSL/0Otf8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT8m8R9rIH/M4j8of8ziP0L+mMV/xPwxi//g/DGL/0j5Yxb/kfPHLP6j5I9Z/Ifkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bx/1j+mMV//Pwxi/8E+WMW/4/nj1n8J8wfs/hPlD9m8f9E/pjFf+L8MYv/J/PHLP6T5I9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjF/1P5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4v/p/DGL/3T5Yxb/z+SPWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lD9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/znzxyz+X1f7rzj6e11j8Z9L7f/eWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4fyN/zOL/zfwxi/8i+WMW/2/lj1n8F80fs/h/O3/M4v+d/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4v/d/DGL/zL5Yxb/7+WPWfy/nz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/x/kj1n8V8wfs/ivlD9m8f9h/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi/6P8MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/+P8MYv/BvljFv8N88cs/hvlj1n8f5I/ZvHfOH/M4v/T/DGL/yb5Yxb/TfPHLP6b5Y9Z/H+WP2bx/3n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/X+SPWfx/mT9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/1/lj1n8f50/ZvH/Tf6YxX/X/DGL/275Yxb/3+aPWfx/lz9m8d89f8zi//v8MYv/HvljFv8988cs/nvlj1n8/5A/ZvH/Y/6Yxf9P+WMW/73zxyz+++SPWfz/nD9m8f9L/pjFf9/8MYv/fvljFv/988cs/n/NH7P4/y1/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/j/PX/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388ck/mMP5I9Z/Aflj1n8R8gfs/iPmD9m8R+cP2bxHyl/zOI/cv6YxX+U/DGL/5D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+H8sfs/iPnz9m8Z8gf8zi//H8MYv/hPljFv+J8scs/p/IH7P4T5w/ZvH/ZP6YxX+S/DGL/6T/Hzt3H+51Xd9x/Mc9Wc4+7brUa7bh0JhrMxIZjVqIiuLx5pSJZt6jHm6SG7mRAFNgo5U6Nl3qZsEmFo45W7XE4ea6W9GwrNkasbXKKa6FMeZgkTlj14FzCM7enmvny75fl+/H4w/O+f2O71/K83r5+3lxXekfytL/5/QPZek/TP9Qlv5H6x/K0v/n9Q9l6T9c/1CW/sfoH8rS/1j9Q1n6v0b/UJb+I/QPZen/C/qHsvQ/Tv9Qlv6/qH8oS//X6h/K0v+X9A9l6f/L+oey9D9e/1CW/q/TP5Sl/0j9Q1n6v17/UJb+J+gfytJ/lP6hLP1P1D+Upf9o/UNZ+v+K/qEs/cfoH8rS/w36h7L0/1X9Q1n6j9U/lKX/G/UPZen/Jv1DWfr/mv6hLP3frH8oS/9x+oey9D9J/1CW/uP1D2Xpf7L+oSz9T9E/lKX/qfqHsvSfoH8oS//T9A9l6X+6/qEs/SfqH8rS/wz9Q1n6t+kfytL/TP1DWfqfpX8oS/+z9Q9l6X+O/qEs/dv1D2Xp/xb9Q1n6v1X/UJb+5+ofytL/bfqHsvQ/T/9Qlv6T9A9l6X++/qEs/S/QP5Sl/9v1D2Xpf6H+oSz936F/KEv/i/QPZel/sf6hLP0v0T+Upf+l+oey9L9M/1CW/pfrH8rS/wr9Q1n6T9Y/lKX/lfqHsvS/Sv9Qlv5X6x/K0r9D/1CW/lP0D2XpP1X/UJb+0/QPZek/Xf9Qlv7v1D+Upf81+oey9J+hfyhL/5n6h7L0n6V/KEv/2fqHsvS/Vv9Qlv5z9A9l6T9X/1CW/vP0D2XpP1//UJb+1+kfytJ/gf6hLP3fpX8oS/+F+oey9F+kfyhL/8X6h7L0v17/UJb+79Y/lKX/DfqHsvS/Uf9Qlv5L9A9l6b9U/1CW/sv0D2Xp/+v6h7L0/w39Q1n6L9c/lKX/e/QPZen/m/qHsvR/r/6hLP3fp38oS/+b9A9l6X+z/qEs/W/RP5Sl/2/pH8rSf4X+oSz9f1v/UJb+v6N/KEv/W/UPZel/m/6hLP1/V/9Qlv7v1z+Upf/t+oey9L9D/1CW/nfqH8rS//f0D2Xp//v6h7L0v0v/UJb+H9A/lKX/B/UPZem/Uv9Qlv6r9A9l6f8H+oey9P9D/UNZ+t+tfyhL/9X6h7L0v0f/UJb+H9I/lKX/h/UPZem/Rv9Qlv736h/K0v+P9A9l6b9W/1CW/n+sfyhL//v0D2Xp/yf6h7L0v1//UJb+H9E/lKX/n+ofytL/o/qHsvT/mP6hLP0/rn8oS/8/0z+Upf8n9A9l6f+A/qEs/dfpH8rS/0H9Q1n6/7n+oSz91+sfytL/If1DWfr/hf6hLP3/Uv9Qlv4P6x/K0v+v9A9l6f9J/UNZ+n9K/1CW/p/WP5Sl/2f0D2Xp/1n9Q1n6/7X+oSz9P6d/KEv/z+sfytJ/g/6hLP2/oH8oS/+/0T+Upf9G/UNZ+j+ifyhL/y/qH8rS/0v6h7L0f1T/UJb+X9Y/lKX/V/QPZen/t/qHsvR/TP9Qlv5f1T+Upf/f6R/K0v9r+oey9P97/UNZ+m/SP5Sl/9f1D2Xpv1n/UJb+/6B/KEv/f9Q/lKX/N/QPZen/T/qHsvT/pv6hLP2/pX8oS/9v6x/K0v9x/UNZ+v+z/qEs/Z/QP5Sl/5P6h7L036J/KEv/p/QPZen/L/qHsvT/jv6hLP3/Vf9Qlv7f1T+Upf9W/UNZ+j+tfyhL/+/pH8rSf5v+oSz9/03/UJb+2/UPZen/7/qHsvR/Rv9Qlv7/oX8oS/8d+oey9N+pfyhL///UP5Sl//f1D2Xpv0v/UJb+P9A/lKX/s/qHsvT/of6hLP2f0z+Upf9/6R/K0v95/UNZ+v9I/1CW/rv1DyXp/8qW/qEs/fvpH8rSv7/+oSz9B+gfytJ/oP6hLP0H6R/K0n+w/qEs/YfoH8rSf6j+oSz9X6Z/KEv/Q/QPZen/cv1DWfq/Qv9Qlv6H6h/K0v+n9A9l6X+Y/qGXXH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/b+YtWnzN5BkzOub6xje+8c2+b17sfzMBAAD/1378of/F/jsBAAAAAAAAAAAAAAAAAACAvJr4vxN7sf8ZAQAAAAAAAAAAAADgJ11b+8nbBvQ74KkB+z/42Uc79nwdvevCaWvWPFi6v3b9+KzgJfvv/2D37t27Vz0zbkLXwyGtVqvzf+2VXY+H9jzufP2lw1YeufdRGf+5Ox+/bNKhZ89dd9vAr6+6pf3pQXueHdS6Ysr0GR2v799qlVMHtRZ2PjihX6tVTh/UurXzwajOBxMHtdZ2Pjhxz4OXtT7d+eB1V82ecXXnE2dU/j2Dl4q29qWtAQcstnXAvw323//SYU9M6/7ay0t2v9rAVtf+h6/74hE9ftbtBfbf/frl5J777/M/IPCC+rb/Zzd3f+3lJf/H+/+HNu5aHP3shfff/frlFPuH+gSf/w/YaM/P/T0+/x8dvOS++5OGbry9c/9t59/36q6nBv5vPv//+PXLqT333/+Az/+dn+MndH/+H9JqldMO8rcDUmlrX7att/f/3vc/8Gd63PTbf//3fHnLKzr3f+9zreVdTw3q4/4n9Pb+f1OPv1egb9raV+/u8f7fh/23RgQvuW//W9cduufz/5b7rzp8v5/1Zf+n9dz/yPkzrx05b9Hi46fPnDy1Y2rHrLGjxpwweuzYMWNG7vlEsPfXg/xNgSQO7v2/dUiPm36tVse++w333TKhc//bH1r+4a6nhvZx/6f3+v5/tPd/CA3v3xo8uLVw8vz5c0/Y+2v3w1F7f937lwX778N//x9zXNdf1v1nhv1arSP33Y+4bOyQzv1fP6es73pqcB/3P7HX/Y8/8M8qgb45yPf/q3vcHLD/k7beuKBz/8d+/1Vbup7q63//n9Hr/u/2/g8Ho629VeubaOf+Txyy7Mxq16XNn/9BfZrY/7Adt+6sdl3OtH+oTxP7n7TiTVdWuy5n2T/Up4n9Pzjz8hXVrsvZ9g/1aWL/z//0zqOqXZdz7B/q08T+H/vOU2uqXZd2+4f6NLH/D9zVfmK16/IW+4f6NLH/46/7wbhq1+Wt9g/1aWL/U15+3tpq1+Vc+4f6NLH/M3efcni16/I2+4f6NLH/fsu+u7TadTnP/qE+Tez/yckrZle7LpPsH+rTxP7XDhvxbLXrcr79Q32a2P/yp98wsdp1ucD+oT5N7P8rd6x8rNp1ebv9Q32a2P/HL3nVymrX5UL7h/o0sf8fDn/okGrX5R32D/VpYv+bNq19oNp1ucj+oT5N7H/V2gHDq12Xi+0f6tPE/pecMfXRatflEvuH+jSx/9FjvnRxtetyqf1DfZrY/5Gf/eZT1a7LZfYP9Wli/+c9vGBetetyuf1DfZrY/4KjPvajatflCvuH+jSx/zd3HDWt2nWZbP9Qnyb2X247ZFO163Kl/UN9mtj/RdtXj692Xa6yf6hPE/tff9jnP1rtulxt/1CfJva/Y86ssdWuS4f9Q32a2P+337PkvdWuyxT7h/o0sf/bn/taqXZdpto/1KeJ/W8dddEl1a7LNPuH+jSx/9VnP/NItesy3f6hPk3sf8X6x+dXuy7vtH+oTxP737DhrCeqXZdr7B/q08T+jx0x8tBq12WG/UN9mtj/7AuXf7DadZlp/1CfJvZ/6v13vKbadZll/1CfJvY/9KvjPlHtusy2f6hPE/v/1Lj3fbLadbnW/qE+Tex/5/hjjqt2XebYP9Snif1vfmDUndWuy1z7h/o0sf/3P3JXxesyz/6hPk3sf85rn99e7brMt3+oTxP7f+OkCxZVuy7X2T/Up4n9H373xC9Uuy4L7B/q08T+L/3W986tdl3eZf9Qnyb2f8wRV7662nVZaP9Qnyb2P236xpurXZdF9g/1aWL/E1ZtHl3tuiy2f6hPE/s/7Ml591S7LtfbP9Snif1vG3DEOdWuy7vtH+rTxP7vveHhb1S7LjfYP9Snif3ffNNHOqpdlxvtH+rTxP4/s2vwjmrXZYn9AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDf7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqI3g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKAAA//9ECubb")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000340)={0x1060, 0x2000})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x20)

7m6.860773733s ago: executing program 0 (id=6771):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x5, 0x4)

7m6.479044542s ago: executing program 0 (id=6777):
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="24010000160001"], 0x124}}, 0x0)

7m6.403958939s ago: executing program 35 (id=6777):
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="24010000160001"], 0x124}}, 0x0)

2m37.332651238s ago: executing program 6 (id=10586):
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket(0x18, 0x800, 0x0)
connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vxcan1\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

2m36.520430892s ago: executing program 6 (id=10590):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xff)

2m36.388774848s ago: executing program 6 (id=10596):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
write$char_usb(r0, &(0x7f00000008c0)='-0', 0x2)

2m36.310746607s ago: executing program 6 (id=10599):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80)
getdents64(r0, 0x0, 0x0)

2m36.200003092s ago: executing program 6 (id=10601):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x1, 0x1, 0x80000000})

2m34.467389823s ago: executing program 6 (id=10607):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup, 0x10, 0x1, 0xf00000, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r3, r4, 0x22, 0x0, @val=@netkit={@void, @value, @void, @void, r5}}, 0x1c)
setuid(0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000280))
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r1, <r9=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00006a2000/0x1000)=nil, 0x1000, 0x8})
ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r9})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000080))

2m34.351723843s ago: executing program 36 (id=10607):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup, 0x10, 0x1, 0xf00000, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r3, r4, 0x22, 0x0, @val=@netkit={@void, @value, @void, @void, r5}}, 0x1c)
setuid(0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000280))
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r1, <r9=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00006a2000/0x1000)=nil, 0x1000, 0x8})
ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r9})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000080))

5.805807935s ago: executing program 7 (id=12203):
r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x7, 0x27fe, 0x2800, 0x2, 0xbb6, 0x4, 0x2c, {0x8, 0xfffffeff}, 0xd0, 0x9}})

5.805590335s ago: executing program 7 (id=12204):
syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x16, 0x24, 0xc1, 0x8, 0x45e, 0x775, 0xdd6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x8, 0xe0, 0x42, [{{0x9, 0x4, 0x8e, 0x0, 0x0, 0xff, 0xf2, 0x1e, 0x6}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0})

3.213980781s ago: executing program 7 (id=12214):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000700))

3.08581565s ago: executing program 7 (id=12215):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x14, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000812)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f0000050007"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, 0x0, 0x8000)

3.011446766s ago: executing program 7 (id=12217):
r0 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0)

2.017506016s ago: executing program 7 (id=12225):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcc, 0xbd, 0xf, 0x8, 0xbc3, 0x1, 0x8167, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x94, 0xfc, 0x12}}]}}]}}, 0x0)

2.017342735s ago: executing program 5 (id=12226):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000100)={[{@delalloc}, {@test_dummy_encryption_v1}]}, 0x3, 0x530, &(0x7f0000000740)="$eJzs3E1sHNUdAPD/rO3YzkfrpmnapGnrNK1qJaodO2kTqZXaIJA4gIQICDhathOFODGKHYlEATYCJdxQJMQVceTKgStwiRAnJK5BnJBQpAhySYKEWDTemd31enf9uet8/H7Set97szPvvX0z4/exuwE8sgbTP0k5fCMifh0RhfoXDJaf7t6+NHHv9qWJKJZKx79P5ne7k8Yz2WFiSxYZKkQU3kqqG2rMXrh4enx6eupcFh+ZO/PKyOyFi/881ZelHD16+NDokX+P/Svf5T/LrlSD/NJ63dn9+syeXU++dO3pie48Pc+tth5rlOTZD8bg4qL8UH76+zpldr/YVhNOujewIKxIev7XNldXtGq8YgdKBHRKqVQq9TbfXCzVu7woBXhgJdFsy9vZ/QF4OOX/6NPxb/5o1BHY1J7ux4a7daw8AErrfTd7RPxlPjGfB+mpG9+up8GIeLH44/vpI1Y4D3F1oE2FAgAeap8ey3uCdf2/gfLKyE/nr/8vff5VtoaSdjl+ExHbI+K3EbEjIn4XETsj4vcR8Ye643elY8gW+Q/WxSv5VxahCjfXqaoNpf2//2ZrW9X+34ICDHRlsW3pcLicNnUwe0+Goqf3xKnpqdEWeXz2+FfvLEiomXCr7f+ljzT/vC+YleNmd90E3eT43PiaKl3j1uWI3d319U+6I5LKSkASEbsiYvcKjlvbNT21/8M9lUjPwtctXf/5wUepwZJetFyqWKbSBxH/KLd/8Y0F7V/NMVmwPnlm/OTUyamzY5X1yZG+mJ46OJKeBQcb5vHFl1eeaZb/kvX/+Nv6XZ448snx7Mpau7T9N9ec/5Gv31brP5BEJJX12tmWh+tplHjl66tNxzSrPf83Jc/Nh/Nx6avjc3PnRiM2JU8tTh+r7pvH0+colus/tK/x9b892yd9J/4YEelJ/KeI+HOUR4hp2fdGxF8jYl+LN+Xzx/728urr315p/Sfr7n/lll/Q/tX1+maBJFsbbLCp6/TeG/cqN4//r7D+afsfng8NZSmN73/JgltEs5Lm/+3SlJ/X5R0EAACA+18hIrbWzCVtjUJheLg8B7QjNhemZ2bnDpyYOX92Mt0WMRA9hXymqzwf3JPk858DNfGxuvihbN743a7++fjwxMz05IbWHNgSvbE1ksJwxAtdNdd/6rulp5j72l9CoK0Wr6O1/Ljf/ufbWRigo1qto6ed+J3XOlgYoKOW/zma66+1tSBAx9Vc/82+4V9s/bkv4EHl91qAqqV/6Mc9Ax58pSbXcv8GlAXovBX9Lz/gRwDhYdIdz1bChQ0tCdBpxvLwSFrye/2tAn0R0fI1pd5qypvfVDf1xeIXR1850N/k2/tdsbqi9jfIa0MCac9qQ3LvX81e+a8pNH1NFFZ2wN4oB7obtOnoe1lmyzjOiTW+G8Vzsyd3rsPJX/e7Etln5de7BT9aj+t0VYHO34sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa4ZcAAAD//wTT2XQ=")

1.911621732s ago: executing program 5 (id=12227):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})

1.09060548s ago: executing program 5 (id=12228):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x189842, 0x0)
setns(r0, 0x20000)

1.090400863s ago: executing program 5 (id=12229):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20002000})
r2 = socket$netlink(0x10, 0x3, 0x4)
epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x9450)
epoll_wait(r1, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)

310.330733ms ago: executing program 5 (id=12231):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0)

259.393468ms ago: executing program 5 (id=12233):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
syz_usb_ep_write(r0, 0x8d, 0x0, 0x0)

192.854783ms ago: executing program 4 (id=12234):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
read(r0, &(0x7f0000000280)=""/149, 0x95)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@userptr={0x5f65, 0xb, 0x4, 0x2, 0x9, {}, {0x1, 0x1, 0x6, 0x9, 0xff, 0x7, "22ec6c62"}, 0x7fff, 0x2, {0x0}, 0x2})

192.441684ms ago: executing program 4 (id=12235):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000034000)=""/102392, 0x18ff8)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f00000004c0)=0x79, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0)

75.042618ms ago: executing program 4 (id=12236):
r0 = socket(0x11, 0x3, 0x8)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x1, 0x8000, 0x3, 0xb, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x67, 0x1, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}})

74.804579ms ago: executing program 4 (id=12237):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @empty}}}], 0x20}, 0x4000)

329.314µs ago: executing program 4 (id=12238):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
r0 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000008400000005000000"], 0x90, 0x84}, 0x8000)

0s ago: executing program 4 (id=12239):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc01, 0x3, 0x1b8, 0x100, 0x5002004a, 0x0, 0x100, 0x0, 0x190, 0x3c8, 0x3c8, 0x190, 0x3c8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010101, 0x0, 0xffffffff, 'veth0_macvtap\x00', 'macvtap0\x00', {}, {0xff}, 0x1, 0x2, 0x3a}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'ipvlan0\x00', 'pimreg1\x00', {}, {0x4d46f109675848}, 0x36, 0x2, 0x1}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x218)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

kernel console output (not intermixed with test programs):

][T28977] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  789.741839][T28986] loop6: detected capacity change from 0 to 32768
[  790.239994][T29002] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9835'.
[  790.814080][T29028] netlink: 'syz.6.9847': attribute type 10 has an invalid length.
[  790.817347][T29028] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9847'.
[  790.852808][T29028] dummy0: entered promiscuous mode
[  790.898764][T29028] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  792.172638][   T96] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  792.332491][   T96] usb 7-1: Using ep0 maxpacket: 32
[  792.342628][   T96] usb 7-1: config 0 has an invalid interface number: 126 but max is 0
[  792.348397][   T96] usb 7-1: config 0 has no interface number 0
[  792.357933][   T96] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  792.365190][   T96] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  792.380085][   T96] usb 7-1: config 0 interface 126 has no altsetting 0
[  792.387569][   T96] usb 7-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  792.391079][   T96] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.403870][   T96] usb 7-1: Product: syz
[  792.410928][   T96] usb 7-1: Manufacturer: syz
[  792.412740][   T96] usb 7-1: SerialNumber: syz
[  792.428004][   T96] usb 7-1: config 0 descriptor??
[  792.435471][T29055] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  792.439251][T29055] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  793.019796][   T96] ir_usb 7-1:0.126: IR Dongle converter detected
[  793.232321][   T96] usb 7-1: IR Dongle converter now attached to ttyUSB0
[  793.451037][   T96] usb 7-1: USB disconnect, device number 43
[  793.459353][   T96] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  793.462843][   T96] ir_usb 7-1:0.126: device disconnected
[  793.941757][T29134] ip6tnl5: entered allmulticast mode
[  794.573249][T29170] overlayfs: failed to clone upperpath
[  794.894588][T29174] loop6: detected capacity change from 0 to 40427
[  794.912884][T29174] F2FS-fs (loop6): invalid crc value
[  794.995035][T29174] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  794.999997][T29174] F2FS-fs (loop6): Start checkpoint disabled!
[  795.012316][T29174] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  795.041541][ T6066] kworker/u10:12: attempt to access beyond end of device
[  795.041541][ T6066] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  795.055783][ T6066] CPU: 1 UID: 0 PID: 6066 Comm: kworker/u10:12 Not tainted syzkaller #0 PREEMPT(full) 
[  795.055806][ T6066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  795.055816][ T6066] Workqueue: writeback wb_workfn (flush-7:6)
[  795.055840][ T6066] Call Trace:
[  795.055846][ T6066]  <TASK>
[  795.055852][ T6066]  dump_stack_lvl+0x189/0x250
[  795.055874][ T6066]  ? __pfx_dump_stack_lvl+0x10/0x10
[  795.055890][ T6066]  ? __pfx_queue_work_on+0x10/0x10
[  795.055904][ T6066]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  795.055924][ T6066]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  795.055953][ T6066]  f2fs_handle_critical_error+0x37c/0x540
[  795.055981][ T6066]  f2fs_write_end_io+0x886/0xb60
[  795.056009][ T6066]  __submit_merged_bio+0x27a/0x6a0
[  795.056035][ T6066]  __submit_merged_write_cond+0x255/0x530
[  795.056061][ T6066]  f2fs_write_data_pages+0x261d/0x3000
[  795.056103][ T6066]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  795.056127][ T6066]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  795.056171][ T6066]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  795.056192][ T6066]  ? look_up_lock_class+0x74/0x170
[  795.056215][ T6066]  ? trace_f2fs_writepages+0x7f/0x200
[  795.056236][ T6066]  ? f2fs_write_node_pages+0x478/0x6e0
[  795.056275][ T6066]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  795.056290][ T6066]  do_writepages+0x32e/0x550
[  795.056314][ T6066]  ? reacquire_held_locks+0x127/0x1d0
[  795.056328][ T6066]  ? writeback_sb_inodes+0x384/0x1010
[  795.056353][ T6066]  __writeback_single_inode+0x145/0xff0
[  795.056372][ T6066]  ? do_raw_spin_unlock+0x4d/0x240
[  795.056394][ T6066]  writeback_sb_inodes+0x6c7/0x1010
[  795.056411][ T6066]  ? lockdep_hardirqs_on+0x9c/0x150
[  795.056446][ T6066]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  795.056499][ T6066]  ? rcu_is_watching+0x15/0xb0
[  795.056523][ T6066]  wb_writeback+0x43b/0xaf0
[  795.056548][ T6066]  ? queue_io+0x341/0x590
[  795.056568][ T6066]  ? __pfx_wb_writeback+0x10/0x10
[  795.056593][ T6066]  ? _raw_spin_unlock_irq+0x23/0x50
[  795.056624][ T6066]  wb_workfn+0x409/0xef0
[  795.056651][ T6066]  ? __pfx_wb_workfn+0x10/0x10
[  795.056692][ T6066]  ? __lock_acquire+0xab9/0xd20
[  795.056748][ T6066]  ? process_scheduled_works+0x9ef/0x17b0
[  795.056768][ T6066]  ? _raw_spin_unlock_irq+0x23/0x50
[  795.056788][ T6066]  ? process_scheduled_works+0x9ef/0x17b0
[  795.056801][ T6066]  ? process_scheduled_works+0x9ef/0x17b0
[  795.056815][ T6066]  process_scheduled_works+0xae1/0x17b0
[  795.056849][ T6066]  ? __pfx_process_scheduled_works+0x10/0x10
[  795.056877][ T6066]  worker_thread+0x8a0/0xda0
[  795.056911][ T6066]  kthread+0x711/0x8a0
[  795.056930][ T6066]  ? __pfx_worker_thread+0x10/0x10
[  795.056943][ T6066]  ? __pfx_kthread+0x10/0x10
[  795.056961][ T6066]  ? _raw_spin_unlock_irq+0x23/0x50
[  795.056981][ T6066]  ? lockdep_hardirqs_on+0x9c/0x150
[  795.056993][ T6066]  ? __pfx_kthread+0x10/0x10
[  795.057010][ T6066]  ret_from_fork+0x3fc/0x770
[  795.057027][ T6066]  ? __pfx_ret_from_fork+0x10/0x10
[  795.057045][ T6066]  ? __switch_to_asm+0x39/0x70
[  795.057061][ T6066]  ? __switch_to_asm+0x33/0x70
[  795.057075][ T6066]  ? __pfx_kthread+0x10/0x10
[  795.057092][ T6066]  ret_from_fork_asm+0x1a/0x30
[  795.057123][ T6066]  </TASK>
[  795.057237][ T6066] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  795.487856][T29186] overlayfs: failed to clone upperpath
[  796.790914][T29232] vlan2: entered allmulticast mode
[  796.792912][T29232] ip6gretap0: entered allmulticast mode
[  797.149479][T29257] loop6: detected capacity change from 0 to 2048
[  797.191195][T29257] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  797.235152][   T33] audit: type=1800 audit(1757605360.497:319): pid=29257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9949" name="file1" dev="loop6" ino=1367 res=0 errno=0
[  798.181166][T29284] kAFS: No cell specified
[  798.470270][T29276] loop6: detected capacity change from 0 to 40427
[  798.500164][T29276] f2fs: Unknown parameter '0xffffffffffffffff'
[  799.928007][T29313] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9974'.
[  799.931657][T29313] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9974'.
[  799.979217][T29315] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC
[  799.979217][T29315] SȘȞZ6'
[  800.433891][T29329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9981'.
[  800.537010][ T5953] usb 7-1: new full-speed USB device number 44 using dummy_hcd
[  800.960191][ T5953] usb 7-1: config 4 has an invalid interface number: 88 but max is 1
[  800.963733][ T5953] usb 7-1: config 4 has an invalid interface number: 29 but max is 1
[  800.968386][ T5953] usb 7-1: config 4 has no interface number 0
[  800.972838][ T5953] usb 7-1: config 4 has no interface number 1
[  800.973289][   T33] audit: type=1326 audit(1757605363.997:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.5.9986" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  800.975788][ T5953] usb 7-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping
[  800.992824][ T5953] usb 7-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85
[  800.998006][ T5953] usb 7-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64
[  800.999246][   T33] audit: type=1326 audit(1757605364.016:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.5.9986" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  801.002700][ T5953] usb 7-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  801.016196][ T5953] usb 7-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86
[  801.021803][   T33] audit: type=1326 audit(1757605364.025:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.5.9986" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  801.029631][ T5953] usb 7-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64
[  801.035766][ T5953] usb 7-1: config 4 interface 88 has no altsetting 0
[  801.038765][ T5953] usb 7-1: config 4 interface 29 has no altsetting 0
[  801.041914][   T33] audit: type=1326 audit(1757605364.025:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.5.9986" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  801.041955][   T33] audit: type=1326 audit(1757605364.025:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.5.9986" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  801.041987][   T33] audit: type=1326 audit(1757605364.025:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.5.9986" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  801.042019][   T33] audit: type=1326 audit(1757605364.025:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.5.9986" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  801.060012][ T5953] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[  801.079611][   T33] audit: type=1326 audit(1757605364.025:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.5.9986" exe="/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  801.079653][   T33] audit: type=1326 audit(1757605364.025:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29340 comm="syz.5.9986" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  801.098898][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.102098][ T5953] usb 7-1: Product: syz
[  801.104056][ T5953] usb 7-1: Manufacturer: syz
[  801.106024][ T5953] usb 7-1: SerialNumber: syz
[  801.115052][T29322] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  801.344948][ T5953] chaoskey 7-1:4.29: Unable to register with hwrng
[  801.406844][ T5953] usb 7-1: USB disconnect, device number 44
[  801.597641][T29349] bridge7: entered allmulticast mode
[  801.960618][T29362] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  801.963692][T29362] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  801.979065][T29362] vhci_hcd vhci_hcd.0: Device attached
[  802.022839][T29360] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.102439][T29360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  802.113578][T29360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  802.164711][T22006] vhci_hcd: vhci_device speed not set
[  802.221610][T29360] vlan0: left allmulticast mode
[  802.223639][T29360] veth0_vlan: left allmulticast mode
[  802.225128][T22006] usb 45-1: new full-speed USB device number 2 using vhci_hcd
[  802.226823][T29360] vlan0: left promiscuous mode
[  802.246391][ T1271] usb 7-1: new low-speed USB device number 45 using dummy_hcd
[  802.286265][   T96] vxcan1 speed is unknown, defaulting to 1000
[  802.286339][ T5889] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  802.288552][   T96] syz2: Port: 1 Link DOWN
[  802.300499][ T5889] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  802.306301][ T5889] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  802.309654][ T5889] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  802.328366][   T96] vxcan1 speed is unknown, defaulting to 1000
[  802.408032][ T1271] usb 7-1: config 0 has no interfaces?
[  802.409881][ T1271] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  802.413280][ T1271] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  802.418746][ T1271] usb 7-1: config 0 descriptor??
[  802.646921][T29363] vhci_hcd: unknown pdu 1
[  802.647949][ T1271] usb 7-1: USB disconnect, device number 45
[  802.657524][T22676] vhci_hcd: stop threads
[  802.659953][T22676] vhci_hcd: release socket
[  802.674644][T22676] vhci_hcd: disconnect device
[  802.716630][T22006] vhci_hcd: vhci_device speed not set
[  803.475294][ T1271] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  803.638326][ T1271] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  803.642892][ T1271] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  803.648088][ T1271] usb 7-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[  803.651837][ T1271] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.659289][ T1271] usb 7-1: config 0 descriptor??
[  804.316275][ T1271] uclogic 0003:2179:0077.0017: interface is invalid, ignoring
[  804.376010][   T96] usb 7-1: USB disconnect, device number 46
[  805.255666][T29451] overlayfs: failed to clone upperpath
[  805.496443][   T24] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  805.657138][   T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  805.661116][   T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  805.673070][   T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  805.678297][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  805.686753][   T24] usb 7-1: SerialNumber: syz
[  805.916291][   T24] usb 7-1: 0:2 : does not exist
[  805.928040][   T24] usb 7-1: USB disconnect, device number 47
[  805.948992][T24058] udevd[24058]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  806.747108][T29517] overlayfs: failed to clone upperpath
[  808.173051][T29586] loop6: detected capacity change from 0 to 1764
[  808.192409][T29586] ISOFS: unable to read i-node block
[  808.373041][T29595] loop6: detected capacity change from 0 to 512
[  808.379258][T29595] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  808.384784][T29595] EXT4-fs (loop6): bad geometry: first data block is 0 with a 1k block and cluster size
[  808.762949][T29602] loop6: detected capacity change from 0 to 512
[  808.770057][T29602] EXT4-fs: Ignoring removed nomblk_io_submit option
[  808.805214][T29602] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  808.810478][T29602] ext4 filesystem being mounted at /863/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  808.825760][T29602] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10092: corrupted inode contents
[  808.843645][T29602] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.10092: mark_inode_dirty error
[  808.848518][T29602] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10092: corrupted inode contents
[  808.853832][T29602] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.10092: mark_inode_dirty error
[  808.897665][T22000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  809.024782][T29611] loop6: detected capacity change from 0 to 2048
[  809.048595][T29611] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=66359, location=66359
[  809.057776][T29611] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  810.378194][   T24] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  810.553775][   T24] usb 7-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  810.558099][   T24] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  810.563239][   T24] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  810.572931][   T24] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  810.577346][   T24] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  810.585927][   T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  810.589642][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.596330][T29625] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  810.819499][   T24] ath6kl: Failed to submit usb control message: -71
[  810.821595][   T24] ath6kl: unable to send the bmi data to the device: -71
[  810.823658][   T24] ath6kl: Unable to send get target info: -71
[  810.832636][   T24] ath6kl: Failed to init ath6kl core: -71
[  810.850435][   T24] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -71
[  810.856290][   T24] usb 7-1: USB disconnect, device number 48
[  811.396192][T29687] netlink: 'syz.4.10128': attribute type 1 has an invalid length.
[  811.681918][T29697] loop6: detected capacity change from 0 to 128
[  811.708904][T29697] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  811.744383][T29697] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  811.909984][T29704] loop6: detected capacity change from 0 to 64
[  811.932686][T29704] Trying to free block not in datazone
[  811.940393][T29704] Trying to free block not in datazone
[  811.947059][T29704] Trying to free block not in datazone
[  811.952195][T29704] Trying to free block not in datazone
[  811.954313][T29704] minix_free_block (loop6:6): bit already cleared
[  811.958016][T29704] Trying to free block not in datazone
[  811.960594][T29704] Trying to free block not in datazone
[  812.287246][T29724] can0: slcan on ttynull.
[  812.355384][T29723] can0 (unregistered): slcan off ttynull.
[  813.291117][T29745] loop6: detected capacity change from 0 to 32768
[  813.302446][T29745] XFS: ikeep mount option is deprecated.
[  813.322171][T29745] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  813.365954][T29745] XFS (loop6): Ending clean mount
[  813.370191][T29745] XFS (loop6): Quotacheck needed: Please wait.
[  813.416992][T29745] XFS (loop6): Quotacheck: Done.
[  813.532020][T22000] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  813.827108][T29775] overlayfs: failed to clone upperpath
[  813.844094][T29775] overlayfs: failed to clone upperpath
[  814.182255][T29789] loop6: detected capacity change from 0 to 32768
[  814.185373][T29789] bcachefs (/dev/loop6): error reading default superblock: Bad minimum version 0.24: unwritten_extents, greater than version field 0.11: inode_btree_change
[  814.190501][T29789] bcachefs (/dev/loop6): error validating superblock: Bad sb offset (got 288230376151715840, read from 4096)
[  814.194337][T29789] bcachefs: bch2_fs_get_tree() error: invalid_sb_offset
[  814.246622][T29791] loop6: detected capacity change from 0 to 4096
[  814.252640][T29791] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  814.267344][T29791] ntfs3(loop6): ino=1a, mi_enum_attr
[  814.269120][T29791] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  814.407610][T29799] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10178'.
[  814.417422][T29799] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode
[  814.430556][T29799] mac80211_hwsim hwsim14 wlan1: left promiscuous mode
[  815.869446][T29835] loop6: detected capacity change from 0 to 1024
[  815.876276][T29835] EXT4-fs: Ignoring removed bh option
[  815.910364][T29835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  815.964420][T29835] EXT4-fs error (device loop6): ext4_xattr_set_entry:1660: inode #15: comm syz.6.10192: corrupted xattr entries
[  815.970235][T29835] EXT4-fs (loop6): Remounting filesystem read-only
[  815.972838][T29835] EXT4-fs warning (device loop6): ext4_xattr_block_set:2190: inode #19: comm syz.6.10192: dec ref error=-30
[  816.006916][T22000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.219999][T29852] netlink: 'syz.6.10195': attribute type 3 has an invalid length.
[  816.227940][T29852] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10195'.
[  816.303071][T29856] loop6: detected capacity change from 0 to 8
[  816.305714][T29856] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  816.316963][T29856] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  816.524203][T29866] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10205'.
[  816.661861][T29828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  818.931629][T29922] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  818.935840][T29922] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  819.699620][T29940] loop6: detected capacity change from 0 to 4096
[  820.281742][T29956] 9pnet_fd: Insufficient options for proto=fd
[  820.696724][T29982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10251'.
[  820.911345][T29997] 9pnet_fd: Insufficient options for proto=fd
[  821.144356][T30012] bridge8: entered promiscuous mode
[  821.188546][T30015] loop6: detected capacity change from 0 to 7
[  821.200804][T30015] Dev loop6: unable to read RDB block 7
[  821.203334][T30015]  loop6: unable to read partition table
[  821.205864][T30015] loop6: partition table beyond EOD, truncated
[  821.208194][T30015] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5)
[  822.775961][T30074] loop6: detected capacity change from 0 to 1024
[  822.796414][T30074] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  822.800180][T30074] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869)
[  822.820705][T30074] EXT4-fs (loop6): journal inode is deleted
[  824.059438][T30118] 9pnet_fd: Insufficient options for proto=fd
[  824.077046][   T96] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  824.248934][   T96] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  824.253637][   T96] usb 7-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  824.259064][   T96] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.265203][   T96] usb 7-1: config 0 descriptor??
[  824.712309][   T96] hid_mf 0003:0079:1846.0018: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.6-1/input0
[  824.715971][   T96] hid_mf 0003:0079:1846.0018: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  824.925694][   T24] usb 7-1: USB disconnect, device number 49
[  825.315325][T30147] sctp: [Deprecated]: syz.4.10328 (pid 30147) Use of int in max_burst socket option deprecated.
[  825.315325][T30147] Use struct sctp_assoc_value instead
[  825.624738][T30161] cgroup: Bad value for 'name'
[  826.073979][   T96] usb 7-1: new full-speed USB device number 50 using dummy_hcd
[  826.248208][   T96] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  826.252453][   T96] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  826.262470][   T96] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  826.267286][   T96] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  826.271230][   T96] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  826.280051][   T96] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  826.283448][   T96] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  826.286318][   T96] usb 7-1: Product: syz
[  826.296050][   T96] usb 7-1: Manufacturer: syz
[  826.297890][   T96] usb 7-1: SerialNumber: syz
[  826.305895][   T96] usb 7-1: config 0 descriptor??
[  826.322969][   T96] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input25
[  826.387958][T30190] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10348'.
[  826.506122][T30197] netlink: 'syz.4.10351': attribute type 8 has an invalid length.
[  826.548801][   T24] usb 7-1: USB disconnect, device number 50
[  827.032047][T30204] 8021q: adding VLAN 0 to HW filter on device bond0
[  827.041833][T30204] 8021q: adding VLAN 0 to HW filter on device team0
[  827.075485][T30204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  827.492489][T30216] loop6: detected capacity change from 0 to 512
[  827.499892][T30216] EXT4-fs error (device loop6): ext4_get_journal_inode:5800: comm syz.6.10358: inode #16777216: comm syz.6.10358: iget: illegal inode #
[  827.506130][T30216] EXT4-fs (loop6): Remounting filesystem read-only
[  827.510160][T30216] EXT4-fs (loop6): no journal found
[  827.512177][T30216] EXT4-fs (loop6): can't get journal size
[  827.515497][T30216] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  827.521155][T30216] EXT4-fs (loop6): failed to initialize system zone (-22)
[  827.523456][T30216] EXT4-fs (loop6): mount failed
[  829.364356][T30259] 9pnet_fd: Insufficient options for proto=fd
[  829.410353][T30261] 9pnet_fd: Insufficient options for proto=fd
[  829.896098][T30282] vxcan1 speed is unknown, defaulting to 1000
[  830.168393][T30292] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10390'.
[  831.235059][T30339] loop6: detected capacity change from 0 to 32768
[  831.237917][T30339] XFS: attr2 mount option is deprecated.
[  831.269511][T30339] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  831.275905][T30339] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  831.304889][T30339] XFS (loop6): Ending clean mount
[  831.313113][T30339] XFS (loop6): Quotacheck needed: Please wait.
[  831.390733][T30339] XFS (loop6): Quotacheck: Done.
[  831.442561][T22000] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  831.931387][T30383] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  832.027244][T30387] netlink: 64 bytes leftover after parsing attributes in process `syz.6.10430'.
[  832.502889][T30397] loop6: detected capacity change from 0 to 32768
[  832.871695][T30432] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  833.542437][ T5761] usb 7-1: new full-speed USB device number 51 using dummy_hcd
[  833.741457][ T5761] usb 7-1: config 0 has an invalid interface number: 128 but max is 0
[  833.744999][ T5761] usb 7-1: config 0 has no interface number 0
[  833.753151][ T5761] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  833.760311][ T5761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.763668][T30445] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10457'.
[  833.767407][ T5761] usb 7-1: Product: syz
[  833.769256][ T5761] usb 7-1: Manufacturer: syz
[  833.771177][ T5761] usb 7-1: SerialNumber: syz
[  833.776712][ T5761] usb 7-1: config 0 descriptor??
[  834.307705][ T5761] usb 7-1: Firmware version (0.0) predates our first public release.
[  834.310997][ T5761] usb 7-1: Please update to version 0.2 or newer
[  834.375870][ T5761] usb 7-1: USB disconnect, device number 51
[  834.893272][T30468] overlayfs: failed to clone upperpath
[  835.157769][T30482] overlayfs: failed to clone upperpath
[  835.193896][T30476] loop6: detected capacity change from 0 to 32768
[  835.216909][T30486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10474'.
[  835.237638][T30486] netlink: 'syz.5.10474': attribute type 30 has an invalid length.
[  835.245704][T30476] (syz.6.10469,30476,0):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[  835.245704][T30476] found = 0, set = 0, taken = 0, off = 1280
[  835.264231][T30476] (syz.6.10469,30476,0):ocfs2_load_local_alloc:356 ERROR: status = -22
[  835.269865][T30476] (syz.6.10469,30476,0):ocfs2_check_volume:2404 ERROR: status = -22
[  835.272621][T30476] (syz.6.10469,30476,0):ocfs2_check_volume:2432 ERROR: status = -22
[  835.275386][T30476] (syz.6.10469,30476,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  835.280158][T30476] (syz.6.10469,30476,0):ocfs2_fill_super:1177 ERROR: status = -22
[  835.471684][T30494] loop6: detected capacity change from 0 to 764
[  835.549238][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  835.552107][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  835.766538][T30501] loop6: detected capacity change from 0 to 128
[  837.503191][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  837.503209][   T33] audit: type=1326 audit(1757605398.195:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30586 comm="syz.5.10519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  837.517347][   T33] audit: type=1326 audit(1757605398.195:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30586 comm="syz.5.10519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  837.525068][   T33] audit: type=1326 audit(1757605398.195:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30586 comm="syz.5.10519" exe="/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  837.540644][   T33] audit: type=1326 audit(1757605398.195:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30586 comm="syz.5.10519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  837.656221][   T96] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  837.816420][   T96] usb 7-1: Using ep0 maxpacket: 8
[  837.823027][   T96] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  837.826608][   T96] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  837.832554][   T96] usb 7-1: Product: syz
[  837.834341][   T96] usb 7-1: Manufacturer: syz
[  837.836130][   T96] usb 7-1: SerialNumber: syz
[  837.847456][   T96] usb 7-1: config 0 descriptor??
[  837.853254][   T96] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  837.952074][T30595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10523'.
[  838.069059][   T96] gspca_zc3xx: reg_w_i err -71
[  838.071137][   T96] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  838.075606][   T96] usb 7-1: USB disconnect, device number 52
[  838.096844][T30601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  839.724289][T30731] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  840.231235][   T96] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  840.391610][   T96] usb 7-1: Using ep0 maxpacket: 16
[  840.401447][   T96] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  840.408395][   T96] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  840.547765][   T96] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  840.551442][   T96] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.554221][   T96] usb 7-1: Product: syz
[  840.555686][   T96] usb 7-1: Manufacturer: syz
[  840.557084][   T96] usb 7-1: SerialNumber: syz
[  840.560676][   T96] usb 7-1: config 0 descriptor??
[  840.572701][   T96] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  840.576411][   T96] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  841.226186][   T96] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  841.241983][   T96] em28xx 7-1:0.0: Config register raw data: 0x67
[  841.244822][   T96] em28xx 7-1:0.0: I2S Audio (1 sample rate(s))
[  841.271888][   T96] em28xx 7-1:0.0: No AC97 audio processor
[  842.121011][   T33] audit: type=1326 audit(1757605402.509:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30801 comm="syz.4.10574" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x0
[  842.229726][ T1271] usb 7-1: USB disconnect, device number 53
[  842.817352][T30812] loop6: detected capacity change from 0 to 16
[  842.834789][T30812] erofs (device loop6): mounted with root inode @ nid 36.
[  842.841797][T30812] overlay: filesystem on ./file1 is read-only
[  842.947555][T30816] loop6: detected capacity change from 0 to 1024
[  842.977010][T30816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  842.990973][   T33] audit: type=1800 audit(1757605403.333:335): pid=30816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10580" name="file1" dev="loop6" ino=15 res=0 errno=0
[  843.049667][T30821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10581'.
[  843.056185][   T33] audit: type=1800 audit(1757605403.389:336): pid=30822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10580" name="file1" dev="loop6" ino=15 res=0 errno=0
[  843.195345][T30816] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.10580: Allocating blocks 497-513 which overlap fs metadata
[  843.259764][T30822] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.10580: Allocating blocks 497-513 which overlap fs metadata
[  843.267741][T30815] EXT4-fs (loop6): pa ffff88801dd9d000: logic 32, phys. 161, len 22
[  843.270811][T30815] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  843.448589][T22000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  843.937026][T30835] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  843.947268][T30835] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  844.045231][ T5712] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  844.051637][ T5712] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  844.055989][ T5712] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  844.064464][ T5712] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  844.141188][T30844] sp0: Synchronizing with TNC
[  844.310863][T30856] overlayfs: failed to clone upperpath
[  844.354399][T30860] loop6: detected capacity change from 0 to 512
[  844.362282][T30860] EXT4-fs (loop6): Test dummy encryption mode enabled
[  844.365076][T30860] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  844.377497][T30860] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.10599: bad orphan inode 131083
[  844.383532][T30860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  846.138716][T22000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  846.600878][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  846.605502][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  846.615295][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  846.624868][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  846.628155][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  846.669101][T30893] overlayfs: failed to clone upperpath
[  846.672185][T30888] vxcan1 speed is unknown, defaulting to 1000
[  846.673494][T30893] overlayfs: failed to clone upperpath
[  846.890667][T30888] chnl_net:caif_netlink_parms(): no params data found
[  846.977902][T30888] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.980927][T30888] bridge0: port 1(bridge_slave_0) entered disabled state
[  846.984118][T30888] bridge_slave_0: entered allmulticast mode
[  846.988002][T30888] bridge_slave_0: entered promiscuous mode
[  846.992674][T30888] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.996124][T30888] bridge0: port 2(bridge_slave_1) entered disabled state
[  846.999086][T30888] bridge_slave_1: entered allmulticast mode
[  847.002757][T30888] bridge_slave_1: entered promiscuous mode
[  847.054394][T30888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  847.064245][T30888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  847.106576][T30888] team0: Port device team_slave_0 added
[  847.111450][T30888] team0: Port device team_slave_1 added
[  847.143615][T30888] batman_adv: batadv0: Adding interface: batadv_slave_0
[  847.147450][T30888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  847.157876][T30888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  847.163740][T30888] batman_adv: batadv0: Adding interface: batadv_slave_1
[  847.167123][T30888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  847.177242][T30888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  847.223487][T30888] hsr_slave_0: entered promiscuous mode
[  847.227493][T30888] hsr_slave_1: entered promiscuous mode
[  847.230571][T30888] debugfs: 'hsr0' already exists in 'hsr'
[  847.232902][T30888] Cannot create hsr debugfs directory
[  847.327861][T30905] overlayfs: failed to clone upperpath
[  847.467552][T30888] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  847.480024][T30888] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  847.494722][T30888] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  847.502363][T30888] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  847.541145][T30888] bridge0: port 2(bridge_slave_1) entered blocking state
[  847.543490][T30888] bridge0: port 2(bridge_slave_1) entered forwarding state
[  847.546138][T30888] bridge0: port 1(bridge_slave_0) entered blocking state
[  847.549101][T30888] bridge0: port 1(bridge_slave_0) entered forwarding state
[  847.639853][T30888] 8021q: adding VLAN 0 to HW filter on device bond0
[  847.683597][T30717] bridge0: port 1(bridge_slave_0) entered disabled state
[  847.690274][T30717] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.723556][T30888] 8021q: adding VLAN 0 to HW filter on device team0
[  847.734322][T30916] netlink: 'syz.5.10620': attribute type 1 has an invalid length.
[  847.737794][T30916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10620'.
[  847.748528][T30717] bridge0: port 1(bridge_slave_0) entered blocking state
[  847.751453][T30717] bridge0: port 1(bridge_slave_0) entered forwarding state
[  847.761472][T30717] bridge0: port 2(bridge_slave_1) entered blocking state
[  847.764472][T30717] bridge0: port 2(bridge_slave_1) entered forwarding state
[  848.016361][T30888] 8021q: adding VLAN 0 to HW filter on device batadv0
[  848.190116][T30888] veth0_vlan: entered promiscuous mode
[  848.197132][T30888] veth1_vlan: entered promiscuous mode
[  848.222368][T30888] veth0_macvtap: entered promiscuous mode
[  848.228350][T30888] veth1_macvtap: entered promiscuous mode
[  848.243422][T30888] batman_adv: batadv0: Interface activated: batadv_slave_0
[  848.270141][T30888] batman_adv: batadv0: Interface activated: batadv_slave_1
[  848.286920][ T5712] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  848.313453][ T5712] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  848.335207][ T5712] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  848.338376][ T5712] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  848.453939][T30717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  848.458227][T30717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  848.489324][T30655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  848.493121][T30655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  848.800944][ T5236] Bluetooth: hci1: command tx timeout
[  848.828195][ T5761] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  849.003739][ T5761] usb 8-1: Using ep0 maxpacket: 8
[  849.007018][ T5761] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  849.011527][ T5761] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  849.015119][ T5761] usb 8-1: config 0 interface 0 has no altsetting 0
[  849.017407][ T5761] usb 8-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[  849.020567][ T5761] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.024712][ T5761] usb 8-1: config 0 descriptor??
[  849.470133][ T5761] a4tech 0003:09DA:000A.0019: unbalanced collection at end of report description
[  849.479691][ T5761] a4tech 0003:09DA:000A.0019: parse failed
[  849.482038][ T5761] a4tech 0003:09DA:000A.0019: probe with driver a4tech failed with error -22
[  849.682136][   T24] usb 8-1: USB disconnect, device number 2
[  850.793057][T31007] loop7: detected capacity change from 0 to 4096
[  851.013080][ T5236] Bluetooth: hci1: command tx timeout
[  851.082514][T31015] loop7: detected capacity change from 0 to 256
[  851.086173][T31015] exfat: Deprecated parameter 'namecase'
[  851.133793][T31015] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x2b52634e, utbl_chksum : 0xe619d30d)
[  851.214387][T31017] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  852.390732][ T5910] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  852.550961][ T5910] usb 8-1: Using ep0 maxpacket: 32
[  852.558734][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  852.569504][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  852.573781][ T5910] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  852.598019][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.609532][ T5910] usb 8-1: config 0 descriptor??
[  852.637210][ T5910] hub 8-1:0.0: USB hub found
[  852.836019][ T5910] hub 8-1:0.0: 1 port detected
[  852.940249][   T33] audit: type=1326 audit(1757605412.645:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31096 comm="syz.5.10694" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  852.972336][   T33] audit: type=1326 audit(1757605412.654:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31096 comm="syz.5.10694" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  853.036352][   T33] audit: type=1326 audit(1757605412.654:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31096 comm="syz.5.10694" exe="/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  853.079357][   T33] audit: type=1326 audit(1757605412.767:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31096 comm="syz.5.10694" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  853.103736][   T33] audit: type=1326 audit(1757605412.767:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31096 comm="syz.5.10694" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  853.238600][ T5236] Bluetooth: hci1: command tx timeout
[  853.480002][ T5910] hub 8-1:0.0: activate --> -90
[  854.012240][ T5761] usb 8-1: USB disconnect, device number 3
[  854.062729][ T5910] usb 8-1-port1: config error
[  854.203712][T31115] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.10701'.
[  855.233324][T31138] loop7: detected capacity change from 0 to 40427
[  855.237126][T31138] F2FS-fs: heap/no_heap options were deprecated
[  855.246451][T31138] F2FS-fs (loop7): build fault injection rate: 19
[  855.250255][T31138] F2FS-fs (loop7): build fault injection type: 0x77e8c
[  855.263811][T31138] F2FS-fs (loop7): invalid crc value
[  855.269029][T31138] F2FS-fs (loop7): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[  855.280530][T31138] F2FS-fs (loop7): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x18f/0xaa0
[  855.293547][    C1] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  855.333073][T31138] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  855.336911][T31138] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  855.365823][T30888] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_grab_meta_folio+0x6a/0x1d0
[  855.388918][T30888] F2FS-fs (loop7): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4ef/0x21b0
[  855.395367][T30888] F2FS-fs (loop7): invalid blkaddr: 513, type: 10, run fsck to fix.
[  855.417587][T30888] F2FS-fs (loop7): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x585/0x21b0
[  855.422075][T30888] F2FS-fs (loop7): invalid blkaddr: 1027, type: 10, run fsck to fix.
[  855.457781][ T5236] Bluetooth: hci1: command tx timeout
[  855.623180][T31156] loop7: detected capacity change from 0 to 4096
[  855.626757][T31156] ntfs3(loop7): ino=3, Correct links count -> 2.
[  855.660957][T31156] ntfs3(loop7): ino=1a, mi_enum_attr
[  855.663161][T31156] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  857.926929][T31201] input: syz1 as /devices/virtual/input/input26
[  858.144493][T31200] netlink: 496 bytes leftover after parsing attributes in process `syz.5.10735'.
[  858.208842][T31205] @: renamed from vlan0 (while UP)
[  858.904765][T31223] loop7: detected capacity change from 0 to 512
[  858.917115][T31223] EXT4-fs (loop7): Test dummy encryption mode enabled
[  858.921143][T31223] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  858.939511][T31223] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.10744: bad orphan inode 131083
[  858.949468][T31223] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  859.009946][T30888] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  860.399785][T31255] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10759'.
[  862.030267][T31328] loop7: detected capacity change from 0 to 2048
[  862.034955][T31328] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  862.053288][T24058] udevd[24058]: incorrect nilfs2 checksum on /dev/loop7
[  862.057412][T31329] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  862.657484][T31338] syz_tun: entered allmulticast mode
[  862.667452][T31336] syz_tun: left allmulticast mode
[  863.156519][T31349] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10798'.
[  863.163594][T31349] netlink: 140 bytes leftover after parsing attributes in process `syz.5.10798'.
[  863.812867][T22006] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  864.186738][T22006] usb 8-1: Using ep0 maxpacket: 16
[  864.190484][T22006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  864.194654][T22006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  864.201798][T22006] usb 8-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  864.205322][T22006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  864.210515][T22006] usb 8-1: config 0 descriptor??
[  864.621961][T31411] 9pnet_fd: Insufficient options for proto=fd
[  864.660800][T22006] input: HID 0458:5012 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5012.001A/input/input27
[  864.779765][T22006] input: HID 0458:5012 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5012.001A/input/input28
[  864.860559][T22006] kye 0003:0458:5012.001A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.7-1/input0
[  865.163230][   T96] usb 8-1: USB disconnect, device number 4
[  866.264631][T31477] 9pnet_virtio: no channels available for device syz
[  866.427477][T31487] loop7: detected capacity change from 0 to 256
[  866.442411][T31487] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  866.451779][T31487] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  866.464015][T31487] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  867.218862][T31506] loop7: detected capacity change from 0 to 128
[  867.234825][T31506] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  867.239799][T31506] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  867.564867][T31514] IPVS: length: 24 != 3277873272
[  867.737060][T31515] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  868.870787][T30888] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  870.073945][T31552] Process accounting resumed
[  870.681028][T31577] gtp0: entered promiscuous mode
[  870.686816][T31579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  871.101077][T22006] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  871.131146][   T33] audit: type=1326 audit(1757605429.660:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.4.10909" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  871.152158][   T33] audit: type=1326 audit(1757605429.669:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.4.10909" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  871.172440][   T33] audit: type=1326 audit(1757605429.669:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.4.10909" exe="/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  871.181994][   T33] audit: type=1326 audit(1757605429.669:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.4.10909" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  871.189131][   T33] audit: type=1326 audit(1757605429.669:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.4.10909" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  871.237561][T31621] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10912'.
[  871.241788][T31621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10912'.
[  871.277474][T22006] usb 8-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88
[  871.287290][T22006] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  871.291503][T22006] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11
[  871.295747][T22006] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024
[  871.299582][T22006] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  871.303207][T22006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.312261][T31584] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  871.326178][T22006] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  871.546527][ T5910] usb 8-1: USB disconnect, device number 5
[  872.077870][   T33] audit: type=1800 audit(1757605430.549:347): pid=31644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10923" name="nullb0" dev="tmpfs" ino=15587 res=0 errno=0
[  872.146095][T31646] sctp: [Deprecated]: syz.7.10924 (pid 31646) Use of int in max_burst socket option deprecated.
[  872.146095][T31646] Use struct sctp_assoc_value instead
[  872.325742][T31656] loop7: detected capacity change from 0 to 16
[  872.342395][T31656] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  872.555322][T31666] vxcan1 speed is unknown, defaulting to 1000
[  873.371491][T31683] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10940'.
[  873.408733][T31685] netlink: 848 bytes leftover after parsing attributes in process `syz.5.10941'.
[  873.873071][T31695] loop7: detected capacity change from 0 to 32768
[  873.904767][T31695] ialloc: diAlloc returned -17!
[  874.186216][T31726] loop7: detected capacity change from 0 to 256
[  874.195764][T31726] exfat: Deprecated parameter 'utf8'
[  874.197941][T31726] exfat: Deprecated parameter 'namecase'
[  874.214761][T31726] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  874.414657][ T5910] kernel write not supported for file bpf-prog (pid: 5910 comm: kworker/1:5)
[  874.818834][ T5910] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  874.980857][ T5910] usb 8-1: config 0 has an invalid interface number: 128 but max is 0
[  874.984179][ T5910] usb 8-1: config 0 has no interface number 0
[  875.001446][ T5910] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  875.005028][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.008183][ T5910] usb 8-1: Product: syz
[  875.020903][ T5910] usb 8-1: Manufacturer: syz
[  875.022934][ T5910] usb 8-1: SerialNumber: syz
[  875.028350][ T5910] usb 8-1: config 0 descriptor??
[  875.486454][ T5910] usb 8-1: Firmware: major: 84, minor: 103, hardware type: UNKNOWN (73)
[  875.704176][ T5910] usb 8-1: Read permanent extended address 52:39:35:8d:79:3e:bf:c5 from device
[  875.707889][ T5910] usb 8-1: atusb_probe: initialization failed, error = -524
[  875.712347][ T5910] atusb 8-1:0.128: probe with driver atusb failed with error -524
[  875.922267][ T5910] usb 8-1: USB disconnect, device number 6
[  877.457678][   T33] audit: type=1326 audit(1757605435.585:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31816 comm="syz.7.11005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  877.488214][   T33] audit: type=1326 audit(1757605435.594:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31816 comm="syz.7.11005" exe="/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  877.514424][   T33] audit: type=1326 audit(1757605435.594:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31816 comm="syz.7.11005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  877.553331][   T33] audit: type=1326 audit(1757605435.604:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31816 comm="syz.7.11005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  878.448791][T31823] rdma_op ffff888116f541f0 conn xmit_rdma 0000000000000000
[  879.622976][T31873] block nbd7: Attempted send on invalid socket
[  879.627087][T31873] I/O error, dev nbd7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  879.638585][T31873] qnx6: unable to read the first superblock
[  879.643633][T31873] block nbd7: Attempted send on invalid socket
[  879.645763][T31873] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  879.649172][T31873] qnx6: unable to read the first superblock
[  879.657014][T31873] qnx6: unable to read the first superblock
[  879.792405][T31878] loop7: detected capacity change from 0 to 1024
[  882.391367][T31924] loop7: detected capacity change from 0 to 512
[  882.399963][T31924] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  882.408097][T31924] netlink: 'syz.7.11053': attribute type 3 has an invalid length.
[  882.431165][T30888] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  882.684124][T31938] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.11059'.
[  882.783284][   T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  882.944602][   T24] usb 8-1: Using ep0 maxpacket: 16
[  882.954358][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  882.961031][   T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  882.968960][   T24] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[  882.972731][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.978931][   T24] usb 8-1: config 0 descriptor??
[  883.088503][T31954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11066'.
[  883.092244][T31954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11066'.
[  883.138499][T31956] netlink: 'syz.4.11067': attribute type 1 has an invalid length.
[  883.141796][T31956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  883.430855][   T24] playstation 0003:054C:0DF2.001B: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.7-1/input0
[  883.518789][   T33] audit: type=1326 audit(1757605441.253:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31973 comm="syz.4.11076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  883.539004][   T33] audit: type=1326 audit(1757605441.263:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31973 comm="syz.4.11076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  883.547696][   T33] audit: type=1326 audit(1757605441.263:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31973 comm="syz.4.11076" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd15fb8d510 code=0x7ffc0000
[  883.556629][   T33] audit: type=1326 audit(1757605441.263:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31973 comm="syz.4.11076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  883.566546][   T33] audit: type=1326 audit(1757605441.272:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31973 comm="syz.4.11076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  883.573762][   T33] audit: type=1326 audit(1757605441.272:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31973 comm="syz.4.11076" exe="/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  883.583784][   T33] audit: type=1326 audit(1757605441.272:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31973 comm="syz.4.11076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  883.594469][   T33] audit: type=1326 audit(1757605441.272:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31973 comm="syz.4.11076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  883.640312][   T24] playstation 0003:054C:0DF2.001B: Invalid reportID received, expected 9 got 0
[  883.644049][   T24] playstation 0003:054C:0DF2.001B: Failed to retrieve DualSense pairing info: -22
[  883.654102][   T24] playstation 0003:054C:0DF2.001B: Failed to get MAC address from DualSense
[  883.657696][   T24] playstation 0003:054C:0DF2.001B: Failed to create dualsense.
[  883.663414][   T24] playstation 0003:054C:0DF2.001B: probe with driver playstation failed with error -22
[  883.858066][   T96] usb 8-1: USB disconnect, device number 7
[  884.583578][T31999] loop7: detected capacity change from 0 to 4096
[  884.588187][T31999] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  884.601833][T31999] ntfs3(loop7): Failed to load $MFT (-22).
[  884.760630][T32012] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11093'.
[  885.654906][T32044] netlink: 'syz.4.11108': attribute type 6 has an invalid length.
[  885.720712][T32019] overlayfs: statfs failed on './file0'
[  886.076078][   T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  886.237233][   T24] usb 8-1: Using ep0 maxpacket: 32
[  886.243496][   T24] usb 8-1: config 0 interface 0 has no altsetting 0
[  886.248256][   T24] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  886.251696][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.254453][   T24] usb 8-1: Product: syz
[  886.255821][   T24] usb 8-1: Manufacturer: syz
[  886.257390][   T24] usb 8-1: SerialNumber: syz
[  886.261920][   T24] usb 8-1: config 0 descriptor??
[  886.699029][   T24] gs_usb 8-1:0.0: Configuring for 2 interfaces
[  886.914645][   T24] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  886.926488][   T24] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71
[  886.948300][   T24] usb 8-1: USB disconnect, device number 8
[  887.607231][T32097] overlayfs: failed to clone upperpath
[  887.624628][   T33] audit: type=1326 audit(1757605445.089:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32098 comm="syz.7.11133" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fddd8eba9 code=0x0
[  887.672484][T32103] vivid-004: disconnect
[  887.686992][T32101] 9pnet: Could not find request transport: tצUunix
[  887.766577][T32107] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11136'.
[  888.033983][T32120] overlayfs: failed to clone upperpath
[  888.504116][T32098] vivid-004: reconnect
[  889.671608][T32142] loop7: detected capacity change from 0 to 64
[  890.321215][T32165] loop7: detected capacity change from 0 to 256
[  890.351098][T32165] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001)
[  890.489130][T32167] netlink: 76 bytes leftover after parsing attributes in process `syz.7.11159'.
[  891.303596][   T96] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  891.499625][   T96] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  891.503150][   T96] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.506445][   T96] usb 8-1: Product: syz
[  891.512333][   T96] usb 8-1: Manufacturer: syz
[  891.514336][   T96] usb 8-1: SerialNumber: syz
[  891.519873][   T96] usb 8-1: config 0 descriptor??
[  891.754623][   T96] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  892.617828][   T96] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  892.624474][   T96] usb 8-1: USB disconnect, device number 9
[  894.236417][T32261] netlink: 'syz.4.11200': attribute type 3 has an invalid length.
[  894.238761][T32261] netlink: 766 bytes leftover after parsing attributes in process `syz.4.11200'.
[  894.679092][T32293] loop7: detected capacity change from 0 to 16
[  894.690913][T32293] erofs (device loop7): rootino(nid 36) is not a directory(i_mode 16700)
[  894.984612][T32315] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11227'.
[  895.002735][T22006] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  895.226978][T22006] usb 8-1: Using ep0 maxpacket: 16
[  895.249530][T22006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  895.254471][T22006] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  895.292292][T22006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  895.340831][T22006] usb 8-1: config 0 descriptor??
[  895.813585][T22006] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0
[  895.968966][T32337] trusted_key: syz.4.11237 sent an empty control message without MSG_MORE.
[  896.316275][T32345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11238'.
[  896.431858][T22006] usb 8-1: USB disconnect, device number 10
[  897.160619][T32355] loop7: detected capacity change from 0 to 256
[  897.171805][T32355] exfat: Deprecated parameter 'utf8'
[  897.184503][T32355] exfat: Deprecated parameter 'utf8'
[  897.197656][T32355] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d)
[  897.481319][T32359] loop7: detected capacity change from 0 to 32768
[  897.494568][T32359] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section disk_groups: disk 0 has invalid label 15 (have 0)
[  897.494568][T32359] disk_groups (size 40):
[  897.494568][T32359] 
[  897.514860][T32359] bcachefs: bch2_fs_get_tree() error: invalid_sb_disk_groups
[  898.441602][T32399] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.11265'.
[  898.444987][T32399] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.11265'.
[  898.812832][T32402] loop7: detected capacity change from 0 to 32768
[  898.830233][T32402] bcachefs (/dev/loop7): error validating superblock: Filesystem has incompatible version 1.7: mi_btree_bitmap, current version 1.28: inode_has_case_insensitive
[  898.835588][T32402] bcachefs: bch2_fs_get_tree() error: invalid_sb_features
[  899.270105][T32417] program syz.7.11273 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  899.320517][T32422] binfmt_misc: register: failed to install interpreter file ./file0
[  899.414034][T32430] loop7: detected capacity change from 0 to 256
[  899.456942][T32430] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  899.557431][T32442] /dev/nullb0: Can't lookup blockdev
[  899.576207][T32444] loop7: detected capacity change from 0 to 1764
[  899.587966][T32444] iso9660: Unexpected value for 'overriderockperm'
[  899.660025][T32451] netlink: 300 bytes leftover after parsing attributes in process `syz.4.11290'.
[  900.775968][   T33] audit: type=1326 audit(2000000001.477:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32486 comm="syz.4.11307" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  900.805365][   T33] audit: type=1326 audit(2000000001.477:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32486 comm="syz.4.11307" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  900.829580][   T33] audit: type=1326 audit(2000000001.477:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32486 comm="syz.4.11307" exe="/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  900.845764][   T33] audit: type=1326 audit(2000000001.477:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32486 comm="syz.4.11307" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  900.871718][   T33] audit: type=1326 audit(2000000001.477:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32486 comm="syz.4.11307" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  900.926081][T32495] overlayfs: failed to clone upperpath
[  901.206000][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  901.207924][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  901.344787][T32522] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  901.348532][T32522] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  901.446591][T32526] Invalid logical block size (268435456)
[  901.543894][T32530] loop7: detected capacity change from 0 to 1764
[  901.933407][T32543] Invalid source name
[  902.197940][T32549] loop7: detected capacity change from 0 to 32768
[  902.232305][T32549] (syz.7.11337,32549,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len % 4 != 0 - offset=108, inode=18446744073709486150, rec_len=65535, name_len=9
[  902.238123][T32549] (syz.7.11337,32549,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  902.242703][T32549] (syz.7.11337,32549,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  902.242722][T32549] (syz.7.11337,32549,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  902.249791][T32549] (syz.7.11337,32549,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  902.252634][T32549] (syz.7.11337,32549,1):ocfs2_fill_super:1177 ERROR: status = -22
[  902.689017][T22006] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[  902.854802][T22006] usb 8-1: unable to get BOS descriptor or descriptor too short
[  902.858630][T22006] usb 8-1: not running at top speed; connect to a high speed hub
[  902.863853][T22006] usb 8-1: config 6 has an invalid interface number: 208 but max is 0
[  902.866613][T22006] usb 8-1: config 6 has no interface number 0
[  902.868588][T22006] usb 8-1: config 6 interface 208 has no altsetting 0
[  902.874582][T22006] usb 8-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=23.c2
[  902.877811][T22006] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.880812][T22006] usb 8-1: Product: syz
[  902.897325][T22006] usb 8-1: Manufacturer: syz
[  902.902560][T22006] usb 8-1: SerialNumber: syz
[  903.174793][T22006] qmi_wwan 8-1:6.208: invalid descriptor buffer length
[  903.187364][T22006] qmi_wwan 8-1:6.208: probe with driver qmi_wwan failed with error -22
[  903.220565][T22006] usb 8-1: USB disconnect, device number 11
[  906.644647][   T96] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  906.811751][   T96] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  906.815643][   T96] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  906.820042][   T96] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  906.826515][   T96] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  906.830224][   T96] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.833289][   T96] usb 8-1: Product: syz
[  906.835021][   T96] usb 8-1: Manufacturer: syz
[  906.837095][   T96] usb 8-1: SerialNumber: syz
[  906.848343][   T96] usb 8-1: config 0 descriptor??
[  906.851067][T32630] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  906.854205][T32630] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  906.859609][   T96] usb 8-1: ucan: probing device on interface #0
[  907.540096][   T96] ucan 8-1:0.0 can0: registered device
[  907.724479][   T96] ucan 8-1:0.0 can0: firmware string: unknown
[  907.733486][   T96] usb 8-1: USB disconnect, device number 12
[  909.352830][T32704] loop7: detected capacity change from 0 to 1024
[  909.399178][T30704] hfsplus: b-tree write err: -5, ino 4
[  910.238368][T32712] netdevsim netdevsim7 : renamed from netdevsim0 (while UP)
[  910.713686][T32727] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  910.719132][   T24] IPVS: starting estimator thread 0...
[  910.830826][T32729] IPVS: using max 66 ests per chain, 158400 per kthread
[  910.940003][T32738] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11414'.
[  910.956557][T32738] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11414'.
[  910.960977][ T5889] netdevsim netdevsim7 : set [0, 0] type 1 family 0 port 8472 - 0
[  910.965666][ T5889] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  910.975003][ T5889] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  910.981198][ T5889] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  912.531647][  T321] overlayfs: failed to clone upperpath
[  913.006810][   T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  913.223257][   T24] usb 8-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  913.230464][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.316582][   T24] usb 8-1: config 0 descriptor??
[  913.419940][  T333] netlink: 'syz.4.11443': attribute type 1 has an invalid length.
[  913.424282][  T333] netlink: 'syz.4.11443': attribute type 2 has an invalid length.
[  913.776209][   T24] hid (null): report_id 0 is invalid
[  913.997262][   T24] usb 8-1: string descriptor 0 read error: -71
[  914.005857][   T24] uclogic 0003:5543:3031.001D: failed retrieving string descriptor #200: -71
[  914.009420][   T24] uclogic 0003:5543:3031.001D: failed retrieving pen parameters: -71
[  914.019062][   T24] uclogic 0003:5543:3031.001D: failed probing pen v2 parameters: -71
[  914.022439][   T24] uclogic 0003:5543:3031.001D: failed probing parameters: -71
[  914.027380][   T24] uclogic 0003:5543:3031.001D: probe with driver uclogic failed with error -71
[  914.042768][   T24] usb 8-1: USB disconnect, device number 13
[  914.676462][  T359] loop7: detected capacity change from 0 to 512
[  914.721045][  T359] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  915.114416][T30888] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  915.285303][  T373] loop7: detected capacity change from 0 to 8
[  915.309116][  T373] SQUASHFS error: zlib decompression failed, data probably corrupt
[  915.324047][  T373] SQUASHFS error: Failed to read block 0x9b: -5
[  915.330316][  T373] SQUASHFS error: Unable to read metadata cache entry [99]
[  915.337011][  T373] SQUASHFS error: Unable to read inode 0x127
[  916.355346][  T401] loop7: detected capacity change from 0 to 1024
[  916.416149][  T401] hfsplus: found bad thread record in catalog
[  916.457370][T30655] hfsplus: found bad thread record in catalog
[  916.460841][T30655] hfsplus: found bad thread record in catalog
[  916.907602][   T96] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  917.072229][   T96] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  917.075495][   T96] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  917.080175][   T96] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  917.083877][   T96] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  917.087351][   T96] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  917.098634][   T96] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  917.104755][   T96] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  917.108197][   T96] usb 8-1: Product: syz
[  917.109913][   T96] usb 8-1: Manufacturer: syz
[  917.115208][   T96] usb 8-1: SerialNumber: syz
[  917.120475][   T96] usb 8-1: config 0 descriptor??
[  917.352339][   T96] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  917.355054][   T96] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  917.566906][   T96] radio-si470x 8-1:0.0: software version 0, hardware version 0
[  917.569869][   T96] radio-si470x 8-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  917.575129][   T96] radio-si470x 8-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  917.782705][   T96] radio-si470x 8-1:0.0: submitting int urb failed (-90)
[  917.883457][  T414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11477'.
[  918.740853][   T96] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -71
[  918.745014][   T96] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22
[  918.762985][   T96] usb 8-1: USB disconnect, device number 14
[  920.964707][   T33] audit: type=1326 audit(2000000020.354:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=478 comm="syz.4.11496" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x0
[  921.063361][  T485] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11499'.
[  921.069737][  T485] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11499'.
[  921.141257][   T96] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  921.311335][   T96] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  921.316348][   T96] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  921.319593][   T96] usb 8-1: Product: syz
[  921.321118][   T96] usb 8-1: Manufacturer: syz
[  921.325478][   T96] usb 8-1: SerialNumber: syz
[  922.872456][   T33] audit: type=1326 audit(2000000022.140:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=529 comm="syz.4.11519" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd15fb8eba9 code=0x0
[  923.608288][   T96] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  923.623823][   T96] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  923.630291][   T96] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  923.637572][   T96] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  923.645332][   T96] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  923.656378][   T96] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71
[  923.673340][   T96] usb 8-1: USB disconnect, device number 15
[  924.419004][  T545] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11526'.
[  924.465200][  T547] IPv6: addrconf: prefix option has invalid lifetime
[  924.685198][  T551] loop7: detected capacity change from 0 to 32768
[  924.727409][  T551] JBD2: Ignoring recovery information on journal
[  924.758668][  T551] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  924.796791][T30888] ocfs2: Unmounting device (7,7) on (node local)
[  924.994587][  T564] loop7: detected capacity change from 0 to 128
[  925.006664][  T564] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  925.014065][  T564] ext4 filesystem being mounted at /218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  925.090510][T30888] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  925.249853][  T572] loop7: detected capacity change from 0 to 128
[  925.251755][  T571] vxcan1 speed is unknown, defaulting to 1000
[  925.272740][  T572] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  925.278086][  T572] ext4 filesystem being mounted at /220/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  925.334581][T30888] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  925.617663][  T580] pim6reg: entered allmulticast mode
[  925.622529][  T580] pim6reg: left allmulticast mode
[  926.353469][  T610] loop7: detected capacity change from 0 to 1024
[  926.360604][  T610] EXT4-fs: Ignoring removed orlov option
[  926.363154][  T610] EXT4-fs: Ignoring removed nomblk_io_submit option
[  926.407464][  T610] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  926.648832][T30888] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  927.639223][  T648] loop7: detected capacity change from 0 to 1024
[  927.647855][  T648] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  927.679466][  T648] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[  927.692599][  T648] System zones: 0-1, 2-3, 4-36, 98-101, 102-102
[  927.706213][  T648] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  927.744381][T30888] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  928.935026][   T24] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  929.095552][   T24] usb 8-1: Using ep0 maxpacket: 8
[  929.109199][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  929.118202][   T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  929.135937][   T24] usb 8-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  929.141984][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  929.145062][   T24] usb 8-1: Product: syz
[  929.146680][   T24] usb 8-1: Manufacturer: syz
[  929.152452][   T24] usb 8-1: SerialNumber: syz
[  929.157472][   T24] usb 8-1: config 0 descriptor??
[  929.421568][   T24] usb 8-1: USB disconnect, device number 16
[  930.275449][  T745] loop7: detected capacity change from 0 to 40427
[  930.290014][  T745] F2FS-fs (loop7): invalid crc value
[  930.333639][  T745] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  930.338451][  T745] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  930.369522][T30888] syz-executor: attempt to access beyond end of device
[  930.369522][T30888] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  930.374086][T30888] CPU: 1 UID: 0 PID: 30888 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  930.374100][T30888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  930.374106][T30888] Call Trace:
[  930.374110][T30888]  <TASK>
[  930.374115][T30888]  dump_stack_lvl+0x189/0x250
[  930.374132][T30888]  ? __pfx_dump_stack_lvl+0x10/0x10
[  930.374143][T30888]  ? __pfx_queue_work_on+0x10/0x10
[  930.374152][T30888]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  930.374165][T30888]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  930.374184][T30888]  f2fs_handle_critical_error+0x37c/0x540
[  930.374205][T30888]  f2fs_write_end_io+0x886/0xb60
[  930.374233][T30888]  __submit_merged_bio+0x27a/0x6a0
[  930.374258][T30888]  __submit_merged_write_cond+0x255/0x530
[  930.374283][T30888]  f2fs_write_data_pages+0x261d/0x3000
[  930.374328][T30888]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  930.374365][T30888]  ? __mod_zone_page_state+0xd7/0x140
[  930.374383][T30888]  ? folios_put_refs+0x560/0x640
[  930.374399][T30888]  ? __lock_acquire+0xab9/0xd20
[  930.374416][T30888]  ? do_raw_spin_lock+0x121/0x290
[  930.374432][T30888]  ? do_raw_spin_unlock+0x4d/0x240
[  930.374442][T30888]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  930.374450][T30888]  do_writepages+0x32e/0x550
[  930.374468][T30888]  ? do_raw_spin_unlock+0x4d/0x240
[  930.374480][T30888]  filemap_fdatawrite+0x199/0x240
[  930.374492][T30888]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  930.374527][T30888]  ? do_raw_spin_unlock+0x4d/0x240
[  930.374545][T30888]  f2fs_sync_dirty_inodes+0x31f/0x830
[  930.374563][T30888]  f2fs_write_checkpoint+0x95a/0x1df0
[  930.374584][T30888]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  930.374639][T30888]  ? kill_f2fs_super+0x298/0x6c0
[  930.374653][T30888]  kill_f2fs_super+0x2c3/0x6c0
[  930.374666][T30888]  ? __pfx_kill_f2fs_super+0x10/0x10
[  930.374673][T30888]  ? radix_tree_delete_item+0x2b6/0x400
[  930.374689][T30888]  ? shrinker_free+0x2ce/0x3e0
[  930.374700][T30888]  deactivate_locked_super+0xbc/0x130
[  930.374711][T30888]  cleanup_mnt+0x425/0x4c0
[  930.374721][T30888]  ? lockdep_hardirqs_on+0x9c/0x150
[  930.374731][T30888]  task_work_run+0x1d4/0x260
[  930.374744][T30888]  ? __pfx_task_work_run+0x10/0x10
[  930.374753][T30888]  ? __x64_sys_umount+0x122/0x160
[  930.374766][T30888]  ? exit_to_user_mode_loop+0x40/0x110
[  930.374780][T30888]  exit_to_user_mode_loop+0xec/0x110
[  930.374793][T30888]  do_syscall_64+0x2bd/0x3b0
[  930.374802][T30888]  ? lockdep_hardirqs_on+0x9c/0x150
[  930.374810][T30888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  930.374818][T30888]  ? exc_page_fault+0x9f/0xf0
[  930.374827][T30888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  930.374835][T30888] RIP: 0033:0x7f5fddd8fed7
[  930.374845][T30888] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  930.374852][T30888] RSP: 002b:00007ffefdfa1678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  930.374862][T30888] RAX: 0000000000000000 RBX: 00007f5fdde11c05 RCX: 00007f5fddd8fed7
[  930.374868][T30888] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefdfa1730
[  930.374874][T30888] RBP: 00007ffefdfa1730 R08: 0000000000000000 R09: 0000000000000000
[  930.374879][T30888] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffefdfa27c0
[  930.374884][T30888] R13: 00007f5fdde11c05 R14: 00000000000daf8d R15: 00007ffefdfa2800
[  930.374899][T30888]  </TASK>
[  930.374903][T30888] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  930.958961][  T766] loop7: detected capacity change from 0 to 2048
[  930.979800][  T766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  931.082995][  T775] loop7: detected capacity change from 0 to 64
[  931.115080][  T775] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing
[  931.152483][  T781] libceph: resolve '4' (ret=-3): failed
[  931.240486][   T33] audit: type=1326 audit(2000002607.967:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.7.11627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  931.278200][   T33] audit: type=1326 audit(2000002607.967:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.7.11627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  931.286115][   T33] audit: type=1326 audit(2000002607.967:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.7.11627" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  931.311192][   T33] audit: type=1326 audit(2000002607.967:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.7.11627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  931.333342][   T33] audit: type=1326 audit(2000002607.967:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.7.11627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  931.354402][   T33] audit: type=1326 audit(2000002607.967:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.7.11627" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  931.374696][   T33] audit: type=1326 audit(2000002607.967:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.7.11627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  931.389053][   T33] audit: type=1326 audit(2000002607.967:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.7.11627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  931.850633][  T814] loop7: detected capacity change from 0 to 512
[  932.139494][T30659] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  932.144402][  T814] EXT4-fs (loop7): 1 orphan inode deleted
[  932.158622][T30659] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u9:10: Failed to release dquot type 1
[  932.250233][  T814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  932.289745][  T814] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  932.610511][T30888] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  934.631745][  T852] loop7: detected capacity change from 0 to 256
[  934.901960][  T852] FAT-fs (loop7): Directory bread(block 64) failed
[  934.911534][  T852] FAT-fs (loop7): Directory bread(block 65) failed
[  934.923246][  T852] FAT-fs (loop7): Directory bread(block 66) failed
[  934.931444][  T852] FAT-fs (loop7): Directory bread(block 67) failed
[  934.942938][  T852] FAT-fs (loop7): Directory bread(block 68) failed
[  934.948702][  T852] FAT-fs (loop7): Directory bread(block 69) failed
[  934.967938][  T852] FAT-fs (loop7): Directory bread(block 70) failed
[  934.973928][  T852] FAT-fs (loop7): Directory bread(block 71) failed
[  934.980555][  T852] FAT-fs (loop7): Directory bread(block 72) failed
[  934.988368][  T852] FAT-fs (loop7): Directory bread(block 73) failed
[  935.703266][  T872] vivid-000: disconnect
[  936.316880][  T863] vivid-000: reconnect
[  938.919597][ T5950] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  939.079955][ T5950] usb 8-1: Using ep0 maxpacket: 16
[  939.095592][ T5950] usb 8-1: config index 0 descriptor too short (expected 16456, got 72)
[  939.098960][ T5950] usb 8-1: config 0 has an invalid interface number: 125 but max is 1
[  939.102390][ T5950] usb 8-1: config 0 has an invalid interface number: 125 but max is 1
[  939.106214][ T5950] usb 8-1: config 0 has an invalid interface number: 125 but max is 1
[  939.109475][ T5950] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  939.116929][ T5950] usb 8-1: config 0 has no interface number 0
[  939.119341][ T5950] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  939.124791][ T5950] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  939.128842][ T5950] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  939.132783][ T5950] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  939.140063][ T5950] usb 8-1: config 0 interface 125 has no altsetting 0
[  939.142840][ T5950] usb 8-1: config 0 interface 125 has no altsetting 2
[  939.151222][ T5950] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  939.157571][ T5950] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  939.160746][ T5950] usb 8-1: Product: syz
[  939.162438][ T5950] usb 8-1: Manufacturer: syz
[  939.164315][ T5950] usb 8-1: SerialNumber: syz
[  939.171583][ T5950] usb 8-1: config 0 descriptor??
[  939.180698][ T5950] usb 8-1: selecting invalid altsetting 2
[  939.397905][    C0] usb 8-1: async_complete: urb error -71
[  939.400199][    C0] usb 8-1: async_complete: urb error -71
[  939.402560][    C0] usb 8-1: async_complete: urb error -71
[  939.404888][    C0] usb 8-1: async_complete: urb error -71
[  939.412297][ T5950] get_1284_register: usb error -71
[  939.414410][ T5950] uss720 8-1:0.125: probe with driver uss720 failed with error -71
[  939.430862][ T5950] usb 8-1: USB disconnect, device number 17
[  940.057064][ T1013] netlink: 'syz.5.11722': attribute type 2 has an invalid length.
[  940.083458][ T1013] : entered promiscuous mode
[  941.204803][ T1070] loop7: detected capacity change from 0 to 2048
[  941.223383][ T1070] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  941.812731][ T1085] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  942.653810][ T1129] bond0: (slave syz_tun): Releasing backup interface
[  943.647480][ T1139] netlink: zone id is out of range
[  943.649035][ T1139] netlink: zone id is out of range
[  943.650686][ T1139] netlink: zone id is out of range
[  943.652495][ T1139] netlink: zone id is out of range
[  943.654490][ T1139] netlink: del zone limit has 4 unknown bytes
[  944.358966][ T1149] IPVS: Scheduler module ip_vs_sip not found
[  944.362665][ T1149] IPVS: length: 146 != 8
[  945.727988][ T1195] hugetlbfs: syz.4.11793 (1195): Using mlock ulimits for SHM_HUGETLB is obsolete
[  945.916646][ T1169] loop7: detected capacity change from 0 to 262144
[  945.997197][ T1169] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  946.003021][ T1169] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  946.768658][ T1264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11814'.
[  946.772375][ T1264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11814'.
[  948.373679][ T1297] netlink: 'syz.5.11827': attribute type 10 has an invalid length.
[  948.376913][ T1297] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11827'.
[  948.399262][ T1297] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  948.415150][ T1297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  948.617794][   T96] kernel write not supported for file bpf-prog (pid: 96 comm: kworker/0:2)
[  948.968502][ T1335] 9pnet_fd: Insufficient options for proto=fd
[  949.076236][ T1341] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11849'.
[  949.482195][   T96] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  949.540512][ T1379] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  949.643886][   T96] usb 8-1: Using ep0 maxpacket: 8
[  949.648682][   T96] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  949.655908][   T96] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  949.659819][   T96] usb 8-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  949.663340][   T96] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.671341][   T96] usb 8-1: config 0 descriptor??
[  950.124926][   T96] kye 0003:0458:5010.001E: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  950.137145][   T96] kye 0003:0458:5010.001E: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.7-1/input0
[  950.141328][   T96] kye 0003:0458:5010.001E: tablet-enabling feature report not found
[  950.144687][   T96] kye 0003:0458:5010.001E: tablet enabling failed
[  950.340832][ T5910] usb 8-1: USB disconnect, device number 18
[  951.076688][ T1420] loop7: detected capacity change from 0 to 4096
[  951.081599][ T1420] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  951.145890][ T1420] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[  951.350657][ T1445] binder: 1444:1445 ioctl c0306201 200000000640 returned -22
[  951.508542][ T1453] loop7: detected capacity change from 0 to 8192
[  951.522794][ T1453] syz.7.11899: attempt to access beyond end of device
[  951.522794][ T1453] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  951.527953][ T1453] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  951.530804][ T1453] FAT-fs (loop7): Filesystem has been set read-only
[  951.542610][ T1453] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  951.545908][ T1453] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  951.730939][ T1463] loop7: detected capacity change from 0 to 4096
[  951.738089][ T1463] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  951.753911][ T1463] ntfs3(loop7): ino=19, mi_enum_attr
[  951.756783][ T1463] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  951.766001][ T1463] ntfs3(loop7): failed to convert "c46c" to cp737
[  951.772154][ T1463] ntfs3(loop7): ino=20, mi_enum_attr
[  952.080442][T22006] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  952.175576][ T1469] overlayfs: failed to clone upperpath
[  952.270838][T22006] usb 8-1: unable to get BOS descriptor or descriptor too short
[  952.280044][T22006] usb 8-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  952.285426][T22006] usb 8-1: config 1 interface 0 has no altsetting 0
[  952.290650][T22006] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  952.304192][T22006] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  952.308364][T22006] usb 8-1: Product: syz
[  952.310197][T22006] usb 8-1: Manufacturer: syz
[  952.311918][T22006] usb 8-1: SerialNumber: syz
[  952.435357][ T1482] cgroup: Invalid name
[  952.543554][T22006] usbhid 8-1:1.0: can't add hid device: -22
[  952.546033][T22006] usbhid 8-1:1.0: probe with driver usbhid failed with error -22
[  952.614669][T22006] usb 8-1: USB disconnect, device number 19
[  952.630244][ T1489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11916'.
[  952.694965][   T33] audit: type=1326 audit(2000002628.041:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1492 comm="syz.5.11917" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49fbf8eba9 code=0x0
[  953.164750][ T1496] loop7: detected capacity change from 0 to 2048
[  953.209786][ T1496] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  953.238698][T30888] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  953.338148][ T1503] loop7: detected capacity change from 0 to 128
[  953.348631][   T33] audit: type=1800 audit(2000002628.649:377): pid=1503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.11920" name="file1" dev="loop7" ino=1048759 res=0 errno=0
[  953.686635][ T1520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11928'.
[  953.690438][ T1520] netlink: 312 bytes leftover after parsing attributes in process `syz.5.11928'.
[  955.241011][ T1548] loop7: detected capacity change from 0 to 40427
[  955.245375][ T1548] F2FS-fs (loop7): build fault injection rate: 14
[  955.247687][ T1548] F2FS-fs (loop7): build fault injection type: 0x3bfe8c
[  955.251041][ T1548] F2FS-fs (loop7): invalid crc value
[  955.260873][    C1] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  955.268461][    C1] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  955.328353][ T1548] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  955.335356][ T1548] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  955.339626][ T1548] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  955.347664][ T1548] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  955.355666][ T1548] F2FS-fs (loop7): inject inconsistent footer in sanity_check_node_footer of write_all_xattrs+0x30e/0x870
[  955.360184][ T1548] F2FS-fs (loop7): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  955.394966][T30888] syz-executor: attempt to access beyond end of device
[  955.394966][T30888] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  955.422110][T30888] CPU: 1 UID: 0 PID: 30888 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  955.422132][T30888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  955.422140][T30888] Call Trace:
[  955.422148][T30888]  <TASK>
[  955.422155][T30888]  dump_stack_lvl+0x189/0x250
[  955.422221][T30888]  ? __pfx_dump_stack_lvl+0x10/0x10
[  955.422241][T30888]  ? __pfx_queue_work_on+0x10/0x10
[  955.422256][T30888]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  955.422278][T30888]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  955.422310][T30888]  f2fs_handle_critical_error+0x37c/0x540
[  955.422340][T30888]  f2fs_write_end_io+0x886/0xb60
[  955.422372][T30888]  __submit_merged_bio+0x27a/0x6a0
[  955.422400][T30888]  __submit_merged_write_cond+0x255/0x530
[  955.422425][T30888]  f2fs_write_data_pages+0x261d/0x3000
[  955.422471][T30888]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  955.422536][T30888]  ? folios_put_refs+0x559/0x640
[  955.422564][T30888]  ? __lock_acquire+0xab9/0xd20
[  955.422594][T30888]  ? do_raw_spin_lock+0x121/0x290
[  955.422621][T30888]  ? do_raw_spin_unlock+0x4d/0x240
[  955.422637][T30888]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  955.422650][T30888]  do_writepages+0x32e/0x550
[  955.422678][T30888]  ? do_raw_spin_unlock+0x4d/0x240
[  955.422699][T30888]  filemap_fdatawrite+0x199/0x240
[  955.422718][T30888]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  955.422782][T30888]  ? do_raw_spin_unlock+0x4d/0x240
[  955.422804][T30888]  f2fs_sync_dirty_inodes+0x31f/0x830
[  955.422834][T30888]  f2fs_write_checkpoint+0x95a/0x1df0
[  955.422874][T30888]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  955.422935][T30888]  ? kill_f2fs_super+0x298/0x6c0
[  955.422956][T30888]  kill_f2fs_super+0x2c3/0x6c0
[  955.422978][T30888]  ? __pfx_kill_f2fs_super+0x10/0x10
[  955.422991][T30888]  ? radix_tree_delete_item+0x2b6/0x400
[  955.423021][T30888]  ? shrinker_free+0x2ce/0x3e0
[  955.423041][T30888]  deactivate_locked_super+0xbc/0x130
[  955.423067][T30888]  cleanup_mnt+0x425/0x4c0
[  955.423084][T30888]  ? lockdep_hardirqs_on+0x9c/0x150
[  955.423102][T30888]  task_work_run+0x1d4/0x260
[  955.423125][T30888]  ? __pfx_task_work_run+0x10/0x10
[  955.423142][T30888]  ? __x64_sys_umount+0x122/0x160
[  955.423166][T30888]  ? exit_to_user_mode_loop+0x40/0x110
[  955.423220][T30888]  exit_to_user_mode_loop+0xec/0x110
[  955.423242][T30888]  do_syscall_64+0x2bd/0x3b0
[  955.423258][T30888]  ? lockdep_hardirqs_on+0x9c/0x150
[  955.423271][T30888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  955.423286][T30888]  ? exc_page_fault+0x9f/0xf0
[  955.423303][T30888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  955.423317][T30888] RIP: 0033:0x7f5fddd8fed7
[  955.423330][T30888] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  955.423342][T30888] RSP: 002b:00007ffefdfa1678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  955.423358][T30888] RAX: 0000000000000000 RBX: 00007f5fdde11c05 RCX: 00007f5fddd8fed7
[  955.423368][T30888] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefdfa1730
[  955.423376][T30888] RBP: 00007ffefdfa1730 R08: 0000000000000000 R09: 0000000000000000
[  955.423385][T30888] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffefdfa27c0
[  955.423395][T30888] R13: 00007f5fdde11c05 R14: 00000000000e0af5 R15: 00007ffefdfa2800
[  955.423422][T30888]  </TASK>
[  955.551466][T30888] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  956.174705][ T1565] loop7: detected capacity change from 0 to 32768
[  956.183286][ T1565] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.11945 (1565)
[  956.220139][ T1565] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  956.229412][ T1565] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  956.426428][ T1565] BTRFS info (device loop7): enabling ssd optimizations
[  956.429350][ T1565] BTRFS info (device loop7): enabling free space tree
[  956.435178][ T1565] BTRFS info (device loop7): use lzo compression, level 0
[  956.438146][ T1565] BTRFS info (device loop7): max_inline set to 0
[  956.470494][T30888] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  957.424180][ T1596] bond0: option mode: unable to set because the bond device is up
[  959.742056][ T1635] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  961.742159][ T1638] overlayfs: failed to clone upperpath
[  962.130990][ T1652] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  962.137916][ T1652] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.272493][ T1652] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  962.278058][ T1652] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.612293][ T1652] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  962.634116][ T1652] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.438188][   T33] audit: type=1326 audit(2000002638.003:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1667 comm="syz.7.11981" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  963.481385][   T33] audit: type=1326 audit(2000002638.003:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1667 comm="syz.7.11981" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  963.506121][   T33] audit: type=1326 audit(2000002638.003:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1667 comm="syz.7.11981" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  963.532013][ T1652] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  963.535946][ T1652] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.541476][   T33] audit: type=1326 audit(2000002638.003:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1667 comm="syz.7.11981" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  963.550043][   T33] audit: type=1326 audit(2000002638.003:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1667 comm="syz.7.11981" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  963.624873][   T33] audit: type=1326 audit(2000002638.255:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1671 comm="syz.7.11983" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  963.647179][   T33] audit: type=1326 audit(2000002638.274:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1671 comm="syz.7.11983" exe="/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  963.670594][   T33] audit: type=1326 audit(2000002638.274:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1671 comm="syz.7.11983" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fddd8eba9 code=0x7ffc0000
[  963.747993][ T1674] loop7: detected capacity change from 0 to 256
[  963.751866][ T1674] exfat: Deprecated parameter 'utf8'
[  963.805412][ T1674] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d)
[  964.049169][ T5712] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  964.052780][ T5712] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  964.089829][ T5712] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  964.093044][ T5712] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  964.180515][ T5889] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  964.189751][ T5889] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  964.193785][ T5889] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  964.196783][ T5889] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  964.295733][ T1687] loop7: detected capacity change from 0 to 256
[  964.397881][ T1692] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.11992'.
[  966.097383][ T1727] loop7: detected capacity change from 0 to 32768
[  966.106215][ T1727] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry (unknown data_type 224): 1/245 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 4 5 5 6 10 11 11 11 26 33 34 45 45 56 80]
[  966.106215][ T1727] replicas_v0 (size 40):
[  966.106215][ T1727] (unknown data_type 224): 15 [0 0 0 0 0 0 255 255 255 255 255 255 255 255 255] (unknown data_type 224): 245 [5 0 0 0 0 1 0 0 0 0 0 0 0 80 0 0 0 10 0 0 0 0 0 0 0 0 0 0 0 56 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 34 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 45 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  966.106402][ T1727] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  966.184870][ T1729] loop7: detected capacity change from 0 to 128
[  966.194806][ T1729] ufs: You didn't specify the type of your ufs filesystem
[  966.194806][ T1729] 
[  966.194806][ T1729] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  966.194806][ T1729] 
[  966.194806][ T1729] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  966.217573][ T1729] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  966.276040][ T1731] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  966.280976][ T1731] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  966.286960][ T1731] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  966.891667][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  966.894178][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  967.015985][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12022'.
[  967.019690][ T1759] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  967.022753][ T1759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  967.404890][ T1780] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.12030'.
[  970.846464][ T1836] netlink: ct family unspecified
[  970.848746][ T1836] openvswitch: netlink: Actions may not be safe on all matching packets
[  972.968542][ T1866] netlink: 'syz.4.12064': attribute type 2 has an invalid length.
[  972.971976][ T1866] netlink: 'syz.4.12064': attribute type 1 has an invalid length.
[  972.975085][ T1866] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12064'.
[  973.098239][ T5761] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  973.191946][ T1873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12067'.
[  973.198729][ T1873] bridge_slave_1: left allmulticast mode
[  973.201104][ T1873] bridge_slave_1: left promiscuous mode
[  973.203502][ T1873] bridge0: port 2(bridge_slave_1) entered disabled state
[  973.220752][ T1873] bridge0: port 1(bridge_slave_0) entered disabled state
[  973.279334][ T5761] usb 8-1: Using ep0 maxpacket: 32
[  973.288499][ T5761] usb 8-1: config 0 has an invalid interface number: 136 but max is 0
[  973.292428][ T5761] usb 8-1: config 0 has no interface number 0
[  973.308966][ T5761] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df
[  973.320245][ T5761] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  973.327106][ T5761] usb 8-1: Product: syz
[  973.328779][ T5761] usb 8-1: Manufacturer: syz
[  973.330681][ T5761] usb 8-1: SerialNumber: syz
[  973.364777][ T5761] usb 8-1: config 0 descriptor??
[  973.403370][ T5761] usb_ehset_test 8-1:0.136: probe with driver usb_ehset_test failed with error -32
[  973.606842][ T5761] usb 8-1: USB disconnect, device number 20
[  975.115550][ T1910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12084'.
[  975.926362][ T1922] 9pnet_fd: Insufficient options for proto=fd
[  978.004977][ T1928] loop7: detected capacity change from 0 to 32768
[  978.402508][ T1957] loop7: detected capacity change from 0 to 128
[  978.406085][ T1957] EXT4-fs (loop7): Test dummy encryption mode enabled
[  978.412829][ T1957] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  978.416610][ T1957] ext4 filesystem being mounted at /344/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  978.724866][   T33] audit: type=1400 audit(2000002652.314:386): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=73226865645F737769746368 pid=1955 comm="syz.7.12102"
[  980.058717][ T1935] Bluetooth: hci1: command 0x0406 tx timeout
[  980.114629][T30888] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  981.318451][   T33] audit: type=1326 audit(2000002654.793:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2001 comm="syz.4.12124" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  981.329115][   T33] audit: type=1326 audit(2000002654.793:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2001 comm="syz.4.12124" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  982.356676][   T33] audit: type=1326 audit(2000002654.793:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2001 comm="syz.4.12124" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  982.366350][   T33] audit: type=1326 audit(2000002654.793:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2001 comm="syz.4.12124" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  982.374822][   T33] audit: type=1326 audit(2000002654.793:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2001 comm="syz.4.12124" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  983.375782][   T33] audit: type=1326 audit(2000002654.793:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2001 comm="syz.4.12124" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  983.384392][   T33] audit: type=1326 audit(2000002654.793:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2001 comm="syz.4.12124" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  983.397696][   T33] audit: type=1326 audit(2000002654.793:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2001 comm="syz.4.12124" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  983.916769][   T33] audit: type=1326 audit(2000002654.793:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2001 comm="syz.4.12124" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  986.001873][ T2027] loop7: detected capacity change from 0 to 32768
[  986.005888][ T2027] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.12131 (2027)
[  986.027160][ T2027] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  986.031244][ T2027] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm
[  986.052733][ T2027] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  986.186616][ T2027] BTRFS info (device loop7): rebuilding free space tree
[  986.204940][ T2027] BTRFS info (device loop7): disabling free space tree
[  986.207260][ T2027] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  986.210580][ T2027] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  986.232602][ T2027] BTRFS info (device loop7): setting nodatasum
[  986.234676][ T2027] BTRFS info (device loop7): allowing degraded mounts
[  986.247538][ T2027] BTRFS info (device loop7): enabling disk space caching
[  986.250984][ T2027] BTRFS info (device loop7): force clearing of disk cache
[  986.253602][ T2027] BTRFS info (device loop7): force zlib compression, level 3
[  986.309003][ T2027] BTRFS error (device loop7): balance: mixed groups data and metadata options must be the same
[  986.386690][T30888] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  987.430858][ T2086] netlink: 64 bytes leftover after parsing attributes in process `syz.7.12150'.
[  987.565305][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  987.565316][   T33] audit: type=1326 audit(2000002660.658:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2094 comm="syz.4.12154" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd15fb8eba9 code=0x0
[  987.775630][ T5910] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  987.946689][ T5910] usb 8-1: Using ep0 maxpacket: 8
[  987.951625][ T5910] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  987.955471][ T5910] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  987.959561][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  987.963833][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  987.967656][ T5910] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7
[  987.971286][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.977815][ T5910] usb 8-1: config 0 descriptor??
[  987.986618][ T5910] metro_usb 8-1:0.0: Metrologic USB to Serial converter detected
[  987.995484][ T5910] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  988.201420][ T5910] usb 8-1: USB disconnect, device number 21
[  988.211404][ T5910] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  988.218804][ T5910] metro_usb 8-1:0.0: device disconnected
[  989.461450][ T2113] loop7: detected capacity change from 0 to 32768
[  989.763161][ T2113] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  989.763178][ T2113]   allowing incompatible features above 0.0: (unknown version)
[  989.763184][ T2113]   features: lz4
[  989.775518][ T2113] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  989.779681][ T2113] bcachefs (loop7): initializing new filesystem
[  989.791304][ T2113] bcachefs (loop7): going read-write
[  989.803342][ T2113] bcachefs (loop7): marking superblocks
[  989.814128][ T2113] bcachefs (loop7): initializing freespace
[  989.819361][ T2113] bcachefs (loop7): done initializing freespace
[  989.824031][ T2113] bcachefs (loop7): reading snapshots table
[  989.825818][ T2113] bcachefs (loop7): reading snapshots done
[  989.895480][ T2113] bcachefs (loop7): done starting filesystem
[  990.164216][ T2131] bcachefs (loop7): going read-only
[  990.166282][ T2131] bcachefs (loop7): finished waiting for writes to stop
[  990.180460][ T2131] bcachefs (loop7): flushing journal and stopping allocators, journal seq 2
[  990.250621][ T2131] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 2
[  990.262326][ T2131] bcachefs (loop7): clean shutdown complete, journal seq 3
[  990.265592][ T2131] bcachefs (loop7): marking filesystem clean
[  990.322604][T30888] bcachefs (loop7): shutting down
[  990.381633][T30888] bcachefs (loop7): shutdown complete
[  990.507347][ T2147] vlan1: entered allmulticast mode
[  990.509033][ T2147] ip6gretap0: entered allmulticast mode
[  992.789401][   T33] audit: type=1326 audit(2000002665.513:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2176 comm="syz.4.12184" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  992.798227][   T33] audit: type=1326 audit(2000002665.513:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2176 comm="syz.4.12184" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  992.806257][   T33] audit: type=1326 audit(2000002665.513:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2176 comm="syz.4.12184" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  992.813285][   T33] audit: type=1326 audit(2000002665.513:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2176 comm="syz.4.12184" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  992.820610][   T33] audit: type=1326 audit(2000002665.513:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2176 comm="syz.4.12184" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  992.827795][   T33] audit: type=1326 audit(2000002665.532:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2176 comm="syz.4.12184" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  992.834878][   T33] audit: type=1326 audit(2000002665.532:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2176 comm="syz.4.12184" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  992.842033][   T33] audit: type=1326 audit(2000002665.532:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2176 comm="syz.4.12184" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  992.856465][   T33] audit: type=1326 audit(2000002665.532:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2176 comm="syz.4.12184" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd15fb8eba9 code=0x7ffc0000
[  993.500065][   T33] kauditd_printk_skb: 29 callbacks suppressed
[  993.500076][   T33] audit: type=1326 audit(2000002666.205:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2184 comm="syz.5.12187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  993.527207][   T33] audit: type=1326 audit(2000002666.214:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2184 comm="syz.5.12187" exe="/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  993.536140][   T33] audit: type=1326 audit(2000002666.214:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2184 comm="syz.5.12187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  993.548246][   T33] audit: type=1326 audit(2000002666.214:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2184 comm="syz.5.12187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbf8eba9 code=0x7ffc0000
[  994.154206][ T2189] sctp: [Deprecated]: syz.4.12189 (pid 2189) Use of struct sctp_assoc_value in delayed_ack socket option.
[  994.154206][ T2189] Use struct sctp_sack_info instead
[  995.911357][ T1271] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  996.074617][ T1271] usb 8-1: Using ep0 maxpacket: 8
[  996.083420][ T1271] usb 8-1: unable to get BOS descriptor or descriptor too short
[  996.088359][ T1271] usb 8-1: config 7 has an invalid interface number: 142 but max is 0
[  996.102685][ T1271] usb 8-1: config 7 has no interface number 0
[  996.115387][ T1271] usb 8-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d
[  996.118886][ T1271] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.121954][ T1271] usb 8-1: Product: syz
[  996.123701][ T1271] usb 8-1: Manufacturer: syz
[  996.146901][ T1271] usb 8-1: SerialNumber: syz
[  996.419271][ T1271] usb 8-1: USB disconnect, device number 22
[ 1000.309289][ T5950] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[ 1000.405074][ T2291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12232'.
[ 1000.465655][ T5950] usb 8-1: Using ep0 maxpacket: 8
[ 1000.477119][ T5950] usb 8-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67
[ 1000.481333][ T5950] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.484563][ T5950] usb 8-1: Product: syz
[ 1000.486190][ T5950] usb 8-1: Manufacturer: syz
[ 1000.490227][ T5950] usb 8-1: SerialNumber: syz
[ 1000.495505][ T5950] usb 8-1: config 0 descriptor??
[ 1000.500355][ T5950] ipw 8-1:0.0: IPWireless converter converter detected
[ 1000.721532][ T2307] netlink: 'syz.4.12240': attribute type 10 has an invalid length.
[ 1000.722155][ T5910] usb 8-1: USB disconnect, device number 23
[ 1000.737767][ T2307] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1000.741468][ T5910] ipw 8-1:0.0: device disconnected
[ 1000.748877][T30659] ------------[ cut here ]------------
[ 1000.751380][T30659] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[ 1000.756293][T30659] WARNING: CPU: 0 PID: 30659 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[ 1000.760370][T30659] Modules linked in:
[ 1000.762636][T30659] CPU: 0 UID: 0 PID: 30659 Comm: kworker/u9:10 Not tainted syzkaller #0 PREEMPT(full) 
[ 1000.767666][T30659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1000.771497][T30659] Workqueue: events_unbound cfg80211_wiphy_work
[ 1000.773963][T30659] RIP: 0010:__rate_control_send_low+0x5df/0x820
[ 1000.776381][T30659] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 84 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 f2 ae 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[ 1000.783774][T30659] RSP: 0018:ffffc90002dff318 EFLAGS: 00010246
[ 1000.786221][T30659] RAX: 6e7396afa90d6300 RBX: 000000000000000c RCX: ffff88801e740000
[ 1000.789339][T30659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 1000.792389][T30659] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[ 1000.795517][T30659] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff8880444c1b28
[ 1000.798731][T30659] R13: 0000000000000000 R14: ffff888110b10e40 R15: ffff888110b130d8
[ 1000.802080][T30659] FS:  0000000000000000(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[ 1000.805714][T30659] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1000.808482][T30659] CR2: 0000200000002340 CR3: 0000000047b74000 CR4: 00000000000006f0
[ 1000.811776][T30659] Call Trace:
[ 1000.813202][T30659]  <TASK>
[ 1000.814553][T30659]  rate_control_send_low+0x194/0x7a0
[ 1000.816669][T30659]  rate_control_get_rate+0x20b/0x5d0
[ 1000.818932][T30659]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[ 1000.821307][T30659]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[ 1000.823946][T30659]  ? ieee80211_is_bufferable_mmpdu+0x181/0x200
[ 1000.826675][T30659]  invoke_tx_handlers_late+0xb6/0x1820
[ 1000.829138][T30659]  ? invoke_tx_handlers_early+0xa11/0x1d10
[ 1000.831507][T30659]  ieee80211_tx+0x2ac/0x420
[ 1000.833275][T30659]  ? __pfx_ieee80211_tx+0x10/0x10
[ 1000.835347][T30659]  ? ieee80211_set_qos_hdr+0x1ca/0x520
[ 1000.837519][T30659]  ? ieee80211_mps_set_frame_flags+0x207/0x3b0
[ 1000.840145][T30659]  ? ieee80211_xmit+0x315/0x400
[ 1000.842086][T30659]  ? __ieee80211_tx_skb_tid_band+0x4cb/0x680
[ 1000.844399][T30659]  __ieee80211_tx_skb_tid_band+0x50f/0x680
[ 1000.846713][T30659]  ? ieee80211_tx_skb_tid+0x2f/0x420
[ 1000.848820][T30659]  ieee80211_tx_skb_tid+0x266/0x420
[ 1000.851031][T30659]  mesh_path_start_discovery+0x95d/0xd40
[ 1000.853236][T30659]  ? mesh_path_start_discovery+0x29a/0xd40
[ 1000.855451][T30659]  ieee80211_mesh_work+0x1c8/0x910
[ 1000.857435][T30659]  cfg80211_wiphy_work+0x2bb/0x470
[ 1000.859520][T30659]  ? process_scheduled_works+0x9ef/0x17b0
[ 1000.861885][T30659]  process_scheduled_works+0xae1/0x17b0
[ 1000.864145][T30659]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1000.866561][T30659]  worker_thread+0x8a0/0xda0
[ 1000.868425][T30659]  kthread+0x711/0x8a0
[ 1000.870031][T30659]  ? __pfx_worker_thread+0x10/0x10
[ 1000.872077][T30659]  ? __pfx_kthread+0x10/0x10
[ 1000.873970][T30659]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1000.876081][T30659]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1000.878054][T30659]  ? __pfx_kthread+0x10/0x10
[ 1000.879841][T30659]  ret_from_fork+0x3fc/0x770
[ 1000.881658][T30659]  ? __pfx_ret_from_fork+0x10/0x10
[ 1000.883820][T30659]  ? __switch_to_asm+0x39/0x70
[ 1000.885738][T30659]  ? __switch_to_asm+0x33/0x70
[ 1000.887684][T30659]  ? __pfx_kthread+0x10/0x10
[ 1000.889509][T30659]  ret_from_fork_asm+0x1a/0x30
[ 1000.891453][T30659]  </TASK>
[ 1000.892698][T30659] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1000.895425][T30659] CPU: 0 UID: 0 PID: 30659 Comm: kworker/u9:10 Not tainted syzkaller #0 PREEMPT(full) 
[ 1000.899054][T30659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1000.902980][T30659] Workqueue: events_unbound cfg80211_wiphy_work
[ 1000.905477][T30659] Call Trace:
[ 1000.906865][T30659]  <TASK>
[ 1000.908072][T30659]  dump_stack_lvl+0x99/0x250
[ 1000.909974][T30659]  ? __asan_memcpy+0x40/0x70
[ 1000.911859][T30659]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1000.913973][T30659]  ? __pfx__printk+0x10/0x10
[ 1000.915915][T30659]  vpanic+0x281/0x750
[ 1000.917537][T30659]  ? __pfx__printk+0x10/0x10
[ 1000.919433][T30659]  ? __pfx_vpanic+0x10/0x10
[ 1000.921291][T30659]  ? is_bpf_text_address+0x292/0x2b0
[ 1000.923468][T30659]  panic+0xb9/0xc0
[ 1000.925010][T30659]  ? __pfx_panic+0x10/0x10
[ 1000.926877][T30659]  __warn+0x31b/0x4b0
[ 1000.928514][T30659]  ? __rate_control_send_low+0x5df/0x820
[ 1000.930822][T30659]  ? __rate_control_send_low+0x5df/0x820
[ 1000.933102][T30659]  report_bug+0x2be/0x4f0
[ 1000.935138][T30659]  ? __rate_control_send_low+0x5df/0x820
[ 1000.937397][T30659]  ? __rate_control_send_low+0x5df/0x820
[ 1000.939696][T30659]  ? __rate_control_send_low+0x5e1/0x820
[ 1000.941958][T30659]  handle_bug+0x84/0x160
[ 1000.943605][T30659]  exc_invalid_op+0x1a/0x50
[ 1000.945370][T30659]  asm_exc_invalid_op+0x1a/0x20
[ 1000.947252][T30659] RIP: 0010:__rate_control_send_low+0x5df/0x820
[ 1000.949617][T30659] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 84 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 f2 ae 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[ 1000.957250][T30659] RSP: 0018:ffffc90002dff318 EFLAGS: 00010246
[ 1000.959590][T30659] RAX: 6e7396afa90d6300 RBX: 000000000000000c RCX: ffff88801e740000
[ 1000.962739][T30659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 1000.965691][T30659] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[ 1000.969037][T30659] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff8880444c1b28
[ 1000.972056][T30659] R13: 0000000000000000 R14: ffff888110b10e40 R15: ffff888110b130d8
[ 1000.974977][T30659]  ? __rate_control_send_low+0x5de/0x820
[ 1000.977191][T30659]  rate_control_send_low+0x194/0x7a0
[ 1000.979265][T30659]  rate_control_get_rate+0x20b/0x5d0
[ 1000.981379][T30659]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[ 1000.983583][T30659]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[ 1000.986034][T30659]  ? ieee80211_is_bufferable_mmpdu+0x181/0x200
[ 1000.988504][T30659]  invoke_tx_handlers_late+0xb6/0x1820
[ 1000.990732][T30659]  ? invoke_tx_handlers_early+0xa11/0x1d10
[ 1000.993137][T30659]  ieee80211_tx+0x2ac/0x420
[ 1000.994992][T30659]  ? __pfx_ieee80211_tx+0x10/0x10
[ 1000.997053][T30659]  ? ieee80211_set_qos_hdr+0x1ca/0x520
[ 1000.999258][T30659]  ? ieee80211_mps_set_frame_flags+0x207/0x3b0
[ 1001.001667][T30659]  ? ieee80211_xmit+0x315/0x400
[ 1001.003606][T30659]  ? __ieee80211_tx_skb_tid_band+0x4cb/0x680
[ 1001.006056][T30659]  __ieee80211_tx_skb_tid_band+0x50f/0x680
[ 1001.008405][T30659]  ? ieee80211_tx_skb_tid+0x2f/0x420
[ 1001.010567][T30659]  ieee80211_tx_skb_tid+0x266/0x420
[ 1001.012670][T30659]  mesh_path_start_discovery+0x95d/0xd40
[ 1001.014983][T30659]  ? mesh_path_start_discovery+0x29a/0xd40
[ 1001.017346][T30659]  ieee80211_mesh_work+0x1c8/0x910
[ 1001.019442][T30659]  cfg80211_wiphy_work+0x2bb/0x470
[ 1001.021499][T30659]  ? process_scheduled_works+0x9ef/0x17b0
[ 1001.023875][T30659]  process_scheduled_works+0xae1/0x17b0
[ 1001.026094][T30659]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1001.028464][T30659]  worker_thread+0x8a0/0xda0
[ 1001.030312][T30659]  kthread+0x711/0x8a0
[ 1001.031967][T30659]  ? __pfx_worker_thread+0x10/0x10
[ 1001.034011][T30659]  ? __pfx_kthread+0x10/0x10
[ 1001.035817][T30659]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1001.037884][T30659]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1001.039969][T30659]  ? __pfx_kthread+0x10/0x10
[ 1001.041847][T30659]  ret_from_fork+0x3fc/0x770
[ 1001.043743][T30659]  ? __pfx_ret_from_fork+0x10/0x10
[ 1001.045829][T30659]  ? __switch_to_asm+0x39/0x70
[ 1001.047792][T30659]  ? __switch_to_asm+0x33/0x70
[ 1001.049695][T30659]  ? __pfx_kthread+0x10/0x10
[ 1001.051571][T30659]  ret_from_fork_asm+0x1a/0x30
[ 1001.053526][T30659]  </TASK>
[ 1001.055495][T30659] Kernel Offset: disabled
[ 1001.057223][T30659] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:42:13  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002dfeab0
R8 =ffff8881065f8237 R9 =1ffff11020cbf046 R10=dffffc0000000000 R11=ffffffff854f7000
R12=dffffc0000000000 R13=ffffffff99b008ed R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f707c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002340 CR3=0000000047b74000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007780000 RBX=1ffff11020fec25a RCX=ffff88810815b980 RDX=0000000000010000
RSI=ffff888107f60000 RDI=0000000000000017 RBP=0000000000000080 RSP=ffffc900001e0dc0
R8 =ffffffff8fa3a037 R9 =1ffffffff1f47406 R10=dffffc0000000000 R11=ffffffff869a17b0
R12=dffffc0000000000 R13=ffff888107f612d0 R14=ffff888107f60000 R15=dffffc0000000000
RIP=ffffffff869a17f8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055944584e000 CR3=00000000269c8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
