last executing test programs:

1m39.495857405s ago: executing program 2 (id=788):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001100)={0xffffffff, {{0xa, 0x4e20, 0x81, @private2, 0x101}}, {{0xa, 0x4e20, 0xa, @dev={0xfe, 0x80, '\x00', 0x35}, 0xefca}}}, 0x108)

1m39.440323465s ago: executing program 2 (id=789):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118)

1m39.385810529s ago: executing program 2 (id=790):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="800002000a000200"], 0x28}}, 0x0)

1m39.385591359s ago: executing program 2 (id=791):
r0 = userfaultfd(0x801)
r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x252, &(0x7f0000000600)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000540)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @b})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m39.052964303s ago: executing program 2 (id=793):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1m38.530095867s ago: executing program 2 (id=794):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800)

1m38.506671013s ago: executing program 32 (id=794):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800)

1m7.048341858s ago: executing program 1 (id=1163):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffff7}]}}]}, 0x40}}, 0x0)

1m7.048223011s ago: executing program 1 (id=1164):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15258313260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000240)={'macsec0\x00', 0x1})

1m6.988778341s ago: executing program 1 (id=1167):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@getqdisc={0x40, 0x26, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfffe}, {0xfff2, 0x8}, {0x1, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0xfffffffffffffe9d}]}, 0x40}}, 0x4080)

1m6.939824474s ago: executing program 1 (id=1169):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m6.771872751s ago: executing program 1 (id=1175):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={0x0, 0x100004, 0x2f3688d5, 0x2000000})

1m6.62991626s ago: executing program 1 (id=1178):
syz_usb_connect(0x3, 0x146, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002a4b4b708b40402005ce2010203010902340102050930020904340a0395f125000a2401060052020102052404040907240501c3451d072408039c0d0109050a0808000008f809050e01ff03030208090505"], 0x0)

1m6.560150373s ago: executing program 33 (id=1178):
syz_usb_connect(0x3, 0x146, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002a4b4b708b40402005ce2010203010902340102050930020904340a0395f125000a2401060052020102052404040907240501c3451d072408039c0d0109050a0808000008f809050e01ff03030208090505"], 0x0)

2.82638036s ago: executing program 0 (id=1924):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x20a, 0x2407, 0x205, 0x0, 0x3})

2.757277939s ago: executing program 0 (id=1925):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x6719}, 0x5})

2.757102269s ago: executing program 0 (id=1926):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000300), 0x4)
sendmmsg$inet_sctp(r0, &(0x7f0000003780)=[{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x643, @loopback, 0x7}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="9f", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x0)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000)

1.850241001s ago: executing program 0 (id=1929):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x37, &(0x7f00000005c0)={[{@huge_always}, {@inode64}, {@huge_advise}, {@noswap}, {@grpquota}, {@inode64}, {@huge_advise}, {@usrquota}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]})
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, 0x0, 0x0)
ioctl$PPPOEIOCSFWD(r4, 0x4008b100, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0xf0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[], 0xfd}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
getdents64(r6, 0xfffffffffffffffe, 0x29)

1.0162686s ago: executing program 3 (id=1938):
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
chmod(&(0x7f0000000180)='./file0\x00', 0x259)
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8)

966.126354ms ago: executing program 3 (id=1939):
socket$inet6_tcp(0xa, 0x1, 0x0)
fanotify_init(0x202, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

843.955254ms ago: executing program 0 (id=1940):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000240), 0xfd, 0x9882, &(0x7f000001c800)="$eJzs3QW8pGXBuP+zyy4sKaAIFiAlJilhIB2KKClKCNKSAiKgdCihgiKggAIKIop0d4d0d3d3x/+zsCCsF4j/3/sKL9d1fdwzZ2aeM+ee+zv345nzHGaWnHfROQcGxh14pVdP/9kZu9687GJjL7jukTsPuWqvHRa6b8TFo75yMt7sI07nGHE658DAwKARtzPolcuGzHbEkYMHhgwM/98/G2v0MQaPNTAwxoizI25nYOZXTsbc/9XtXhopHuikw7/d9q/8e7mxh9/I8E+WXu6FtQYGBoa97uuHj2vaf7mj0pacY755/2n1mtvgEVcP+ud1L58OeeXfmPsODIy598CbPz6Gbzv0dV/732z49xx38oHFb34Hvvf/uZacY74FRvIfvhZHGXHZzMPX+Mhr0NjIj/MdFl39nhFTOGjExA153Xp5Jx73/79aco55Fxx483U8sNA8m9z90sv7zSFzDwwMmWdgYMi8AwND5nunPep/pnf0wVdVVVXvSHPMOcPw5+yDR/p5YNirP9fSz4XnPD/d7QMDQxZ65XnikOVefS5YVVVVVVVVVe/O5phzhrng+f+4b/X8f9Ljtx6v5/9VVVVVVVVV/3daYI45Zxj+XH+k5/8TvdXz/4fvPWi/V/72f/aZX/mqF9/ZO1FVVVVVVVVVb9m8C+Dz/0nf6vn/eUdMemHP/6uqqqqqqqr+77TISy+9tNnrXmdvxMVTv3o9Pf8/8a4bl3nHBlxVVVVVVVVV/3EvPnDcSf98zfeJB0Z6vfeXG/F7gUGHnHLxxe/YQN8dDfrX34ds/k6P6f+14c7DDpx0YGCtxd/podQ70P+Z16qv/5Xyd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xb3L8/7XX/z/xsBVefS/4T0w5w9XH/fMrX37v/yELLfDAFu/Q0N+J3qvH/wdWGzQwMMJ33NUGBgYWmmORxaYeGBg47uoZppxi4LXrZhl+3RfHH+XlN4h/9T8TmWc8vuHNJ3vldPgDZeADr93GIS/f/gIv7TPKoJEG8brGO2q//VZd8qkZRz6d6s3vx+DXPhv7yHtf/W9ZBo+00bA3+eJXb//V+zKy84ixTz187NOsv+Y606y30cafXW3N5VdZaZWV1pp1+pmmm3HWWWeaaZqVV1tjpWlf+fhmczbpyx/nejtzNtbIc/bAHK+fs5Hv25vN2aRvPWcv3+Iu5w77yqtzNuQ/nLO53nrOJl1txDcab/ahA8u9PDeDBgbGm3vowIbDz0w32sDAePOM2Hai4dt+afzBAwM7/fOODv9stNceg4M2H77NkvMuOucru6mBgX+e/rM3eT/7UUeMfPYRp3OMOJ3zlW8z7sA/H4pDZjviyMHD5+IN0zHW6GMMHmtgYIwRZ0fczsCsr5yMcfyr273J+6yPNNCXX2Zl+1f+vdzYAwMDYw7/ZOLlT9xm+NT/F96n/f/X////i9csg157PA4a8W/ENq94zTHfAv/8Xi9Pw/C5G2XEZTMPN/kffmv7N/Qv45102MCkbzHet3hdnJejx9cax02w5f/U6+LQeCd6i/G+xev4vul4l7h993teuan/sfGOtK9b8OWPs7+dfd3AW+/rRqEbWOmCj428r/vamw/xDbvLV+dotJE2erN93UR7TrL58Nuf/a33dQsOH/vQN+zrBg8MjDfXq/u64Tu+eYcO7DT8zPTDz8w3dOCA4WdmePnM6AOnDD/zuRXWXmPF4RfM/6+Pg6kHveEPNGGdzTvSOhv0uvs+aKS/7xzyyumY+776Hk5vst8cNOJu/dt9BT1ux32L8b7F+0/hPA+/bMVDh03wP/X+UzTeYW893jd7v+w3He+OT5548//weF9bZ0NfN13zv511Nukb19nwuzjK61bG2/05bEXY/pXPJ3rt1jbY9N7XfqYYOtLt/rufKeZ/63U27mojfd12ew8Mequ5me/tzM1H/2UftMXr5+bt/rw19eSvXD/KW8zNaLMuO9WrczPqfzg38/2nczP7wChvnJshA/MMDAxMMWL/MO/bmZuJ3npu3u7jZgzY/pXPV3rtorl3OPCsV+dm5Ln4d3Mz7386N5O+9riZ4uXrJhs8MOqoAxsuv/766073ysdXz07/yse3XoNzv525HPd/Zi4/POTN5vKfD9Wxbr9w33+zBv9ln/7q7c/9n87lwGtzObDayIul3q31+z93+bvL313+7vJ3l7+7/MW9yfH/117/f7dxv7jziF9uDL1wkgm3fafH+w73nj7+P8L3Dcf/t51wkgsHD7x23Vsen31lm3fl8dmZXzkZc/9Xtxv5+CAP9M2Pz+4968xb/5eOz/7/6tW1+jZ+D9f+313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uTY7/T/vq3wHcNd3Cj444EDr0vq2WWvidHu873Hv6+P8I3zcc/194qa3uGzzw2nVvefz/lW0cx/9vfW7eHd/Nx/9fXasd/69/U/7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+5Njv/P/urfARx00O4bv/r3AJePt/1x7/R43+Heq8f/e/9/b+3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uJGHP8fGOntLb/Z4wKD4///t3sT/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf9b+WMW/yXzxyz+384fs/h/J3/M4r9U/pjFf+n8MYv/MvljFv9l88cs/t/NH7P4L5c/ZvFfPn/M4v+9/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF//v5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/wf5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zB/zOK/Qf6Yxf9H+WMW/w3zxyz+G+WPWfw3zh+z+P84f8zi/5P8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+P80fs/j/LH/M4r9d/pjFf/v8MYv/DvljFv8d88cs/j/PH7P4/yJ/zOL/y/wxi/9O+WMW/53zxyz+v8ofs/j/On/M4r9L/pjF/zf5Yxb/XfPHLP675Y9Z/HfPH7P4/zZ/zOL/u/wxi/8e+WMW/z3zxyz+e+WPWfx/nz9m8f9D/pjFf+/8MYv/PvljFv9988cs/n/MH7P4/yl/7DX/QYPe0/775Y9Z1v/++WMW/z/nj1n8D8gfs/j/JX/M4n9g/pjF/6/5Yxb/v+WPWfwPyh+z+P89f8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+/8gfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxif+ggfwxi/+g/DGL/+D8MYv/KPljFv8h+WMW/6H5Yxb/UfPHLP6j5Y9Z/Iflj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW//flj1n8x80fs/iPlz9m8R8/f8zi//78MYv/B/LHLP4T5I9Z/D+YP2bxnzB/zOI/Uf6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/4nzxyz+k+SPWfwnzR+z+H88f8ziP9mr/sPeoXG9S7P4T976xyz+U+SPWfynzB+z+E+VP2bx/0T+mMV/6vwxi/8n88cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/p/PH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/bPljFv+v5I9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9q/pjF/2v5Yxb/BfPHLP5fzx+z+C+UP2bx/0b+mMX/m/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/W/ljFv8l88cs/t/OH7P4fyd/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7fzR+z+C+XP2bxXz5/zOL/vfwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/7+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8H+WMW/3Xzxyz+6+WPWfzXzx+z+P8wf8ziv0H+mMX/R/ljFv8N88cs/hvlj1n8N84fs/j/OH/M4v+T/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/j/NH7P4/yx/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP4/zx+z+P8if8zi/8v8MYv/TvljFv+d88cs/r/KH7P4/zp/zOK/S/6Yxf83+WMW/13zxyz+u+WPWfx3zx+z+P82f8zi/7v8MYv/HvljFv8988cs/nvlj73Rf5R3ejj/772J/+/zxyzr/w/5Yxb/vfPHLP775I9Z/PfNH7P4/zF/zOL/p/wxi/9++WMW//3zxyz+f36j/53/9XG9S7P4H9D6xyz+f8kfs/gfmD9m8f9r/pjF/2/5Yxb/g/7pv94178jA3p1Z/P/e+scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf0zi/3L5/2sS/0Hn549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj713/Qe9wf+K/LH3rv8b1/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/Jf1S60OL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH5P4v/xp/v+axX9Q/pjFf3D+mMV/lPwxi/+Q/DGL/9D8MYv/qPljFv/R8scs/sPyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL//vyxyz+4+aPWfzHyx+z+I+fP2bxf3/+mMX/A/ljFv8J8scs/h/MH7P4T5g/ZvGfKH/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/8Rv7T/0f31c79Is/pO0/jGL/6T5Yxb/j+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/yfyxyz+U+ePWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8f9c/pjFf5r8MYv/tPljg87YdejAwMB73n+6/DHL+p8+f8ziP0P+mMV/xvwxi//n88cs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/4X8MYv/F/PHLP5fyh+z+H85f8ziP1v+mMX/K/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mj9m8f9a/pjFf8H8MYv/1/PHLP4L5Y9Z/L+RP2bx/2b+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1b+mMV/yfwxi/+388cs/t/JH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/d/PHLP7L5Y9Z/JfPH7P4fy9/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/fv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvH/Qf6YxX/d/DGL/3r5Yxb/9fPHLP4/zB+z+G+QP2bx/1H+mMV/w/wxi/9G+WMW/43zxyz+P84fs/j/JH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/9P88cs/j/LH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/z/PHLP6/yB+z+P8yf8ziv1P+mMV/5/wxi/+v8scs/r/OH7P475I/ZvH/Tf6YxX/X/DGL/275Yxb/3fPHLP6/zR+z+P8uf8ziv0f+mMV/z/wxi/9e+WMW/9/nj1n8/5A/ZvHfO3/M4r9P/pjFf9/8MYv/H/PHLP5/yh+z+O+XP2bx3z9/zOL/5/wxi/8B+WMW/7/kj1n8D8wfs/j/NX/M4v+3/DGL/0H5Yxb/v+ePWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf8f+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UPybxH2Ugf8ziPyh/zOI/OH/M4j9K/pjFf0j+mMV/aP6YxX/U/DGL/2j5Yxb/YfljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMX/ffljFv9x88cs/uPlj1n8x88fs/i/P3/M4v+B/DGL/wT5Yxb/D+aPWfwnzB+z+E+UP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMV/4vwxi/8k+WMW/0nzxyz+H88fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/9U+WMW/0/kj1n8p84fs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4v/5/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4z5Y/ZvH/Sv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv+v5o9Z/L+WP2bxXzB/zOL/9fwxi/9C+WMW/2/kj1n8v5k/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8v5U/ZvFfMn/M4v/t/DGL/3fyxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/3fwxi/9y+WMW/+Xzxyz+38sfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfy/nz9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfx/kD9m8V83f8ziv17+mMV//fwxi/8P88cs/hvkj1n8f5Q/ZvHfMH/M4r9R/pjFf+P8MYv/j/PHLP4/yR+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/T/DGL/8/yxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/8/wxi/8v8scs/r/MH7P475Q/ZvHfOX/M4v+r/DGL/6/zxyz+u+SPWfx/kz9m8d81f8ziv1v+mMV/9/wxi/9v88cs/r/LH7P475E/ZvHfM3/M4r9X/pjF//f5Yxb/P+SPWfz3zh+z+O+TP2bx3zd/zOL/x/wxi/+f8scs/vvlj1n8988fs/j/OX/M4n9A/pjF/y/5Yxb/A/PHLP5/zR+z+P8tf8zif1D+mMX/7/ljFv+DPf6j/ycbW/wP8fj/R1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8f9H/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj0n8hwzkj1n8B709/1H/18b1Ls3iP7j1j1n8R8kfs/gPyR+z+A/NH7P4j5o/ZvEfLX/M4j8sf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+L8vf8ziP27+mMV/vPwxi//4+WMW//fnj1n8P5A/ZvGfIH/M4v/B/DGL/4T5Yxb/ifLHLP4fyh+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+E+cP2bxnyR/zOI/af6Yxf/j+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOL/ifwxi//U+WMW/0/mj1n8P5U/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8P58/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv/Z8scs/l/JH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/9X8MYv/1/LHLP4L5o9Z/L+eP2bxXyh/zOL/jfwxi/8388cs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+38scs/kvmj1n8v50/ZvH/Tv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/L+bP2bxXy5/zOK/fP6Yxf97+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL//fzxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/w+M/sP+/SYW/3WN/m8ji/96+WMW//Xzxyz+P8wfs/hvkD9m8f9R/pjFf8P8MYv/RvljFv+N88cs/j/OH7P4/yR/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/T/PHLP4/yx+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/8/zxyz+v8gfs/j/Mn/M4r9T/pjFf+f8MYv/r/LHLP6/zh+z+O+SP2bx/03+mMV/1/wxi/9u+WMW/93zxyz+v80fs/j/Ln/M4r9H/pjFf8/8MYv/XvljFv/f549Z/P+QP2bx3zt/zOK/T/6YxX/f/DGL/x/zxyz+f8ofs/jvlz9m8d8/f8zi/+f8MYv/AfljFv+/5I9Z/A/MH7P4/zV/zOL/t/wxi/9B+WMW/7/nj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX/H/ljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+Vyj9B//bLSz+Vyr9/30W/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8sck/kMH8scs/oPyxyz+g/PHLP6j5I9Z/Ifkj1n8h+aPWfxHzR+z+I+WP2bxH5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n835c/ZvEfN3/M4j9e/pjFf/z8MYv/+/PHLP4fyB+z+E+QP2bx/2D+mMV/wvwxi/9E+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8J84fs/hPkj9m8Z80f8zi//H8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f9E/pjFf+r8MYv/J/PHLP6fyh+z+H86f8zi/5n8MYv/Z/PHLP6fyx+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP6fzx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/2z5Yxb/r+SPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvH/av6Yxf9r+WMW/wXzxyz+X88fs/gvlD9m8f9G/pjF/5su/yFvd0OL/8Iu/7edxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4fyt/zOK/ZP6Yxf/b+WMW/+/kj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMX/u/ljFv/l8scs/svnj1n8v5c/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/h/P3/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/j/IH/M4r9u/pjFf738MYv/+vljFv8f5o9Z/DfIH7P4/yh/zOK/Yf6YxX+j/DGL/8b5Yxb/H+ePWfx/kj9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6Yxf+n+WMW/5/lj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMX/5/ljFv9f5I9Z/H+ZP2bx3yl/zOK/c/6Yxf9X+WMW/1/nj1n8d8kfs/j/Jn/M4r9r/pjFf7f8MYv/7vljFv/f5o9Z/H+XP2bx3yN/zOK/Z/6YxX+v/DGL/+/zxyz+f8gfs/jvnT9m8d8nf8ziv2/+mMX/j/ljFv8/5Y9Z/PfLH7P4758/ZvH/c/6Yxf+A/DGL/1/yxyz+B+aPWfz/mj9m8f9b/pjF/6D8MYv/3/PHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4v+P/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH5P4jzqQP2bxH5Q/ZvEfnD9m8R8lf8ziPyR/zOI/NH/M4j9q/pjFf7T8MYv/sPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOL/vvwxi/+4+WMW//Hyxyz+4+ePWfzfnz9m8f9A/pjFf4L8MYv/B/PHLP4T5o9Z/CfKH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOI/cf6YxX+S/DGL/6T5Yxb/j+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/yfyxyz+U+ePWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8f9c/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f98/pjFf6b8MYv/zPljFv9Z8sdG9h/6Tg/o/7U38Z81f8yy/r+QP2bx/2L+mMX/S/ljFv8v549Z/GfLH7P4fyV/zOI/+7/3H+1/dVzv0iz+c7T+MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/9X88cs/l/LH7P4L5g/ZvH/ev6YxX+h/DGL/zfyxyz+38wfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+38ofs/gvmT9m8f92/pjF/zv5Yxb/pfLH3qP+g0ayHnXp/LH3qP/LvX79L5M/ZvFfNn/M4v/d/DGL/3L5Yxb/5fPHLP7fyx+z+K+QPzbojEEjZua97b9i/phl/a+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/7+ePWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/H+SPWfzXzR+z+K+XP2bxXz9/zOL/w/wxi/8G+WMW/x/lj1n8N8wfs/hvlD9m8d84f8zi/+P8MYv/T/LHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/j/NH/M4v+z/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4/zx/zOL/i/wxi/8v88cs/jvlj1n8d84fs/j/Kn/M4v/r/DGL/y75Yxb/3+SPWfx3zR+z+O+WP2bx3z1/zOL/2/wxi//v8scs/nvkj1n898wfs/jvlT9m8f99/pjF/w/5Yxb/vfPHLP775I9Z/PfNH7P4/zF/zOL/p/wxi/9++WMW//3zxyz+f84fs/gfkD9m8f9L/pjF/8D8MYv/X/PHLP5/yx+z+B+UP2bx/3v+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfz/kT9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F/2Nv2H/G+N612axf/y1j9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+e/8DocJnF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyT+ow3kj1n8B+WPWfwH549Z/EfJH7P4D8kfs/gPzR+z+I+aP2bxHy1/zOI/LH/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/i/L3/M4j9u/pjFf7z8RzTsDecs/uPnj1n8358/ZvH/QP6YxX+C/DGL/wfzxyz+E+aPWfwnyh+z+H8of8zi/+H8sfem/yuvdPZ6/4/kj703/V/p9f4fzR+z+H8sf8ziP3H+mMV/kvwxi/+k+WMW/4/nj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/8n8scs/lPnj1n8P5k/ZvH/VP6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/fP6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/GfLH7P4fyV/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/V/PHLP5fyx+z+C+YP2bx/3r+mMV/ofwxi/838scs/t/MH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/t/KH7P4L5k/ZvH/dv6Yxf87+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bx/27+mMV/ufwxi//y+WMW/+/lj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+388fs/ivnj9m8V8jf8ziv6bKf4y3vaXFfy2V/9vP4r92/pjFf538MYv/D/LHLP7r5o9Z/NfLH7P4r58/ZvH/Yf6YxX+D/DGL/4/yxyz+G+aPWfw3yh+z+G+cP2bx/3H+mMX/J/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23Qv0eExX/btDGL/0/zxyz+P8sfs/hvlz9m8d8+f8ziv8Mr/i+89E6N612axX/H1j9m8f95/pjF/xf5Yxb/X+aPWfx3yh+z+O+cP2bx/1X+mMX/1/ljFv9d8scs/r/JH7P475o/ZvHfLX/M4r97/pjF/7f5Yxb/3+WPWfz3yB+z+O+ZP2bx3yt/zOL/+7flP/R/b1zv0iz+f2j9Yxb/vfPHLP775I9Z/PfNH7P4/zF/zOL/p/wxi/9++WMW//3zxyz+f84fs/gfkD9m8f9L/pjF/8D8MYv/X/PHLP5/yx+z+B+UP2bx/3v+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfz/kT9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMS/2ED+WMW/0H5Yxb/wfljFv9R8scs/kPyxyz+Q/PHLP6j5o9Z/EfLH7P4D8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+78sfs/iPmz9m8R8vf8ziP37+mMX//fljFv8P5I9Z/CfIH7P4fzB/zOI/Yf6YxX+i/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+H8if8ziP3X+mMX/k/ljFv9P5Y9Z/D+dP2bx/0z+mMX/s/ljFv/P5Y9Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv/P549Z/GfKH7P4z5w/9rL/q2few/6z5I9Z1v+s+WMW/y/kj1n8v/iW/rv/74/rXZrF/0utf8zi/+X8MYv/bPljFv+v5I9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9q/pjF/2v5Yxb/BfPHLP5fzx+z+C+UP2bx/0b+mMX/m/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/W/ljFv8l88cs/t/OH7P4fyd/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7fzR+z+C+XP2bxXz5/zOL/vfwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/7+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8H+WMW/3Xzxyz+6+WPWfzXfwv/of+Ncb1Ls/j/sPWPWfw3yB+z+P8of8ziv2H+mMV/o/wxi//G+WMW/x/nj1n8f5I/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/p/ljFv+f5Y9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjF/+f5Yxb/X+SPWfx/mT9m8d8pf8ziv3P+mMX/V/ljFv9f549Z/HfJH7P4/yZ/zOK/a/6YxX+3/DGL/+75Yxb/3+aPWfx/lz9m8d8jf8ziv2f+mMV/r/wxi//v88cs/n/IH7P4750/ZvHfJ3/M4r9v/pjF/4/5Yxb/P+WPWfz3yx+z+O+fP2bx/3P+mMX/gPwxi/9f8scs/gfmj1n8/5o/ZvH/W/6Yxf+g/DGL/9/zxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOL/j/wxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxv+et/Mf5L4zrXZrF/97WP2bxvy9/zOJ/f/6Yxf+B/DGD/6AhA8MezB8z+A9f/w/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9J/EcfyB+z+A/KH7P4D84fs/iPkj9m8R+SP2bxH5o/ZvEfNX/M4j9a/pjFf1j+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxf1/+mMV/3Pwxi/94+WMW//Hzxyz+788fs/h/IH/M4j9B/pjF/4P5Yxb/CfPHLP4T5Y9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bxnzh/zOI/Sf6YxX/S/DGL/8fzxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOI/Vf6Yxf8T+WMW/6nzxyz+n8wfs/h/Kn/M4v/p/DGL/2dk/tO9ze0s/p+V+b/dLP6fyx+z+E+TP2bxn3ZgYLN3akjv5iz+07X+MYv/9PljFv8Z8scs/jPmj1n8P58/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv/Z8scs/l/JH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/9X8MYv/1/LHLP4L5o9Z/L+eP2bxXyh/zOL/jfwxi/8388cs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+38scs/kvmj1n8v50/ZvH/Tv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/L+bP2bxXy5/zOK/fP6Yxf97+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL//fzxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/w/yxyz+6+aPWfzXyx+z+K+fP2bx/2H+mMV/g/wxi/+P8scs/hvmj1n8N8ofs/hvnD9m8f9x/pjF/yf5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8f5o/ZvH/Wf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/H+eP2bx/0X+mMX/l/ljFv+d8scs/jvnj1n8f5U/ZvH/df6YxX+X/DGL/2/yxyz+u+aPWfx3yx+z+O+eP2bx/23+mMX/d/ljFv898scs/nvmj1n898ofs/j/Pn/M4v+H/DGL/975Yxb/ffLHLP775o9Z/P+YP2bx/1P+mMV/v/wxi//++WMW/z/nj1n8D8gfs/j/JX/M4n9g/pjF/6/5Yxb/v+WPWfwPyh+z+P89f8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H54+9d/33OPd1l45+Qv7Ye9f/jev/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvH/R/6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fyxN/gPe+/6P5E/Zln/T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH5P4jzGQP2bxH5Q/ZvEfnD9m8R8lf8ziPyR/zOI/NH/M4j9q/pjFfzSV/+hve0uL/zCV/9vP4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/i/L3/M4j9u/pjFf7z8MYv/+PljFv/3549Z/D+QP2bxnyB/zOL/wfwxi/+E+WMW/4nyxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv/J8scs/pPnj1n8p8gfey/7v64xpswfey/7v379T5U/ZvH/RP6YxX/q/DGL/yfzxyz+n8ofs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+n88fs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9s+WMW/6/kj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2r+mMX/a/ljFv8F88cs/l/PH7P4L5Q/ZvH/Rv6Yxf+b+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf9b+WMW/yXzxyz+384fs/h/J3/M4r9U/pjFf+n8MYv/MvljFv9l88cs/t/NH7P4L5c/ZvFfPn/M4v+9/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF//v5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/wf5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zB/zOK/Qf6Yxf9H+WMW/w3zxyz+G+WPWfw3zh+z+P84f8zi/5P8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+P80fs/j/LH/M4r9d/pjFf/v8MYv/DvljFv8d88cs/j/PH7P4/yJ/zOL/y/wxi/9O+WMW/53zxyz+v8ofs/j/On/M4r9L/pjF/zf5Yxb/XfPHLP675Y9Z/HfPH7P4/zZ/zOL/u/wxi/8e+WMW/z3zxyz+e+WPWfx/nz9m8f9D/pjFf+/8MYv/PvljFv9988cs/n/MH7P4/yl/zOK/X/6YxX///DGL/5/zxyz+B+SPWfz/kj9m8T8wf8zi/9f8MYv/3/LHLP4H5Y9Z/P+eP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/jX+c/+J0Y17s0i/8JrX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+P8jf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/K/Qf/W1sY/F/Tuj/drL4P58/ZvF/IX/M4v9i/pjF/6X8MYn/mAP5Yxb/QfljFv/B+WMW/1Hyxyz+Q/LHLP5D88cs/qPmj1n8R8sfs/gPyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7vyx+z+I+bP2bxHy9/zOI/fv6Yxf/9+WMW/w/kj1n8J8gfs/h/MH/M4j9h/pjFf6L8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/x/LHLP4T549Z/CfJH7P4T5o/ZvH/eP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fyJ/zOI/df6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/8/lj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/8/nj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/C/ljFv+5h+VPWfy/1PrHLP5fzh+z+M+WP2bx/0r+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/r+aPWfy/lj9m8V8wf8zi//X8MYv/QvljFv9v5I9Z/L+ZP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/L+VP2bxXzJ/zOL/7fwxi/938scs/kvlj1n8l84fs/gvkz9m8V82f8zi/938MYv/cvljFv/l88cs/t/LH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8v58/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8f5A/ZvFfN3/M4r9e/pjFf/38MYv/D/PHLP4b5I9Z/H+UP2bx3zB/zOK/Uf6YxX/j/DGL/4/zxyz+P8kfs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL/0/wxi//P8scs/tvlj1n8t88fs/jvkD9m8d8xf8zi//P8MYv/L/LHLP6/zB97z/m/Dvn1/jvlj73n/N9k/e+cP2bx/1X+mMX/1/ljFv9d8scs/r/JH7P475o/ZvHfLX/M4r97/pjF/7f5Yxb/3+WPWfz3yB+z+O+ZP2bx3yt/zOL/+/wxi/8f8scs/nvnj1n898kfs/jvmz9m8f9j/pjF/0/5Yxb//fLHLP77549Z/P+cP2bxPyB/zOL/l/wxi/+B+WMW/7/mj1n8/5Y/ZvE/KH/M4v/3/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz/2qv/AsIGB97L/CfljlvV/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/j/I3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfc/gn/2Y5/AfGvK9HAWbxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMS/7EG8scs/oPyxyz+g63+K7z11Rb/Uaz+/yaL/5D8MYv/0Pwxi/+o+WMW/9Hyxyz+w/LHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/+/LHLP7j5o9Z/MfLH7P4j58/ZvF/f/6Yxf8D+WMW/wnyxyz+H8wfs/hPmD9m8Z8of8zi/6H8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/xPljFv9J8scs/pPmj1n8P54/ZvGfLH/M4j95/tgI/9EHv8f9p8gfs6z/KfPHLP5T5Y9Z/D+RP2bxnzp/zOL/yfwxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi//n8scs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi//n88cs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/4X8MYv/F/PHLP5fyh+z+H85f8ziP1v+mMX/K/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mj9m8f9a/pjFf8H8MYv/1/PHLP4L5Y9Z/L+RP2bx/2b+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1b+mMV/yfwxi/+388cs/t/JH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/d/PHLP7L5Y9Z/JfPH7P4fy9/zOK/Qv6YxX9Fo//buMMW/5WM/m8ji//K+WMW/1Xyxyz+q+aPWfxXyx+z+H8/f8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+P8gf8ziv27+mMV/vfwxi//6+WMW/x/mj1n8N8gfs/j/KH/M4r9h/pjFf6P8MYv/xvljFv8f549Z/H+SP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjF/6f5Yxb/n+WPWfy3yx+z+G+fP2bx3yF/zOK/Y/6Yxf/n+WMW/1/kj1n8f5k/ZvHfKX/M4r9z/pjF/1f5Yxb/X+ePWfx3yR+z+P8mf8ziv2v+mMV/t/wxi//u+WMW/9/mj1n8f5c/ZvHfI3/M4r9n/pjFf6/8MYv/7/PHLP5/yB+z+O+dP2bx3yd/zOK/b/6Yxf+P+WMW/z/lj1n898sfs/jvnz9m8f9z/pjF/4D8MYv/X/LHLP4H5o9Z/P+aP2bx/1v+mMX/oPwxi//f88cs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi/4/8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G8B/3P/muN6lvbf9b3710rFubP1j723/1xrrpvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/7Ye9R/ypEuHeuu/LH3qP/LvX79350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH5P4jz2QP2bxH5Q/ZvEfnD9m8R8lf8ziPyR/zOI/NH/M4j9q/pjFf7T8MYv/sPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOL/vvwxi/+4+WMW//Hyxyz+4+ePWfzfnz9m8f9A/pjFf4L8MYv/B/PHLP4T5o9Z/CfKH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOI/cf6YxX+S/DGL/6T5Yxb/j+ePWfwnyx+z+E+eP2bxnyL/gTvgMov/lPljFv+p8scs/p/IH7P4T50/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvH/bP6Yxf9z+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf/z+WMW/5nyxyz+M+ePWfxnyR97g/+Iy8Z9h8f0/9Sb+M+aP2ZZ/1/IH7P4fzF/zOL/pfwxi/+X88cs/rPlj1n8v5I/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMX/q/ljFv+v5Y9Z/BfMH7P4fz1/zOK/UP6Yxf8b+WMW/2/mj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/2/lj1n8l8wfs/h/O3/M4v+d/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4fzd/zOK/XP6YxX/5/DGL//fyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/7+ePWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/H+SPWfzXzR+z+K+XP2bxXz9/zOL/w/wxi/8G+WMW/x/lj1n8N8wfs/hvlD9m8d84f8zi/+P8MYv/T/LHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/j/NH/M4v+z/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4/zx/zOL/i/wxi/8v88cs/jvlj1n8d84fe6/6DxvJ/1f5Y+9V/4GR/H+dP2bx3yV/zOL/m/wxi/+u+WMW/93yxyz+u+ePWfx/mz9m8f9d/pjFf4/8MYv/nvljFv+98scs/r/PH7P4/yF/zOK/d/6YxX+f/DGL/775Yxb/P+aPWfz/lD9m8d8vf8ziv3/+mMX/z/ljFv8D8scs/n/JH7P4H5g/ZvH/a/6Yxf9v+WMW/4Pyxyz+f88fs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi/8/8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b9rZP/N/8vjepdm8b+79Y9Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHJP7jDOSPWfwH5Y9Z/Afnj1n8R8kfs/gPyR+z+A/NH7P4j5o/ZvEfLX/M4j8sf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+L8vf8ziP27+mMV/vPwxi//4+WMW//fnj1n8P5A/ZvGfIH/M4v/B/DGL/4T5Yxb/ifLHLP4fyh+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+E+cP2bxnyR/zOI/af6Yxf/j+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOL/ifwxi//U+WMW/0/mj1n8P5U/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8P58/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv/Z8scs/l9R+y835ptdY/GfXe3/5ln858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H81f8zi/7X8MYv/gvljFv+v549Z/BfKH7P4fyN/zOL/zfwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/rfwxi/+S+WMW/2/nj1n8v5M/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/v5o9Z/JfLH7P4L58/ZvH/Xv6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v/9/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4v+D/DGL/7r5Yxb/9fLHLP7r549Z/H+YP2bx3yB/zOL/o/wxi/+G+WMW/43yxyz+G+ePWfx/nP/AwMDo/3KJxf8n+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/H+aP2bx/1n+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx/nj9m8f9F/pjF/5f5Yxb/nfLHLP47549Z/H+VP2bx/3X+mMV/l/wxi/9v8scs/rvmj1n8d8sfs/jvnj9m8f9t/pjF/3f5Yxb/PfLHLP575o9Z/PfKH7P4/z5/zOL/h/wxi//e+WMW/33yxyz+++aPWfz/mD9m8f9T/pjFf7/8MYv//vljFv8/549Z/A/IH7P4/yV/zOJ/YP6Yxf+v+WMW/7/lj1n8D8ofs/j/PX/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/v/IH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYn/+wbyxyz+g/LHLP6D88cs/qPkj1n8h+SPWfyH5o9Z/EfNH7P4j5Y/ZvEflj9m8R89f8ziP0b+mMV/zPyx/4+d+w/Xuq7vOH7z4wCZpB/b1KUNh8Zcm5HIaNRCVBSPP06ZaOZv1COQIPJDEkzFjVbq2HSpmyWbWjjmbNUSh5vr14qGZc3WiK1VTnEtjDEHi8wZuw6cg3D29lw7X/b9uvl+PP7gnPs+vu+U5/Xyvr24rrL031v/UJb+w/UPZen/Kv1DWfrvo38oS/999Q9l6V/0D2Xpv5/+oSz9X61/KEv/n9I/lKX/T+sfytJ/f/1DWfofoH8oS/8D9Q9l6f8z+oey9H+N/qEs/Q/SP5Sl/8H6h7L0f63+oSz9f1b/UJb+I/QPZel/iP6hLP1/Tv9Qlv4j9Q9l6X+o/qEs/Q/TP5Sl/+v0D2XpP0r/UJb+P69/KEv/w/UPZen/C/qHsvR/vf6hLP1/Uf9Qlv6/pH8oS/8j9A9l6f8G/UNZ+o/WP5Sl/xv1D2Xpf6T+oSz9x+gfytL/KP1DWfqP1T+Upf8v6x/K0n+c/qEs/d+kfyhL/1/RP5Sl/3j9Q1n6v1n/UJb+b9E/lKX/r+ofytL/rfqHsvSfoH8oS/+j9Q9l6T9R/1CW/sfoH8rS/1j9Q1n6H6d/KEv/SfqHsvQ/Xv9Qlv4n6B/K0n+y/qEs/U/UP5Slf7v+oSz9T9I/lKX/yfqHsvQ/Rf9Qlv6n6h/K0r9D/1CW/m/TP5Sl/9v1D2Xpf5r+oSz936F/KEv/0/UPZek/Rf9Qlv5n6B/K0v9M/UNZ+r9T/1CW/mfpH8rS/136h7L0P1v/UJb+5+gfytL/XP1DWfqfp38oS//z9Q9l6X+B/qEs/S/UP5Sl/1T9Q1n6X6R/KEv/i/UPZel/if6hLP079Q9l6X+p/qEs/afpH8rSf7r+oSz9Z+gfytL/3fqHsvS/TP9Qlv4z9Q9l6T9L/1CW/pfrH8rSf7b+oSz9r9A/lKX/HP1DWfrP1T+Upf88/UNZ+s/XP5Sl/5X6h7L0X6B/KEv/9+gfytL/Kv1DWfov1D+Upf8i/UNZ+l+tfyhL//fqH8rS/xr9Q1n6X6t/KEv/6/QPZem/WP9Qlv7X6x/K0v/X9A9l6f/r+oey9F+ifyhL//fpH8rS/zf0D7R1f33593+//qEs+/+A/qEs/W/QP5Sl/436h7L0v0n/UJb+v6l/KEv/pfqHsvT/Lf1DWfr/tv6hLP1v1j+Upf8t+oey9P8d/UNZ+n9Q/1CW/rfqH8rS/zb9Q1n6365/KEv/39U/lKX/7+kfytL/Dv1DWfp/SP9Qlv4f1j+Upf+d+oey9F+mfyhL/9/XP5Sl/x/oH8rS/y79Q1n6361/KEv/e/QPZen/Ef1DWfp/VP9Qlv7L9Q9l6X+v/qEs/f9Q/1CW/iv0D2Xp/0f6h7L0v0//UJb+f6x/KEv/+/UPZen/Mf1DWfr/if6hLP0/rn8oS/9P6B/K0v+T+oey9P9T/UNZ+n9K/1CW/g/oH8rSf6X+oSz9H9Q/lKX/n+kfytJ/lf6hLP0f0j+Upf+f6x/K0v8v9A9l6f+w/qEs/f9S/1CW/p/WP5Sl/2f0D2Xp/1n9Q1n6f07/UJb+n9c/lKX/X+kfytL/C/qHsvT/ov6hLP1X6x/K0v9L+oey9P9r/UNZ+q/RP5Sl/yP6h7L0/7L+oSz9v6J/KEv/R/UPZen/Vf1DWfp/Tf9Qlv5/o38oS//H9A9l6f91/UNZ+v+t/qEs/b+hfyhL/7/TP5Sl/1r9Q1n6f1P/UJb+6/QPZen/9/qHsvT/B/1DWfp/S/9Qlv7/qH8oS/9v6x/K0v87+oey9P+u/qEs/R/XP5Sl/z/pH8rS/wn9Q1n6P6l/KEv/9fqHsvR/Sv9Qlv7/rH8oS//v6R/K0v9f9A9l6f99/UNZ+m/QP5Sl/9P6h7L0/4H+oSz9N+ofytL/X/UPZem/Sf9Qlv7/pn8oS/9n9A9l6f/v+oey9N+sfyhL/y36h7L0/w/9Q1n6/1D/UJb+W/UPZen/I/1DWfo/q38oS/8f6x/K0v85/UNZ+v+n/qEs/Z/XP5Sl/0/0D2Xpv03/UJL++7b0D2XpP0D/UJb+A/UPZek/SP9Qlv6D9Q9l6d+mfyhL/yH6h7L0H6p/KEv/YfqHsvR/hf6hLP330j+Upf8r9Q9l6b+3/qEs/YfrH8rS/1X6h7L030f/0MuuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP818xYuumzqzJmdc33jG9/4Zuc3L/W/mQAAgP9tL3zof6n/TgAAAAAAAAAAAAAAAAAAACCvJv7vxF7qf0YAAAAAAAAAAAAAAPj/rr3jmI2DBuz21KBdH7z20c7tX8duPWv68uUPlp6v3T8+OXjJgbs+2LZt27Zlz0yY1P1waKvV6vpf27f78bDex12vv3jEnQfueFQmfuH2x8+fMvyUuStvGfzNZTd1PN22/dm21oWXzpjZ+caBrVY5rq11VdeDIwe0WuWEttbNXQ/GdD2Y3NZa0fXgqO0PXtH6bNeDN1w8e+YlXU+cWPn3DF4u2jsWtwbtttjWbv822HX/i0c8Mb3nax8v2fNqg1vd+x+58ssH9PpZjxfZf8/rl2N677/f/4DAi+rf/p9d1/O1j5f8b+//H1mzdVH0sxfff8/rl2PtH+oTfP7fbaO9P/f3+vx/SPCSO++PHrbm1q79t59x38HdTw3+n3z+f+H1y3G99z9wt8//XZ/jJ/V8/h/aapXj9/C3A1Jp77h+Y1/v/33vf/Bret0M2HX/93x1/d5d+7/3udaS7qfa+rn/SX29/9/Q6+8V6J/2jru39Xr/78f+W6OCl9y5/w0rh2///L/+/ov33+Vn/dn/8b33P3r+rCtGz1u46IgZs6ZO65zWefn4MeOOHDt+/Lhxo7d/Itjx6x7+pkASe/b+39qr182AVqtz5/3q+26a1LX/TQ8t+Wj3U8P6uf8T+nz/P8T7P4RGDmwNGdK6aur8+XOP3PFrz8MxO37d8ZcF++/Hf/8fenj3X9bzZ4YDWq0Dd96POn/80K79Xz2nrOp+akg/9z+5z/1P3P3PKoH+2cP3/0t63ey2/6M3XLuga/+H/XC/9d1P9fe//0/sc/93ef+HPdHe0ar1TbRr/0cNvf6katel3Z//QX2a2P+IzTdvqXZdTrJ/qE8T+5+y9C0XVbsuJ9s/1KeJ/T8464Kl1a7LKfYP9Wli/8+/estB1a7LqfYP9Wli/49976nl1a5Lh/1DfZrY/4fu6Diq2nV5m/1DfZrY/xFX/mhCtevydvuH+jSx/0tfefqKatflNPuH+jSx/5O2Hbt/tevyDvuH+jSx/wHXf39xtetyuv1DfZrY/5NTl86udl2m2D/Up4n9rxgx6tlq1+UM+4f6NLH/JU+/aXK163Km/UN9mtj/126787Fq1+Wd9g/1aWL/nzx3vzurXZez7B/q08T+fzzyob2qXZd32T/Up4n9r1274oFq1+Vs+4f6NLH/ZSsGjax2Xc6xf6hPE/u/7sRpj1a7LufaP9Snif2PHfeVc6pdl/PsH+rTxP4P/Py3n6p2Xc63f6hPE/s//eEF86pdlwvsH+rTxP4XHPSJn1S7LhfaP9Snif2/tfOg6dWuy1T7h/o0sf9yy15rq12Xi+wf6tPE/s/edPfEatflYvuH+jSx/1X7fPHj1a7LJfYP9Wli/5vnXD6+2nXptH+oTxP7/+77rnt/tetyqf1DfZrY/63PfaNUuy7T7B/q08T+N4w5+9xq12W6/UN9mtj/3ac880i16zLD/qE+Tex/6arH51e7Lu+2f6hPE/tfvfrkJ6pdl8vsH+rTxP4PGzV6eLXrMtP+oT5N7H/2WUs+XO26zLJ/qE8T+z/u/tteV+26XG7/UJ8m9j/s6xM+Ve26zLZ/qE8T+//MhA98utp1ucL+oT5N7H/LxEMPr3Zd5tg/1KeJ/a97YMzt1a7LXPuH+jSx/w8+ckfF6zLP/qE+Tex/zuuf31Ttusy3f6hPE/t/85QzF1a7LlfaP9Snif3vf9fkL1W7LgvsH+rTxP7P+84PTqt2Xd5j/1CfJvZ/6AEXHVztulxl/1CfJvY/fcaaG6tdl4X2D/VpYv+Tlq0bW+26LLJ/qE8T+9/nyXn3VLsuV9s/1KeJ/W8cdMCp1a7Le+0f6tPE/u+95uFvVbsu19g/1KeJ/d94w8c6q12Xa+0f6tPE/j+3dcjmatflOvsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRC9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBRAAAA//8xA+DQ")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)
lseek(r0, 0x8, 0x4)

643.328043ms ago: executing program 0 (id=1941):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0))

237.182417ms ago: executing program 4 (id=1950):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf253d0000000e0001"], 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x4c094)

237.082049ms ago: executing program 4 (id=1951):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10)

184.511271ms ago: executing program 4 (id=1952):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

184.271844ms ago: executing program 4 (id=1953):
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r1, 0x3)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0xcea0, @local}, 0x10)
listen(r0, 0x3)

183.016683ms ago: executing program 4 (id=1954):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000480)={0x4041}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)

117.156135ms ago: executing program 4 (id=1955):
r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000002080)=[{0x8, 0x211, 0x0, 0x0}, {0x401, 0x4658966eeb93c24b, 0x0, 0x0}], 0x2})

117.000468ms ago: executing program 3 (id=1956):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000080)={0x1, 0x1})

55.823377ms ago: executing program 3 (id=1957):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000003c0)='./file0\x00', 0x210451, &(0x7f0000000000)=ANY=[], 0x1, 0x24c, &(0x7f0000000680)="$eJzsmb9v00AUx793dh0HKn4MMDAQhg5Boo7tAOqCUFmYikAtQowRNVVbt0FphNpKSI3Eyh+AxN/B0ImBjZ2JAZiKREaQEBKHzr6zL44jkyIm3keK/fW7d3fvnn3PkgOCIP5bPn/69vHFrYWVKwBmMYeash9Z2sMGN/w/vLRmlHy7ferZYXE8BkCI/NqumN8B8GbRAg7SYYXIe/8QwJwacwU80ZL74Lis9AMweDpWkfeOwPBQmTcM3a0rEUfsUTdefbweR748BPIQykMbECPxDwcMqwBcNQUz4t/Z29/sxM/RS0UcaTEj9Dx5k6s6jTq7selTIrBRmrpaFt8ixw0jBRw4rZ08dfaN/AXgCJRug2FZ6QXU4HleQ11GgbH+C3Y+vpXeNmP9FQvIhDuN89+Ls/PT9LpY0nSzZIH1ku76CTSb9JO2+UuMjXyAinj4hCacAZTFOdYtmFbI7VftXFz7nwneGO/lVI3jZqmzjzVpHLGiRW7ozHJ+ePiu0EtnOrO8X5o0BcP08cj6+i+3A1TdyS1fUjFbB5ZyZ5aXp3Mj41xK134HQNMsYTovEx8JHN2GKuBGfbKNt0Krv/WktbO3P7++1VmL1qLtMGxf96/6/rWwJfPit5IKXVoA0/rnJvXphFkUDe59z7XDHOx2+v1esAv0e4HeoL0wsYZGxV1+3f2aRT0ccDR/CqFfL44xESvMx9SPv5JnqZrWxOAJgiAIgiAIgiAIgiAIgiAqEOpbZA04CTTAkq+sA+PfKjGG7dzF0zrwOwAA///NqjyN")
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)

326.806µs ago: executing program 3 (id=1958):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001"], 0x24}}, 0x40004)

0s ago: executing program 3 (id=1959):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f13736080000000000000096c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb042d200", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

718] syz.4.1307: attempt to access beyond end of device
[  154.108523][ T9718] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0
[  154.116338][ T9718] syz.4.1307: attempt to access beyond end of device
[  154.116338][ T9718] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0
[  154.129126][ T9718] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  154.135472][ T9720] loop3: detected capacity change from 0 to 256
[  154.139824][ T9718] syz.4.1307: attempt to access beyond end of device
[  154.139824][ T9718] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0
[  154.173827][ T9720] FAT-fs (loop3): Directory bread(block 64) failed
[  154.176092][ T9720] FAT-fs (loop3): Directory bread(block 65) failed
[  154.179651][ T9718] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  154.187166][ T9720] FAT-fs (loop3): Directory bread(block 66) failed
[  154.191789][ T9718] syz.4.1307: attempt to access beyond end of device
[  154.191789][ T9718] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0
[  154.198394][ T9720] FAT-fs (loop3): Directory bread(block 67) failed
[  154.202643][ T9720] FAT-fs (loop3): Directory bread(block 68) failed
[  154.206778][ T9720] FAT-fs (loop3): Directory bread(block 69) failed
[  154.210226][ T9718] syz.4.1307: attempt to access beyond end of device
[  154.210226][ T9718] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0
[  154.219561][ T9720] FAT-fs (loop3): Directory bread(block 70) failed
[  154.226191][ T9720] FAT-fs (loop3): Directory bread(block 71) failed
[  154.229215][ T9720] FAT-fs (loop3): Directory bread(block 72) failed
[  154.231987][ T9720] FAT-fs (loop3): Directory bread(block 73) failed
[  154.232628][ T9718] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  154.243508][ T9718] syz.4.1307: attempt to access beyond end of device
[  154.243508][ T9718] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0
[  154.289637][ T9718] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  154.294630][ T9718] syz.4.1307: attempt to access beyond end of device
[  154.294630][ T9718] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0
[  154.299451][ T9718] syz.4.1307: attempt to access beyond end of device
[  154.299451][ T9718] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0
[  154.310171][ T9718] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  154.313974][ T9718] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  154.316826][ T9725] loop0: detected capacity change from 0 to 1024
[  154.319909][ T9718] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  154.322148][ T9725] EXT4-fs: Ignoring removed nobh option
[  154.325488][ T9718] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  154.358491][ T9725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.362920][ T9718] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  154.495968][ T9725] EXT4-fs warning (device loop0): ext4_rename_delete:3731: inode #12: comm syz.0.1313: Deleting old file: nlink 2, error=-2
[  154.560469][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.601752][ T9736] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15)
[  154.614908][   T33] audit: type=1800 audit(1755785923.471:130): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1317" name="/" dev="9p" ino=2 res=0 errno=0
[  154.697449][ T9738] loop0: detected capacity change from 0 to 4096
[  154.706657][ T9738] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  155.045109][ T9746] loop3: detected capacity change from 0 to 4096
[  155.106111][ T9749] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  155.120302][ T9746] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 524288
[  155.123534][ T9746] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15)
[  155.127570][ T9746] Remounting filesystem read-only
[  155.129584][ T9746] NILFS (loop3): error -5 truncating bmap (ino=15)
[  155.186717][ T8170] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  155.196096][ T9751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1324'.
[  155.199173][ T9751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1324'.
[  155.343375][ T9761] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1329'.
[  155.350133][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'.
[  155.356992][ T9763] loop4: detected capacity change from 0 to 16
[  155.359972][ T9759] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.361533][ T9763] erofs (device loop4): mounted with root inode @ nid 36.
[  155.390356][ T9759] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.516289][ T9767] loop3: detected capacity change from 0 to 32768
[  155.519408][ T9767] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1332 (9767)
[  155.526630][ T9767] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  155.530407][ T9767] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  155.565566][ T9767] BTRFS info (device loop3): rebuilding free space tree
[  155.571029][ T9767] BTRFS info (device loop3): allowing degraded mounts
[  155.574451][ T9767] BTRFS info (device loop3): enabling ssd optimizations
[  155.577331][ T9767] BTRFS info (device loop3): enabling free space tree
[  155.580205][ T9767] BTRFS info (device loop3): force clearing of disk cache
[  155.583209][ T9767] BTRFS info (device loop3): use zstd compression, level 3
[  155.587091][ T9767] BTRFS info (device loop3): max_inline set to 0
[  155.593128][   T33] audit: type=1800 audit(1755785924.441:131): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1332" name="bus" dev="loop3" ino=263 res=0 errno=0
[  155.602646][   T33] audit: type=1800 audit(1755785924.451:132): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1332" name="file2" dev="loop3" ino=261 res=0 errno=0
[  155.609785][ T5854] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  155.625854][ T8170] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  155.714055][  T971] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  155.763759][ T5854] usb 5-1: Using ep0 maxpacket: 32
[  155.767575][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  155.772151][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  155.779707][ T5854] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  155.783626][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.787454][ T5854] usb 5-1: Product: syz
[  155.789200][ T5854] usb 5-1: Manufacturer: syz
[  155.791119][ T5854] usb 5-1: SerialNumber: syz
[  155.795168][ T5854] usb 5-1: config 0 descriptor??
[  155.801678][ T5854] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  155.875211][  T971] usb 1-1: config 0 has an invalid interface number: 30 but max is 0
[  155.878759][  T971] usb 1-1: config 0 has no interface number 0
[  155.881340][  T971] usb 1-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2
[  155.885820][  T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.890231][  T971] usb 1-1: config 0 descriptor??
[  155.898190][  T971] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state.
[  155.901080][  T971] usb 1-1: setting power ON
[  155.902978][  T971] dvb-usb: bulk message failed: -22 (2/0)
[  155.923848][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  156.005326][ T5895] usb 5-1: Failed to submit usb control message: -71
[  156.005497][ T5854] usb 5-1: USB disconnect, device number 4
[  156.008205][ T5895] usb 5-1: unable to send the bmi data to the device: -71
[  156.015108][ T5895] usb 5-1: unable to get target info from device
[  156.017977][ T5895] usb 5-1: could not get target info (-71)
[  156.020135][ T5895] usb 5-1: could not probe fw (-71)
[  156.044010][  T971] dvb-usb: bulk message failed: -22 (1/0)
[  156.073744][    T9] usb 4-1: Using ep0 maxpacket: 32
[  156.077246][    T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  156.080729][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.087115][    T9] usb 4-1: config 0 descriptor??
[  156.155612][  T971] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  156.165241][  T971] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19)
[  156.168557][  T971] dvb_usb_cxusb 1-1:0.30: probe with driver dvb_usb_cxusb failed with error -22
[  156.174448][  T971] usb 1-1: USB disconnect, device number 20
[  156.292799][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  156.297445][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  156.304230][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  156.307142][    T9] usb 4-1: media controller created
[  156.316661][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  156.497527][    T9] az6027: usb out operation failed. (-71)
[  156.501356][    T9] az6027: usb out operation failed. (-71)
[  156.504079][    T9] stb0899_attach: Driver disabled by Kconfig
[  156.506643][    T9] az6027: no front-end attached
[  156.506643][    T9] 
[  156.510237][    T9] az6027: usb out operation failed. (-71)
[  156.512225][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  156.515134][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17
[  156.522480][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[  156.525521][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  156.533399][    T9] usb 4-1: USB disconnect, device number 6
[  156.551069][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  156.642102][ T9798] loop0: detected capacity change from 0 to 4096
[  156.651362][ T9798] NILFS (loop0): invalid segment: Checksum error in segment payload
[  156.655177][ T9798] NILFS (loop0): trying rollback from an earlier position
[  156.664141][ T9798] NILFS (loop0): recovery complete
[  156.690806][ T9800] loop0: detected capacity change from 0 to 128
[  156.962537][ T9812] loop0: detected capacity change from 0 to 764
[  156.968698][ T9812] Symlink component flag not implemented
[  156.971364][ T9812] Symlink component flag not implemented
[  156.975577][ T9812] Symlink component flag not implemented (129)
[  156.979788][ T9812] Symlink component flag not implemented (6)
[  157.073051][ T9816] loop0: detected capacity change from 0 to 4096
[  157.082800][ T9816] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  157.092334][ T9816] ntfs3(loop0): $Volume is corrupted.
[  157.272079][ T5232] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  157.276079][ T5232] CPU: 0 UID: 0 PID: 5232 Comm: kworker/u11:1 Not tainted syzkaller #0 PREEMPT(full) 
[  157.276098][ T5232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  157.276108][ T5232] Workqueue: hci0 hci_rx_work
[  157.276130][ T5232] Call Trace:
[  157.276134][ T5232]  <TASK>
[  157.276139][ T5232]  dump_stack_lvl+0x189/0x250
[  157.276159][ T5232]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.276174][ T5232]  ? __pfx__printk+0x10/0x10
[  157.276189][ T5232]  ? kernfs_root+0x1c/0x230
[  157.276204][ T5232]  ? kernfs_path_from_node+0x250/0x290
[  157.276217][ T5232]  ? kernfs_path_from_node+0x2f/0x290
[  157.276230][ T5232]  sysfs_create_dir_ns+0x259/0x280
[  157.276242][ T5232]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  157.276284][ T5232]  ? do_raw_spin_unlock+0x4d/0x240
[  157.276300][ T5232]  kobject_add_internal+0x59f/0xb40
[  157.276322][ T5232]  kobject_add+0x155/0x220
[  157.276348][ T5232]  ? __pfx_kobject_add+0x10/0x10
[  157.276366][ T5232]  ? _raw_spin_unlock+0x28/0x50
[  157.276382][ T5232]  ? get_device_parent+0x366/0x3a0
[  157.276397][ T5232]  device_add+0x408/0xb50
[  157.276409][ T5232]  hci_conn_add_sysfs+0xd5/0x1e0
[  157.276422][ T5232]  le_conn_complete_evt+0xc3a/0x1220
[  157.276443][ T5232]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  157.276459][ T5232]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  157.276475][ T5232]  ? __asan_memcpy+0x40/0x70
[  157.276490][ T5232]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  157.276506][ T5232]  ? skb_pull_data+0xfb/0x200
[  157.276521][ T5232]  hci_le_conn_complete_evt+0x187/0x450
[  157.276539][ T5232]  hci_event_packet+0x78f/0x1200
[  157.276552][ T5232]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  157.276569][ T5232]  ? __pfx_hci_event_packet+0x10/0x10
[  157.276581][ T5232]  ? rcu_is_watching+0x15/0xb0
[  157.276593][ T5232]  ? hci_send_to_monitor+0xe2/0x570
[  157.276611][ T5232]  hci_rx_work+0x46a/0xe80
[  157.276625][ T5232]  ? process_scheduled_works+0x9ef/0x17b0
[  157.276637][ T5232]  process_scheduled_works+0xae1/0x17b0
[  157.276654][ T5232]  ? __pfx_process_scheduled_works+0x10/0x10
[  157.276668][ T5232]  worker_thread+0x8a0/0xda0
[  157.276685][ T5232]  kthread+0x711/0x8a0
[  157.276700][ T5232]  ? __pfx_worker_thread+0x10/0x10
[  157.276710][ T5232]  ? __pfx_kthread+0x10/0x10
[  157.276724][ T5232]  ? rcu_is_watching+0x15/0xb0
[  157.276734][ T5232]  ? __pfx_kthread+0x10/0x10
[  157.276748][ T5232]  ret_from_fork+0x3fc/0x770
[  157.276761][ T5232]  ? __pfx_ret_from_fork+0x10/0x10
[  157.276774][ T5232]  ? __switch_to_asm+0x39/0x70
[  157.276789][ T5232]  ? __switch_to_asm+0x33/0x70
[  157.276803][ T5232]  ? __pfx_kthread+0x10/0x10
[  157.276818][ T5232]  ret_from_fork_asm+0x1a/0x30
[  157.276838][ T5232]  </TASK>
[  157.276855][ T5232] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  157.380166][ T5232] Bluetooth: hci0: failed to register connection device
[  157.724693][ T9835] loop4: detected capacity change from 0 to 64
[  157.728216][ T9835] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  157.949998][ T9845] loop4: detected capacity change from 0 to 40427
[  157.954081][ T9845] F2FS-fs: heap/no_heap options were deprecated
[  157.957225][ T9845] F2FS-fs (loop4): invalid crc value
[  157.959197][ T9845] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  157.976678][ T9845] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  157.979797][ T9845] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  159.446710][ T9886] loop4: detected capacity change from 0 to 2048
[  159.707628][ T9883] loop0: detected capacity change from 0 to 131072
[  159.710555][ T9883] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  159.713489][ T9883] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  159.716883][ T9883] F2FS-fs (loop0): invalid crc value
[  159.748957][ T9883] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  159.753531][ T9883] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  159.756559][ T9883] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  160.022610][ T9909] loop3: detected capacity change from 0 to 2048
[  160.068244][ T9909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.115247][   T33] audit: type=1800 audit(1755785928.951:133): pid=9909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1386" name="bus" dev="loop3" ino=19 res=0 errno=0
[  160.205608][ T8170] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.389791][ T9924] loop0: detected capacity change from 0 to 256
[  160.413557][ T9910] loop4: detected capacity change from 0 to 32768
[  160.477791][ T6000]  loop4: p1 p3 < >
[  160.490701][ T9910]  loop4: p1 p3 < >
[  160.680496][ T9931] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  160.687110][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  160.691989][ T6000] udevd[6000]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  160.702454][ T6000] udevd[6000]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  160.707207][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  160.773954][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  160.923924][    T9] usb 4-1: Using ep0 maxpacket: 16
[  160.928083][    T9] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  160.931624][    T9] usb 4-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config
[  160.936585][    T9] usb 4-1: config 226 has 0 interfaces, different from the descriptor's value: 2
[  160.942208][    T9] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  160.946429][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.950032][    T9] usb 4-1: Product: syz
[  160.951975][    T9] usb 4-1: Manufacturer: syz
[  160.954944][    T9] usb 4-1: SerialNumber: syz
[  161.025064][  T971] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  161.042447][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1396'.
[  161.073578][ T9939] loop0: detected capacity change from 0 to 512
[  161.097474][ T9939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.102699][ T9939] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.125958][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.175969][  T971] usb 5-1: config 0 has an invalid interface number: 11 but max is 0
[  161.179941][  T971] usb 5-1: config 0 has no interface number 0
[  161.182248][  T971] usb 5-1: config 0 interface 11 has no altsetting 0
[  161.185446][  T971] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  161.188572][  T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.195931][  T971] usb 5-1: config 0 descriptor??
[  161.204626][  T971] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected
[  161.208683][  T971] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 7
[  161.212933][  T971] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81
[  161.216359][  T971] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82
[  161.218996][  T971] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1
[  161.221669][  T971] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2
[  161.224681][  T971] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85
[  161.227920][  T971] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5
[  161.233148][  T971] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  161.239827][  T971] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83
[  161.251348][  T971] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84
[  161.256661][  T971] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3
[  161.260067][  T971] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4
[  161.267884][  T971] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86
[  161.270924][  T971] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6
[  161.273110][ T9952] loop0: detected capacity change from 0 to 512
[  161.275782][  T971] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  161.281313][ T9952] EXT4-fs (loop0): Test dummy encryption mode enabled
[  161.287497][ T9952] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.312180][ T5852] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  161.393152][    T9] usb 4-1: USB disconnect, device number 7
[  161.443359][  T790] usb 5-1: USB disconnect, device number 5
[  161.450231][  T790] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  161.456852][  T790] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  161.460805][  T790] keyspan 5-1:0.11: device disconnected
[  162.113779][ T9964] loop3: detected capacity change from 0 to 65
[  162.145358][ T9964] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  162.400455][ T9967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1408'.
[  162.525638][  T971] libceph: connect (1)[c::]:6789 error -101
[  162.534059][  T971] libceph: mon0 (1)[c::]:6789 connect error
[  162.700934][ T9981] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  162.794388][  T971] libceph: connect (1)[c::]:6789 error -101
[  162.796979][  T971] libceph: mon0 (1)[c::]:6789 connect error
[  163.277088][ T9995] loop4: detected capacity change from 0 to 128
[  163.280878][ T9995] EXT4-fs (loop4): Test dummy encryption mode enabled
[  163.302581][ T9995] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  163.310133][ T9995] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  163.329311][ T9255] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  163.340550][ T9969] ceph: No mds server is up or the cluster is laggy
[  163.379603][  T971] libceph: connect (1)[c::]:6789 error -101
[  163.381671][  T971] libceph: mon0 (1)[c::]:6789 connect error
[  163.445416][T10003] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.1420'.
[  163.449276][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1420'.
[  164.194219][  T790] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  164.374405][  T790] usb 1-1: Using ep0 maxpacket: 16
[  164.378134][  T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  164.381904][  T790] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  164.390736][  T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.396282][  T790] usb 1-1: config 0 descriptor??
[  165.034676][  T971] kernel read not supported for file /audio1 (pid: 971 comm: kworker/0:2)
[  165.056232][  T971] usb 1-1: USB disconnect, device number 21
[  165.598840][T10032] loop3: detected capacity change from 0 to 32768
[  165.650716][T10032] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  165.728333][T10032] XFS (loop3): Ending clean mount
[  165.923051][   T33] audit: type=1804 audit(1755785934.771:134): pid=10032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1435" name="/newroot/176/bus/file1" dev="loop3" ino=9286 res=1 errno=0
[  165.947517][ T8170] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  166.000871][T10047] loop0: detected capacity change from 0 to 32768
[  166.003618][T10047] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1438 (10047)
[  166.011587][T10047] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  166.016595][T10047] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  166.132941][T10054] loop3: detected capacity change from 0 to 32768
[  166.140618][T10047] BTRFS info (device loop0): enabling ssd optimizations
[  166.142864][T10047] BTRFS info (device loop0): enabling free space tree
[  166.161582][T10054] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  166.185321][T10054] XFS (loop3): Ending clean mount
[  166.188035][T10054] XFS (loop3): Quotacheck needed: Please wait.
[  166.195526][T10054] XFS (loop3): Quotacheck: Done.
[  166.217550][ T8170] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  166.595120][ T5852] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  166.771739][T10095] loop4: detected capacity change from 0 to 32768
[  166.804310][T10095] XFS (loop4): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  166.845500][ T9255] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.100333][T10109] loop4: detected capacity change from 0 to 32768
[  167.108273][T10109] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  167.722958][ T9255] ocfs2: Unmounting device (7,4) on (node local)
[  167.753915][T10117] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1453'.
[  167.764271][T10117] unsupported nla_type 65024
[  167.888821][T10123] loop0: detected capacity change from 0 to 4096
[  167.899955][T10124] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.910983][T10123] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  167.918113][T10123] Remounting filesystem read-only
[  168.055895][T10129] dvmrp0: entered allmulticast mode
[  168.491864][T10168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1476'.
[  168.692195][T10180] loop3: detected capacity change from 0 to 32768
[  168.713799][  T971] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  168.728672][T10180] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[  168.728687][T10180]   allowing incompatible features above 0.0: (unknown version)
[  168.728692][T10180]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  168.742498][T10180] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  168.745648][T10180] bcachefs (loop3): initializing new filesystem
[  168.751296][T10180] bcachefs (loop3): going read-write
[  168.755500][T10180] bcachefs (loop3): marking superblocks
[  168.760665][T10180] bcachefs (loop3): initializing freespace
[  168.763947][T10180] bcachefs (loop3): done initializing freespace
[  168.768536][T10180] bcachefs (loop3): reading snapshots table
[  168.770774][T10180] bcachefs (loop3): reading snapshots done
[  168.776764][T10180] bcachefs (loop3):  loop3: Superblock write was silently dropped! (seq 0 expected 42)
[  168.780651][T10180] bcachefs (loop3): done starting filesystem
[  168.789956][T10180] syz.3.1482 (10180) used greatest stack depth: 16144 bytes left
[  168.809809][ T8170] bcachefs (loop3): shutting down
[  168.811587][ T8170] bcachefs (loop3): going read-only
[  168.813339][ T8170] bcachefs (loop3): finished waiting for writes to stop
[  168.821511][ T8170] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  168.839464][ T8170] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  168.846194][ T8170] bcachefs (loop3): clean shutdown complete, journal seq 4
[  168.850310][ T8170] bcachefs (loop3): marking filesystem clean
[  168.862099][ T8170] bcachefs (loop3): shutdown complete
[  168.864579][  T971] usb 1-1: Using ep0 maxpacket: 8
[  168.868701][  T971] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  168.872329][  T971] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  168.876269][  T971] usb 1-1: config 1 has no interface number 1
[  168.878790][  T971] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  168.887911][  T971] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  168.891820][  T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.895539][  T971] usb 1-1: Product: syz
[  168.897477][  T971] usb 1-1: Manufacturer: syz
[  168.899455][  T971] usb 1-1: SerialNumber: syz
[  169.112278][  T971] usb 1-1: 2:1: invalid format type 0xbd67 is detected, processed as PCM
[  169.116394][  T971] usb 1-1: 2:1: cannot set freq 9540521 to ep 0x82
[  169.125652][  T971] usb 1-1: USB disconnect, device number 22
[  169.140021][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  169.690709][T10194] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  169.723351][T10204] gre3: entered promiscuous mode
[  169.731017][T10204] gre3: entered allmulticast mode
[  169.784107][T10206] loop4: detected capacity change from 0 to 8192
[  169.839333][T10206]  loop4: p1 p2 p3 p4
[  169.840908][T10206] loop4: partition table partially beyond EOD, truncated
[  169.845482][T10206] loop4: p1 start 4294967040 is beyond EOD, truncated
[  169.857622][T10206] loop4: p3 start 331777 is beyond EOD, truncated
[  169.859710][T10206] loop4: p4 size 263424 extends beyond EOD, truncated
[  169.891723][T10202] loop3: detected capacity change from 0 to 32768
[  169.904564][T10202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1488 (10202)
[  169.918370][T10202] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  169.922615][T10202] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  169.935600][T10202] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  169.975707][T10202] BTRFS info (device loop3): rebuilding free space tree
[  169.984861][T10202] BTRFS info (device loop3): disabling free space tree
[  169.993847][T10202] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  169.998603][T10202] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  170.015502][T10202] BTRFS info (device loop3): setting nodatasum
[  170.018269][T10202] BTRFS info (device loop3): setting nodatacow
[  170.023930][T10202] BTRFS info (device loop3): enabling ssd optimizations
[  170.026772][T10202] BTRFS info (device loop3): turning off barriers
[  170.029426][T10202] BTRFS info (device loop3): enabling disk space caching
[  170.033771][T10202] BTRFS info (device loop3): force clearing of disk cache
[  170.036968][T10202] BTRFS info (device loop3): doing ref verification
[  170.039551][T10202] BTRFS info (device loop3): max_inline set to 4096
[  170.062638][ T8170] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.086551][T10211] loop0: detected capacity change from 0 to 32768
[  170.095809][T10211] bio_check_eod: 8 callbacks suppressed
[  170.095821][T10211] syz.0.1492: attempt to access beyond end of device
[  170.095821][T10211] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  170.104419][T10211] metapage_write_end_io: I/O error
[  170.108011][T10211] ERROR: (device loop0): release_metapage: metapage_write_one() failed
[  170.108011][T10211] 
[  170.112959][T10211] ERROR: (device loop0): remounting filesystem as read-only
[  170.117104][T10211] ERROR: (device loop0): diWrite: ixpxd invalid
[  170.117104][T10211] 
[  170.120684][T10211] ERROR: (device loop0): txCommit: 
[  170.120684][T10211] 
[  170.124312][T10211] blkno = 8ed2c, nblocks = 1
[  170.126499][T10211] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  170.126499][T10211] 
[  170.131289][T10211] UFO tlock:0xffffc90001f822d0
[  170.148376][  T115] blkno = 8ed2c, nblocks = 4
[  170.150543][  T115] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  170.150543][  T115] 
[  170.155180][ T5852] syz-executor: attempt to access beyond end of device
[  170.155180][ T5852] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  170.161013][ T5852] metapage_write_end_io: I/O error
[  170.163270][ T5852] JFS: metapage_get_blocks failed
[  170.165980][ T5852] JFS: metapage_get_blocks failed
[  170.168169][ T5852] JFS: metapage_get_blocks failed
[  170.174316][   T47] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  170.328096][   T47] usb 5-1: New USB device found, idVendor=187f, idProduct=0202, bcdDevice=39.91
[  170.331564][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.334943][   T47] usb 5-1: Product: syz
[  170.336709][   T47] usb 5-1: Manufacturer: syz
[  170.338677][   T47] usb 5-1: SerialNumber: syz
[  170.341966][   T47] usb 5-1: config 0 descriptor??
[  170.346112][   T47] smsusb:smsusb_probe: board id=11, interface number 0
[  170.349413][   T47] smsusb:smsusb_probe: Device initialized with return code -19
[  170.413826][  T971] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  170.424298][ T5852] JFS: metapage_get_blocks failed
[  170.548249][   T47] usb 5-1: USB disconnect, device number 6
[  170.565025][  T971] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[  170.567851][  T971] usb 4-1: config 0 has no interface number 0
[  170.571928][  T971] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  170.575307][  T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.578896][  T971] usb 4-1: Product: syz
[  170.580569][  T971] usb 4-1: Manufacturer: syz
[  170.585181][  T971] usb 4-1: SerialNumber: syz
[  170.590025][  T971] usb 4-1: config 0 descriptor??
[  170.711351][T10242] loop0: detected capacity change from 0 to 32768
[  170.715481][T10242] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1498 (10242)
[  170.730728][T10242] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  170.735151][T10242] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  170.749816][T10242] BTRFS info (device loop0): enabling ssd optimizations
[  170.752649][T10242] BTRFS info (device loop0): enabling free space tree
[  170.756198][T10242] BTRFS info (device loop0): use zstd compression, level 3
[  170.809437][ T5852] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  170.934637][ T5232] Bluetooth: hci0: command 0x0c1a tx timeout
[  171.004466][  T971] usb 4-1: Firmware: major: 0, minor: 43, hardware type: ATUSB (0)
[  171.218385][  T971] usb 4-1: failed to fetch extended address, random address set
[  171.245978][  T971] usb 4-1: USB disconnect, device number 8
[  171.530245][T10296] Illegal XDP return value 4294967274 on prog  (id 108) dev syz_tun, expect packet loss!
[  171.581769][T10300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1515'.
[  171.833083][T10352] binder: 10350:10352 ioctl c0306201 200000000480 returned -14
[  171.913379][T10396] loop3: detected capacity change from 0 to 1024
[  171.927046][T10396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.977358][ T8170] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.046387][T10425] sit1: entered promiscuous mode
[  172.056536][T10425] sit1: entered allmulticast mode
[  172.594037][T10447] loop4: detected capacity change from 0 to 16
[  172.600450][T10447] erofs (device loop4): mounted with root inode @ nid 36.
[  172.824895][T10451] loop4: detected capacity change from 0 to 32768
[  172.828123][T10451] XFS: ikeep mount option is deprecated.
[  172.838697][T10451] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.862054][T10463] netlink: 'syz.3.1538': attribute type 11 has an invalid length.
[  172.865154][T10451] XFS (loop4): Ending clean mount
[  172.867643][T10451] XFS (loop4): Quotacheck needed: Please wait.
[  172.872869][T10451] XFS (loop4): Quotacheck: Done.
[  172.874457][T10463] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1538'.
[  172.879563][   T33] audit: type=1800 audit(1755785941.731:135): pid=10451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1536" name="bus" dev="loop4" ino=9290 res=0 errno=0
[  172.891759][   T33] audit: type=1800 audit(1755785941.731:136): pid=10451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1536" name="file1" dev="loop4" ino=9286 res=0 errno=0
[  172.904059][ T9255] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  173.069661][T10473] Invalid ELF header magic: != ELF
[  173.310652][T10480] loop0: detected capacity change from 0 to 32768
[  173.328927][T10480] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  173.339946][T10480] XFS (loop0): Ending clean mount
[  173.343162][T10480] XFS (loop0): Quotacheck needed: Please wait.
[  173.621727][T10480] XFS (loop0): Quotacheck: Done.
[  173.659947][T10506] loop4: detected capacity change from 0 to 1024
[  173.672036][ T5852] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  173.676595][T10354] hfsplus: b-tree write err: -5, ino 4
[  173.778550][T10510] loop4: detected capacity change from 0 to 764
[  173.788615][T10510] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  173.835145][T10515] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  173.839240][T10514] IPVS: stopping backup sync thread 10515 ...
[  174.088231][T10516] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  174.375850][T10540] loop4: detected capacity change from 0 to 64
[  174.799819][T10554] loop0: detected capacity change from 0 to 1024
[  174.819139][T10554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.848910][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.899635][T10566] loop0: detected capacity change from 0 to 128
[  174.907694][T10566] EXT4-fs (loop0): Test dummy encryption mode enabled
[  174.926165][T10566] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  174.931317][T10566] ext4 filesystem being mounted at /524/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  174.958916][ T5852] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  175.009027][T10562] loop3: detected capacity change from 0 to 32768
[  175.087683][T10562] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  175.087701][T10562]   allowing incompatible features above 0.0: (unknown version)
[  175.087709][T10562]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  175.115990][T10562] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  175.122178][T10562] bcachefs (loop3): initializing new filesystem
[  175.146547][T10562] bcachefs (loop3): going read-write
[  175.152557][T10562] bcachefs (loop3): marking superblocks
[  175.160370][T10585] loop0: detected capacity change from 0 to 1024
[  175.167255][T10562] bcachefs (loop3): initializing freespace
[  175.171798][T10562] bcachefs (loop3): done initializing freespace
[  175.182623][T10562] bcachefs (loop3): reading snapshots table
[  175.186435][T10562] bcachefs (loop3): reading snapshots done
[  175.197965][T10562] bcachefs (loop3): done starting filesystem
[  175.201769][T10585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.239898][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.319690][ T8170] bcachefs (loop3): shutting down
[  175.330579][ T8170] bcachefs (loop3): going read-only
[  175.332737][ T8170] bcachefs (loop3): finished waiting for writes to stop
[  175.347420][ T8170] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  175.360936][ T8170] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  175.365417][ T8170] bcachefs (loop3): clean shutdown complete, journal seq 4
[  175.368898][ T8170] bcachefs (loop3): marking filesystem clean
[  175.380476][ T8170] bcachefs (loop3): shutdown complete
[  175.913749][ T5854] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  176.076635][ T5854] usb 5-1: unable to get BOS descriptor or descriptor too short
[  176.080555][ T5854] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  176.084378][ T5854] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  176.088253][ T5854] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  176.093636][ T5854] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  176.096983][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.100372][ T5854] usb 5-1: Product: syz
[  176.102230][ T5854] usb 5-1: Manufacturer: syz
[  176.104459][ T5854] usb 5-1: SerialNumber: syz
[  176.356814][ T5854] usb 5-1: 0:2 : does not exist
[  176.366479][ T5854] usb 5-1: USB disconnect, device number 7
[  176.425117][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  177.015209][   T47] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  177.068906][T10635] netlink: 'syz.4.1606': attribute type 3 has an invalid length.
[  177.096344][ T5854] libceph: connect (1)[c::]:6789 error -101
[  177.099577][ T5854] libceph: mon0 (1)[c::]:6789 connect error
[  177.193830][   T47] usb 1-1: Using ep0 maxpacket: 16
[  177.197643][   T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.199340][T10637] ceph: No mds server is up or the cluster is laggy
[  177.200866][   T47] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  177.211104][   T47] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  177.215172][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.217761][   T47] usb 1-1: Product: syz
[  177.219214][   T47] usb 1-1: Manufacturer: syz
[  177.220804][   T47] usb 1-1: SerialNumber: syz
[  177.227212][   T47] usb 1-1: config 0 descriptor??
[  177.360685][T10652] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1611'.
[  177.367281][T10652] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1611'.
[  177.371682][T10652] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  177.440013][  T971] usb 1-1: USB disconnect, device number 23
[  177.633725][ T5854] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  177.787078][ T5854] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  177.790177][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.792823][ T5854] usb 5-1: Product: syz
[  177.794380][ T5854] usb 5-1: Manufacturer: syz
[  177.795970][ T5854] usb 5-1: SerialNumber: syz
[  177.802130][ T5854] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  177.817836][ T5854] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  178.148648][T10668] loop3: detected capacity change from 0 to 512
[  178.156716][T10668] EXT4-fs: Ignoring removed oldalloc option
[  178.165330][T10668] EXT4-fs: inline encryption not supported
[  178.173407][T10668] EXT4-fs: Ignoring removed mblk_io_submit option
[  178.179106][T10668] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  178.201126][T10668] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1619: bg 0: block 64: padding at end of block bitmap is not set
[  178.209549][T10668] Quota error (device loop3): write_blk: dquota write failed
[  178.212809][T10668] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  178.217096][T10668] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1619: Failed to acquire dquot type 0
[  178.222985][T10668] EXT4-fs (loop3): 1 truncate cleaned up
[  178.226657][   T47] usb 5-1: USB disconnect, device number 8
[  178.231258][T10668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.256486][T10668] Quota error (device loop3): do_check_range: Getting block 144 out of range 0-5
[  178.306817][ T8170] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.854427][ T5854] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  178.863754][ T5854] ath9k_htc: Failed to initialize the device
[  178.869224][   T47] usb 5-1: ath9k_htc: USB layer deinitialized
[  179.030655][T10688] loop4: detected capacity change from 0 to 512
[  179.073941][T10688] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  179.101474][T10688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.170066][ T9255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.318355][T10684] loop3: detected capacity change from 0 to 32768
[  179.413989][T10696] netlink: 'syz.0.1631': attribute type 2 has an invalid length.
[  179.504820][  T971] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  179.660963][  T971] usb 5-1: config 0 has an invalid interface number: 56 but max is 0
[  179.670574][  T971] usb 5-1: config 0 has no interface number 0
[  179.673422][  T971] usb 5-1: config 0 interface 56 altsetting 114 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.680470][  T971] usb 5-1: config 0 interface 56 altsetting 114 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.685900][  T971] usb 5-1: config 0 interface 56 has no altsetting 0
[  179.694571][  T971] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  179.695423][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1646'.
[  179.702079][  T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.708967][  T971] usb 5-1: config 0 descriptor??
[  179.723532][T10730] loop3: detected capacity change from 0 to 1024
[  179.736897][T10730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.903733][ T5854] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  180.184809][  T971] uclogic 0003:28BD:0933.000D: interface is invalid, ignoring
[  180.263758][ T5854] usb 1-1: Using ep0 maxpacket: 32
[  180.267860][ T5854] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  180.272416][ T5854] usb 1-1: config 0 interface 0 has no altsetting 0
[  180.275818][ T5854] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  180.279542][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.284089][ T5854] usb 1-1: config 0 descriptor??
[  180.328440][ T5949] usb 5-1: USB disconnect, device number 9
[  180.647225][ T8170] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.046294][ T5854] corsair-psu 0003:1B1C:1C09.000E: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0
[  181.083910][ T5949] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  181.233820][ T5949] usb 5-1: Using ep0 maxpacket: 16
[  181.237110][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  181.241066][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  181.245906][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024
[  181.251108][ T5949] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  181.255314][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  181.258929][ T5949] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  181.262754][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  181.270089][ T5949] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3
[  181.273966][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.277163][ T5949] usb 5-1: Product: syz
[  181.278861][ T5949] usb 5-1: Manufacturer: syz
[  181.280496][ T5949] usb 5-1: SerialNumber: syz
[  181.283356][ T5949] usb 5-1: config 0 descriptor??
[  181.286440][T10740] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  181.291667][ T5949] iuu_phoenix 5-1:0.0: iuu_phoenix converter detected
[  181.295108][ T5949] usb 5-1: iuu_phoenix converter now attached to ttyUSB0
[  181.447718][ T5854] corsair-psu 0003:1B1C:1C09.000E: unable to query firmware (-71)
[  181.453284][ T5854] corsair-psu 0003:1B1C:1C09.000E: probe with driver corsair-psu failed with error -71
[  181.459760][ T5854] usb 1-1: USB disconnect, device number 24
[  181.499974][    T9] usb 5-1: USB disconnect, device number 10
[  181.504569][    T9] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  181.509194][    T9] iuu_phoenix 5-1:0.0: device disconnected
[  181.542451][T10743] loop3: detected capacity change from 0 to 2048
[  181.569986][T10743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.581876][T10743] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  181.599740][ T8170] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.659915][T10751] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  181.665048][T10751] syz.3.1653: attempt to access beyond end of device
[  181.665048][T10751] loop3: rw=0, sector=0, nr_sectors = 2 limit=0
[  181.923884][    T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  182.075111][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  182.079475][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 34151, setting to 64
[  182.326051][    T9] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=d4.aa
[  182.329727][    T9] usb 4-1: New USB device strings: Mfr=16, Product=150, SerialNumber=0
[  182.332702][    T9] usb 4-1: Product: syz
[  182.334823][    T9] usb 4-1: Manufacturer: syz
[  182.337417][    T9] usb 4-1: config 0 descriptor??
[  182.340954][T10753] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  182.346587][    T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18
[  182.350684][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.353823][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.357187][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.360362][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.363501][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.366785][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.370078][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.373304][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.376690][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.379992][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.383345][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.383900][ T5854] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  182.386719][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.393037][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.396400][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.399582][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.402697][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.405848][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.408870][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.412106][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.415262][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.418423][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.421617][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.424773][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.427857][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.430872][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.434051][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.437169][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.440401][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.443619][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.446834][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.449934][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.453026][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.456282][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.459247][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.462717][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.466060][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.469376][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.472653][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.476042][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.479624][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.482898][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.486219][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.489515][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.492835][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.496161][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.499400][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.502642][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.505947][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.509083][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.512318][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.516516][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.519717][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.522880][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.526140][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.529271][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.532404][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.535913][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.539107][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.542225][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.545746][ T5854] usb 1-1: Using ep0 maxpacket: 32
[  182.548250][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.551452][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.554691][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.556473][ T5854] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  182.557948][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.562206][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.565082][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.569833][ T5854] usb 1-1: Product: syz
[  182.571355][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.576222][ T5854] usb 1-1: Manufacturer: syz
[  182.576327][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.581165][ T5854] usb 1-1: SerialNumber: syz
[  182.581275][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.586432][ T5854] usb 1-1: config 0 descriptor??
[  182.586465][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.591882][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.595236][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.598365][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.601652][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.604929][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.608248][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.611217][  T971] usb 4-1: USB disconnect, device number 9
[  182.611347][ T5277] usb 4-1: control msg error: -71
[  182.611435][    C1] usb 4-1: pegasus_irq - nonzero urb status received: -71
[  182.618257][    C1] usb 4-1: pegasus_irq - usb_submit_urb failed with result -19
[  182.950557][T10354] Bluetooth: hci3: Frame reassembly failed (-84)
[  182.997054][ T5854] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[  183.001563][ T5854] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[  183.054695][ T5854] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71
[  183.062144][ T5854] usb 1-1: USB disconnect, device number 25
[  183.273294][T10769] loop3: detected capacity change from 0 to 40427
[  183.276622][T10769] F2FS-fs (loop3): Image doesn't support compression
[  183.279047][T10769] F2FS-fs (loop3): build fault injection rate: 690
[  183.281685][T10769] F2FS-fs (loop3): invalid crc value
[  183.297408][T10769] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  183.300917][T10769] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  183.328962][ T8170] syz-executor: attempt to access beyond end of device
[  183.328962][ T8170] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  183.335139][ T8170] CPU: 1 UID: 0 PID: 8170 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  183.335155][ T8170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.335162][ T8170] Call Trace:
[  183.335167][ T8170]  <TASK>
[  183.335172][ T8170]  dump_stack_lvl+0x189/0x250
[  183.335192][ T8170]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.335205][ T8170]  ? __pfx_queue_work_on+0x10/0x10
[  183.335218][ T8170]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  183.335235][ T8170]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  183.335251][ T8170]  f2fs_handle_critical_error+0x37c/0x540
[  183.335270][ T8170]  f2fs_write_end_io+0x886/0xb60
[  183.335285][ T8170]  __submit_merged_bio+0x27a/0x6a0
[  183.335303][ T8170]  __submit_merged_write_cond+0x255/0x530
[  183.335320][ T8170]  f2fs_write_data_pages+0x261d/0x3000
[  183.335344][ T8170]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  183.335373][ T8170]  ? read_node_folio+0x240/0x3f0
[  183.335395][ T8170]  ? filemap_get_folios_tag+0xed/0x630
[  183.335408][ T8170]  ? rcu_is_watching+0x15/0xb0
[  183.335421][ T8170]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  183.335438][ T8170]  do_writepages+0x32e/0x550
[  183.335453][ T8170]  ? rcu_is_watching+0x15/0xb0
[  183.335466][ T8170]  ? do_raw_spin_unlock+0x4d/0x240
[  183.335481][ T8170]  filemap_fdatawrite+0x199/0x240
[  183.335498][ T8170]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  183.335522][ T8170]  ? rcu_is_watching+0x15/0xb0
[  183.335533][ T8170]  ? do_raw_spin_unlock+0x4d/0x240
[  183.335548][ T8170]  f2fs_sync_dirty_inodes+0x31f/0x830
[  183.335563][ T8170]  f2fs_write_checkpoint+0x95a/0x1df0
[  183.335580][ T8170]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  183.335602][ T8170]  ? kill_f2fs_super+0x298/0x6c0
[  183.335615][ T8170]  kill_f2fs_super+0x2c3/0x6c0
[  183.335627][ T8170]  ? __pfx_kill_f2fs_super+0x10/0x10
[  183.335639][ T8170]  ? radix_tree_delete_item+0x2b6/0x400
[  183.335656][ T8170]  ? shrinker_free+0x2ce/0x3e0
[  183.335669][ T8170]  deactivate_locked_super+0xbc/0x130
[  183.335684][ T8170]  cleanup_mnt+0x425/0x4c0
[  183.335698][ T8170]  task_work_run+0x1d4/0x260
[  183.335714][ T8170]  ? __pfx_task_work_run+0x10/0x10
[  183.335728][ T8170]  ? __x64_sys_umount+0x122/0x160
[  183.335744][ T8170]  ? __pfx___x64_sys_umount+0x10/0x10
[  183.335760][ T8170]  ? rcu_is_watching+0x15/0xb0
[  183.335772][ T8170]  exit_to_user_mode_loop+0xec/0x110
[  183.335790][ T8170]  do_syscall_64+0x2bd/0x3b0
[  183.335807][ T8170]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.335818][ T8170]  ? exc_page_fault+0x9f/0xf0
[  183.335833][ T8170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.335844][ T8170] RIP: 0033:0x7f086cf8ff17
[  183.335855][ T8170] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  183.335866][ T8170] RSP: 002b:00007ffcd7cc67d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  183.335879][ T8170] RAX: 0000000000000000 RBX: 00007f086d011c05 RCX: 00007f086cf8ff17
[  183.335888][ T8170] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd7cc6890
[  183.335896][ T8170] RBP: 00007ffcd7cc6890 R08: 0000000000000000 R09: 0000000000000000
[  183.335903][ T8170] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd7cc7920
[  183.335912][ T8170] R13: 00007f086d011c05 R14: 000000000002cb86 R15: 00007ffcd7cc7960
[  183.335924][ T8170]  </TASK>
[  183.335929][ T8170] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  183.797280][T10785] loop0: detected capacity change from 0 to 32768
[  183.799914][T10785] BTRFS warning: excessive commit interval 2147483647, use with care
[  183.802939][T10785] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1667 (10785)
[  183.809579][T10785] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  183.813181][T10785] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  183.889941][T10801] loop3: detected capacity change from 0 to 512
[  183.902339][T10801] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  183.916664][T10801] EXT4-fs (loop3): invalid journal inode
[  183.917486][T10785] BTRFS info (device loop0): rebuilding free space tree
[  183.927839][T10785] BTRFS info (device loop0): disabling free space tree
[  183.930754][T10785] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  183.935667][T10785] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  183.939592][T10801] EXT4-fs (loop3): can't get journal size
[  183.941751][T10785] BTRFS info (device loop0): enabling ssd optimizations
[  183.946312][T10785] BTRFS info (device loop0): turning off barriers
[  183.949021][T10785] BTRFS info (device loop0): disabling tree log
[  183.951980][T10785] BTRFS info (device loop0): turning on flush-on-commit
[  183.952235][T10801] EXT4-fs (loop3): 1 truncate cleaned up
[  183.956600][T10785] BTRFS info (device loop0): force clearing of disk cache
[  183.960350][T10785] BTRFS info (device loop0): doing ref verification
[  183.963150][T10785] BTRFS info (device loop0): use lzo compression, level 0
[  183.968197][T10801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.007738][ T8170] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.011900][ T5852] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  184.106718][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1672'.
[  184.110529][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1672'.
[  184.165916][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'.
[  184.170668][T10822] (unnamed net_device) (uninitialized): option mode: invalid value (7)
[  184.222603][T10830] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1678'.
[  184.312272][T10841] netlink: 'syz.3.1684': attribute type 16 has an invalid length.
[  184.503257][T10852] loop0: detected capacity change from 0 to 32768
[  184.516437][T10852] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  184.535248][T10852] XFS (loop0): Ending clean mount
[  184.539642][T10852] XFS (loop0): Quotacheck needed: Please wait.
[  184.546909][T10852] XFS (loop0): Quotacheck: Done.
[  184.549272][T10852] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  185.023864][ T5846] Bluetooth: hci3: command 0x1003 tx timeout
[  185.026587][ T5232] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  185.303780][ T5949] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  185.461859][ T5949] usb 5-1: Using ep0 maxpacket: 32
[  185.471455][ T5949] usb 5-1: config 2 has an invalid interface number: 194 but max is 0
[  185.480600][ T5949] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  185.485722][ T5949] usb 5-1: config 2 has no interface number 0
[  185.488371][ T5949] usb 5-1: config 2 interface 194 altsetting 0 bulk endpoint 0xA has invalid maxpacket 7
[  185.492624][ T5949] usb 5-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  185.513798][ T5949] usb 5-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[  185.533484][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.540354][T10880] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  185.748958][ T5949] usb 5-1: string descriptor 0 read error: -71
[  185.752072][ T5949] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  185.774479][ T5949] usb 5-1: USB disconnect, device number 11
[  185.792330][T10892] loop3: detected capacity change from 0 to 32768
[  185.806229][T10892] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  185.823250][T10892] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  185.832520][T10892] XFS (loop3): Starting recovery (logdev: internal)
[  185.840634][T10892] XFS (loop3): Ending recovery (logdev: internal)
[  185.865846][ T8170] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  186.111280][T10911] loop3: detected capacity change from 0 to 512
[  186.115867][T10911] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  186.122294][T10911] EXT4-fs (loop3): 1 truncate cleaned up
[  186.126318][T10911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.134344][   T33] audit: type=1800 audit(1755786722.985:137): pid=10911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1708" name="file1" dev="loop3" ino=15 res=0 errno=0
[  186.152825][ T8170] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.371403][T10931] vlan2: entered promiscuous mode
[  186.373320][T10931] vlan2: entered allmulticast mode
[  186.375958][T10931] hsr_slave_1: entered allmulticast mode
[  186.385444][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'.
[  186.463795][ T5949] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  186.583958][ T5854] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  186.625398][ T5949] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  186.629047][ T5949] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.633398][ T5949] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  186.637334][ T5949] usb 4-1: config 1 has no interface number 0
[  186.639946][ T5949] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  186.644886][ T5949] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  186.652164][ T5949] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  186.656397][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.659829][ T5949] usb 4-1: Product: syz
[  186.661785][ T5949] usb 4-1: Manufacturer: syz
[  186.664739][ T5949] usb 4-1: SerialNumber: syz
[  186.675520][ T5949] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  186.678516][ T5949] cdc_ncm 4-1:1.1: bind() failure
[  186.735639][ T5854] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.740189][ T5854] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  186.748225][ T5854] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  186.752156][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.755768][ T5854] usb 5-1: Product: syz
[  186.757608][ T5854] usb 5-1: Manufacturer: syz
[  186.759558][ T5854] usb 5-1: SerialNumber: syz
[  186.766269][ T5854] cdc_ncm 5-1:1.0: skipping garbage
[  186.768843][ T5854] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[  186.771818][ T5854] cdc_ncm 5-1:1.0: bind() failure
[  186.776783][ T5854] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  186.780285][ T5854] cdc_ncm 5-1:1.1: bind() failure
[  186.877650][ T5854] usb 4-1: USB disconnect, device number 10
[  186.982921][ T5888] usb 5-1: USB disconnect, device number 12
[  187.276807][T10941] loop0: detected capacity change from 0 to 128
[  187.282559][T10941] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  187.289445][T10941] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  187.387441][T10941] lo speed is unknown, defaulting to 1000
[  188.012884][   T33] audit: type=1326 audit(1755786724.855:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.0.1741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  188.025113][   T33] audit: type=1326 audit(1755786724.855:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.0.1741" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  188.032257][   T33] audit: type=1326 audit(1755786724.855:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.0.1741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  188.041138][   T33] audit: type=1326 audit(1755786724.855:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.0.1741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  188.050020][   T33] audit: type=1326 audit(1755786724.855:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.0.1741" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  188.059003][   T33] audit: type=1326 audit(1755786724.855:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.0.1741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  188.068098][   T33] audit: type=1326 audit(1755786724.855:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.0.1741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  188.078760][   T33] audit: type=1326 audit(1755786724.855:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.0.1741" exe="/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  188.088073][   T33] audit: type=1326 audit(1755786724.855:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.0.1741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  188.104878][ T5854] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  188.320222][ T5854] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[  188.329106][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.332720][ T5854] usb 4-1: Product: syz
[  188.338537][ T5854] usb 4-1: Manufacturer: syz
[  188.340874][ T5854] usb 4-1: SerialNumber: syz
[  188.522429][T10999] loop0: detected capacity change from 0 to 32768
[  188.527062][T10999] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1748 (10999)
[  188.534713][T10999] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  188.538550][T10999] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  188.551865][ T5854] gspca_main: pac207-2.14.0 probing 093a:2476
[  188.556527][ T5854] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[  188.560382][ T5854] uvcvideo 4-1:13.0: probe with driver uvcvideo failed with error -22
[  188.565815][ T5854] usb 4-1: USB disconnect, device number 11
[  188.576163][T10999] BTRFS info (device loop0): enabling ssd optimizations
[  188.583598][T10999] BTRFS info (device loop0): enabling free space tree
[  188.615673][ T5852] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  188.983008][T11038] loop4: detected capacity change from 0 to 128
[  189.034232][  T790] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  189.184190][  T790] usb 1-1: Using ep0 maxpacket: 8
[  189.188862][  T790] usb 1-1: config 162 has an invalid interface number: 150 but max is 0
[  189.191830][  T790] usb 1-1: config 162 has no interface number 0
[  189.196164][  T790] usb 1-1: config 162 interface 150 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  189.200963][  T790] usb 1-1: config 162 interface 150 has no altsetting 0
[  189.212110][  T790] usb 1-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e
[  189.223921][  T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.226763][  T790] usb 1-1: Product: syz
[  189.228455][  T790] usb 1-1: Manufacturer: syz
[  189.231271][  T790] usb 1-1: SerialNumber: syz
[  189.461113][  T790] usb 1-1: Found UVC 0.0a device syz (058f:3820)
[  189.463916][  T790] usb 1-1: No valid video chain found.
[  189.470678][  T790] usb 1-1: USB disconnect, device number 26
[  189.514289][ T5888] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  189.664206][ T5888] usb 4-1: Using ep0 maxpacket: 32
[  189.670104][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short
[  189.678096][ T5888] usb 4-1: config 7 has an invalid interface number: 69 but max is 0
[  189.682112][ T5888] usb 4-1: config 7 has no interface number 0
[  189.685100][ T5888] usb 4-1: config 7 interface 69 has no altsetting 0
[  189.694439][ T5888] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=a5.97
[  189.698472][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.701774][ T5888] usb 4-1: Product: syz
[  189.703645][ T5888] usb 4-1: Manufacturer: syz
[  189.707064][ T5888] usb 4-1: SerialNumber: syz
[  190.007679][ T5888] kvaser_usb 4-1:7.69: error -ENODEV: Cannot get usb endpoint(s)
[  190.023919][ T5888] usb 4-1: USB disconnect, device number 12
[  190.274254][  T790] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  190.445795][  T790] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  190.449159][  T790] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  190.453163][  T790] usb 1-1: config 220 has no interface number 2
[  190.455994][  T790] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  190.461178][  T790] usb 1-1: config 220 interface 0 has no altsetting 0
[  190.463894][  T790] usb 1-1: config 220 interface 76 has no altsetting 0
[  190.467092][  T790] usb 1-1: config 220 interface 1 has no altsetting 0
[  190.471673][  T790] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  190.475180][  T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.478290][  T790] usb 1-1: Product: syz
[  190.479876][  T790] usb 1-1: Manufacturer: syz
[  190.481625][  T790] usb 1-1: SerialNumber: syz
[  190.560953][T11063] loop3: detected capacity change from 0 to 2048
[  190.570502][T11063] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  190.572848][ T6000] udevd[6000]: incorrect nilfs2 checksum on /dev/loop3
[  190.577796][T11064] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  190.613088][T11066] loop3: detected capacity change from 0 to 512
[  190.625625][T11066] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  190.628485][T11066] System zones: 0-2, 18-18, 34-35
[  190.631129][T11066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.636073][T11066] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.653131][ T8170] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.690614][  T790] usb 1-1: selecting invalid altsetting 0
[  190.692515][  T790] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  190.694978][  T790] usb 1-1: No valid video chain found.
[  190.699447][  T790] usb 1-1: selecting invalid altsetting 0
[  190.701314][  T790] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  190.704738][  T790] usb 1-1: USB disconnect, device number 27
[  190.835570][T11083] loop3: detected capacity change from 0 to 65
[  190.839020][T11083] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  190.843905][T11083] BFS-fs: bfs_fill_super(): Last block not available on loop3: 511
[  190.939128][T11087] loop3: detected capacity change from 0 to 512
[  190.942663][T11087] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  190.952562][T11087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6842e02c, mo2=0102]
[  190.960671][T11087] System zones: 1-12
[  190.962770][T11087] EXT4-fs (loop3): orphan cleanup on readonly fs
[  190.966508][T11087] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1779: invalid indirect mapped block 12 (level 1)
[  190.972187][T11087] EXT4-fs (loop3): Remounting filesystem read-only
[  190.977407][T11087] EXT4-fs (loop3): 1 truncate cleaned up
[  190.980953][T11087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  191.008317][ T8170] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  191.036818][T11094] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  191.159097][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1787'.
[  191.452196][T11128] loop0: detected capacity change from 0 to 32768
[  191.458547][T11110] loop3: detected capacity change from 0 to 40427
[  191.462567][T11110] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  191.466168][T11128] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  191.469348][T11110] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  191.477004][T11110] F2FS-fs (loop3): invalid crc value
[  191.493582][ T5852] ocfs2: Unmounting device (7,0) on (node local)
[  191.508334][T11110] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  191.512071][T11110] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  191.520021][T11110] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  191.768599][T11161] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  191.771721][T11161] cramfs: wrong magic
[  192.173340][   T33] kauditd_printk_skb: 29 callbacks suppressed
[  192.179103][   T33] audit: type=1326 audit(1755786728.844:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.0.1812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  192.200219][   T33] audit: type=1326 audit(1755786728.844:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.0.1812" exe="/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  192.210630][   T33] audit: type=1326 audit(1755786728.844:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.0.1812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  192.218959][   T33] audit: type=1326 audit(1755786728.844:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.0.1812" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  192.242969][   T33] audit: type=1326 audit(1755786728.844:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.0.1812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  192.259220][   T33] audit: type=1326 audit(1755786728.844:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.0.1812" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  192.273143][   T33] audit: type=1326 audit(1755786728.844:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.0.1812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  192.283129][   T33] audit: type=1326 audit(1755786728.844:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.0.1812" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  192.303684][   T33] audit: type=1326 audit(1755786728.844:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.0.1812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00b98ebe9 code=0x7ffc0000
[  192.326060][   T33] audit: type=1326 audit(1755786728.844:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.0.1812" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff00b98d550 code=0x7ffc0000
[  192.361308][T11169] loop4: detected capacity change from 0 to 4096
[  192.403644][T11172] openvswitch: netlink: IP tunnel TTL not specified.
[  192.406361][ T5888] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  192.554680][ T5888] usb 1-1: Using ep0 maxpacket: 32
[  192.560895][ T5888] usb 1-1: config 0 has an invalid interface number: 155 but max is 0
[  192.564199][ T5888] usb 1-1: config 0 has no interface number 0
[  192.570640][ T5888] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c
[  192.576103][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.579530][ T5888] usb 1-1: Product: syz
[  192.581357][ T5888] usb 1-1: Manufacturer: syz
[  192.583245][ T5888] usb 1-1: SerialNumber: syz
[  192.588663][ T5888] usb 1-1: config 0 descriptor??
[  192.944610][  T790] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  193.094642][  T790] usb 4-1: Using ep0 maxpacket: 16
[  193.098439][  T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  193.104273][  T790] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  193.109634][  T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.112884][  T790] usb 4-1: Product: syz
[  193.115307][  T790] usb 4-1: Manufacturer: syz
[  193.117348][  T790] usb 4-1: SerialNumber: syz
[  193.120460][  T790] usb 4-1: config 0 descriptor??
[  193.127771][  T790] hub 4-1:0.0: bad descriptor, ignoring hub
[  193.130386][  T790] hub 4-1:0.0: probe with driver hub failed with error -5
[  193.135077][  T790] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19
[  193.498846][  T971] hid (null): global environment stack underflow
[  193.501591][  T971] hid (null): unknown global tag 0xe
[  193.507814][  T971] hid-generic 0005:0B57:000F.000F: reserved main item tag 0xe
[  193.511135][  T971] hid-generic 0005:0B57:000F.000F: global environment stack underflow
[  193.516646][  T971] hid-generic 0005:0B57:000F.000F: item 0 1 1 11 parsing failed
[  193.520359][  T971] hid-generic 0005:0B57:000F.000F: probe with driver hid-generic failed with error -22
[  193.535828][  T790] usb 4-1: USB disconnect, device number 13
[  193.795919][T11201] loop4: detected capacity change from 0 to 2048
[  193.803981][T11201] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.875872][T11203] loop4: detected capacity change from 0 to 4096
[  193.902220][T11203] ntfs3(loop4): ino=19, mi_enum_attr
[  193.904239][T11203] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  194.088018][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.105390][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.121226][T11207] ntfs3(loop4): failed to convert "0080" to cp936
[  194.126242][T11207] ntfs3(loop4): failed to convert name for inode 1e.
[  194.129459][T11207] ntfs3(loop4): ino=1f, mi_enum_attr
[  194.793232][T11215] loop4: detected capacity change from 0 to 4096
[  194.807149][T11216] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.844369][ T5888] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.155/input/input20
[  194.858202][ T5888] usb 1-1: USB disconnect, device number 28
[  194.864530][ T6000] bcm5974 1-1:0.155: could not read from device
[  194.891355][T11219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  194.893720][T11219] IPv6: NLM_F_CREATE should be set when creating new route
[  194.916520][T11219] lo: entered allmulticast mode
[  194.919117][T11222] loop0: detected capacity change from 0 to 512
[  194.930857][T11219] tunl0: entered allmulticast mode
[  194.932769][T11222] EXT4-fs (loop0): Test dummy encryption mode enabled
[  194.939380][T11222] EXT4-fs (loop0): Encoding requested by superblock is unknown
[  194.942808][T11219] gre0: entered allmulticast mode
[  194.964797][T11219] gretap0: entered allmulticast mode
[  194.984647][T11219] erspan0: entered allmulticast mode
[  194.990769][T11219] ip_vti0: entered allmulticast mode
[  194.993413][T11219] ip6_vti0: entered allmulticast mode
[  195.004249][T11219] sit0: entered allmulticast mode
[  195.007181][T11219] ip6tnl0: entered allmulticast mode
[  195.011826][T11219] ip6gre0: entered allmulticast mode
[  195.014586][T11219] syz_tun: entered allmulticast mode
[  195.018476][T11219] ip6gretap0: entered allmulticast mode
[  195.025640][T11219] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.028342][T11219] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.032445][T11219] bridge0: entered allmulticast mode
[  195.035834][T11219] vcan0: entered allmulticast mode
[  195.038103][T11219] bond0: entered allmulticast mode
[  195.039968][T11219] bond_slave_0: entered allmulticast mode
[  195.041902][T11219] bond_slave_1: entered allmulticast mode
[  195.046741][T11219] team0: entered allmulticast mode
[  195.048689][T11219] team_slave_0: entered allmulticast mode
[  195.050731][T11219] team_slave_1: entered allmulticast mode
[  195.053725][T11219] dummy0: entered allmulticast mode
[  195.056827][T11219] nlmon0: entered allmulticast mode
[  195.059240][T11219] caif0: entered allmulticast mode
[  195.061249][T11219] batadv0: entered allmulticast mode
[  195.065559][T11219] vxcan0: entered allmulticast mode
[  195.067693][T11219] vxcan1: entered allmulticast mode
[  195.069860][T11219] veth0: entered allmulticast mode
[  195.073058][T11219] veth1: entered allmulticast mode
[  195.077533][T11219] wg0: entered allmulticast mode
[  195.080127][T11219] wg1: entered allmulticast mode
[  195.082903][T11219] wg2: entered allmulticast mode
[  195.086431][T11219] veth0_to_bridge: entered allmulticast mode
[  195.090214][T11219] veth1_to_bridge: entered allmulticast mode
[  195.093702][T11219] veth0_to_bond: entered allmulticast mode
[  195.097300][T11219] veth1_to_bond: entered allmulticast mode
[  195.100922][T11219] veth0_to_team: entered allmulticast mode
[  195.104566][T11219] veth1_to_team: entered allmulticast mode
[  195.108955][T11219] veth0_to_batadv: entered allmulticast mode
[  195.111914][T11219] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.114545][T11219] batadv_slave_0: entered allmulticast mode
[  195.118319][T11219] veth1_to_batadv: entered allmulticast mode
[  195.121362][T11219] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.123870][T11219] batadv_slave_1: entered allmulticast mode
[  195.128248][T11219] xfrm0: entered allmulticast mode
[  195.130676][T11219] veth0_to_hsr: entered allmulticast mode
[  195.133720][T11219] hsr_slave_0: entered allmulticast mode
[  195.137159][T11219] veth1_to_hsr: entered allmulticast mode
[  195.140560][T11219] hsr_slave_1: entered allmulticast mode
[  195.143593][T11219] hsr0: entered allmulticast mode
[  195.146391][T11219] veth1_virt_wifi: entered allmulticast mode
[  195.149250][T11219] veth0_virt_wifi: entered allmulticast mode
[  195.152099][T11219] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  195.155353][T11219] veth1_vlan: entered allmulticast mode
[  195.158291][T11219] veth0_vlan: entered allmulticast mode
[  195.162976][T11219] vlan0: entered allmulticast mode
[  195.164695][T11219] vlan1: entered allmulticast mode
[  195.166957][T11219] macvlan0: entered allmulticast mode
[  195.169548][T11219] macvlan1: entered allmulticast mode
[  195.172071][T11219] ipvlan0: entered allmulticast mode
[  195.173838][T11219] ipvlan1: entered allmulticast mode
[  195.176625][T11219] veth1_macvtap: entered allmulticast mode
[  195.180328][T11219] veth0_macvtap: entered allmulticast mode
[  195.183574][T11219] macvtap0: entered allmulticast mode
[  195.186982][T11219] macsec0: entered allmulticast mode
[  195.190165][T11219] geneve0: entered allmulticast mode
[  195.195616][T11219] geneve1: entered allmulticast mode
[  195.198606][T11219] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  195.201921][T11219] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[  195.207074][T11219] netdevsim netdevsim4 netdevsim2: entered allmulticast mode
[  195.210466][T11219] netdevsim netdevsim4 netdevsim3: entered allmulticast mode
[  195.217125][T11219] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  195.225973][T11219] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  195.237344][T11219] hsr1: entered allmulticast mode
[  195.242200][T11219] vxlan0: entered allmulticast mode
[  195.244376][T11219] ip6tnl1: entered allmulticast mode
[  195.253901][ T5895] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.289992][ T5895] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.309259][ T5895] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.322257][ T5895] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.346825][T11239] loop4: detected capacity change from 0 to 16
[  195.359304][T11239] erofs (device loop4): unsupported chunk format ffff of nid 36
[  195.380405][T11241] netlink: 'syz.3.1843': attribute type 10 has an invalid length.
[  195.382975][T11241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1843'.
[  195.433760][T11241] team0: Port device geneve0 added
[  195.736594][T11256] loop3: detected capacity change from 0 to 512
[  195.739645][T11256] EXT4-fs: Ignoring removed mblk_io_submit option
[  195.753518][T11256] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  195.765230][T11256] EXT4-fs (loop3): orphan cleanup on readonly fs
[  195.769572][T11256] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  195.774782][T11256] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  195.777955][T11256] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1849: bg 0: block 40: padding at end of block bitmap is not set
[  195.784181][T11256] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  195.788442][T11256] EXT4-fs (loop3): 1 truncate cleaned up
[  195.792074][T11256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  195.821916][ T8170] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.080614][T11267] lo speed is unknown, defaulting to 1000
[  196.151277][T11269] loop0: detected capacity change from 0 to 256
[  196.177583][T11269] exfat: Deprecated parameter 'utf8'
[  196.270193][T11266] loop3: detected capacity change from 0 to 32768
[  196.327035][T11269] exFAT-fs (loop0): IO charset lacroman not found
[  196.512306][T11266] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  196.512375][T11266]   allowing incompatible features above 0.0: (unknown version)
[  196.512381][T11266]   features: 
[  196.578522][T11266] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  196.585111][T11266] bcachefs (loop3): initializing new filesystem
[  196.602980][T11266] bcachefs (loop3): going read-write
[  196.612315][T11266] bcachefs (loop3): marking superblocks
[  196.621163][T11282] [U] 
[  196.631774][T11266] bcachefs (loop3): initializing freespace
[  196.645747][T11266] bcachefs (loop3): done initializing freespace
[  196.657254][T11266] bcachefs (loop3): reading snapshots table
[  196.679042][T11266] bcachefs (loop3): reading snapshots done
[  196.735145][T11266] bcachefs (loop3): done starting filesystem
[  196.847234][ T8170] bcachefs (loop3): shutting down
[  196.851926][ T8170] bcachefs (loop3): going read-only
[  196.855447][ T8170] bcachefs (loop3): finished waiting for writes to stop
[  196.859699][ T8170] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  196.876454][ T8170] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  196.881252][ T8170] bcachefs (loop3): clean shutdown complete, journal seq 4
[  196.884526][ T8170] bcachefs (loop3): marking filesystem clean
[  196.912175][ T8170] bcachefs (loop3): shutdown complete
[  197.206441][T11288] loop4: detected capacity change from 0 to 40427
[  197.210046][T11288] F2FS-fs (loop4): Image doesn't support compression
[  197.212672][T11288] F2FS-fs (loop4): build fault injection rate: 690
[  197.216563][T11288] F2FS-fs (loop4): invalid crc value
[  197.262209][T11288] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  197.267496][T11288] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  197.294414][ T9255] syz-executor: attempt to access beyond end of device
[  197.294414][ T9255] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  197.301471][ T9255] CPU: 0 UID: 0 PID: 9255 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  197.301486][ T9255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.301493][ T9255] Call Trace:
[  197.301498][ T9255]  <TASK>
[  197.301503][ T9255]  dump_stack_lvl+0x189/0x250
[  197.301521][ T9255]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.301534][ T9255]  ? __pfx_queue_work_on+0x10/0x10
[  197.301545][ T9255]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  197.301560][ T9255]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  197.301577][ T9255]  f2fs_handle_critical_error+0x37c/0x540
[  197.301592][ T9255]  f2fs_write_end_io+0x886/0xb60
[  197.301607][ T9255]  __submit_merged_bio+0x27a/0x6a0
[  197.301624][ T9255]  __submit_merged_write_cond+0x255/0x530
[  197.301639][ T9255]  f2fs_write_data_pages+0x261d/0x3000
[  197.301654][ T9255]  ? rcu_is_watching+0x15/0xb0
[  197.301676][ T9255]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  197.301704][ T9255]  ? __mod_zone_page_state+0xd7/0x140
[  197.301722][ T9255]  ? folios_put_refs+0x560/0x640
[  197.301735][ T9255]  ? __pfx_folios_put_refs+0x10/0x10
[  197.301743][ T9255]  ? rcu_is_watching+0x15/0xb0
[  197.301754][ T9255]  ? lru_add+0xa2f/0xd80
[  197.301764][ T9255]  ? lru_add+0x198/0xd80
[  197.301775][ T9255]  ? do_raw_spin_lock+0x121/0x290
[  197.301792][ T9255]  ? do_raw_spin_unlock+0x4d/0x240
[  197.301805][ T9255]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  197.301820][ T9255]  do_writepages+0x32e/0x550
[  197.301835][ T9255]  ? rcu_is_watching+0x15/0xb0
[  197.301847][ T9255]  ? do_raw_spin_unlock+0x4d/0x240
[  197.301888][ T9255]  filemap_fdatawrite+0x199/0x240
[  197.301902][ T9255]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  197.301927][ T9255]  ? rcu_is_watching+0x15/0xb0
[  197.301939][ T9255]  ? do_raw_spin_unlock+0x4d/0x240
[  197.301953][ T9255]  f2fs_sync_dirty_inodes+0x31f/0x830
[  197.301968][ T9255]  f2fs_write_checkpoint+0x95a/0x1df0
[  197.301985][ T9255]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  197.302010][ T9255]  ? kill_f2fs_super+0x298/0x6c0
[  197.302022][ T9255]  kill_f2fs_super+0x2c3/0x6c0
[  197.302034][ T9255]  ? __pfx_kill_f2fs_super+0x10/0x10
[  197.302044][ T9255]  ? radix_tree_delete_item+0x2b6/0x400
[  197.302056][ T9255]  ? shrinker_free+0x2ce/0x3e0
[  197.302069][ T9255]  deactivate_locked_super+0xbc/0x130
[  197.302082][ T9255]  cleanup_mnt+0x425/0x4c0
[  197.302096][ T9255]  task_work_run+0x1d4/0x260
[  197.302110][ T9255]  ? __pfx_task_work_run+0x10/0x10
[  197.302123][ T9255]  ? __x64_sys_umount+0x122/0x160
[  197.302136][ T9255]  ? __pfx___x64_sys_umount+0x10/0x10
[  197.302147][ T9255]  ? rcu_is_watching+0x15/0xb0
[  197.302157][ T9255]  exit_to_user_mode_loop+0xec/0x110
[  197.302172][ T9255]  do_syscall_64+0x2bd/0x3b0
[  197.302195][ T9255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.302206][ T9255]  ? exc_page_fault+0x9f/0xf0
[  197.302220][ T9255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.302230][ T9255] RIP: 0033:0x7fdccdb8ff17
[  197.302240][ T9255] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  197.302250][ T9255] RSP: 002b:00007ffedecf56e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  197.302263][ T9255] RAX: 0000000000000000 RBX: 00007fdccdc11c05 RCX: 00007fdccdb8ff17
[  197.302271][ T9255] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedecf57a0
[  197.302277][ T9255] RBP: 00007ffedecf57a0 R08: 0000000000000000 R09: 0000000000000000
[  197.302284][ T9255] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffedecf6830
[  197.302291][ T9255] R13: 00007fdccdc11c05 R14: 0000000000030213 R15: 00007ffedecf6870
[  197.302300][ T9255]  </TASK>
[  197.302304][ T9255] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  197.388908][T11298] netlink: 'syz.0.1862': attribute type 4 has an invalid length.
[  197.517396][T11302] dlm: non-version read from control device 0
[  198.153928][T11319] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1857'.
[  198.157024][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1857'.
[  198.191379][T10353] Bluetooth: hci3: Frame reassembly failed (-84)
[  198.194683][ T5846] Bluetooth: hci3: unexpected event 0x0f length: 0 < 4
[  198.942718][T11323] (syz.0.1870,11323,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  199.235373][ T5888] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  199.387243][ T5888] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  199.390776][ T5888] usb 1-1: config 0 has no interface number 0
[  199.396224][ T5888] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  199.400226][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.403795][ T5888] usb 1-1: Product: syz
[  199.406076][ T5888] usb 1-1: Manufacturer: syz
[  199.408132][ T5888] usb 1-1: SerialNumber: syz
[  199.411193][ T5888] usb 1-1: config 0 descriptor??
[  199.819038][ T5888] usb 1-1: Firmware: major: 84, minor: 103, hardware type: UNKNOWN (73)
[  200.023456][ T5888] usb 1-1: Read permanent extended address 52:39:35:8d:79:3e:bf:c5 from device
[  200.026576][ T5888] usb 1-1: atusb_probe: initialization failed, error = -524
[  200.029090][ T5888] atusb 1-1:0.128: probe with driver atusb failed with error -524
[  200.215514][ T5846] Bluetooth: hci3: command 0x1003 tx timeout
[  200.217896][ T5232] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  200.230211][  T790] usb 1-1: USB disconnect, device number 29
[  200.485536][ T5949] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  200.645519][ T5949] usb 4-1: Using ep0 maxpacket: 16
[  200.649207][ T5949] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.653726][ T5949] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.657949][ T5949] usb 4-1: config 0 interface 0 has no altsetting 0
[  200.660721][ T5949] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  200.664545][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.669068][ T5949] usb 4-1: config 0 descriptor??
[  200.759008][T11334] loop0: detected capacity change from 0 to 1024
[  200.768294][T11334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.777808][T11334] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.1875: missing EA_INODE flag
[  200.781690][T11334] EXT4-fs (loop0): Remounting filesystem read-only
[  200.792144][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.939025][T11343] loop0: detected capacity change from 0 to 512
[  200.965929][T11343] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 3: comm syz.0.1878: lblock 0 mapped to illegal pblock 3 (length 1)
[  200.990545][T11343] EXT4-fs (loop0): Remounting filesystem read-only
[  201.003308][T11343] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.1878: error -117 reading directory block
[  201.010442][T11343] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  201.014496][T11343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.043370][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.076530][ T5949] hid (null): unknown global tag 0xe
[  201.088641][T11348] netlink: 'syz.0.1880': attribute type 1 has an invalid length.
[  201.103976][T11348] 8021q: adding VLAN 0 to HW filter on device bond3
[  201.120966][T11348] bond3: (slave veth3): Enslaving as an active interface with a down link
[  201.133727][T11348] 8021q: adding VLAN 0 to HW filter on device batadv1
[  201.136716][T11348] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  201.245589][  T790] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  201.276387][ T5888] usb 4-1: USB disconnect, device number 14
[  201.408175][  T790] usb 5-1: config 160 has an invalid interface number: 200 but max is 0
[  201.411810][  T790] usb 5-1: config 160 has no interface number 0
[  201.414634][  T790] usb 5-1: config 160 interface 200 has no altsetting 0
[  201.419802][  T790] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  201.424310][  T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.428172][  T790] usb 5-1: Product: syz
[  201.430114][  T790] usb 5-1: Manufacturer: syz
[  201.432180][  T790] usb 5-1: SerialNumber: syz
[  201.645066][  T790] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  201.648265][  T790] usb 5-1: MIDIStreaming interface descriptor not found
[  201.669610][  T790] usb 5-1: USB disconnect, device number 13
[  201.749932][T11352] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1881'.
[  201.838376][T11358] loop3: detected capacity change from 0 to 4096
[  201.929056][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  201.945461][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  201.959021][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  201.966975][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  201.976156][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  201.979483][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  201.987711][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  201.991074][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  201.991374][T11368] loop0: detected capacity change from 0 to 256
[  201.994290][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.010720][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.014227][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.017912][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.021114][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.024293][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.033163][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.036087][T11368] exfat: Deprecated parameter 'utf8'
[  202.036764][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.041772][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.044953][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.046248][T11368] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[  202.048434][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.056742][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.059888][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.063109][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.066528][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.078809][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.081711][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.087161][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.090235][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.094956][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.098537][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.102411][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.104983][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.107744][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.110379][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.112831][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.115281][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.119272][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.122134][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.124675][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.140612][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.143994][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.148323][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.151490][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.154890][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.158668][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.161990][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.172061][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.191951][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.195038][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.206766][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.209940][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.213020][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.216288][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.222341][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.238658][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.239010][T11378] loop4: detected capacity change from 0 to 8
[  202.242118][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.247645][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.251008][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.254113][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.257940][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.264312][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.267890][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.271064][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.274912][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.282639][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.286070][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.289384][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.292656][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.296542][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.299907][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.303229][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.306772][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.309969][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.313075][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.317299][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.320362][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.323269][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.342334][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.357805][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.363358][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.367141][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.370376][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.378040][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.381326][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.384595][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.387909][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.391174][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.394247][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.397556][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.401435][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.405101][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.412295][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.415479][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.418911][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.422189][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.428112][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.431315][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.434410][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.438234][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.441384][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.442790][T11377] loop0: detected capacity change from 0 to 32768
[  202.444324][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.444345][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.455254][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.459100][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.462200][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.465312][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.471928][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.475777][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.479059][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.483118][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.487727][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.491057][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.496181][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.504961][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.511204][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.518738][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.521347][T11377] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  202.521860][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.521886][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.524406][T11377]   allowing incompatible features above 0.0: (unknown version)
[  202.543241][T11377]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  202.549225][T11377] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  202.549530][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.552501][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.552602][T11377] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  202.555584][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.555605][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.555627][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.568327][T11377] bcachefs (loop0): Version upgrade required:
[  202.568327][T11377] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  202.568327][T11377] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  202.568327][T11377]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  202.596072][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.597331][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.598096][T11377] bcachefs (loop0): dropping and reconstructing all alloc info
[  202.607047][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.607119][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.610293][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.616201][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.617913][T11377] bcachefs (loop0): accounting_read... done
[  202.623680][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.625284][T11377] bcachefs (loop0): alloc_read... done
[  202.630406][T11377] bcachefs (loop0): snapshots_read... done
[  202.632546][T11377] bcachefs (loop0): done starting filesystem
[  202.633848][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.634537][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.644632][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.649653][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.654087][ T5852] bcachefs (loop0): shutting down
[  202.660456][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.660474][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.663030][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.665584][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.668304][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.670681][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.671336][T11383] loop4: detected capacity change from 0 to 32768
[  202.673096][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.682406][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.683505][ T5852] bcachefs (loop0): shutdown complete
[  202.685641][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.690972][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.693503][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.697902][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.700618][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.702185][T11383] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1896 (11383)
[  202.703455][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.712051][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.715553][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.719777][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.722887][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.726185][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.729326][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.732478][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.736615][T11383] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  202.737285][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.743780][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.745266][T11383] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  202.750008][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.750065][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.750088][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.750118][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.750141][T11364] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  202.872531][T11383] BTRFS info (device loop4): enabling ssd optimizations
[  202.885770][T11383] BTRFS info (device loop4): enabling free space tree
[  202.964275][   T13] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  202.998403][ T9255] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  203.054986][T11415] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  203.193121][T11417] loop4: detected capacity change from 0 to 32768
[  203.196585][T11417] XFS: noikeep mount option is deprecated.
[  203.225065][T11417] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  203.242319][T11417] XFS (loop4): Ending clean mount
[  203.245549][T11417] XFS (loop4): Quotacheck needed: Please wait.
[  203.259513][T11417] XFS (loop4): Quotacheck: Done.
[  203.269206][   T33] kauditd_printk_skb: 32 callbacks suppressed
[  203.269217][   T33] audit: type=1804 audit(1755786740.113:217): pid=11417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1900" name="/newroot/188/file0/bus" dev="loop4" ino=9291 res=1 errno=0
[  203.281358][   T33] audit: type=1804 audit(1755786740.123:218): pid=11417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1900" name="/newroot/188/file0/bus" dev="loop4" ino=9291 res=1 errno=0
[  203.300510][ T9255] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  203.348791][ T5949] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  203.509472][ T5949] usb 4-1: Using ep0 maxpacket: 8
[  203.518875][ T5949] usb 4-1: unable to get BOS descriptor or descriptor too short
[  203.522898][ T5949] usb 4-1: config 8 has an invalid interface number: 24 but max is 1
[  203.527344][ T5949] usb 4-1: config 8 has an invalid interface number: 242 but max is 1
[  203.530690][ T5949] usb 4-1: config 8 has no interface number 0
[  203.533176][ T5949] usb 4-1: config 8 has no interface number 1
[  203.535648][ T5949] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024
[  203.543426][ T5949] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  203.548287][ T5949] usb 4-1: config 8 interface 24 has no altsetting 0
[  203.550937][ T5949] usb 4-1: config 8 interface 242 has no altsetting 0
[  203.555589][ T5949] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  203.559302][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.562551][ T5949] usb 4-1: Product: syz
[  203.564463][ T5949] usb 4-1: Manufacturer: syz
[  203.566526][ T5949] usb 4-1: SerialNumber: syz
[  203.570108][T11419] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  203.782272][ T5949] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'.
[  203.790432][ T5949] vmk80xx 4-1:8.242: driver 'vmk80xx' failed to auto-configure device.
[  203.795334][ T5949] usb 4-1: USB disconnect, device number 15
[  203.852201][T11448] loop0: detected capacity change from 0 to 512
[  203.862002][T11448] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  203.868130][T11448] EXT4-fs (loop0): 1 truncate cleaned up
[  203.871148][T11448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.892494][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.138918][T11473] openvswitch: netlink: Message has 4 unknown bytes.
[  204.545958][ T5949] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  204.715988][ T5949] usb 4-1: Using ep0 maxpacket: 32
[  204.720343][ T5949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.728561][ T5949] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  204.731900][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.734623][ T5949] usb 4-1: Product: syz
[  204.736386][ T5949] usb 4-1: Manufacturer: syz
[  204.738379][ T5949] usb 4-1: SerialNumber: syz
[  204.741959][ T5949] usb 4-1: config 0 descriptor??
[  204.951450][ T5232] Bluetooth: hci0: Unknown advertising packet type: 0x5d
[  204.951532][ T5232] Bluetooth: hci0: Malformed LE Event: 0x0d
[  204.958219][ T5949] usb 4-1: USB disconnect, device number 16
[  205.731923][T11488] tracefs: Unknown parameter 'huge'
[  205.801067][T11495] loop4: detected capacity change from 0 to 32768
[  205.828579][T11499] loop3: detected capacity change from 0 to 32768
[  205.831624][T11499] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1934 (11499)
[  205.837549][T11499] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.841220][T11499] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  205.874166][T11499] BTRFS info (device loop3): enabling ssd optimizations
[  205.877055][T11499] BTRFS info (device loop3): enabling free space tree
[  205.895810][ T8170] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  206.249793][T11528] loop0: detected capacity change from 0 to 32768
[  206.257678][T11528] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  206.264756][T11528] XFS (loop0): Ending clean mount
[  206.359826][ T5852] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  206.451938][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1935'.
[  206.538220][T11549] loop4: detected capacity change from 0 to 8
[  206.565245][T11549] netlink: del zone limit has 4 unknown bytes
[  206.631571][T11553] loop4: detected capacity change from 0 to 1024
[  206.659365][T10322] hfsplus: b-tree write err: -5, ino 8
[  206.729187][T11559] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1950'.
[  206.902517][T11573] loop3: detected capacity change from 0 to 16
[  206.905409][T11573] erofs (device loop3): mounted with root inode @ nid 36.
[  206.918608][T11573] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36
[  206.926245][T11573] erofs (device loop3): failed to decompress -46 in[60, 4036] out[1851]
[  206.932344][T11573] erofs (device loop3): read error -117 @ 43 of nid 36
[  206.970269][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'.
[  207.005884][T11577] ==================================================================
[  207.009335][T11577] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  207.012704][T11577] Read of size 2 at addr ffff88803bf8b742 by task syz.3.1959/11577
[  207.016845][T11577] 
[  207.017916][T11577] CPU: 0 UID: 0 PID: 11577 Comm: syz.3.1959 Not tainted syzkaller #0 PREEMPT(full) 
[  207.017932][T11577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  207.017940][T11577] Call Trace:
[  207.017946][T11577]  <TASK>
[  207.017952][T11577]  dump_stack_lvl+0x189/0x250
[  207.017971][T11577]  ? __pfx_dump_stack_lvl+0x10/0x10
[  207.017986][T11577]  ? lock_release+0x4b/0x3e0
[  207.018006][T11577]  ? __virt_addr_valid+0x4a5/0x5c0
[  207.018023][T11577]  print_report+0xca/0x240
[  207.018035][T11577]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  207.018045][T11577]  kasan_report+0x118/0x150
[  207.018064][T11577]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  207.018084][T11577]  __xfrm_state_lookup+0x6ad/0x8d0
[  207.018098][T11577]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  207.018111][T11577]  xfrm_input_state_lookup+0x6e9/0xa60
[  207.018132][T11577]  ? xfrm_input_state_lookup+0xcf/0xa60
[  207.018151][T11577]  ? __pfx_xfrm_input_state_lookup+0x10/0x10
[  207.018172][T11577]  ? xfrm_parse_spi+0x300/0x680
[  207.018188][T11577]  xfrm_input+0x425c/0x72c0
[  207.018204][T11577]  ? net_generic+0x1e/0x240
[  207.018221][T11577]  ? rcu_is_watching+0x15/0xb0
[  207.018233][T11577]  ? net_generic+0x1e/0x240
[  207.018252][T11577]  vti_input+0x219/0x330
[  207.018270][T11577]  ? __pfx_vti_input+0x10/0x10
[  207.018284][T11577]  ? skb_checksum+0x7c1/0x8c0
[  207.018298][T11577]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.018313][T11577]  xfrm4_rcv_encap+0x39f/0x620
[  207.018329][T11577]  udp_queue_rcv_one_skb+0x17bc/0x19e0
[  207.018342][T11577]  ? __pfx_xfrm6_udp_encap_rcv+0x10/0x10
[  207.018355][T11577]  ? __pfx_udp_queue_rcv_one_skb+0x10/0x10
[  207.018365][T11577]  ? rcu_is_watching+0x15/0xb0
[  207.018379][T11577]  udp_unicast_rcv_skb+0x257/0x400
[  207.018395][T11577]  ? dst_dev_put+0x231/0x290
[  207.018409][T11577]  __udp4_lib_rcv+0x1496/0x2600
[  207.018429][T11577]  ? __pfx___udp4_lib_rcv+0x10/0x10
[  207.018444][T11577]  ? rcu_is_watching+0x15/0xb0
[  207.018455][T11577]  ? lock_acquire+0x5f/0x360
[  207.018471][T11577]  ? __pfx_udp_rcv+0x10/0x10
[  207.018487][T11577]  ip_protocol_deliver_rcu+0x282/0x440
[  207.018505][T11577]  ? ip_local_deliver_finish+0x2ae/0x6f0
[  207.018523][T11577]  ip_local_deliver_finish+0x3bb/0x6f0
[  207.018541][T11577]  NF_HOOK+0x30c/0x3a0
[  207.018558][T11577]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  207.018573][T11577]  ? NF_HOOK+0x9a/0x3a0
[  207.018589][T11577]  ? __pfx_NF_HOOK+0x10/0x10
[  207.018604][T11577]  ? ip_rcv_finish_core+0xce0/0x1c00
[  207.018622][T11577]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  207.018637][T11577]  ? skb_dst+0x4f/0xd0
[  207.018654][T11577]  ? ip_local_deliver+0x12a/0x1b0
[  207.018670][T11577]  NF_HOOK+0x30c/0x3a0
[  207.018686][T11577]  ? __pfx_ip_rcv_finish+0x10/0x10
[  207.018701][T11577]  ? NF_HOOK+0x9a/0x3a0
[  207.018716][T11577]  ? __pfx_NF_HOOK+0x10/0x10
[  207.018731][T11577]  ? ip_rcv_core+0x7f7/0xd00
[  207.018748][T11577]  ? __pfx_ip_rcv_finish+0x10/0x10
[  207.018803][T11577]  ? __pfx_ip_rcv+0x10/0x10
[  207.018822][T11577]  __netif_receive_skb+0x143/0x380
[  207.018840][T11577]  ? netif_receive_skb+0x115/0x790
[  207.018854][T11577]  netif_receive_skb+0x1cb/0x790
[  207.018868][T11577]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  207.018881][T11577]  ? __pfx_netif_receive_skb+0x10/0x10
[  207.018896][T11577]  ? tun_rx_batched+0x160/0x730
[  207.018909][T11577]  tun_rx_batched+0x1b9/0x730
[  207.018922][T11577]  ? __pfx_tun_rx_batched+0x10/0x10
[  207.018933][T11577]  ? tun_get_user+0x266c/0x3e20
[  207.018943][T11577]  ? rcu_is_watching+0x15/0xb0
[  207.018955][T11577]  ? lock_acquire+0x5f/0x360
[  207.018970][T11577]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  207.018984][T11577]  tun_get_user+0x2aa2/0x3e20
[  207.018997][T11577]  ? tun_get_user+0x6f6/0x3e20
[  207.019008][T11577]  ? tun_get_user+0x266c/0x3e20
[  207.019019][T11577]  ? aa_file_perm+0x44d/0x1550
[  207.019032][T11577]  ? __pfx_tun_get_user+0x10/0x10
[  207.019043][T11577]  ? __futex_wait+0x34f/0x3e0
[  207.019062][T11577]  ? __pfx___futex_wait+0x10/0x10
[  207.019086][T11577]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  207.019103][T11577]  ? ref_tracker_alloc+0x318/0x460
[  207.019121][T11577]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  207.019137][T11577]  ? lock_release+0x4b/0x3e0
[  207.019155][T11577]  ? tun_get+0x1c/0x2f0
[  207.019165][T11577]  ? tun_get+0x1c/0x2f0
[  207.019175][T11577]  ? rcu_is_watching+0x15/0xb0
[  207.019186][T11577]  ? tun_get+0x1c/0x2f0
[  207.019197][T11577]  ? lock_release+0x4b/0x3e0
[  207.019212][T11577]  ? common_file_perm+0x1b5/0x230
[  207.019230][T11577]  ? tun_get+0x1c/0x2f0
[  207.019242][T11577]  tun_chr_write_iter+0x113/0x200
[  207.019260][T11577]  vfs_write+0x5c9/0xb30
[  207.019276][T11577]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  207.019293][T11577]  ? __pfx_vfs_write+0x10/0x10
[  207.019311][T11577]  ? __fget_files+0x2a/0x420
[  207.019330][T11577]  ksys_write+0x145/0x250
[  207.019346][T11577]  ? __pfx_ksys_write+0x10/0x10
[  207.019363][T11577]  ? rcu_is_watching+0x15/0xb0
[  207.019374][T11577]  do_syscall_64+0xfa/0x3b0
[  207.019392][T11577]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.019404][T11577]  ? exc_page_fault+0x9f/0xf0
[  207.019418][T11577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.019431][T11577] RIP: 0033:0x7f086cf8d69f
[  207.019443][T11577] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  207.019453][T11577] RSP: 002b:00007f086dda1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  207.019468][T11577] RAX: ffffffffffffffda RBX: 00007f086d1b5fa0 RCX: 00007f086cf8d69f
[  207.019476][T11577] RDX: 00000000000000be RSI: 0000200000000000 RDI: 00000000000000c8
[  207.019484][T11577] RBP: 00007f086d011e19 R08: 0000000000000000 R09: 0000000000000000
[  207.019492][T11577] R10: 00000000000000be R11: 0000000000000293 R12: 0000000000000000
[  207.019500][T11577] R13: 00007f086d1b6038 R14: 00007f086d1b5fa0 R15: 00007ffcd7cc7548
[  207.019513][T11577]  </TASK>
[  207.019518][T11577] 
[  207.156000][  T790] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  207.156312][T11577] Allocated by task 9860:
[  207.252606][T11577]  kasan_save_track+0x3e/0x80
[  207.254369][T11577]  __kasan_slab_alloc+0x6c/0x80
[  207.256340][T11577]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  207.258469][T11577]  xfrm_state_alloc+0x24/0x2f0
[  207.259990][T11577]  __find_acq_core+0x8a7/0x1c00
[  207.261528][T11577]  xfrm_find_acq+0x78/0xa0
[  207.262946][T11577]  xfrm_alloc_userspi+0x6b3/0xc90
[  207.264518][T11577]  xfrm_user_rcv_msg+0x7a3/0xab0
[  207.266112][T11577]  netlink_rcv_skb+0x208/0x470
[  207.267660][T11577]  xfrm_netlink_rcv+0x79/0x90
[  207.269176][T11577]  netlink_unicast+0x82f/0x9e0
[  207.270703][T11577]  netlink_sendmsg+0x805/0xb30
[  207.272230][T11577]  __sock_sendmsg+0x21c/0x270
[  207.273736][T11577]  ____sys_sendmsg+0x505/0x830
[  207.275440][T11577]  ___sys_sendmsg+0x21f/0x2a0
[  207.277169][T11577]  __x64_sys_sendmsg+0x19b/0x260
[  207.278918][T11577]  do_syscall_64+0xfa/0x3b0
[  207.280629][T11577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.282957][T11577] 
[  207.283939][T11577] Freed by task 5888:
[  207.285554][T11577]  kasan_save_track+0x3e/0x80
[  207.287482][T11577]  kasan_save_free_info+0x46/0x50
[  207.289499][T11577]  __kasan_slab_free+0x5b/0x80
[  207.291470][T11577]  kmem_cache_free+0x18f/0x400
[  207.293409][T11577]  xfrm_state_gc_task+0x52d/0x6b0
[  207.295475][T11577]  process_scheduled_works+0xae1/0x17b0
[  207.297697][T11577]  worker_thread+0x8a0/0xda0
[  207.299622][T11577]  kthread+0x711/0x8a0
[  207.301364][T11577]  ret_from_fork+0x3fc/0x770
[  207.303286][T11577]  ret_from_fork_asm+0x1a/0x30
[  207.305293][T11577] 
[  207.306316][T11577] The buggy address belongs to the object at ffff88803bf8b600
[  207.306316][T11577]  which belongs to the cache xfrm_state of size 928
[  207.311983][T11577] The buggy address is located 322 bytes inside of
[  207.311983][T11577]  freed 928-byte region [ffff88803bf8b600, ffff88803bf8b9a0)
[  207.317523][T11577] 
[  207.318527][T11577] The buggy address belongs to the physical page:
[  207.321097][T11577] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803bf8b180 pfn:0x3bf88
[  207.325143][T11577] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  207.328524][T11577] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  207.331635][T11577] page_type: f5(slab)
[  207.333277][T11577] raw: 00fff00000000040 ffff888104f023c0 dead000000000122 0000000000000000
[  207.336721][T11577] raw: ffff88803bf8b180 00000000800e000d 00000000f5000000 0000000000000000
[  207.340234][T11577] head: 00fff00000000040 ffff888104f023c0 dead000000000122 0000000000000000
[  207.343729][T11577] head: ffff88803bf8b180 00000000800e000d 00000000f5000000 0000000000000000
[  207.347264][T11577] head: 00fff00000000002 ffffea0000efe201 00000000ffffffff 00000000ffffffff
[  207.350814][T11577] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  207.354329][T11577] page dumped because: kasan: bad access detected
[  207.356934][T11577] page_owner tracks the page as allocated
[  207.359262][T11577] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7183, tgid 7172 (syz.0.479), ts 81201501015, free_ts 67824043375
[  207.366801][T11577]  post_alloc_hook+0x240/0x2a0
[  207.368737][T11577]  get_page_from_freelist+0x21e4/0x22c0
[  207.371120][T11577]  __alloc_frozen_pages_noprof+0x181/0x370
[  207.373576][T11577]  alloc_pages_mpol+0x232/0x4a0
[  207.375546][T11577]  allocate_slab+0x8a/0x370
[  207.377367][T11577]  ___slab_alloc+0xbeb/0x1410
[  207.379250][T11577]  kmem_cache_alloc_noprof+0x283/0x3c0
[  207.381273][T11577]  xfrm_state_alloc+0x24/0x2f0
[  207.383213][T11577]  xfrm_state_find+0x37d4/0x5400
[  207.385285][T11577]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  207.387555][T11577]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  207.389523][T11577]  xfrm_lookup_route+0x3c/0x1c0
[  207.391358][T11577]  udp_sendmsg+0x142e/0x2170
[  207.393209][T11577]  __sock_sendmsg+0x19c/0x270
[  207.395027][T11577]  ____sys_sendmsg+0x52d/0x830
[  207.396847][T11577]  ___sys_sendmsg+0x21f/0x2a0
[  207.398573][T11577] page last free pid 5900 tgid 5900 stack trace:
[  207.400930][T11577]  __free_frozen_pages+0xbc4/0xd30
[  207.402985][T11577]  vfree+0x25a/0x400
[  207.404523][T11577]  delayed_vfree_work+0x55/0x80
[  207.406430][T11577]  process_scheduled_works+0xae1/0x17b0
[  207.406624][  T790] usb 5-1: Using ep0 maxpacket: 16
[  207.408738][T11577]  worker_thread+0x8a0/0xda0
[  207.412706][T11577]  kthread+0x711/0x8a0
[  207.414208][T11577]  ret_from_fork+0x3fc/0x770
[  207.414520][  T790] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  207.415933][T11577]  ret_from_fork_asm+0x1a/0x30
[  207.415949][T11577] 
[  207.415953][T11577] Memory state around the buggy address:
[  207.415961][T11577]  ffff88803bf8b600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  207.415970][T11577]  ffff88803bf8b680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  207.415978][T11577] >ffff88803bf8b700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  207.415985][T11577]                                            ^
[  207.415991][T11577]  ffff88803bf8b780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  207.419854][  T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.421425][T11577]  ffff88803bf8b800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  207.422468][  T790] usb 5-1: Product: syz
[  207.424461][T11577] ==================================================================
[  207.424610][T11577] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  207.424621][T11577] CPU: 0 UID: 0 PID: 11577 Comm: syz.3.1959 Not tainted syzkaller #0 PREEMPT(full) 
[  207.424635][T11577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  207.424643][T11577] Call Trace:
[  207.424648][T11577]  <TASK>
[  207.424653][T11577]  dump_stack_lvl+0x99/0x250
[  207.424671][T11577]  ? __asan_memcpy+0x40/0x70
[  207.424686][T11577]  ? __pfx_dump_stack_lvl+0x10/0x10
[  207.424699][T11577]  ? __pfx__printk+0x10/0x10
[  207.424720][T11577]  vpanic+0x281/0x750
[  207.424735][T11577]  ? __pfx_vpanic+0x10/0x10
[  207.424747][T11577]  ? rcu_is_watching+0x15/0xb0
[  207.424784][T11577]  panic+0xb9/0xc0
[  207.424794][T11577]  ? __pfx_panic+0x10/0x10
[  207.424802][T11577]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  207.424813][T11577]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  207.424823][T11577]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  207.424832][T11577]  check_panic_on_warn+0x89/0xb0
[  207.424842][T11577]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  207.424849][T11577]  end_report+0x78/0x160
[  207.424858][T11577]  kasan_report+0x129/0x150
[  207.424869][T11577]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  207.424880][T11577]  __xfrm_state_lookup+0x6ad/0x8d0
[  207.424892][T11577]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  207.424905][T11577]  xfrm_input_state_lookup+0x6e9/0xa60
[  207.424924][T11577]  ? xfrm_input_state_lookup+0xcf/0xa60
[  207.424941][T11577]  ? __pfx_xfrm_input_state_lookup+0x10/0x10
[  207.424960][T11577]  ? xfrm_parse_spi+0x300/0x680
[  207.424975][T11577]  xfrm_input+0x425c/0x72c0
[  207.424989][T11577]  ? net_generic+0x1e/0x240
[  207.425001][T11577]  ? rcu_is_watching+0x15/0xb0
[  207.425008][T11577]  ? net_generic+0x1e/0x240
[  207.425019][T11577]  vti_input+0x219/0x330
[  207.425034][T11577]  ? __pfx_vti_input+0x10/0x10
[  207.425048][T11577]  ? skb_checksum+0x7c1/0x8c0
[  207.425062][T11577]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.425082][T11577]  xfrm4_rcv_encap+0x39f/0x620
[  207.425099][T11577]  udp_queue_rcv_one_skb+0x17bc/0x19e0
[  207.425113][T11577]  ? __pfx_xfrm6_udp_encap_rcv+0x10/0x10
[  207.425126][T11577]  ? __pfx_udp_queue_rcv_one_skb+0x10/0x10
[  207.425136][T11577]  ? rcu_is_watching+0x15/0xb0
[  207.425149][T11577]  udp_unicast_rcv_skb+0x257/0x400
[  207.425164][T11577]  ? dst_dev_put+0x231/0x290
[  207.425177][T11577]  __udp4_lib_rcv+0x1496/0x2600
[  207.425189][T11577]  ? __pfx___udp4_lib_rcv+0x10/0x10
[  207.425199][T11577]  ? rcu_is_watching+0x15/0xb0
[  207.425205][T11577]  ? lock_acquire+0x5f/0x360
[  207.425216][T11577]  ? __pfx_udp_rcv+0x10/0x10
[  207.425226][T11577]  ip_protocol_deliver_rcu+0x282/0x440
[  207.425236][T11577]  ? ip_local_deliver_finish+0x2ae/0x6f0
[  207.425247][T11577]  ip_local_deliver_finish+0x3bb/0x6f0
[  207.425258][T11577]  NF_HOOK+0x30c/0x3a0
[  207.425268][T11577]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  207.425278][T11577]  ? NF_HOOK+0x9a/0x3a0
[  207.425287][T11577]  ? __pfx_NF_HOOK+0x10/0x10
[  207.425296][T11577]  ? ip_rcv_finish_core+0xce0/0x1c00
[  207.425306][T11577]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  207.425317][T11577]  ? skb_dst+0x4f/0xd0
[  207.425326][T11577]  ? ip_local_deliver+0x12a/0x1b0
[  207.425337][T11577]  NF_HOOK+0x30c/0x3a0
[  207.425346][T11577]  ? __pfx_ip_rcv_finish+0x10/0x10
[  207.425356][T11577]  ? NF_HOOK+0x9a/0x3a0
[  207.425365][T11577]  ? __pfx_NF_HOOK+0x10/0x10
[  207.425374][T11577]  ? ip_rcv_core+0x7f7/0xd00
[  207.425384][T11577]  ? __pfx_ip_rcv_finish+0x10/0x10
[  207.425395][T11577]  ? __pfx_ip_rcv+0x10/0x10
[  207.425404][T11577]  __netif_receive_skb+0x143/0x380
[  207.425415][T11577]  ? netif_receive_skb+0x115/0x790
[  207.425424][T11577]  netif_receive_skb+0x1cb/0x790
[  207.425433][T11577]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  207.425440][T11577]  ? __pfx_netif_receive_skb+0x10/0x10
[  207.425449][T11577]  ? tun_rx_batched+0x160/0x730
[  207.425457][T11577]  tun_rx_batched+0x1b9/0x730
[  207.425465][T11577]  ? __pfx_tun_rx_batched+0x10/0x10
[  207.425472][T11577]  ? tun_get_user+0x266c/0x3e20
[  207.425478][T11577]  ? rcu_is_watching+0x15/0xb0
[  207.425485][T11577]  ? lock_acquire+0x5f/0x360
[  207.425495][T11577]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  207.425503][T11577]  tun_get_user+0x2aa2/0x3e20
[  207.425511][T11577]  ? tun_get_user+0x6f6/0x3e20
[  207.425517][T11577]  ? tun_get_user+0x266c/0x3e20
[  207.425524][T11577]  ? aa_file_perm+0x44d/0x1550
[  207.425532][T11577]  ? __pfx_tun_get_user+0x10/0x10
[  207.425539][T11577]  ? __futex_wait+0x34f/0x3e0
[  207.425550][T11577]  ? __pfx___futex_wait+0x10/0x10
[  207.425560][T11577]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  207.425570][T11577]  ? ref_tracker_alloc+0x318/0x460
[  207.425580][T11577]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  207.425589][T11577]  ? lock_release+0x4b/0x3e0
[  207.425599][T11577]  ? tun_get+0x1c/0x2f0
[  207.425605][T11577]  ? tun_get+0x1c/0x2f0
[  207.425611][T11577]  ? rcu_is_watching+0x15/0xb0
[  207.425618][T11577]  ? tun_get+0x1c/0x2f0
[  207.425624][T11577]  ? lock_release+0x4b/0x3e0
[  207.425633][T11577]  ? common_file_perm+0x1b5/0x230
[  207.425644][T11577]  ? tun_get+0x1c/0x2f0
[  207.425651][T11577]  tun_chr_write_iter+0x113/0x200
[  207.425668][T11577]  vfs_write+0x5c9/0xb30
[  207.425683][T11577]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  207.425701][T11577]  ? __pfx_vfs_write+0x10/0x10
[  207.425712][T11577]  ? __fget_files+0x2a/0x420
[  207.425726][T11577]  ksys_write+0x145/0x250
[  207.425741][T11577]  ? __pfx_ksys_write+0x10/0x10
[  207.425756][T11577]  ? rcu_is_watching+0x15/0xb0
[  207.425792][T11577]  do_syscall_64+0xfa/0x3b0
[  207.425808][T11577]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.425839][T11577]  ? exc_page_fault+0x9f/0xf0
[  207.425854][T11577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.425865][T11577] RIP: 0033:0x7f086cf8d69f
[  207.425877][T11577] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  207.425887][T11577] RSP: 002b:00007f086dda1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  207.425900][T11577] RAX: ffffffffffffffda RBX: 00007f086d1b5fa0 RCX: 00007f086cf8d69f
[  207.425910][T11577] RDX: 00000000000000be RSI: 0000200000000000 RDI: 00000000000000c8
[  207.425918][T11577] RBP: 00007f086d011e19 R08: 0000000000000000 R09: 0000000000000000
[  207.425925][T11577] R10: 00000000000000be R11: 0000000000000293 R12: 0000000000000000
[  207.425932][T11577] R13: 00007f086d1b6038 R14: 00007f086d1b5fa0 R15: 00007ffcd7cc7548
[  207.425944][T11577]  </TASK>
[  207.428563][T11577] Kernel Offset: disabled

VM DIAGNOSIS:
14:15:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000011b3 RDI=00000000000011b4 RBP=00000000000003f8 RSP=ffffc900047465f0
R8 =ffff8880205b8237 R9 =1ffff110040b7046 R10=dffffc0000000000 R11=ffffffff854f1cc0
R12=dffffc0000000000 R13=ffffffff99afa8fe R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1d3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f086dda16c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f086dda0fc8 CR3=000000003e086000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f086d187498 00007f086d187470 XMM03=00007f086d1874a8 00007f086d1874a0
XMM04=00007f086dced100 00007f086d187460 XMM05=00007f086d187478 00007f086d1874c0
XMM06=00007f086d1874b8 00007f086d1874b0 XMM07=00007f086d1874a8 00007f086d1874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f086d012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=57bdfb3da7d9fa00 RBX=ffffffff819683b8 RCX=57bdfb3da7d9fa00 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38330 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020007000
RIP=ffffffff8b7973f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33b22ff8 CR3=000000010af70000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fdccdc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
