last executing test programs:

8m55.290604566s ago: executing program 32 (id=55):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@private1, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x12}}}}, @ip_retopts={{0x10}}], 0x30}, 0x4)

8m53.683827804s ago: executing program 33 (id=72):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc085}, 0x20000004)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0xb66, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xa, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

8m3.702372119s ago: executing program 34 (id=716):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000780)={@id={0x2, 0x0, @a}})

7m21.428840329s ago: executing program 3 (id=1412):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe1e, &(0x7f0000000500)={&(0x7f0000000000)={0x20, 0x21, 0x9, 0x2, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x5, 0x0, 0x0, @ipv6=@local}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000)

7m21.369958053s ago: executing program 3 (id=1413):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4009}, [@generic={0x73, 0x1, 0x1, 0x9}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7m21.369724338s ago: executing program 3 (id=1414):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x30003, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4d040, &(0x7f0000001100)={0xa, 0x1, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40010162, 0x0)

7m21.309678767s ago: executing program 3 (id=1415):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x1000000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]})

7m21.196187499s ago: executing program 3 (id=1416):
r0 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x81, 0x0, &(0x7f00000010c0))

7m20.58873058s ago: executing program 3 (id=1419):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_channels={0x1, 0x1, 0x0, 0xffffffff, 0x0, 0xffffdffc, 0x3, 0xfffffffc, 0x7}})

7m20.336925965s ago: executing program 35 (id=1419):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_channels={0x1, 0x1, 0x0, 0xffffffff, 0x0, 0xffffdffc, 0x3, 0xfffffffc, 0x7}})

6m27.681688468s ago: executing program 6 (id=2150):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e23, 0x1, @remote, 0xed58}}, 0x3, 0x1}, 0x90)

6m27.547132974s ago: executing program 6 (id=2151):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=interlReave:7-N:N/'])

6m27.474810864s ago: executing program 6 (id=2154):
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0xf, 0x1)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0xf, 0x1)

6m27.474600762s ago: executing program 6 (id=2156):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nogrpid}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nolazytime}, {@grpid}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x10, 0x100000001, 0x6})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)

6m27.215004452s ago: executing program 6 (id=2159):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

6m26.874882162s ago: executing program 6 (id=2160):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x20000, 0x8, 0x14, 0x200, &(0x7f0000000200)="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"})

6m12.050240372s ago: executing program 36 (id=2160):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x20000, 0x8, 0x14, 0x200, &(0x7f0000000200)="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"})

5m44.293190862s ago: executing program 5 (id=2697):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r1, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r2, 0x0, 0x0)

5m43.506461401s ago: executing program 5 (id=2700):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096})
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a)
syz_emit_ethernet(0x3b6, &(0x7f0000000440)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090086dd60d2330000000000000000bbff02000000000000000000000000000186009078000002001100000000000000030aa78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af18020001ffffffffffffff80260004000318fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649f"], 0x0)

5m42.176305074s ago: executing program 5 (id=2713):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3ff, 0x0)
ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x8000, 0x10, '\x00', &(0x7f00000000c0)=0x4})

5m41.515779778s ago: executing program 5 (id=2715):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
syz_mount_image$vfat(&(0x7f0000005880), &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240))
r0 = open(&(0x7f0000014000)='.\x00', 0x8000, 0x14b)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}})
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

5m41.334971241s ago: executing program 5 (id=2717):
r0 = socket(0x10, 0x803, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x801, 0x0, 0x0, 0x61ac, 0x0, 0x0, 0x0, 0x10, 0x2000000}}, 0x50)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100037042bbd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d090000080003"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050)
timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240448c0}, 0x0)

5m40.026348404s ago: executing program 5 (id=2735):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)
keyctl$setperm(0x5, r0, 0x100000)

5m39.941867603s ago: executing program 37 (id=2735):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)
keyctl$setperm(0x5, r0, 0x100000)

5m19.594875295s ago: executing program 8 (id=2982):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7", 0x4, 0x4a, 0x0, 0x0)
poll(&(0x7f0000000040)=[{r0, 0x1040}], 0x1, 0x9)

5m19.593540575s ago: executing program 8 (id=2983):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x60, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

5m19.518193104s ago: executing program 8 (id=2984):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b})

5m19.449462941s ago: executing program 8 (id=2985):
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x535, &(0x7f0000002b00)="$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")
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
unlink(&(0x7f0000000280)='./file1/file2\x00')

5m19.378370973s ago: executing program 8 (id=2986):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000000000001a0100000700210042420000300022802c00018008000100"], 0x4c}}, 0x0)

5m19.277840324s ago: executing program 8 (id=2987):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006)

5m4.23122217s ago: executing program 38 (id=2987):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000001580)={0xfc, {"a2e3ad1bed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f3b3768030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0743090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

3m32.734316732s ago: executing program 9 (id=4328):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000380)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@sysvgroups}]}, 0xfe, 0x469, &(0x7f0000002480)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)

3m32.221488233s ago: executing program 9 (id=4336):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000a79000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000180)=0x40)

3m32.070254246s ago: executing program 9 (id=4338):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}})
write$tun(r0, &(0x7f00000000c0)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x19, 0x0, @opaque="0000800000a497aaf51b06323a78cb2ff6"}}}, 0x37)

3m31.92127262s ago: executing program 9 (id=4342):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/kmsg\x00', 0x44000, 0x42)

3m31.86687188s ago: executing program 9 (id=4343):
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_max_data_len={{0xe}, {0x7, 0xb, 0x0, 0x3, 0x800}}}}, 0xf)

3m31.324845096s ago: executing program 9 (id=4354):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)
syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00')
read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020)
preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006)

3m15.018941318s ago: executing program 39 (id=4354):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)
syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00')
read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020)
preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"a2e3ad21ed1909f91b50090987f70906d038e7ff7fc6e5539b0d3d0e8b089b33396d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a97376f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e8294265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b608a470c91555c70a803cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20877f7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f762413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95ff54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db082afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bd7c7dca9ffffffffa4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cd5f4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf62af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

2m29.495120149s ago: executing program 2 (id=5125):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f0000000440)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x29)

2m29.393634501s ago: executing program 2 (id=5126):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @local, @local, {[], {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x5, 0x0, 0xf500, {[@sack={0x5, 0x2}, @mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x5, @loopback, 0x1, "45673d923b56653c"}]}}}}}}}}, 0x0)

2m29.277950963s ago: executing program 2 (id=5128):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000018c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x2004080)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4)

2m29.190199137s ago: executing program 2 (id=5130):
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0xfffffffffffffffb)

2m29.105015924s ago: executing program 2 (id=5131):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f000000c200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}}], 0x400000000000043, 0x4000)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4)
close(0x3)
recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0)

2m28.898658303s ago: executing program 2 (id=5133):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041)
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xe}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050)

2m25.32143174s ago: executing program 7 (id=5152):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x10, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x7d, 0xf}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)

2m25.321147573s ago: executing program 7 (id=5153):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='net/snmp6\x00')
read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020)

2m25.213410402s ago: executing program 7 (id=5154):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0)

2m24.44338941s ago: executing program 7 (id=5155):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0xc)

2m24.385756455s ago: executing program 7 (id=5156):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000004c900200010000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000009242000000000000ffffffffffffffff00000000000000000095000000000000000000000000000000000000000000000000000000000000fffffffffcffffff07000000000000000a00000000000000000080"])

2m24.059490231s ago: executing program 7 (id=5159):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x4000)

2m23.79033021s ago: executing program 40 (id=5159):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x4000)

2m12.283749964s ago: executing program 41 (id=5133):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041)
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xe}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050)

1m35.16488653s ago: executing program 0 (id=5392):
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x44)
syz_usb_connect(0x0, 0x3d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110010e8592203735787e9a60010203010902c80001153a735d020b10030904fd"], 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r0, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)

1m31.771121803s ago: executing program 0 (id=5409):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x4e22}, 0x90)

1m30.775335916s ago: executing program 0 (id=5416):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0})

1m29.967076551s ago: executing program 4 (id=5420):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c)
sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0)

1m29.843112599s ago: executing program 4 (id=5421):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x3a3}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x11)

1m29.580886785s ago: executing program 4 (id=5422):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x15e}, 0x1c)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r1, 0x200204)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

1m29.474256156s ago: executing program 4 (id=5423):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000180)='./file0\x00', 0x200010, &(0x7f00000008c0)=ANY=[], 0x1, 0xf43, &(0x7f0000002140)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m28.484460272s ago: executing program 4 (id=5429):
keyctl$reject(0x13, 0x0, 0xca40, 0x200, 0x0)

1m27.697562862s ago: executing program 4 (id=5435):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f000072d000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x1)
mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000567000/0x2000)=nil)
mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x400, 0x0)

1m27.469535269s ago: executing program 42 (id=5435):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f000072d000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x1)
mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000567000/0x2000)=nil)
mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x400, 0x0)

1m27.425456728s ago: executing program 0 (id=5436):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
mount(0x0, 0x0, 0x0, 0x1a02845, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

1m24.981071007s ago: executing program 0 (id=5437):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r0, 0x8)
landlock_restrict_self(r1, 0x6)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x5)
landlock_restrict_self(r1, 0x4)
landlock_restrict_self(r1, 0x5)
r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)

1m15.581004294s ago: executing program 0 (id=5439):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000600)={[&(0x7f0000000400)='errors=continue', &(0x7f0000000480)='.$+:\x00', &(0x7f0000000500)='syz1\x00']})

57.767358s ago: executing program 43 (id=5439):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000600)={[&(0x7f0000000400)='errors=continue', &(0x7f0000000480)='.$+:\x00', &(0x7f0000000500)='syz1\x00']})

57.126201764s ago: executing program 1 (id=5443):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000001c0)={0xa, 0x101, 0x1, {0x5, 0xfffffff8, 0x2000406, 0xd3}})

45.089046685s ago: executing program 1 (id=5444):
r0 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2, 0x0, 0x4]}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)

33.16456667s ago: executing program 1 (id=5445):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c000780080006"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)

24.804581531s ago: executing program 1 (id=5446):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x38)
sendfile(r1, r0, 0x0, 0xbc44)

10.428305151s ago: executing program 1 (id=5447):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @mcast2, 0x9c2c}, 0x1c)

0s ago: executing program 1 (id=5448):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1, 0x1, 0x8)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000080)={0x2, 0x1, 0x1, 0x6, 0x4})

kernel console output (not intermixed with test programs):

t, device number 10
[  369.913391][T16245] xt_hashlimit: size too large, truncated to 1048576
[  371.248635][T16260] netlink: 'syz.2.4225': attribute type 10 has an invalid length.
[  372.092515][T16297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  373.335545][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4257'.
[  373.341086][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4257'.
[  373.345668][T16335] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22)
[  373.403147][T16340] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4259'.
[  373.930586][T16351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4264'.
[  373.992529][T16353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4265'.
[  373.992594][T16353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4265'.
[  374.364243][T16375] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4275'.
[  374.372162][T16375] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  374.475070][T16373] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  375.085558][T16387] netlink: 'syz.2.4278': attribute type 11 has an invalid length.
[  375.244894][T16391] netlink: 'syz.2.4280': attribute type 2 has an invalid length.
[  375.634273][T16397] xt_limit: Overflow, try lower: 268435456/134217728
[  375.832053][T16411] xt_MASQUERADE: bad MAP_IPS.
[  375.907060][T16420] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 4294967272. macoff=96
[  376.089018][T16438] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4303'.
[  376.132966][ T5701] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  376.162159][T16443] loop7: detected capacity change from 0 to 512
[  376.167422][T16441] loop9: detected capacity change from 0 to 4096
[  376.171513][ T5701] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  376.185184][T16443] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  376.195049][T16441] EXT4-fs: Ignoring removed orlov option
[  376.202009][T16441] EXT4-fs (loop9): Test dummy encryption mode enabled
[  376.204427][T16443] EXT4-fs (loop7): 1 truncate cleaned up
[  376.207446][T16443] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.222293][T16441] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.232256][T16443] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  376.244067][T16443] EXT4-fs error (device loop7) in ext4_setattr:6247: error 28
[  376.248230][T16443] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  376.286980][T11548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.332997][T13633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.427392][T16452] kAFS: unable to lookup cell 'syz0'
[  376.438121][T16452] loop9: detected capacity change from 0 to 1
[  376.601482][T16454] loop9: detected capacity change from 0 to 8192
[  377.078953][T16466] tmpfs: Bad value for 'mpol'
[  377.271718][T16473] loop9: detected capacity change from 0 to 512
[  377.306316][T16473] EXT4-fs error (device loop9): ext4_read_inode_bitmap:141: comm syz.9.4315: Invalid inode bitmap blk 4 in block_group 0
[  377.311572][T16473] loop9: lost filesystem error report for type 5 error -117
[  377.313294][T16473] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.394873][T13633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.988892][T16490] loop9: detected capacity change from 0 to 128
[  378.038965][T16490] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  378.044710][T16490] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  378.075203][T16490] EXT4-fs error (device loop9): swap_inode_boot_loader:388: inode #5: comm syz.9.4323: iget: checksum invalid
[  378.142130][T13633] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  378.380685][T16504] loop9: detected capacity change from 0 to 512
[  378.381279][T16504] EXT4-fs: Ignoring removed nomblk_io_submit option
[  378.413472][T16504] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  378.452497][T16504] EXT4-fs (loop9): 1 truncate cleaned up
[  378.493388][T16504] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  378.656820][T16512] 8021q: adding VLAN 0 to HW filter on device bond4
[  378.674616][T16512] bond4: (slave ip6gretap3): making interface the new active one
[  378.687563][T16512] bond4: (slave ip6gretap3): Enslaving as an active interface with an up link
[  378.863949][T16524] loop7: detected capacity change from 0 to 16
[  378.870972][T16524] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  378.926140][T13633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.231259][ T5597] Bluetooth: hci2: unexpected event for opcode 0x202f
[  380.101865][T16571] ip_tables: iptables: counters copy to user failed while replacing table
[  380.133199][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  380.135391][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  380.237747][T16575] loop7: detected capacity change from 0 to 512
[  380.240602][T16575] ext4: Unknown parameter 'quota.dax'
[  380.508551][T16577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4358'.
[  382.552680][T16638] SET target dimension over the limit!
[  383.010236][T16650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4372'.
[  383.354713][T16656] loop7: detected capacity change from 0 to 32768
[  383.357735][T16656] XFS (loop7): sunit and swidth must be specified together
[  383.571156][T16669] tipc: Failed to remove unknown binding: 66,0,0/4:1251478119/1251478120
[  383.574172][T16669] tipc: Failed to remove unknown binding: 66,0,0/4:1251478119/1251478120
[  383.718620][T16676] loop7: detected capacity change from 0 to 512
[  383.998128][T16685] loop7: detected capacity change from 0 to 40427
[  384.008370][T16685] F2FS-fs (loop7): Small segment_count (9 < 1 * 24)
[  384.011783][T16685] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  384.015141][T16685] F2FS-fs (loop7): invalid crc value
[  384.047420][T16685] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  384.057151][T16685] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  384.059549][T16685] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  384.419886][T16700] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  384.848126][T16717] ip_tables: iptables: counters copy to user failed while replacing table
[  384.990141][T16729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4408'.
[  384.993446][T16729] openvswitch: netlink: Missing key (keys=c0, expected=880)
[  385.249558][T16747] FAULT_INJECTION: forcing a failure.
[  385.249558][T16747] name failslab, interval 1, probability 0, space 0, times 0
[  385.254754][T16747] CPU: 0 UID: 0 PID: 16747 Comm: syz.7.4416 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  385.254801][T16747] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  385.254805][T16747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  385.254811][T16747] Call Trace:
[  385.254815][T16747]  <TASK>
[  385.254819][T16747]  dump_stack_lvl+0xe8/0x150
[  385.254836][T16747]  should_fail_ex+0x410/0x560
[  385.254851][T16747]  should_failslab+0xa8/0x100
[  385.254862][T16747]  __kvmalloc_node_noprof+0x176/0x820
[  385.254871][T16747]  ? __kvmalloc_node_noprof+0x345/0x820
[  385.254879][T16747]  ? io_alloc_cache_init+0x42/0x140
[  385.254890][T16747]  ? io_alloc_cache_init+0x42/0x140
[  385.254902][T16747]  io_alloc_cache_init+0x42/0x140
[  385.254913][T16747]  io_ring_ctx_alloc+0x56a/0xb80
[  385.254923][T16747]  io_uring_create+0x50/0x990
[  385.254932][T16747]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  385.254944][T16747]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  385.254955][T16747]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  385.254971][T16747]  ? rcu_is_watching+0x16/0xb0
[  385.254984][T16747]  do_syscall_64+0x166/0x520
[  385.254993][T16747]  ? trace_irq_disable+0x3b/0x140
[  385.255001][T16747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.255011][T16747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.255019][T16747] RIP: 0033:0x7ffb3319e1d9
[  385.255028][T16747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  385.255035][T16747] RSP: 002b:00007ffb3404d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  385.255044][T16747] RAX: ffffffffffffffda RBX: 00007ffb33425fa0 RCX: 00007ffb3319e1d9
[  385.255050][T16747] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000002210
[  385.255055][T16747] RBP: 00007ffb33235888 R08: 0000000000000000 R09: 0000000000000000
[  385.255059][T16747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  385.255064][T16747] R13: 00007ffb33426038 R14: 00007ffb33425fa0 R15: 00007fff70f5f648
[  385.255076][T16747]  </TASK>
[  385.696657][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4426'.
[  386.436196][   T34] kauditd_printk_skb: 6 callbacks suppressed
[  386.437053][   T34] audit: type=1326 audit(2000000124.639:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16752 comm="syz.2.4419" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72019e1d9 code=0x7fc00000
[  387.426321][T16813] fuse: fd is not a fuse device
[  387.616975][T16829] openvswitch: netlink: IPv4 frag type 4 is out of range max 2
[  389.992933][T16891] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4481'.
[  390.379880][T16915] jffs2: notice: (16915) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  390.397639][T16915] overlayfs: failed to clone lowerpath
[  390.496484][T16887] loop7: detected capacity change from 0 to 4096
[  390.504495][T16887] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  390.873504][T16932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  390.962883][T16887] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  390.983649][T16887] ntfs3(loop7): ino=1a, mi_enum_attr
[  390.991163][T16887] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[  391.003054][T16887] ntfs3(loop7): ino=5, "/" ntfs_readdir
[  391.110466][T16934] loop7: detected capacity change from 0 to 2048
[  391.505609][ T6917] IPVS: starting estimator thread 0...
[  391.631018][T16949] IPVS: using max 91 ests per chain, 218400 per kthread
[  391.767462][T16965] CIFS: Attempting to mount //127.0.0.1/share/file0
[  391.788656][T16965] CIFS: VFS: Error connecting to socket. Aborting operation.
[  391.799356][T16963] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4516'.
[  391.805021][T16965] CIFS: VFS: cifs_mount failed w/return code = -101
[  391.950865][T16974] netlink: 'syz.2.4521': attribute type 10 has an invalid length.
[  391.961952][T16974] macvlan1: entered promiscuous mode
[  391.961993][T16974] macvlan1: entered allmulticast mode
[  392.302368][T16994] FAULT_INJECTION: forcing a failure.
[  392.302368][T16994] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  392.302418][T16994] CPU: 1 UID: 0 PID: 16994 Comm: syz.7.4530 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  392.302447][T16994] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  392.302452][T16994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  392.302457][T16994] Call Trace:
[  392.302461][T16994]  <TASK>
[  392.302465][T16994]  dump_stack_lvl+0xe8/0x150
[  392.302484][T16994]  should_fail_ex+0x410/0x560
[  392.302503][T16994]  _copy_to_user+0x31/0xb0
[  392.302517][T16994]  simple_attr_read+0x34a/0x490
[  392.302532][T16994]  ? __pfx_simple_attr_read+0x10/0x10
[  392.302549][T16994]  full_proxy_read+0x127/0x1f0
[  392.302563][T16994]  ? __pfx_full_proxy_read+0x10/0x10
[  392.302573][T16994]  vfs_read+0x213/0xa80
[  392.302587][T16994]  ? __pfx___mutex_lock+0x10/0x10
[  392.302598][T16994]  ? __pfx_vfs_read+0x10/0x10
[  392.302609][T16994]  ? __fget_files+0x2a/0x420
[  392.302620][T16994]  ? __fget_files+0x3a2/0x420
[  392.302629][T16994]  ? __fget_files+0x2a/0x420
[  392.302642][T16994]  ksys_read+0x150/0x270
[  392.302653][T16994]  ? __pfx_ksys_read+0x10/0x10
[  392.302668][T16994]  do_syscall_64+0x166/0x520
[  392.302684][T16994]  ? trace_irq_disable+0x3b/0x140
[  392.302692][T16994]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.302704][T16994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.302712][T16994] RIP: 0033:0x7ffb3319e1d9
[  392.302722][T16994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  392.302729][T16994] RSP: 002b:00007ffb3404d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  392.302739][T16994] RAX: ffffffffffffffda RBX: 00007ffb33425fa0 RCX: 00007ffb3319e1d9
[  392.302745][T16994] RDX: 0000000000002020 RSI: 0000200000001bc0 RDI: 0000000000000004
[  392.302750][T16994] RBP: 00007ffb33235888 R08: 0000000000000000 R09: 0000000000000000
[  392.302754][T16994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  392.302759][T16994] R13: 00007ffb33426038 R14: 00007ffb33425fa0 R15: 00007fff70f5f648
[  392.302771][T16994]  </TASK>
[  393.078008][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4542'.
[  393.090451][T17019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  394.339876][T17064] ima: policy update failed
[  394.401739][   T34] audit: type=1807 audit(2000000131.974:263): action=measure res=1
[  394.401794][   T34] audit: type=1802 audit(2000000131.974:264): pid=17064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.4562" res=0 errno=0
[  394.906756][T17077] loop7: detected capacity change from 0 to 32768
[  394.968353][T17077]  loop7: p1 p3 < >
[  395.123656][T16424] udevd[16424]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  395.176944][T16670] udevd[16670]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  395.691129][T17106] loop7: detected capacity change from 0 to 512
[  395.696250][T17106] EXT4-fs: Ignoring removed bh option
[  395.701597][T17106] EXT4-fs (loop7): Test dummy encryption mode enabled
[  395.705769][T17106] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  395.722556][T17106] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.4581: inode has both inline data and extents flags
[  395.722605][T17106] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  395.727206][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  395.727217][    C1] EXT4-fs (loop7): initial error at time 2000000133: ext4_orphan_get:1403: inode 15
[  395.727230][    C1] EXT4-fs (loop7): last error at time 2000000133: ext4_orphan_get:1403: inode 15
[  395.728064][T17106] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.4581: couldn't read orphan inode 15 (err -117)
[  395.728078][T17106] loop7: lost filesystem error report for type 5 error -117
[  395.755152][T17106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.012625][T11548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.418031][ T5592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  396.433398][ T5592] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  396.444227][ T5592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  396.452468][ T5592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  396.456747][ T5592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  396.715774][T17117] loop7: detected capacity change from 0 to 4096
[  396.720581][T17117] ntfs3(loop7): RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only.
[  397.378444][T17113] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.384513][T17113] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.387346][T17113] bridge_slave_0: entered allmulticast mode
[  397.391964][T17113] bridge_slave_0: entered promiscuous mode
[  397.397325][T17113] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.399033][T17113] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.399124][T17113] bridge_slave_1: entered allmulticast mode
[  397.410690][T17113] bridge_slave_1: entered promiscuous mode
[  397.455639][T17113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.471798][T17113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.516267][T17113] team0: Port device team_slave_0 added
[  397.525327][T17113] team0: Port device team_slave_1 added
[  397.559994][T17113] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.560031][T17113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.560068][T17113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  397.560859][T17113] batman_adv: batadv0: Adding interface: batadv_slave_1
[  397.560887][T17113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.560915][T17113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  397.603223][T17117] ntfs3(loop7): $Bitmap is corrupted.
[  397.663507][T17113] hsr_slave_0: entered promiscuous mode
[  397.669815][T17113] hsr_slave_1: entered promiscuous mode
[  397.673704][T17113] debugfs: 'hsr0' already exists in 'hsr'
[  397.676793][T17113] Cannot create hsr debugfs directory
[  398.598088][T17173] openvswitch: netlink: Multiple metadata blocks provided
[  398.695189][ T5597] Bluetooth: hci1: command tx timeout
[  398.878917][T17186] netlink: 'syz.7.4601': attribute type 4 has an invalid length.
[  398.878964][T17186] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4601'.
[  399.288728][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4605'.
[  399.288798][T17202] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4605'.
[  399.448027][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4606'.
[  399.876352][T17219] loop7: detected capacity change from 0 to 256
[  400.003224][T17113] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  400.010980][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  400.013926][T17113] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  400.022002][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  400.025050][T17113] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  400.033515][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  400.038573][T17113] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  400.048593][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  400.175511][T17231] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4611'.
[  400.189651][T17113] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.208342][T17113] 8021q: adding VLAN 0 to HW filter on device team0
[  400.225544][T16607] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.225653][T16607] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.236846][T16607] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.236920][T16607] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.412046][T17233] loop7: detected capacity change from 0 to 4096
[  400.710388][T17113] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.815622][T17113] veth0_vlan: entered promiscuous mode
[  400.846790][T17113] veth1_vlan: entered promiscuous mode
[  400.854286][T17233] ntfs3(loop7): Failed to load $Extend (-22).
[  400.854325][T17233] ntfs3(loop7): Failed to initialize $Extend.
[  400.948752][ T5597] Bluetooth: hci1: command tx timeout
[  401.152048][T17268] Invalid source name
[  401.156929][T17268] UBIFS error (pid: 17268): cannot open "./file0", error -22
[  401.933929][T17113] veth0_macvtap: entered promiscuous mode
[  401.974170][T17113] veth1_macvtap: entered promiscuous mode
[  401.982827][T17113] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.985396][T17113] batman_adv: batadv0: Interface activated: batadv_slave_1
[  402.034226][ T5648] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.034455][ T5648] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.283625][T17267] overlayfs: failed to resolve './file0': -2
[  403.018639][T17270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.018693][T17270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.187572][T17298] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4627'.
[  403.187628][T17298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4627'.
[  403.194783][ T5597] Bluetooth: hci1: command tx timeout
[  403.294629][T15655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.294673][T15655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.430445][T16601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.430485][T16601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.564882][T17331] overlayfs: failed to clone upperpath
[  404.664736][T17337] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  404.681081][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4640'.
[  404.714004][T17337] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  404.720886][T17337] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  404.772486][T17337] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  404.929748][T17350] loop7: detected capacity change from 0 to 512
[  404.970313][T17350] fscrypt (loop7, inode 2): Error -61 getting encryption context
[  404.999316][T17350] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61
[  405.002807][T17350] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #13: comm syz.7.4644: iget: bad i_size value: 12154757448730
[  405.002850][T17350] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  405.007733][T17350] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.4644: couldn't read orphan inode 13 (err -117)
[  405.007773][T17350] loop7: lost filesystem error report for type 5 error -117
[  405.014986][    C1] EXT4-fs (loop7): error count since last fsck: 2
[  405.014996][    C1] EXT4-fs (loop7): initial error at time 2000000141: ext4_orphan_get:1403: inode 13
[  405.015008][    C1] EXT4-fs (loop7): last error at time 2000000141: ext4_orphan_get:1408
[  405.017299][T17350] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.077999][T11548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.123260][T16615] smbdirect: ib_dev[syz2] removed
[  405.445557][ T5597] Bluetooth: hci1: command tx timeout
[  406.533347][T17403] [U] 
[  406.533375][T17403] [U] K{
[  406.536088][T17403] [U] t 1Ffˊ`GJgo/mC
[  406.538618][T17403] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!"(5Ob̓J
[  406.544143][T17403] [U] k\&}66XHX.`a$40|϶9ިU4Vbz}wMTQΦr4
[  406.548385][T17403] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_<	ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq
[  406.548469][T17403] [U] 	+wG?]'a:	)' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿BٜNy"vI2
[  406.548513][T17403] [U] T_K5tYJ9c$brLNul9w|G"ʃ%C؝q 3qN^HP*$	.7yӱ2
[  406.548552][T17403] [U] ?h*37鍾^#Q"0~(oXLb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ
[  406.548605][T17403] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<<RB|Фe۠V96#ͤjU%s851ҩsP\?q|LQX0K1orɴ2|dF2ޔ0H}C[/px^o
[  406.548670][T17403] [U] ؛(JЛmxz;؝_*335\xmUAK!aQ`;FI+VUHmjƷZcz)_矡	&axto_ :%PCy+_}UmƫC!KJ7g=b
[  406.548735][T17403] [U] ٽF%XAl2r*gVW$j	AFߝ+9̈́Vi֗kپ1}_%r6(]/řYܺhr grn/ܫ#!d%D-{$vUT$:mtrEC1VD~];[sq(e,X8"Gd2@T8t8.Rc+@ꦇpupC'yL-Ss1E?7O^]cH]Jkr]Rkq܆ݣOTcx4N	&ڋ@:m7~+W*xM>>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq	DW=|q	ÆW;5Ž!dBx`/E`ƦMX"\
[  406.562416][T17403] [U] {;٘_o2)o.2W2yx_  HPϱSD:]{
[  406.562436][T17403] [U] I,>	51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^`	
[  406.562443][T17403] [U] 22Ʃx?0;3u
[  406.562463][T17403] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D,		D~d+w;A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ	aet1ݯ4K.e"RS|s:>pr"z#P!KY"}FN84hޱosߙ̫%Dlwm
[  406.562476][T17403] [U] [['xn',mr/1D=!Dx91BwRlfKZ#`l؛˜b~m
[  406.562486][T17403] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y
[  406.562492][T17403] [U] 'B6v20瞥׌"t8{9FW]쩍
[  406.562501][T17403] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C
[  406.562515][T17403] [U] ec
[  406.562520][T17403] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp|IRipm Y 8tV,l,
[  406.587405][T17402] [U] K)0~ʪiP'fzr@B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L
[  406.787945][T17408] loop1: detected capacity change from 0 to 4096
[  406.807736][T17408] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  407.022057][T17422] loop7: detected capacity change from 0 to 256
[  407.032962][T17422] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[  407.202562][T17424] netlink: 'syz.7.4678': attribute type 1 has an invalid length.
[  407.278878][T17408] ntfs3(loop1): ino=19, mi_enum_attr
[  407.282089][T17408] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  407.285833][T17408] ntfs3(loop1): ino=18, mi_enum_attr
[  407.289316][T17408] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  407.478795][T17443] loop1: detected capacity change from 0 to 1024
[  407.496583][T17443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  407.637743][T17449] loop7: detected capacity change from 0 to 256
[  407.734521][T17113] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.613995][T17474] jffs2: notice: (17474) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  408.676087][T17480] openvswitch: netlink: Message has 1 unknown bytes.
[  408.678755][T17480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.154771][T17503] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed
[  409.349570][T17510] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4712'.
[  409.349627][T17510] netlink: 'syz.7.4712': attribute type 6 has an invalid length.
[  409.354489][T17510] netlink: 'syz.7.4712': attribute type 5 has an invalid length.
[  409.354505][T17510] netlink: 'syz.7.4712': attribute type 4 has an invalid length.
[  409.441695][T17517] loop7: detected capacity change from 0 to 1024
[  409.604096][ T5648] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.604159][ T5648] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.779683][ T5648] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.779738][ T5648] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.900148][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4726'.
[  409.942708][ T5648] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.942766][ T5648] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.111613][ T5648] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  410.111672][ T5648] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.174388][T17558] loop7: detected capacity change from 0 to 512
[  410.179165][T17558] EXT4-fs: Ignoring removed bh option
[  410.245913][T17558] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.246058][T17558] ext4 filesystem being mounted at /656/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  410.254675][T17558] EXT4-fs error (device loop7): ext4_readdir:280: inode #2: block 3: comm syz.7.4734: path /656/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0
[  410.263064][T17558] EXT4-fs (loop7): Remounting filesystem read-only
[  410.349621][T11548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.595738][ T5648] bridge_slave_1: left allmulticast mode
[  410.595788][ T5648] bridge_slave_1: left promiscuous mode
[  410.595911][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.598583][ T5648] bridge_slave_0: left allmulticast mode
[  410.598595][ T5648] bridge_slave_0: left promiscuous mode
[  410.598692][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.623278][ T5648] batadv0: left allmulticast mode
[  410.623457][ T5648] pimreg: left allmulticast mode
[  410.892164][ T5648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  410.905265][ T5648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  410.917442][ T5648] bond0 (unregistering): Released all slaves
[  410.932455][ T5340] 8021q: adding VLAN 0 to HW filter on device eth1
[  411.120670][T17608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4751'.
[  411.284881][ T5340] 8021q: adding VLAN 0 to HW filter on device eth2
[  411.402911][ T5648] hsr_slave_0: left promiscuous mode
[  411.407855][ T5648] hsr_slave_1: left promiscuous mode
[  411.408619][ T5648] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.408913][ T5648] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.420440][ T5648] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  411.420564][ T5648] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.476382][ T5648] veth1_macvtap: left promiscuous mode
[  411.476461][ T5648] veth0_macvtap: left promiscuous mode
[  411.476556][ T5648] veth1_vlan: left promiscuous mode
[  411.476601][ T5648] veth0_vlan: left promiscuous mode
[  411.541078][T17636] use of bytesused == 0 is deprecated and will be removed in the future,
[  411.541128][T17636] use the actual size instead.
[  411.934417][ T5648] team0 (unregistering): Port device team_slave_1 removed
[  411.963099][ T5648] team0 (unregistering): Port device team_slave_0 removed
[  412.063377][ T5340] 8021q: adding VLAN 0 to HW filter on device eth3
[  412.358938][T17677] bridge1: the hash_elasticity option has been deprecated and is always 16
[  412.358992][T17677] bridge1: entered allmulticast mode
[  412.367944][ T5648] IPVS: stop unused estimator thread 0...
[  412.409690][ T5340] 8021q: adding VLAN 0 to HW filter on device eth4
[  412.807225][T17702] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  413.258466][T17720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4794'.
[  413.339076][T17726] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  414.379052][T17771] fuse: fd is not a fuse device
[  414.589306][   T34] audit: type=1800 audit(2000000150.650:265): pid=17790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4825" name="nullb0" dev="tmpfs" ino=1099 res=0 errno=0
[  414.763121][T17800] atomic_op ffff8881101551e0 conn xmit_atomic 0000000000000000
[  414.947133][T17812] bridge0: port 1(macsec1) entered blocking state
[  414.947257][T17812] bridge0: port 1(macsec1) entered disabled state
[  414.947311][T17812] macsec1: entered allmulticast mode
[  414.947320][T17812] bridge0: entered allmulticast mode
[  414.947336][T17812] bridge0: entered promiscuous mode
[  414.957578][T17812] macsec1: left allmulticast mode
[  414.957596][T17812] bridge0: left allmulticast mode
[  414.975819][ T5061] bridge0: left promiscuous mode
[  415.735223][T17836] veth0: entered promiscuous mode
[  415.740705][T17835] veth0: left promiscuous mode
[  415.754745][T17838] loop7: detected capacity change from 0 to 256
[  415.755264][T17838] exfat: Deprecated parameter 'utf8'
[  415.755274][T17838] exfat: Deprecated parameter 'utf8'
[  415.758176][T17838] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  416.095822][ T5597] Bluetooth: hci1: Malformed LE Event: 0x0f
[  416.244941][   T34] audit: type=1326 audit(2000000152.181:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17860 comm="syz.2.4859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72019e1d9 code=0x7ffc0000
[  416.251907][   T34] audit: type=1326 audit(2000000152.181:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17860 comm="syz.2.4859" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb72019e1d9 code=0x7ffc0000
[  416.259293][   T34] audit: type=1326 audit(2000000152.181:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17860 comm="syz.2.4859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72019e1d9 code=0x7ffc0000
[  416.266500][   T34] audit: type=1326 audit(2000000152.181:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17860 comm="syz.2.4859" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb72019e1d9 code=0x7ffc0000
[  416.273995][   T34] audit: type=1326 audit(2000000152.181:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17860 comm="syz.2.4859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72019e1d9 code=0x7ffc0000
[  417.624656][T17895] loop1: detected capacity change from 0 to 32768
[  417.637491][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4876'.
[  417.651619][T17899] erspan0: entered promiscuous mode
[  417.653958][T17899] macvtap1: entered promiscuous mode
[  417.657965][T17899] macvtap1: entered allmulticast mode
[  417.660090][T17899] erspan0: entered allmulticast mode
[  417.663785][T17895] JBD2: Ignoring recovery information on journal
[  417.700468][T17899] erspan0: left allmulticast mode
[  417.700671][T17899] erspan0: left promiscuous mode
[  417.704145][T17899] macvtap1: left promiscuous mode
[  417.704193][T17899] macvtap1: left allmulticast mode
[  417.707398][T17895] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  417.785487][T17903] netlink: 'syz.2.4877': attribute type 13 has an invalid length.
[  418.090356][T17113] ocfs2: Unmounting device (7,1) on (node local)
[  418.150179][T17918] netlink: 'syz.2.4885': attribute type 16 has an invalid length.
[  418.150241][T17918] netlink: 'syz.2.4885': attribute type 17 has an invalid length.
[  418.167308][T17920] loop7: detected capacity change from 0 to 512
[  418.184292][T17920] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.184370][T17920] ext4 filesystem being mounted at /688/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  418.274278][T17918] veth1_vlan: entered allmulticast mode
[  418.274499][T17918] macvlan1: left promiscuous mode
[  418.274612][T17918] macvlan1: left allmulticast mode
[  418.274620][T17918] veth1_vlan: left allmulticast mode
[  418.309096][T11548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.438166][T17929] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  419.281721][T17918] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  419.595754][T17962] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4901'.
[  419.632575][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4902'.
[  419.666915][T17968] 8021q: adding VLAN 0 to HW filter on device bond1
[  419.889404][T17983] loop7: detected capacity change from 0 to 1024
[  419.902083][T17983] hfsplus: failed to load extents file
[  420.075078][T17992] Need at least one configuration in g1.
[  420.075278][T17992] udc dummy_udc.0: failed to start g1: -22
[  420.075289][T17992] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  420.083131][T17992] UDC core: g1: couldn't find an available UDC or it's busy
[  420.154477][ T5061] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  420.321830][ T5061] usb 2-1: unable to get BOS descriptor or descriptor too short
[  420.322379][ T5061] usb 2-1: not running at top speed; connect to a high speed hub
[  420.322404][ T5061] usb 2-1: New USB device found, idVendor=0b48, idProduct=300a, bcdDevice=cb.dd
[  420.323450][ T5061] usb 2-1: config 5 has an invalid interface number: 222 but max is 0
[  420.323473][ T5061] usb 2-1: config 5 has no interface number 0
[  420.323492][ T5061] usb 2-1: config 5 interface 222 has no altsetting 0
[  420.327339][ T5061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.327356][ T5061] usb 2-1: Product: syz
[  420.327362][ T5061] usb 2-1: Manufacturer: syz
[  420.327371][ T5061] usb 2-1: SerialNumber: syz
[  420.385643][T18008] netlink: 'syz.7.4921': attribute type 16 has an invalid length.
[  420.385750][T18008] netlink: 'syz.7.4921': attribute type 17 has an invalid length.
[  420.601090][ T5061] dvb-usb: found a 'Technotrend TT Connect S2-3650-CI' in warm state.
[  420.601170][ T5061] pctv452e: pctv452e_power_ctrl: 1
[  420.601170][ T5061] 
[  420.604475][ T5061] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  420.604475][ T5061] 
[  420.604490][ T5061] dvb-usb: bulk message failed: -22 (5/0)
[  420.715050][ T5061] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  420.742830][ T5061] dvb-usb: Technotrend TT Connect S2-3650-CI error while loading driver (-19)
[  420.749035][ T5061] usb 2-1: USB disconnect, device number 2
[  420.861322][T18008] ipvlan2: left allmulticast mode
[  420.861389][T18008] virt_wifi0: left allmulticast mode
[  421.098017][ T5648] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  421.107685][T18026] kAFS: No cell specified
[  421.138661][ T6026] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  421.367135][ T5648] openvswitch: cpu_id mismatch with handler threads
[  421.659064][ T6026] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  421.757251][ T6026] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  421.760872][T17270] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  421.784358][ T5669] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  422.007615][ T5669] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  422.310536][ T5669] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  422.526193][   T13] openvswitch: cpu_id mismatch with handler threads
[  422.558374][ T5670] openvswitch: cpu_id mismatch with handler threads
[  423.230519][ T5670] openvswitch: cpu_id mismatch with handler threads
[  423.306273][ T6026] openvswitch: cpu_id mismatch with handler threads
[  423.494226][T18063] smpboot: CPU 1 is now offline
[  423.853332][T18080] kAFS: unable to lookup cell '(G'
[  423.858548][T18080] kAFS: unable to lookup cell '(G'
[  424.464787][T18102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4959'.
[  424.464835][T18102] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4959'.
[  424.879939][T18116] geneve3: entered allmulticast mode
[  424.977886][T18119] tipc: Failed to remove unknown binding: 66,0,0/0:2387036178/2387036180
[  424.977931][T18119] tipc: Failed to remove unknown binding: 66,0,0/0:2387036178/2387036179
[  424.987559][T18119] tipc: Failed to remove unknown binding: 66,0,0/0:2387036178/2387036180
[  424.987598][T18119] tipc: Failed to remove unknown binding: 66,0,0/0:2387036178/2387036179
[  425.378810][T18140] openvswitch: netlink: IPv4 tunnel dst address is zero
[  426.804825][T18158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4979'.
[  426.804865][T18158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4979'.
[  426.814787][T18158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4979'.
[  426.814829][T18158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4979'.
[  427.917752][T18172] loop1: detected capacity change from 0 to 1024
[  428.126787][T18180] macsec1: entered promiscuous mode
[  428.126823][T18180] macsec1: entered allmulticast mode
[  429.126330][T18193] syz.1.4991: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  429.126600][T18193] CPU: 0 UID: 0 PID: 18193 Comm: syz.1.4991 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  429.126640][T18193] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  429.126646][T18193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  429.126681][T18193] Call Trace:
[  429.126688][T18193]  <TASK>
[  429.126694][T18193]  dump_stack_lvl+0xe8/0x150
[  429.126720][T18193]  warn_alloc+0x24d/0x270
[  429.126735][T18193]  ? kasan_save_track+0x4f/0x80
[  429.126747][T18193]  ? kasan_save_track+0x3e/0x80
[  429.126761][T18193]  ? __pfx_warn_alloc+0x10/0x10
[  429.126771][T18193]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  429.126787][T18193]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.126812][T18193]  __vmalloc_node_range_noprof+0x127/0x1540
[  429.126844][T18193]  ? rcu_is_watching+0x16/0xb0
[  429.126863][T18193]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  429.126882][T18193]  ? __kmalloc_cache_noprof+0x321/0x600
[  429.126895][T18193]  ? __kmalloc_cache_noprof+0x14d/0x600
[  429.126906][T18193]  ? xskq_create+0x56/0x220
[  429.126923][T18193]  xskq_create+0x148/0x220
[  429.126936][T18193]  ? xsk_init_queue+0x8a/0xe0
[  429.126950][T18193]  xsk_init_queue+0x8a/0xe0
[  429.126965][T18193]  xsk_setsockopt+0x52a/0x960
[  429.126986][T18193]  ? __pfx_xsk_setsockopt+0x10/0x10
[  429.127005][T18193]  ? __pfx_aa_sk_perm+0x10/0x10
[  429.127026][T18193]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  429.127043][T18193]  ? __pfx_xsk_setsockopt+0x10/0x10
[  429.127061][T18193]  do_sock_setsockopt+0x17c/0x1b0
[  429.127079][T18193]  __x64_sys_setsockopt+0x13d/0x1b0
[  429.127100][T18193]  do_syscall_64+0x166/0x520
[  429.127116][T18193]  ? trace_irq_disable+0x3b/0x140
[  429.127129][T18193]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.127146][T18193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.127158][T18193] RIP: 0033:0x7f227279e1d9
[  429.127172][T18193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  429.127183][T18193] RSP: 002b:00007f22735e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  429.127205][T18193] RAX: ffffffffffffffda RBX: 00007f2272a26180 RCX: 00007f227279e1d9
[  429.127215][T18193] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  429.127224][T18193] RBP: 00007f2272835888 R08: 0000000000000004 R09: 0000000000000000
[  429.127233][T18193] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  429.127243][T18193] R13: 00007f2272a26218 R14: 00007f2272a26180 R15: 00007fffed48c2c8
[  429.127264][T18193]  </TASK>
[  429.127291][T18193] Mem-Info:
[  429.127320][T18193] active_anon:15703 inactive_anon:0 isolated_anon:0
[  429.127320][T18193]  active_file:0 inactive_file:58181 isolated_file:0
[  429.127320][T18193]  unevictable:1000 dirty:369 writeback:0
[  429.127320][T18193]  slab_reclaimable:11795 slab_unreclaimable:91462
[  429.127320][T18193]  mapped:22445 shmem:8620 pagetables:2025
[  429.127320][T18193]  sec_pagetables:0 bounce:0
[  429.127320][T18193]  kernel_misc_reclaimable:0
[  429.127320][T18193]  free:1079658 free_pcp:16825 free_cma:0
[  429.127375][T18193] Node 0 active_anon:45252kB inactive_anon:0kB active_file:0kB inactive_file:28488kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:56028kB dirty:420kB writeback:0kB shmem:31252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3608kB pagetables:4236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  429.127434][T18193] Node 1 active_anon:17560kB inactive_anon:0kB active_file:0kB inactive_file:204236kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:33752kB dirty:1056kB writeback:0kB shmem:3228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10240kB pagetables:3864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  429.127482][T18193] Node 0 DMA free:15328kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB
[  429.127559][T18193] lowmem_reserve[]: 0 1564 2092 2092 2092
[  429.127757][T18193] Node 0 DMA32 free:1489276kB boost:0kB min:24772kB low:30964kB high:37156kB reserved_highatomic:0kB free_highatomic:0kB active_anon:248kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1602232kB mlocked:0kB bounce:0kB free_pcp:28192kB local_pcp:28192kB free_cma:0kB
[  429.127840][T18193] lowmem_reserve[]: 0 0 527 527 527
[  429.128017][T18193] Node 0 Normal free:15440kB boost:0kB min:8504kB low:10628kB high:12752kB reserved_highatomic:0kB free_highatomic:0kB active_anon:44984kB inactive_anon:0kB active_file:0kB inactive_file:28488kB unevictable:2000kB writepending:420kB zspages:0kB present:1572868kB managed:540392kB mlocked:0kB bounce:0kB free_pcp:6552kB local_pcp:6552kB free_cma:0kB
[  429.128100][T18193] lowmem_reserve[]: 0 0 0 0 0
[  429.128283][T18193] Node 1 Normal free:2798588kB boost:0kB min:56588kB low:70732kB high:84876kB reserved_highatomic:0kB free_highatomic:0kB active_anon:17560kB inactive_anon:0kB active_file:0kB inactive_file:204236kB unevictable:2000kB writepending:1056kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:32524kB local_pcp:32524kB free_cma:0kB
[  429.128367][T18193] lowmem_reserve[]: 0 0 0 0 0
[  429.128543][T18193] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB
[  429.129116][T18193] Node 0 DMA32: 29*4kB (UM) 21*8kB (UM) 18*16kB (UME) 40*32kB (UME) 17*64kB (UME) 14*128kB (UME) 11*256kB (UM) 8*512kB (UME) 9*1024kB (UME) 7*2048kB (UME) 355*4096kB (UM) = 1489276kB
[  429.129777][T18193] Node 0 Normal: 886*4kB (UE) 1*8kB (E) 85*16kB (UME) 19*32kB (ME) 79*64kB (ME) 4*128kB (M) 7*256kB (ME) 5*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 15440kB
[  429.130331][T18193] Node 1 Normal: 1039*4kB (UME) 1766*8kB (UME) 371*16kB (UME) 1381*32kB (UME) 475*64kB (UME) 152*128kB (UME) 52*256kB (UM) 29*512kB (UM) 12*1024kB (UM) 7*2048kB (UM) 641*4096kB (UM) = 2798588kB
[  429.130990][T18193] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  429.131023][T18193] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  429.131057][T18193] 66774 total pagecache pages
[  429.131083][T18193] 0 pages in swap cache
[  429.131110][T18193] Free swap  = 124996kB
[  429.131136][T18193] Total swap = 124996kB
[  429.131165][T18193] 1834877 pages RAM
[  429.131199][T18193] 0 pages HighMem/MovableOnly
[  429.131225][T18193] 396709 pages reserved
[  429.131252][T18193] 0 pages cma reserved
[  430.224284][T18223] loop7: detected capacity change from 0 to 256
[  430.636243][T18234] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5013'.
[  431.068986][T18256] nvme_fabrics: missing parameter 'nqn=%s'
[  431.175955][T18261] loop7: detected capacity change from 0 to 512
[  431.186738][T18261] EXT4-fs (loop7): Test dummy encryption mode enabled
[  431.225258][T18261] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e064e0ad, mo2=0002]
[  431.225382][T18261] System zones: 1-12
[  431.246433][T18261] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.285981][T18261] EXT4-fs error (device loop7): htree_dirblock_to_tree:1051: inode #2: comm syz.7.5026: Directory hole found for htree leaf block 0
[  431.290673][T18261] EXT4-fs (loop7): Remounting filesystem read-only
[  431.318332][T11548] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  431.850348][T18267] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5029'.
[  432.932792][T18284] futex_wake_op: syz.2.5034 tries to shift op by 144; fix this program
[  433.357990][T18299] netlink: 'syz.7.5041': attribute type 21 has an invalid length.
[  434.818236][T18330] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  434.851849][T18334] netlink: 768 bytes leftover after parsing attributes in process `syz.1.5057'.
[  435.198098][T18348] loop1: detected capacity change from 0 to 256
[  436.352431][   T34] audit: type=1800 audit(2000000170.718:271): pid=18367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5070" name=08 dev="sda1" ino=1939 res=0 errno=0
[  436.711871][   T34] audit: type=1326 audit(2000000171.060:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18376 comm="syz.1.5077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227279e1d9 code=0x7ffc0000
[  436.740678][   T34] audit: type=1326 audit(2000000171.078:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18376 comm="syz.1.5077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227279e1d9 code=0x7ffc0000
[  436.740729][   T34] audit: type=1326 audit(2000000171.087:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18376 comm="syz.1.5077" exe="/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f227279e1d9 code=0x7ffc0000
[  436.740770][   T34] audit: type=1326 audit(2000000171.087:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18376 comm="syz.1.5077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227279e1d9 code=0x7ffc0000
[  436.740804][   T34] audit: type=1326 audit(2000000171.087:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18376 comm="syz.1.5077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227279e1d9 code=0x7ffc0000
[  436.907008][T18383] netlink: 'syz.2.5080': attribute type 12 has an invalid length.
[  437.172333][T18393] loop1: detected capacity change from 0 to 4096
[  437.180570][T18393] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  437.214252][T18393] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  437.216925][T18393] ntfs3(loop1): ino=19, mi_enum_attr
[  437.413210][T18404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5088'.
[  437.542172][   T34] audit: type=1326 audit(2000000171.835:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18409 comm="syz.1.5091" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f227279e1d9 code=0x0
[  437.816342][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5096'.
[  437.816449][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5096'.
[  437.888011][   T34] audit: type=1326 audit(2000000172.149:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18421 comm="syz.1.5097" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f227279e1d9 code=0x0
[  438.295600][T18430] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5101'.
[  438.516094][T18442] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  438.639136][T18447] loop1: detected capacity change from 0 to 2048
[  438.660333][T18447] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  438.786831][T18451] loop7: detected capacity change from 0 to 1024
[  438.837694][T18451] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  438.847010][T18451] EXT4-fs (loop7): Errors on filesystem, clearing orphan list.
[  438.855038][T18451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.050913][T11548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.078375][T18456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  441.418968][T18480] xt_hashlimit: size too large, truncated to 1048576
[  442.233783][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5133'.
[  442.288956][T18512] loop1: detected capacity change from 0 to 164
[  442.540283][T18522] loop1: detected capacity change from 0 to 512
[  442.548718][T18522] EXT4-fs: Ignoring removed nobh option
[  442.566851][T18522] EXT4-fs (loop1): 1 truncate cleaned up
[  442.569961][T18522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.748594][T17113] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.026032][T18526] loop1: detected capacity change from 0 to 32768
[  443.069370][T18526] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  443.161266][T17113] ocfs2: Unmounting device (7,1) on (node local)
[  443.766858][T18536] loop1: detected capacity change from 0 to 32768
[  443.811877][T18536] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  443.815398][T18536] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  443.826521][T18536] XFS (loop1): Ending clean mount
[  443.864725][T18536] XFS (loop1): Quotacheck needed: Please wait.
[  443.964897][T18536] XFS (loop1): Quotacheck: Done.
[  443.971653][   T34] audit: type=1800 audit(2000000177.759:279): pid=18536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5145" name="file1" dev="loop1" ino=4422 res=0 errno=0
[  444.015964][T17113] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  444.609743][T18552] loop1: detected capacity change from 0 to 32768
[  444.628293][T18552] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5149 (18552)
[  444.640929][T18552] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  444.641006][T18552] BTRFS info (device loop1): using crc32c checksum algorithm
[  444.701136][T18552] BTRFS info (device loop1): enabling ssd optimizations
[  444.704029][T18552] BTRFS info (device loop1): turning on flush-on-commit
[  444.707060][T18552] BTRFS info (device loop1): enabling free space tree
[  444.709862][T18552] BTRFS info (device loop1): enabling auto defrag
[  444.712556][T18552] BTRFS info (device loop1): use lzo compression, level 1
[  444.715126][T18552] BTRFS info (device loop1): max_inline set to 4096
[  445.122896][T17113] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  445.279661][T18570] 8021q: adding VLAN 0 to HW filter on device macsec1
[  445.696796][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  445.860142][    T9] usb 2-1: Using ep0 maxpacket: 16
[  445.865348][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  445.868126][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  445.872974][    T9] usb 2-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config
[  445.873011][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  445.873047][    T9] usb 2-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0
[  445.885727][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.885762][    T9] usb 2-1: Product: syz
[  445.885792][    T9] usb 2-1: Manufacturer: syz
[  445.885815][    T9] usb 2-1: SerialNumber: syz
[  446.141954][    T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  446.142003][    T9] cdc_ncm 2-1:1.0: bind() failure
[  446.156232][    T9] usb 2-1: USB disconnect, device number 3
[  446.893937][T18586] loop1: detected capacity change from 0 to 164
[  446.935037][T18586] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  446.992657][T18586] CacheFiles: Failed to register: -95
[  447.483026][ T5648] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.511905][ T5648] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.588776][ T5592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  447.606635][ T5592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  447.616405][ T5592] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  447.619090][ T5592] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  447.622778][ T5592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  447.928786][ T5648] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.928832][ T5648] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.064495][ T5648] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  448.068129][ T5648] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.090155][T18603] loop1: detected capacity change from 0 to 4096
[  448.095345][T18603] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  448.109804][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  448.109858][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  448.148105][T18603] ntfs3(loop1): $Secure::$SDH is corrupted.
[  448.150108][T18603] ntfs3(loop1): Failed to initialize $Secure (-22).
[  448.402326][T18609] loop1: detected capacity change from 0 to 40427
[  448.415627][T18609] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  448.415663][T18609] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  448.420948][T18609] F2FS-fs (loop1): invalid crc value
[  448.450085][T18609] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  448.459601][T18609] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  448.459643][T18609] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  448.914187][ T5648] bridge_slave_1: left allmulticast mode
[  448.914227][ T5648] bridge_slave_1: left promiscuous mode
[  448.914337][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.947819][ T5648] bridge_slave_0: left allmulticast mode
[  448.947857][ T5648] bridge_slave_0: left promiscuous mode
[  448.948045][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.628532][ T5648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  449.633064][ T5648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  449.644046][ T5648] bond0 (unregistering): Released all slaves
[  449.665077][ T5648] bond1 (unregistering): Released all slaves
[  449.834921][ T5648] : left promiscuous mode
[  449.924922][ T5597] Bluetooth: hci2: command tx timeout
[  450.134651][ T5649] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  450.188442][ T5340] 8021q: adding VLAN 0 to HW filter on device eth29
[  450.188739][ T5648] tipc: Left network mode
[  450.295053][ T5649] usb 2-1: Using ep0 maxpacket: 8
[  450.303544][ T5649] usb 2-1: unable to get BOS descriptor or descriptor too short
[  450.303592][ T5649] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d
[  450.310195][ T5649] usb 2-1: config 86 has an invalid descriptor of length 0, skipping remainder of the config
[  450.324018][ T5649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.324055][ T5649] usb 2-1: Product: syz
[  450.324085][ T5649] usb 2-1: Manufacturer: syz
[  450.324110][ T5649] usb 2-1: SerialNumber: syz
[  450.424599][T18592] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.427159][T18592] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.429868][T18592] bridge_slave_0: entered allmulticast mode
[  450.450681][T18592] bridge_slave_0: entered promiscuous mode
[  450.470986][T18592] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.481353][T18592] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.481540][T18592] bridge_slave_1: entered allmulticast mode
[  450.487481][T18592] bridge_slave_1: entered promiscuous mode
[  450.614290][ T5649] kvaser_usb 2-1:86.0: error -ENODEV: Cannot get usb endpoint(s)
[  450.623770][T18592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  450.636251][T18592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.661458][ T5649] usb 2-1: USB disconnect, device number 4
[  450.904742][T18592] team0: Port device team_slave_0 added
[  450.913800][T18592] team0: Port device team_slave_1 added
[  451.009681][T18592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.012007][T18592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.023120][T18592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.027627][ T5340] 8021q: adding VLAN 0 to HW filter on device eth30
[  451.035344][T18592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.039385][T18592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.048967][T18592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.099234][ T5648] hsr_slave_0: left promiscuous mode
[  451.103058][ T5648] hsr_slave_1: left promiscuous mode
[  451.106044][ T5648] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.108632][ T5648] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.111500][ T5648] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.111532][ T5648] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.117023][ T5648] batman_adv: batadv0: Interface deactivated: ipvlan2
[  451.119232][ T5648] batman_adv: batadv0: Removing interface: ipvlan2
[  451.179082][ T5648] veth1_macvtap: left promiscuous mode
[  451.182162][ T5648] veth0_macvtap: left promiscuous mode
[  451.184777][ T5648] veth1_vlan: left promiscuous mode
[  451.186588][ T5648] veth0_vlan: left promiscuous mode
[  451.702564][T18647] loop1: detected capacity change from 0 to 32768
[  451.709543][T18647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5173 (18647)
[  451.869399][T18647] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  451.869442][T18647] BTRFS info (device loop1): using crc32c checksum algorithm
[  451.954130][T18647] BTRFS info (device loop1): enabling ssd optimizations
[  451.954183][T18647] BTRFS info (device loop1): turning on flush-on-commit
[  451.954223][T18647] BTRFS info (device loop1): enabling free space tree
[  451.954255][T18647] BTRFS info (device loop1): enabling auto defrag
[  451.954287][T18647] BTRFS info (device loop1): use lzo compression, level 1
[  451.954359][T18647] BTRFS info (device loop1): max_inline set to 4096
[  452.180365][ T5597] Bluetooth: hci2: command tx timeout
[  452.658178][T17113] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  452.699430][T18592] hsr_slave_0: entered promiscuous mode
[  452.705588][T18592] hsr_slave_1: entered promiscuous mode
[  452.708557][T18592] debugfs: 'hsr0' already exists in 'hsr'
[  452.713256][T18592] Cannot create hsr debugfs directory
[  453.152140][ T5648] IPVS: stop unused estimator thread 0...
[  453.315433][T18672] loop1: detected capacity change from 0 to 1024
[  453.360773][T18672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  453.364934][T18672] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  453.388274][ T5340] 8021q: adding VLAN 0 to HW filter on device eth31
[  453.446555][T18672] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.5174: bg 0: block 112: padding at end of block bitmap is not set
[  453.522867][T18672] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.5174: lblock 0 mapped to illegal pblock 0 (length 1)
[  453.592276][T18672] EXT4-fs error (device loop1): ext4_ext_remove_space:2977: inode #15: comm syz.1.5174: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  453.740132][T18678] EXT4-fs error (device loop1): ext4_ext_remove_space:2977: inode #15: comm syz.1.5174: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0)
[  453.864321][T18678] EXT4-fs error (device loop1): ext4_ext_remove_space:2977: inode #15: comm syz.1.5174: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0)
[  453.899936][T18678] EXT4-fs error (device loop1): ext4_ext_remove_space:2977: inode #15: comm syz.1.5174: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0)
[  453.911520][T18678] EXT4-fs error (device loop1): ext4_ext_remove_space:2977: inode #15: comm syz.1.5174: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0)
[  453.921651][T18678] EXT4-fs error (device loop1): ext4_ext_remove_space:2977: inode #15: comm syz.1.5174: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0)
[  454.207019][T17113] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  454.445843][ T5597] Bluetooth: hci2: command tx timeout
[  454.473159][ T5340] 8021q: adding VLAN 0 to HW filter on device eth32
[  454.494636][T18686] loop1: detected capacity change from 0 to 512
[  454.621120][T18686] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  456.209570][ T5649] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  456.379077][ T5649] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  456.392119][ T5649] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  456.397019][ T5649] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  456.401079][ T5649] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  456.405088][ T5649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.415523][T18708] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  456.686780][ T5597] Bluetooth: hci2: command tx timeout
[  456.774787][T18592] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  456.892884][T18592] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  456.900513][T18592] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  456.925551][T18592] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  456.928691][T18592] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  456.941774][T18592] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  456.949095][T18592] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  456.964541][T18592] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  457.116111][T18592] 8021q: adding VLAN 0 to HW filter on device bond0
[  457.145537][T18592] 8021q: adding VLAN 0 to HW filter on device team0
[  457.171356][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.171469][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  457.187487][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.187558][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  457.556101][ T5649] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  457.567127][ T5649] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input14
[  457.710656][ T5649] usb 2-1: USB disconnect, device number 5
[  457.712818][    C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  458.199294][T18592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  458.337327][T18592] veth0_vlan: entered promiscuous mode
[  458.365883][T18592] veth1_vlan: entered promiscuous mode
[  458.424708][T18592] veth0_macvtap: entered promiscuous mode
[  458.444166][T18592] veth1_macvtap: entered promiscuous mode
[  458.479437][T18592] batman_adv: batadv0: Interface activated: batadv_slave_0
[  458.492700][T18592] batman_adv: batadv0: Interface activated: batadv_slave_1
[  458.530764][ T5648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.530833][ T5648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.530887][ T5648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.530930][ T5648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.842128][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.842165][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.958785][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.958828][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.038108][ T5649] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  459.211451][ T5649] usb 2-1: Using ep0 maxpacket: 8
[  459.215449][ T5649] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  459.220942][ T5649] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  459.220978][ T5649] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  459.239271][ T5649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.239310][ T5649] usb 2-1: Product: syz
[  459.239340][ T5649] usb 2-1: Manufacturer: syz
[  459.239364][ T5649] usb 2-1: SerialNumber: syz
[  459.253597][ T5649] usb 2-1: config 0 descriptor??
[  459.423499][ T5592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  459.450151][ T5592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  459.470564][ T5592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  459.476999][ T5592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  459.480399][ T5592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  459.622644][   T10] usb 2-1: USB disconnect, device number 6
[  459.843289][T18780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5184'.
[  461.290268][T18765] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.293695][T18765] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.298132][T18765] bridge_slave_0: entered allmulticast mode
[  461.307007][T18765] bridge_slave_0: entered promiscuous mode
[  461.316294][T18765] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.320499][T18765] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.367732][T18765] bridge_slave_1: entered allmulticast mode
[  461.376465][T18765] bridge_slave_1: entered promiscuous mode
[  461.448038][T18836] loop1: detected capacity change from 0 to 512
[  461.457124][T18836] EXT4-fs (loop1): Test dummy encryption mode enabled
[  461.504201][T18765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  461.528651][T18836] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.5199: inode has both inline data and extents flags
[  461.528706][T18836] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  461.535309][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  461.535326][    C0] EXT4-fs (loop1): initial error at time 2000000193: ext4_orphan_get:1403: inode 15
[  461.535342][    C0] EXT4-fs (loop1): last error at time 2000000193: ext4_orphan_get:1403: inode 15
[  461.539370][T18836] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.5199: couldn't read orphan inode 15 (err -117)
[  461.539391][T18836] loop1: lost filesystem error report for type 5 error -117
[  461.556910][T18836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.566372][T18765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  461.628082][T18836] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[  461.678550][T18765] team0: Port device team_slave_0 added
[  461.687883][T18765] team0: Port device team_slave_1 added
[  461.784319][T17113] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.801439][T18765] batman_adv: batadv0: Adding interface: batadv_slave_0
[  461.801482][T18765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  461.801521][T18765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  461.805206][ T5597] Bluetooth: hci3: command tx timeout
[  461.832576][T18765] batman_adv: batadv0: Adding interface: batadv_slave_1
[  461.832611][T18765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  461.832644][T18765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  461.969842][T18842] loop1: detected capacity change from 0 to 2048
[  462.015111][T18765] hsr_slave_0: entered promiscuous mode
[  462.018519][T18831] loop0: detected capacity change from 0 to 32768
[  462.030411][T18765] hsr_slave_1: entered promiscuous mode
[  462.030969][T18765] debugfs: 'hsr0' already exists in 'hsr'
[  462.031017][T18765] Cannot create hsr debugfs directory
[  462.044529][T18842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  462.057876][T18831] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5197 (18831)
[  462.113467][T18842] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:168: inode #12: comm syz.1.5200: inline data xattr refers to an external xattr inode
[  462.119977][T18842] EXT4-fs (loop1): Remounting filesystem read-only
[  462.131794][T18831] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  462.131843][T18831] BTRFS info (device loop0): using crc32c checksum algorithm
[  462.210349][T17113] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  462.363609][T18831] BTRFS info (device loop0): enabling ssd optimizations
[  462.363660][T18831] BTRFS info (device loop0): turning on flush-on-commit
[  462.363702][T18831] BTRFS info (device loop0): enabling free space tree
[  462.363735][T18831] BTRFS info (device loop0): enabling auto defrag
[  462.363768][T18831] BTRFS info (device loop0): use lzo compression, level 1
[  462.363801][T18831] BTRFS info (device loop0): max_inline set to 4096
[  462.435023][   T34] audit: type=1800 audit(2000000194.801:280): pid=18831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5197" name="file1" dev="loop0" ino=260 res=0 errno=0
[  462.742123][T18866] loop1: detected capacity change from 0 to 2048
[  462.802697][T18866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  462.802781][T18866] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.089379][T17113] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.836331][T18592] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  463.962506][T18881] kAFS: unable to lookup cell 'syz0'
[  464.067603][ T5597] Bluetooth: hci3: command tx timeout
[  464.813545][T18893] loop1: detected capacity change from 0 to 4096
[  464.927856][T18893] ntfs3(loop1): ino=19, mi_enum_attr
[  464.927912][T18893] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  465.275387][T18904] loop1: detected capacity change from 0 to 256
[  466.758642][ T5597] Bluetooth: hci3: command tx timeout
[  467.373863][T18923] loop0: detected capacity change from 0 to 1024
[  467.386138][T18923] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  467.483965][T18923] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #3: block 5: comm syz.0.5215: lblock 5 mapped to illegal pblock 5 (length 1)
[  467.503149][T18923] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  467.503504][T18923] Quota error (device loop0): write_blk: dquota write failed
[  467.503541][T18923] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  467.503657][T18923] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  467.503720][T18923] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.5215: Failed to acquire dquot type 0
[  467.503749][T18923] loop0: lost filesystem error report for type 5 error -117
[  467.511174][T18923] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 5: comm syz.0.5215: lblock 5 mapped to illegal pblock 5 (length 1)
[  467.511193][T18923] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  467.514356][    C0] EXT4-fs (loop0): error count since last fsck: 3
[  467.514366][    C0] EXT4-fs (loop0): initial error at time 2000000199: ext4_map_blocks:832: inode 3: block 5
[  467.514380][    C0] EXT4-fs (loop0): last error at time 2000000199: ext4_map_blocks:790: inode 3: block 5
[  467.525875][T18923] Quota error (device loop0): do_insert_tree: Can't read tree quota block 5
[  467.525911][T18923] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  467.525928][T18923] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.5215: Failed to acquire dquot type 0
[  467.525938][T18923] loop0: lost filesystem error report for type 5 error -117
[  467.539842][T18923] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.5215: Freeing blocks not in datazone - block = 0, count = 4096
[  467.539858][T18923] loop0: lost filesystem error report for type 5 error -117
[  467.565066][T18923] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 5: comm syz.0.5215: lblock 5 mapped to illegal pblock 5 (length 1)
[  467.565161][T18923] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  467.654526][T18923] Quota error (device loop0): do_insert_tree: Can't read tree quota block 5
[  467.654619][T18923] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  467.695452][T18923] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.5215: Failed to acquire dquot type 0
[  467.744946][T18923] loop0: lost filesystem error report for type 5 error -117
[  467.747674][T18923] EXT4-fs (loop0): 1 orphan inode deleted
[  467.754244][T18923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  467.836877][T18592] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.074030][T18765] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  468.092667][T18765] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  468.097254][T18765] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  468.136797][T18765] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  468.137231][T18765] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  468.147264][T18765] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  468.154839][T18765] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  468.158940][T18765] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  468.299100][   T34] audit: type=1326 audit(2000000200.208:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18951 comm="syz.0.5223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62779e1d9 code=0x7ffc0000
[  468.307432][   T34] audit: type=1326 audit(2000000200.208:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18951 comm="syz.0.5223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62779e1d9 code=0x7ffc0000
[  468.326264][   T34] audit: type=1326 audit(2000000200.236:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18951 comm="syz.0.5223" exe="/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fd62779e1d9 code=0x7ffc0000
[  468.326311][   T34] audit: type=1326 audit(2000000200.236:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18951 comm="syz.0.5223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62779e1d9 code=0x7ffc0000
[  468.326352][   T34] audit: type=1326 audit(2000000200.236:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18951 comm="syz.0.5223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62779e1d9 code=0x7ffc0000
[  468.430550][T18765] 8021q: adding VLAN 0 to HW filter on device bond0
[  468.468693][T18765] 8021q: adding VLAN 0 to HW filter on device team0
[  468.494304][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.494373][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state
[  468.510940][   T34] audit: type=1326 audit(2000000200.411:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.0.5225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62779e1d9 code=0x7ffc0000
[  468.511003][   T34] audit: type=1326 audit(2000000200.411:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.0.5225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62779e1d9 code=0x7ffc0000
[  468.528333][   T34] audit: type=1326 audit(2000000200.429:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.0.5225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62779e1d9 code=0x7ffc0000
[  468.537528][   T34] audit: type=1326 audit(2000000200.439:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.0.5225" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62779e1d9 code=0x7ffc0000
[  468.548351][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.548470][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state
[  468.563872][   T34] audit: type=1326 audit(2000000200.448:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18958 comm="syz.0.5225" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd62779e1d9 code=0x7ffc0000
[  468.998364][ T5597] Bluetooth: hci3: command tx timeout
[  469.044670][T18972] binder: 18970:18972 ioctl c0306201 200000000080 returned -14
[  469.079029][T18972] binder: 18970:18972 ioctl c0306201 2000000003c0 returned -14
[  469.682236][T18765] 8021q: adding VLAN 0 to HW filter on device batadv0
[  469.988462][T19002] FAULT_INJECTION: forcing a failure.
[  469.988462][T19002] name failslab, interval 1, probability 0, space 0, times 0
[  469.988523][T19002] CPU: 0 UID: 60928 PID: 19002 Comm: syz.0.5232 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  469.988558][T19002] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  469.988563][T19002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  469.988569][T19002] Call Trace:
[  469.988573][T19002]  <TASK>
[  469.988578][T19002]  dump_stack_lvl+0xe8/0x150
[  469.988593][T19002]  should_fail_ex+0x410/0x560
[  469.988612][T19002]  should_failslab+0xa8/0x100
[  469.988623][T19002]  __kmalloc_cache_noprof+0xa3/0x600
[  469.988633][T19002]  ? sget_fc+0x74a/0x1a40
[  469.988644][T19002]  ? sget_fc+0x74a/0x1a40
[  469.988657][T19002]  sget_fc+0x74a/0x1a40
[  469.988671][T19002]  ? __pfx_set_anon_super_fc+0x10/0x10
[  469.988684][T19002]  ? __pfx_sget_fc+0x10/0x10
[  469.988696][T19002]  ? __pfx_refcount_dec_not_one+0x10/0x10
[  469.988708][T19002]  ? __kmalloc_cache_noprof+0x14d/0x600
[  469.988718][T19002]  ? __pfx_mqueue_fill_super+0x10/0x10
[  469.988731][T19002]  get_tree_nodev+0x2a/0x150
[  469.988742][T19002]  vfs_get_tree+0x92/0x2a0
[  469.988750][T19002]  fc_mount_longterm+0x1c/0x100
[  469.988760][T19002]  mq_init_ns+0x508/0x770
[  469.988771][T19002]  copy_ipcs+0x45c/0x6c0
[  469.988784][T19002]  create_new_namespaces+0x210/0x6b0
[  469.988796][T19002]  ? security_capable+0x7e/0x2c0
[  469.988806][T19002]  unshare_nsproxy_namespaces+0x149/0x190
[  469.988817][T19002]  ksys_unshare+0x5a7/0x950
[  469.988830][T19002]  ? __pfx_ksys_unshare+0x10/0x10
[  469.988840][T19002]  ? rcu_is_watching+0x16/0xb0
[  469.988853][T19002]  __x64_sys_unshare+0x38/0x50
[  469.988863][T19002]  do_syscall_64+0x166/0x520
[  469.988872][T19002]  ? trace_irq_disable+0x3b/0x140
[  469.988880][T19002]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.988889][T19002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.988896][T19002] RIP: 0033:0x7fd62779e1d9
[  469.988905][T19002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.988912][T19002] RSP: 002b:00007fd628587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  469.988923][T19002] RAX: ffffffffffffffda RBX: 00007fd627a25fa0 RCX: 00007fd62779e1d9
[  469.988930][T19002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  469.988935][T19002] RBP: 00007fd627835888 R08: 0000000000000000 R09: 0000000000000000
[  469.988940][T19002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  469.988945][T19002] R13: 00007fd627a26038 R14: 00007fd627a25fa0 R15: 00007ffdf67cd588
[  469.988957][T19002]  </TASK>
[  470.269074][T19014] random: crng reseeded on system resumption
[  470.379717][T18765] veth0_vlan: entered promiscuous mode
[  470.395890][T18765] veth1_vlan: entered promiscuous mode
[  470.453770][T19013] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  470.453810][T19013] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  470.521615][T18765] veth0_macvtap: entered promiscuous mode
[  470.557896][T18765] veth1_macvtap: entered promiscuous mode
[  470.600358][T18765] batman_adv: batadv0: Interface activated: batadv_slave_0
[  470.610787][T18765] batman_adv: batadv0: Interface activated: batadv_slave_1
[  470.672522][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.672691][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.672827][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.673071][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.943655][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.943691][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.083204][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.083241][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.048262][T19054] input: syz0 as /devices/virtual/input/input15
[  473.038308][T19071] loop4: detected capacity change from 0 to 32768
[  473.134266][T19071] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  473.182737][T19071] XFS (loop4): Ending clean mount
[  473.236233][T19071] XFS (loop4): User initiated shutdown received.
[  473.236574][T19071] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:464).  Shutting down filesystem.
[  473.236690][T19071] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  473.295789][T18765] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  473.588765][T19119] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5264'.
[  473.668301][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5260'.
[  474.316649][T19136] FAULT_INJECTION: forcing a failure.
[  474.316649][T19136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  474.316711][T19136] CPU: 0 UID: 0 PID: 19136 Comm: syz.4.5271 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  474.316747][T19136] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  474.316754][T19136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  474.316762][T19136] Call Trace:
[  474.316767][T19136]  <TASK>
[  474.316773][T19136]  dump_stack_lvl+0xe8/0x150
[  474.316798][T19136]  should_fail_ex+0x410/0x560
[  474.316825][T19136]  copy_folio_from_iter_atomic+0x45a/0x1a30
[  474.316857][T19136]  ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[  474.316879][T19136]  ? shmem_write_begin+0x1d8/0x330
[  474.316900][T19136]  generic_perform_write+0x5c7/0x8f0
[  474.316930][T19136]  ? __pfx_generic_perform_write+0x10/0x10
[  474.316947][T19136]  ? down_write+0x16b/0x200
[  474.316993][T19136]  ? generic_write_checks_count+0x41a/0x520
[  474.317014][T19136]  ? file_update_time_flags+0x2d5/0x440
[  474.317032][T19136]  shmem_file_write_iter+0xf8/0x120
[  474.317052][T19136]  do_iter_readv_writev+0x612/0x8c0
[  474.317073][T19136]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  474.317112][T19136]  vfs_writev+0x343/0x990
[  474.317136][T19136]  ? __pfx_vfs_writev+0x10/0x10
[  474.317163][T19136]  ? __fget_files+0x2a/0x420
[  474.317184][T19136]  ? __fget_files+0x3a2/0x420
[  474.317200][T19136]  ? __fget_files+0x2a/0x420
[  474.317221][T19136]  do_writev+0x154/0x2e0
[  474.317237][T19136]  ? __pfx_do_writev+0x10/0x10
[  474.317259][T19136]  do_syscall_64+0x166/0x520
[  474.317274][T19136]  ? trace_irq_disable+0x3b/0x140
[  474.317287][T19136]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.317304][T19136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.317317][T19136] RIP: 0033:0x7f683fd9e1d9
[  474.317331][T19136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.317342][T19136] RSP: 002b:00007f6840c51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  474.317357][T19136] RAX: ffffffffffffffda RBX: 00007f6840025fa0 RCX: 00007f683fd9e1d9
[  474.317367][T19136] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004
[  474.317375][T19136] RBP: 00007f683fe35888 R08: 0000000000000000 R09: 0000000000000000
[  474.317384][T19136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  474.317392][T19136] R13: 00007f6840026038 R14: 00007f6840025fa0 R15: 00007ffc1cf5ba88
[  474.317438][T19136]  </TASK>
[  474.547673][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  474.709559][   T10] usb 2-1: Using ep0 maxpacket: 32
[  474.714533][   T10] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  474.728320][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.745437][   T10] gspca_main: nw80x-2.14.0 probing 055f:d001
[  474.785861][ T5649] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  474.949375][ T5649] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[  474.954630][ T5649] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[  474.973148][ T5649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.973199][ T5649] usb 5-1: Product: syz
[  474.973317][ T5649] usb 5-1: Manufacturer: syz
[  474.973347][ T5649] usb 5-1: SerialNumber: syz
[  474.990558][   T10] gspca_nw80x: reg_w err -71
[  474.990653][   T10] nw80x 2-1:3.0: probe with driver nw80x failed with error -71
[  475.005064][ T5649] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  475.013387][ T5649] dvb-usb: bulk message failed: -22 (3/0)
[  475.020865][   T10] usb 2-1: USB disconnect, device number 7
[  475.040627][ T5649] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  475.044222][ T5649] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0)
[  475.060568][ T5649] usb 5-1: media controller created
[  475.086536][ T5649] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  475.177446][ T5649] DVB: Unable to find symbol mt352_attach()
[  475.177480][ T5649] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0'
[  475.182938][ T5649] dvb-usb: bulk message failed: -22 (3/0)
[  475.197887][ T5649] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected.
[  475.264176][ T5649] usb 5-1: USB disconnect, device number 15
[  475.307940][ T5649] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected.
[  475.779060][T19145] device-mapper: table: 248:1: ultipath: unknown target type
[  475.779099][T19145] device-mapper: ioctl: error adding target to table
[  475.785325][T19145] device-mapper: ioctl: The device has no table.
[  475.789388][T19145] device-mapper: ioctl: The device has no table.
[  477.701792][T19159] loop1: detected capacity change from 0 to 128
[  477.773015][T19159] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  477.778988][T19159] ext4 filesystem being mounted at /237/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  478.098099][T17113] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  478.955475][T18464] IPVS: starting estimator thread 0...
[  479.044288][T19172] MTRR 1 not used
[  479.055868][T19167] IPVS: using max 93 ests per chain, 223200 per kthread
[  479.931591][T19199] loop4: detected capacity change from 0 to 128
[  479.953908][T19199] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  479.959592][T19199] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  480.006420][T18765] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  480.079617][T19202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5290'.
[  480.166181][T19204] netlink: 'syz.4.5291': attribute type 1 has an invalid length.
[  480.170474][T19204] nbd: illegal input index 393222
[  480.445079][T19213] nvme_fabrics: no handler found for transport fc-raddrR+0x333:pn-0x0444444444444444+host_traddr?nn-0x11111111111111117x:pn-0x22r222.
[  480.667303][T19218] loop0: detected capacity change from 0 to 256
[  480.677293][T19218] exfat: Deprecated parameter 'utf8'
[  480.686094][T19218] exfat: Deprecated parameter 'namecase'
[  480.686144][T19218] exfat: Deprecated parameter 'namecase'
[  480.732296][T19218] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d)
[  480.851202][T19222] loop1: detected capacity change from 0 to 2048
[  480.861842][T19222] EXT4-fs (loop1): unsupported descriptor size 1600
[  481.146844][T19228] loop1: detected capacity change from 0 to 4096
[  481.183899][T19228] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  481.229793][T19228] ntfs3(loop1): Failed to load $Extend (-22).
[  481.232988][T19228] ntfs3(loop1): Failed to initialize $Extend.
[  481.284205][T19224] loop0: detected capacity change from 0 to 32768
[  481.315567][T19224] JBD2: Ignoring recovery information on journal
[  481.387230][T19224] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  481.594605][T18592] ocfs2: Unmounting device (7,0) on (node local)
[  482.199634][T19237] loop4: detected capacity change from 0 to 32768
[  482.230632][T19237] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  482.257104][T19237] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x19d/0x1560, inode 0x1800 dinode
[  482.257156][T19237] XFS (loop4): Unmount and run xfs_repair
[  482.257185][T19237] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  482.257257][T19237] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  482.257281][T19237] 00000010: 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  482.257305][T19237] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 a5 e2 bf 3d  ..e.....4.Xh...=
[  482.257328][T19237] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 4b  4.Xh...=.......K
[  482.257351][T19237] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  482.257375][T19237] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  482.257398][T19237] 00000060: ff ff ff ff f0 42 c1 13 00 00 00 00 00 00 00 07  .....B..........
[  482.257424][T19237] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  482.257451][T19237] loop4: lost filesystem error report for type 5 error -117
[  482.257568][T19237] XFS (loop4): Failed to read root inode 0x1800, error 117
[  482.257832][T19237] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_mountfs+0x132e/0x2380 (fs/xfs/xfs_mount.c:1261).  Shutting down filesystem.
[  482.257913][T19237] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  482.257937][T19237] loop4: lost filesystem error report for type 5 error -108
[  482.331537][T19257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5310'.
[  482.331583][T19257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5310'.
[  482.535605][T19259] trusted_key: syz.0.5311 sent an empty control message without MSG_MORE.
[  482.823921][T19266] loop0: detected capacity change from 0 to 512
[  482.832163][T19266] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  482.878274][T19266] EXT4-fs (loop0): 1 truncate cleaned up
[  482.879088][T19266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  482.960328][T18592] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.065335][    T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  483.230298][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  483.233264][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  483.233307][    T9] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=67.ce
[  483.242435][    T9] usb 2-1: config 0 has an invalid interface number: 135 but max is 0
[  483.242477][    T9] usb 2-1: config 0 has no interface number 0
[  483.242536][    T9] usb 2-1: config 0 interface 135 altsetting 4 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  483.242568][    T9] usb 2-1: config 0 interface 135 has no altsetting 0
[  483.252380][ T5061] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  483.262573][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.262610][    T9] usb 2-1: Product: syz
[  483.262640][    T9] usb 2-1: Manufacturer: syz
[  483.262663][    T9] usb 2-1: SerialNumber: syz
[  483.271365][    T9] usb 2-1: config 0 descriptor??
[  483.278017][T19267] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  483.413309][ T5061] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  483.417402][ T5061] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  483.417450][ T5061] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  483.426226][ T5061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.426261][ T5061] usb 5-1: Product: syz
[  483.426289][ T5061] usb 5-1: Manufacturer: syz
[  483.426314][ T5061] usb 5-1: SerialNumber: syz
[  483.438749][ T5061] usb 5-1: config 0 descriptor??
[  483.440991][T19270] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  483.441079][T19270] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  483.532928][    T9] iguanair 2-1:0.135: probe with driver iguanair failed with error -12
[  483.561787][    T9] usb 2-1: USB disconnect, device number 8
[  483.670411][ T5061] dm9601 5-1:0.0: probe with driver dm9601 failed with error -71
[  483.680659][ T5061] usb 5-1: USB disconnect, device number 16
[  484.246882][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5319'.
[  484.287751][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  484.287910][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  484.287960][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  484.291108][T17270] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  484.310215][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5319'.
[  484.310693][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5319'.
[  484.478032][T19286] loop4: detected capacity change from 0 to 512
[  485.276270][T19288] lo: entered allmulticast mode
[  485.387662][T19287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5323'.
[  485.460502][    T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  485.516532][T19285] lo: left allmulticast mode
[  485.646713][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  485.650717][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  485.650758][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  485.658642][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  485.658679][    T9] usb 2-1: SerialNumber: syz
[  485.671574][    T9] usb 2-1: 0:2 : does not exist
[  486.143984][ T5649] usb 2-1: USB disconnect, device number 9
[  486.228362][T19296] loop4: detected capacity change from 0 to 32768
[  486.261012][T19296] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  486.497365][T19304] loop0: detected capacity change from 0 to 128
[  486.540126][T19304] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  486.544679][T19304] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  486.570299][T19304] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 4095 (only 1 groups)
[  486.616329][T18592] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  486.742708][T18765] ocfs2: Unmounting device (7,4) on (node local)
[  486.793317][   T34] kauditd_printk_skb: 41 callbacks suppressed
[  486.793372][   T34] audit: type=1326 audit(2000000217.269:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19307 comm="syz.0.5330" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd62779e1d9 code=0x0
[  487.186554][T19325] FAULT_INJECTION: forcing a failure.
[  487.186554][T19325] name failslab, interval 1, probability 0, space 0, times 0
[  487.198567][T19325] CPU: 0 UID: 0 PID: 19325 Comm: syz.4.5338 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  487.198598][T19325] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  487.198602][T19325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  487.198607][T19325] Call Trace:
[  487.198611][T19325]  <TASK>
[  487.198615][T19325]  dump_stack_lvl+0xe8/0x150
[  487.198632][T19325]  should_fail_ex+0x410/0x560
[  487.198648][T19325]  should_failslab+0xa8/0x100
[  487.198658][T19325]  __kmalloc_noprof+0xfe/0x720
[  487.198665][T19325]  ? rcu_is_watching+0x16/0xb0
[  487.198675][T19325]  ? tomoyo_realpath_from_path+0xef/0x640
[  487.198684][T19325]  ? tomoyo_realpath_from_path+0xef/0x640
[  487.198696][T19325]  tomoyo_realpath_from_path+0xef/0x640
[  487.198710][T19325]  tomoyo_path_perm+0x283/0x560
[  487.198721][T19325]  ? tomoyo_path_perm+0x251/0x560
[  487.198732][T19325]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  487.198745][T19325]  ? futex_hash+0x275/0x2b0
[  487.198761][T19325]  ? __fget_files+0x2a/0x420
[  487.198802][T19325]  ? __fget_files+0x2a/0x420
[  487.198813][T19325]  ? __fget_files+0x2a/0x420
[  487.198826][T19325]  security_inode_getattr+0x12b/0x310
[  487.198837][T19325]  __x64_sys_newfstat+0x133/0x270
[  487.198847][T19325]  ? __pfx_do_futex+0x10/0x10
[  487.198858][T19325]  ? __pfx___x64_sys_newfstat+0x10/0x10
[  487.198875][T19325]  ? rcu_is_watching+0x16/0xb0
[  487.198889][T19325]  do_syscall_64+0x166/0x520
[  487.198898][T19325]  ? trace_irq_disable+0x3b/0x140
[  487.198906][T19325]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.198916][T19325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.198924][T19325] RIP: 0033:0x7f683fd9e1d9
[  487.198933][T19325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  487.198940][T19325] RSP: 002b:00007f6840c51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005
[  487.198950][T19325] RAX: ffffffffffffffda RBX: 00007f6840025fa0 RCX: 00007f683fd9e1d9
[  487.198956][T19325] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  487.198961][T19325] RBP: 00007f683fe35888 R08: 0000000000000000 R09: 0000000000000000
[  487.198967][T19325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  487.198972][T19325] R13: 00007f6840026038 R14: 00007f6840025fa0 R15: 00007ffc1cf5ba88
[  487.198984][T19325]  </TASK>
[  487.261079][T19325] ERROR: Out of memory at tomoyo_realpath_from_path.
[  487.325849][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  487.488879][   T10] usb 2-1: Using ep0 maxpacket: 16
[  487.491038][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  487.496857][   T10] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  487.496910][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  487.496946][   T10] usb 2-1: config 0 has no interface number 0
[  487.507578][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.507615][   T10] usb 2-1: Product: syz
[  487.507646][   T10] usb 2-1: Manufacturer: syz
[  487.507670][   T10] usb 2-1: SerialNumber: syz
[  487.526471][   T10] usb 2-1: config 0 descriptor??
[  487.545874][   T10] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  487.550032][   T10] uvcvideo 2-1:0.105: No valid video chain found.
[  487.663960][T19334] loop4: detected capacity change from 0 to 256
[  487.705534][T19334] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d)
[  487.773480][   T10] usb 2-1: USB disconnect, device number 10
[  488.959139][T19350] vhci_hcd vhci_hcd.0: failed to lookup sock
[  489.329350][T19355] loop1: detected capacity change from 0 to 1024
[  489.333843][    T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  489.504440][    T9] usb 5-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8
[  489.504487][    T9] usb 5-1: too many configurations: 33, using maximum allowed: 8
[  489.518930][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.518968][    T9] usb 5-1: Product: syz
[  489.518998][    T9] usb 5-1: Manufacturer: syz
[  489.519023][    T9] usb 5-1: SerialNumber: syz
[  489.528174][    T9] usb 5-1: config 0 descriptor??
[  489.536526][    T9] go7007-loader 5-1:0.0: can't handle multiple config
[  489.536568][    T9] go7007-loader 5-1:0.0: probe failed
[  489.779232][   T10] usb 5-1: USB disconnect, device number 17
[  489.918639][T19369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  490.176488][T19381] netlink: 'syz.1.5363': attribute type 7 has an invalid length.
[  490.176526][T19381] netlink: 'syz.1.5363': attribute type 8 has an invalid length.
[  490.248331][T19383] loop1: detected capacity change from 0 to 128
[  490.289815][T19383] EXT4-fs (loop1): Test dummy encryption mode enabled
[  490.306016][T19383] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  490.312352][T19383] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  491.373551][T17113] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  491.531827][T19380] loop0: detected capacity change from 0 to 32768
[  491.627851][T19380] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  491.675730][T19380] XFS (loop0): Ending clean mount
[  491.684504][T19406] FAULT_INJECTION: forcing a failure.
[  491.684504][T19406] name failslab, interval 1, probability 0, space 0, times 0
[  491.684553][T19406] CPU: 0 UID: 0 PID: 19406 Comm: syz.4.5369 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  491.684581][T19406] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  491.684586][T19406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  491.684591][T19406] Call Trace:
[  491.684595][T19406]  <TASK>
[  491.684599][T19406]  dump_stack_lvl+0xe8/0x150
[  491.684614][T19406]  should_fail_ex+0x410/0x560
[  491.684630][T19406]  should_failslab+0xa8/0x100
[  491.684642][T19406]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[  491.684651][T19406]  ? __kernfs_new_node+0xa9/0x980
[  491.684658][T19406]  ? __kernfs_new_node+0xa9/0x980
[  491.684668][T19406]  kstrdup+0x42/0x100
[  491.684677][T19406]  __kernfs_new_node+0xa9/0x980
[  491.684685][T19406]  ? vsnprintf+0xe42/0xef0
[  491.684698][T19406]  ? __pfx___kernfs_new_node+0x10/0x10
[  491.684740][T19406]  ? kernfs_root+0x1c/0x230
[  491.684755][T19406]  ? kernfs_root+0x1c/0x230
[  491.684763][T19406]  ? kernfs_root+0x1c/0x230
[  491.684772][T19406]  kernfs_new_node+0xea/0x140
[  491.684782][T19406]  __kernfs_create_file+0x4b/0x2e0
[  491.684793][T19406]  cgroup_addrm_files+0x837/0xd70
[  491.684811][T19406]  ? __pfx_cgroup_addrm_files+0x10/0x10
[  491.684823][T19406]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  491.684840][T19406]  ? idr_replace+0x136/0x1b0
[  491.684855][T19406]  css_populate_dir+0x123/0x3d0
[  491.684865][T19406]  cgroup_apply_control_enable+0x797/0xda0
[  491.684882][T19406]  cgroup_mkdir+0xd2c/0xf90
[  491.684894][T19406]  ? __pfx_cgroup_mkdir+0x10/0x10
[  491.684909][T19406]  kernfs_iop_mkdir+0x213/0x360
[  491.684919][T19406]  vfs_mkdir+0x40c/0x620
[  491.684936][T19406]  filename_mkdirat+0x285/0x510
[  491.684952][T19406]  ? __pfx_filename_mkdirat+0x10/0x10
[  491.684966][T19406]  ? do_getname+0x151/0x250
[  491.684984][T19406]  __se_sys_mkdirat+0x35/0x150
[  491.684999][T19406]  do_syscall_64+0x166/0x520
[  491.685010][T19406]  ? trace_irq_disable+0x3b/0x140
[  491.685021][T19406]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.685034][T19406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.685044][T19406] RIP: 0033:0x7f683fd9e1d9
[  491.685055][T19406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  491.685064][T19406] RSP: 002b:00007f6840c51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  491.685077][T19406] RAX: ffffffffffffffda RBX: 00007f6840025fa0 RCX: 00007f683fd9e1d9
[  491.685086][T19406] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  491.685093][T19406] RBP: 00007f683fe35888 R08: 0000000000000000 R09: 0000000000000000
[  491.685101][T19406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  491.685108][T19406] R13: 00007f6840026038 R14: 00007f6840025fa0 R15: 00007ffc1cf5ba88
[  491.685125][T19406]  </TASK>
[  491.685165][T19406] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12
[  491.953347][T19408] loop1: detected capacity change from 0 to 2048
[  491.953810][T19408] udf: Unknown parameter ''
[  492.111549][T19410] netlink: 'syz.4.5371': attribute type 1 has an invalid length.
[  492.142507][T19410] 8021q: adding VLAN 0 to HW filter on device bond1
[  492.317545][T19412] loop1: detected capacity change from 0 to 512
[  492.364213][T19412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  492.364337][T19412] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  492.476955][T19410] bond1: (slave geneve2): making interface the new active one
[  492.482417][T19410] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  492.786986][T18592] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  492.941165][T19422] loop4: detected capacity change from 0 to 164
[  492.956261][T17113] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.205264][T19422] rock: directory entry would overflow storage
[  493.205299][T19422] rock: sig=0x4f50, size=4, remaining=3
[  493.205330][T19422] iso9660: Corrupted directory entry in block 5 of inode 1792
[  493.494936][T19427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5376'.
[  494.586722][T19439] futex_wake_op: syz.4.5380 tries to shift op by 144; fix this program
[  494.590197][T19439] loop4: detected capacity change from 0 to 256
[  494.636212][T19439] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  495.358182][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  495.519391][   T10] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  495.531792][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.531828][   T10] usb 2-1: Product: syz
[  495.531858][   T10] usb 2-1: Manufacturer: syz
[  495.531882][   T10] usb 2-1: SerialNumber: syz
[  495.540161][   T10] usb 2-1: config 0 descriptor??
[  495.545027][   T10] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 011
[  495.858806][T19462] program syz.0.5391 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  495.998562][   T10]  (null): failure reading functionality
[  496.015031][   T10] i2c i2c-2: failure reading functionality
[  496.064905][   T10] i2c i2c-2: connected i2c-tiny-usb device
[  496.071100][   T10] usb 2-1: USB disconnect, device number 11
[  497.057027][T19470] loop4: detected capacity change from 0 to 32768
[  497.075792][T19470] (syz.4.5395,19470,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  497.080813][T19470] (syz.4.5395,19470,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  497.095361][T19470] (syz.4.5395,19470,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  497.109118][T19470] JBD2: Ignoring recovery information on journal
[  497.170809][T19472] loop1: detected capacity change from 0 to 32768
[  497.176697][T19470] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  497.190807][T19472] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5396 (19472)
[  497.202888][T19472] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  497.202942][T19472] BTRFS info (device loop1): using crc32c checksum algorithm
[  497.334106][T19472] BTRFS info (device loop1): enabling ssd optimizations
[  497.334153][T19472] BTRFS info (device loop1): turning on flush-on-commit
[  497.334191][T19472] BTRFS info (device loop1): enabling free space tree
[  497.334215][T19472] BTRFS info (device loop1): enabling auto defrag
[  497.334241][T19472] BTRFS info (device loop1): use lzo compression, level 1
[  497.334266][T19472] BTRFS info (device loop1): max_inline set to 4096
[  497.478759][   T34] audit: type=1800 audit(2000000227.132:333): pid=19472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5396" name="file1" dev="loop1" ino=260 res=0 errno=0
[  497.613225][T18765] ocfs2: Unmounting device (7,4) on (node local)
[  497.990657][T19494] loop4: detected capacity change from 0 to 256
[  497.991321][T19494] exfat: Deprecated parameter 'utf8'
[  497.991376][T19494] exfat: Deprecated parameter 'namecase'
[  497.991433][T19494] exfat: Deprecated parameter 'namecase'
[  497.991460][T19494] exfat: Deprecated parameter 'utf8'
[  498.014906][T19494] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  498.015063][T19494] exFAT-fs (loop4): failed to test first cluster bit of root dir(5)
[  498.058298][T19494] exFAT-fs (loop4): start_clu is invalid cluster(0x400)
[  498.364825][T17113] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  499.885773][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  500.048807][   T10] usb 2-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[  500.053830][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  500.053956][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  500.054005][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.079349][   T10] usb 2-1: config 0 descriptor??
[  500.605313][   T10] input: HID 0b05:19b6 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0B05:19B6.000B/input/input17
[  500.714456][T19542] FAULT_INJECTION: forcing a failure.
[  500.714456][T19542] name failslab, interval 1, probability 0, space 0, times 0
[  500.714658][T19542] CPU: 0 UID: 0 PID: 19542 Comm: syz.4.5418 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  500.714699][T19542] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  500.714707][T19542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  500.714715][T19542] Call Trace:
[  500.714720][T19542]  <TASK>
[  500.714724][T19542]  dump_stack_lvl+0xe8/0x150
[  500.714750][T19542]  should_fail_ex+0x410/0x560
[  500.714797][T19542]  should_failslab+0xa8/0x100
[  500.714820][T19542]  __kmalloc_noprof+0xfe/0x720
[  500.714829][T19542]  ? crypto_alloc_tfm_node+0x3b5/0x3e0
[  500.714842][T19542]  ? x509_get_sig_params+0x305/0x630
[  500.714851][T19542]  ? x509_get_sig_params+0x305/0x630
[  500.714861][T19542]  x509_get_sig_params+0x305/0x630
[  500.714872][T19542]  x509_cert_parse+0x514/0x7a0
[  500.714894][T19542]  x509_key_preparse+0x64/0x6d0
[  500.714906][T19542]  ? down_read+0x2be/0x330
[  500.714926][T19542]  asymmetric_key_preparse+0xb9/0x1b0
[  500.714952][T19542]  __key_create_or_update+0x3a9/0xa80
[  500.714976][T19542]  ? __pfx___key_create_or_update+0x10/0x10
[  500.714994][T19542]  ? lookup_user_key+0xb68/0x1150
[  500.715015][T19542]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  500.715028][T19542]  ? __pfx_keyring_search_iterator+0x10/0x10
[  500.715047][T19542]  key_create_or_update+0x42/0x60
[  500.715057][T19542]  __se_sys_add_key+0x349/0x420
[  500.715069][T19542]  ? __pfx___se_sys_add_key+0x10/0x10
[  500.715082][T19542]  ? __x64_sys_add_key+0x20/0xc0
[  500.715094][T19542]  do_syscall_64+0x166/0x520
[  500.715107][T19542]  ? trace_irq_disable+0x3b/0x140
[  500.715119][T19542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.715136][T19542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.715148][T19542] RIP: 0033:0x7f683fd9e1d9
[  500.715162][T19542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.715173][T19542] RSP: 002b:00007f6840c51028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  500.715191][T19542] RAX: ffffffffffffffda RBX: 00007f6840025fa0 RCX: 00007f683fd9e1d9
[  500.715201][T19542] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000200000000240
[  500.715209][T19542] RBP: 00007f683fe35888 R08: 000000000bc1263e R09: 0000000000000000
[  500.715217][T19542] R10: 0000000000000110 R11: 0000000000000246 R12: 0000000000000000
[  500.715224][T19542] R13: 00007f6840026038 R14: 00007f6840025fa0 R15: 00007ffc1cf5ba88
[  500.715246][T19542]  </TASK>
[  501.046730][   T10] asus 0003:0B05:19B6.000B: input,hidraw0: USB HID v0.00 Joystick [HID 0b05:19b6] on usb-dummy_hcd.1-1/input0
[  501.172918][T19547] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  501.352735][T19536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.353066][T19536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.365336][ T5649] asus 0003:0B05:19B6.000B: Asus failed to set fn lock: -71
[  501.368331][ T5649] usb 2-1: USB disconnect, device number 12
[  501.648046][T19554] loop4: detected capacity change from 0 to 4096
[  501.705489][T19555] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  502.586628][T19556] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only
[  502.586795][T19556] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null.
[  502.871281][T19570] netlink: 'syz.1.5431': attribute type 2 has an invalid length.
[  503.202791][T18765] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  503.749607][T17270] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.822339][ T5592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  511.834658][ T5592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  511.844208][ T5592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  511.972506][ T5592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  511.978470][ T5592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  514.603505][ T5592] Bluetooth: hci3: command tx timeout
[  514.793214][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  514.793833][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  517.123255][ T5592] Bluetooth: hci3: command tx timeout
[  519.403391][ T5592] Bluetooth: hci3: command tx timeout
[  521.669920][ T5592] Bluetooth: hci3: command tx timeout
[  525.148626][    C0] sched: DL replenish lagged too much
[  532.939675][T17270] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.854913][ T5597] Bluetooth: hci1: command 0x0406 tx timeout
[  558.866098][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  559.214497][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  559.222323][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  559.250236][ T5597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  559.254790][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  562.120942][ T5592] Bluetooth: hci4: command tx timeout
[  564.457032][ T5592] Bluetooth: hci4: command tx timeout
[  566.744794][ T5592] Bluetooth: hci4: command tx timeout
[  569.485847][ T5592] Bluetooth: hci4: command tx timeout
[  580.551673][T17270] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.284100][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  581.286237][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  596.213833][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  596.590936][T18508] unregister_netdevice: waiting for vcan0 to become free. Usage count = 3
[  596.591630][T18508] ref_tracker: netdev@ffff888117700700 has 1/2 users at
[  596.591630][T18508]      j1939_ecu_create_locked+0x1cd/0x400
[  596.591630][T18508]      j1939_local_ecu_get+0xeb/0x220
[  596.591630][T18508]      j1939_sk_bind+0x70a/0xc60
[  596.591630][T18508]      __sys_bind+0x2e3/0x410
[  596.591630][T18508]      __x64_sys_bind+0x7a/0x90
[  596.591630][T18508]      do_syscall_64+0x166/0x520
[  596.591630][T18508]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.591630][T18508] 
[  596.591677][T18508] ref_tracker: netdev@ffff888117700700 has 1/2 users at
[  596.591677][T18508]      j1939_netdev_start+0x387/0xb20
[  596.591677][T18508]      j1939_sk_bind+0x946/0xc60
[  596.591677][T18508]      __sys_bind+0x2e3/0x410
[  596.591677][T18508]      __x64_sys_bind+0x7a/0x90
[  596.591677][T18508]      do_syscall_64+0x166/0x520
[  596.591677][T18508]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.591677][T18508] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  596.816197][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  596.862691][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  596.965132][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  596.970041][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  599.853186][ T5592] Bluetooth: hci5: command tx timeout
[  602.421680][ T5592] Bluetooth: hci5: command tx timeout
[  604.849275][ T5592] Bluetooth: hci5: command tx timeout
