last executing test programs:

1m50.600315491s ago: executing program 0 (id=1):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x2010880, &(0x7f00000008c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f696e746567726974792c6e6f646973636172642c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d332c6469736361726400726573697a652c71756f74612c75737271756f74612c726573697a653d3078303030303030303030303030303d30372c696e746567726974792c646973636172642c6e6f71756f74612c6e6f71756f74612c657569643c8c72c5bf762ab3dd5153bdd55a1a291ea0696f2f1f0a7b31c91bccf7f4707502478f37599eb13d60653683e6a858f2a54586fd6dc9da99078d3e365b7fe2d52d0591c9c049673c6720ed91bb2b448310341bd4cf4f", @ANYRESDEC=0x0, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES64], 0xfe, 0x60ee, &(0x7f0000001080)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

1m50.197518719s ago: executing program 0 (id=8):
syz_mount_image$msdos(&(0x7f00000014c0), &(0x7f0000000680)='./file0\x00', 0x884, &(0x7f0000008480)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078303030303030303030303030303031302c6e6f636173652c6e6f646f74732c666c7573682c6e66732c6e6f646f74732c646f74732c756d61736b3d30303030303030303030303030303030303030303030322c646f74732c636865636b3d6e6f726d616c2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303031312c646f74732c666d61736b3d30303030303030303030303031373737373737373737372c74696d655f6f66667365743d3078666666666666666666666666666261632c6e6f646f74732c636865636b3d6e6f726d616c2c00ab2f"], 0x1, 0x23d, &(0x7f0000000040)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7ffffdff, 0x4)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0))

1m48.610574927s ago: executing program 0 (id=18):
timerfd_create(0x0, 0x1000)

1m48.516479956s ago: executing program 32 (id=18):
timerfd_create(0x0, 0x1000)

1m38.320151431s ago: executing program 2 (id=80):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x2d, 0xb, 0x0, 0x25dfdbff, {0x5}}, 0x14}}, 0x0)

1m38.14176182s ago: executing program 2 (id=81):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'tunl0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14)

1m38.010093608s ago: executing program 2 (id=82):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

1m37.928549287s ago: executing program 2 (id=83):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
socket(0x2, 0x2, 0x1)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001380)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT], 0x1, 0x1256, &(0x7f0000002400)="$eJzs3E9rXFUYB+B3plNnOjV/1FptF3rQjauhycKVIEFSkAwotRFaQZiSiQ65zoTMGBgRY1duXfoZxKU7RfwC2boX3GUjrrIQrzh3apJ2qk0jmVKfZ3Nf7rm/e84hl8Ad7jl7r3350cZ6v7HeGkS5VIryZkTaT5GiHHe8sFIcb9xcWWo2l6+ldHXp+sKrKaXZF39479NvXvpxcP7db2e/q8bu/Pt7vy7+sntx99LeH9c/7PRTp5+6vUFqpVu93qB1K2untU5/o5HS21m71W+nTrff3jrSvp71NjeHqdVdm6lvbrX7/dTqDtNGe5gGvTTYGqbWB61ONzUajTRTD+7r7L9fsvr1fp5/H5HnZ+OJyPM8L0U9SvFkzMRsfB4RT8XT8UxciGfjYjwXz8el0VWnMXwAAAAAAAAAAAAAAAAAAAD4/9gfreY/WP9/Lupxfrz+fy7mJ67/PzPtQQMAAAAAAAAAAAAAAAAAAMBj5p0bN1eWms3laynVIrIvtle3V4tj0b60Hp3Ioh1XYi5+j9EeAYWivvpmc/lKGjkTETvj/M726pmI6riTv/ILo+0ExvnK6PSd/EKRT3E7O5SvRr3ovxYR7ViMubhwqP/aQX5xYr4Wr7x8aPyNmMt3InqRxdqo74P8ZwspvfFW86785dF1AAAA8DhopL/NH33/LXb5azTu117kj/H7wF3v15W4XJnu3InoDz/ZaGVZe+toUbvnzNSK6qMxjOMU5ZPEqzGp6eeIyMpHmr76KeK/GHOp9BD3+bj0j8/P6RSloqiNn+WT3DCimFDpUXh+jl3cPtHcJxfT+5/E6Tn4o9/TVDk3lREBAAAAAAAAAADwIB7ke8Df4qG/IqzEhC/LXp/OVAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgWAAAAABAmL91Gh0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMFQAAAD//3MPuIc=")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m37.037852149s ago: executing program 2 (id=91):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)

1m36.820721141s ago: executing program 2 (id=97):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000)
r2 = io_uring_setup(0x191a, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x44, 0x6, 0x500, 0x0, 0x130, 0x0, 0x0, 0x98, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x90, 0x1b8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94)
r4 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x1c}}, 0x0)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000)
msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0xf1, 0x800)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_NEW_STATION(r5, 0x0, 0x8800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

1m36.669492248s ago: executing program 33 (id=97):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000)
r2 = io_uring_setup(0x191a, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x44, 0x6, 0x500, 0x0, 0x130, 0x0, 0x0, 0x98, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x90, 0x1b8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94)
r4 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x1c}}, 0x0)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000)
msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0xf1, 0x800)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_NEW_STATION(r5, 0x0, 0x8800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

1m12.180815844s ago: executing program 4 (id=290):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a800008100000086dd"], 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)

1m11.960374764s ago: executing program 4 (id=291):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1m11.960157296s ago: executing program 4 (id=292):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x200000000000000, 0xfffffff8}, {0xff03901000000000, 0x109003ff}, 0xc, 0x6})

1m11.874879524s ago: executing program 4 (id=293):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)

1m11.874695329s ago: executing program 4 (id=294):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0)

1m11.807576935s ago: executing program 4 (id=296):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

56.458301787s ago: executing program 34 (id=296):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

1.696874204s ago: executing program 3 (id=1083):
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)

1.589785208s ago: executing program 3 (id=1086):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r1 = memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2)
pwrite64(r1, &(0x7f0000000000)='|', 0x1, 0x3fff)
fcntl$addseals(r1, 0x409, 0x6)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[@ANYBLOB="01153c67df000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00 '])

1.50338444s ago: executing program 3 (id=1088):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0), 0x4)

1.495778899s ago: executing program 3 (id=1091):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.415540175s ago: executing program 1 (id=1092):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

1.414143271s ago: executing program 5 (id=1093):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4)

1.407342858s ago: executing program 3 (id=1094):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd(0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@gquota}, {@nolazytime}, {@dax}]}, 0x1, 0x97a6, &(0x7f0000012f40)="$eJzs/QeYJHWheH/PAsuSs4ooioqKkShBRAkCIkGiggKCZMlBCUoSkaAoCCgCknPOIDnnnHPOOefwPsvuKq4H5P7ee/947znneXZnurq6pvr76aqamerpXnKexeYcGBhjYFhTDIzcTbfPudDGO8552d477XnyFGNNMPnwycNvMOnwi5MOGv5xlIGBgVGGL2f4tLEfPuHEUQZGe3v6Pxp7zLEGjTswMN3wi7MP/zjTsA8TPzJivrdGauQVHfT3i4O2H/bv7cYf+iWGfrL0jeefNTAwMME7bj/0JtP8yx2VtuQc887zD6u/uw21Gjz883f+G33Yv4nvGxiY+O4Bfny8c95BH8BdGvo1J9jx/jHW/QC+9v+6lpxj3vlG8h+6LY46fNpMQ7fxkbdBYyM/zm9cZdbdhw/h24+3gYGhu7h/2lb+V7TkHPMsMPDu+/mBB8ca77S33t5vjv30wMDYzwwMjP3swMDYzw0MjP38wMDYL3zQLvX/X3PMOf2cQ7f3EZeHs494LE9Aj4u9V39+r4GBgSHD5hn7zWHHi3GmGHFMqKqqqv/s5phz+rng+D/Gex3/t9p6jps7/ldVVf3vbb455px+6HF8pOP/OO91/P/u9devMex3/7PPNOxWb36wd6Kqqqr+S80zHx7/J3iv4//4O1y7X8f/qqqq/70tuuDbx/9xRjr+T/Jex/815r/9kuHzjfi+4Y13LPLt548Nn/7aO6aP+o7pr75j+uB3LOed84/+jukvv2P6GAMDYz88fPrr/5g89tNDb/Ovyxn7xX88H2fS0d4x/aV3TB/9HdNfHr5OQ6cPecf0N94x/xj/mD7O0P+mGP51X3mPoa6qqvqPadHp55lr4B3Psx8+ecQT+/F5oUcfvfUdH9T6VlVVVVVVVdV/vTefOPXMf/zN9ycG3vG3q3//G9bhvxcYdMzZV1/9ga3of0aD/vX3IVt80Ov0/29Dncc4bIqBgbWW+KBXpT6A/tf8rXr9j5S/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yt7l/P/f//7/4G7v7jD8Flnmez2exb7xy0nHVht+Gc33T7nQqt9AOv+AfR/9fz/wGqDBgaG+04w1HKhORZdfKqBgYHF7rl9shkH/n7dzEOvm3WiUd/+Y86Bgane/n/wpO+y5OHvsvD2mztM8vdlHPP28ud7a99RB420Eu9otrPuPXDVJV+aYeSPn3/3+/H395dY6sV9pxzxtyyjjDTTGO9y4xHLH3FfRnYevu5TDV33qTdYc52p1994k6+stubyq6y0ykprTTfdtDNMP+MM031tlqlXXm2NlaYZ9v+7jNmwt64Y9f2M2Tgjj9kTc7xzzEa+bxOedCCO2b++q8c/LeLtJZ4z24OXjhiz0d7nmI34eqO+95hNsdrwLzTpwOCB5d4emkEDA5OONnhgo6EXph0yMDDp4OHzTjp03m9MNMrAwI7/uKODhr/Y6LB5Bm0xdJ7/sPctmWX4iGw6Yr6RX2d95BX9d+9bcvw4u9w+0vuW/E/1/3T8/xevmQf9faBGvAHC8HmGeX3A7zPxL+s7xWhvH+TebX3f43Vx3o4eX2uu+sgS/12vi0PrO857rO97vI7fu67vVNM+tcewRf23re9I+7oFhl35fvZ1A++9rxuVbr/SFZOPvK+b/91X8Z+24xFjNGSkmd5tX7fj/OdsPnT5A++9r1tgteEvHvCPfd0oAwOTjjpiXzd0xzf64IEdh16YbuiFIYMHDhl6Yfq3L4w5cPbQC19dYe01Vhz09ssMDF/uNEOXO/tEg4ZtQDccuOqQXd56a7Th6/Li2P+8rsMfH1O883g+x0TDB3P4bUcsd+isI5b78jbDrht9+HJf+i8sd8RtaX0nPWPYdUOGL/flkZY7+D2WO+K2/7I9TDXon56oCvubD/R9jWj7HeM91vc9XocbH29vu0+57IP/Da/DPejd1ne0917fd3vfkHdd30cvfWyf/67XDafH2d17D3usjDH8cfbGf+HxO+K2I+/Hhr0QyLDd/hjvZz82xb/sx7YcdZSRBvsdvdv3uSvC/MO3iL8vbcUDXlptxNgPHmm5/+773Hfcl0GwH5tgpJ/nBm2+z8AgGvOH13huwzd3fu8xHzzwzz9bjBjzEbd9rzEf8n7G/OPvPeYjf5/8bmM+1WeGXT94pPV/55gvstvsN4wY89FHWu6/G/Mh733s+NcxHxgYTGO+42TDxu299qfvNuYjbjtizId+nVknGm1g7oGBgSmHj/no72fMJ/3veZyPBfMP+3ylv096esaFvzxizEce43835qP/F8d8s7v//jif8u3rPj3KwOijD2y0/AYbrDftsP9HXJxu2P+8L3p6xWHj/F7H0nczGnHb99ouRns/RhO8L6NB/85ostHezegfm9aoBy76zP/rvmi0/6rR2bwvOmXeYeP2Xt8XvduYj7gtHQcnecftR/459D1ePwvv09vjM/+2I37e+094/awRP+/+r3z9rBG/k1xt5J18vd/6/b+7/N3l7y5/d/mLe5fz/1OMOP//1jj7f3j4D52Dr5j55tk/6PX9gPs/ff5/uO8/nf+f/eaZrxj6o9Xw697z/Oywef4jz8/ONOzDxI+MmG/k84Mjr+i/Oz+7964bXPH/0fnZ/6dGbKvv4+fi9v/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/ce9y/n+aEc8DeGDxhb43/ETo4E2nPXLTD3p9P+D+T5//H+77T+f/Nz1y2k1HGfj7de95/n/YPI7z//cuuPky/8nn/0dsq53/r39T/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7l3O/88+4nkAh88292dHPB/guu323eODXt8PuP+r5/97/39v7f/d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4oaf/x8Y6W0SF+5xgcH5///dvYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8f9+/pjF/wf5Yxb/JfPHLP5L5Y9Z/H+YP2bx/1H+mMV/6fwxi/8y+WMW/2Xzxyz+P84fs/gvlz9m8V8+f8zi/5P8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/p/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfx/lj9m8f95/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8f5E/ZvH/Zf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4/yp/zOK/Vf6Yxf/X+WMW/63zxyz+v8kfs/hvkz9m8d82f8ziv13+mMV/+/wxi/9v88cs/r/LH7P475A/ZvH/ff6Yxf8P+WMW/x3zxyz+O+WPWfz/mD9m8d85f8ziv0v+mMV/1/wxi/+f8scs/n/OH7P475Y/ZvH/S/6YxX/3/DGL/x75Yxb/PfPHLP5/zR+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf9v+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMR/0ED+mMV/UP6YxX+U/DGL/6j5Yxb/0fLHLP6D88cs/qPnj1n8h+SPWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/h/LHLP4fzh+z+H8kf8ziP2n+mMX/o/ljFv/J8scs/h/LH7P4fzx/zOI/ef6Yxf8T+WMW/0/mj1n8p8gfs/h/Kn/M4v/p/DGL/2fyxyz+U+aPWfw/mz9m8f9c/pjF//P5Yxb/qfLHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H8tf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+X88fs/jPmj9m8f9G/pjFf7b8MYv/N/PHLP7fyh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/7fzxyz+c+ePWfznyR+z+M+bP2bx/07+mMV/vvwxi/9388cs/vPnj1n8F8gfs/gvmD9m8V8of8zi/738MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi//38MYv/D/LHLP5L5o9Z/JfKH7P4/zB/zOL/o/wxi//S+WMW/2Xyxyz+y+aPWfx/nD9m8V8uf8ziv3z+mMX/J/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/9P88cs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P8sf8zi//P8MYv/hvljFv+N8scs/hvnj1n8N8kfs/j/In/M4v/L/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvH/Vf6YxX+r/DGL/6/zxyz+W+ePWfx/kz9m8d8mf8ziv23+mMV/u/wxi//2+WMW/9/mj1n8f5c/ZvHfIX/M4v/7/DGL/x/yxyz+O+aPWfx3yh+z+P8xf8ziv3P+mMV/l/wxi/+u+WMW/z/lj1n8/5w/ZvHfLX/M4v+X/DGL/+75Yxb/PfLHLP575o9Z/P+aP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/9/yxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+72zLEZ9Y/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/bIT/kIGBgf/L/vfmj1m2//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/TOL/9qf5/2sW/0H5Yxb/UfLHLP6j5o9Z/EfLH7P4D84fs/iPnj9m8R+SP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/h/KH7P4fzh/zOL/kfwxi/+k+WMW/4/mj1n8J8sfs/h/LH/M4v/x/DGL/+T5Yxb/T+SPWfw/mT9m8Z8if8zi/6n8MYv/p/PHLP6fyR+z+E+ZP2bx/2z+mMX/c/ljFv/P549Z/KfKH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi//U+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOL/tfwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/t/MH7P4fyt/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP7fzh+z+M+dP2bxnyd/zOI/b/6Yxf87+WMW//nyxyz+380fs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//38scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi//388cs/j/IH7P4L5k/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bx/3H+mMV/ufwxi//y+WMW/5/kj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+P80fs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOL/s/wxi//P88cs/hvmj1n8N8ofs/hvnD9m8d8kf8zi/4v8MYv/L/PHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjF/1f5Yxb/rfLHLP6/zh+z+G+dP2bx/03+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx/mz9m8f9d/pjFf4f8MYv/7/PHLP5/yB+z+O+YP2bx3yl/zOL/x/wxi//O+WMW/13yxyz+u+aPWfz/lD9m8f9z/pjFf7f8MYv/X/LHLP67549Z/PfIH7P475k/ZvH/a/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP5/yx+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyT+ow7kj1n8B+WPWfxHyR+z+I+aP2bxHy1/zOI/OH/M4j96/pjFf0j+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4fyh/zOL/4fwxi/9H8scs/pPmj1n8P5o/ZvGfLH/M4v+x/DGL/8fzxyz+k+ePWfw/kT9m8f9k/pjFf4r8MYv/p/LHLP6fzh+z+H8mf8ziP2X+mMX/s/ljFv/P5Y9Z/D+fP2bxnyp/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi//X8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi//X8MYv/rPljFv9v5I9Z/GfLH7P4fzN/zOL/rfwxi//s+WMW/znyxyz+c+aPWfznyh+z+H87f8ziP3f+mMV/nvwxi/+8+WMW/+/kj1n858sfs/h/N3/M4j9//pjFf4H8MYv/gvljFv+F8scs/t/LH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/t/PH7P4/yB/zOK/ZP6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMX/x/ljFv/l8scs/svnj1n8f5I/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/NH/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi//P8scs/j/PH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/L/LHLP6/zB+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/X+WPWfy3yh+z+P86f8ziv3X+mMX/N/ljFv9t8scs/tvmj1n8t8sfs/hvnz9m8f9t/pjF/3f5Yxb/HfLHLP6/zx+z+P8hf8ziv2P+mMV/p/wxi/8f88cs/jvnj1n8d8kfs/jvmj9m8f9T/pjF/8/5Yxb/3fLHLP5/yR+z+O+eP2bx3yN/zOK/Z/6Yxf+v+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/TOX/1vjvd06L/+Eq//efxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/gfNCR/yuJ/ats/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHJP6jDeSPWfwH5Y9Z/EfJH7P4j5o/ZvEfLX/M4j84f8ziP3r+mMV/SP6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/h/KH/M4v/h/DGL/0fyxyz+k+aPWfw/mj9m8Z8sf8zi/7H8MYv/x/PHLP6T549Z/D+RP2bx/2T+mMV/ivwxi/+n8scs/p/OH7P4fyZ/zOI/Zf6Yxf+z+WMW/8/lj1n8P58/ZvGfKn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/9fyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/9fwxi/+s+WMW/2/kj1n8Z8sfs/h/M3/M4v+t/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fzt/zOI/d/6YxX+e/DGL/7z5Yxb/7+SPWfznyx+z+H83f8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+38sfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+388fs/j/IH/M4r9k/pjFf6n8MYv/D/PHLP4/yh+z+C+dP2bxXyZ/zOK/bP6Yxf/H+WMW/+Xyxyz+y+ePWfx/kj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P80f8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/8/yxyz+P88fs/hvmD9m8d8of8ziv3H+mMV/k/wxi/8v8scs/r/MH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv9f5Y9Z/LfKH7P4/zp/zOK/df6Yxf83+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/23+mMX/d/ljFv8d8scs/r/PH7P4/yF/zOK/Y/6YxX+n/DGL/x/zxyz+O+ePWfx3yR+z+O+aP2bx/1P+mMX/z/ljFv/d8scs/n/JH7P4754/ZvHfI3/M4r9n/pjF/6/5Yxb/vfLHLP57549Z/PfJH7P47yv1H/Jvrrf47yf1/3dZ/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/v+WPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxf/zf+L++2v/0iv1nZvF/ou0fs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K39M4j94IH/M4j8of8ziP0r+mMV/1Pwxi/9o+WMW/8H5Yxb/0fPHLP5D8scs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6Yxf9D+WMW/w/nj1n8P5I/ZvGfNH/M4v/R/DGL/2T5Yxb/j+WPWfw/nj9m8Z88f8zi/4n8MYv/J/PHLP5T5I9Z/D+VP2bx/3T+mMX/M/ljFv8p88cs/p/NH7P4fy5/zOL/+fwxi/9U+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8v5Y/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv+v549Z/GfNH7P4fyN/zOI/W/6Yxf+b+WMW/2/lj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/2/ljFv+588cs/vPkj1n8580fs/h/J3/M4j9f/pjF/7v5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvH/Xv6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvH/fv6Yxf8H+WMW/yXzxyz+S+WPWfx/mD9m8f9R/pjFf+n8MYv/MvljFv9l88cs/j/OH7P4L5c/ZvFfPn/M4v+T/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/6f5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8f5Y/ZvH/ef6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/H+RP2bx/2X+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+P8qf8ziv1X+mMX/1/ljFv+t88cs/r/JH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/b/PHLP6/yx+z+O+QP2bx/33+mMX/D/ljFv8d88cs/jvlj1n8/5g/ZvHfOX/M4r9L/pjFf9f8MYv/n/LHLP5/zh+z+O+WP2bx/0v+mMV/9/wxi/8e+WMW/z3zxyz+f80fs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/b/ljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjEf/SB/DGL/6D8MYv/KPljFv9R88cs/qPlj1n8B+ePWfxHzx+z+A/JH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/w/lj1n8P5w/ZvH/SP6YxX/S/DGL/0fzxyz+k+WPWfw/lj9m8f94/pjFf/L8MYv/J/LHLP6fzB+z+E+RP2bx/1T+mMX/0/ljFv/P5I9Z/KfMH7P4fzZ/zOL/ufwxi//n88cs/lPlj1n8v5A/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/Wv6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/2/mj1n8v5U/ZvGfPX/M4j9H/pjFf878MYv/XPljFv9v549Z/OfOH7P4z5M/ZvGfN3/M4v+d/DGL/3z5Yxb/7+aPWfznzx+z+C+QP2bxXzB/zOK/UP6Yxf97+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf/7+WMW/x/kj1n8l8wfs/gvlT9m8f9h/pjF/0f5Yxb/pfPHLP7L5I9Z/JfNH7P4/zh/zOK/XP6YxX/5/DGL/0/yxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/n+aPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/Wf6Yxf/n+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx/0X+mMX/l/ljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8zi/6v8MYv/VvljFv9f549Z/LfOH7P4/yZ/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP6/zR+z+P8uf8ziv0P+mMX/9/ljFv8/5I9Z/HfMH7P475Q/ZvH/Y/6YxX/n/DGL/y75Yxb/XfPHLP5/yh+z+P85f8ziv1v+mMX/L/ljFv/d88cs/nvkj1n898wfs/j/NX/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv+/5Y9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5YxL/IQP5Yxb/QfljFv9R8scs/qPmj1n8R8sfs/gPzh+z+I+eP2bxH5I/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+H8ofs/h/OH/M4v+R/DGL/6T5Yxb/j+aPWfwnyx+z+H8sf8zi//H8MYv/5PljFv9P5I9Z/D+ZP2bxnyJ/zOL/qfwxi/+n88cs/p/JH7P4T5k/ZvH/bP6Yxf9z+WMW/8/nj1n8p8ofs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+1/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fz1/zOI/a/6Yxf8b+WMW/9nyxyz+38wfs/h/K3/M4j97/pjFf478MYv/nPljFv+58scs/t/OH7P4z50/ZvGfJ3/M4j9v/pjF/zv5Yxb/+fLHLP7fzR+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL//fyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fzxyz+P8gfs/gvmT9m8V8qf8zi/8P8MYv/j/LHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v+z/DGL/8/zxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/i/wxi/8v88cs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/V/ljFv+t8scs/r/OH7P4b50/ZvH/Tf6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/H+bP2bx/13+mMV/h/wxi//v88cs/n/IH7P475g/ZvHfKX/M4v/H/DGL/875Yxb/XfLHLP675o9Z/P+UP2bx/3P+mMV/t/wxi/9f8scs/rvnj1n898gfs/jvmT9m8f9r/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+Y9o9HdesPgfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvH/W/6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5PmPxHff+zWvyfNPn/F7L4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxH2Mgf8ziPyh/zOI/Sv6YxX/U/DGL/2j5Yxb/wfljFv/R88cs/kPyxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4TyT2f2vzd7/O4j+x2P+9svhPkj9m8f9Q/pjF/8P5Yxb/j+SPWfwnzR+z+H80f8ziP1n+mMX/Y/ljFv+P549Z/CfPH7P4fyJ/zOL/yfwxi/8U+WMW/0/lj1n8P50/ZvH/TP6YxX/K/DGL/2fzxyz+n8sfs/h/Pn/M4j9V/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/r+WPWfxnzB+z+M+UP2bxnzl/zOI/S/6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8f9m/pjF/1v5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvH/dv6YxX/u/DGL/zz5Yxb/efPHLP7fyR+z+M+XP2bx/27+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfy/lz9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfy/nz9m8f9B/pjFf8n8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/4/zxyz+y+WPWfyXzx+z+P8kf8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bx/2n+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+WPWfx/nj9m8d8wf8ziv1H+mMV/4/wxi/8m+WMW/1/kj1n8f5k/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/r/KH7P4b5U/ZvH/df6YxX/r/DGL/2/yxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOL/2/wxi//v8scs/jvkj1n8f58/ZvH/Q/6YxX/H/DGL/075Yxb/P+aPWfx3zh+z+O+SP2bx3zV/zOL/p/wxi/+f88cs/rvlj1n8/5I/ZvHfPX/M4r9H/pjFf8/8MYv/X/PHLP575Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvH/W/6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxH3Mgf8ziPyh/zOI/Sv6YxX/U/DGL/2j5Yxb/wfljFv/R88cs/kPyxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjF/0P5Yxb/D+ePWfw/kj9m8Z80f8zi/9H8MYv/ZPljFv+P5Y9Z/D+eP2bxnzx/zOL/ifwxi/8n88cs/lPkj1n8P5U/ZvH/dP6Yxf8z+WMW/ynzxyz+n80fs/h/Ln/M4v/5/DGL/1T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfy/lj9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/nj1n8Z80fs/h/I3/M4j9b/pjF/5v5Yxb/b+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6Yxf/b+WMW/7nzxyz+8+SPWfznzR+z+H8nf8ziP1/+mMX/u/ljFv/588cs/gvkj1n8F8wfs/gvlD9m8f9e/pjFf+H8MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8f9+/pjF/wf5Yxb/JfPHLP5L5Y9Z/H+YP2bx/1H+mMV/6fwxi/8y+WMW/2Xzxyz+P84fs/gvlz9m8V8+f8zi/5P8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/p/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfx/lj9m8f95/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8f5E/ZvH/Zf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4/yp/zOK/Vf6Yxf/X+WMW/63zxyz+v8kfs/hvkz9m8d82f8ziv13+mMV/+/wxi/9v88cs/r/LH7P475A/ZvH/ff6Yxf8P+WMW/x3zxyz+O+WPWfz/mD9m8d85f8ziv0v+mMV/1/wxi/+f8scs/n/OH7P475Y/ZvH/S/6YxX/3/DGL/x75Yxb/PfPHLP5/zR+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/ynv6j/k/v17/oVn8/9b2j1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljEv+xBvLHLP6D8scs/qPkj1n8R80fs/iPlj9m8R+cP2bxHz1/zOI/JH/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfw/lD9m8f9w/pjF/yP5Yxb/SfPHLP4fzR+z+E+WP2bx/1j+mMX/4/ljFv/J88cs/p/IH7P4fzJ/zOI/Rf6Yxf9T+WMW/0/nj1n8P5M/ZvGfMn/M4v/Z/DGL/+fyxyz+n88fs/hPlT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/zfyxyz+s+WPWfy/mT9m8f9W/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/d/LHLP7z5Y9Z/L+bP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/7+ePWfx/kD9m8V8yf8ziv1T+mMX/h/ljFv8f5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/j/DGL/3L5Yxb/5fPHLP4/yR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+aP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/2f5Yxb/n+ePWfw3zB+z+G8k8x/yPuez+G8s83+/Wfw3yR+z+P8if8zi/8v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f9V/pjFf6v8MYv/r/PHLP5b549Z/H+TP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/3+aPWfx/lz9m8d8hf8zi//v8MYv/H/LHLP475o9Z/HfKH7P4/zF/zOK/c/6YxX+X/DGL/675Yxb/P+WPWfz/nD9m8d8tf8zi/5f8MYv/7vljFv898scs/nvmj1n8/5o/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/3/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGJ/9gD+WMW/0H5Yxb/UfLHLP6j5o9Z/EfLH7P4D84fs/iPnj9m8R+SP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/h/KH7P4fzh/zOL/kfwxi/+k+WMW/4/mj1n8J8sfs/h/LH/M4v/x/DGL/+T5Yxb/T+SPWfw/mT9m8Z8if8zi/6n8MYv/p/PHLP6fyR+z+E+ZP2bx/2z+mMX/c/ljFv/P549Z/KfKH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/Vav/kPe+2uI/tdX/32TxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fyx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/9fzxyz+s+aPWfy/kT9m8Z8tf8zi/838MYv/t/LHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v/t/DGL/9z5Yxb/efLHLP7z5o9Z/L+TP2bxny9/zOL/3fwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H8vf8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H8/f8zi/4P8MYv/kvljFv+l8scs/j/MH7P4/yh/zOK/dP6YxX+Z/DGL/7L5Yxb/H+ePWfyXyx+z+C+fP2bx/0n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/0/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/yx+z+P88f8ziv2H+mMV/o/wxi//G+WMW/03yxyz+v8gfs/j/Mn/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8f5U/ZvHfKn/M4v/r/DGL/9b5Yxb/3+SPWfy3yR+z+G+bP2bx3y5/zOK/ff6Yxf+3+WMW/9/lj1n8d8gfs/j/Pn/M4v+H/DGL/475Yxb/nfLHLP5/zB+z+O+cP2bx3yV/zOK/a/6Yxf9P+WMW/z/nj1n8d8sfs/j/JX/M4r97/pjFf4/8MYv/nvljFv+/5o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4v+3/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/TOI/zkD+mMV/UP6YxX+U/DGL/6j5Yxb/0fLHLP6D88cs/qPnj1n8h+SPWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/h/LHLP4fflf/N996663/b1btPzGL/0fa/jGL/6T5Yxb/j+aPWfwnyx+z+H8sf8zi//H8MYv/5PljFv9P5I9Z/D+ZP2bxnyJ/zOL/qfwxi/+n88cs/p/JH7P4T5k/ZvH/bP6Yxf9z+WMW/8/nj1n8p8ofs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+1/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fz1/zOI/a/6Yxf8b+WMW/9nyxyz+38wfs/h/K3/M4j97/pjFf478MYv/nPljFv+58scs/t/OH7P4z50/ZvGfJ3/M4j9v/pjF/zv5Yxb/+fLHLP7fzR+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL//fyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fzxyz+P8gfs/gvmT9m8V8qf8zi/8P8MYv/j/LHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v+z/DGL/8/zxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/i/wxi/8v88cs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/V/ljFv+t8scs/r/OH7P4b50/ZvH/Tf6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/H+bP2bx/13+mMV/h/wxi//v88cs/n/IH7P475g/ZvHfKX/M4v/H/DGL/875Yxb/XfLHLP675o9Z/P+UP2bx/3P+mMV/t/wxi/9f8scs/rvnj1n898gfs/jvmT9m8f9r/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/n/LH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/Ic2aOQxsPg/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf0ziP+5A/pjFf1D+mMV/lPwxi/+o+WMW/9Hyxyz+g/PHLP6j549Z/Ifkj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/4fyxyz+H84fs/h/JH/M4j9p/pjF/6P5Yxb/yfLHLP4fyx+z+H88f8ziP3n+mMX/E/ljFv9P5o9Z/KfIH7P4fyp/zOL/6fwxi/9n8scs/lPmj1n8P5s/ZvH/XP6Yxf/z+WMW/6nyxyz+X8gfs/h/MX/M4v+l/DGL/5f/jf9o/9Pr9R+axf8rbf+Yxf+r+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf9r+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/3r+mMV/1vwxi/838scs/rPlj1n8v5k/ZvH/Vv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3fyxyz+8+WPWfy/mz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/+/lj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/+/nj1n8f5A/ZvFfMn/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOL/4/wxi/9y+WMW/+Xzxyz+P8kfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/mj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf9n+WMW/5/nj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/F/ljFv9f5o9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/r/LHLP5b5Y9Z/H+dP2bx3zp/zOL/m/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P82f8zi/7v8MYv/DvljFv/f549Z/P+QP2bx3zF/zOK/U/6Yxf+P+WMW/53zxyz+u+SPWfx3zR+z+P8pf8zi/+f8MYv/bvljFv+/5I9Z/HfPH7P475E/ZvHfM3/M4v/X/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/P+WP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfzHG8gfs/gPyh+z+I+SP2bxHzV/zOI/Wv6YxX9w/pjFf/T8MYv/kPwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvH/UP6Yxf/D+WMW/4/kj1n8J80fs/h/NH/M4j9Z/pjF/2P5Yxb/j+ePWfwnzx+z+H8if8zi/8n8MYv/FPljFv9P5Y9Z/D+dP2bx/0z+mMV/yvwxi/9n88cs/p/LH7P4fz5/zOI/Vf6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/6/lj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/6/lj/+Q/sMX/Wf9Z88cs2/838scs/rPlj1n8v5k/ZvH/Vv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3fyxyz+8+WPWfy/mz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/+/lj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/+/nj1n8f5A/ZvFfMn/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOL/4/wxi/9y+WMW/+Xzxyz+P8kfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/mj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf9n+WMW/5/nj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/F/ljFv9f5o9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/r/LHLP5b5Y9Z/H+dP2bx3zp/zOL/m/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P82f8zi/7v8MYv/DvljFv/f549Z/P+QP2bx3zF/zOK/U/6Yxf+P+WMW/53zxyz+u+SPWfx3zR+z+P8pf8zi/+f8MYv/bvljFv+/5I9Z/HfPH7P475E/ZvHfM3/M4v/X/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/P+WP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfzHH8gfs/gPyh+z+I+SP2bxHzV/zOI/Wv6YxX9w/pjFf/T8MYv/kPwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/P9/7NHTEiiGAQXA2/a2jZOZ2LZt27Zt27Zt27Zt27ZtvGfOF+Ts/sIO6z9q+R/Of9TyP7z/qOV/BP9Ry/+I/qOW/5H8Ry3/I/uPWv5H8R+1/I/qP2r5H81/1PI/uv+o5X8M/1HL/5j+o5b/sfxHLf9j+49a/sfxH7X8j+s/avkfz3/U8j++/6jlfwL/Ucv/hP6jlv+J/Ect/xP7j1r+J/EftfxP6j9q+Z/Mf9TyP7n/qOV/Cv9Ry/+U/qOW/6n8Ry3/U/uPWv6n8R+1/E/rP2r5n85/1PI/vf+o5X8G/1HL/4z+o5b/mfxHLf8z+49a/mfxH7X8z+o/avmfzX/U8j+7/6jlfw7/Ucv/nP6jlv+5/Ect/3P7j1r+5/EftfzP6z9q+Z/Pf9TyP7//qOV/Af9Ry/+C/qOW/4X8Ry3/C/uPWv4X8R+1/C/qP2r5X8x/1PK/uP+o5X8J/1HL/5L+o5b/pfxHLf9L+49a/pfxH7X8L+s/avlfzn/U8r+8/6jlfwX/Ucv/iv6jlv+V/Ect/yv7j1r+V/Eftfyv6j9q+V/Nf9Tyv7r/qOV/Df9Ry/+a/qOW/7X8Ry3/a/uPWv7X8R+1/K/rP2r5X89/1PK/vv+o5X8D/1HL/4b+o5b/jfxHLf8b+49a/jfxH7X8b+o/avnfzH/U8r+5/6jlfwv/Ucv/lv6jlv+t/Ect/1v7j1r+t/Eftfxv6z9q+d/Of9Tyv73/qOV/B/9Ry/+O/qOW/538Ry3/O/uPWv538R+1/O/qP2r5381/1PK/u/+o5X8P/1HL/57+o5b/vfxHLf97+49a/vfxH7X87+s/avnfz3/U8r+//6jl/wD/Ucv/gf6jlv+D/Ect/wf7j1r+D/Eftfwf6j9q+T/Mf9Tyf7j/qOX/CP9Ry/+R/qOW/6P8Ry3/R/uPWv6P8R+1/B/rP2r5P85/1PJ/vP+o5f8E/1HL/4n+o5b/k/xHLf8n+49a/k/xH7X8n+o/avk/zX/U8n+6/6jl/wz/Ucv/mf6jlv+z/Ect/2f7j1r+z/Eftfyf6z9q+T/Pf9Tyf77/qOX/Av9Ry/+F/qOW/4v8Ry3/F/uPWv4v8R+1/F/qP2r5v8x/1PJ/uf+o5f8K/1HL/5X+o5b/q/xHLf9X+49a/q/xH7X8X+s/avm/zn/U8n+9/6jl/wb/Ucv/jf6jlv+b/Ect/zf7j1r+b/Eftfzf6j9q+b/Nf9Tyf7v/qOX/Dv9Ry/+d/qOW/7v8Ry3/d/uPWv7v8R+1/N/rP2r5v89/1PJ/v/+o5f8B/1HL/4P+o5b/h/xHLf8P+49a/h/xH7X8P+o/avl/zH/U8v+4/6jl/wn/Ucv/k/6jlv+n/Ect/0/7j1r+n/Eftfw/6z9q+X/Of9Ty/7z/qOX/Bf9Ry/+L/qOW/5f8Ry3/L/uPWv5f8R+1/L/qP2r5f81/1PL/uv+o5f8N/1HL/5v+o5b/t/xHLf9v+49a/t/xH7X8v+s/avl/z3/U8v++/6jl/wP/Ucv/h/6jlv+P/Ect/x/7j1r+P/Eftfx/6v/vBg4o+v/Mf9Ty/7n/qOX/C/9Ry/+X/qOW/6/8Ry3/X/uPWv6/8R+1/H/rP2r5/85/1PL/vf+o5f8H/1HL/4/+o5b/n/xHLf8/+49a/n/xH7X8/+o/avn/zX/U8v+7/6jl/w//Ucv/n/6jkv9hBviPWv7/5T9q+f+3/6jl/z/+o5b/gf6jlv//+o9a/v/nP2r5/7//qOV/EP9Ry/+g/qOW/8H8Ry3/g/uPWv6H8B+1/A/pP2r5H8p/1PI/tP/oH/cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7N1tbF5l4cfx07Xd05/9uzmH15DBYNNNXNnalclg86E+FkzVsRgwgWxhZVQKcw/BDdRqUGIwhslIEFG3qZtAYsx4MUxAWElU4lQ0TkRDHIK6iKlhIiMal5q77V3ae22zXvW69mKfz4v2Pqf8Trcl351TtmYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLR52y03rO3oaNvkhRdeeDHw4lT/zgSk9lr0p/pHAgAAAAAAAAAAAAAAjCTHtxOd6p8jAAAAAACcblpa39VdXTXkVPXggzk/b+t93/Tqldfvef7xleX3/R++fJhLThh80NPT0/NSc9fM/sNJRVGUPtv0/uPJlePS9Tu7Lt/edxSK3z7b3Lpte/PBnV/5+sNzp06fU9t7trZYc117R9uSCUURqmuLraWDhqqiCBNri+2lg8bSwaTa4v7SwdLegynFgdLBhddu6FhXOnHCp4bTTkvrZ4vqIcUWQ343GNx/Z9emXeX3o1yyfLWaor//uuYf7q34WNkI/ZevH6oq+x/zTxAY0dj6v31h+f0olzzh/v9oe92q4T42cv/l64cJ+od0hnn+H9Jo7/P+nv0zRnj+nzvMJQf2P/3Lyq5S/zf98oX6/lM1J/P8X/p8fUehurL/CUOe/0vP8TXl5/9JRRFqx/nLAaeVltbPdY92/6/sfmj/NWdVbKoG93901Z7qUv+H73rg/f2nak+q/4Hrh5pR7v9Vnzkw9McKjE1L6+6eivv/GPovFgxzyYH+5+8+dlWp/zN2Htk36GNj6b+2sv/FW278xOLN226pb79x7fq29W03NTY2NC1d1tR40fLFvY8EfW/H+asCp4fx3f+LqRWbqqJoG9gv+vCyl0r9Hzz3H3/rPzV5jP1PHPX+/5z7Pwzr/AnFxInF1rVbtmxq6HtbPmzse9v3nw3T/4lf/4/Y/7zy/wcsf91d+oJ8YP+bd371I6X+75206oH+UxPH2P+k0frvfO3zAhHGef9fV7EZ0n/7q99ZV+r/T68cP9R/aqxf/08etf9d7v8wHi2tFX/h53+s1P/qfx0e7s8JTkKY4s//IJ0c/W+d9otvxq3DVP1DOjn6X7q5LfIv24b/0z+kk6P/X+2oOhK3DmfoH9LJ0f/Xuh/cGLcO0/QP6eTof//sR56KW4f/1z+kk6P/4+unXxW3DnX6h3Ry9H/Zl/aujluH6fqHdHL0X/XKtCfi1mGG/iGdHP3XV539qbh1eJ3+IZ0c/V/X+fCLceswU/+QTo7+P7/z15HfpxNer39IJ0f/T/1x6464dZilf0gnR/8vzGqvj1uHM/UP6eTo//4bnngkbh3eoH9IJ0f/T3/rg8fi1iHoH9LJ0f83nj2yJm4dZusf0snR/76Fx/4Qtw5n6R/SydH/vz969Qfi1uGN+od0cvQf9i//btw6nK1/SCdH/1c8eVdD3DrM0T+kk6P/zhW33Rm3DufoH9LJ0X9T88LZcetwrv4hnRz9z/jz3++OW4e5+od0cvT/sfveW/nvfp+kcJ7+IZ0c/d+8YfWjcetwvv4hnRz9r5zRc0HcOszTP6STo//DR+/7Udw6zNc/pJOj/7vvXHJF3Dq8Sf+QTo7+f3Dred1x6/Bm/UM6Ofp/ufaOW+PWYYH+IZ0c/X/5ZzXL4tZhof4hnRz9//ih7++KW4e36B/SydH/i+977Jy4dbhA/5BOjv53Xzzri3Hr8Fb9Qzo5+n/3MxvXx63DIv1DOjn6n7z390fj1qFe/5BOjv7nrzr4obh1uFD/kE6O/jcsWvO7uHVYrH9IJ0f/zxx4+lDcOizRP6STo/8dj326OW4dGvQP6eTo//HLOv4Ttw6N+od0cvT/z6affDxuHZbqH9LJ0f+Zh779hbh1aNI/pJOj/6sfnDwzbh0u0j+kk6P/jdfM/l7cOizTP6STo/9L5j50adw6vE3/kE6O/t/z1xU3x63DxfqHdHL0X3fPPc/FrcNy/UM6Ofqfd+3t18StwyX6h3Ry9H/9nPon49bhUv1DOjn6v+N4y4K4dVihf0gnR/9dtz2/L24dVuof0snRf/cnX66LW4e36x/SydH/3ilX3hu3Du/QPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCADAAAAIMzfOo/2AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FMAAAD//xWB0bY=")
ioperm(0x0, 0xfffffffffffffffe, 0x7e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1204001, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
rename(0x0, &(0x7f0000000200)='./file0\x00')
close(0x3)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, 0x0, 0x4000000)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r6=>0x0)
io_submit(r6, 0x0, &(0x7f0000004540))
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x48}, 0x4, 0x700000000000000}, 0x0)

1.260621725s ago: executing program 5 (id=1095):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000240)=0xffffffff)

1.260377345s ago: executing program 5 (id=1096):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="3a82", 0x2}], 0x1, 0x0, 0x0, 0x4008080}, 0x20044081)

1.260243488s ago: executing program 5 (id=1097):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f00000029c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x42, 0x2)
rmdir(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.25982011s ago: executing program 5 (id=1098):
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0)

1.199421813s ago: executing program 1 (id=1099):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000800)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1)

1.199250056s ago: executing program 5 (id=1100):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r2, r3, 0x0, 0x201f00)

280.888946ms ago: executing program 1 (id=1101):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff}}, 0x10)

200.090332ms ago: executing program 1 (id=1102):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x8, 0xb}, 0x50)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020)

137.439701ms ago: executing program 1 (id=1103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000180))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)

120.507516ms ago: executing program 3 (id=1104):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x4f27, 0x5, 0x2, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3ff, 0x7f, 0x1600, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x395, 0x80000089, 0xfffffffd, 0x7, 0x1007, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]})

0s ago: executing program 1 (id=1105):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x8, 0x14e, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)

kernel console output (not intermixed with test programs):

vsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.839318][ T5743] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.849170][ T5743] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.861235][ T5743] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.887808][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.916589][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.928447][ T5856] veth0_vlan: entered promiscuous mode
[   65.936721][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.947918][ T5856] veth1_vlan: entered promiscuous mode
[   65.952102][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.984274][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.987346][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.994387][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.997613][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.030156][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.034463][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.036623][ T5856] veth0_macvtap: entered promiscuous mode
[   66.049461][ T5856] veth1_macvtap: entered promiscuous mode
[   66.069183][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.087996][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.101028][ T3583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.106608][ T3583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.110068][ T5743] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.121850][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.126879][ T5743] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.155057][ T5743] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.159706][  T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.162317][ T5911] loop1: detected capacity change from 0 to 256
[   66.166454][  T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.173492][ T5743] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.195043][ T5911] FAT-fs (loop1): Directory bread(block 64) failed
[   66.198875][ T5911] FAT-fs (loop1): Directory bread(block 65) failed
[   66.203866][ T5911] FAT-fs (loop1): Directory bread(block 66) failed
[   66.206422][ T5911] FAT-fs (loop1): Directory bread(block 67) failed
[   66.208785][ T5911] FAT-fs (loop1): Directory bread(block 68) failed
[   66.211582][ T5911] FAT-fs (loop1): Directory bread(block 69) failed
[   66.213880][ T5911] FAT-fs (loop1): Directory bread(block 70) failed
[   66.216317][ T5911] FAT-fs (loop1): Directory bread(block 71) failed
[   66.218904][ T5911] FAT-fs (loop1): Directory bread(block 72) failed
[   66.222489][ T5911] FAT-fs (loop1): Directory bread(block 73) failed
[   66.240633][ T3583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.250951][ T3583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.313719][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.316998][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.563179][ T5915] loop0: detected capacity change from 0 to 32768
[   66.584091][ T5928] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   67.581362][ T5848] Bluetooth: hci0: command tx timeout
[   67.675348][ T5848] Bluetooth: hci2: command tx timeout
[   67.975491][ T5950] loop1: detected capacity change from 0 to 256
[   68.097760][ T5952] loop1: detected capacity change from 0 to 512
[   68.116809][ T5952] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   68.129106][ T5952] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   68.159721][ T5952] EXT4-fs (loop1): 1 truncate cleaned up
[   68.169439][ T5952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.195240][   T33] audit: type=1800 audit(1757359321.332:2): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.15" name="file1" dev="loop1" ino=15 res=0 errno=0
[   68.227463][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.253584][ T5876] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.310259][ T5959] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[   68.545409][   T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.549489][   T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.553999][   T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.563174][   T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.568513][   T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.598249][ T5973] loop1: detected capacity change from 0 to 128
[   68.612701][ T5973] FAT-fs (loop1): Directory bread(block 32) failed
[   68.615731][ T5973] FAT-fs (loop1): Directory bread(block 33) failed
[   68.618534][ T5973] FAT-fs (loop1): Directory bread(block 34) failed
[   68.624297][ T5973] FAT-fs (loop1): Directory bread(block 35) failed
[   68.629996][ T5973] FAT-fs (loop1): Directory bread(block 36) failed
[   68.637282][ T5973] FAT-fs (loop1): Directory bread(block 37) failed
[   68.639788][ T5973] FAT-fs (loop1): Directory bread(block 38) failed
[   68.644430][ T5973] FAT-fs (loop1): Directory bread(block 39) failed
[   68.647283][ T5973] FAT-fs (loop1): Directory bread(block 40) failed
[   68.649985][ T5973] FAT-fs (loop1): Directory bread(block 41) failed
[   68.767956][ T5968] chnl_net:caif_netlink_parms(): no params data found
[   68.815609][ T5978] team_slave_0: entered promiscuous mode
[   68.817963][ T5978] team_slave_1: entered promiscuous mode
[   68.822742][ T5978] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   68.826219][ T5978] team0: Device macvtap1 is already an upper device of the team interface
[   68.834318][ T5978] team_slave_0: left promiscuous mode
[   68.836751][ T5978] team_slave_1: left promiscuous mode
[   68.924973][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.927809][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.930537][ T5968] bridge_slave_0: entered allmulticast mode
[   68.948212][ T5968] bridge_slave_0: entered promiscuous mode
[   68.953193][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.955936][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.958827][ T5968] bridge_slave_1: entered allmulticast mode
[   68.966221][ T5968] bridge_slave_1: entered promiscuous mode
[   69.035320][ T5985] loop1: detected capacity change from 0 to 4096
[   69.049862][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.063313][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.069827][ T5988] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   69.083192][ T5987] loop2: detected capacity change from 0 to 1024
[   69.095755][ T5987] hfsplus: invalid secondary volume header
[   69.104431][ T5987] hfsplus: unable to find HFS+ superblock
[   69.136748][ T5968] team0: Port device team_slave_0 added
[   69.146237][ T5968] team0: Port device team_slave_1 added
[   69.193256][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.196565][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.217426][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.226022][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.228652][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.233606][ T5985] syz.1.27 (5985) used greatest stack depth: 19560 bytes left
[   69.239957][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.316741][ T5968] hsr_slave_0: entered promiscuous mode
[   69.319591][ T5968] hsr_slave_1: entered promiscuous mode
[   69.332132][ T5968] debugfs: 'hsr0' already exists in 'hsr'
[   69.334373][ T5968] Cannot create hsr debugfs directory
[   69.562085][ T5968] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   69.594740][ T6002] loop1: detected capacity change from 0 to 1024
[   69.595837][ T5876] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.605976][ T6002] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   69.610053][ T6002] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   69.615905][ T5968] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   69.620084][ T6002] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   69.627183][ T5968] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   69.630321][ T6002] EXT4-fs (loop1): orphan cleanup on readonly fs
[   69.637785][ T5968] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   69.641004][ T6002] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.33: Inode bitmap for bg 0 marked uninitialized
[   69.646820][ T6002] EXT4-fs (loop1): Remounting filesystem read-only
[   69.652534][ T6002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   69.670323][ T5876] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.675762][ T5848] Bluetooth: hci0: command tx timeout
[   69.689819][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.725735][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.728916][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.732792][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.735724][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.752062][ T5848] Bluetooth: hci2: command tx timeout
[   69.767628][ T6011] loop1: detected capacity change from 0 to 4096
[   69.791755][ T5876] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.805597][ T6011] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   69.858852][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.874198][ T5847] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22.
[   69.881988][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.892502][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.916053][ T5968] 8021q: adding VLAN 0 to HW filter on device team0
[   69.951012][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.954061][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.987027][ T6013] loop1: detected capacity change from 0 to 4096
[   70.002727][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.005648][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.008948][ T6013] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   70.014622][ T6013] ntfs3(loop1): ino=3, mi_enum_attr
[   70.018945][ T6013] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   70.028352][ T6013] ntfs3(loop1): Failed to load $LogFile (-22).
[   70.070307][ T5876] bridge_slave_1: left allmulticast mode
[   70.077264][ T5876] bridge_slave_1: left promiscuous mode
[   70.080056][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.087432][ T5876] bridge_slave_0: left allmulticast mode
[   70.095704][ T5876] bridge_slave_0: left promiscuous mode
[   70.097682][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.189888][ T6019] loop1: detected capacity change from 0 to 512
[   70.232126][ T6019] EXT4-fs (loop1): Invalid log block size: 15
[   70.581636][ T6023] 9pnet_fd: Insufficient options for proto=fd
[   70.641420][ T5848] Bluetooth: hci1: command tx timeout
[   70.905494][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.912003][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.915914][ T5876] bond0 (unregistering): Released all slaves
[   71.267352][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.270116][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.293417][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.368362][ T5876] hsr_slave_0: left promiscuous mode
[   71.374548][ T5876] hsr_slave_1: left promiscuous mode
[   71.376810][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.379217][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.382974][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.385468][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.396691][ T5876] veth1_macvtap: left promiscuous mode
[   71.399405][ T5876] veth0_macvtap: left promiscuous mode
[   71.401967][ T5876] veth1_vlan: left promiscuous mode
[   71.404118][ T5876] veth0_vlan: left promiscuous mode
[   71.696597][ T5876] team0 (unregistering): Port device team_slave_1 removed
[   71.723858][ T5876] team0 (unregistering): Port device team_slave_0 removed
[   71.753021][ T5848] Bluetooth: hci0: command tx timeout
[   71.830905][ T5848] Bluetooth: hci2: command tx timeout
[   71.989433][ T5968] veth0_vlan: entered promiscuous mode
[   72.026399][ T5968] veth1_vlan: entered promiscuous mode
[   72.083608][ T5968] veth0_macvtap: entered promiscuous mode
[   72.096547][ T5968] veth1_macvtap: entered promiscuous mode
[   72.110388][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.124713][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.194412][ T5909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.197182][ T5909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.208778][ T5909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.252304][ T5909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.306633][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.310026][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.401115][ T6051] loop1: detected capacity change from 0 to 32768
[   72.404610][ T6051] =======================================================
[   72.404610][ T6051] WARNING: The mand mount option has been deprecated and
[   72.404610][ T6051]          and is ignored by this kernel. Remove the mand
[   72.404610][ T6051]          option from the mount to silence this warning.
[   72.404610][ T6051] =======================================================
[   72.449936][ T3583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.460014][ T3583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.483198][ T6051] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   72.595097][ T6058] : renamed from veth0_vlan (while UP)
[   72.700952][ T5848] Bluetooth: hci1: command tx timeout
[   73.903132][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   74.041874][ T5847] ocfs2: Unmounting device (7,1) on (node local)
[   74.062908][   T24] usb 3-1: Using ep0 maxpacket: 32
[   74.068765][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.082512][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.087386][   T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   74.092166][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.101766][   T24] usb 3-1: config 0 descriptor??
[   74.633274][   T24] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[   74.781150][ T5848] Bluetooth: hci1: command tx timeout
[   74.888767][   T24] usb 3-1: USB disconnect, device number 2
[   75.606502][ T6108] loop2: detected capacity change from 0 to 1024
[   75.718330][ T6115] loop3: detected capacity change from 0 to 256
[   75.755530][ T6115] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x467a0815, utbl_chksum : 0xe619d30d)
[   75.764937][ T6115] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   75.787272][ T6115] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000006)
[   75.791576][ T6115] exFAT-fs (loop3): Filesystem has been set read-only
[   75.888349][ T6123] loop1: detected capacity change from 0 to 1024
[   75.959072][ T6127] loop2: detected capacity change from 0 to 128
[   75.969270][ T6123] ext4: Unknown parameter 'obj_user'
[   76.055974][ T6127] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   76.079067][ T6127] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   76.089281][   T26] Bluetooth: hci3: Frame reassembly failed (-84)
[   76.436409][ T5856] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   76.861043][   T56] Bluetooth: hci1: command tx timeout
[   77.574267][ T6148] loop3: detected capacity change from 0 to 8192
[   78.140934][   T56] Bluetooth: hci3: command 0x1003 tx timeout
[   78.144861][ T5848] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   78.758987][   T33] audit: type=1800 audit(1757359331.892:3): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.77" name="bus" dev="overlay" ino=215 res=0 errno=0
[   78.992693][ T6176] loop2: detected capacity change from 0 to 8192
[   79.005415][ T6176] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   79.450402][ T6178] syz.1.84 uses obsolete (PF_INET,SOCK_PACKET)
[   79.885977][ T6196] dvmrp1: entered allmulticast mode
[   79.892430][ T6196] dvmrp1: left allmulticast mode
[   80.107570][ T5909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.159433][ T5909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.214602][ T5909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.302956][ T5909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.419574][ T5909] bridge_slave_1: left allmulticast mode
[   80.425242][ T5909] bridge_slave_1: left promiscuous mode
[   80.428544][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.429542][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.435776][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.439473][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.448293][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.452466][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   80.465422][ T5909] bridge_slave_0: left allmulticast mode
[   80.467774][ T5909] bridge_slave_0: left promiscuous mode
[   80.647477][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.129239][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.137155][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.167218][ T5909] bond0 (unregistering): Released all slaves
[   81.941089][ T6234] loop1: detected capacity change from 0 to 40427
[   81.947069][ T6234] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   81.950486][ T6234] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   81.983327][ T6234] F2FS-fs (loop1): invalid crc value
[   82.043531][ T6245] loop3: detected capacity change from 0 to 256
[   82.052671][ T5909] hsr_slave_0: left promiscuous mode
[   82.054578][ T6234] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   82.065510][ T6234] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   82.068527][ T6234] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   82.090081][ T6245] exfat: Deprecated parameter 'utf8'
[   82.101137][ T6245] exfat: Deprecated parameter 'utf8'
[   82.116419][ T6245] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d)
[   82.135586][ T5909] hsr_slave_1: left promiscuous mode
[   82.140558][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.160880][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.168824][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.176927][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.215589][ T5909] veth1_macvtap: left promiscuous mode
[   82.217991][ T5909] veth0_macvtap: left promiscuous mode
[   82.220380][ T5909] veth1_vlan: left promiscuous mode
[   82.273867][ T5909] : left promiscuous mode
[   82.412692][   T33] audit: type=1800 audit(1757359335.512:4): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.106" name="file1" dev="loop1" ino=10 res=0 errno=0
[   82.671348][   T56] Bluetooth: hci2: command tx timeout
[   83.213626][ T6265] 9pnet_fd: p9_fd_create_unix (6265): problem connecting socket: ./file0: -5
[   83.370464][ T5909] team0 (unregistering): Port device team_slave_1 removed
[   83.408925][ T6281] loop3: detected capacity change from 0 to 256
[   83.433826][ T5909] team0 (unregistering): Port device team_slave_0 removed
[   83.579476][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.125'.
[   83.724338][ T6283] loop1: detected capacity change from 0 to 40427
[   83.729927][ T6283] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[   83.747138][ T6283] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   83.758155][ T6283] F2FS-fs (loop1): Image doesn't support compression
[   83.760911][ T6283] F2FS-fs (loop1): build fault injection rate: 690
[   83.766762][ T6283] F2FS-fs (loop1): build fault injection type: 0x35f7
[   83.774977][ T6283] F2FS-fs (loop1): invalid crc value
[   83.830310][ T6283] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   83.838346][ T6283] F2FS-fs (loop1): Start checkpoint disabled!
[   83.846358][ T6283] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   83.854931][ T6283] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   83.858023][ T6283] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   83.963451][  T753] kworker/u9:3: attempt to access beyond end of device
[   83.963451][  T753] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   83.980557][  T753] CPU: 0 UID: 0 PID: 753 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[   83.980580][  T753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.980588][  T753] Workqueue: writeback wb_workfn (flush-7:1)
[   83.980619][  T753] Call Trace:
[   83.980626][  T753]  <TASK>
[   83.980631][  T753]  dump_stack_lvl+0x189/0x250
[   83.980697][  T753]  ? preempt_schedule_thunk+0x16/0x30
[   83.980717][  T753]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.980731][  T753]  ? __pfx_queue_work_on+0x10/0x10
[   83.980749][  T753]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   83.980768][  T753]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   83.980792][  T753]  f2fs_handle_critical_error+0x37c/0x540
[   83.980815][  T753]  f2fs_write_end_io+0x886/0xb60
[   83.980853][  T753]  __submit_merged_bio+0x27a/0x6a0
[   83.980872][  T753]  __submit_merged_write_cond+0x255/0x530
[   83.980892][  T753]  f2fs_write_data_pages+0x261d/0x3000
[   83.980929][  T753]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   83.980956][  T753]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   83.980997][  T753]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   83.981022][  T753]  ? trace_f2fs_writepages+0x7f/0x200
[   83.981038][  T753]  ? f2fs_write_node_pages+0x478/0x6e0
[   83.981056][  T753]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   83.981079][  T753]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   83.981096][  T753]  do_writepages+0x32e/0x550
[   83.981116][  T753]  ? reacquire_held_locks+0x127/0x1d0
[   83.981135][  T753]  ? writeback_sb_inodes+0x384/0x1010
[   83.981155][  T753]  __writeback_single_inode+0x145/0xff0
[   83.981169][  T753]  ? do_raw_spin_unlock+0x4d/0x240
[   83.981185][  T753]  writeback_sb_inodes+0x6c7/0x1010
[   83.981218][  T753]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   83.981261][  T753]  ? rcu_is_watching+0x15/0xb0
[   83.981287][  T753]  wb_writeback+0x43b/0xaf0
[   83.981306][  T753]  ? queue_io+0x341/0x590
[   83.981322][  T753]  ? __pfx_wb_writeback+0x10/0x10
[   83.981342][  T753]  ? _raw_spin_unlock_irq+0x23/0x50
[   83.981362][  T753]  wb_workfn+0x409/0xef0
[   83.981392][  T753]  ? __pfx_wb_workfn+0x10/0x10
[   83.981413][  T753]  ? __lock_acquire+0xab9/0xd20
[   83.981437][  T753]  ? process_scheduled_works+0x9ef/0x17b0
[   83.981458][  T753]  ? _raw_spin_unlock_irq+0x23/0x50
[   83.981473][  T753]  ? process_scheduled_works+0x9ef/0x17b0
[   83.981489][  T753]  ? process_scheduled_works+0x9ef/0x17b0
[   83.981507][  T753]  process_scheduled_works+0xae1/0x17b0
[   83.981545][  T753]  ? __pfx_process_scheduled_works+0x10/0x10
[   83.981574][  T753]  worker_thread+0x8a0/0xda0
[   83.981594][  T753]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   83.981637][  T753]  ? __kthread_parkme+0x7b/0x200
[   83.981681][  T753]  kthread+0x711/0x8a0
[   83.981699][  T753]  ? __pfx_worker_thread+0x10/0x10
[   83.981716][  T753]  ? __pfx_kthread+0x10/0x10
[   83.981730][  T753]  ? _raw_spin_unlock_irq+0x23/0x50
[   83.981745][  T753]  ? lockdep_hardirqs_on+0x9c/0x150
[   83.981762][  T753]  ? __pfx_kthread+0x10/0x10
[   83.981776][  T753]  ret_from_fork+0x47f/0x820
[   83.981798][  T753]  ? __pfx_ret_from_fork+0x10/0x10
[   83.981828][  T753]  ? __switch_to_asm+0x39/0x70
[   83.981843][  T753]  ? __switch_to_asm+0x33/0x70
[   83.981857][  T753]  ? __pfx_kthread+0x10/0x10
[   83.981871][  T753]  ret_from_fork_asm+0x1a/0x30
[   83.981899][  T753]  </TASK>
[   83.990995][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   84.004348][  T753] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   84.137367][ T6209] chnl_net:caif_netlink_parms(): no params data found
[   84.155165][   T24] usb 4-1: too many configurations: 151, using maximum allowed: 8
[   84.186042][   T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[   84.189805][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[   84.194474][   T24] usb 4-1: Product: syz
[   84.196321][   T24] usb 4-1: Manufacturer: syz
[   84.198363][   T24] usb 4-1: SerialNumber: syz
[   84.208412][   T24] usb 4-1: config 0 descriptor??
[   84.313430][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.316631][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.326206][ T6209] bridge_slave_0: entered allmulticast mode
[   84.330317][ T6209] bridge_slave_0: entered promiscuous mode
[   84.339672][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.345948][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.349012][ T6209] bridge_slave_1: entered allmulticast mode
[   84.357629][ T6209] bridge_slave_1: entered promiscuous mode
[   84.403084][ T6209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.410063][ T6209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.467902][    T9] usb 4-1: USB disconnect, device number 2
[   84.533539][ T6209] team0: Port device team_slave_0 added
[   84.550245][ T6209] team0: Port device team_slave_1 added
[   84.585802][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.588756][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.600441][ T6209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.614926][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.617660][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.630064][ T6209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.704256][   T56] Bluetooth: hci2: command tx timeout
[   84.808235][ T6209] hsr_slave_0: entered promiscuous mode
[   84.818717][ T6209] hsr_slave_1: entered promiscuous mode
[   84.822903][ T6209] debugfs: 'hsr0' already exists in 'hsr'
[   84.824851][ T6209] Cannot create hsr debugfs directory
[   84.849749][ T6305] loop1: detected capacity change from 0 to 32768
[   84.856413][ T6305] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.128 (6305)
[   84.871401][ T6305] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   84.875052][ T6305] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   84.978035][ T6305] BTRFS info (device loop1): enabling ssd optimizations
[   84.981099][ T6305] BTRFS info (device loop1): enabling free space tree
[   85.476294][ T6209] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   85.504592][ T6209] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   85.525661][ T6209] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   85.549911][ T6209] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   85.561151][   T97] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   85.733065][   T97] usb 4-1: Using ep0 maxpacket: 16
[   85.747792][   T97] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[   85.763038][   T97] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.775067][   T97] usb 4-1: config 1 has no interface number 0
[   85.778076][ T6209] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.783006][   T97] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[   85.796673][   T97] usb 4-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   85.815305][   T97] usb 4-1: config 1 interface 105 has no altsetting 0
[   85.823961][   T97] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.08
[   85.829743][   T97] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.837398][ T6209] 8021q: adding VLAN 0 to HW filter on device team0
[   85.839746][   T97] usb 4-1: Product: syz
[   85.844268][   T97] usb 4-1: Manufacturer: syz
[   85.848886][   T97] usb 4-1: SerialNumber: syz
[   85.858036][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.860489][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.893575][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.896169][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.087261][   T97] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22
[   86.288250][    T9] usb 4-1: USB disconnect, device number 3
[   86.366898][ T6209] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.484650][ T5847] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   86.628573][ T6209] veth0_vlan: entered promiscuous mode
[   86.632592][   T10] cfg80211: failed to load regulatory.db
[   86.651715][ T6209] veth1_vlan: entered promiscuous mode
[   86.678949][ T6209] veth0_macvtap: entered promiscuous mode
[   86.687143][ T6209] veth1_macvtap: entered promiscuous mode
[   86.712239][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.719509][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.726000][ T5909] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.733562][ T5909] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.736391][ T5909] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.739195][ T5909] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.780792][   T56] Bluetooth: hci2: command tx timeout
[   86.822429][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.833948][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.908138][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.924723][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.111696][ T6382] loop1: detected capacity change from 0 to 32768
[   87.142372][ T6382] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   87.145876][ T6395] bridge1: the hash_elasticity option has been deprecated and is always 16
[   87.150191][ T6395] bridge1: entered promiscuous mode
[   87.156796][ T6395] bridge1: entered allmulticast mode
[   87.184570][ T5847] ocfs2: Unmounting device (7,1) on (node local)
[   87.695007][ T6406] loop1: detected capacity change from 0 to 32768
[   87.711320][ T6406] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.137 (6406)
[   87.724003][ T6406] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   87.727402][ T6406] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   87.735861][ T6415] loop4: detected capacity change from 0 to 1024
[   87.788646][ T6406] BTRFS info (device loop1): enabling ssd optimizations
[   87.791775][ T6406] BTRFS info (device loop1): enabling free space tree
[   87.816996][ T5847] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   88.007265][ T6440] loop4: detected capacity change from 0 to 8
[   88.015733][ T6440] SQUASHFS error: Failed to read block 0x62: -5
[   88.018539][ T6440] squashfs image failed sanity check
[   88.431664][ T6449] netlink: 172 bytes leftover after parsing attributes in process `syz.3.149'.
[   88.436022][ T6449] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   88.539666][   T97] libceph: connect (1)[c::]:6789 error -101
[   88.543623][   T97] libceph: mon0 (1)[c::]:6789 connect error
[   88.556140][   T97] libceph: connect (1)[c::]:6789 error -101
[   88.558993][   T97] libceph: mon0 (1)[c::]:6789 connect error
[   88.881898][   T56] Bluetooth: hci2: command tx timeout
[   89.483889][   T97] libceph: connect (1)[c::]:6789 error -101
[   89.486587][   T97] libceph: mon0 (1)[c::]:6789 connect error
[   89.601294][ T6451] ceph: No mds server is up or the cluster is laggy
[   89.926681][ T6460] loop1: detected capacity change from 0 to 512
[   89.982163][ T6460] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck.
[   89.987988][ T6460] EXT4-fs (loop1): 1 truncate cleaned up
[   89.999672][ T6460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.261935][ T6462] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[   90.485973][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.623158][ T6481] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   90.630495][ T6473] loop4: detected capacity change from 0 to 512
[   90.675744][ T6473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.681095][ T6473] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   90.767083][ T6209] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.960413][ T6479] loop3: detected capacity change from 0 to 32768
[   90.974462][ T6479] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.158 (6479)
[   90.983800][ T6493] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.006235][ T6479] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   91.010293][ T6479] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[   91.011459][ T6493] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.018643][ T6493] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   91.025585][ T6479] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   91.029504][ T6493] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.045694][ T6493] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[   91.049941][ T6493] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[   91.054208][ T6493] UDF-fs: Scanning with blocksize 512 failed
[   91.058268][ T6493] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.065561][ T6493] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.080036][ T6493] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   91.095849][ T6493] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.106417][ T6493] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[   91.132735][ T6493] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[   91.136067][ T6493] UDF-fs: Scanning with blocksize 1024 failed
[   91.139355][ T6493] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.164394][ T6479] BTRFS info (device loop3): rebuilding free space tree
[   91.187036][ T6493] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.201099][ T6493] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   91.212209][ T6493] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.223607][ T6493] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[   91.229936][ T6479] BTRFS info (device loop3): disabling free space tree
[   91.236504][ T6493] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[   91.239706][ T6479] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   91.245084][ T6493] UDF-fs: Scanning with blocksize 2048 failed
[   91.250143][ T6493] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.254624][ T6479] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   91.265081][ T6493] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   91.269089][ T6493] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[   91.275328][ T6479] BTRFS info (device loop3): enabling ssd optimizations
[   91.277930][ T6479] BTRFS info (device loop3): enabling disk space caching
[   91.281774][ T6493] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[   91.285185][ T6493] UDF-fs: Scanning with blocksize 4096 failed
[   91.288083][ T6479] BTRFS info (device loop3): force clearing of disk cache
[   91.291042][ T6493] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[   91.295283][ T6479] BTRFS info (device loop3): use zstd compression, level 3
[   91.436854][ T5968] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   91.555000][ T6526] loop4: detected capacity change from 0 to 2048
[   91.601702][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   91.608155][ T6526]  loop4: p4 < >
[   92.540466][   T24] usb 2-1: Using ep0 maxpacket: 8
[   92.551370][   T24] usb 2-1: config index 0 descriptor too short (expected 548, got 36)
[   92.554939][   T24] usb 2-1: config 250 has no interfaces?
[   92.572971][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[   92.576916][   T24] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[   92.580432][   T24] usb 2-1: Product: syz
[   92.586449][   T24] usb 2-1: SerialNumber: syz
[   92.834267][   T24] usb 2-1: USB disconnect, device number 2
[   92.897746][ T6548] syz_tun: entered allmulticast mode
[   92.936139][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'.
[   92.966917][ T6548] syz_tun (unregistering): left allmulticast mode
[   93.465788][ T6556] loop3: detected capacity change from 0 to 2048
[   93.468829][ T6556] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051
[   93.472357][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   93.480559][ T6556] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.588786][ T6560] block nbd3: Attempted send on invalid socket
[   93.595009][ T6560] block nbd3: Attempted send on invalid socket
[   93.597910][ T6560] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[   93.605359][ T6560] block nbd3: Attempted send on invalid socket
[   93.607741][ T6560] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[   93.616064][ T6560] block nbd3: Attempted send on invalid socket
[   93.618540][ T6560] block nbd3: Attempted send on invalid socket
[   93.621291][   T10] usb 5-1: Using ep0 maxpacket: 32
[   93.628035][ T6560] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[   93.640223][   T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[   93.649330][ T6560] block nbd3: Attempted send on invalid socket
[   93.652717][   T10] usb 5-1: config 0 has no interface number 0
[   93.657895][ T6560] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[   93.667456][   T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   93.671927][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.676188][   T10] usb 5-1: Product: syz
[   93.678141][   T10] usb 5-1: Manufacturer: syz
[   93.680260][   T10] usb 5-1: SerialNumber: syz
[   93.688152][   T10] usb 5-1: config 0 descriptor??
[   93.692678][   T62] block nbd3: Attempted send on invalid socket
[   93.696667][ T6560] block nbd3: Attempted send on invalid socket
[   93.703038][   T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   93.709314][ T6560] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[   93.716960][ T6560] block nbd3: Attempted send on invalid socket
[   93.720547][ T6560] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[   93.733893][ T6560] block nbd3: Attempted send on invalid socket
[   93.737688][ T6560] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[   93.749591][ T6560] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[   93.755541][ T6560] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[   93.978406][   T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   94.003744][   T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   94.130647][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short
[   94.332435][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[   94.335194][   T97] usb 5-1: USB disconnect, device number 2
[   94.395044][   T97] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   94.456212][   T97] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   94.539205][   T97] quatech2 5-1:0.51: device disconnected
[   95.062217][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'.
[   95.648696][ T6590] loop3: detected capacity change from 0 to 512
[   95.656638][ T6590] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   95.696539][ T6590] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.197: Invalid block bitmap block 0 in block_group 0
[   95.717562][ T6590] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   95.728444][ T6590] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.197: attempt to clear invalid blocks 983261 len 1
[   95.741160][ T6590] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.197: Invalid inode table block 0 in block_group 0
[   95.747395][ T6590] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   95.755270][ T6590] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[   95.945715][ T6590] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.197: Invalid inode table block 0 in block_group 0
[   95.978635][ T6590] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   96.017119][ T6590] EXT4-fs error (device loop3): ext4_truncate:4666: inode #11: comm syz.3.197: mark_inode_dirty error
[   96.057211][ T6590] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[   96.065045][ T6590] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.197: Invalid inode table block 0 in block_group 0
[   96.081413][ T6590] EXT4-fs (loop3): 1 truncate cleaned up
[   96.085144][ T6590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.132963][ T6590] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   96.149565][ T5968] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.512676][ T6606] overlayfs: missing 'workdir'
[   97.616940][ T6642] process 'syz.1.209' launched '/dev/fd/6' with NULL argv: empty string added
[   97.692718][ T6642] loop1: detected capacity change from 0 to 1024
[   97.957577][ T6646] loop3: detected capacity change from 0 to 1024
[   98.007624][ T6646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.017711][ T6646] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.088124][ T5968] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.946112][ T6657] loop4: detected capacity change from 0 to 32768
[   98.993751][ T6657] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   99.155376][ T6657] XFS (loop4): Ending clean mount
[   99.212855][ T6657] XFS (loop4): syz.4.212 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[   99.270188][ T6209] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   99.526744][ T6682] loop3: detected capacity change from 0 to 2048
[   99.563044][ T6682] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[   99.566435][ T6682] UDF-fs: Scanning with blocksize 512 failed
[   99.585060][ T6682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.724640][ T6682] overlayfs: conflicting options: userxattr,redirect_dir=on
[   99.771169][ T6684] netlink: 9896 bytes leftover after parsing attributes in process `syz.4.217'.
[  100.242815][ T6696] loop1: detected capacity change from 0 to 1024
[  100.252671][ T6698] loop3: detected capacity change from 0 to 1024
[  100.259303][ T6696] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  100.279588][ T3622] hfsplus: b-tree write err: -5, ino 4
[  100.295264][ T6696] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  100.316313][ T6696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.371195][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.596531][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'.
[  101.036961][   T33] audit: type=1326 audit(1757359610.171:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.4.244" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc18ebe9 code=0x7ffc0000
[  101.066304][   T33] audit: type=1326 audit(1757359610.191:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.4.244" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fd2fc18ebe9 code=0x7ffc0000
[  101.080751][   T33] audit: type=1326 audit(1757359610.191:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.4.244" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc18ebe9 code=0x7ffc0000
[  101.108509][   T33] audit: type=1326 audit(1757359610.191:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.4.244" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc18ebe9 code=0x7ffc0000
[  101.158939][ T6752] netlink: 296 bytes leftover after parsing attributes in process `syz.4.248'.
[  101.254428][ T6758] netlink: 84 bytes leftover after parsing attributes in process `syz.4.249'.
[  101.731600][   T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  101.887692][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  101.892816][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  101.897672][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  101.905017][   T24] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  101.908994][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.912636][   T24] usb 5-1: Product: syz
[  101.914630][   T24] usb 5-1: Manufacturer: syz
[  101.916630][   T24] usb 5-1: SerialNumber: syz
[  101.924269][   T24] usb 5-1: config 0 descriptor??
[  101.929696][ T6776] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  101.938027][ T6776] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  101.945413][   T24] usb 5-1: ucan: probing device on interface #0
[  101.981753][ T5764] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  102.140859][ T5764] usb 2-1: Using ep0 maxpacket: 32
[  102.154390][ T5764] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  102.168449][ T5764] usb 2-1: config 0 has no interface number 0
[  102.177188][ T5764] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  102.181564][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.188159][ T5764] usb 2-1: Product: syz
[  102.189849][ T5764] usb 2-1: Manufacturer: syz
[  102.195027][ T5764] usb 2-1: SerialNumber: syz
[  102.195682][ T6806] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  102.204069][ T5764] usb 2-1: config 0 descriptor??
[  102.207853][ T5764] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  102.350203][   T24] usb 5-1: ucan: failed to retrieve device info
[  102.356691][   T24] usb 5-1: ucan: probe failed; try to update the device firmware
[  102.369782][   T24] usb 5-1: USB disconnect, device number 3
[  102.415221][ T5764] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  102.423596][ T5764] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  102.591946][   T97] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  102.743705][   T97] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  102.748670][   T97] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  102.753615][   T97] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  102.758460][   T97] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  102.764845][   T97] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  102.768598][   T97] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.781421][   T97] usb 4-1: config 0 descriptor??
[  102.817486][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  102.822446][   T24] usb 2-1: USB disconnect, device number 3
[  102.832303][   T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  102.841750][   T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  102.847509][   T24] quatech2 2-1:0.51: device disconnected
[  103.202623][   T97] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max
[  103.224109][   T97] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  103.654463][ T5764] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  103.833880][ T5764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.846885][ T5764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.851917][ T5764] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  103.857610][ T5764] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  103.864402][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.894383][ T5764] usb 2-1: config 0 descriptor??
[  104.320017][ T5764] hid-multitouch 0003:0EEF:72D0.0003: unbalanced collection at end of report description
[  104.326540][ T5764] hid-multitouch 0003:0EEF:72D0.0003: probe with driver hid-multitouch failed with error -22
[  104.519844][   T10] usb 2-1: USB disconnect, device number 4
[  104.623938][ T6844] netlink: 104 bytes leftover after parsing attributes in process `syz.4.289'.
[  104.962814][ T6853] netlink: 'syz.4.293': attribute type 21 has an invalid length.
[  104.966035][ T6853] netlink: 156 bytes leftover after parsing attributes in process `syz.4.293'.
[  105.289750][ T6865] loop3: detected capacity change from 0 to 8192
[  105.297288][ T6865] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  105.320179][ T5764] usb 4-1: USB disconnect, device number 4
[  105.363947][ T6865] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  105.375429][ T6865] ntfs3(loop3): Failed to load root (-22).
[  105.433450][ T6871] loop1: detected capacity change from 0 to 16
[  105.443933][ T6871] erofs (device loop1): mounted with root inode @ nid 36.
[  105.472888][ T6873] netlink: 'syz.3.304': attribute type 1 has an invalid length.
[  105.512395][ T6873] bond1: entered promiscuous mode
[  105.516551][ T6873] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.566709][ T6873] 8021q: adding VLAN 0 to HW filter on device bond2
[  105.573701][ T6873] bond1: (slave bond2): making interface the new active one
[  105.576231][ T6873] bond2: entered promiscuous mode
[  105.578599][ T6873] bond1: (slave bond2): Enslaving as an active interface with an up link
[  108.009600][ T6899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.314'.
[  108.015378][ T6899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.314'.
[  108.876786][ T6919] loop1: detected capacity change from 0 to 32768
[  108.881150][ T6919] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.323 (6919)
[  108.935087][ T6919] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  108.939368][ T6919] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  109.285152][ T6919] BTRFS info (device loop1): rebuilding free space tree
[  109.298101][ T6919] BTRFS info (device loop1): allowing degraded mounts
[  109.300875][ T6919] BTRFS info (device loop1): enabling ssd optimizations
[  109.303284][ T6919] BTRFS info (device loop1): enabling free space tree
[  109.305532][ T6919] BTRFS info (device loop1): force clearing of disk cache
[  109.307924][ T6919] BTRFS info (device loop1): use zstd compression, level 3
[  109.384513][   T33] audit: type=1800 audit(1757359618.521:9): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.323" name="bus" dev="loop1" ino=263 res=0 errno=0
[  109.496080][ T5847] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.922102][   T97] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  110.080795][   T97] usb 2-1: Using ep0 maxpacket: 8
[  110.084354][   T97] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[  110.088192][   T97] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  110.093315][   T97] usb 2-1: config 0 interface 0 has no altsetting 0
[  110.095561][   T97] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00
[  110.098942][   T97] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.103692][   T97] usb 2-1: config 0 descriptor??
[  110.305960][   T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1)
[  110.352059][ T6950] Zero length message leads to an empty skb
[  110.373889][   T33] audit: type=1326 audit(1757359619.511:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.330" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  110.384365][   T33] audit: type=1326 audit(1757359619.511:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.330" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  110.395583][   T33] audit: type=1326 audit(1757359619.511:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.330" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  110.403849][   T33] audit: type=1326 audit(1757359619.521:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.330" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  110.412643][   T33] audit: type=1326 audit(1757359619.521:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.330" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  110.419733][   T33] audit: type=1326 audit(1757359619.521:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.330" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  110.428690][   T33] audit: type=1326 audit(1757359619.521:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.330" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  110.439352][   T33] audit: type=1326 audit(1757359619.521:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.330" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  110.447146][   T33] audit: type=1326 audit(1757359619.521:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.330" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  110.468173][ T6954] capability: warning: `syz.3.331' uses 32-bit capabilities (legacy support in use)
[  110.523568][   T97] elecom 0003:056E:011C.0004: hidraw0: USB HID vf4.f6 Device [HID 056e:011c] on usb-dummy_hcd.1-1/input0
[  110.543663][ T6956] loop3: detected capacity change from 0 to 4096
[  110.552470][ T6956] EXT4-fs (loop3): Test dummy encryption mode enabled
[  110.558935][ T6956] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  110.562273][ T6956] System zones: 0-5
[  110.565227][ T6956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.590424][ T5968] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.702041][ T6964] loop3: detected capacity change from 0 to 64
[  110.724668][   T97] usb 2-1: USB disconnect, device number 5
[  111.680767][   T97] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  111.908825][   T97] usb 2-1: Using ep0 maxpacket: 32
[  111.925900][   T97] usb 2-1: unable to get BOS descriptor or descriptor too short
[  111.938619][   T97] usb 2-1: config 128 has an invalid interface number: 127 but max is 3
[  111.944552][   T97] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  111.948702][   T97] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4
[  111.953935][   T97] usb 2-1: config 128 has no interface number 0
[  111.957539][   T97] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[  111.962788][   T97] usb 2-1: config 128 interface 127 has no altsetting 0
[  111.972099][   T97] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  111.977174][   T97] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.981364][   T97] usb 2-1: Product: syz
[  111.983168][   T97] usb 2-1: Manufacturer: syz
[  111.985237][   T97] usb 2-1: SerialNumber: syz
[  111.990258][ T6975] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  112.114544][ T6985] netlink: 164 bytes leftover after parsing attributes in process `syz.3.344'.
[  112.218467][ T6989] loop3: detected capacity change from 0 to 512
[  112.253579][ T6989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.253996][   T97] usb 2-1: USB disconnect, device number 6
[  112.259119][ T6989] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  112.282815][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  112.294910][ T6989] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.346: lblock 23 mapped to illegal pblock 18 (length 1)
[  112.311173][ T6989] EXT4-fs (loop3): Remounting filesystem read-only
[  112.336036][ T5968] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.562588][ T6996] loop3: detected capacity change from 0 to 32768
[  112.566962][ T6996] xfs: Unknown parameter 'ikeep'
[  112.926501][ T7008] loop1: detected capacity change from 0 to 128
[  112.933859][ T7008] EXT4-fs (loop1): Test dummy encryption mode enabled
[  112.972027][ T7008] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  112.976377][ T7008] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  113.077150][ T7008] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  113.205907][ T7016] syz.1.353 (7016) used greatest stack depth: 19512 bytes left
[  113.577683][ T7018] loop3: detected capacity change from 0 to 1764
[  113.782834][ T7020] netlink: 'syz.3.355': attribute type 1 has an invalid length.
[  113.789628][ T7020] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.355'.
[  114.347349][ T5847] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  114.742604][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'.
[  115.100967][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  115.293869][   T24] usb 2-1: Using ep0 maxpacket: 8
[  115.298358][   T24] usb 2-1: config 16 has an invalid descriptor of length 49, skipping remainder of the config
[  115.303279][   T24] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  115.308846][   T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  115.317866][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.333605][   T24] usbtmc 2-1:16.0: bulk endpoints not found
[  115.498307][ T7041] loop3: detected capacity change from 0 to 32768
[  115.525201][ T7041] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  115.553195][ T7041] XFS (loop3): Ending clean mount
[  115.582817][ T5968] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  115.809930][ T7055] loop3: detected capacity change from 0 to 512
[  115.925715][ T7059] loop3: detected capacity change from 0 to 8
[  116.225053][ T7067] loop3: detected capacity change from 0 to 1024
[  116.228690][ T7067] EXT4-fs: Ignoring removed nomblk_io_submit option
[  116.247970][ T7067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.283568][ T5968] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.329308][ T7072] loop3: detected capacity change from 0 to 512
[  116.336187][ T7072] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  116.760831][ T5764] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  116.920955][ T5764] usb 4-1: Using ep0 maxpacket: 32
[  116.925676][ T5764] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  116.930209][ T5764] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  116.934847][ T5764] usb 4-1: config 0 interface 0 has no altsetting 0
[  116.942570][ T5764] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  116.949696][ T5764] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  116.954581][ T5764] usb 4-1: Product: syz
[  116.956646][ T5764] usb 4-1: Manufacturer: syz
[  116.958872][ T5764] usb 4-1: SerialNumber: syz
[  116.965969][ T5764] usb 4-1: config 0 descriptor??
[  117.381228][ T5764] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  117.458542][   T10] usb 2-1: USB disconnect, device number 7
[  117.785669][ T5764] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  117.793334][ T5764] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[  117.808837][ T5764] usb 4-1: USB disconnect, device number 5
[  117.816772][ T7094] loop1: detected capacity change from 0 to 16
[  117.820097][ T7094] erofs (device loop1): mounted with root inode @ nid 36.
[  117.887653][ T7096] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  118.391062][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.395239][ T7112] batadv_slave_1: entered promiscuous mode
[  118.409003][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'.
[  118.525079][ T7112] loop1: detected capacity change from 0 to 4096
[  118.529921][ T7112] ntfs3: Unknown parameter 'R41>]H[(~9 .QNŭ!gמ+'
[  118.791211][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.396'.
[  118.795367][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.396'.
[  118.799406][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.396'.
[  118.880251][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'.
[  118.883843][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'.
[  118.887194][ T7126] netlink: 'syz.3.398': attribute type 6 has an invalid length.
[  118.928864][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'.
[  119.471130][ T5764] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  119.631082][ T5764] usb 4-1: Using ep0 maxpacket: 8
[  119.635972][ T5764] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.640401][ T5764] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  119.644683][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.653820][ T5764] usb 4-1: config 0 descriptor??
[  119.659545][ T5764] gspca_main: vc032x-2.14.0 probing 046d:0892
[  120.883476][ T5764] gspca_vc032x: reg_w err -71
[  120.885703][ T5764] vc032x 4-1:0.0: probe with driver vc032x failed with error -71
[  120.969826][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  120.976683][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  120.984906][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  120.989787][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  120.995376][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  121.262915][ T7166] chnl_net:caif_netlink_parms(): no params data found
[  121.390031][ T5764] usb 4-1: USB disconnect, device number 6
[  121.461461][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.471282][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.474431][ T7166] bridge_slave_0: entered allmulticast mode
[  121.478337][ T7166] bridge_slave_0: entered promiscuous mode
[  121.490004][ T7177] netlink: 'syz.1.416': attribute type 1 has an invalid length.
[  121.495292][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.500259][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.504498][ T7166] bridge_slave_1: entered allmulticast mode
[  121.508526][ T7166] bridge_slave_1: entered promiscuous mode
[  121.513157][ T7177] netlink: 'syz.1.416': attribute type 2 has an invalid length.
[  121.540561][ T7179] loop3: detected capacity change from 0 to 2048
[  121.582796][ T7181] input: syz0 as /devices/virtual/input/input6
[  121.594875][ T7179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  121.633308][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.646401][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.677226][ T5968] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  121.727854][ T7166] team0: Port device team_slave_0 added
[  121.735730][ T7166] team0: Port device team_slave_1 added
[  121.754172][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.756475][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.770590][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.789614][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.793775][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.804924][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.862943][ T7166] hsr_slave_0: entered promiscuous mode
[  121.869650][ T7166] hsr_slave_1: entered promiscuous mode
[  121.880384][ T7166] debugfs: 'hsr0' already exists in 'hsr'
[  121.882672][ T7166] Cannot create hsr debugfs directory
[  121.992388][   T47] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  122.054207][   T56] Bluetooth: hci1: unexpected cc 0x042d length: 63 > 7
[  122.097490][ T7166] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  122.102345][ T7166] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  122.108732][ T7166] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  122.114448][ T7166] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  122.139185][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.142528][ T7166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.147044][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.149628][ T7166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.208246][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.224864][ T3622] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.229741][ T3622] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.241479][ T7166] 8021q: adding VLAN 0 to HW filter on device team0
[  122.247768][ T3622] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.250995][ T3622] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.259595][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.262181][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.386473][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.571940][ T7166] veth0_vlan: entered promiscuous mode
[  122.577836][ T7166] veth1_vlan: entered promiscuous mode
[  122.629804][ T7166] veth0_macvtap: entered promiscuous mode
[  122.659529][ T7166] veth1_macvtap: entered promiscuous mode
[  122.710643][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.742451][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.769610][ T5909] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.780135][ T5909] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.790588][ T5909] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.797509][ T5909] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.889908][  T753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.896185][  T753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.931745][ T7233] ip6gretap1: entered allmulticast mode
[  122.937124][  T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.944915][  T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.023653][   T56] Bluetooth: hci2: command tx timeout
[  123.038417][ T7237] loop1: detected capacity change from 0 to 4096
[  123.116520][ T7244] input: syz1 as /devices/virtual/input/input7
[  123.142216][ T7245] loop5: detected capacity change from 0 to 4096
[  123.197136][ T7249] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.572845][ T7273] binder: 7272:7273 ioctl c0306201 200000000080 returned -14
[  124.685730][ T7298] loop3: detected capacity change from 0 to 512
[  124.721184][ T7298] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.463: corrupted in-inode xattr: invalid ea_ino
[  124.754801][ T7298] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.463: couldn't read orphan inode 15 (err -117)
[  124.792957][ T7298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.100888][   T56] Bluetooth: hci2: command tx timeout
[  125.273226][ T7309] loop5: detected capacity change from 0 to 1024
[  125.316980][ T7309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  125.323267][ T7309] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.334427][   T33] kauditd_printk_skb: 12 callbacks suppressed
[  125.334442][   T33] audit: type=1800 audit(1757359634.471:31): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.468" name="file1" dev="loop5" ino=15 res=0 errno=0
[  125.348180][ T7309] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.468: lblock 0 mapped to illegal pblock 0 (length 1)
[  125.359950][ T7309] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.468: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  125.438529][ T5968] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.444498][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  125.974195][ T7315] loop3: detected capacity change from 0 to 32768
[  125.994957][ T7315] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  126.019394][ T7315] XFS (loop3): Ending clean mount
[  126.027842][ T7315] XFS (loop3): Quotacheck needed: Please wait.
[  126.065695][   T56] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  126.065704][ T7315] XFS (loop3): Quotacheck: Done.
[  126.073938][   T56] Bluetooth: hci1: Injecting HCI hardware error event
[  126.080363][ T5848] Bluetooth: hci1: hardware error 0x00
[  126.238897][ T5968] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.180953][   T56] Bluetooth: hci2: command tx timeout
[  127.482045][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  127.671082][    T9] usb 2-1: Using ep0 maxpacket: 8
[  127.681953][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  127.688151][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  127.694763][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  127.698682][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  127.707708][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  127.714174][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.739540][ T5896] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  127.942830][ T5896] usb 6-1: Using ep0 maxpacket: 16
[  128.008334][    T9] usb 2-1: usb_control_msg returned -71
[  128.013667][ T5896] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.018897][    T9] usbtmc 2-1:16.0: can't read capabilities
[  128.023279][ T5896] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  128.036876][ T5896] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  128.041520][    T9] usb 2-1: USB disconnect, device number 9
[  128.043612][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.046879][ T5896] usb 6-1: Product: syz
[  128.048575][ T5896] usb 6-1: Manufacturer: syz
[  128.055030][ T5896] usb 6-1: SerialNumber: syz
[  128.275098][ T5896] usb 6-1: 0:2 : does not exist
[  128.283448][ T5896] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  128.300317][ T5896] usb 6-1: USB disconnect, device number 2
[  128.302400][ T5848] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  128.332065][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  128.890596][   T33] audit: type=1326 audit(1757359638.021:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.5.491" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c458ebe9 code=0x7ffc0000
[  129.122662][   T33] audit: type=1326 audit(1757359638.021:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.5.491" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c458ebe9 code=0x7ffc0000
[  129.130576][   T33] audit: type=1326 audit(1757359638.111:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.5.491" exe="/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fa4c458ebe9 code=0x7ffc0000
[  129.139066][   T33] audit: type=1326 audit(1757359638.121:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.5.491" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c458ebe9 code=0x7ffc0000
[  129.148005][   T33] audit: type=1326 audit(1757359638.121:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.5.491" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c458ebe9 code=0x7ffc0000
[  129.260887][ T5848] Bluetooth: hci2: command tx timeout
[  129.400919][ T5853] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  129.621315][ T5853] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  129.624980][ T5853] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  129.629168][ T5853] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  129.643227][ T5853] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  129.647314][ T5853] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  129.655060][ T5853] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  129.659003][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  129.663094][ T5853] usb 6-1: Product: syz
[  129.664920][ T5853] usb 6-1: Manufacturer: syz
[  129.672281][ T5853] cdc_wdm 6-1:1.0: skipping garbage
[  129.674554][ T5853] cdc_wdm 6-1:1.0: skipping garbage
[  129.682065][ T5853] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  129.684689][ T5853] cdc_wdm 6-1:1.0: Unknown control protocol
[  129.759726][ T7383] loop1: detected capacity change from 0 to 4096
[  129.764604][ T7383] ntfs3(loop1): ino=0, mi_enum_attr
[  129.767032][ T7383] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  129.770500][ T7383] ntfs3(loop1): mft corrupted
[  129.774268][ T7383] ntfs3(loop1): Failed to load $MFT.
[  129.912761][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  129.915928][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  129.919224][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  129.922086][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  129.926270][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  129.929117][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  129.931864][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  129.934628][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  129.937576][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  129.940494][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  129.943446][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  129.946141][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  129.949115][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  129.951997][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  129.954985][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  129.957750][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  129.960590][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  129.963371][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  129.966167][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  129.968973][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  129.972204][   T97] usb 6-1: USB disconnect, device number 3
[  129.972286][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  130.747908][ T7391] loop3: detected capacity change from 0 to 32768
[  130.751733][ T7391] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.497 (7391)
[  130.760987][ T7391] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  130.764436][ T7391] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  130.912665][ T7391] BTRFS info (device loop3): enabling ssd optimizations
[  130.915330][ T7391] BTRFS info (device loop3): enabling free space tree
[  131.714675][ T5968] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.426018][ T7427] loop5: detected capacity change from 0 to 1024
[  132.429155][ T7427] EXT4-fs: Ignoring removed mblk_io_submit option
[  132.431573][ T7427] EXT4-fs: Ignoring removed bh option
[  132.457978][ T7427] EXT4-fs: Mount option(s) incompatible with ext2
[  132.706132][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.708459][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  133.216635][ T7449] loop5: detected capacity change from 0 to 1024
[  133.219452][ T7449] EXT4-fs: Ignoring removed bh option
[  133.223478][ T7449] EXT4-fs: Ignoring removed nobh option
[  133.225616][ T7449] EXT4-fs: Ignoring removed bh option
[  133.263210][ T7449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.284041][ T7454] loop1: detected capacity change from 0 to 2048
[  133.291543][ T7454] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.015116][ T7457] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.512: Allocating blocks 497-513 which overlap fs metadata
[  134.026785][ T7457] EXT4-fs (loop5): pa ffff88801e2f5658: logic 256, phys. 385, len 8
[  134.029727][ T7457] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  134.282895][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.611021][ T5853] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  134.625922][ T7482] netlink: 6 bytes leftover after parsing attributes in process `syz.5.524'.
[  134.643141][ T7482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.784163][ T5853] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  134.787811][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.790528][ T5853] usb 2-1: Product: syz
[  134.793849][ T5853] usb 2-1: Manufacturer: syz
[  134.795478][ T5853] usb 2-1: SerialNumber: syz
[  134.811182][ T5853] usb 2-1: config 0 descriptor??
[  134.814942][ T5853] gspca_main: sunplus-2.14.0 probing 055f:c230
[  135.045644][ T5853] gspca_sunplus: reg_r err -71
[  135.049877][ T5853] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  135.061168][ T5853] usb 2-1: USB disconnect, device number 10
[  135.258436][ T7504] ptrace attach of "/syz-executor exec"[5968] was attempted by "/syz-executor exec"[7504]
[  135.627959][ T7516] netlink: 36 bytes leftover after parsing attributes in process `syz.5.539'.
[  135.641284][ T7516] netlink: 36 bytes leftover after parsing attributes in process `syz.5.539'.
[  135.644919][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.5.539'.
[  135.672837][ T7520] loop1: detected capacity change from 0 to 128
[  135.699773][ T7520] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.721034][ T7520] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  135.771988][ T5847] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  136.135971][   T33] audit: type=1400 audit(1757359645.271:37): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7558 comm="syz.1.555"
[  136.445177][ T7563] syz_tun: entered allmulticast mode
[  136.454589][ T7562] syz_tun: left allmulticast mode
[  136.676661][ T7565] loop1: detected capacity change from 0 to 32768
[  136.685282][ T7565] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  136.688696][ T7565] XFS (loop1): Mounting V5 filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a in no-recovery mode. Filesystem will be inconsistent.
[  136.718157][ T5847] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  136.885123][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'.
[  137.102172][ T7594] vcan0: tx drop: invalid da for name 0xfffffffffffffffe
[  137.400093][ T7607] mmap: syz.3.571 (7607) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  137.778162][ T7617] ubi0: attaching mtd0
[  137.785061][ T7617] ubi0 warning: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read only 0 bytes, retry
[  137.789561][ T7617] ubi0 warning: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read only 0 bytes, retry
[  137.794085][ T7617] ubi0 warning: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read only 0 bytes, retry
[  137.798335][ T7617] ubi0 error: ubi_io_read: error -22 while reading 64 bytes from PEB 0:0, read 0 bytes
[  137.803946][ T7617] CPU: 1 UID: 0 PID: 7617 Comm: syz.3.576 Not tainted syzkaller #0 PREEMPT(full) 
[  137.803963][ T7617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.803969][ T7617] Call Trace:
[  137.803976][ T7617]  <TASK>
[  137.803980][ T7617]  dump_stack_lvl+0x189/0x250
[  137.803998][ T7617]  ? __pfx_ubi_err+0x10/0x10
[  137.804008][ T7617]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.804020][ T7617]  ? __pfx_do_sched_yield+0x10/0x10
[  137.804037][ T7617]  ubi_io_read+0x68d/0xb00
[  137.804057][ T7617]  ? __pfx_ubi_io_read+0x10/0x10
[  137.804070][ T7617]  ? rcu_is_watching+0x15/0xb0
[  137.804084][ T7617]  ubi_io_read_ec_hdr+0x9d/0x630
[  137.804095][ T7617]  ? ubi_io_is_bad+0xc5/0x280
[  137.804107][ T7617]  ubi_attach+0x78a/0x5c00
[  137.804118][ T7617]  ? __vmalloc_node_range_noprof+0x1249/0x12f0
[  137.804140][ T7617]  ? __pfx_ubi_attach+0x10/0x10
[  137.804152][ T7617]  ? vmalloc_noprof+0xb2/0xf0
[  137.804163][ T7617]  ubi_attach_mtd_dev+0x1b75/0x37e0
[  137.804190][ T7617]  ctrl_cdev_ioctl+0x28b/0x3e0
[  137.804200][ T7617]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  137.804209][ T7617]  ? __fget_files+0x3a0/0x420
[  137.804220][ T7617]  ? __fget_files+0x2a/0x420
[  137.804231][ T7617]  ? bpf_lsm_file_ioctl+0x9/0x20
[  137.804243][ T7617]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  137.804253][ T7617]  __se_sys_ioctl+0xfc/0x170
[  137.804265][ T7617]  do_syscall_64+0xfa/0xfa0
[  137.804277][ T7617]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.804288][ T7617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.804295][ T7617]  ? exc_page_fault+0xab/0x100
[  137.804306][ T7617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.804314][ T7617] RIP: 0033:0x7f1a4c78ebe9
[  137.804323][ T7617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.804330][ T7617] RSP: 002b:00007f1a4d604038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  137.804342][ T7617] RAX: ffffffffffffffda RBX: 00007f1a4c9c5fa0 RCX: 00007f1a4c78ebe9
[  137.804348][ T7617] RDX: 0000200000000200 RSI: 0000000040186f40 RDI: 0000000000000003
[  137.804354][ T7617] RBP: 00007f1a4c811e19 R08: 0000000000000000 R09: 0000000000000000
[  137.804359][ T7617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.804363][ T7617] R13: 00007f1a4c9c6038 R14: 00007f1a4c9c5fa0 R15: 00007fff5f7e78c8
[  137.804376][ T7617]  </TASK>
[  137.928873][ T7617] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  138.650598][ T7638] loop1: detected capacity change from 0 to 128
[  138.661071][ T7639] loop3: detected capacity change from 0 to 512
[  138.667267][ T7639] EXT4-fs: Ignoring removed nomblk_io_submit option
[  138.679296][ T7639] EXT4-fs (loop3): Test dummy encryption mode enabled
[  138.690269][ T7639] EXT4-fs (loop3): 1 truncate cleaned up
[  138.695423][ T7639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.466216][ T7655] loop5: detected capacity change from 0 to 40427
[  139.471353][ T7655] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  139.474094][ T7655] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  139.508290][ T7655] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  139.514584][ T7655] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  139.517080][ T7655] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  139.588968][ T5968] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.646114][ T7166] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  139.649592][ T7166] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  139.667097][ T7166] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  139.670453][ T7166] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  139.679247][ T7166] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  139.689108][ T7166] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  139.699128][ T7166] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  139.818395][ T7671] loop3: detected capacity change from 0 to 16
[  139.822583][ T7671] erofs: Unknown parameter '0'
[  140.091695][ T7682] tipc: Started in network mode
[  140.094007][ T7682] tipc: Node identity ac14140f, cluster identity 4711
[  140.098957][ T7682] tipc: New replicast peer: 255.255.255.255
[  140.102649][ T7682] tipc: Enabled bearer <udp:syz2>, priority 10
[  141.226493][    T9] tipc: Node number set to 2886997007
[  142.364062][ T7724] Bluetooth: MGMT ver 1.23
[  144.808351][ T7791] netlink: 156 bytes leftover after parsing attributes in process `syz.3.648'.
[  146.120178][ T7825] loop3: detected capacity change from 0 to 32768
[  146.124067][ T7825] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.658 (7825)
[  146.142744][ T7825] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  146.152898][ T7825] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  146.165373][ T7835] loop5: detected capacity change from 0 to 1024
[  146.168295][ T7835] EXT4-fs: Ignoring removed orlov option
[  146.173119][ T7835] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  146.177379][ T7835] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  146.184466][ T7835] EXT4-fs (loop5): invalid journal inode
[  146.186361][ T7835] EXT4-fs (loop5): can't get journal size
[  146.212370][ T7835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  146.348227][ T1090] BTRFS warning (device loop3): checksum verify failed on logical 5341184 mirror 1 wanted 0x0a5a7a5ae10eed219743b156b36184dc5a58d72503dc57b157a62f9528df24e9 found 0xff549293dea1dbaf9b0a1f0ee28e0a88db67a3e97fd64b068aed23a93a8eb1b1 level 0
[  146.359595][ T7825] BTRFS error (device loop3): failed to load root free space
[  146.382329][ T7825] BTRFS error (device loop3): open_ctree failed: -5
[  146.877765][ T7864] netlink: 'syz.1.667': attribute type 10 has an invalid length.
[  146.947565][ T7864] team0: Port device geneve1 added
[  147.097064][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.100058][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'.
[  147.420940][ T7880] netlink: 3 bytes leftover after parsing attributes in process `syz.5.675'.
[  147.447559][ T7880] batadv1: entered promiscuous mode
[  147.450054][ T7880] batadv1: entered allmulticast mode
[  147.660825][   T97] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  147.692970][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'.
[  147.810941][   T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  147.814099][   T97] usb 4-1: Using ep0 maxpacket: 8
[  147.827001][   T97] usb 4-1: unable to get BOS descriptor or descriptor too short
[  147.831010][   T97] usb 4-1: config 7 has an invalid interface number: 67 but max is 0
[  147.833755][   T97] usb 4-1: config 7 has no interface number 0
[  147.840238][   T97] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  147.843805][   T97] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.850963][   T97] usb 4-1: Product: syz
[  147.852763][   T97] usb 4-1: Manufacturer: syz
[  147.854363][   T97] usb 4-1: SerialNumber: syz
[  147.970817][   T47] usb 6-1: Using ep0 maxpacket: 8
[  147.979379][   T47] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  147.983733][   T47] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  147.987828][   T47] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  147.992297][   T47] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  147.996601][   T47] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  148.002513][   T47] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  148.006264][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.085313][   T97] usb 4-1: USB disconnect, device number 7
[  148.228836][   T47] usb 6-1: GET_CAPABILITIES returned 0
[  148.231311][   T47] usbtmc 6-1:16.0: can't read capabilities
[  148.435608][   T10] usb 6-1: USB disconnect, device number 4
[  148.689957][ T7933] netlink: 'syz.3.700': attribute type 10 has an invalid length.
[  148.860630][ T7939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.702'.
[  149.070394][ T7955] overlay: Unknown parameter '\'
[  149.257190][ T7966] sctp: [Deprecated]: syz.5.713 (pid 7966) Use of struct sctp_assoc_value in delayed_ack socket option.
[  149.257190][ T7966] Use struct sctp_sack_info instead
[  149.430970][ T7974] netlink: 32 bytes leftover after parsing attributes in process `syz.1.718'.
[  150.651082][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  150.830871][   T10] usb 6-1: Using ep0 maxpacket: 32
[  150.831727][ T8024] loop3: detected capacity change from 0 to 32768
[  150.836047][ T8024] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.741 (8024)
[  150.846764][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.850404][   T10] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00
[  150.862976][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.873486][ T8024] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.874491][   T10] usb 6-1: config 0 descriptor??
[  150.893744][ T8024] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  150.961061][ T8024] BTRFS info (device loop3): enabling ssd optimizations
[  150.963546][ T8024] BTRFS info (device loop3): enabling free space tree
[  151.002803][ T5968] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  151.289895][   T10] stadia 0003:18D1:9400.0005: reserved main item tag 0xd
[  151.325994][   T10] stadia 0003:18D1:9400.0005: hidraw0: USB HID v0.01 Device [HID 18d1:9400] on usb-dummy_hcd.5-1/input0
[  151.331853][   T10] stadia 0003:18D1:9400.0005: no inputs found
[  151.333982][   T10] stadia 0003:18D1:9400.0005: force feedback init failed
[  151.367650][ T8054] genirq: Flags mismatch irq 5. 00200000 (pcl818) vs. 00200000 (pcl812)
[  151.395504][ T8055] warning: `syz.1.748' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  151.489787][   T10] usb 6-1: USB disconnect, device number 5
[  151.590125][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.755'.
[  151.594836][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.755'.
[  151.728282][   T97] IPVS: starting estimator thread 0...
[  151.730290][ T8077] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  151.812052][ T8079] IPVS: using max 47 ests per chain, 112800 per kthread
[  152.190815][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  152.253879][ T8096] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.767'.
[  152.258358][ T8095] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.767'.
[  152.351890][   T10] usb 4-1: Using ep0 maxpacket: 32
[  152.355802][   T10] usb 4-1: config 0 has an invalid interface number: 255 but max is 1
[  152.359701][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.364093][   T10] usb 4-1: config 0 has no interface number 1
[  152.370228][   T10] usb 4-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  152.381438][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  152.383985][   T10] usb 4-1: config 0 interface 255 has no altsetting 0
[  152.393413][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57
[  152.396441][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.399305][   T10] usb 4-1: Product: syz
[  152.407152][   T10] usb 4-1: Manufacturer: syz
[  152.411391][   T10] usb 4-1: SerialNumber: syz
[  152.418229][   T10] usb 4-1: config 0 descriptor??
[  152.432297][   T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  152.436287][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  152.447919][   T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[  152.641495][   T10] usb 4-1: USB disconnect, device number 8
[  152.725045][ T8120] netlink: 'syz.5.779': attribute type 1 has an invalid length.
[  152.791896][ T8122] capability: warning: `syz.5.780' uses deprecated v2 capabilities in a way that may be insecure
[  153.087184][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.787'.
[  153.098951][ T5909] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  153.099012][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.787'.
[  153.111066][ T5909] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  153.114498][ T5909] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  153.128279][ T5909] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  153.257289][ T8145] GUP no longer grows the stack in syz.3.791 (8145): 200000005000-200000008000 (200000004000)
[  153.265303][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.3.791 Not tainted syzkaller #0 PREEMPT(full) 
[  153.265318][ T8145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.265323][ T8145] Call Trace:
[  153.265327][ T8145]  <TASK>
[  153.265332][ T8145]  dump_stack_lvl+0x189/0x250
[  153.265350][ T8145]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.265360][ T8145]  ? __pfx__printk+0x10/0x10
[  153.265372][ T8145]  ? find_vma+0xe7/0x160
[  153.265389][ T8145]  fixup_user_fault+0x661/0x720
[  153.265403][ T8145]  fault_in_user_writeable+0x72/0xe0
[  153.265413][ T8145]  futex_lock_pi+0x773/0xa90
[  153.265427][ T8145]  ? __pfx_futex_lock_pi+0x10/0x10
[  153.265447][ T8145]  ? __pfx_futex_wake_mark+0x10/0x10
[  153.265463][ T8145]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[  153.265479][ T8145]  do_futex+0x292/0x420
[  153.265491][ T8145]  ? __pfx_do_futex+0x10/0x10
[  153.265500][ T8145]  ? __vm_munmap+0x2c1/0x380
[  153.265510][ T8145]  __se_sys_futex+0x36f/0x400
[  153.265521][ T8145]  ? __pfx___se_sys_futex+0x10/0x10
[  153.265538][ T8145]  ? __x64_sys_futex+0x21/0xf0
[  153.265548][ T8145]  do_syscall_64+0xfa/0xfa0
[  153.265560][ T8145]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.265599][ T8145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.265608][ T8145]  ? exc_page_fault+0xab/0x100
[  153.265620][ T8145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.265628][ T8145] RIP: 0033:0x7f1a4c78ebe9
[  153.265638][ T8145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.265645][ T8145] RSP: 002b:00007f1a4d604038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  153.265656][ T8145] RAX: ffffffffffffffda RBX: 00007f1a4c9c5fa0 RCX: 00007f1a4c78ebe9
[  153.265663][ T8145] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[  153.265668][ T8145] RBP: 00007f1a4c811e19 R08: 0000000000000000 R09: 0000000000000000
[  153.265673][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.265679][ T8145] R13: 00007f1a4c9c6038 R14: 00007f1a4c9c5fa0 R15: 00007fff5f7e78c8
[  153.265692][ T8145]  </TASK>
[  153.781269][ T8149] loop3: detected capacity change from 0 to 1024
[  153.828833][ T8149] hfsplus: found bad thread record in catalog
[  154.424617][   T97] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  154.424843][ T8174] loop5: detected capacity change from 0 to 2048
[  154.457337][ T8174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.484480][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.530533][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.5.805'.
[  154.537021][ T8179] netlink: 60 bytes leftover after parsing attributes in process `syz.5.805'.
[  154.541687][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.5.805'.
[  154.546971][ T8179] netlink: 60 bytes leftover after parsing attributes in process `syz.5.805'.
[  154.590833][   T97] usb 4-1: Using ep0 maxpacket: 16
[  154.609487][   T97] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  154.619010][   T97] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.628283][   T97] usb 4-1: Product: syz
[  154.630653][   T97] usb 4-1: Manufacturer: syz
[  154.633031][   T97] usb 4-1: SerialNumber: syz
[  154.637695][   T97] r8152-cfgselector 4-1: Unknown version 0x0000
[  154.640063][   T97] r8152-cfgselector 4-1: config 0 descriptor??
[  154.653187][ T8183] loop5: detected capacity change from 0 to 2048
[  154.661640][ T8183] EXT4-fs: Ignoring removed mblk_io_submit option
[  154.675835][ T8183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.768427][   T53] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u9:2: bg 0: block 234: padding at end of block bitmap is not set
[  154.782461][   T53] EXT4-fs (loop5): Remounting filesystem read-only
[  154.792494][ T7166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.057847][   T97] r8152-cfgselector 4-1: USB disconnect, device number 9
[  156.349974][ T8222] af_packet: tpacket_rcv: packet too big, clamped from 1480 to 4294967272. macoff=96
[  156.455996][ T8220] loop3: detected capacity change from 0 to 32768
[  156.515056][ T8220] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  156.537424][ T8220] XFS (loop3): Ending clean mount
[  156.610142][ T5968] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  157.000856][   T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  157.152540][   T10] usb 4-1: Using ep0 maxpacket: 8
[  157.157496][   T10] usb 4-1: config 0 has an invalid interface number: 78 but max is 0
[  157.162587][   T10] usb 4-1: config 0 has no interface number 0
[  157.165345][   T10] usb 4-1: config 0 interface 78 altsetting 2 endpoint 0x88 has an invalid bInterval 254, changing to 11
[  157.171431][   T10] usb 4-1: config 0 interface 78 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  157.177380][   T10] usb 4-1: config 0 interface 78 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0
[  157.182182][   T10] usb 4-1: config 0 interface 78 has no altsetting 0
[  157.187759][   T10] usb 4-1: New USB device found, idVendor=19d2, idProduct=1567, bcdDevice=99.0a
[  157.193187][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.196734][   T10] usb 4-1: Product: syz
[  157.198652][   T10] usb 4-1: Manufacturer: syz
[  157.200839][   T10] usb 4-1: SerialNumber: syz
[  157.206882][ T8252] netlink: 'syz.1.833': attribute type 9 has an invalid length.
[  157.211484][   T10] usb 4-1: config 0 descriptor??
[  157.219968][   T10] option 4-1:0.78: GSM modem (1-port) converter detected
[  157.274860][ T8254] @: renamed from bond_slave_0 (while UP)
[  157.358295][ T8258] netlink: 'syz.1.836': attribute type 1 has an invalid length.
[  157.429373][   T10] usb 4-1: USB disconnect, device number 10
[  157.443213][   T10] option 4-1:0.78: device disconnected
[  157.566725][ T8262] overlayfs: failed to resolve './file0': -2
[  158.363790][ T8302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.241135][ T5853] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  159.393077][ T5853] usb 6-1: Using ep0 maxpacket: 8
[  159.399563][ T5853] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  159.421029][ T5853] usb 6-1: config 179 has no interface number 0
[  159.423739][ T5853] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  159.428196][ T5853] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  159.434170][ T5853] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  159.439438][ T5853] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  159.449519][ T5853] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  159.455449][ T5853] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  159.459173][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.466769][ T8304] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  159.472543][   T33] audit: type=1326 audit(1757359668.611:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.3.860" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a4c78ebe9 code=0x0
[  159.484870][ T8310] bond0: option arp_validate: invalid value (18446744073214590903)
[  159.594671][ T8318] fuse: Bad value for 'fd'
[  159.704553][ T5853] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input8
[  159.886780][ T5853] usb 6-1: USB disconnect, device number 6
[  159.886849][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  159.892264][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  160.574572][ T8338] loop3: detected capacity change from 0 to 1024
[  160.585422][ T8338] EXT4-fs: Ignoring removed nomblk_io_submit option
[  160.617299][ T8338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.815074][ T5968] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.961917][ T5853] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  161.114280][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.118327][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.126117][ T5853] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.131858][ T5853] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  161.137887][ T8365] loop3: detected capacity change from 0 to 256
[  161.155376][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.167994][ T5853] usb 6-1: config 0 descriptor??
[  161.350054][ T8384] program syz.3.890 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  161.424299][   T33] audit: type=1326 audit(1757359670.561:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.3.891" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  161.437964][   T33] audit: type=1326 audit(1757359670.561:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.3.891" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  161.448766][   T33] audit: type=1326 audit(1757359670.571:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.3.891" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  161.460184][   T33] audit: type=1326 audit(1757359670.571:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.3.891" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  161.469221][   T33] audit: type=1326 audit(1757359670.571:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.3.891" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  161.480164][   T33] audit: type=1326 audit(1757359670.571:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.3.891" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  161.489383][   T33] audit: type=1326 audit(1757359670.571:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.3.891" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  161.502053][   T33] audit: type=1326 audit(1757359670.571:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.3.891" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  161.522810][   T33] audit: type=1326 audit(1757359670.581:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.3.891" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4c78ebe9 code=0x7ffc0000
[  161.594177][ T5853] acrux 0003:1A34:0802.0006: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.5-1/input0
[  161.598045][ T5853] acrux 0003:1A34:0802.0006: no inputs found
[  161.600088][ T5853] acrux 0003:1A34:0802.0006: Failed to enable force feedback support, error: -19
[  161.788066][ T5853] usb 6-1: USB disconnect, device number 7
[  161.820915][ T5896] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  161.994282][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.998632][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.002501][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  162.007477][ T5896] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  162.013027][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.018818][ T5896] usb 4-1: config 0 descriptor??
[  162.337073][ T8408] netlink: 'syz.5.899': attribute type 2 has an invalid length.
[  162.340238][ T8408] __nla_validate_parse: 4 callbacks suppressed
[  162.340246][ T8408] netlink: 16 bytes leftover after parsing attributes in process `syz.5.899'.
[  162.438470][ T5896] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x2
[  162.441906][ T5896] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x6
[  162.462912][ T5896] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  162.599806][ T8416] netlink: 'syz.5.902': attribute type 4 has an invalid length.
[  162.611387][ T8416] netlink: 'syz.5.902': attribute type 4 has an invalid length.
[  162.639165][ T5853] usb 4-1: USB disconnect, device number 11
[  162.683224][ T8418] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  162.968073][ T8422] overlayfs: failed to clone upperpath
[  162.977683][ T8422] overlayfs: failed to clone upperpath
[  163.361252][ T8424] loop3: detected capacity change from 0 to 2048
[  163.412670][ T8424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.417534][ T8424] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.473240][ T5968] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.547459][ T8431] dummy0: entered promiscuous mode
[  163.551979][ T8431] dummy0: left promiscuous mode
[  163.739882][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'.
[  163.817387][ T8451] loop3: detected capacity change from 0 to 128
[  163.852164][ T8451] FAT-fs (loop3): bogus number of FAT sectors
[  163.854896][ T8451] FAT-fs (loop3): Can't find a valid FAT filesystem
[  163.900327][ T8455] loop3: detected capacity change from 0 to 256
[  163.910657][ T8455] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  164.450962][ T8475] loop3: detected capacity change from 0 to 32768
[  164.481387][ T8475] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  164.673938][ T8475] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  164.803840][ T5968] ocfs2: Unmounting device (7,3) on (node local)
[  165.626787][ T8516] netlink: 'syz.1.943': attribute type 1 has an invalid length.
[  165.887548][ T8521] loop3: detected capacity change from 0 to 1024
[  166.285781][ T8521] hfsplus: bad catalog entry type
[  167.447561][ T8567] devpts: Bad value for 'max'
[  167.549862][ T8573] netlink: 'syz.3.968': attribute type 10 has an invalid length.
[  167.587460][ T8577] netlink: 'syz.1.971': attribute type 1 has an invalid length.
[  167.742904][ T8594] sctp: [Deprecated]: syz.1.978 (pid 8594) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.742904][ T8594] Use struct sctp_sack_info instead
[  169.004694][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1001'.
[  169.051573][   T47] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  169.185010][ T8653] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  169.275846][   T47] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  169.295130][   T47] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  169.299066][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.302780][   T47] usb 4-1: Product: syz
[  169.304626][   T47] usb 4-1: Manufacturer: syz
[  169.306634][   T47] usb 4-1: SerialNumber: syz
[  169.307668][ T8663] virtio-fs: tag </dev/md0> not found
[  169.323822][   T47] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  169.608753][   T47] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  169.624271][   T47] usb 4-1: USB disconnect, device number 12
[  169.912882][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  170.064732][   T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  170.068351][   T10] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  170.072611][   T10] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  170.077058][   T10] usb 6-1: config 220 has no interface number 2
[  170.079124][   T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  170.084604][   T10] usb 6-1: config 220 interface 0 has no altsetting 0
[  170.088026][   T10] usb 6-1: config 220 interface 76 has no altsetting 0
[  170.091399][   T10] usb 6-1: config 220 interface 1 has no altsetting 0
[  170.101067][   T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  170.105469][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.111102][   T10] usb 6-1: Product: syz
[  170.113121][   T10] usb 6-1: Manufacturer: syz
[  170.115139][   T10] usb 6-1: SerialNumber: syz
[  170.333077][   T10] uvcvideo 6-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  170.349078][   T10] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  170.353343][   T10] usb 6-1: No valid video chain found.
[  170.355263][   T10] usb 6-1: selecting invalid altsetting 0
[  170.381872][   T10] usb 6-1: selecting invalid altsetting 0
[  170.384358][   T10] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  170.406335][   T10] usb 6-1: USB disconnect, device number 8
[  170.595985][ T8697] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  171.826926][ T8729] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  171.947920][ T8727] loop3: detected capacity change from 0 to 32768
[  172.082690][ T8727] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  172.082709][ T8727]   allowing incompatible features above 0.0: (unknown version)
[  172.082717][ T8727]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  172.097835][ T8727] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  172.101422][ T8727] bcachefs (loop3): initializing new filesystem
[  172.113359][ T8727] bcachefs (loop3): going read-write
[  172.125347][ T8727] bcachefs (loop3): marking superblocks
[  172.142593][ T8727] bcachefs (loop3): initializing freespace
[  172.149970][ T8727] bcachefs (loop3): done initializing freespace
[  172.155376][ T8727] bcachefs (loop3): reading snapshots table
[  172.158058][ T8727] bcachefs (loop3): reading snapshots done
[  172.205902][ T8727] bcachefs (loop3):  loop3: Superblock write was silently dropped! (seq 0 expected 42)
[  172.211584][ T8727] bcachefs (loop3): done starting filesystem
[  172.392583][ T8727] syz.3.1035 (8727) used greatest stack depth: 15992 bytes left
[  172.416427][ T5968] bcachefs (loop3): shutting down
[  172.422359][ T5968] bcachefs (loop3): going read-only
[  172.426498][ T5968] bcachefs (loop3): finished waiting for writes to stop
[  172.436802][ T5968] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  172.490124][ T5968] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  172.502388][ T5968] bcachefs (loop3): clean shutdown complete, journal seq 4
[  172.505800][ T5968] bcachefs (loop3): marking filesystem clean
[  172.546386][ T5968] bcachefs (loop3): shutdown complete
[  173.050866][   T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  173.200975][   T10] usb 6-1: Using ep0 maxpacket: 32
[  173.208819][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  173.215952][   T10] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  173.219909][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.225578][   T10] usb 6-1: Product: syz
[  173.227459][   T10] usb 6-1: Manufacturer: syz
[  173.229555][   T10] usb 6-1: SerialNumber: syz
[  173.234442][   T10] usb 6-1: config 0 descriptor??
[  173.247381][   T10] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input9
[  173.259396][   T10] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  173.273138][   T10] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -8
[  173.397820][   T97] IPVS: starting estimator thread 0...
[  173.400050][ T8760] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  173.446342][   T97] usb 6-1: USB disconnect, device number 9
[  173.488200][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'.
[  173.493024][ T8765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1048'.
[  173.493875][ T8761] IPVS: using max 49 ests per chain, 117600 per kthread
[  173.673611][ T8775] IPv6: addrconf: prefix option has invalid lifetime
[  174.315088][ T8802] loop3: detected capacity change from 0 to 16
[  174.323050][ T8802] erofs (device loop3): unsupported chunk format ffff of nid 36
[  174.459334][ T8811] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1067'.
[  174.543211][ T8815] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.624202][ T8815] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.746657][ T8815] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.818082][ T8815] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.919182][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.988456][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.005624][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.017791][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.386578][ T8857] overlayfs: missing 'lowerdir'
[  175.705481][ T8867] loop3: detected capacity change from 0 to 32768
[  175.785633][ T8867] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  175.789648][ T8867] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  175.837815][ T8867] XFS (loop3): Ending clean mount
[  175.846624][ T8867] XFS (loop3): Quotacheck needed: Please wait.
[  175.884898][ T8867] XFS (loop3): Quotacheck: Done.
[  176.582171][   T56] Bluetooth: hci2: command 0x0405 tx timeout
[  176.762517][ T5968] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  176.917590][ T8906] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  176.922652][ T8906] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  176.926246][ T8906] CPU: 1 UID: 0 PID: 8906 Comm: syz.3.1104 Not tainted syzkaller #0 PREEMPT(full) 
[  176.931023][ T8906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.935269][ T8906] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  176.937593][ T8906] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 89 14 32 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 68 14 32 f9 4d 8b 24 24 48 83 c3
[  176.945526][ T8906] RSP: 0018:ffffc90001767a40 EFLAGS: 00010206
[  176.948376][ T8906] RAX: 0000000000000005 RBX: ffff888106e7b480 RCX: 0000000000080000
[  176.951553][ T8906] RDX: ffffc900284f4000 RSI: 00000000000003b4 RDI: 00000000000003b5
[  176.954794][ T8906] RBP: 0000000000000001 R08: ffff88810898212f R09: 1ffff11021130425
[  176.958075][ T8906] R10: dffffc0000000000 R11: ffffffff88f16f00 R12: 0000000000000028
[  176.961302][ T8906] R13: dffffc0000000000 R14: ffff888108982000 R15: dffffc0000000000
[  176.964533][ T8906] FS:  00007f1a4d6046c0(0000) GS:ffff8881a39f1000(0000) knlGS:0000000000000000
[  176.968259][ T8906] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  176.971018][ T8906] CR2: 0000001b31923ffc CR3: 0000000119b8a000 CR4: 00000000000006f0
[  176.974379][ T8906] Call Trace:
[  176.975886][ T8906]  <TASK>
[  176.977118][ T8906]  pcl818_detach+0x66/0xd0
[  176.978993][ T8906]  comedi_device_detach_locked+0x178/0x750
[  176.981347][ T8906]  comedi_unlocked_ioctl+0xcde/0x1020
[  176.983535][ T8906]  ? kasan_quarantine_put+0xdd/0x220
[  176.985711][ T8906]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  176.988189][ T8906]  ? __fget_files+0x2a/0x420
[  176.990241][ T8906]  ? __fget_files+0x3a0/0x420
[  176.992309][ T8906]  ? __fget_files+0x2a/0x420
[  176.994285][ T8906]  ? bpf_lsm_file_ioctl+0x9/0x20
[  176.996482][ T8906]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  176.999046][ T8906]  __se_sys_ioctl+0xfc/0x170
[  177.001084][ T8906]  do_syscall_64+0xfa/0xfa0
[  177.003053][ T8906]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.005345][ T8906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.007972][ T8906]  ? exc_page_fault+0xab/0x100
[  177.009980][ T8906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.012415][ T8906] RIP: 0033:0x7f1a4c78ebe9
[  177.014258][ T8906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.022018][ T8906] RSP: 002b:00007f1a4d604038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  177.025417][ T8906] RAX: ffffffffffffffda RBX: 00007f1a4c9c5fa0 RCX: 00007f1a4c78ebe9
[  177.028669][ T8906] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[  177.031860][ T8906] RBP: 00007f1a4c811e19 R08: 0000000000000000 R09: 0000000000000000
[  177.034806][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.037705][ T8906] R13: 00007f1a4c9c6038 R14: 00007f1a4c9c5fa0 R15: 00007fff5f7e78c8
[  177.040795][ T8906]  </TASK>
[  177.042056][ T8906] Modules linked in:
[  177.044678][ T8906] ---[ end trace 0000000000000000 ]---
[  177.061877][ T8906] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  177.064803][ T8906] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 89 14 32 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 68 14 32 f9 4d 8b 24 24 48 83 c3
[  177.073706][ T8906] RSP: 0018:ffffc90001767a40 EFLAGS: 00010206
[  177.076422][ T8906] RAX: 0000000000000005 RBX: ffff888106e7b480 RCX: 0000000000080000
[  177.079726][ T8906] RDX: ffffc900284f4000 RSI: 00000000000003b4 RDI: 00000000000003b5
[  177.083444][ T8906] RBP: 0000000000000001 R08: ffff88810898212f R09: 1ffff11021130425
[  177.086864][ T8906] R10: dffffc0000000000 R11: ffffffff88f16f00 R12: 0000000000000028
[  177.090336][ T8906] R13: dffffc0000000000 R14: ffff888108982000 R15: dffffc0000000000
[  177.094600][ T8906] FS:  00007f1a4d6046c0(0000) GS:ffff8881a39f1000(0000) knlGS:0000000000000000
[  177.098397][ T8906] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.102179][ T8906] CR2: 0000555562ccf5c8 CR3: 0000000119b8a000 CR4: 00000000000006f0
[  177.105679][ T8906] Kernel panic - not syncing: Fatal exception
[  177.109142][ T8906] Kernel Offset: disabled
[  177.111034][ T8906] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:23:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000041b00 RBX=0000000000000f49 RCX=0000000000041b00 RDX=ffffffff9386b358
RSI=0000000000000002 RDI=000000000004bb07 RBP=ffffffff93cab7d0 RSP=ffffc90000067ba0
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1f878c7
R12=0000000000077084 R13=ffffffff93e2c710 R14=ffffffff92d3e9f0 R15=0000000000041b60
RIP=ffffffff819dc69e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b83f1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000274030 CR3=000000002464a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8169459f ffffffff8133c69e
XMM02=00007f0ce8197498 ffffffff8133c69e XMM03=00007f0ce81974a8 00007f0ce81974a0
XMM04=00007f0ce8cfd100 00007f0ce8197460 XMM05=00007f0ce8197478 00007f0ce81974c0
XMM06=00007f0ce81974b8 00007f0ce81974b0 XMM07=00007f0ce81974a8 00007f0ce81974a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f0ce8012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001563 RDI=0000000000001564 RBP=00000000000003f8 RSP=ffffc900017671d0
R8 =ffff88801fdb0237 R9 =1ffff11003fb6046 R10=dffffc0000000000 R11=ffffffff85528930
R12=dffffc0000000000 R13=ffffffff99d248f1 R14=ffffffff9a037040 R15=0000000000000000
RIP=ffffffff855289ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1a4d6046c0 ffffffff 00c00000
GS =0000 ffff8881a39f1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31923ffc CR3=0000000119b8a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f1a4c997498 00007f1a4c997470 XMM03=00007f1a4c9974a8 00007f1a4c9974a0
XMM04=00007f1a4d4fd100 00007f1a4c997460 XMM05=00007f1a4c997478 00007f1a4c9974c0
XMM06=00007f1a4c9974b8 00007f1a4c9974b0 XMM07=00007f1a4c9974a8 00007f1a4c9974a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f1a4c812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
