last executing test programs:

9m19.656077936s ago: executing program 32 (id=86):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x1, 0x1a, 0x1b, 0x20000006, &(0x7f0000000480)="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"})

8m32.501629442s ago: executing program 1 (id=542):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xb9ca684c636894f8}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c941}, 0x20000000)

8m32.383093178s ago: executing program 1 (id=544):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffd5c}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)

8m32.240404532s ago: executing program 1 (id=547):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0)

8m32.167790825s ago: executing program 1 (id=548):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@swalloc}, {@pqnoenforce}, {@attr2}]}, 0x1, 0x9730, &(0x7f0000009800)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQMk555xzzjnnnHPOfM+yu4rrget93/t+3HvPOc+zO9PVVTXV/1931cxUT/eS8yw258DA6ANDm2JgxG69a86FNt5xziv33WmvU6cYc/zJh00etsCkwy5OOmjYx5EGBgZGGraeYdPGeuykk0caGOW96f9orDHGHDTOwMB0wy7OPuzjTEM/TPT48PneHaERN3TQ3y8O2n7ov/cab8iXGPLJ0rdcdO7AwMD471t+yCLT/MsNlbbkHPPO8w+rv7sNsRo87PP3/xt16L+JHhwYmOi+Ab5/vH/eQR/BTRryNcff8aHR1/0Ivvb/uJacY975RvAf8lgcedi0mYY8xkd8DBob8X5+yyqz7jFsCN+7vw0MDNnF/dNj5X9ES84xzwIDH7yfH3hkzHHPfPe9/eZYzw0MjPX8wMBYLwwMjPXiwMBYLw0MjPXyR+1S/3fNMef0cw55vA+/PIx9+H15fLpf7Lv6S/sMDAyMNnSesd4ZerwYe4rhx4Sqqqr6790cc04/Fxz/R/+w4/9WW89xW8f/qqqq/7nNN8ec0w85jo9w/B/7w47/P7jppjWG/u5/9pmGLvXOR3sjqqqq6j/VPPPh8X/8Dzv+j7fDDQd0/K+qqvqf26ILvnf8H3uE4//EH3b8X2P+uy4fNt/w7xveft8q33v+2LDpb75v+sjvm/7G+6YPft963j//qO+b/tr7po8+MDDWY8Omv/WPyWM9N2SZf13PWK/84/k4k47yvumvvm/6qO+b/tqwbRoyfbT3TX/7ffOP/o/pYw/5b4phX/f1Dxnqqqqq/zYtOv08cw2873n2wyYPf2I/Pi/02GO3vvuj2t6qqqqqqqqq+s/3ztNnnPOPv/n+9MD7/nb173/DOuz3AoOOO++66z6yDf3v0aB//X3IFh/1Nv3fNsR59COmGBhYa4mPelPqI+h/zN+q1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/v/vf/8/cN9Xdhg26yyT3XX/Yv9YctKB1YZ9dutdcy602kew7R9B/1vP/w+sNmhgYJjv+EMsF5pj0cWnGhgYWOz+uyabceDv18085LpZJxz5vT/mHBiY6r3/B0/6AWse9i4L7725w8R/X8dx761/vnf3H3nQCBvxvmY794GDV13y1RlG/PilD74df39/iaVe2X/K4X/LMtIIM43+AQsPX//w2zKi87Btn2rItk+9wZrrTL3+xpt8fbU1l19lpVVWWmu66aadYfoZZ5jum7NMvfJqa6w0zdD/P2DMhr51xcj/zpiNPeKYPT3H+8dsxNs2wSkH45j967t6/NMq3lvj+bM9csXwMRvl3xyz4V9v5A8fsylWG/aFJh0YPLDce0MzaGBg0lEGD2w05MK0ow0MTDp42LyTDpn32xOONDCw4z9u6KBhLzY6dJ5BWwyZ57/Z+5bMMmxENh0+34ivsz7ihv5H71ty4ti73DXC+5b8v+r/6Pj/L14zD/r7QA1/A4Rh8wz1+ojfZ+JftneKUd47yH3Q9n7I6+K8F92/1lz18SX+q14Xh7Z37A/Z3g95Hb8P3N6ppn12z6Gr+i/b3hH2dQsMvfLf2dcNfPi+bmRafqWrJx9xXzf/B2/iPz2Oh4/RaCPM9EH7uh3nP3/zIesf+PB93QKrDXvxgH/s60YaGJh05OH7uiE7vlEHD+w45MJ0Qy6MNnjgsCEXpn/vwhgD5w258I0V1l5jxUHvvczAsPVOM2S9s084aOgD6OaDVx1tl3ffHWXYtrwy1j9v67D7xxTvP57PMeGwwRy27PD1Dpl1+Hpf22bodaMOW++r/4n1Dl+WtnfSs4deN9qw9b42wnoHf8h6hy/7L4+HqQb90xNVYX/zkb6vET1+R/+Q7f2Q1+HG+9t77lMu+8h/wetwD/qg7R3lw7f3g9435AO394krntzvv+p1w+l+dt++Q+8row+7n739n7j/Dl92xP3Y0BcCGbrbH/3f2Y9N8S/7sS1HHmmEwX5fH/R97oow/7BHxN/XtuJBr642fOwHj7De/+j73PfdlkGwHxt/hJ/nBm2+38AgGvPH1nhxw3d2/vAxHzzwzz9bDB/z4ct+2JiP9u+M+ac+fMxH/D75g8Z8qs8PvX7wCNv//jFfZLfZbx4+5qOOsN7/aMxH+/Bjx7+O+cDAYBrzHScbOm4ftj/9oDEfvuzwMR/ydWadcJSBuQcGBqYcNuaj/jtjPul/zf18TJh/6Ocr/X3SczMu/LXhYz7iGP9HYz7qf3LMN7vv7/fzKd+77nMjDYw66sBGy2+wwXrTDv1/+MXphv7P+6LnVhw6zh92LP0go+HLftjjYpR/x2j8f8to0H9kNNkoH2T0j4fWyAcv+vz/6b5olP+s0Xm8Lzpt3qHj9mHfF33QmA9flo6DE79v+RF/Dv2Q18/C2/Te+My/7fCf9/47vH7W8J93/0e+ftbw30muNuJOvv7d+v2/u/zd5e8uf3f5i/uA8/9TDD///+7YB04y7IfOwVfPfNvsH/X2fsT9rz7/P8z3n87/z37bzFcP+dFq2HUfen526Dz/Lc/PzjT0w0SPD59vxPODI27of3R+dt9dN7j6/6fzs/9HDX+s/hs/F7f/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7gPP/0wx/HsDDiy/0w2EnQgdvOu3Rm37U2/sR97/6/P8w3386/7/p0dNuOtLA36/70PP/Q+dxnP9/YMHNl/nvfP5/+GO18//1H5S/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7gPP/sw9/HsCRs839heHPB7hxu/33/Ki39yPuf+v5/97/31v7f3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4Yef/B0Z4m8SFu19gcP7/f3Yf4L9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8f5Q/ZvH/cf6YxX/J/DGL/1L5Yxb/n+SPWfx/mj9m8V86f8ziv0z+mMV/2fwxi//P8scs/svlj1n8l88fs/j/PH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9F/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/1/mj1n8f5U/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9f549Z/H+TP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP6/zR+z+G+VP2bx/13+mMV/6/wxi//v88cs/tvkj1n8t80fs/hvlz9m8d8+f8zi/4f8MYv/H/PHLP475I9Z/P+UP2bx/3P+mMV/x/wxi/9O+WMW/7/kj1n8d84fs/jvkj9m8d81f8zi/9f8MYv/3/LHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/O/ljFv9388ck/oMG8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8sf8ziP0n+mMX/4/ljFv9J88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4j9F/pjF/7P5Yxb/z+WPWfw/nz9m8Z8yf8zi/4X8MYv/F/PHLP5fyh+z+E+VP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/m/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9W/pjFf9b8MYv/t/PHLP6z5Y9Z/L+TP2bx/27+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/lz9m8Z87f8ziP0/+mMV/3vwxi//388cs/vPlj1n8f5A/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv8f5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5Y9Z/H+cP2bxXzJ/zOK/VP6Yxf8n+WMW/5/mj1n8l84fs/gvkz9m8V82f8zi/7P8MYv/cvljFv/l88cs/j/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5E/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/l/ljFv9f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/9f5Yxb/3+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/2/zxyz+W+WPWfx/lz9m8d86f8zi//v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/IX/M4v/H/DGL/w75Yxb/P+WPWfz/nD9m8d8xf8ziv1P+mMX/L/ljFv+d88cs/rvkj1n8d80fs/j/NX/M4v+3/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYn/e5/m/69Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9Y/pjFf5L8MYv/x/PHLP6T5o9Z/D+RP2bxnyx/zOL/yfwxi/+n8scs/pPnj1n8P50/ZvH/TP6YxX+K/DGL/2fzxyz+n8sfs/h/Pn/M4j9l/pjF/wv5Yxb/L+aPWfy/lD9m8Z8qf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/N/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+t/DGL/6z5Yxb/b+ePWfxnyx+z+H8nf8zi/938MYv/7PljFv858scs/nPmj1n858ofs/h/L3/M4j93/pjFf578MYv/vPljFv/v549Z/OfLH7P4/yB/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4/zB+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yh+z+P84f8ziv2T+mMV/qfwxi/9P8scs/j/NH7P4L50/ZvFfJn/M4r9s/pjF/2f5Yxb/5fLHLP7L549Z/H+eP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yJ/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/L/PHLP6/yh+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/6/zxyz+v8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/9/mj1n8t8ofs/j/Ln/M4r91/pjF//f5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvH/Q/6Yxf+P+WMW/x3yxyz+f8ofs/j/OX/M4r9j/pjFf6f8MYv/X/LHLP47549Z/HfJH7P475o/ZvH/a/6Yxf9v+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGL/7v5YxL/kQfyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyx/zOI/Sf6Yxf/j+WMW/0nzxyz+n8gfs/hPlj9m8f9k/pjF/1P5Yxb/yfPHLP6fzh+z+H8mf8ziP0X+mMX/s/ljFv/P5Y9Z/D+fP2bxnzJ/zOL/hfwxi/8X88cs/l/KH7P4T5U/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf+b+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/1b+mMV/1vwxi/+388cs/rPlj1n8v5M/ZvH/bv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+XP2bxnzt/zOI/T/6YxX/e/DGL//fzxyz+8+WPWfx/kD9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/x/mj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/lj1n8f5w/ZvFfMn/M4r9U/pjF/yf5Yxb/n+aPWfyXzh+z+C+TP2bxXzZ/zOL/s/wxi/9y+WMW/+Xzxyz+P88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/kT9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf+X+WMW/1/lj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/1/ljFv/f5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/b/PHLP5b5Y9Z/H+XP2bx3zp/zOL/+/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P8hf8zi/8f8MYv/DvljFv8/5Y9Z/P+cP2bx3zF/zOK/U/6Yxf8v+WMW/53zxyz+u+SPWfx3zR+z+P81f8zi/7f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxif8oA/ljFv9B+WMW/5Hyxyz+I+ePWfxHyR+z+A/OH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfw/lj9m8Z8kf8zi//H8MYv/pPljFv9P5I9Z/CfLH7P4fzJ/zOL/qfwxi//k+WMW/0/nj1n8P5M/ZvGfIn/M4v/Z/DGL/+fyxyz+n88fs/hPmT9m8f9C/pjF/4v5Yxb/L+WPWfynyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/838MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/K3/M4j9r/pjF/9v5Yxb/2fLHLP7fyR+z+H83f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+38sfs/jPnT9m8Z8nf8ziP2/+mMX/+/ljFv/58scs/j/IH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/D/PHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/j/LHLP4/zh+z+C+ZP2bxXyp/zOL/k/wxi/9P88cs/kvnj1n8l8kfs/gvmz9m8f9Z/pjFf7n8MYv/8vljFv+f549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/r/IH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/8v8MYv/r/LHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v/r/DGL/2/yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf+3+WMW/63yxyz+v8sfs/hvnT9m8f99/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8/5A/ZvH/Y/6YxX+H/DGL/5/yxyz+f84fs/jvmD9m8d8pf8zi/5f8MYv/zvljFv9d8scs/rvmj1n8/5o/ZvH/W/6YxX+3/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J3/M4v9u/pjEf/BA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/lj1n8J8kfs/h/PH/M4j9p/pjF/xP5Yxb/yfLHLP6fzB+z+H8qf8ziP3n+mMX/0/ljFv/P5I9Z/KfIH7P4fzZ/zOL/ufwxi//n88cs/lPmj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/M3/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/KH7P4z5o/ZvH/dv6YxX+2/DGL/3fyxyz+380fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//38scs/nPnj1n858kfs/jPmz9m8f9+/pjFf778MYv/D/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/D/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+j/DGL/4/zxyz+S+aPWfyXyh+z+P8kf8zi/9P8MYv/0vljFv9l8scs/svmj1n8f5Y/ZvFfLn/M4r98/pjF/+f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/L/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/Mn/M4v+r/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zp/zOL/m/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/23+mMV/q/wxi//v8scs/lvnj1n8f58/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8/5I9Z/P+YP2bx3yF/zOL/p/wxi/+f88cs/jvmj1n8d8ofs/j/JX/M4r9z/pjFf5f8MYv/rvljFv+/5o9Z/P+WP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH7P4v5s/JvEfdSB/zOI/KH/M4j9S/pjFf+T8MYv/KPljFv/B+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/x/LHLP6T5I9Z/D+eP2bxnzR/zOL/ifwxi/9k+WMW/0/mj1n8P5U/ZvGfPH/M4v/p/DGL/2fyxyz+U+SPWfw/mz9m8f9c/pjF//P5Yxb/KfPHLP5fyB+z+H8xf8zi/6X8MYv/VPljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+ZP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/b+WPWfxnzR+z+H87f8ziP1v+mMX/O/ljFv/v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/3v5Yxb/ufPHLP7z5I9Z/OfNH7P4fz9/zOI/X/6Yxf8H+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bx/2H+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1H+mMX/x/ljFv8l88cs/kvlj1n8f5I/ZvH/af6YxX/p/DGL/zL5Yxb/ZfPHLP4/yx+z+C+XP2bxXz5/zOL/8/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf8X+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+ZP2bx/1X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfx/nT9m8f9N/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/j/Nn/M4r9V/pjF/3f5Yxb/rfPHLP6/zx+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/x/yxyz+f8wfs/jvkD9m8f9T/pjF/8/5Yxb/HfPHLP475Y9Z/P+SP2bx3zl/zOK/S/6YxX/X/DGL/1/zxyz+f8sfs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+T+I82kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf9j+WMW/0nyxyz+H88fs/hPmj9m8f9E/pjFf7L8MYv/J/PHLP6fyh+z+E+eP2bx/3T+mMX/M/ljFv8p8scs/p/NH7P4fy5/zOL/+fwxi/+U+WMW/y/kj1n8v5g/ZvH/Uv6YxX+q/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+38wfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/+38scs/rPmj1n8v50/ZvGfLX/M4v+d/DGL/3fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/vfwxi//c+WMW/3nyxyz+8+aPWfy/nz9m8Z8vf8zi/4P8MYv//PljFv8F8scs/gvmj1n8F8ofs/j/MH/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/j/KH/M4v/j/DGL/5L5Yxb/pfLHLP4/yR+z+P80f8ziv3T+mMV/mfwxi/+y+WMW/5/lj1n8l8sfs/gvnz9m8f95/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/4v8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+v8wfs/j/Kn/M4r9h/pjFf6P8MYv/xvljFv9N8scs/r/OH7P4/yZ/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/H+bP2bx3yp/zOL/u/wxi//W+WMW/9/nj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/D/ljFv8/5o9Z/HfIH7P4/yl/zOL/5/wxi/+O+WMW/53yxyz+f8kfs/jvnD9m8d8lf8ziv2v+mMX/r/ljFv+/5Y9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938scs/u/mj0n8Rx/IH7P4D8ofs/iPlD9m8R85f8ziP0r+mMV/cP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8zi/7H8MYv/JPljFv+P549Z/CfNH7P4fyJ/zOI/Wf6Yxf+T+WMW/0/lj1n8J88fs/h/On/M4v+Z/DGL/xT5Yxb/z+aPWfw/lz9m8f98/pjFf8r8MYv/F/LHLP5fzB+z+H8pf8ziP1X+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/6/ljFv9v5I9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv9v5o9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/1v5Yxb/WfPHLP7fzh+z+M+WP2bx/07+mMX/u/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8f9e/pjFf+78MYv/PPljFv9588cs/t/PH7P4z5c/ZvH/Qf6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/H+YP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/H+UP2bx/3H+mMV/yfwxi/9S+WMW/5/kj1n8f5o/ZvFfOn/M4r9M/pjFf9n8MYv/z/LHLP7L5Y9Z/JfPH7P4/zx/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/Rf6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv9f5o9Z/H+VP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/X+ePWfx/kz9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+v80fs/hvlT9m8f9d/pjFf+v8MYv/7/PHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4v+H/DGL/x/zxyz+O+SPWfz/lD9m8f9z/pjFf8f8MYv/TvljFv+/5I9Z/HfOH7P475I/ZvHfNX/M4v/X/DGL/9/yxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGL/zv5Yxb/d/PHJP5jDOSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/WP6YxX+S/DGL/8fzxyz+k+aPWfw/kT9m8Z8sf8zi/8n8MYv/p/LHLP6T549Z/D+dP2bx/0z+mMV/ivwxi/9n88cs/p/LH7P4fz5/zOI/Zf6Yxf8L+WMW/y/mj1n8v5Q/ZvGfKn/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/zfzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/rfwxi/+s+WMW/2/nj1n8Z8sfs/h/J3/M4v/d/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fy9/zOI/d/6YxX+e/DGL/7z5Yxb/7+ePWfznyx+z+P8gf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+P8wfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8ofs/j/OH/M4r9k/pjFf6n8MYv/T/LHLP4/zR+z+C+dP2bxXyZ/zOK/bP6Yxf9n+WMW/+Xyxyz+y+ePWfx/nj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8if8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/y/zxyz+v8ofs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+v88cs/r/JH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv/f5o9Z/LfKH7P4/y5/zOK/df6Yxf/3+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/0P+mMX/j/ljFv8d8scs/n/KH7P4/zl/zOK/Y/6YxX+n/DGL/1/yxyz+O+ePWfx3yR+z+O+aP2bx/2v+mMX/b/ljFv/d8scs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMS/zEH8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8sf8ziP0n+mMX/4/ljFv9J88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4j9F/pjF/7P5Yxb/z+WPWfw/nz9m8Z8yf8zi/4X8MYv/F/PHLP5fyh+z+E+VP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/m/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9W/pjFf9b8MYv/t/PHLP6z5Y9Z/L+TP2bx/27+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/lz9m8Z87f8ziP0/+mMV/3vwxi//388cs/vPlj1n8f5A/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv8f5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5Y9Z/H+cP2bxXzJ/zOK/VP6Yxf8n+WMW/5/mj1n8l84fs/gvkz9m8V82f8zi/7P8MYv/cvljFv/l88cs/j/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5E/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/l/ljFv9f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/9f5Yxb/3+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/2/zxyz+W+WPWfx/lz9m8d86f8zi//v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/IX/M4v/H/DGL/w75Yxb/P+WPWfz/nD9m8d8xf8ziv1P+mMX/L/ljFv+d88cs/rvkj1n8d80fs/j/NX/M4v+3/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYn/WAP5Yxb/QfljFv+R8scs/iPnj1n8R8kfs/gPzh+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8P5Y/ZvGfJH/M4v/x/DGL/6T5Yxb/T+SPWfwnyx+z+H8yf8zi/6n8MYv/5PljFv9P549Z/D+TP2bxnyJ/zOL/2fwxi//n8scs/p/PH7P4T5k/ZvH/Qv6Yxf+L+WMW/y/lj1n8p8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v/N/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fyt/zOI/a/6Yxf/b+WMW/9nyxyz+38kfs/h/N3/M4j97/pjFf478MYv/nPljFv+58scs/t/LH7P4z50/ZvGfJ3/M4j9v/pjF//v5Yxb/+fLHLP4/yB+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/w/zxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/4/yxyz+P84fs/gvmT9m8V8qf8zi/5P8MYv/T/PHLP5L549Z/JfJH7P4L5s/ZvH/Wf6YxX+5/DGL//L5Yxb/n+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6/yB+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v/L/DGL/6/yxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/6/wxi/9v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/t/ljFv+t8scs/r/LH7P4b50/ZvH/ff6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/P+QP2bx/2P+mMV/h/wxi/+f8scs/n/OH7P475g/ZvHfKX/M4v+X/DGL/875Yxb/XfLHLP675o9Z/P+aP2bx/1v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/zOL/bv6YxH/sgfwxi/+g/DGL/0j5Yxb/kfPHLP6j5I9Z/Afnj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP4fyx+z+E+SP2bx/3j+mMV/0vwxi/8n8scs/pPlj1n8P5k/ZvH/VP6YxX/y/DGL/6fzxyz+n8kfs/hPkT9m8f9s/pjF/3P5Yxb/z+ePWfynzB+z+H8hf8zi/8X8MYv/l/LHLP5T5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/2b+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lT9m8Z81f8zi/+38MYv/bPljFv/v5I9Z/L+bP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/7+WPWfznzh+z+M+TP2bxnzd/zOL//fwxi/98+WMW/x/kj1n8588fs/gvkD9m8V8wf8ziv1D+mMX/h/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/R/ljFv8f549Z/JfMH7P4L5U/ZvH/Sf6Yxf+n+WMW/6Xzxyz+y+SPWfyXzR+z+P8sf8ziv1z+mMV/+fwxi//P88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/1/kj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx/2X+mMX/V/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8f91/pjF/zf5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4v/b/DGL/1b5Yxb/3+WPWfy3zh+z+P8+f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+f8gfs/j/MX/M4r9D/pjF/0/5Yxb/P+ePWfx3zB+z+O+UP2bx/0v+mMV/5/wxi/8u+WMW/13zxyz+f80fs/j/LX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fs/i/kz9m8X83f0ziP85A/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/lj1n8J8kfs/h/PH/M4j9p/pjF/xP5Yxb/yfLHLP6fzB+z+H8qf8ziP3n+mMX/0/ljFv/P5I9Z/KfIH7P4fzZ/zOL/ufwxi//n88cs/lPmj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/M3/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/KH7P4z5o/ZvH/dv6YxX+2/DGL/3fyxyz+380fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//38scs/nPnj1n858kfs/jPmz9m8f9+/pjFf778MYv/D/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/D/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+j/DGL/4/zxyz+S+aPWfyXyh+z+P8kf8zi/9P8MYv/0vljFv9l8scs/svmj1n8f5Y/ZvFfLn/M4r98/pjF/+f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/L/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/Mn/M4v+r/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zp/zOL/m/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/23+mMV/q/wxi//v8scs/lvnj1n8f58/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8/5I9Z/P+YP2bx3yF/zOL/p/wxi/+f88cs/jvmj1n8d8ofs/j/JX/M4r9z/pjFf5f8MYv/rvljFv+/5o9Z/P+WP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH7P4v5s/JvEfdyB/zOI/KH/M4j9S/pjFf+T8MYv/KPljFv/B+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/x/LHLP6T5I9Z/D+eP2bxnzR/zOL/ifwxi/9k+WMW/0/mj1n8P5U/ZvGfPH/M4v/p/DGL/2fyxyz+U+SPWfw/mz9m8f9c/pjF//P5Yxb/KfPHLP5fyB+z+H8xf8zi/6X8MYv/VPljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+ZP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/b+WPWfxnzR+z+H87f8ziP1v+mMX/O/ljFv/v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/3v5Yxb/ufPHLP7z5I9Z/OfNH7P4fz9/zOI/X/6Yxf8H+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bx/2H+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1H+mMX/x/ljFv8l88cs/kvlj1n8f5I/ZvH/af6YxX/p/DGL/zL5Yxb/ZfPHLP4/yx+z+C+XP2bxXz5/zOL/8/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf8X+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+ZP2bx/1X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfx/nT9m8f9N/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/j/Nn/M4r9V/pjF/3f5Yxb/rfPHLP6/zx+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/x/yxyz+f8wfs/jvkD9m8f9T/pjF/8/5Yxb/HfPHLP475Y9Z/P+SP2bx3zl/zOK/S/6YxX/X/DGL/1/zxyz+f8sfs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+T+I83kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf9j+WMW/0nyxyz+H88fs/hPmj9m8f9E/pjFf7L8MYv/J/PH/j/26MEADAQAAtjbGuBt27Zt27Zt27Zt27ZtW3UXuAl6yQpp+Z/Yf9TyP4n/qOV/Uv9Ry/9k/qOW/8n9Ry3/U/iPWv6n9B+1/E/lP2r5n9p/1PI/jf+o5X9a/1HL/3T+o5b/6f1HLf8z+I9a/mf0H7X8z+Q/avmf2X/U8j+L/6jlf1b/Ucv/bP6jlv/Z/Uct/3P4j1r+5/QftfzP5T9q+Z/bf9TyP4//qOV/Xv9Ry/98/qOW//n9Ry3/C/iPWv4X9B+1/C/kP2r5X9h/1PK/iP+o5X9R/1HL/2L+o5b/xf1HLf9L+I9a/pf0H7X8L+U/avlf2n/U8r+M/6jlf1n/Ucv/cv6jlv/l/Uct/yv4j1r+V/Qftfyv5D9q+V/Zf9Tyv4r/qOV/Vf9Ry/9q/qOW/9X9Ry3/a/iPWv7X9B+1/K/lP2r5X9t/1PK/jv+o5X9d/1HL/3r+o5b/9f1HLf8b+I9a/jf0H7X8b+Q/avnf2H/U8r+J/6jlf1P/Ucv/Zv6jlv/N/Uct/1v4j1r+t/Qftfxv5T9q+d/af9Tyv43/qOV/W/9Ry/92/qOW/+39Ry3/O/iPWv539B+1/O/kP2r539l/1PK/i/+o5X9X/1HL/27+o5b/3f1HLf97+I9a/vf0H7X87+U/avnf23/U8r+P/6jlf1//Ucv/fv6jlv/9/Uct/wf4j1r+D/Qftfwf5D9q+T/Yf9Tyf4j/qOX/UP9Ry/9h/qOW/8P9Ry3/R/iPWv6P9B+1/B/lP2r5P9p/1PJ/jP+o5f9Y/1HL/3H+o5b/4/1HLf8n+I9a/k/0H7X8n+Q/avk/2X/U8n+K/6jl/1T/Ucv/af6jlv/T/Uct/2f4j1r+z/Qftfyf5T9q+T/bf9Tyf47/qOX/XP9Ry/95/qOW//P9Ry3/F/iPWv4v9B+1/F/kP2r5v9h/1PJ/if+o5f9S/1HL/2X+o5b/y/1HLf9X+I9a/q/0H7X8X+U/avm/2n/U8n+N/6jl/1r/Ucv/df6jlv/r/Uct/zf4j1r+b/Qftfzf5D9q+b/Zf9Tyf4v/qOX/Vv9Ry/9t/qOW/9v9Ry3/d/iPWv7v9B+1/N/lP2r5v9t/1PJ/j/+o5f9e/1HL/33+o5b/+/1HLf8P+I9a/h/0H7X8P+Q/avl/2H/U8v+I/6jl/1H/Ucv/Y/6jlv/H/Uct/0/4j1r+n/Qftfw/5T9q+X/af9Ty/4z/qOX/Wf9Ry/9z/qOW/+f9Ry3/L/iPWv5f9B+1/L/kP2r5f9l/1PL/iv+o5f9V/1HL/2v+o5b/1/1HLf9v+I9a/t/0H7X8v+U/avl/23/U8v+O/6jl/13/Ucv/e/6jlv/3/Uct/x/4j1r+P/Qftfx/5D9q+f/Yf9Ty/4n/qOX/U/9Ry/9n/qOW/8/9Ry3/X/iPWv6/9B+1/H/lP2r5/9p/1PL/jf+o5f9b/1HL/3f+o5b/7/1HLf8/+I9a/n/0H7X8/+Q/avn/2X/U8v+L/6jl/1f/Ucv/b/6jlv/f/Uct/3/4j1r+//Qftfz/5T9q+f/bf9Ty/4//qOX/X/9Ry/9//qOW///9Ry3/A/xHLf8D/Uct/4P8Ry3/g/1HLf9D/Ect/0P9Ry3/w/xHJf8TjeQ/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+NcP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCcvbuNzass/Dh+urZ7+rN/N+fwGjIYbLqJK1u7MhlsPtTHgqk6FgMmkC2sjEph7iG4gVoNSgzGMBkJIuo2dRNIjBkvhgkIK4lKnIrGiWiIQ1AXMTVMZETjUnO3vUt7r23Wq17XXuzzedHe55Tf6bbku3PK1gwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgpc3bbrlhbUdH2yYvvPDCi4EXp/p3JiC116I/1T8SAAAAAAAAAAAAAABgJDm+nehU/xwBAAAAAOB009L6ru7qqiGnqgcfzPl5W+/7plevvH7P84+vLL/v//Dlw1xywuCDnp6enpeau2b2H04qiqL02ab3H0+uHJeu39l1+fa+o1D89tnm1m3bmw/u/MrXH547dfqc2t6ztcWa69o72pZMKIpQXVtsLR00VBVFmFhbbC8dNJYOJtUW95cOlvYeTCkOlA4uvHZDx7rSiRM+NZx2Wlo/W1QPKbYY8rvB4P47uzbtKr8f5ZLlq9UU/f3XNf9wb8XHykbov3z9UFXZ/5h/gsCIxtb/7QvL70e55An3/0fb61YN97GR+y9fP0zQP6QzzPP/kEZ7n/f37J8xwvP/3GEuObD/6V9WdpX6v+mXL9T3n6o5mef/0ufrOwrVlf1PGPL8X3qOryk//08qilA7zl8OOK20tH6ue7T7f2X3Q/uvOatiUzW4/6Or9lSX+j981wPv7z9Ve1L9D1w/1Ixy/6/6zIGhP1ZgbFpad/dU3P/H0H+xYJhLDvQ/f/exq0r9n7HzyL5BHxtL/7WV/S/ecuMnFm/edkt9+41r17etb7upsbGhaemypsaLli/ufSToezvOXxU4PYzv/l9MrdhUFUXbwH7Rh5e9VOr/4Ln/+Fv/qclj7H/iqPf/59z/YVjnTygmTiy2rt2yZVND39vyYWPf277/bJj+T/z6f8T+55X/P2D56+7SF+QD+9+886sfKfV/76RVD/SfmjjG/ieN1n/na58XiDDO+/+6is2Q/ttf/c66Uv9/euX4of5TY/36f/Ko/e9y/4fxaGmt+As//2Ol/lf/6/Bwf05wEsIUf/4H6eTof+u0X3wzbh2m6h/SydH/0s1tkX/ZNvyf/iGdHP3/akfVkbh1OEP/kE6O/r/W/eDGuHWYpn9IJ0f/+2c/8lTcOvy//iGdHP0fXz/9qrh1qNM/pJOj/8u+tHd13DpM1z+kk6P/qlemPRG3DjP0D+nk6L++6uxPxa3D6/QP6eTo/7rOh1+MW4eZ+od0cvT/+Z2/jvw+nfB6/UM6Ofp/6o9bd8Stwyz9Qzo5+n9hVnt93DqcqX9IJ0f/99/wxCNx6/AG/UM6Ofp/+lsfPBa3DkH/kE6O/r/x7JE1ceswW/+QTo7+9y089oe4dThL/5BOjv7//dGrPxC3Dm/UP6STo/+wf/l349bhbP1DOjn6v+LJuxri1mGO/iGdHP13rrjtzrh1OEf/kE6O/puaF86OW4dz9Q/p5Oh/xp//fnfcOszVP6STo/+P3ffeyn/3+ySF8/QP6eTo/+YNqx+NW4fz9Q/p5Oh/5YyeC+LWYZ7+IZ0c/R8+et+P4tZhvv4hnRz9333nkivi1uFN+od0cvT/g1vP645bhzfrH9LJ0f/LtXfcGrcOC/QP6eTo/8s/q1kWtw4L9Q/p5Oj/xw99f1fcOrxF/5BOjv5ffN9j58StwwX6h3Ry9L/74llfjFuHt+of0snR/7uf2bg+bh0W6R/SydH/5L2/Pxq3DvX6h3Ry9D9/1cEPxa3DhfqHdHL0v2HRmt/FrcNi/UM6Ofp/5sDTh+LWYYn+IZ0c/e947NPNcevQoH9IJ0f/j1/W8Z+4dWjUP6STo/9/Nv3k43HrsFT/kE6O/s889O0vxK1Dk/4hnRz9X/3g5Jlx63CR/iGdHP1vvGb29+LWYZn+IZ0c/V8y96FL49bhbfqHdHL0/56/rrg5bh0u1j+kk6P/unvueS5uHZbrH9LJ0f+8a2+/Jm4dLtE/pJOj/+vn1D8Ztw6X6h/SydH/HcdbFsStwwr9Qzo5+u+67fl9ceuwUv+QTo7+uz/5cl3cOrxd/5BOjv73Trny3rh1eIf+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDmQAAAAAhPlb59F+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwIAAP//r0PLXg==")
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0x60)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000000)={@id={0x2, 0x0, @d}})
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

8m31.494797621s ago: executing program 1 (id=560):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
mmap(&(0x7f000001c000/0x3000)=nil, 0x3000, 0x5, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

8m31.242482933s ago: executing program 1 (id=563):
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
renameat(r4, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r4, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00')
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
close(0x3)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0x60000000})

8m30.993046297s ago: executing program 33 (id=563):
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
renameat(r4, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r4, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00')
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
close(0x3)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0x60000000})

8m13.648351343s ago: executing program 0 (id=713):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0xc1, 0x4, 0x1, 0x3, 0x5, 0xfffffff8, 0x1000, 0x9, 0x5, 0x6, 0x80000001, 0xfffffffa, 0x0, 0xfffffffe, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0x1000b, 0x40, 0xbed4, 0x8, 0x8000100, 0x6, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0x9, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x9, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x1, 0x3, 0x0, 0x10000, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x40000002, 0xfffffffe, 0x84, 0x100, 0x5, 0xffff, 0x81, 0xb, 0x5, 0x20006, 0x9, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x0, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x0, 0xc5c, 0xffffffff]}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf251b00000008009a"], 0x24}}, 0x40004)

8m13.647970531s ago: executing program 0 (id=714):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x4000000, 0x81, 0xfffffdff, 0x10})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = fanotify_init(0x200, 0x0)
fanotify_mark(r0, 0x39, 0x1a, 0xffffffffffffffff, 0x0)

8m13.571076397s ago: executing program 0 (id=715):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = fanotify_init(0x200, 0x0)
r2 = dup(r0)
fanotify_mark(r1, 0x1, 0x48001059, r2, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r3, r4, 0x0, 0xc19)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x64000814)

8m13.489255654s ago: executing program 0 (id=716):
syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000200)='./file0\x00', 0x2, &(0x7f0000000400)=ANY=[], 0x1, 0x1f8, &(0x7f0000000900)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

8m13.410610846s ago: executing program 0 (id=717):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x12000)

8m13.120185257s ago: executing program 0 (id=718):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x26e1, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x479, 0x6)

8m12.966295981s ago: executing program 34 (id=718):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x26e1, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x479, 0x6)

8m8.019689756s ago: executing program 4 (id=762):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x9}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

8m7.967262362s ago: executing program 4 (id=763):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

8m7.850173461s ago: executing program 4 (id=764):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0x2, 0x100, 0x0, 0x401, 0x9, 0x80, 0xef, 0x2, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x0)

8m7.7598876s ago: executing program 4 (id=765):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@nouid32}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
fallocate(r2, 0x0, 0x3, 0x800000)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8m7.368748149s ago: executing program 4 (id=766):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000600)=0x9)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x100, 0x2, 0x8, 0x3ff, 0x7, "030000ff002fd07ac4c867b6dcd7af9745290e", 0x8010001, 0xc6a})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff)

8m7.079564119s ago: executing program 4 (id=767):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x20, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

8m6.96578749s ago: executing program 35 (id=767):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x20, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

7m35.195056495s ago: executing program 6 (id=1075):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000002}, 0x18)
bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0x8000000000000002, {0x0, 0xf0, 0x4}}, 0x18)

7m35.125410265s ago: executing program 6 (id=1076):
futex(&(0x7f0000000000)=0x1, 0x10d, 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000000), 0x0)

7m34.240678848s ago: executing program 6 (id=1082):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000000040500"], 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x4004080)

7m34.128894722s ago: executing program 6 (id=1083):
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r4, 0x40086602, &(0x7f0000000000))
chdir(&(0x7f00000001c0)='./bus\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x3c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0xfc, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xa, 0x2, 0x0, 0x1, [@generic="97f0972655b2"]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82)

7m33.249180473s ago: executing program 6 (id=1085):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

7m33.165332658s ago: executing program 6 (id=1086):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

7m17.915805905s ago: executing program 36 (id=1086):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

7m1.266624845s ago: executing program 3 (id=1470):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x6, 0xfffffffffffffffc, &(0x7f0000000000)=0x5e)

7m1.19239437s ago: executing program 3 (id=1472):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)

7m1.12265548s ago: executing program 3 (id=1475):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_ep_read(r0, 0x81, 0x0, 0x0)

6m59.84193719s ago: executing program 3 (id=1485):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000840)={[{@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0xffd}}, {@nolazytime}, {@jqfmt_vfsold}, {@errors_remount}, {@minixdf}, {@errors_remount}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
truncate(&(0x7f0000000180)='./file0/file1\x00', 0x73d)

6m59.612077737s ago: executing program 3 (id=1492):
r0 = io_uring_setup(0x37b0, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x400022a})
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1)

6m58.617571477s ago: executing program 3 (id=1500):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000004000000711069000000000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6m58.42110406s ago: executing program 37 (id=1500):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000004000000711069000000000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6m5.735684262s ago: executing program 8 (id=2173):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x1, 0xfa00, {0x800, 0x0, 0x13f, 0xa}}, 0x20)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b"], 0xec)

6m5.686323143s ago: executing program 8 (id=2175):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0x5, 0x8, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x66, 0x0, 0xf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}})

6m5.686045335s ago: executing program 8 (id=2177):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc, 0x0, 0xd0})

6m5.583957071s ago: executing program 8 (id=2178):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x557, &(0x7f0000000280)="$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")
lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2901003, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

6m5.51194305s ago: executing program 8 (id=2181):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c)
setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc)

6m5.135946771s ago: executing program 8 (id=2187):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x70bd2c, 0x25dfdc02, {0xa, 0x0, 0x2, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004054}, 0x4002)

6m4.993296255s ago: executing program 38 (id=2187):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x70bd2c, 0x25dfdc02, {0xa, 0x0, 0x2, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004054}, 0x4002)

3m13.464437097s ago: executing program 9 (id=4528):
r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000004c0)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "cb2002a812892cf6951cabf56e83f5f39e7c2ceb2dd7808e11c4d69d898ec301995fa122bf89b94a965ca43ad5e2a98300d7da6e41f97559dff78345f5590aef", 0x32}, 0x48, r0)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x1)

3m13.344675478s ago: executing program 9 (id=4530):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc39, &(0x7f0000001040)="$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")
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0)
dup3(r1, r0, 0x0)
io_setup(0x2, &(0x7f0000000400)=<r2=>0x0)
io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}])

3m13.136401391s ago: executing program 9 (id=4537):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791018000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)

3m13.04958168s ago: executing program 9 (id=4540):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x201000a, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0x6, 0xc36, &(0x7f0000002540)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x810000, &(0x7f0000000f40)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@noadinicb}, {@adinicb}, {@uid_forget}, {@uid_forget}, {@umask={'umask', 0x3d, 0x2}}, {@longad}, {@bs={'bs', 0x3d, 0x3e8}}, {@nostrict}]}, 0xfe, 0xc32, &(0x7f0000000fc0)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0x0)

3m12.922242189s ago: executing program 9 (id=4543):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x19)

3m12.684994022s ago: executing program 9 (id=4549):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)

3m12.554994066s ago: executing program 39 (id=4549):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)

909.390049ms ago: executing program 2 (id=7465):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r0}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)

857.082693ms ago: executing program 2 (id=7468):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000300)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200040001c00364d76a970f0e5d8d41f5e8254f5f2d6db75117389da66cb7499085c0bccb9dfdeca656773e31d042d27053", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810)

809.27ms ago: executing program 2 (id=7471):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10)

777.391727ms ago: executing program 5 (id=7473):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)

777.202821ms ago: executing program 2 (id=7474):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, &(0x7f0000001cc0)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}, 0x0, 0x14})

709.7572ms ago: executing program 5 (id=7476):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)={0x20, r1, 0x1d, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

709.420904ms ago: executing program 5 (id=7478):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401390000000000000000000083ff0500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x4, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8c4}, 0x800)
close_range(r0, 0xffffffffffffffff, 0x0)

709.151701ms ago: executing program 2 (id=7479):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

637.72561ms ago: executing program 5 (id=7481):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34008005}, 0x4000050)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504"], 0x0)

329.730549ms ago: executing program 7 (id=7490):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0)

329.371616ms ago: executing program 7 (id=7491):
syz_mount_image$erofs(&(0x7f0000000680), &(0x7f0000000200)='./file0\x00', 0x814410, &(0x7f0000000640)=ANY=[@ANYRES16=0x0], 0x1, 0x1fe, &(0x7f00000002c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)

269.694115ms ago: executing program 7 (id=7492):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5)
r1 = dup(r0)
ioctl$SIOCSIFHWADDR(r1, 0x8926, 0x0)

269.415135ms ago: executing program 7 (id=7493):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
set_mempolicy_home_node(&(0x7f0000148000/0x4000)=nil, 0x4000, 0x2, 0x0)

178.923584ms ago: executing program 7 (id=7494):
r0 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="b2", 0x1}], 0x1}, 0x1000000}], 0x2, 0x4004040)

178.601377ms ago: executing program 7 (id=7495):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

178.13658ms ago: executing program 2 (id=7496):
socket$nl_generic(0x10, 0x3, 0x10)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f0000000440), 0x1, 0x55ae, &(0x7f0000005600)="$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")
syz_mount_image$cramfs(&(0x7f0000000200), &(0x7f00000001c0)='./file1\x00', 0x2000480, &(0x7f0000000040)=ANY=[], 0x1, 0x15d, &(0x7f0000000240)="$eJzszk2rElEYwPH/aUztRSQosCAT2gyJaRO2C3IiQcgGCjetAh3BMIwkcpVKtGvX1kUv0Er8Cpa1sRTCtn2Au3Etl8vlXM6duYv78hGe327+55nnnAd3lzYZeJtk3/3Oi5ev/G7Xb2Qee9Xyk63ptGR6FNiE57taa79hap/vJXj+/3Xw8xBM/pmAZqvt36x32uZ7XQIbcM9xr3kmGOUCnDXtYjB7y8wNwb4Os0tBc05ot8N2JQJuMmgFQH8mbta6MaDV9mPhNb3Rttb60WJeyd34dtXifSV77XR4Nv4d9LT/wSlf/no+ZVHzf33BVRr4l5/n/uYn49VyUX3oDQHHuaNgUCiuvD+LSnGgte6bPU8VKLKTg31RUulIDd4p+KjMG9Y/VAKYfdp4O1rr8P74GysDqjeqP7PCZNkojjp1rAghhBBCCCGEEEIIIYQQQgghhBCH7QUAAP//K6tlcQ==")
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0xa, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x800000000005, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x8}}}, 0xa0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000240))
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000eaa80)={0x0, 0x0, "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", "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"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00', 0x5})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0xfffffffe, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056)
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x54, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x41}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8, 0x5}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xf09}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1000}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008810}, 0x4000084)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendfile(r0, r0, &(0x7f0000000080), 0x7f03)
socket(0x23, 0x800, 0x7)

89.693692ms ago: executing program 5 (id=7497):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0xe5}], 0x1, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

0s ago: executing program 5 (id=7498):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48)
r0 = socket$alg(0x26, 0x5, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES16=r0], 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

, running e2fsck is recommended
[  375.136560][T14985] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  375.152995][T14985] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[  375.160295][T14985] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  375.174364][T14985] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.198855][T14985] fscrypt (loop9, inode 12): Error -61 getting encryption context
[  375.249690][T11657] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.380167][T15000] program syz.7.3594 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  375.437201][T15004] loop9: detected capacity change from 0 to 2048
[  375.473982][T15004] NILFS (loop9): invalid segment: Inconsistency found
[  375.476459][T15004] NILFS (loop9): trying rollback from an earlier position
[  375.717854][T15004] NILFS (loop9): recovery complete
[  375.722631][T15009] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  376.286123][T15020] loop7: detected capacity change from 0 to 1024
[  376.648456][T15035] loop7: detected capacity change from 0 to 1024
[  376.902136][T15041] xt_l2tp: wrong L2TP version: 1
[  377.114934][T15049] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  377.342211][T15053] loop9: detected capacity change from 0 to 2048
[  377.362627][T15056] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  377.450904][T15056] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  377.458548][T15056] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4)
[  377.467023][T15056] Remounting filesystem read-only
[  377.470161][T11657] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer
[  377.597061][T15069] loop9: detected capacity change from 0 to 4096
[  377.599979][T15069] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[  377.602943][T15069] ntfs3(loop9): ino=3, mi_enum_attr
[  377.830240][T15082] loop7: detected capacity change from 0 to 512
[  378.098740][T10019] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  378.139570][   T24] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  378.265289][T10019] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  378.270762][T10019] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  378.274557][T10019] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  378.278021][T10019] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.302559][T15085] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  378.308898][   T24] usb 8-1: Using ep0 maxpacket: 8
[  378.315064][T10019] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  378.318752][   T24] usb 8-1: config 0 has an invalid interface number: 229 but max is 0
[  378.322965][   T24] usb 8-1: config 0 has no interface number 0
[  378.328049][   T24] usb 8-1: New USB device found, idVendor=0830, idProduct=0003, bcdDevice=9a.68
[  378.336043][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.336192][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  378.351509][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.354673][   T24] usb 8-1: Product: syz
[  378.356313][   T24] usb 8-1: Manufacturer: syz
[  378.358089][   T24] usb 8-1: SerialNumber: syz
[  378.385626][   T24] usb 8-1: config 0 descriptor??
[  378.392833][   T24] usb 8-1: active config #0 != 1 ??
[  378.522809][T15080] syz_tun: entered allmulticast mode
[  378.603152][   T24] usb 8-1: USB disconnect, device number 26
[  379.214621][T15125] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only
[  379.221027][T15125] overlayfs: failed to set uuid (/file1, err=-28); falling back to uuid=null.
[  379.919442][   T24] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  380.069313][   T24] usb 8-1: Using ep0 maxpacket: 16
[  380.074852][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  380.082476][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  380.086544][   T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  380.098920][   T24] usb 8-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  380.102837][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.108931][   T24] usb 8-1: Product: syz
[  380.111373][   T24] usb 8-1: Manufacturer: syz
[  380.113436][   T24] usb 8-1: SerialNumber: syz
[  380.118188][   T24] usb 8-1: config 0 descriptor??
[  380.124526][   T24] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  380.127335][   T24] gspca_stv06xx: st6422 sensor detected
[  380.389216][   T24] STV06xx 8-1:0.0: probe with driver STV06xx failed with error -71
[  380.394414][   T24] usb 8-1: USB disconnect, device number 27
[  380.898152][ T6275] usb 10-1: USB disconnect, device number 14
[  381.510213][T15181] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  381.512329][T15181] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  381.515576][T15181] vhci_hcd vhci_hcd.0: Device attached
[  381.523855][T15181] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(8)
[  381.525973][T15181] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  381.530994][T15181] vhci_hcd vhci_hcd.0: Device attached
[  381.533962][T15181] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  381.543114][T15189] loop7: detected capacity change from 0 to 1024
[  381.552422][T15187] vhci_hcd: connection closed
[  381.552836][T15184] vhci_hcd: connection closed
[  381.555362][   T13] vhci_hcd: stop threads
[  381.558810][   T13] vhci_hcd: release socket
[  381.560224][   T13] vhci_hcd: disconnect device
[  381.563076][   T13] vhci_hcd: stop threads
[  381.564513][   T13] vhci_hcd: release socket
[  381.566112][   T13] vhci_hcd: disconnect device
[  381.686259][T15201] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3682'.
[  381.814213][T15212] loop7: detected capacity change from 0 to 1024
[  381.874154][T15218] loop7: detected capacity change from 0 to 256
[  382.016277][T15231] netlink: 372 bytes leftover after parsing attributes in process `syz.5.3696'.
[  382.229656][T15252] netlink: 'syz.5.3705': attribute type 29 has an invalid length.
[  382.233659][T15252] netlink: 'syz.5.3705': attribute type 29 has an invalid length.
[  382.240527][T15252] netlink: 'syz.5.3705': attribute type 29 has an invalid length.
[  382.403406][T15267] netlink: 'syz.5.3712': attribute type 1 has an invalid length.
[  382.405916][T15267] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.430204][T15269] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  382.846422][    T9] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  383.012964][    T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  383.021577][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  383.025839][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  383.039993][    T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  383.045208][    T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  383.049197][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.054463][    T9] usb 8-1: config 0 descriptor??
[  383.163547][T15280] loop9: detected capacity change from 0 to 32768
[  383.170628][T15280] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3718 (15280)
[  383.176992][T15280] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  383.180260][T15280] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  383.252571][T15280] BTRFS info (device loop9): enabling ssd optimizations
[  383.255393][T15280] BTRFS info (device loop9): enabling free space tree
[  383.284116][T11657] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  383.467899][    T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  383.475031][    T9] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  383.594589][T15313] loop9: detected capacity change from 0 to 512
[  383.624801][T15313] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.630380][T15313] ext4 filesystem being mounted at /421/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  383.692872][T11657] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.728263][   T24] usb 8-1: USB disconnect, device number 28
[  383.789737][T15323] loop9: detected capacity change from 0 to 512
[  383.810891][T15323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.816261][T15323] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  383.832772][   T33] audit: type=1800 audit(1758565978.211:178): pid=15323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3730" name="bus" dev="loop9" ino=18 res=0 errno=0
[  383.883676][T11657] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.284718][   T33] audit: type=1326 audit(1758565978.661:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.5.3741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  384.297642][   T33] audit: type=1326 audit(1758565978.661:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.5.3741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  384.307128][   T33] audit: type=1326 audit(1758565978.681:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.5.3741" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  384.315212][   T33] audit: type=1326 audit(1758565978.681:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.5.3741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  384.326521][   T33] audit: type=1326 audit(1758565978.681:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.5.3741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  384.334391][   T33] audit: type=1326 audit(1758565978.691:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.5.3741" exe="/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  384.353285][   T33] audit: type=1326 audit(1758565978.691:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.5.3741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  384.362766][   T33] audit: type=1326 audit(1758565978.691:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.5.3741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  384.370102][T15353] 9pnet_fd: Insufficient options for proto=fd
[  384.469336][T15360] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3748'.
[  385.254864][T15393] netlink: 'syz.5.3762': attribute type 2 has an invalid length.
[  385.371880][T15397] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  385.382048][T15399] tc_dump_action: action bad kind
[  385.425776][    T9] usb 10-1: new full-speed USB device number 15 using dummy_hcd
[  385.470934][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3769'.
[  385.512298][T15410] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3770'.
[  385.558215][T15415] netlink: 'syz.7.3773': attribute type 1 has an invalid length.
[  385.561485][T15415] netlink: 'syz.7.3773': attribute type 1 has an invalid length.
[  385.565065][T15415] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3773'.
[  385.588152][    T9] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  385.595840][    T9] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  385.607989][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.627535][    T9] aiptek 10-1:17.0: interface has no int in endpoints, but must have minimum 1
[  385.643859][T15423] Bluetooth: hci0: invalid length 0, exp 2 for type 21
[  385.787143][   T24] IPVS: starting estimator thread 0...
[  385.827011][    T9] usb 10-1: USB disconnect, device number 15
[  385.874749][T15432] IPVS: using max 42 ests per chain, 100800 per kthread
[  386.371744][T15445] loop9: detected capacity change from 0 to 16
[  386.377478][T15445] erofs (device loop9): mounted with root inode @ nid 36.
[  388.040918][T15488] loop9: detected capacity change from 0 to 128
[  388.053839][T15488] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  388.179295][T15496] loop9: detected capacity change from 0 to 128
[  388.187994][T15496] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  388.193097][T15496] hpfs: filesystem error: improperly stopped
[  388.197176][T15496] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  388.200032][T15496] hpfs: You really don't want any checks? You are crazy...
[  388.203015][T15496] hpfs: hpfs_map_sector(): read error
[  388.205119][T15496] hpfs: code page support is disabled
[  388.208939][T15496] hpfs: hpfs_map_4sectors(): unaligned read
[  388.211570][T15496] hpfs: hpfs_map_4sectors(): unaligned read
[  388.214663][T15496] hpfs: filesystem error: unable to find root dir
[  388.291432][T15500] loop9: detected capacity change from 0 to 512
[  388.308048][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3814'.
[  388.320534][   T12] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  388.320541][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3814'.
[  388.328462][   T12] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  388.331115][T15500] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.331893][   T12] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  388.339571][   T12] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  388.339688][T15500] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  388.365219][T15500] EXT4-fs (loop9): resizing filesystem from 128 to 1 blocks
[  388.368086][T15500] EXT4-fs warning (device loop9): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  388.400317][T11657] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.417853][   T24] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  388.738761][   T24] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  388.742306][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.745618][   T24] usb 8-1: Product: syz
[  388.747222][   T24] usb 8-1: Manufacturer: syz
[  388.749052][   T24] usb 8-1: SerialNumber: syz
[  388.756248][   T24] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  389.080929][T10019] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  389.269580][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3827'.
[  389.277631][    C1] mroute: pending queue full, dropping entries
[  389.667523][T15558] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  389.667523][T15558] The task syz.9.3834 (15558) triggered the difference, watch for misbehavior.
[  389.710631][   T24] usb 8-1: USB disconnect, device number 29
[  390.319588][T10019] usb 8-1: Service connection timeout for: 256
[  390.322704][T10019] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services
[  390.327074][T10019] ath9k_htc: Failed to initialize the device
[  390.337033][   T24] usb 8-1: ath9k_htc: USB layer deinitialized
[  390.852479][T15613] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  390.854783][T15613] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  390.857225][T15613] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  390.859619][T15613] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  390.861690][T15613] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  390.864598][T15613] comedi comedi3: 8255: I/O port conflict (0xe,4)
[  390.867107][T15613] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  390.869480][T15615] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3861'.
[  390.872357][T15613] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  390.874382][T15613] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  390.876763][T15613] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  390.879228][T15613] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  390.881407][T15613] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  390.884671][T15613] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  390.888440][T15613] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  390.891222][T15613] comedi comedi3: 8255: I/O port conflict (0xa,4)
[  390.893938][T15613] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4)
[  391.111074][T15638] loop9: detected capacity change from 0 to 164
[  391.120658][T15638] rock: corrupted directory entry. extent=32, offset=131072, size=237
[  391.124176][T15638] isofs_fill_super: root inode is not a directory. Corrupted media?
[  391.211079][T15643] loop7: detected capacity change from 0 to 4096
[  391.295813][T15650] loop9: detected capacity change from 0 to 1024
[  391.299148][T15650] EXT4-fs: Ignoring removed orlov option
[  391.321400][T15650] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  391.379170][T11657] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.625950][T15669] netlink: 'syz.9.3887': attribute type 6 has an invalid length.
[  391.628958][T15669] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3887'.
[  391.721861][ T6275] usb 8-1: new full-speed USB device number 30 using dummy_hcd
[  391.740696][T15677] syzkaller1: entered promiscuous mode
[  391.745993][T15677] syzkaller1: entered allmulticast mode
[  391.887648][ T6275] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.899185][ T6275] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  391.906238][ T6275] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.940733][ T6275] usb 8-1: Product: syz
[  391.942560][ T6275] usb 8-1: Manufacturer: syz
[  391.944415][ T6275] usb 8-1: SerialNumber: syz
[  391.948530][ T6275] usb 8-1: config 0 descriptor??
[  391.955632][ T6275] usb 8-1: ucan: probing device on interface #0
[  391.963868][ T6275] usb 8-1: ucan: invalid EP count (0)
[  391.966004][ T6275] usb 8-1: ucan: probe failed; try to update the device firmware
[  392.227497][   T24] usb 8-1: USB disconnect, device number 30
[  393.748941][T15709] loop9: detected capacity change from 0 to 1024
[  393.806514][T15711] loop7: detected capacity change from 0 to 1024
[  393.877475][T15714] loop7: detected capacity change from 0 to 1024
[  393.880522][T15714] EXT4-fs: Ignoring removed orlov option
[  393.895663][T15714] loop7: detected capacity change from 0 to 512
[  393.901639][T15714] EXT4-fs: Ignoring removed orlov option
[  393.913449][T15714] EXT4-fs (loop7): unable to read superblock
[  393.977046][T15720] veth0: entered promiscuous mode
[  393.988360][T15719] veth0: left promiscuous mode
[  394.062749][T15726] mkiss: ax0: crc mode is auto.
[  394.149093][T15726] Falling back ldisc for ttyS3.
[  394.253414][T15734] netlink: 'syz.9.3916': attribute type 4 has an invalid length.
[  394.256548][T15734] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3916'.
[  394.303669][T15734] .`: renamed from bond0 (while UP)
[  394.620441][ T6275] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  394.770369][ T6275] usb 8-1: Using ep0 maxpacket: 16
[  394.775216][ T6275] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  394.780554][ T6275] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  394.787090][ T6275] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  394.790717][ T6275] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.793881][ T6275] usb 8-1: Product: syz
[  394.795677][ T6275] usb 8-1: Manufacturer: syz
[  394.797572][ T6275] usb 8-1: SerialNumber: syz
[  395.013757][ T6275] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  395.038104][ T6275] usb 8-1: USB disconnect, device number 31
[  395.122214][T15755] netlink: 'syz.9.3926': attribute type 2 has an invalid length.
[  395.125227][T15755] netlink: 'syz.9.3926': attribute type 8 has an invalid length.
[  395.127987][T15755] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3926'.
[  395.749790][T15705] Bluetooth: hci0: command 0x0406 tx timeout
[  396.238623][T15822] 9pnet: Found fid 0 not clunked
[  397.350105][T15854] loop7: detected capacity change from 0 to 32768
[  397.365365][T15854] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3971 (15854)
[  397.379238][T15854] BTRFS error: failed to open device for path /dev/loop7 with flags 0x23: -13
[  397.662367][T15867] loop9: detected capacity change from 0 to 4096
[  397.669579][T15867] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[  397.694059][T15867] ntfs3(loop9): ino=1a, mi_enum_attr
[  397.696169][T15867] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  397.716035][   T33] audit: type=1800 audit(1758565992.098:187): pid=15867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3979" name="file2" dev="loop9" ino=31 res=0 errno=0
[  397.845319][T15881] loop9: detected capacity change from 0 to 1024
[  397.848381][T15881] EXT4-fs: Ignoring removed nomblk_io_submit option
[  397.871492][T15881] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102]
[  397.875353][T15881] System zones: 0-1, 3-12
[  397.884085][T15881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  398.427531][T15888] loop7: detected capacity change from 0 to 32768
[  398.432216][T15888] bcachefs (/dev/loop7): error reading superblock: error opening /dev/loop7: EACCES
[  398.436040][T15888] bcachefs: bch2_fs_get_tree() error: EACCES
[  398.532031][T15888] overlayfs: overlapping lowerdir path
[  398.723167][T11657] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.751387][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3993'.
[  398.923022][T15900] loop7: detected capacity change from 0 to 32768
[  398.925878][T15900] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3992 (15900)
[  398.937168][T15900] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  398.941319][T15900] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  398.990653][T15924] loop9: detected capacity change from 0 to 1024
[  399.004371][T15924] hfsplus: failed to load root directory
[  399.051113][T15900] BTRFS info (device loop7): enabling ssd optimizations
[  399.053894][T15900] BTRFS info (device loop7): enabling free space tree
[  399.076306][T15934] loop9: detected capacity change from 0 to 256
[  399.081738][T15934] exfat: Deprecated parameter 'utf8'
[  399.101039][T15934] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  399.106494][ T9399] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  399.184253][   T33] audit: type=1800 audit(1758565993.569:188): pid=15934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4001" name="vfat" dev="loop9" ino=1048682 res=0 errno=0
[  399.493662][T15955] netlink: 'syz.7.4011': attribute type 4 has an invalid length.
[  399.652710][T15949] loop9: detected capacity change from 0 to 32768
[  399.691276][T15949] XFS (loop9): DAX unsupported by block device. Turning off DAX.
[  399.694933][T15949] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  399.717512][T15949] XFS (loop9): Ending clean mount
[  399.724443][T15949] XFS (loop9): Quotacheck needed: Please wait.
[  399.753382][T15949] XFS (loop9): Quotacheck: Done.
[  399.814043][T11657] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  399.940118][T15977] gfs2: path_lookup on tmpfs returned error -2
[  399.999971][T15979] loop7: detected capacity change from 0 to 512
[  400.088594][T15988] overlayfs: failed to clone upperpath
[  400.195654][T15998] CIFS: VFS: Malformed UNC in devname
[  400.277932][ T6265] usb 10-1: new full-speed USB device number 16 using dummy_hcd
[  400.315616][T16008] overlayfs: failed to clone upperpath
[  400.431295][ T6265] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  400.434739][ T6265] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.448803][ T6265] usb 10-1: config 0 descriptor??
[  400.451929][ T6265] cp210x 10-1:0.0: cp210x converter detected
[  400.752150][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4035'.
[  400.773629][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4035'.
[  400.909370][ T6265] usb 10-1: cp210x converter now attached to ttyUSB0
[  401.034976][T16029] loop7: detected capacity change from 0 to 8
[  401.102526][ T6265] usb 10-1: USB disconnect, device number 16
[  401.108923][ T6265] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  401.114920][ T6265] cp210x 10-1:0.0: device disconnected
[  403.028131][T16089] overlayfs: failed to clone upperpath
[  403.345512][T16095] loop7: detected capacity change from 0 to 4096
[  403.623162][   T54] Bluetooth: hci1: unexpected event for opcode 0x202f
[  403.707258][ T6265] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  403.865904][ T6265] usb 8-1: Using ep0 maxpacket: 16
[  403.872085][ T6265] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  403.876768][ T6265] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  403.880851][ T6265] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  403.887331][ T6265] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  403.890928][ T6265] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.898102][ T6265] usb 8-1: config 0 descriptor??
[  403.916651][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  404.261671][T16122] autofs: Unknown parameter 'fd0x0000000000000000'
[  404.455615][ T6265] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max
[  404.461650][ T6265] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  404.464613][ T6265] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  404.467871][ T6265] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  404.470798][ T6265] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  404.473812][ T6265] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  404.476928][ T6265] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  404.479834][ T6265] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  404.482741][ T6265] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  404.486662][ T6265] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  404.489754][ T6265] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  404.574422][ T6265] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  404.578910][ T6265] microsoft 0003:045E:07DA.000E: no inputs found
[  404.580935][ T6265] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway
[  404.779265][   T24] usb 8-1: USB disconnect, device number 32
[  405.314632][T16134] loop9: detected capacity change from 0 to 32768
[  405.334280][T16136] sch_fq: defrate 0 ignored.
[  405.382456][T16138] loop7: detected capacity change from 0 to 8
[  405.387274][T16138] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  405.388015][T16134] ialloc: diAlloc returned -5!
[  405.652227][T16148] loop9: detected capacity change from 0 to 32768
[  405.681681][T16158] loop7: detected capacity change from 0 to 1024
[  405.739146][T16160] netlink: 'syz.7.4101': attribute type 1 has an invalid length.
[  405.741757][T16160] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4101'.
[  406.171555][T16177] loop9: detected capacity change from 0 to 2048
[  406.182772][T16177] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[  406.187420][T16177] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  406.329173][   T54] Bluetooth: hci1: unexpected event for opcode 0x2035
[  406.353752][T16193] loop9: detected capacity change from 0 to 256
[  406.356945][T16193] exfat: Deprecated parameter 'utf8'
[  406.358675][T16193] exfat: Deprecated parameter 'namecase'
[  406.364180][T16193] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  406.722292][T16203] loop9: detected capacity change from 0 to 32768
[  406.737284][T16203] (syz.9.4121,16203,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  406.740912][T16203] (syz.9.4121,16203,0):ocfs2_read_locked_inode:597 ERROR: status = -12
[  406.745377][T16203] (syz.9.4121,16203,0):_ocfs2_get_system_file_inode:144 ERROR: status = -12
[  406.745408][T16206] loop7: detected capacity change from 0 to 1024
[  406.749076][T16203] (syz.9.4121,16203,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=8, slot=0
[  406.758467][T16203] (syz.9.4121,16203,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  406.761979][T16203] (syz.9.4121,16203,0):ocfs2_mount_volume:1758 ERROR: status = -22
[  406.783636][T16203] (syz.9.4121,16203,0):ocfs2_fill_super:1177 ERROR: status = -22
[  407.264030][    T9] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  407.607450][T16230] loop7: detected capacity change from 0 to 1024
[  407.610847][T16230] EXT4-fs: Ignoring removed oldalloc option
[  407.648357][    T9] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  407.652828][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.657864][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  407.662368][    T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  407.674126][    T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  407.678330][    T9] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  407.681484][    T9] usb 10-1: Manufacturer: syz
[  407.686934][    T9] usb 10-1: config 0 descriptor??
[  408.073774][ T6265] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  408.109329][    T9] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0
[  408.224230][ T6265] usb 8-1: Using ep0 maxpacket: 16
[  408.228627][ T6265] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  408.233335][ T6265] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  408.240482][ T6265] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  408.244417][ T6265] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.247662][ T6265] usb 8-1: Product: syz
[  408.249508][ T6265] usb 8-1: Manufacturer: syz
[  408.251370][ T6265] usb 8-1: SerialNumber: syz
[  408.255916][ T6265] usb 8-1: config 0 descriptor??
[  408.261181][ T6265] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  408.265117][ T6265] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[  408.541008][T16246] batadv_slave_1: entered promiscuous mode
[  408.549438][T16245] batadv_slave_1: left promiscuous mode
[  408.865647][ T6265] em28xx 8-1:0.0: chip ID is em2882/3
[  408.921698][   T24] usb 10-1: USB disconnect, device number 17
[  409.066310][ T6265] em28xx 8-1:0.0: Config register raw data: 0xfffffffb
[  409.069654][ T6265] em28xx 8-1:0.0: AC97 chip type couldn't be determined
[  409.072339][ T6265] em28xx 8-1:0.0: No AC97 audio processor
[  409.080756][ T6265] usb 8-1: USB disconnect, device number 33
[  409.085164][ T6265] em28xx 8-1:0.0: Disconnecting em28xx
[  409.088327][ T6265] em28xx 8-1:0.0: Freeing device
[  409.798757][   T33] audit: type=1400 audit(1758566004.164:189): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_sw/" pid=16271 comm="syz.9.4153"
[  409.872847][T10019] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  410.084909][T10019] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  410.091556][T10019] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  410.097392][T10019] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  410.102570][T10019] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.109415][T10019] usb 8-1: config 0 descriptor??
[  410.382589][   T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  410.386596][   T54] Bluetooth: hci1: Injecting HCI hardware error event
[  410.395065][   T54] Bluetooth: hci1: hardware error 0x00
[  410.463564][T10019] ath6kl: Failed to submit usb control message: -71
[  410.466189][T10019] ath6kl: unable to send the bmi data to the device: -71
[  410.468868][T10019] ath6kl: Unable to send get target info: -71
[  410.484889][T10019] ath6kl: Failed to init ath6kl core: -71
[  410.488110][T10019] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71
[  410.504537][T10019] usb 8-1: USB disconnect, device number 34
[  410.685278][T16289] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4159'.
[  410.786942][T16295] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4162'.
[  410.790528][T16295] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  411.896204][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4175'.
[  412.545914][   T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  413.401275][T10019] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  413.551818][T10019] usb 8-1: Using ep0 maxpacket: 32
[  413.556409][T10019] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  413.563251][T10019] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  413.567161][T10019] usb 8-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00
[  413.570660][T10019] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.576081][T10019] usb 8-1: config 0 descriptor??
[  414.232402][T10019] hid_parser_main: 1 callbacks suppressed
[  414.232415][T10019] logitech-hidpp-device 0003:046D:C082.0010: unknown main item tag 0x0
[  414.238049][T10019] logitech-hidpp-device 0003:046D:C082.0010: item fetching failed at offset 4/5
[  414.247922][T10019] logitech-hidpp-device 0003:046D:C082.0010: hidpp_probe:parse failed
[  414.251409][T10019] logitech-hidpp-device 0003:046D:C082.0010: probe with driver logitech-hidpp-device failed with error -22
[  414.452236][T10019] usb 8-1: USB disconnect, device number 35
[  415.242714][T16403] loop7: detected capacity change from 0 to 1024
[  415.264334][T16403] netlink: 'syz.7.4209': attribute type 4 has an invalid length.
[  416.041722][T16419] loop7: detected capacity change from 0 to 2048
[  416.379084][T16428] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4219'.
[  417.335443][T16485] loop7: detected capacity change from 0 to 32768
[  417.346591][T16485] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4230 (16485)
[  417.357566][T16485] BTRFS error: failed to open device for path /dev/loop7 with flags 0x23: -13
[  417.955600][T16485] loop7: detected capacity change from 0 to 4096
[  417.970147][T16485] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  418.021300][T16485] ntfs3(loop7): Failed to load $UpCase (-22).
[  418.105025][T16485] loop7: detected capacity change from 0 to 128
[  418.588158][T16504] loop9: detected capacity change from 0 to 2048
[  418.606016][T16504] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  418.673220][T16508] IPVS: Scheduler module ip_vs_sip not found
[  418.676774][T16508] IPVS: length: 24 != 1272
[  418.945434][T16531] netlink: 'syz.9.4252': attribute type 1 has an invalid length.
[  418.951340][T16531] netlink: 'syz.9.4252': attribute type 11 has an invalid length.
[  418.954553][T16531] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4252'.
[  420.562241][T16567] loop7: detected capacity change from 0 to 1024
[  420.609388][T16567] loop7: detected capacity change from 0 to 16
[  420.614237][T16567] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  420.625703][T16568] loop9: detected capacity change from 0 to 4096
[  420.641504][T16568] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[  420.729333][T16568] ntfs3(loop9): ino=1a, mi_enum_attr
[  420.731114][T16568] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  420.743383][T16568] ntfs3(loop9): ino=1a, mi_enum_attr
[  420.746073][T16568] ntfs3(loop9): Failed to initialize $Extend/$Reparse.
[  421.049810][ T6160] tipc: Subscription rejected, illegal request
[  421.614378][T16591] loop9: detected capacity change from 0 to 32768
[  421.655129][T16591] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=snapshots_read,nojournal_transaction_names,noexcl,read_only,no_data_io
[  421.655151][T16591]   allowing incompatible features above 0.0: (unknown version)
[  421.655160][T16591]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  421.672624][T16591] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0
[  421.676169][T16591] bcachefs (loop9): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing
[  421.681393][T16591] bcachefs (loop9): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: no devices in entry free: 0/0 [], fixing
[  421.688143][T16591] bcachefs (loop9): recovering from clean shutdown, journal seq 10
[  421.691468][T16591] bcachefs (loop9): Version upgrade required:
[  421.691468][T16591] Version upgrade from 0.27: fragmentation_lru to 1.7: mi_btree_bitmap incomplete
[  421.691468][T16591] Doing incompatible version upgrade from 0.27: fragmentation_lru to 1.28: inode_has_case_insensitive
[  421.691468][T16591]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  421.742917][T16591] bcachefs (loop9): btree node read error at btree alloc level 0/0
[  421.742934][T16591]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  421.742946][T16591]   loop9 node offset 0/24 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 11015804688548233216 > 4294967295
[  421.742956][T16591]   u64s 3 fields 64:0, 64:0, 32:11015804688548233216, 0:0, 0:0, 0:0
[  421.742965][T16591]   loop9 btree validate error
[  421.742972][T16591]   flagging btree alloc lost data
[  421.742979][T16591]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  421.742988][T16591]   ret btree_node_read_err_bad_node
[  421.769135][T16591] bcachefs (loop9): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[  421.777739][T16591] bcachefs (loop9): invalid bkey in btree_node btree=freespace level=0: u64s 5 type set 0:35:0 len 0 ver 0
[  421.777819][T16591]   size == 0, deleting
[  421.785320][T16591] bcachefs (loop9): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[  421.791227][T16591] bcachefs (loop9): btree node read error at btree backpointers level 0/0
[  421.791242][T16591]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[  421.791254][T16591]   loop9 node offset 0/24 bset u64s 0: checksum error, type none: got  should be 
[  421.791264][T16591]   loop9 btree validate error
[  421.791271][T16591]   flagging btree backpointers lost data
[  421.791279][T16591]   ret fsck_errors_not_fixed
[  421.810531][T16591] bcachefs (loop9): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing
[  421.816191][T16591] bcachefs (loop9): check_topology... done
[  421.821523][T16591] bcachefs (loop9): accounting_read... done
[  421.831007][T16591] bcachefs (loop9): alloc_read... done
[  421.833791][T16591] bcachefs (loop9): snapshots_read... done
[  421.837116][T16591] bcachefs (loop9): Fixed errors, running fsck a second time to verify fs is clean
[  421.841446][T16591] bcachefs (loop9): done starting filesystem
[  421.868006][T11657] bcachefs (loop9): shutting down
[  421.901616][T11657] bcachefs (loop9): shutdown complete
[  421.917636][T16595] loop7: detected capacity change from 0 to 32768
[  422.081183][T16606] loop7: detected capacity change from 0 to 8
[  422.084196][T16606] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  422.274894][T16613] loop7: detected capacity change from 0 to 4096
[  422.676344][   T33] audit: type=1804 audit(1758566017.060:190): pid=16627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4290" name="file0" dev="ramfs" ino=44308 res=1 errno=0
[  424.499411][ T6265] kernel read not supported for file /dsp1 (pid: 6265 comm: kworker/0:5)
[  424.647806][T16655] loop9: detected capacity change from 0 to 4096
[  424.659131][T16655] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  424.666646][T16655] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 4096)
[  424.669727][T16655] NILFS (loop9): mounting unchecked fs
[  424.689855][T16655] NILFS (loop9): recovery complete
[  424.699506][T16658] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  425.167006][T16694] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4320'.
[  426.282928][T16709] loop7: detected capacity change from 0 to 4096
[  426.292376][T16709] nilfs2: Unknown parameter 'P'
[  426.461817][T16719] loop9: detected capacity change from 0 to 24
[  427.095538][T16734] loop9: detected capacity change from 0 to 2048
[  427.124797][T16734]  loop9: p1 < > p4
[  427.129379][T16734] loop9: p4 size 8388608 extends beyond EOD, truncated
[  427.191810][   T33] audit: type=1326 audit(1758566021.593:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.9.4337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e5d8ec29 code=0x7ffc0000
[  427.206730][   T33] audit: type=1326 audit(1758566021.593:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.9.4337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e5d8ec29 code=0x7ffc0000
[  427.252857][   T33] audit: type=1326 audit(1758566021.653:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.9.4337" exe="/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fe9e5d8ec29 code=0x7ffc0000
[  427.272250][   T33] audit: type=1326 audit(1758566021.653:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.9.4337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e5d8ec29 code=0x7ffc0000
[  427.290492][   T33] audit: type=1326 audit(1758566021.663:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.9.4337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e5d8ec29 code=0x7ffc0000
[  427.309120][T16738] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4338'.
[  427.478581][T16754] loop9: detected capacity change from 0 to 128
[  427.481901][T16754] qnx6: Unexpected value for 'mmi_fs'
[  427.940427][T16759] loop9: detected capacity change from 0 to 4096
[  428.866273][T16827] loop9: detected capacity change from 0 to 1024
[  429.078133][T16846] sch_fq: defrate 4294967295 ignored.
[  429.826452][T16848] loop9: detected capacity change from 0 to 65536
[  429.833626][T16848] XFS (loop9): Mounting V5 Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd
[  429.850519][T16848] XFS (loop9): Ending clean mount
[  429.886238][T11657] XFS (loop9): Unmounting Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd
[  430.876467][T16899] veth0: entered promiscuous mode
[  430.880546][T16898] veth0: left promiscuous mode
[  432.810302][T16953] netlink: 'syz.5.4434': attribute type 10 has an invalid length.
[  433.884091][T16989] loop9: detected capacity change from 0 to 32768
[  433.907294][T16989] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode.
[  433.916719][T16989] (syz.9.4450,16989,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  433.940115][T11657] ocfs2: Unmounting device (7,9) on (node local)
[  434.158765][T16999] netlink: 'syz.9.4454': attribute type 10 has an invalid length.
[  434.162004][T16999] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4454'.
[  434.165645][T16999] dummy0: entered promiscuous mode
[  434.170404][T16999] bridge0: port 3(dummy0) entered blocking state
[  434.179522][T16999] bridge0: port 3(dummy0) entered disabled state
[  434.182584][T16999] dummy0: entered allmulticast mode
[  434.186023][T16999] bridge0: port 3(dummy0) entered blocking state
[  434.188165][T16999] bridge0: port 3(dummy0) entered forwarding state
[  434.255806][T17003] Non-string source
[  434.625743][T17014] loop9: detected capacity change from 0 to 512
[  434.629031][T17014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  434.640604][T17014] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.4461: casefold flag without casefold feature
[  434.646361][T17014] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.4461: couldn't read orphan inode 15 (err -117)
[  434.656941][T17014] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  434.727667][T17017] EXT4-fs (loop9): shut down requested (1)
[  434.735330][T17014] EXT4-fs (loop9): ext4_do_writepages: jbd2_start: 9223372036854775796 pages, ino 18; err -5
[  434.775885][T11657] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.486776][T17033] loop9: detected capacity change from 0 to 1024
[  435.525280][ T1936] hfsplus: b-tree write err: -5, ino 8
[  435.788306][T17049] overlayfs: failed to clone upperpath
[  436.491607][T17065] loop9: detected capacity change from 0 to 512
[  436.911600][T17080] netlink: 27 bytes leftover after parsing attributes in process `syz.9.4491'.
[  436.943077][T17082] loop9: detected capacity change from 0 to 512
[  436.947752][T17082] EXT4-fs: Ignoring removed mblk_io_submit option
[  436.951459][T17082] EXT4-fs: test_dummy_encryption requires encrypt feature
[  437.338550][T17094] loop9: detected capacity change from 0 to 128
[  437.358406][T17094] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  437.364760][T17094] FAT-fs (loop9): Filesystem has been set read-only
[  437.369034][T17094] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  437.375226][T17094] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  437.381597][T17094] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  437.386610][T17094] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  437.392770][T17094] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  437.400209][T17094] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  437.406294][T17094] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  437.417052][T17094] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  437.425570][T17094] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  437.455626][   T33] audit: type=1800 audit(1758566031.858:196): pid=17094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4497" name="file2" dev="loop9" ino=1048687 res=0 errno=0
[  438.620539][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4502'.
[  439.398070][ T6265] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  439.550708][ T6265] usb 10-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= d.df
[  439.553626][ T6265] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.569335][ T6265] usb 10-1: config 0 descriptor??
[  439.573234][ T6265] gspca_main: benq-2.14.0 probing 04a5:3035
[  439.729981][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  439.732268][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  439.787509][ T6265] usb 10-1: USB disconnect, device number 18
[  440.425270][T17143] loop9: detected capacity change from 0 to 1024
[  440.475232][T17145] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4520'.
[  440.497796][   T26] hfsplus: b-tree write err: -5, ino 4
[  440.539794][T17148] bpf: Bad value for 'gid'
[  440.893019][T17165] loop9: detected capacity change from 0 to 2048
[  440.908464][T17165] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found!
[  440.915175][T17165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  440.948939][   T33] audit: type=1800 audit(1758566035.360:197): pid=17165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4530" name="file2" dev="loop9" ino=1347 res=0 errno=0
[  441.182498][T17185] loop9: detected capacity change from 0 to 2048
[  441.191859][T17185] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  441.220325][T17185] overlayfs: upper fs needs to support d_type.
[  441.226010][T17185] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  441.231771][T17185] overlayfs: failed to set xattr on upper
[  441.234698][T17185] overlayfs: ...falling back to redirect_dir=nofollow.
[  441.239032][T17185] overlayfs: ...falling back to index=off.
[  441.241362][T17185] overlayfs: ...falling back to uuid=null.
[  441.296439][T11657] UDF-fs: error (device loop9): udf_read_inode: (ino 1317) failed !bh
[  441.300978][T11657] UDF-fs: error (device loop9): udf_read_inode: (ino 1317) failed !bh
[  441.411358][T15905] syz_tun (unregistering): left allmulticast mode
[  441.679244][T17202] overlayfs: failed to clone upperpath
[  441.829669][T17211] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4555'.
[  441.972219][T17220] netlink: 'syz.5.4559': attribute type 4 has an invalid length.
[  441.999079][T17220] netlink: 'syz.5.4559': attribute type 4 has an invalid length.
[  442.010997][T15705] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  442.016177][T15705] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  442.026281][T15705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  442.035296][T15705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  442.042916][T15705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  442.106407][T17221] lo speed is unknown, defaulting to 1000
[  442.312059][T17235] fuse: Bad value for 'fd'
[  442.315620][T17221] chnl_net:caif_netlink_parms(): no params data found
[  442.685722][T17221] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.688831][T17221] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.691344][T17221] bridge_slave_0: entered allmulticast mode
[  442.694792][T17221] bridge_slave_0: entered promiscuous mode
[  442.700926][T17221] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.703871][T17221] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.707234][T17221] bridge_slave_1: entered allmulticast mode
[  442.710952][T17221] bridge_slave_1: entered promiscuous mode
[  442.755063][T17221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  442.761996][T17221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  442.805338][T17221] team0: Port device team_slave_0 added
[  442.810568][T17221] team0: Port device team_slave_1 added
[  442.844948][T17221] batman_adv: batadv0: Adding interface: batadv_slave_0
[  442.848184][T17221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  442.859156][T17221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  442.862595][   T33] audit: type=1326 audit(1758566037.271:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17247 comm="syz.7.4567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  442.866405][T17221] batman_adv: batadv0: Adding interface: batadv_slave_1
[  442.875674][T17221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  442.887729][T17221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  442.927248][   T33] audit: type=1326 audit(1758566037.271:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17247 comm="syz.7.4567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  442.960649][   T33] audit: type=1326 audit(1758566037.271:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17247 comm="syz.7.4567" exe="/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  443.156043][   T33] audit: type=1326 audit(1758566037.561:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17247 comm="syz.7.4567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  443.163029][   T33] audit: type=1326 audit(1758566037.561:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17247 comm="syz.7.4567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  443.194745][T17221] hsr_slave_0: entered promiscuous mode
[  443.198085][T17221] hsr_slave_1: entered promiscuous mode
[  443.200782][T17221] debugfs: 'hsr0' already exists in 'hsr'
[  443.202711][T17221] Cannot create hsr debugfs directory
[  443.331922][T17260] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4572'.
[  443.395255][T17264] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4572'.
[  444.126155][T15705] Bluetooth: hci0: command tx timeout
[  444.352628][T17221] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  444.416850][T17221] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  444.424842][T17221] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  444.446325][T17221] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  444.588947][T17221] 8021q: adding VLAN 0 to HW filter on device bond0
[  444.621070][T17221] 8021q: adding VLAN 0 to HW filter on device team0
[  444.640138][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.642407][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state
[  444.656124][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.658697][ T4230] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.919660][T17221] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.001185][T17221] veth0_vlan: entered promiscuous mode
[  445.028188][T17221] veth1_vlan: entered promiscuous mode
[  445.069409][T17221] veth0_macvtap: entered promiscuous mode
[  445.079034][T17221] veth1_macvtap: entered promiscuous mode
[  445.110161][T17221] batman_adv: batadv0: Interface activated: batadv_slave_0
[  445.132093][T17221] batman_adv: batadv0: Interface activated: batadv_slave_1
[  445.152011][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.164842][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  445.170225][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  445.193085][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  445.305695][T17348] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4590'.
[  445.347980][ T1936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.350578][ T1936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.403306][ T1936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.407191][ T1936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.066243][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4598'.
[  446.204804][T15705] Bluetooth: hci0: command tx timeout
[  446.229772][T17402] erspan1: entered allmulticast mode
[  446.310494][T17408] netlink: 'syz.5.4607': attribute type 11 has an invalid length.
[  447.063471][T17421] loop2: detected capacity change from 0 to 131072
[  447.317941][T17421] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  447.320519][T17421] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  447.325662][T17421] F2FS-fs (loop2): invalid crc value
[  447.395111][T17421] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  447.401788][T17421] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  447.404176][T17421] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  447.519396][T17442] fuse: Bad value for 'fd'
[  448.285839][T15705] Bluetooth: hci0: command tx timeout
[  448.373975][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4620'.
[  448.377305][T17454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4620'.
[  448.590537][T17466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4632'.
[  448.609934][T17466] netem: change failed
[  448.839116][T17488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4641'.
[  449.377050][T17501] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4645'.
[  449.525969][T17514] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.4651'.
[  449.929738][T17523] netlink: 'syz.7.4654': attribute type 1 has an invalid length.
[  450.376338][T15705] Bluetooth: hci0: command tx timeout
[  450.620484][T17548] raw_sendmsg: syz.5.4666 forgot to set AF_INET. Fix it!
[  451.146847][T17564] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4674'.
[  452.018875][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4686'.
[  452.883957][T17603] loop2: detected capacity change from 0 to 32768
[  452.893310][T17603] JBD2: unrecognised superblock format ID
[  452.898533][T17603] (syz.2.4693,17603,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  452.902320][T17603] (syz.2.4693,17603,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  452.905878][T17603] (syz.2.4693,17603,1):ocfs2_check_volume:2432 ERROR: status = -22
[  452.908509][T17603] (syz.2.4693,17603,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  452.912293][T17603] (syz.2.4693,17603,1):ocfs2_fill_super:1177 ERROR: status = -22
[  453.192382][T17616] overlayfs: failed to clone upperpath
[  453.277374][T17618] loop2: detected capacity change from 0 to 4096
[  453.369088][   T33] audit: type=1326 audit(1758566047.776:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.5.4701" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  453.410075][   T33] audit: type=1326 audit(1758566047.796:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.5.4701" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  453.438291][   T33] audit: type=1326 audit(1758566047.806:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.5.4701" exe="/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  453.452798][   T33] audit: type=1326 audit(1758566047.806:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.5.4701" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  453.461821][   T33] audit: type=1326 audit(1758566047.806:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.5.4701" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  453.645581][T17633] overlayfs: failed to clone upperpath
[  453.825366][   T33] audit: type=1800 audit(1758566048.236:208): pid=17618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4699" name="file1" dev="loop2" ino=30 res=0 errno=0
[  453.948775][T17643] loop2: detected capacity change from 0 to 128
[  453.958151][T17643] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  453.963616][T17643] hpfs: filesystem error: improperly stopped
[  453.973562][T17643] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  453.980699][T17643] hpfs: You really don't want any checks? You are crazy...
[  453.984431][T17643] hpfs: hpfs_map_sector(): read error
[  453.986609][T17643] hpfs: code page support is disabled
[  453.995218][T17643] hpfs: hpfs_map_4sectors(): unaligned read
[  453.997681][T17643] hpfs: hpfs_map_4sectors(): unaligned read
[  453.999901][T17643] hpfs: filesystem error: unable to find root dir
[  454.007434][T17643] hpfs: hpfs_map_4sectors(): unaligned read
[  454.014869][T17643] hpfs: hpfs_map_sector(): read error
[  454.018422][T17643] hpfs: hpfs_map_4sectors(): unaligned read
[  454.022385][T17643] hpfs: hpfs_map_sector(): read error
[  454.024564][T17643] hpfs: hpfs_map_4sectors(): unaligned read
[  454.026780][T17643] hpfs: hpfs_map_sector(): read error
[  454.295523][T17648] loop2: detected capacity change from 0 to 32768
[  454.325197][T17648] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  454.395921][T17648] XFS (loop2): Ending clean mount
[  454.423670][T17648] XFS (loop2): Quotacheck needed: Please wait.
[  454.478864][T17648] XFS (loop2): Quotacheck: Done.
[  454.517321][T17221] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  454.809441][   T24] libceph: connect (1)[c::]:6789 error -101
[  454.816875][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  454.819362][T17670] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4718'.
[  454.823129][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4718'.
[  454.827101][T17670] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4718'.
[  454.857287][T11665] libceph: connect (1)[c::]:6789 error -101
[  454.859817][T11665] libceph: mon0 (1)[c::]:6789 connect error
[  454.912545][T11665] libceph: connect (1)[c::]:6789 error -101
[  454.914967][T11665] libceph: mon0 (1)[c::]:6789 connect error
[  455.093946][T10019] libceph: connect (1)[c::]:6789 error -101
[  455.096586][T10019] libceph: mon0 (1)[c::]:6789 connect error
[  455.130752][    T9] libceph: connect (1)[c::]:6789 error -101
[  455.133221][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  455.183844][    T9] libceph: connect (1)[c::]:6789 error -101
[  455.190770][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  455.601068][T10019] libceph: connect (1)[c::]:6789 error -101
[  455.604303][T10019] libceph: mon0 (1)[c::]:6789 connect error
[  455.624732][T17666] ceph: No mds server is up or the cluster is laggy
[  455.628334][T17671] ceph: No mds server is up or the cluster is laggy
[  455.631084][T17677] ceph: No mds server is up or the cluster is laggy
[  455.674167][    T9] libceph: connect (1)[c::]:6789 error -101
[  455.676671][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  455.873115][T17725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4743'.
[  456.046615][T17731] loop2: detected capacity change from 0 to 256
[  456.058674][T17731] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  456.073700][T17731] fuse: Bad value for 'fd'
[  456.180581][T17739] tipc: Invalid UDP bearer configuration
[  456.180620][T17739] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  456.618352][T17749] loop2: detected capacity change from 0 to 256
[  456.624691][T17749] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  456.681836][T17755] loop2: detected capacity change from 0 to 128
[  456.775164][T17763] overlayfs: failed to resolve './file0': -2
[  456.978199][T17781] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  457.201652][T17793] loop2: detected capacity change from 0 to 128
[  457.227909][T17793] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  457.240835][T17793] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  457.300406][T17221] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  457.371450][T17810] vlan2: entered promiscuous mode
[  457.374051][T17810] macvtap0: entered promiscuous mode
[  457.475738][T17817] tipc: Started in network mode
[  457.477739][T17817] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  457.488186][T17817] tipc: Enabled bearer <udp:syz0>, priority 0
[  458.204129][T17829] loop2: detected capacity change from 0 to 128
[  458.207356][T17829] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  458.213484][T17829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  458.364471][T17833] vxcan0: tx address claim with different name
[  458.482574][T17839] dvmrp0: left allmulticast mode
[  458.505123][ T6265] tipc: Node number set to 4269801491
[  460.199097][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  461.854797][T17922] tipc: Started in network mode
[  461.856930][T17922] tipc: Node identity 9e1fac208278, cluster identity 4711
[  461.859804][T17922] tipc: Enabled bearer <eth:hsr0>, priority 10
[  461.970391][T17928] overlayfs: failed to clone upperpath
[  462.088297][T17939] netlink: 'syz.5.4842': attribute type 1 has an invalid length.
[  462.986185][   T51] tipc: Node number set to 476556320
[  464.322083][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4868'.
[  464.533421][T18008] 9pnet_fd: Insufficient options for proto=fd
[  464.733592][   T33] audit: type=1326 audit(1758566059.152:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17982 comm="syz.2.4861" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdea78ec29 code=0x7fc00000
[  465.677167][T18058] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  465.742868][T18064] loop2: detected capacity change from 0 to 1764
[  465.761904][T18064] iso9660: Corrupted directory entry in block 2 of inode 1920
[  465.994771][T18068] loop2: detected capacity change from 0 to 32768
[  465.999757][T18068] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 0 smaller than block size 8
[  465.999757][T18068] members_v2 (size 152):
[  465.999757][T18068] Device:                        0
[  465.999757][T18068]   Label:                       (none)
[  465.999757][T18068]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  465.999757][T18068]   Size:                        0
[  465.999757][T18068]   read errors:                 0
[  465.999757][T18068]   write errors:                0
[  465.999757][T18068]   checksum errors:             0
[  465.999757][T18068]   seqread iops:                0
[  465.999757][T18068]   seqwrite iops:               0
[  465.999757][T18068]   randread iops:               0
[  465.999757][T18068]   randwrite iops:              0
[  465.999757][T18068]   Bucket size:                 0
[  465.999757][T18068]   First bucket:                0
[  465.999757][T18068]   Buckets:                     128
[  465.999757][T18068]   Last mount:                  1714681267
[  465.999757][T18068]   Last superblock write:       42
[  465.999757][T18068]   State:                       rw
[  465.999757][T18068]   Data allowed:                journal,btree,user
[  465.999757][T18068]   Has data:                    btree
[  465.999757][T18068]   Btree allocated bitmap blocksize:128
[  465.999757][T18068]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  465.999757][T18068]   Durability:        
[  465.999966][T18068] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  466.559288][T18103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4916'.
[  466.988087][   T33] audit: type=1326 audit(1758566061.413:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18126 comm="syz.7.4927" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x0
[  467.350088][T18145] loop2: detected capacity change from 0 to 128
[  467.359693][T18145] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  467.365706][T18145] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  468.280393][T17221] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  470.078529][T18228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4972'.
[  470.220291][T18238] netlink: 'syz.5.4976': attribute type 3 has an invalid length.
[  471.325759][T18272] xt_socket: unknown flags 0x50
[  471.811883][T18282] loop2: detected capacity change from 0 to 32768
[  471.863516][T18282] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  471.906967][T18282] XFS (loop2): Ending clean mount
[  471.918811][T18282] XFS (loop2): Quotacheck needed: Please wait.
[  471.961119][T18282] XFS (loop2): Quotacheck: Done.
[  472.048462][T17221] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  473.108042][T18346] loop2: detected capacity change from 0 to 4096
[  473.328158][T18356] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5028'.
[  473.334154][T18356] netlink: 35 bytes leftover after parsing attributes in process `syz.7.5028'.
[  473.337423][T18356] netlink: 'syz.7.5028': attribute type 5 has an invalid length.
[  473.345056][T18356] netlink: 'syz.7.5028': attribute type 6 has an invalid length.
[  473.352896][T18356] netlink: 35 bytes leftover after parsing attributes in process `syz.7.5028'.
[  474.369053][T18385] loop2: detected capacity change from 0 to 8
[  474.387300][T18385] SQUASHFS error: Failed to read block 0x2d7: -5
[  474.389926][T18385] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  474.818784][T18411] loop2: detected capacity change from 0 to 128
[  474.907133][   T33] audit: type=1326 audit(2000000002.090:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.7.5059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  474.910770][T18419] loop2: detected capacity change from 0 to 128
[  474.925744][   T33] audit: type=1326 audit(2000000002.100:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.7.5059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  474.936962][   T33] audit: type=1326 audit(2000000002.100:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.7.5059" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  474.949946][T18419] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  474.961631][   T33] audit: type=1326 audit(2000000002.100:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.7.5059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  474.969803][   T33] audit: type=1326 audit(2000000002.100:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.7.5059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  474.972076][T18419] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  474.980384][   T33] audit: type=1326 audit(2000000002.100:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.7.5059" exe="/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  474.989713][   T33] audit: type=1326 audit(2000000002.100:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.7.5059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  475.006201][   T33] audit: type=1326 audit(2000000002.100:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18420 comm="syz.7.5059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  475.041822][T17221] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  475.188725][   T33] audit: type=1800 audit(2000000002.370:219): pid=18441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5068" name="nullb0" dev="tmpfs" ino=6387 res=0 errno=0
[  475.654379][T18465] overlayfs: failed to resolve './file0': -2
[  476.087698][T18499] Invalid source name
[  476.089068][T18499] UBIFS error (pid: 18499): cannot open "./file0", error -22
[  476.122689][T18501] netlink: 'syz.5.5097': attribute type 32 has an invalid length.
[  476.169378][T18505] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5098'.
[  476.612236][T18535] netlink: 'syz.7.5113': attribute type 11 has an invalid length.
[  478.448167][T18579] loop2: detected capacity change from 0 to 128
[  478.457183][T18579] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  478.936883][T18618] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5153'.
[  480.057307][T18650] netlink: 'syz.7.5168': attribute type 1 has an invalid length.
[  480.089310][T18652] 9pnet: p9_errstr2errno: server reported unknown error t/event#
[  480.610557][T18672] xt_time: invalid argument - start or stop time greater than 23:59:59
[  480.670983][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  483.909198][T18739] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5210'.
[  483.931476][T18739] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5210'.
[  485.642430][T18772] netlink: 'syz.5.5225': attribute type 83 has an invalid length.
[  486.068316][T18790] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5234'.
[  487.048875][T18824] loop2: detected capacity change from 0 to 512
[  487.050622][T18822] erspan0: entered promiscuous mode
[  487.074154][T18824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.078544][T18824] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  487.136114][T18824] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  487.164353][T18824] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1792 out of range 0-6
[  487.174062][T18824] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  487.177997][T18824] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5246: Failed to acquire dquot type 1
[  487.216902][T17221] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.392938][T18841] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5253'.
[  487.395814][T18841] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5253'.
[  487.441900][T18846] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode
[  487.445025][T18846] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode
[  487.449507][T18846] netlink: 'syz.7.5256': attribute type 10 has an invalid length.
[  487.456222][T18846] mac80211_hwsim hwsim18 wlan1: left promiscuous mode
[  487.458638][T18846] mac80211_hwsim hwsim18 wlan1: left allmulticast mode
[  487.473444][T18846] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  488.104415][T18861] syz_tun: entered allmulticast mode
[  488.107229][T18860] syz_tun: left allmulticast mode
[  489.566581][T18905] syz_tun: entered allmulticast mode
[  490.690688][T18918] loop2: detected capacity change from 0 to 32768
[  490.706493][T18918] ERROR: (device loop2): diAllocAG: error reading iag
[  490.706493][T18918] 
[  490.719330][T18918] ialloc: diAlloc returned -5!
[  492.004037][T18948] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5301'.
[  494.474222][T18994] loop2: detected capacity change from 0 to 512
[  494.477721][T18994] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  495.656560][   T33] audit: type=1800 audit(2000000022.841:220): pid=19010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5327" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  498.381305][T19081] loop2: detected capacity change from 0 to 32768
[  498.391792][T19081] read_mapping_page failed!
[  498.393667][T19081] jfs_create: dtInsert returned -EIO
[  498.395540][T19081] ERROR: (device loop2): jfs_create: 
[  498.395540][T19081] 
[  498.398619][T19081] ERROR: (device loop2): remounting filesystem as read-only
[  498.874296][T19089] loop2: detected capacity change from 0 to 40427
[  498.878528][T19089] F2FS-fs (loop2): build fault injection rate: 16
[  498.882403][T19089] F2FS-fs (loop2): build fault injection type: 0x3bfe8e
[  498.886414][T19089] F2FS-fs (loop2): invalid crc value
[  498.888735][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  498.892671][T19089] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-5)
[  500.335051][T19148] overlayfs: failed to clone upperpath
[  501.164464][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  501.166991][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  502.071680][T19203] batman_adv: batadv0: Removing interface: batadv_slave_1
[  502.134344][T19207] loop2: detected capacity change from 0 to 2048
[  502.153265][T19208] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  502.187735][   T33] audit: type=1800 audit(2000000029.371:221): pid=19207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5418" name="file2" dev="loop2" ino=16 res=0 errno=0
[  502.235144][T19207] NILFS (loop2): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 4)
[  502.240765][T19207] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16)
[  502.256976][T19207] Remounting filesystem read-only
[  502.294979][T17221] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  504.164476][T19268] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5446'.
[  504.910118][T19299] netlink: 276 bytes leftover after parsing attributes in process `syz.5.5461'.
[  506.051501][T19326] netlink: 'syz.5.5473': attribute type 21 has an invalid length.
[  506.054790][T19326] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5473'.
[  506.058486][T19326] netlink: 'syz.5.5473': attribute type 5 has an invalid length.
[  506.062684][T19326] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5473'.
[  506.293914][T19340] netlink: 'syz.7.5480': attribute type 21 has an invalid length.
[  506.296954][T19340] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5480'.
[  506.300649][T19340] netlink: 'syz.7.5480': attribute type 5 has an invalid length.
[  506.309112][T19340] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5480'.
[  508.245994][T11665] libceph: connect (1)[c::]:6789 error -22
[  508.248570][T11665] libceph: mon0 (1)[c::]:6789 connect error
[  508.282281][T19400] ceph: No mds server is up or the cluster is laggy
[  508.524568][T19421] netlink: 'syz.7.5516': attribute type 39 has an invalid length.
[  508.778676][T19425] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5518'.
[  509.755640][T19469] netlink: 'syz.7.5539': attribute type 2 has an invalid length.
[  512.246937][T19566] IPVS: Error connecting to the multicast addr
[  512.326706][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5584'.
[  513.983839][T19620] loop2: detected capacity change from 0 to 512
[  514.003805][T19620] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002]
[  514.006964][T19620] System zones: 1-12
[  514.010618][T19620] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5607: invalid indirect mapped block 8 (level 2)
[  514.018299][T19620] EXT4-fs (loop2): Remounting filesystem read-only
[  514.031026][T19620] EXT4-fs (loop2): 1 truncate cleaned up
[  514.034944][T19620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  514.067549][T17221] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.252662][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5611'.
[  515.176552][T19665] openvswitch: netlink: Multiple metadata blocks provided
[  516.551453][T19705] netlink: 'syz.5.5647': attribute type 11 has an invalid length.
[  516.986347][ T5880] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  516.994278][   T12] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  516.997705][   T12] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  517.008180][   T12] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  517.334641][T19750] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5669'.
[  517.433243][T19754] netlink: 'syz.5.5671': attribute type 1 has an invalid length.
[  518.689381][T19785] loop2: detected capacity change from 0 to 1024
[  518.850014][T19785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  518.873128][   T33] audit: type=1804 audit(2000000046.042:222): pid=19785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5682" name="/newroot/185/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  518.888398][T17221] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.678780][   T33] audit: type=1326 audit(2000000047.862:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19822 comm="syz.7.5697" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x0
[  520.796468][T19827] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5699'.
[  520.802967][T19827] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5699'.
[  520.912492][T19831] batman_adv: batadv0: Removing interface: batadv_slave_0
[  520.914755][T19833] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5702'.
[  521.067572][T19841] overlayfs: failed to clone upperpath
[  525.042919][   T33] audit: type=1326 audit(2000000052.222:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19977 comm="syz.5.5772" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x0
[  525.911980][T19981] netlink: 'syz.5.5773': attribute type 7 has an invalid length.
[  525.937071][T19981] : entered promiscuous mode
[  527.500847][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5797'.
[  527.504231][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5797'.
[  528.420598][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5808'.
[  528.432197][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5808'.
[  528.566146][T20062] dvmrp0: entered allmulticast mode
[  528.570942][T20061] dvmrp0: left allmulticast mode
[  528.902341][T20080] loop2: detected capacity change from 0 to 512
[  529.602131][T20080] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.5815: bad orphan inode 15
[  529.618168][T20080] ext4_test_bit(bit=14, block=18) = 1
[  529.619869][T20080] is_bad_inode(inode)=0
[  529.621146][T20080] NEXT_ORPHAN(inode)=1023
[  529.622562][T20080] max_ino=32
[  529.623939][T20080] i_nlink=0
[  529.676863][T20080] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.5815: corrupted xattr block 19: invalid header
[  529.710424][T20080] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[  529.733223][T20080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  529.775778][T20080] ext4 filesystem being mounted at /205/qY3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  530.103033][T17221] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  532.776978][T20138] trusted_key: encrypted_key: insufficient parameters specified
[  532.955705][T20145] loop2: detected capacity change from 0 to 4096
[  532.967650][T20145] NILFS (loop2): invalid segment: Checksum error in segment payload
[  532.970887][T20145] NILFS (loop2): trying rollback from an earlier position
[  532.982948][T20145] NILFS (loop2): recovery complete
[  532.985830][T20150] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  533.142054][T20156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5848'.
[  533.157612][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5848'.
[  533.651739][T20183] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5858'.
[  534.262427][T20185] loop2: detected capacity change from 0 to 32768
[  534.266519][T20185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5859 (20185)
[  534.281448][T20185] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  534.285742][T20185] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  534.333121][T20185] BTRFS info (device loop2): enabling ssd optimizations
[  534.335925][T20185] BTRFS info (device loop2): enabling free space tree
[  534.376995][T17221] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  534.517873][T20210] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5863'.
[  534.985294][   T33] audit: type=1107 audit(2000000062.163:225): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  538.449196][T20302] o2cb: This node has not been configured.
[  538.485377][T20302] o2cb: Cluster check failed. Fix errors before retrying.
[  538.488303][T20302] (syz.7.5901,20302,0):user_dlm_register:674 ERROR: status = -22
[  538.491486][T20302] (syz.7.5901,20302,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[  538.629605][T20314] overlayfs: failed to clone upperpath
[  539.431400][T20324] loop2: detected capacity change from 0 to 4096
[  539.471231][T20324] overlayfs: upper fs does not support tmpfile.
[  539.482994][T20324] overlayfs: workdir/#41 already exists
[  539.894732][T20329] netlink: 'syz.7.5912': attribute type 20 has an invalid length.
[  540.056645][T20352] ieee802154 phy0 wpan0: encryption failed: -22
[  540.320430][T20356] loop2: detected capacity change from 0 to 32768
[  540.324290][T20356] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5923 (20356)
[  540.331936][T20356] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  540.335908][T20356] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  540.376825][T20356] BTRFS info (device loop2): setting nodatasum
[  540.383298][T20356] BTRFS info (device loop2): setting nodatacow
[  540.385844][T20356] BTRFS info (device loop2): enabling ssd optimizations
[  540.388736][T20356] BTRFS info (device loop2): turning on sync discard
[  540.394487][T20356] BTRFS info (device loop2): enabling free space tree
[  540.397204][T20356] BTRFS info (device loop2): enabling auto defrag
[  540.400213][T20356] BTRFS info (device loop2): max_inline set to 0
[  540.590912][T20356] BTRFS info (device loop2 state M): max_inline set to 0
[  540.620192][T17221] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  541.251810][T20391] loop2: detected capacity change from 0 to 512
[  541.345297][T20391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  541.358772][T20391] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  541.495344][T17221] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  541.574012][T20410] overlayfs: failed to clone upperpath
[  541.633240][T20414] overlayfs: failed to clone upperpath
[  541.844680][   T33] audit: type=1800 audit(2000000069.023:226): pid=20431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5951" name="nullb0" dev="tmpfs" ino=6387 res=0 errno=0
[  542.854481][T20454] loop2: detected capacity change from 0 to 32768
[  542.859826][T20454] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v1: too many devices for section size
[  542.859826][T20454] members_v1 (size 64):
[  542.859826][T20454] nr_devices mismatch: have 0 entries, should be 8
[  542.868702][T20454] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  542.991729][T20470] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5968'.
[  543.292663][T20486] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5976'.
[  544.231084][T20493] overlayfs: failed to resolve './file0': -2
[  546.235039][T20537] loop2: detected capacity change from 0 to 32768
[  546.238400][T20537] bcachefs (/dev/loop2): error validating superblock: Invalid superblock: optional field with size 0 (type 0)
[  546.242750][T20537] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  548.306450][T20606] loop2: detected capacity change from 0 to 256
[  548.320548][T20606] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  548.454586][T20612] loop2: detected capacity change from 0 to 2048
[  548.461203][T20612] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  549.180673][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6040'.
[  549.184528][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6040'.
[  549.206716][T20639] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  550.051335][T20673] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (16777216)
[  550.150682][T13041] Bluetooth: hci2: Frame reassembly failed (-84)
[  550.156196][T20675] Bluetooth: hci2: Frame reassembly failed (-84)
[  550.490309][T20695] sctp: [Deprecated]: syz.5.6066 (pid 20695) Use of int in max_burst socket option deprecated.
[  550.490309][T20695] Use struct sctp_assoc_value instead
[  552.055583][T20734] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6082'.
[  552.100528][T20736] netlink: 'syz.7.6083': attribute type 1 has an invalid length.
[  552.103415][T20736] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6083'.
[  552.186925][   T54] Bluetooth: hci2: command 0x1003 tx timeout
[  552.189859][T15705] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  552.417148][T20750] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6090'.
[  552.919194][T20777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6103'.
[  553.983914][T20808] netlink: 'syz.5.6118': attribute type 3 has an invalid length.
[  554.572562][   T33] audit: type=1326 audit(2000000081.754:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20833 comm="syz.5.6130" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x0
[  555.245174][T20849] veth0_vlan: entered allmulticast mode
[  555.274018][T20849] veth0_vlan: left promiscuous mode
[  555.277559][T20849] veth0_vlan: entered promiscuous mode
[  555.673342][T20885] overlayfs: failed to clone upperpath
[  555.750216][   T33] audit: type=1400 audit(2000000082.934:228): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20890 comm="syz.7.6158"
[  555.833408][T20899] IPVS: Error connecting to the multicast addr
[  555.911999][T20901] netlink: 'syz.5.6163': attribute type 10 has an invalid length.
[  556.555143][T20950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6187'.
[  556.562541][T20950] vlan0: entered promiscuous mode
[  557.829320][T20996] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6209'.
[  558.490792][   T33] audit: type=1326 audit(2000000085.674:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21005 comm="syz.5.6214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  558.510644][   T33] audit: type=1326 audit(2000000085.674:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21005 comm="syz.5.6214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  558.526297][   T33] audit: type=1326 audit(2000000085.684:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21005 comm="syz.5.6214" exe="/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  558.544838][   T33] audit: type=1326 audit(2000000085.684:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21005 comm="syz.5.6214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  558.576054][   T33] audit: type=1326 audit(2000000085.684:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21005 comm="syz.5.6214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  558.945049][T21037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6228'.
[  558.951204][T21037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6228'.
[  559.532051][T21053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6235'.
[  562.609989][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  562.612525][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  562.869576][T21140] loop2: detected capacity change from 0 to 2048
[  562.884551][T21140] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  562.896478][T21140] UDF-fs: Scanning with blocksize 512 failed
[  562.916497][T21140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  563.040414][T21152] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6280'.
[  563.043596][T21152] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6280'.
[  563.052641][T21152] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6280'.
[  563.057017][T21152] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6280'.
[  563.062757][T21156] loop2: detected capacity change from 0 to 4096
[  563.272056][T21171] program syz.2.6288 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  563.390990][T21177] loop2: detected capacity change from 0 to 128
[  563.805529][T21180] syz.2.6291: attempt to access beyond end of device
[  563.805529][T21180] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128
[  564.666111][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  564.789249][T21203] netlink: 'syz.2.6301': attribute type 3 has an invalid length.
[  564.870528][T21207] Bluetooth: MGMT ver 1.23
[  564.872631][T21207] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes
[  565.030448][T21215] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6307'.
[  565.143434][T21217] loop2: detected capacity change from 0 to 8192
[  565.424825][T21230] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6314'.
[  566.396122][T21248] loop2: detected capacity change from 0 to 1024
[  566.401334][T21248] EXT4-fs: Ignoring removed oldalloc option
[  566.411214][T21248] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  566.601522][T21248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  566.662139][T17221] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.897072][T21265] netlink: 'syz.2.6328': attribute type 3 has an invalid length.
[  566.899540][T21265] netlink: 'syz.2.6328': attribute type 3 has an invalid length.
[  568.128653][T21291] binder: 21288:21291 unknown command 0
[  568.130578][T21291] binder: 21288:21291 ioctl c0306201 200000000080 returned -22
[  569.463716][T21332] netlink: 'syz.5.6357': attribute type 1 has an invalid length.
[  569.475977][T21332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6357'.
[  569.575507][T21340] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6363'.
[  569.582063][T21340] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6363'.
[  569.585656][T21340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6363'.
[  569.757502][T21349] PKCS8: Unsupported PKCS#8 version
[  569.767034][T21351] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6368'.
[  570.063526][T21367] loop2: detected capacity change from 0 to 256
[  570.094178][T21367] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  570.104002][T21367] exFAT-fs (loop2): error, in sector 160, dentry 11 should be unused, but 0xc1
[  570.108033][T21367] exFAT-fs (loop2): Filesystem has been set read-only
[  570.265117][T21381] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6382'.
[  570.445197][T21389] bridge0: entered promiscuous mode
[  570.455936][T21389] macsec1: entered promiscuous mode
[  570.463732][T21389] bridge0: port 3(macsec1) entered blocking state
[  570.466722][T21389] bridge0: port 3(macsec1) entered disabled state
[  570.469195][T21389] macsec1: entered allmulticast mode
[  570.470791][T21389] bridge0: entered allmulticast mode
[  570.487380][T21389] macsec1: left allmulticast mode
[  570.488998][T21389] bridge0: left allmulticast mode
[  570.495308][T21389] bridge0: left promiscuous mode
[  571.480549][T21431] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  571.484385][T21431] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  573.503019][T21492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6432'.
[  573.929896][T21510] netlink: 292 bytes leftover after parsing attributes in process `syz.5.6441'.
[  574.755300][   T33] audit: type=1800 audit(2000000101.935:234): pid=21529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6449" name="file1" dev="tmpfs" ino=1757 res=0 errno=0
[  574.814442][T21533] netlink: 'syz.2.6451': attribute type 25 has an invalid length.
[  574.817814][T21533] netlink: 'syz.2.6451': attribute type 8 has an invalid length.
[  574.866970][T21539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6453'.
[  574.870596][T21539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6453'.
[  575.832199][T21564] netlink: 'syz.7.6465': attribute type 21 has an invalid length.
[  575.835310][T21564] netlink: 'syz.7.6465': attribute type 6 has an invalid length.
[  575.844894][T21564] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6465'.
[  575.856427][T21564] netlink: 'syz.7.6465': attribute type 21 has an invalid length.
[  575.859535][T21564] netlink: 'syz.7.6465': attribute type 6 has an invalid length.
[  575.862590][T21564] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6465'.
[  575.983821][T21571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6467'.
[  576.116849][   T33] audit: type=1800 audit(2000000103.295:235): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6471" name="nullb0" dev="tmpfs" ino=9044 res=0 errno=0
[  576.146886][T21583] loop2: detected capacity change from 0 to 512
[  576.151669][T21583] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  576.175545][T21583] EXT4-fs (loop2): 1 truncate cleaned up
[  576.178522][T21583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  576.232060][T17221] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.742660][T21598] loop2: detected capacity change from 0 to 32768
[  576.760217][T21598] XFS: ikeep mount option is deprecated.
[  576.762538][T21598] XFS: attr2 mount option is deprecated.
[  576.779404][T21598] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  576.825904][T21598] XFS (loop2): Ending clean mount
[  576.943068][T17221] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  577.538380][T21622] 9pnet_fd: Insufficient options for proto=fd
[  577.998212][T21626] loop2: detected capacity change from 0 to 32768
[  578.002615][T21626] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6488 (21626)
[  578.018586][T21626] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  578.022608][T21626] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  578.092580][T21626] BTRFS info (device loop2): enabling ssd optimizations
[  578.102854][T21626] BTRFS info (device loop2): enabling free space tree
[  578.115553][T21626] BTRFS info (device loop2): use zstd compression, level 3
[  578.202452][T21649] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  578.251972][T17221] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  578.954952][T21676] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6505'.
[  580.606912][T21725] syz.7.6526(21725): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  580.807468][T21729] overlayfs: failed to resolve './file0': -2
[  582.043671][T21740] loop2: detected capacity change from 0 to 40427
[  582.065429][T21740] F2FS-fs (loop2): build fault injection rate: 14
[  582.067935][T21740] F2FS-fs (loop2): build fault injection type: 0x1dff
[  582.072465][T21740] F2FS-fs (loop2): invalid crc value
[  582.076036][T21740] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4429/0x6ff0
[  582.079594][T21740] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12)
[  582.458134][   T33] audit: type=1326 audit(2000000109.636:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21775 comm="syz.2.6550" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdea78ec29 code=0x0
[  582.710249][T21782] netlink: 136 bytes leftover after parsing attributes in process `syz.7.6552'.
[  582.929888][T21798] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode
[  583.311014][T21821] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6571'.
[  584.202407][T21841] tmpfs: Bad value for 'mpol'
[  584.440736][T21855] overlayfs: failed to clone lowerpath
[  584.690971][T21859] overlayfs: failed to clone upperpath
[  586.125108][   T33] audit: type=1326 audit(2000000113.306:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21880 comm="syz.7.6600" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7fc00000
[  586.540472][T21909] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776
[  586.547897][T21909] PKCS7: Only support pkcs7_signedData type
[  586.713873][T21919] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6617'.
[  587.058028][T21925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6620'.
[  590.080182][T22053] loop2: detected capacity change from 0 to 1024
[  590.087035][T22053] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  590.093131][T22053] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  590.097828][T22053] EXT4-fs (loop2): orphan cleanup on readonly fs
[  590.101449][T22053] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.6673: Freeing blocks not in datazone - block = 0, count = 4096
[  590.112937][T22053] EXT4-fs (loop2): 1 orphan inode deleted
[  590.117376][T22053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  590.307405][T17221] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.527944][T22071] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  591.043369][T22078] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6682'.
[  591.047310][T22078] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6682'.
[  591.050720][T22078] netlink: 'syz.2.6682': attribute type 1 has an invalid length.
[  591.903237][T22102] loop2: detected capacity change from 0 to 256
[  591.912429][T22102] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  592.139053][T22119] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.143433][T22119] FAT-fs (loop15): unable to read boot sector
[  592.555835][T22144] overlayfs: failed to clone upperpath
[  593.439091][T22175] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6727'.
[  594.563715][T22220] geneve2: entered allmulticast mode
[  594.570105][ T5880] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[  594.573762][ T5880] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[  594.579730][ T5880] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[  594.583249][ T5880] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[  594.972462][T22233] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6753'.
[  596.266926][T22288] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6777'.
[  596.298618][T22290] loop2: detected capacity change from 0 to 1024
[  596.324892][T22290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  596.329260][T22290] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  596.370197][T22290] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.744554][T22319] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  596.969767][T22329] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  597.430289][T22337] netlink: 8916 bytes leftover after parsing attributes in process `syz.2.6799'.
[  597.711166][T22358] netlink: 'syz.5.6807': attribute type 4 has an invalid length.
[  597.720060][T22358] netlink: 'syz.5.6807': attribute type 4 has an invalid length.
[  597.740312][T22360] netlink: 'syz.7.6810': attribute type 1 has an invalid length.
[  597.766179][T22360] 8021q: adding VLAN 0 to HW filter on device bond5
[  597.789425][T22360] bond5: (slave geneve3): making interface the new active one
[  597.796157][T22360] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  599.492097][T22419] overlayfs: failed to clone upperpath
[  599.702915][T22422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6837'.
[  599.719245][T22422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6837'.
[  599.725189][T22422] netlink: 34 bytes leftover after parsing attributes in process `syz.2.6837'.
[  599.881548][T22432] netlink: 'syz.5.6841': attribute type 1 has an invalid length.
[  599.999462][T22438] fuse: Bad value for 'fd'
[  600.454398][T22459] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  600.591074][T22464] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6857'.
[  603.931137][T22550] IPVS: length: 187 != 24
[  606.228707][T22644] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  606.377040][T22650] Invalid ELF header magic: != ELF
[  606.542573][T22658] netlink: 'syz.2.6940': attribute type 10 has an invalid length.
[  606.552179][T22658] syz_tun: entered promiscuous mode
[  606.567033][T22658] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  606.660120][T22662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6943'.
[  607.156442][T22668] netlink: 'syz.7.6945': attribute type 4 has an invalid length.
[  607.165308][T22668] netlink: 'syz.7.6945': attribute type 4 has an invalid length.
[  607.170881][T11665] lo speed is unknown, defaulting to 1000
[  607.177175][T11665] syz0: Port: 1 Link ACTIVE
[  607.621452][T22696] overlayfs: failed to clone lowerpath
[  607.722479][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6963'.
[  607.729088][T22704] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6963'.
[  607.737991][T22704] batadv1: entered promiscuous mode
[  607.740248][T22704] batadv1: entered allmulticast mode
[  608.101854][T22728] bond6: entered promiscuous mode
[  608.114920][T22728] 8021q: adding VLAN 0 to HW filter on device bond6
[  608.592255][T22747] bond0: entered promiscuous mode
[  608.599156][T22747] bond_slave_0: entered promiscuous mode
[  608.601904][T22747] bond_slave_1: entered promiscuous mode
[  608.612463][T22747] batadv0: entered promiscuous mode
[  608.623886][T22747] 8021q: adding VLAN 0 to HW filter on device hsr1
[  608.760203][T22756] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  608.763259][T22756] netdevsim netdevsim7 netdevsim0: left allmulticast mode
[  609.089313][   T33] audit: type=1326 audit(2000000136.267:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22755 comm="syz.5.6986" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  609.473562][   T33] audit: type=1326 audit(2000000136.267:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22755 comm="syz.5.6986" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  609.493542][   T33] audit: type=1326 audit(2000000136.647:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22755 comm="syz.5.6986" exe="/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  609.515691][   T33] audit: type=1326 audit(2000000136.647:241): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=22755 comm="syz.5.6986" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  609.522899][   T33] audit: type=1326 audit(2000000136.647:242): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=22755 comm="syz.5.6986" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x7ffc0000
[  609.609626][   T33] audit: type=1326 audit(2000000136.797:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22768 comm="syz.5.6991" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f358ec29 code=0x0
[  609.864842][T22784] openvswitch: netlink: Multiple metadata blocks provided
[  610.277862][T22790] syz_tun: entered allmulticast mode
[  610.281546][T22789] syz_tun: left allmulticast mode
[  610.548767][T22804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7008'.
[  610.715844][T22818] sch_fq: defrate 4294967295 ignored.
[  610.806926][T22826] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7019'.
[  611.636640][T22869] netlink: 'syz.2.7039': attribute type 10 has an invalid length.
[  611.653721][T22869] team0: Port device netdevsim0 added
[  611.819395][T22881] netlink: 'syz.5.7045': attribute type 3 has an invalid length.
[  612.461563][T22906] netlink: 'syz.7.7055': attribute type 6 has an invalid length.
[  613.291462][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7061'.
[  613.297279][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7061'.
[  613.300156][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7061'.
[  613.386874][T22924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  614.002607][   T33] audit: type=1326 audit(2000000141.187:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22941 comm="syz.7.7071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  614.037556][   T33] audit: type=1326 audit(2000000141.187:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22941 comm="syz.7.7071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  614.052951][   T33] audit: type=1326 audit(2000000141.187:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22941 comm="syz.7.7071" exe="/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  614.065212][   T33] audit: type=1326 audit(2000000141.187:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22941 comm="syz.7.7071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  614.079107][T22944] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7072'.
[  614.290646][T22954] netlink: 'syz.5.7077': attribute type 2 has an invalid length.
[  614.608570][T22978] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7089'.
[  614.612227][T22978] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7089'.
[  614.628273][T22980] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7090'.
[  614.631787][T22980] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7090'.
[  614.636941][T22980] netlink: 'syz.5.7090': attribute type 6 has an invalid length.
[  614.639599][T22980] netlink: 'syz.5.7090': attribute type 5 has an invalid length.
[  614.642361][T22980] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7090'.
[  614.687477][T22986] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7093'.
[  615.109979][T23021] kAFS: Can only specify source 'none' with -o dyn
[  615.394268][T23038] netlink: 'syz.5.7116': attribute type 11 has an invalid length.
[  616.970578][T23128] netlink: 'syz.5.7155': attribute type 30 has an invalid length.
[  617.131993][T23137] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  617.138804][T23137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  617.406815][T23148] netlink: 'syz.2.7165': attribute type 1 has an invalid length.
[  617.601836][   T33] kauditd_printk_skb: 19 callbacks suppressed
[  617.601852][   T33] audit: type=1326 audit(2000000144.788:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23167 comm="syz.7.7175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  617.612622][   T33] audit: type=1326 audit(2000000144.788:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23167 comm="syz.7.7175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  617.621520][   T33] audit: type=1326 audit(2000000144.798:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23167 comm="syz.7.7175" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  617.637247][   T33] audit: type=1326 audit(2000000144.798:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23167 comm="syz.7.7175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  617.659522][   T33] audit: type=1326 audit(2000000144.798:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23167 comm="syz.7.7175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  617.670409][   T33] audit: type=1326 audit(2000000144.798:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23167 comm="syz.7.7175" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  617.679434][   T33] audit: type=1326 audit(2000000144.798:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23167 comm="syz.7.7175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  617.691189][   T33] audit: type=1326 audit(2000000144.798:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23167 comm="syz.7.7175" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  617.709079][   T33] audit: type=1326 audit(2000000144.798:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23167 comm="syz.7.7175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  617.717564][   T33] audit: type=1326 audit(2000000144.798:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23167 comm="syz.7.7175" exe="/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  619.118823][T23220] netlink: 'syz.5.7199': attribute type 2 has an invalid length.
[  619.122209][T23220] __nla_validate_parse: 6 callbacks suppressed
[  619.122288][T23220] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7199'.
[  619.680429][T23241] netlink: 'syz.7.7208': attribute type 15 has an invalid length.
[  619.695870][T23241] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7208'.
[  620.307047][T23256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7215'.
[  620.320970][T23256] (unnamed net_device) (uninitialized): option mode: invalid value (7)
[  621.511997][T23293] netlink: 'syz.5.7233': attribute type 11 has an invalid length.
[  622.676777][T23322] pim6reg: entered allmulticast mode
[  622.683652][T23322] pim6reg: left allmulticast mode
[  622.836849][  T792] IPVS: starting estimator thread 0...
[  622.936107][T23331] IPVS: using max 47 ests per chain, 112800 per kthread
[  623.126587][T23348] lo speed is unknown, defaulting to 1000
[  623.237928][T23348] netlink: 'syz.7.7258': attribute type 2 has an invalid length.
[  623.913732][T23393] overlayfs: cannot append lower layer
[  624.026260][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  624.028886][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  624.818764][T23438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7301'.
[  626.548489][T23494] netlink: 'syz.2.7326': attribute type 10 has an invalid length.
[  626.552480][T23494] batman_adv: batadv0: Adding interface: wlan0
[  626.555625][T23494] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  626.568329][T23494] batman_adv: batadv0: Interface activated: wlan0
[  626.972906][    C1] IPv6: addrconf: prefix option has invalid lifetime
[  628.519184][   T33] kauditd_printk_skb: 18 callbacks suppressed
[  628.519193][   T33] audit: type=1326 audit(2000000155.708:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23563 comm="syz.2.7359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdea78ec29 code=0x7ffc0000
[  628.532612][   T33] audit: type=1326 audit(2000000155.718:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23563 comm="syz.2.7359" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcdea78ec29 code=0x7ffc0000
[  628.540964][   T33] audit: type=1326 audit(2000000155.718:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23563 comm="syz.2.7359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdea78ec29 code=0x7ffc0000
[  628.569463][   T33] audit: type=1326 audit(2000000155.718:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23563 comm="syz.2.7359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdea78ec29 code=0x7ffc0000
[  628.587217][   T33] audit: type=1326 audit(2000000155.748:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23563 comm="syz.2.7359" exe="/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fcdea78ec29 code=0x7ffc0000
[  628.605840][   T33] audit: type=1326 audit(2000000155.748:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23563 comm="syz.2.7359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdea78ec29 code=0x7ffc0000
[  628.622479][   T33] audit: type=1326 audit(2000000155.748:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23563 comm="syz.2.7359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdea78ec29 code=0x7ffc0000
[  629.039517][T23580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  629.686677][T23606] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[  629.786767][T23606] 8021q: adding VLAN 0 to HW filter on device bond1
[  631.751996][   T33] audit: type=1326 audit(2000000158.938:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23727 comm="syz.7.7436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  631.770016][   T33] audit: type=1326 audit(2000000158.958:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23727 comm="syz.7.7436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  631.793787][   T33] audit: type=1326 audit(2000000158.958:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23727 comm="syz.7.7436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3018ec29 code=0x7ffc0000
[  632.001523][T23747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7445'.
[  632.004959][T23747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7445'.
[  632.046126][T23749] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7446'.
[  633.066277][T23773] tmpfs: Bad value for 'nr_inodes'
[  633.080543][T23775] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7457'.
[  633.091856][T23775] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7457'.
[  633.388103][T23803] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7472'.
[  634.242872][   T32] ------------[ cut here ]------------
[  634.245766][   T32] WARNING: CPU: 1 PID: 32 at io_uring/io_uring.c:2980 io_ring_exit_work+0x4ed/0x930
[  634.249594][   T32] Modules linked in:
[  634.252160][   T32] CPU: 1 UID: 0 PID: 32 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  634.256809][   T32] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  634.260712][   T32] Workqueue: iou_exit io_ring_exit_work
[  634.263560][   T32] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[  634.265869][   T32] Code: c6 05 e0 09 62 0e 01 48 c7 c7 a0 69 e2 8b be 24 00 00 00 48 c7 c2 40 69 e2 8b e8 3e 2f 72 00 e9 7b fe ff ff e8 84 56 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[  634.273667][   T32] RSP: 0000:ffffc9000065f8e0 EFLAGS: 00010293
[  634.276143][   T32] RAX: ffffffff812b698c RBX: 00000001000081fe RCX: ffff88801d2e8000
[  634.279323][   T32] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  634.282650][   T32] RBP: ffffc9000065fa70 R08: ffffc9000065f867 R09: 1ffff920000cbf0c
[  634.285813][   T32] R10: dffffc0000000000 R11: fffff520000cbf0d R12: 00000001000081fd
[  634.288942][   T32] R13: ffff888121e1e310 R14: ffff888121e1e480 R15: dffffc0000000000
[  634.292032][   T32] FS:  0000000000000000(0000) GS:ffff8881a3c11000(0000) knlGS:0000000000000000
[  634.296048][   T32] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  634.298764][   T32] CR2: 000000110c41284c CR3: 0000000046452000 CR4: 00000000000006f0
[  634.301995][   T32] Call Trace:
[  634.303599][   T32]  <TASK>
[  634.304794][   T32]  ? __pfx_io_ring_exit_work+0x10/0x10
[  634.306938][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  634.309040][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[  634.311330][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[  634.314002][   T32]  process_scheduled_works+0xae1/0x17b0
[  634.316258][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  634.318658][   T32]  worker_thread+0x8a0/0xda0
[  634.320558][   T32]  kthread+0x711/0x8a0
[  634.322381][   T32]  ? __pfx_worker_thread+0x10/0x10
[  634.324483][   T32]  ? __pfx_kthread+0x10/0x10
[  634.326362][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  634.328480][   T32]  ? lockdep_hardirqs_on+0x9c/0x150
[  634.330581][   T32]  ? __pfx_kthread+0x10/0x10
[  634.332561][   T32]  ret_from_fork+0x439/0x7d0
[  634.334365][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  634.336416][   T32]  ? __switch_to_asm+0x39/0x70
[  634.338308][   T32]  ? __switch_to_asm+0x33/0x70
[  634.340196][   T32]  ? __pfx_kthread+0x10/0x10
[  634.342232][   T32]  ret_from_fork_asm+0x1a/0x30
[  634.344206][   T32]  </TASK>
[  634.345439][   T32] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  634.348384][   T32] CPU: 1 UID: 0 PID: 32 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  634.352120][   T32] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  634.356142][   T32] Workqueue: iou_exit io_ring_exit_work
[  634.358373][   T32] Call Trace:
[  634.359750][   T32]  <TASK>
[  634.360968][   T32]  dump_stack_lvl+0x99/0x250
[  634.362860][   T32]  ? __asan_memcpy+0x40/0x70
[  634.364726][   T32]  ? __pfx_dump_stack_lvl+0x10/0x10
[  634.366773][   T32]  ? __pfx__printk+0x10/0x10
[  634.368650][   T32]  vpanic+0x281/0x750
[  634.370232][   T32]  ? __pfx__printk+0x10/0x10
[  634.372043][   T32]  ? __pfx_vpanic+0x10/0x10
[  634.373903][   T32]  ? is_bpf_text_address+0x26/0x2b0
[  634.375985][   T32]  panic+0xb9/0xc0
[  634.377507][   T32]  ? __pfx_panic+0x10/0x10
[  634.379317][   T32]  __warn+0x31b/0x4b0
[  634.380940][   T32]  ? io_ring_exit_work+0x4ed/0x930
[  634.382991][   T32]  ? io_ring_exit_work+0x4ed/0x930
[  634.384991][   T32]  report_bug+0x2be/0x4f0
[  634.386698][   T32]  ? io_ring_exit_work+0x4ed/0x930
[  634.388742][   T32]  ? io_ring_exit_work+0x4ed/0x930
[  634.390745][   T32]  ? io_ring_exit_work+0x4ef/0x930
[  634.392733][   T32]  handle_bug+0x84/0x160
[  634.394399][   T32]  exc_invalid_op+0x1a/0x50
[  634.396153][   T32]  asm_exc_invalid_op+0x1a/0x20
[  634.398012][   T32] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[  634.400160][   T32] Code: c6 05 e0 09 62 0e 01 48 c7 c7 a0 69 e2 8b be 24 00 00 00 48 c7 c2 40 69 e2 8b e8 3e 2f 72 00 e9 7b fe ff ff e8 84 56 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[  634.407480][   T32] RSP: 0000:ffffc9000065f8e0 EFLAGS: 00010293
[  634.409869][   T32] RAX: ffffffff812b698c RBX: 00000001000081fe RCX: ffff88801d2e8000
[  634.412978][   T32] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  634.415947][   T32] RBP: ffffc9000065fa70 R08: ffffc9000065f867 R09: 1ffff920000cbf0c
[  634.419022][   T32] R10: dffffc0000000000 R11: fffff520000cbf0d R12: 00000001000081fd
[  634.422081][   T32] R13: ffff888121e1e310 R14: ffff888121e1e480 R15: dffffc0000000000
[  634.425164][   T32]  ? io_ring_exit_work+0x4ec/0x930
[  634.427143][   T32]  ? __pfx_io_ring_exit_work+0x10/0x10
[  634.429252][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  634.431295][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[  634.433494][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[  634.435763][   T32]  process_scheduled_works+0xae1/0x17b0
[  634.438019][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  634.440497][   T32]  worker_thread+0x8a0/0xda0
[  634.442419][   T32]  kthread+0x711/0x8a0
[  634.444086][   T32]  ? __pfx_worker_thread+0x10/0x10
[  634.446096][   T32]  ? __pfx_kthread+0x10/0x10
[  634.447917][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  634.449948][   T32]  ? lockdep_hardirqs_on+0x9c/0x150
[  634.451994][   T32]  ? __pfx_kthread+0x10/0x10
[  634.453829][   T32]  ret_from_fork+0x439/0x7d0
[  634.455703][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  634.457722][   T32]  ? __switch_to_asm+0x39/0x70
[  634.459601][   T32]  ? __switch_to_asm+0x33/0x70
[  634.461545][   T32]  ? __pfx_kthread+0x10/0x10
[  634.463449][   T32]  ret_from_fork_asm+0x1a/0x30
[  634.465337][   T32]  </TASK>
[  634.467202][   T32] Kernel Offset: disabled
[  634.468829][   T32] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:28:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000080000001 RBX=dffffc0000000000 RCX=0000000000000000 RDX=0000000000000000
RSI=ffffffff8b89a9c0 RDI=00000000ffffffff RBP=ffffc90007dd79b0 RSP=ffffc90007dd7908
R8 =ffffffff8fa3a737 R9 =1ffffffff1f474e6 R10=dffffc0000000000 R11=fffffbfff1f474e7
R12=ffffffff89a42fc7 R13=ffffc90003043030 R14=dffffc0000000000 R15=1ffff92000fbaf24
RIP=ffffffff81900ec5 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5e3102a6c0 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcde13ff000 CR3=000000003b79a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007fcdeb6225a0 00007fcdeb622580
XMM02=00007fcdeb6226e0 00007fcdeb622560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007fcdeb6225a0 XMM05=0000000000000000 00007fcdeb6226e0
XMM06=00007fcdeb6226e0 00007fcdeb622560 XMM07=00007fcdeb6225a0 00007fcdeb622580
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fcdea812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000065f090
R8 =ffff8880213f8237 R9 =1ffff1100427f046 R10=dffffc0000000000 R11=ffffffff855006f0
R12=dffffc0000000000 R13=ffffffff99b048ed R14=ffffffff99df9460 R15=0000000000000000
RIP=ffffffff8550076c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c41284c CR3=0000000046452000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff8b724363 ffffffff8b72ecae XMM01=ffffffff8b72ecae ffffffff8b724363
XMM02=0000000000000000 ffffffff8b724363 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=64cfa158ffff0000 0297000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fcdea812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
