last executing test programs:

23.263363396s ago: executing program 1 (id=2063):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]})

22.969816819s ago: executing program 1 (id=2067):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000380), 0x1, 0x55e, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0)

22.62401902s ago: executing program 1 (id=2070):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]})

14.677409231s ago: executing program 0 (id=2110):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)

14.009843514s ago: executing program 2 (id=2113):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x1000000, 0x9, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_RATE={0x14, 0x6, {0x40, 0x3f, 0xa6, 0x7}}]}}}]}, 0x60}}, 0x0)

13.872074513s ago: executing program 0 (id=2115):
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef)
truncate(&(0x7f0000000000)='./file1\x00', 0x5e00)

13.716959294s ago: executing program 2 (id=2116):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)

13.170128475s ago: executing program 2 (id=2120):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfff)
syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @fastopen={0x22, 0x6, "fe211cbe"}]}}}}}}}}, 0x0)

12.76158493s ago: executing program 2 (id=2124):
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f00000096c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x965c, &(0x7f0000009740)="$eJzs/Qe4HXWheH+fkEIPXQGJIEV670Wl99679CZNQKVXUQSUZsFCVaSpIAIKIiKoCIIUsaKCCErvvb5PSCIxLrh6//f3cr1rrec52WfPnpn9Pd/P7JmT6MNsuvIGyw8MTDAwqpkGxu2Mk46aa+kDVrrutD0emfj6RQ+7d/TiyUc9jBj9dMSg0Y/jDQwMjDd6P6OXDd/70svGGxjy+vI3mnjCiQZNOjCw0Oiny45+XHzUwxTbjlnvtXEad6Cj3uTwkd8dO+rr9SYb+RYjv9l2t2tGLpt8rO1HbnLNP/2g0jZdbpWV37D6u9tIq6Gjvx/7a9iorym2GBiYYtMBPj7GXnfQ2/AjjXzPZfc//Zqr3ob3/o9r0+VWWW0c/5GfxcGjly0+8jM+7mfQ2LjH+XMnX3XS6CkcNHrOhozzWfmPaNPlVl5z4M3P8wOTHr/14NdGnTfHHxh1oZhwYGBgotHn10nebpf6/9Zyyy+8/Mjz/Zjno9nHHMvL0nEx2yo3HTHy0Bh1nhh+3phrQVVVVf1ntNzyC68A1/8J3ur6v+T5B1zf9b+qquo/t9WWW37hkdf6ca7/k7zV9f+A29fYetS//S+7+KitXn17f4iqqqr6t1p5Nbz+T/5W1/9ljlvrxK7/VVVV/7mtv9br1/9Jxrn+T/1W1/9ZHtrzstHrjfm94ZWxdjlorP894aWxlg8ea/mLYy0fOtZ+xl5/2FjLnx9r+fgjX4P1Jx8YGL736OUvv7F4+OEDAwMzjV7+wljLz3zj/6czYshYy88aa/mwsZafPXqsI5ePP9byc8daf4K3mOqqqqr/Na2/8MorDIz1/7MfvXjaMa/T9f/gK26e/u0ab1VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV1X9irz5y5dVv3PP90IGx7l3993tYj/7vAg66+Jpbb33bBvq/o0H//N9DPPztHtP/10Y6T3DBTAMDe270dg+l3ob+Y+5VX/9Pyt9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb3J/f+XHfO41d27bjV61SWXv3boPW9sOWJg19HfnXHSUXPt+jaM/W3o/+r9/wd2HTQwMNp38pGWay+3/oZzDAwM3DP02uUXG/j7a0uMfG3pKQcPDH590zle/3PoiDfZ81KjHkYeTANT/30fF7++/9VeO2vwoHEGMVZTXH7OObts+twi4z7O/uY/x3hjvnnxzoMeee211177h4Wjm+BNNh6z/zE/y7jOo8c+x8ixz7/fHnvPv+8BB8676x7b7rzjzjvuudAiiy2+2EJLLLnwovPvtOvuOy4w6s83mbOZXv9z8L8yZ5OMO2ePLDf2nI37s73ZnM301nP2+h4nuHH+ecfM2ZB/c84Gv/WczbTr6DcaMTB0YJvXp2bQwMCIIUMH9h/5ZMHxBwZGDB297rQj111myvEGBk584wcd+d34fz8GBx0+cp1NV95g+TdG9s8/4T9/Tl9v8lEPYyZ/xOg3GTHeqCHONPDGoTh870svG2/kXPzDNE884USDJh0YWGj002VHPy456mGySces99o4jTvQUW8y8twx6NhRX6N2MPItRn7z7FT3zzpyvONs//+i/9b1/5+8lhj094kaNPpr9DqjvJZbZbU33uv1aRg5d4NHL1t8pMm4c/Y/2T+Nd6YhYw4GHO/Kqy2/8MjF48z/mE3w+Dr2oDlvGHVsLbv4qK1e/W+j0HgneYvxrrYcjneStxrvLTPPP/6oXf2PjXecc92ao178V851A299rhtM2+9484hxz3VrvPkQ/+FzPGaOxh9npTc7100+49WHjdz/wFuf69YcOfah/3CuG29gYMTgMee6kSe+YUMHThz5ZKGRT8YfOnDeyCcLv/5kwoFrRj6Zb/u9dt9h5IIJxszJAiP3u+yUg153n2PeE8597ZTXXhsyeixnDv/HsY4+PmYa+3q+3JSjJnPMtmP2O3LVMftddppRrw0bvd+z/o39jtmWxrvqpKNeG3/0fs8eZ79D32K/Y7b9p8/DHIP+fuJ6k/PNyuOcb0b/jjvm7f7ha9iorym2GBiYYlPyHWfd//KcSZ/fCd5ivMstv/AKI8c3zuf374cjfX6HbrfIIQMDA5OO+ngMP2/M2P/NBr3ZeIe89XiXh/EOeavxTnf8EUv/D4x3YKzx/sNxtsSIUcfKBKOPs3P/jeN3zLbjnseGvv7qqNP+BP/KeWymfzqPHTF4vHEme6ze7He2HWD9Ud9P+/e9PTp8rQfHzP3Qcfb7X/3ONtbPMgjOY5OP8/e5QXfcPTCI5nyBcwZt9+p/MedDB/7x7xZj5nzMtm815+P/K3M+w1vP+b/6e/Ics4x6feg44x97zrdZdO+5x8z5sHH2+1/N+fhvfe345zlfdmAozfm6R4+at7c6n77ZnI/Zdsycv+4/5ZCBlQYGBmYdPefD/pU5n/Z/5jifCNYf9f2Of190zAaPzTNmzsed4/9qzof9u3M+09+P81lff23m8QaGDRvYf9v99ttnwVF/jnm60Kg/+Vx03pGj5vmtrqVvZjRm27f6XAz5V4wm/5eMBv1XRtMPeTOjNz5aW9/19IH/3XPRkH/XaIDPRbdeNGre3ur3ojeb8zHb0nVw6rG2H/fvoeuv9frv3ZOMcx0cswleB29fa7btx+xy9GavjDPMMdfVl8ZaPnis5S+OtXzoWPsZe/1hYy1/fqzlI3+EYWOtP4Z18pF/5x29/OU3Vh8+8i+pM41e/sJYy898Y9sRY/2TwfCzxlo+1ily+NlvHBojxvq1e/i5Y63/ZofKmzbm3yR3HfckX/9q/fu/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3uT+/8fPvpx2fO33Xr70beTG3rf8cNPfbvH+zb3f/r+/6N9/+H+/6cOP/6+8Qb+/tpb3p991Dr/K+/Pvviohym2HbPeuPcHH3ego97kze/PvvMtV+/x/6f7s/+3GvNZ/Rfui9f5313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uTe7/f83ox8NPnPLSYaNvhD502lunePHtHu/b3P/p+/+P9v2H+/+/OMWt04438PfX3vL+/6PWcdz//9gzph/+v/n+/2M+q93/v/6L8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cXz//0GjHweuWWXYJbeNfBz5/MJ9Xj7n7R7v29z/1fv/T3DBTAMDe270dg+l3oY6/7vL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFjb7//8Co+/+PadCyHRcY3P//P7s38V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfw/mD9m8d8mf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOK/a/6YxX+3/DGL/4fyxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOK/d/6Yxf/D+WMW/33yxyz+++aPWfz3yx+z+H8kf8zi/9H8MYv/x/LHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zi//H8MYv/0fljFv9P5I9Z/D+ZP2bxPyZ/zOL/qfwxi/+x+WMW/+Pyxyz+x+ePWfw/nT9m8f9M/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/ifmj9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfy/mj9m8f9a/pjF/5z8MYv/1/PHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/xv5Yxb/b+aPWfy/lT9m8b8of8zif3H+mMX/2/ljFv9L8scs/t/JH7P4X5o/ZvG/LH/M4n95/pjF/7v5Yxb/7+WPWfyvyB+z+F+ZP2bx/37+mMX/qvwxi/8P8scs/lfnj1n8f5g/ZvG/Jn/M4v+j/DGL/7X5Yxb/6/LHLP4/zh+z+P8kf8zi/9P8MYv/9fljFv+f5Y9Z/G/IH7P435g/ZvH/ef6Yxf+m/DGL/835Yxb/X+SPWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+X+WMW/zvyxyz+v8ofs/j/On/M4v+b/DGL/2/zxyz+v8sfs/j/Pn/M4n9n/pjF/w/5Yxb/P+aPWfz/lD9m8b8rf8zif3f+mMX/z/ljFv978scs/n/JH7P435s/ZvG/L3/M4v/X/DGL/9/yxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyT+r3+b/z9n8R+UP2bxHy9/zOI/OH/M4j8kf8ziPzR/zOI/LH/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8R+eP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP5T549Z/KfJH7P4vyN/zOL/zvwxi/+0+WMW/+nyxyz+0+ePWfzflT9m8Z8hf8ziPyJ/zOL/7vwxi/+M+WMW/5nyxyz+78kfs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi/9788cs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/+/LHLP7vzx+z+H8gf8ziv2z+mMV/ufwxi//y+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/hvmj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx/2D+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP4fyh+z+O+eP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/D+ePWfz3yR+z+O+bP2bx3y9/zOL/kfwxi/9H88cs/h/LH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//H88cs/kfnj1n8P5E/ZvH/ZP6Yxf+Y/DGL/6fyxyz+x+aPWfyPyx+z+B+fP2bx/3T+mMX/M/ljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zif2r+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bx/2r+mMX/a/ljFv9z8scs/l/PH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv9v5I9Z/L+ZP2bx/1b+mMX/ovwxi//F+WMW/2/nj1n8L8kfs/h/J3/M4n9p/pjF/7L8MYv/5fljFv/v5o9Z/L+XP2bxvyJ/zOJ/Zf6Yxf/7+WMW/6vyxyz+P8gfs/hfnT9m8f9h/pjF/5r8MYv/j/LHLP7X5o9Z/K/LH7P4/zh/zOL/k/wxi/9P88cs/tfnj1n8f5Y/ZvG/IX/M4n9j/pjF/+f5Yxb/m/LHLP43549Z/H+RP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/X+aPWfzvyB+z+P8qf8zi/+v8MYv/b/LHLP6/zR+z+P8uf8zi//v8MYv/nfljFv8/5I9Z/P+YP2bx/1P+mMX/rvwxi//d+WMW/z/nj1n878kfs/j/JX/M4n9v/pjF/778MYv/X/PHLP5/yx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+T+A8eyB+z+A/KH7P4j5c/ZvEfnD9m8R+SP2bxH5o/ZvEflj9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+A/PH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv+p88cs/tPkj1n835E/ZvF/Z/6YxX/a/DGL/3T5Yxb/6fPHLP7vyh+z+M+QP2bxH5E/ZvF/d/6YxX/G/DGL/0z5Yxb/9+SPWfxnzh+z+M+SP2bxnzV/zOI/W/6Yxf+9+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/ffljFv/3549Z/D+QP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4fzB/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/bvljFv8P5Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/h/PHLP775I9Z/PfNH7P475c/ZvH/SP6Yxf+j+WMW/4/lj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/j+WMW/6Pzxyz+n8gfs/h/Mn/M4n9M/pjF/1P5Yxb/Y/PHLP7H5Y9Z/I/PH7P4fzp/zOL/mfwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bxPzV/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4fzV/zOL/tfwxi/85+WMW/6/nj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/838scs/t/MH7P4fyt/zOJ/Uf6Yxf/i/DGL/7fzxyz+l+SPWfy/kz9m8b80f8zif1n+mMX/8vwxi/9388cs/t/LH7P4X5E/ZvG/Mn/M4v/9/DGL/1X5Yxb/H+SPWfyvzh+z+P8wf8zif03+mMX/R/ljFv9r88cs/tflj1n8f5w/ZvH/Sf6Yxf+n+WMW/+vzxyz+P8sfs/jfkD9m8b8xf8zi//P8MYv/TfljFv+b88cs/r/IH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/L/PHLP535I9Z/H+VP2bx/3X+mMX/N/ljFv/f5o9Z/H+XP2bx/33+mMX/zvwxi/8f8scs/n/MH7P4/yl/zOJ/V/6Yxf/u/DGL/5/zxyz+9+SPWfz/kj9m8b83f8zif1/+mMX/r/ljFv+/5Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9J/IcM5I9Z/Aflj1n8x8sfs/gPzh+z+A/JH7P4D80fs/gPyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/Ifnj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi//U+WMW/2nyxyz+78gfs/i/M3/M4j9t/pjFf7r8MYv/9PljFv935Y9Z/GfIH7P4j8gfs/i/O3/M4j9j/pjFf6b8MYv/e/LHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4v/e/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOL/vvwxi//788cs/h/IH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8P5g/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi/+H8scs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMX/w/ljFv998scs/vvmj1n898sfs/h/JH/M4v/R/DGL/8fyxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4v/x/DGL/9H5Yxb/T+SPWfw/mT9m8T8mf8zi/6n8MYv/sfljFv/j8scs/sfnj1n8P50/ZvH/TP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4fzZ/zOL/ufwxi//n88cs/l/IH7P4n5o/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8v5o/ZvH/Wv6Yxf+c/DGL/9fzxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf8b+WMW/2/mj1n8v5U/ZvG/KH/M4n9x/pjF/9v5Yxb/S/LHLP7fyR+z+F+aP2bxvyx/zOJ/ef6Yxf+7+WMW/+/lj1n8r8gfs/hfmT9m8f9+/pjF/6r8MYv/D/LHLP5X549Z/H+YP2bxvyZ/zOL/o/wxi/+1+WMW/+vyxyz+P84fs/j/JH/M4v/T/DGL//X5Yxb/n+WPWfxvyB+z+N+YP2bx/3n+mMX/pvwxi//N+WMW/1/kj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/l/ljFv878scs/r/KH7P4/zp/zOL/m/wxi/9v88cs/r/LH7P4/z5/zOJ/Z/6Yxf8P+WMW/z/mj1n8/5Q/ZvG/K3/M4n93/pjF/8/5Yxb/e/LHLP5/yR+z+N+bP2bxvy9/zOL/1/wxi//f8scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8sck/kMH8scs/oPyxyz+4+WPWfwH549Z/Ifkj1n8h+aPWfyH5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/sPzxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOI/Vf6YxX/q/DGL/zT5Yxb/d+SPWfzfmT9m8Z82f8ziP13+mMV/+vwxi/+78scs/jPkj1n8R+SPWfzfnT9m8Z8xf8ziP1P+mMX/PfljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8X9v/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvF/X/6Yxf/9+WMW/w/kj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+H8wfs/hvkz9m8d82f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx3zV/zOK/W/6Yxf9D+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOL/4fwxi/8++WMW/33zxyz+++WPWfw/kj9m8f9o/pjF/2P5Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8f94/pjF/+j8MYv/J/LHLP6fzB+z+B+TP2bx/1T+mMX/2Pwxi/9x+WMW/+Pzxyz+n84fs/h/Jn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8T80fs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+X80fs/h/LX/M4n9O/pjF/+v5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4v+N/DGL/zfzxyz+38ofs/hflD9m8b84f8zi/+38MYv/JfljFv/v5I9Z/C/NH7P4X5Y/ZvG/PH/M4v/d/DGL//fyxyz+V+SPWfyvzB+z+H8/f8zif1X+mMX/B/ljFv+r88cs/j/MH7P4X5M/ZvH/Uf6Yxf/a/DGL/3X5Yxb/H+ePWfx/kj9m8f9p/pjF//r8MYv/z/LHLP435I9Z/G/MH7P4/zx/zOJ/U/6Yxf/m/DGL/y/yxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOL/y/wxi/8d+WMW/1/lj1n8f50/ZvH/Tf6Yxf+3+WMW/9/lj1n8f58/ZvG/M3/M4v+H/DGL/x/zxyz+f8ofs/jflT9m8b87f8zi/+f8MYv/PfljFv+/5I9Z/O/NH7P435c/ZvH/a/6Yxf9v+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMS/2ED+WMW/0H5Yxb/8fLHLP6D88cs/kPyxyz+Q/PHLP7D8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/+H5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4j91/pjFf5r8MYv/O/LHLP7vzB+z+E+bP2bxny5/zOI/ff6Yxf9d+WMW/xnyxyz+I/LHLP7vzh+z+M+YP2bxnyl/zOL/nvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+L83f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/i/L3/M4v/+/DGL/wfyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/D+aPWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4v+h/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvH/cP6YxX+f/DGL/775Yxb//fLHLP4fyR+z+H80f8zi/7H8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+H88f8zif3T+mMX/E/ljFv9P5o9Z/I/JH7P4fyp/zOJ/bP6Yxf+4/DGL//H5Yxb/T+ePWfw/kz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+p+aPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/r+aPWfy/lj9m8T8nf8zi//X8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8f9G/pjF/5v5Yxb/b+WPWfwvyh+z+F+cP2bx/3b+mMX/kvwxi/938scs/pfmj1n8L8sfs/hfnj9m8f9u/pjF/3v5Yxb/K/LHLP5X5o9Z/L+fP2bxvyp/zOL/g/wxi//V+WMW/x/mj1n8r8kfs/j/KH/M4n9t/pjF/7r8MYv/j/PHLP4/yR+z+P80f8zif33+mMX/Z/ljFv8b8scs/jfmj1n8f54/ZvG/KX/M4n9z/pjF/xf5Yxb/W/LHLP635o9Z/G/LH7P4354/ZvH/Zf6Yxf+O/DGL/6/yxyz+v84fs/j/Jn/M4v/b/DGL/+/yxyz+v88fs/jfmT9m8f9D/pjF/4/5Yxb/P+WPWfzvyh+z+N+dP2bx/3P+mMX/nvwxi/9f8scs/vfmj1n878sfs/j/NX/M4v+3/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGJ//gD+WMW/0H5Yxb/8fLHLP6D88cs/kPyxyz+Q/PHLP7D8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/+H5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4j91/pjFf5r8MYv/O/LHLP7vzB+z+E+bP2bxny5/zOI/ff6Yxf9d+WMW/xnyxyz+I/LHLP7vzh+z+M+YP2bxnyl/zOL/nvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+L83f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/i/L3/M4v/+/DGL/wfyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/D+aPWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4v+h/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvH/cP6YxX+f/DGL/775Yxb//fLHLP4fyR+z+H80f8zi/7H8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+H88f8zif3T+mMX/E/ljFv9P5o9Z/I/JH7P4fyp/zOJ/bP6Yxf+4/DGL//H5Yxb/T+ePWfw/kz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+p+aPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/r+aPWfy/lj9m8T8nf8zi//X8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8f9G/pjF/5v5Yxb/b+WPWfwvyh+z+F+cP2bx/3b+mMX/kvwxi/938scs/pfmj1n8L8sfs/hfnj9m8f9u/pjF/3v5Yxb/K/LHLP5X5o9Z/L+fP2bxvyp/zOL/g/wxi//V+WMW/x/mj1n8r8kfs/j/KH/M4n9t/pjF/7r8MYv/j/PHLP4/yR+z+P80f8zif33+mMX/Z/ljFv8b8scs/jfmj1n8f54/ZvG/KX/M4n9z/pjF/xf5Yxb/W/LHLP635o9Z/G/LH7P4354/ZvH/Zf6Yxf+O/DGL/6/yxyz+v84fs/j/Jn/M4v/b/DGL/+/yxyz+v88fs/jfmT9m8f9D/pjF/4/5Yxb/P+WPWfzvyh+z+N+dP2bx/3P+mMX/nvwxi/9f8scs/vfmj1n878sfs/j/NX/M4v+3/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGJ/wQD+WMW/0H5Yxb/8fLHLP6D88cs/kPyxyz+Q/PHLP7D8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/+H5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4j91/pjFf5r8MYv/O/LHLP7vzB+z+E+bP2bxny5/zOI/ff6Yxf9d+WMW/xnyxyz+I/LHLP7vzh+z+M+YP2bxnyl/zOL/nvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+L83f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/i/L3/M4v/+/DGL/wfyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/D+aPWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4v+h/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvH/cP6YxX+f/DGL/775Yxb//fLHLP4fyR+z+H80f8zi/7H8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+H88f8zif3T+mMX/E/ljFv9P5o9Z/I/JH7P4fyp/zOJ/bP6Yxf+4/DGL//H5Yxb/T+ePWfw/kz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+p+aPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/r+aPWfy/lj9m8T8nf8zi//X8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8f9G/pjF/5v5Yxb/b+WPWfwvyh+z+F+cP2bx/3b+mMX/kvwxi/938scs/pfmj1n8L8sfs/hfnj9m8f9u/pjF/3v5Yxb/K/LHLP5X5o9Z/L+fP2bxvyp/zOL/g/wxi//V+WMW/x/mj1n8r8kfs/j/KH/M4n9t/pjF/7r8MYv/j/PHLP4/yR+z+P80f8zif33+mMX/Z/ljFv8b8scs/jfmj1n8f54/ZvG/KX/M4n9z/pjF/xf5Yxb/W/LHLP635o9Z/G/LH7P4354/ZvH/Zf6Yxf+O/DGL/6/yxyz+v84fs/j/Jn/M4v/b/DGL/+/yxyz+v88fs/jfmT9m8f9D/pjF/4/5Yxb/P+WPWfzvyh+z+N+dP2bx/3P+mMX/nvwxi/9f8scs/vfmj1n878sfs/j/NX/M4v+3/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGJ/4QD+WMW/0H5Yxb/8fLHLP6D88cs/kPyxyz+Q/PHLP7D8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/+H5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4j91/pjFf5r8MYv/O/LHLP7vzB+z+E+bP2bxny5/zOI/ff6Yxf9d+WMW/xnyxyz+I/LHLP7vzh+z+M+YP2bxnyl/zOL/nvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+L83f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/i/L3/M4v/+/DGL/wfyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/D+aPWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4v+h/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvH/cP6YxX+f/DGL/775Yxb//fLHLP4fyR+z+H80f8zi/7H8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+H88f8zif3T+mMX/E/ljFv9P5o9Z/I/JH7P4fyp/zOJ/bP6Yxf+4/DGL//H5Yxb/T+ePWfw/kz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+p+aPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/r+aPWfy/lj9m8T8nf8zi//X8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8f9G/pjF/5v5Yxb/b+WPWfwvyh+z+F+cP2bx/3b+mMX/kvwxi/938scs/pfmj1n8L8sfs/hfnj9m8f9u/pjF/3v5Yxb/K/LHLP5X5o9Z/L+fP2bxvyp/zOL/g/wxi//V+WMW/x/mj1n8r8kfs/j/KH/M4n9t/pjF/7r8MYv/j/PHLP4/yR+z+P80f8zif33+mMX/Z/ljFv8b8scs/jfmj1n8f54/ZvG/KX/M4n9z/pjF/xf5Yxb/W/LHLP635o9Z/G/LH7P4354/ZvH/Zf6Yxf+O/DGL/6/yxyz+v84fs/j/Jn/M4v/b/DGL/+/yxyz+v88fs/jfmT9m8f9D/pjF/4/5Yxb/P+WPWfzvyh+z+N+dP2bx/3P+mMX/nvwxi/9f8scs/vfmj1n878sfs/j/NX/M4v+3/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGJ/0QD+WMW/0H5Yxb/8fLHLP6D88cs/kPyxyz+Q/PHLP7D8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/+H5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4j91/pjFf5r8MYv/O/LHLP7vzB+z+E+bP2bxny5/zOI/ff6Yxf9d+WMW/xnyxyz+I/LHLP7vzh+z+M+YP2bxnyl/zOL/nvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+L83f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/i/L3/M4v/+/DGL/wfyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/D+aPWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4v+h/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvH/cP6YxX+f/DGL/775Yxb//fLHLP4fyR+z+H80f8zi/7H8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+H88f8zif3T+mMX/E/ljFv9P5o9Z/I/JH7P4fyp/zOJ/bP6Yxf+4/DGL//H5Yxb/T+ePWfw/kz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+p+aPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/r+aPWfy/lj9m8T8nf8zi//X8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8f9G/pjF/5v5Yxb/b+WPWfwvyh+z+F+cP2bx/3b+mMX/kvwxi/938scs/pfmj1n8L8sfs/hfnj9m8f9u/pjF/3v5Yxb/K/LHLP5X5o9Z/L+fP2bxvyp/zOL/g/wxi//V+WMW/x/mj1n8r8kfs/j/KH/M4n9t/pjF/7r8MYv/j/PHLP4/yR+z+P80f8zif33+mMX/Z/ljFv8b8scs/jfmj1n8f54/ZvG/KX/M4n9z/pjF/xf5Yxb/W/LHLP635o9Z/G/LH7P4354/ZvH/Zf6Yxf+O/DGL/6/yxyz+v84fs/j/Jn/M4v/b/DGL/+/yxyz+v88fs/jfmT9m8f9D/pjF/4/5Yxb/P+WPWfzvyh+z+N+dP2bx/3P+mMX/nvwxi/9f8scs/vfmj1n878sfs/j/NX/M4v+3/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGJ/8QD+WMW/0H5Yxb/8fLHLP6D88cs/kPyxyz+Q/PHLP7D8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/+H5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4j91/pjFf5r8MYv/O/LHLP7vzB+z+E+bP2bxny5/zOI/ff6Yxf9d+WMW/xnyxyz+I/LHLP7vzh+z+M+YP2bxnyl/zOL/nvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+L83f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/i/L3/M4v/+/DGL/wfyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/D+aPWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4v+h/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvH/cP6YxX+f/DGL/775Yxb//fLHLP4fyR+z+H80f8zi/7H8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+H88f8zif3T+mMX/E/ljFv9P5o9Z/I/JH7P4fyp/zOJ/bP6Yxf+4/DGL//H5Yxb/T+ePWfw/kz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+p+aPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/r+aPWfy/lj9m8T8nf8zi//X8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8f9G/pjF/5v5Yxb/b+WPWfwvyh+z+F+cP2bx/3b+mMX/kvwxi/938scs/pfmj1n8L8sfs/hfnj9m8f9u/pjF/3v5Yxb/K/LHLP5X5o9Z/L+fP2bxvyp/zOL/g/wxi//V+WMW/x/mj1n8r8kfs/j/KH/M4n9t/pjF/7r8MYv/j/PHLP4/yR+z+P80f8zif33+mMX/Z/ljFv8b8scs/jfmj1n8f54/ZvG/KX/M4n9z/pjF/xf5Yxb/W/LHLP635o9Z/G/LH7P4354/ZvH/Zf6Yxf+O/DGL/6/yxyz+v84fs/j/Jn/M4v/b/DGL/+/yxyz+v88fs/jfmT9m8f9D/pjF/4/5Yxb/P+WPWfzvyh+z+N+dP2bx/3P+mMX/nvwxi/9f8scs/vfmj1n878sfs/j/NX/M4v+3/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGJ/yQD+WMW/0H5Yxb/8fLHLP6D88cs/kPyxyz+Q/PHLP7D8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/+H5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4j91/pjFf5r8MYv/O/LHLP7vzB+z+E+bP2bxny5/zOI/ff6Yxf9d+WMW/xnyxyz+I/LHLP7vzh+z+M+YP2bxnyl/zOL/nvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+L83f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/i/L3/M4v/+/DGL/wfyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/D+aPWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4v+h/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvH/cP6YxX+f/DGL/775Yxb//fLHLP4fyR+z+H80f8zi/7H8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+H88f8zif3T+mMX/E/ljFv9P5o9Z/I/JH7P4fyp/zOJ/bP6Yxf+4/DGL//H5Yxb/T+ePWfw/kz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+p+aPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/r+aPWfy/lj9m8T8nf8zi//X8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8f9G/pjF/5v5Yxb/b+WPWfwvyh+z+F+cP2bx/3b+mMX/kvwxi/938scs/pfmj1n8L8sfs/hfnj9m8f9u/pjF/3v5Yxb/K/LHLP5X5o9Z/L+fP2bxvyp/zOL/g/wxi//V+WMW/x/mj1n8r8kfs/j/KH/M4n9t/pjF/7r8MYv/j/PHLP4/yR+z+P80f8zif33+mMX/Z/ljFv8b8scs/jfmj1n8f54/ZvG/KX/M4n9z/pjF/xf5Yxb/W/LHLP635o9Z/G/LH7P4354/ZvH/Zf6Yxf+O/DGL/6/yxyz+v84fs/j/Jn/M4v/b/DGL/+/yxyz+v88fs/jfmT9m8f9D/pjF/4/5Yxb/P+WPWfzvyh+z+N+dP2bx/3P+mMX/nvwxi/9f8scs/vfmj1n878sfs/j/NX/M4v+3/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGJ/6QD+WMW/0H5Yxb/8fLHLP6D88cs/kPyxyz+Q/PHLP7D8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/+H5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4j91/pjFf5r8MYv/O/LHLP7vzB+z+E+bP2bxny5/zOI/ff6Yxf9d+WMW/xnyxyz+I/LHLP7vzh+z+M+YP2bxnyl/zOL/nvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+L83f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/i/L3/M4v/+/DGL/wfyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/D+aPWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4v+h/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvH/cP6YxX+f/DGL/775Yxb//fLHLP4fyR+z+H80f8zi/7H8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+H88f8zif3T+mMX/E/ljFv9P5o9Z/I/JH7P4fyp/zOJ/bP6Yxf+4/DGL//H5Yxb/T+ePWfw/kz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+p+aPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/r+aPWfy/lj9m8T8nf8zi//X8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8f9G/pjF/5v5Yxb/b+WPWfwvyh+z+F+cP2bx/3b+mMX/kvwxi/938scs/pfmj1n8L8sfs/hfnj9m8f9u/pjF/3v5Yxb/K/LHLP5X5o9Z/L+fP2bxvyp/zOL/g/wxi//V+WMW/x/mj1n8r8kfs/j/KH/M4n9t/pjF/7r8MYv/j/PHLP4/yR+z+P80f8zif33+mMX/Z/ljFv8b8scs/jfmj1n8f54/ZvG/KX/M4n9z/pjF/xf5Yxb/W/LHLP635o9Z/G/LH7P4354/ZvH/Zf6Yxf+O/DGL/6/yxyz+v84fs/j/Jn/M4v/b/DGL/+/yxyz+v88fs/jfmT9m8f9D/pjF/4/5Yxb/P+WPWfzvyh+z+N+dP2bx/3P+mMX/nvwxi/9f8scs/vfmj1n878sfs/j/NX/M4v+3/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGJ//CB/DGL/6D8MYv/ePljFv/B+WMW/yH5Yxb/ofljFv9h+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL//D8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMX/HfljFv935o9Z/KfNH7P4T5c/ZvGfPn/M4v+u/DGL/wz5Yxb/EfljFv93549Z/GfMH7P4z5Q/ZvF/T/6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/N+bP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfzflz9m8X9//pjF/wP5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/B/PHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8d80fs/jvlj9m8f9Q/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/h/OH/M4r9P/pjFf9/8MYv/fvljFv+P5I9Z/D+aP2bx/1j+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/D+eP2bxPzp/zOL/ifwxi/8n88cs/sfkj1n8P5U/ZvE/Nn/M4n9c/pjF//j8MYv/p/PHLP6fyR+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/U/PHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/V/PHLP5fyx+z+J+TP2bx/3r+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+H8jf8zi/838MYv/t/LHLP4X5Y9Z/C/OH7P4fzt/zOJ/Sf6Yxf87+WMW/0vzxyz+l+WPWfwvzx+z+H83f8zi/738MYv/FfljFv8r88cs/t/PH7P4X5U/ZvH/Qf6Yxf/q/DGL/w/zxyz+1+SPWfx/lD9m8b82f8zif13+mMX/x/ljFv+f5I9Z/H+aP2bxvz5/zOL/s/wxi/8N+WMW/xvzxyz+P88fs/jflD9m8b85f8zi/4v8MYv/LfljFv9b88cs/rflj1n8b88fs/j/Mn/M4n9H/pjF/1f5Yxb/X+ePWfx/kz9m8f9t/pjF/3f5Yxb/3+ePWfzvzB+z+P8hf8zi/8f8MYv/n/LHLP535Y9Z/O/OH7P4/zl/zOJ/T/6Yxf8v+WMW/3vzxyz+9+WPWfz/mj9m8f9b/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjEf7KB/DGL/6D8MYv/ePljFv/B+WMW/yH5Yxb/ofljFv9h+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL//D8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMX/HfljFv935o9Z/KfNH7P4T5c/ZvGfPn/M4v+u/DGL/wz5Yxb/EfljFv93549Z/GfMH7P4z5Q/ZvF/T/6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/N+bP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfzflz9m8X9//pjF/wP5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/s/8cePRgKYgBQAKuNX9u2rUlq27Zt27Zt27bbs60F3gT3khXS8r+z/6jlfxf/Ucv/rv6jlv/d/Ect/7v7j1r+9/Aftfzv6T9q+d/Lf9Tyv7f/qOV/H/9Ry/++/qOW//38Ry3/+/uPWv4P8B+1/B/oP2r5P8h/1PJ/sP+o5f8Q/1HL/6H+o5b/w/xHLf+H+49a/o/wH7X8H+k/avk/yn/U8n+0/6jl/xj/Ucv/sf6jlv/j/Ect/8f7j1r+T/Aftfyf6D9q+T/Jf9Tyf7L/qOX/FP9Ry/+p/qOW/9P8Ry3/p/uPWv7P8B+1/J/pP2r5P8t/1PJ/tv+o5f8c/1HL/7n+o5b/8/xHLf/n+49a/i/wH7X8X+g/avm/yH/U8n+x/6jl/xL/Ucv/pf6jlv/L/Ect/5f7j1r+r/Aftfxf6T9q+b/Kf9Tyf7X/qOX/Gv9Ry/+1/qOW/+v8Ry3/1/uPWv5v8B+1/N/oP2r5v8l/1PJ/s/+o5f8W/1HL/63+o5b/2/xHLf+3+49a/u/wH7X83+k/avm/y3/U8n+3/6jl/x7/Ucv/vf6jlv/7/Ect//f7j1r+H/Aftfw/6D9q+X/If9Ty/7D/qOX/Ef9Ry/+j/qOW/8f8Ry3/j/uPWv6f8B+1/D/pP2r5f8p/1PL/tP+o5f8Z/1HL/7P+o5b/5/xHLf/P+49a/l/wH7X8v+g/avl/yX/U8v+y/6jl/xX/Ucv/q/6jlv/X/Ect/6/7j1r+3/Aftfy/6T9q+X/Lf9Ty/7b/qOX/Hf9Ry/+7/qOW//f8Ry3/7/uPWv4/8B+1/H/oP2r5/8h/1PL/sf+o5f8T/1HL/6f+o5b/z/xHLf+f+49a/r/wH7X8f+k/avn/yn/U8v+1/6jl/xv/Ucv/t/6jlv/v/Ect/9/7j1r+f/Aftfz/6D9q+f/Jf9Ty/7P/qOX/F/9Ry/+v/qOW/9/8Ry3/v/uPWv7/8B+1/P/pP2r5/8t/1PL/t/+o5f8f/1HL/7/+o5b///xHLf//+49a/gf5j1r+B/uPWv6H+I9a/of6j1r+h/mPWv6H+49a/kf4j1r+R/qPWv5H+Y9a/kf7j1r+x/iPWv7H+o9a/sf5j1r+x/uPWv4n+I9a/if6j1r+J/mPWv4n+49a/qf4j1r+p/qPWv6n+Y9a/qf7j0r+B2bxH7X8z+o/avmfzX/U8j+7/6jlfw7/Ucv/nP6jlv+5/Ect/3P7j1r+5/EftfzP6z9q+Z/Pf9TyP7//qOV/Af9Ry/+C/qOW/4X8Ry3/C/uPWv4H/Ect/4v4j1r+F/Uftfwv5j9q+V/cf9Tyv4T/qOV/Sf9Ry/9S/qOW/6X9Ry3/y/iPWv6X9R+1/C/nP2r5X95/1PK/gv+o5X9F/1HL/0r+o5b/lf1HLf+r+I9a/lf1H7X8r+Y/avlf3X/U8r+G/6jlf03/Ucv/Wv6jlv+1/Uct/+v4j1r+1/Uftfyv5z9q+V/ff9Tyv4H/qOV/Q/9Ry/9G/qOW/439Ry3/m/iPWv439R+1/G/mP2r539x/1PK/hf+o5X9L/1HL/1b+o5b/rf1HLf/b+I9a/rf1H7X8b+c/avnf3n/U8r+D/6jlf0f/Ucv/Tv6jme4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGawc/8xXtcFHMc/d3B3CAUiRki9gaACwePkjl+CilY0z8ZZYevXJJicAh2peDNAFpRa1NzSyZa1SP2DtFZrbMZaTcpsi9mKmvbDuQUl/Rjr1IpskXXuC9/veff1uPl9n+83f/B4/HH3/XyO1+eA7Xmfz3f+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC1095xec+IugGnRvQ/CD/vPPF5/r8/tG7Pnn3jK5/LX37PIJes73/Q29vbu23CL24pHzYVRVH6bpeVj0dVj0vX375/6tnl717cd/dts5duWf7Y7o09Y366YPuRhhNnG4rV163v6rywvijCiIZic+lgXl1RhMaG4q7SQWvpoKmheKh00Hbi4KziR6WDudfe0LW2dOIV3xrOOO0dO4oRA4otBvw06N//9v2XvrfyeYhLVq42sij3f8X3n2iq+lrFKfqvXD/UVfdf8x8QOKXa+l/xfOXzEJd8xf2/9W8fOzzY107df+X6oV7/kM4gz/8DGq1+7q96/p82yCX79s0tj48q9b9k8X0byqdGvprn/5evH0ZU918/4Pm/9Bw/svL831QUoWGYfx1wRmnv+HTPUPf/ofsfOblqU9e//63HDq0q9d+84ZPPlU811Nj/yCHu/3VPVv1egdq0dzzQW3X/r6H/YuYgl+zrv+fWp4+X+v/T/mfO7/e1WvpvqO6/pXvjjS03b9navH7jmus7r+/8ROv8hYsWti6+qG1By4lHgpMfh/m3AmeG4d3/i9FVm7qi6OzbX/Dcyp2l/qevX/nZ8qlRNfbfOOT9f5r7Pwxqen3R2FhsXtPdvWneyY+Vw9aTH0/+skH6r+H9/4xZ5V9Wed9dVxST+vZzblywutT/g8c+93j5VGON/TcN2f9lhff7MAzDvP+vrdoM6P/oirHPlvr/0sOzusunan3/P2rI/g+7/8NwtHdU/Qs/r7FS/5eM3f33uHU4yz//g3Ry9D/++J1Xxa3DaP1DOjn6/8jtM5+KW4cx+od0cvT/vbXvXBi3Dq/TP6STo/9/Tv7r/XHr8Hr9Qzo5+j/07H+mxK3DWP1DOjn633XX+3fGrcM4/UM6Ofqfse3IHXHrcLb+IZ0c/a+rv2pC3DqM1z+kk6P/d72w6ttx63CO/iGdHP2P2/mvpXHrMEH/kE6O/nvW3f1k3Dqcq39IJ0f/X5+45B1x6/AG/UM6Ofr/wh/nvBi3DhP1D+nk6P/Rr+7YELcOb9Q/pJOj/x9+YOxg/5+wVyFM0j+kk6P/Y3P27I1bh/P0D+nk6P93hx4eF7cOk/UP6eTo/54Hpn45bh3epH9IJ0f/N11+6y1x6/Bm/UM6OfpfsuyXh+PWIegf0snR/8SfPboqbh2m6B/SydH/Nd/dcCBuHabqH9LJ0f/mc761PG4dpukf0snRf1tX0xNx6/AW/UM6Ofqfeu/EjXHrMF3/kE6O/q/+8yP/jVuHGfqHdHL0v6/xqXPj1uGt+od0cvT/v82bPhO3Dm/TP6STo/9f3XntxXHr8Hb9Qzo5+v/KPw58M24dZuof0snR/5Gl7/5L3DrM0j+kk6P/7yzvuSluHc7XP6STo//b9r54MG4dZusf0snR/4GDH/xw3DrM0T+kk6P/2S1t++LW4QL9Qzo5+l/zvnunxa1Ds/4hnRz9r9jz+a/FrcNc/UM6OfpvfHr6qLh1aNE/pJOj/72LdjXErcOF+od0cvR/vH3ZPXHrME//kE6O/n/zyNzmuHVo1T+kk6P/3Y/d8YO4dWjTP6STo//tM/5wddw6zNc/pJOj//nXXPnjuHVYoH9IJ0f/k77x0W1x67BQ/5BOjv5X/vb5o3HrsEj/kE6O/punfOrBuHVYrH9IJ0f/163+9by4dbhI/5BOjv6v3PWTL8atwxL9Qzo5+q87esN5ceuwVP+QTo7+nxk95oW4dbhY/5BOjv4f6r5/ddw6XKJ/SCdH/7fv2Pv7uHW4VP+QTo7+D/5/8hVx67BM/5DOzVu2fnxNV1fnJi+88MKLvhen+ycTkNrL0Z/u3wkAAAAAAAAAAAAAAHAqOf5zotP9ZwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgJXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FQAAAD//0x8Hu0=")
setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1)
setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010004000000d7000400000000000000100006000000000020"], 0x24, 0x0)
listxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/20, 0x57)

11.749476714s ago: executing program 0 (id=2129):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="ea0e04"], 0x78)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

10.915857698s ago: executing program 3 (id=2133):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

10.915345466s ago: executing program 0 (id=2134):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080))
r0 = syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f00000012c0)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2004, @fd_index, 0x0, 0x0})
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)

9.809852079s ago: executing program 3 (id=2139):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x41045508, 0x0)

9.74003795s ago: executing program 0 (id=2140):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)={[{@nossd_spread}, {@ssd_spread}, {@ref_verify}, {@datacow}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@skip_balance}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
setxattr$security_ima(0x0, 0x0, 0x0, 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)

9.456013918s ago: executing program 3 (id=2143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "3f6e47580a28e7cdd1fae17cf1b4d79982605cb5"}}]}]}, 0x58}}, 0x0)

9.412153863s ago: executing program 2 (id=2144):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000500060001000000080009000100000005000200d0"], 0x44}}, 0x0)

9.290314068s ago: executing program 3 (id=2146):
open(&(0x7f0000000000)='./file1\x00', 0x8042, 0x0)
pipe2$9p(&(0x7f00000001c0), 0x4000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0)
syz_usb_connect(0x3, 0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000854aff0824042c01d0e2010203010902240001000000000904000002fadc6f00090549", @ANYRES8=r0], 0x0)

7.955758825s ago: executing program 2 (id=2161):
r0 = socket$inet6(0xa, 0x3, 0x2)
getsockname(r0, &(0x7f0000000d00)=@xdp={0x2c, 0x0, <r1=>0x0}, &(0x7f0000000c80)=0x80)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0)

7.483154555s ago: executing program 5 (id=2151):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
setuid(0x0)
linkat(r0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400)

7.345334615s ago: executing program 3 (id=2153):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20)

7.299322225s ago: executing program 5 (id=2154):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0))

7.215419365s ago: executing program 0 (id=2155):
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x8b, 0x2a7, &(0x7f0000000180)="$eJzs3U9P1EAYx/HftMuyCGIVjInxYFCiJwN4MV5IDPE1eNGo7JoQNxAVE/Ui8Wx8Ad69+AJ8EZ6MiWc9efIFcKuZ2Vl2yrZbWEIr8ftJFsp2/jzTdtt5miwVgP/WnbWfn27+ti8jxYol3ZYiu+qyGpLO60Lr5eb2xna30x7VUCy15F5GcjXNUJn1zU5eVVvP1fAS+1dDM+F7OB5pmqa/6g4CdWr533Heykia9J/OOCx8ku3E0k7dQdTM7GpXrzRbdxwAgHqZ3vU98tf5GT9/jyJp0V/2w+v/j9M1x3s017Rbdwg1C67/LstKjd2/Z9yqQb7nUji7PupniYftx04em+odWZkJpslmlcPJooslmnqy0e3cWN/qtiO906oXFJuXtKq2z1m9kmgXcrrLaurgrY0w7cYwYcewUhD/XF6n4/dYznw138wDk+ij2nvzv0ZqbPcugmRvT92dGMS/VNTc1rP7rlavVMEoz7pOLmY37MhRxkUZifyWSmNlbxAk2TibubWa2lerN7rlop58O3O5tVZKas3bWp+DWoOjubjmcTMfzD2zoD/6orVg/h/Zrb2o4U9mfiOupD8y+uPJzQ0brmQSvrVzKbfNaLzxYCzv9Vi3NPvi9Zunj7rdzvOqF2wMlXfKQm+hfxD8K/GMt2DPsftXNarpvXnkTdfSoQoPjzRc6J86D9Bg/yRd2mktZyVUbLDTi8u8rTIgVM2ePEwv/wvylSWXItkfyYh5elo2bQtaXM7JDSb3Cp4KWjL+/nxxBjRdnMEdNOe6cl26GrxZknMlOidNjRzrSWLW9F0Puf8PAAAAAAAAAAAAAAAAAABw0lTxbY2gO/6jDwAAAAAAAAAAAAAAAAAAAAAAYyh+/m9Lx/j838z3AHj+L1CPvwEAAP//pAVz+Q==")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
sync()
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

7.214935679s ago: executing program 5 (id=2156):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
socket$packet(0x11, 0x0, 0x300)
fstat(r0, &(0x7f0000000100))

7.073002079s ago: executing program 3 (id=2157):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x2c}}, 0x0)

6.794970826s ago: executing program 4 (id=2159):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
setsockopt$sock_attach_bpf(r0, 0x29, 0x48, &(0x7f0000000100)=r1, 0x120)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x0)

6.501589423s ago: executing program 4 (id=2160):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000000000000000080000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000000000089f8000000", @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x300}, 0x0)

6.248465215s ago: executing program 4 (id=2162):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000100), 0x4)

6.139790017s ago: executing program 4 (id=2163):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x7, 0x7fffffff})
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001200"], 0x58}}, 0x40008804)

6.059983313s ago: executing program 5 (id=2164):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)

5.92012442s ago: executing program 4 (id=2165):
syz_mount_image$minix(&(0x7f0000000480), &(0x7f0000000000)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x192, &(0x7f0000000700)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./bus\x00', 0x105c, 0x0, 0x4, 0x0, 0x0)
rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='./file0\x00')

5.517174663s ago: executing program 5 (id=2166):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x8, 0x400, 0x100}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10)
syz_emit_ethernet(0xe, &(0x7f0000000580)=ANY=[], 0x0)

5.278788619s ago: executing program 5 (id=2167):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xc239}]}}]}, 0x44}}, 0x0)

5.09941316s ago: executing program 4 (id=2168):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000000000bfdcf0240c00000048bad0370bffc10bd56af31d00a4000180"], 0x34}], 0x1}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="48005200060005"], 0x24}}, 0x0)

295.421483ms ago: executing program 1 (id=2125):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf)

144.834244ms ago: executing program 1 (id=2169):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
close(r0)

0s ago: executing program 1 (id=2170):
r0 = timerfd_create(0x0, 0x0)
readv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1)
timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000})

kernel console output (not intermixed with test programs):

thout casefold feature
[  192.932744][ T8402] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1104: couldn't read orphan inode 15 (err -117)
[  192.992607][ T8407] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1106'.
[  193.032433][ T8402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.131564][ T8402] fscrypt (loop4, inode 18): Direct key flag not allowed with different contents and filenames modes
[  193.251133][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.644623][   T29] audit: type=1326 audit(1726813121.953:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15a17def9 code=0x7ffc0000
[  193.700372][   T29] audit: type=1326 audit(1726813121.953:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15a17def9 code=0x7ffc0000
[  193.745760][ T1263] ieee802154 phy0 wpan0: encryption failed: -22
[  193.753332][ T1263] ieee802154 phy1 wpan1: encryption failed: -22
[  193.792158][   T29] audit: type=1326 audit(1726813121.983:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc15a17def9 code=0x7ffc0000
[  193.913507][   T29] audit: type=1326 audit(1726813121.983:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15a17def9 code=0x7ffc0000
[  194.032148][   T29] audit: type=1326 audit(1726813121.983:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15a17def9 code=0x7ffc0000
[  194.057517][ T8408] loop5: detected capacity change from 0 to 40427
[  194.135600][   T29] audit: type=1326 audit(1726813121.993:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc15a17def9 code=0x7ffc0000
[  194.166461][ T8447] loop4: detected capacity change from 0 to 512
[  194.197673][ T8408] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff
[  194.211324][ T8408] F2FS-fs (loop5): Image doesn't support compression
[  194.218355][ T8408] F2FS-fs (loop5): Image doesn't support compression
[  194.218793][ T8444] loop1: detected capacity change from 0 to 2048
[  194.230735][ T8408] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x2
[  194.254216][ T8408] F2FS-fs (loop5): invalid crc value
[  194.260213][ T8447] EXT4-fs: Ignoring removed oldalloc option
[  194.266538][   T29] audit: type=1326 audit(1726813121.993:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15a17def9 code=0x7ffc0000
[  194.268490][ T8408] F2FS-fs (loop5): Found nat_bits in checkpoint
[  194.311511][ T8451] veth1_macvtap: left promiscuous mode
[  194.339879][ T8444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.359230][ T8447] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1126: Parent and EA inode have the same ino 15
[  194.362410][   T29] audit: type=1326 audit(1726813121.993:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15a17def9 code=0x7ffc0000
[  194.394817][   T29] audit: type=1326 audit(1726813122.003:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fc15a17def9 code=0x7ffc0000
[  194.417097][   T29] audit: type=1326 audit(1726813122.003:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15a17def9 code=0x7ffc0000
[  194.505773][ T8447] EXT4-fs (loop4): Remounting filesystem read-only
[  194.545817][ T8447] EXT4-fs warning (device loop4): ext4_evict_inode:254: couldn't mark inode dirty (err -5)
[  194.579508][ T8447] EXT4-fs (loop4): 1 orphan inode deleted
[  194.601065][ T8447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.625707][ T5225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.636835][ T8408] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  194.743723][ T8408] syz.5.1107: attempt to access beyond end of device
[  194.743723][ T8408] loop5: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  194.836179][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.901893][ T5221] syz-executor: attempt to access beyond end of device
[  194.901893][ T5221] loop5: rw=2049, sector=45224, nr_sectors = 8 limit=40427
[  194.958351][ T8445] loop2: detected capacity change from 0 to 32768
[  194.962216][ T5221] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  195.038686][ T5287] IPVS: starting estimator thread 0...
[  195.115127][ T8466] loop1: detected capacity change from 0 to 256
[  195.181585][ T8463] IPVS: using max 16 ests per chain, 38400 per kthread
[  195.285982][ T8445] JBD2: Ignoring recovery information on journal
[  195.421116][ T8472] loop4: detected capacity change from 0 to 512
[  195.470602][ T8445] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  195.556392][ T8478] loop0: detected capacity change from 0 to 1024
[  195.556454][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'.
[  195.618106][ T8472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.694737][ T8472] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  195.886308][ T8457] loop3: detected capacity change from 0 to 32768
[  195.920303][ T8490] loop5: detected capacity change from 0 to 128
[  195.948173][ T6634] hfsplus: b-tree write err: -5, ino 4
[  195.973164][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.397216][ T8490] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  196.568840][ T6606] ocfs2: Unmounting device (7,2) on (node local)
[  196.619450][ T8457] jfs: Unrecognized mount option "ÿÿ0xffffffffffffffff¤	Z*¬ð¿Ë m˜.Dc�8�'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value
[  197.234350][ T8519] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1155'.
[  197.254515][ T8524] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1168'.
[  197.503488][ T8529] loop1: detected capacity change from 0 to 2048
[  197.614899][ T8529] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.635203][ T8536] loop5: detected capacity change from 0 to 4096
[  197.738094][ T8536] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  198.125552][ T8550] loop3: detected capacity change from 0 to 32768
[  198.172979][ T8550] add_index: next_index = 0.  Resetting!
[  198.207917][ T8550] non-latin1 character 0x3ff found in JFS file name
[  198.241765][ T8550] mount with iocharset=utf8 to access
[  198.267512][ T8536] ntfs3: loop5: ino=3, ntfs_set_state failed, -22.
[  198.313186][ T8536] ntfs3: loop5: ino=1e, "file1" attr_set_size
[  198.339953][ T8566] loop1: detected capacity change from 0 to 1024
[  198.421368][ T6644] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22.
[  198.451793][ T5221] ntfs3: loop5: ino=3, ntfs_set_state failed, -22.
[  198.459087][ T5221] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  198.499856][ T5221] ntfs3: loop5: ino=3, ntfs_set_state failed, -22.
[  198.528853][ T8574] loop4: detected capacity change from 0 to 1024
[  198.530253][ T6644] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22.
[  198.567781][ T8574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.632425][ T8574] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.790139][ T8582] program syz.5.1179 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  198.823820][ T8590] loop2: detected capacity change from 0 to 8
[  198.830539][ T8590] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  199.045534][ T8590] cramfs: Error -3 while decompressing!
[  199.072289][ T8590] cramfs: ffffffff9a4d8618(42)->ffff88802883a000(4096)
[  199.121766][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.195148][ T8594] input: syz1 as /devices/virtual/input/input17
[  199.384876][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'.
[  199.530003][ T8606] loop2: detected capacity change from 0 to 16
[  199.557306][ T8606] erofs: (device loop2): mounted with root inode @ nid 36.
[  199.619188][ T8608] loop3: detected capacity change from 0 to 512
[  199.632175][ T8608] EXT4-fs: Ignoring removed i_version option
[  199.719793][ T8608] EXT4-fs (loop3): 1 truncate cleaned up
[  199.727442][ T8614] loop1: detected capacity change from 0 to 1024
[  199.732677][ T8608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.891152][ T7641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.900370][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  199.900388][   T29] audit: type=1326 audit(1726813128.193:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c997def9 code=0x7ffc0000
[  199.961213][   T29] audit: type=1326 audit(1726813128.193:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c997def9 code=0x7ffc0000
[  200.041477][   T29] audit: type=1326 audit(1726813128.193:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f48c997def9 code=0x7ffc0000
[  200.077481][ T8626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1199'.
[  200.103763][   T29] audit: type=1326 audit(1726813128.193:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c997def9 code=0x7ffc0000
[  200.151473][   T29] audit: type=1326 audit(1726813128.193:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c997def9 code=0x7ffc0000
[  201.366080][ T8660] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1213'.
[  201.405010][ T8660] netlink: 'syz.2.1213': attribute type 10 has an invalid length.
[  201.484857][ T8660] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  202.336346][ T8679] sp0: Synchronizing with TNC
[  202.776163][ T8653] loop5: detected capacity change from 0 to 32768
[  202.791478][ T5327] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  202.795117][ T8685] loop3: detected capacity change from 0 to 64
[  202.827922][ T8683] loop2: detected capacity change from 0 to 1024
[  202.929860][ T8683] hfsplus: request for non-existent node 2048 in B*Tree
[  202.948351][ T5327] usb 1-1: Using ep0 maxpacket: 16
[  202.963816][ T8683] hfsplus: request for non-existent node 2048 in B*Tree
[  202.978137][ T5327] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  203.010053][ T5327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  203.066430][ T5327] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  203.084131][ T5327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.101075][ T5327] usb 1-1: Product: syz
[  203.117879][ T5327] usb 1-1: Manufacturer: syz
[  203.131963][ T8689] program syz.3.1226 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  203.147783][ T5327] usb 1-1: SerialNumber: syz
[  203.170260][ T5327] usb 1-1: config 0 descriptor??
[  203.186689][ T5327] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  203.221516][ T5327] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  203.851526][ T5327] em28xx 1-1:0.0: chip ID is em2710
[  204.002526][ T8681] loop1: detected capacity change from 0 to 40427
[  204.010117][ T8687] loop4: detected capacity change from 0 to 32768
[  204.023035][ T8687] XFS: attr2 mount option is deprecated.
[  204.044417][ T8681] F2FS-fs (loop1): Found nat_bits in checkpoint
[  204.051929][ T5327] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  204.059442][ T5327] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  204.105147][ T8687] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  204.110482][ T5327] em28xx 1-1:0.0: No AC97 audio processor
[  204.161699][ T8681] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  204.194884][ T8681] syz.1.1223: attempt to access beyond end of device
[  204.194884][ T8681] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  204.208910][ T8681] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  204.236309][ T5327] usb 1-1: USB disconnect, device number 7
[  204.243269][ T5327] em28xx 1-1:0.0: Disconnecting em28xx
[  204.251698][ T5327] em28xx 1-1:0.0: Freeing device
[  204.424971][ T8687] XFS (loop4): Ending clean mount
[  204.461206][ T8687] XFS (loop4): Quotacheck needed: Please wait.
[  204.486821][ T8728] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  204.531244][ T8728] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  204.559038][ T8687] XFS (loop4): Quotacheck: Done.
[  204.787869][ T5226] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  205.381713][ T8759] loop2: detected capacity change from 0 to 64
[  205.690249][ T8772] loop5: detected capacity change from 0 to 1024
[  205.732943][ T8772] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  205.774968][ T8772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.933548][ T8778] tun0: tun_chr_ioctl cmd 1074025694
[  206.010887][ T5221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.157342][ T8790] IPVS: Error connecting to the multicast addr
[  206.247380][ T8792] pimreg: entered allmulticast mode
[  206.465934][ T8808] netlink: 'syz.4.1277': attribute type 1 has an invalid length.
[  206.480702][ T8807] loop2: detected capacity change from 0 to 1024
[  206.481500][ T8808] netlink: 9380 bytes leftover after parsing attributes in process `syz.4.1277'.
[  206.538034][ T8807] Process accounting resumed
[  206.689786][ T8813] program syz.4.1281 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  206.822042][ T8825] ubi0: attaching mtd0
[  206.846437][ T8825] ubi0: scanning is finished
[  206.851072][ T8825] ubi0: empty MTD device detected
[  207.219497][ T8840] loop3: detected capacity change from 0 to 2048
[  207.234423][ T8825] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  207.254717][ T8825] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  207.271176][ T8825] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  207.289615][ T8840] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  207.299979][ T8825] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  207.336214][ T8825] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  207.343941][ T8825] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  207.361553][ T8825] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2066534784
[  207.373102][ T8840] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.392744][ T8825] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  207.413531][   T29] audit: type=1800 audit(1726813135.723:33): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1292" name="file1" dev="loop3" ino=1346 res=0 errno=0
[  207.434161][    C0] vkms_vblank_simulate: vblank timer overrun
[  207.440452][ T8844] ubi0: background thread "ubi_bgt0d" started, PID 8844
[  207.462770][ T8832] ubi0: detaching mtd0
[  207.518845][ T8832] ubi0: mtd0 is detached
[  207.853229][ T5284] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  207.922492][ T8863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.951628][ T8863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.992323][ T8863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.020338][ T8863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.151561][ T5284] usb 5-1: Using ep0 maxpacket: 8
[  208.255909][ T5284] usb 5-1: config 0 has an invalid interface number: 151 but max is 1
[  208.264363][ T5284] usb 5-1: config 0 has no interface number 1
[  208.270627][ T5284] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  208.281847][ T5284] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  208.293761][ T5284] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[  208.305170][ T5284] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  208.315425][ T5284] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  208.328596][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  208.339454][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  208.359995][ T5284] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  208.369501][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.377600][ T5284] usb 5-1: Product: syz
[  208.390860][ T8869] loop5: detected capacity change from 0 to 4096
[  208.414759][ T5284] usb 5-1: Manufacturer: syz
[  208.419408][ T5284] usb 5-1: SerialNumber: syz
[  208.432883][ T8869] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  208.435723][ T5284] usb 5-1: config 0 descriptor??
[  208.461686][ T8852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  208.463762][ T8875] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  208.506235][ T8869] ntfs3: loop5: Failed to initialize $Extend/$Reparse.
[  208.514279][ T5284] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  208.551366][ T5284] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  208.568337][ T5284] usb 5-1: invalid MIDI in EP 0
[  208.584608][ T8869] ntfs3: loop5: ino=1b, "file0" attr_set_size
[  208.621525][ T5284] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  208.621964][ T8869] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  208.724059][ T5284] usb 5-1: USB disconnect, device number 6
[  208.867516][ T8887] loop1: detected capacity change from 0 to 22
[  208.874792][ T8887] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  208.882335][ T8887] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  209.045570][ T8893] loop3: detected capacity change from 0 to 256
[  209.120548][ T8893] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  209.154499][ T8897] ALSA: seq fatal error: cannot create timer (-22)
[  209.370833][ T8900] loop2: detected capacity change from 0 to 256
[  209.413098][ T8900] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3620664b, utbl_chksum : 0xe619d30d)
[  209.572331][ T5327] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  209.597278][ T8907] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  209.735453][ T5327] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  209.756380][ T8911] loop4: detected capacity change from 0 to 2048
[  209.784683][ T8911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  209.808551][ T5327] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  209.864984][ T5327] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  209.916565][ T5327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.947833][ T8901] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  209.969944][ T5327] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  210.007165][ T8922] input: syz0 as /devices/virtual/input/input18
[  210.112052][ T8926] loop4: detected capacity change from 0 to 256
[  210.221612][ T8926] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  210.256906][  T932] usb 2-1: USB disconnect, device number 10
[  210.461583][ T5327] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  210.621506][ T5327] usb 6-1: Using ep0 maxpacket: 16
[  210.629290][ T5327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.650556][ T5327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.681035][ T5327] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  210.701015][ T5327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.733354][ T5327] usb 6-1: config 0 descriptor??
[  211.347492][ T8964] netlink: 'syz.1.1360': attribute type 11 has an invalid length.
[  211.386451][ T8958] loop2: detected capacity change from 0 to 40427
[  211.396981][ T5327] corsair 0003:1B1C:1B02.000F: unknown main item tag 0x0
[  211.421499][ T8958] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  211.428170][ T8958] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  211.441678][ T5327] corsair 0003:1B1C:1B02.000F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0
[  211.472435][ T5327] corsair 0003:1B1C:1B02.000F: Read invalid backlight brightness: db.
[  211.516570][ T8958] F2FS-fs (loop2): Found nat_bits in checkpoint
[  211.536265][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1349'.
[  211.634716][ T8958] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  211.651749][ T8958] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  211.679763][ T8958] syz.2.1346: attempt to access beyond end of device
[  211.679763][ T8958] loop2: rw=0, sector=53328, nr_sectors = 8 limit=40427
[  211.688616][   T29] audit: type=1800 audit(1726813139.983:34): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1346" name="file2" dev="loop2" ino=10 res=0 errno=0
[  211.702895][ T8958] syz.2.1346: attempt to access beyond end of device
[  211.702895][ T8958] loop2: rw=0, sector=53328, nr_sectors = 8 limit=40427
[  211.738696][ T8958] syz.2.1346: attempt to access beyond end of device
[  211.738696][ T8958] loop2: rw=0, sector=53328, nr_sectors = 8 limit=40427
[  211.757756][ T8977] syz.2.1346: attempt to access beyond end of device
[  211.757756][ T8977] loop2: rw=2049, sector=53336, nr_sectors = 8 limit=40427
[  211.758078][ T5351] usb 6-1: USB disconnect, device number 8
[  211.998529][ T6606] syz-executor: attempt to access beyond end of device
[  211.998529][ T6606] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  212.033576][ T6606] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  212.214596][ T8985] sp0: Synchronizing with TNC
[  212.508544][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'.
[  212.854201][ T9006] netlink: 'syz.5.1366': attribute type 30 has an invalid length.
[  213.024330][ T9016] netlink: 160692 bytes leftover after parsing attributes in process `syz.5.1370'.
[  213.035473][ T9016] netlink: zone id is out of range
[  213.040602][ T9016] netlink: zone id is out of range
[  213.045805][ T9016] netlink: zone id is out of range
[  213.050958][ T9016] netlink: zone id is out of range
[  213.057082][ T9016] netlink: zone id is out of range
[  213.062622][ T9016] netlink: zone id is out of range
[  213.068339][ T9016] netlink: zone id is out of range
[  213.073613][ T9016] netlink: zone id is out of range
[  213.078733][ T9016] netlink: zone id is out of range
[  213.084812][ T9016] netlink: zone id is out of range
[  213.191753][ T5327] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  213.341613][ T5327] usb 3-1: Using ep0 maxpacket: 32
[  213.353329][ T5327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.373374][ T5327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.395871][ T5327] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  213.408999][ T5327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.440015][ T5327] usb 3-1: config 0 descriptor??
[  213.741610][ T5287] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  213.870398][ T5327] ft260 0003:0403:6030.0010: unknown main item tag 0x0
[  213.912265][ T5287] usb 2-1: Using ep0 maxpacket: 16
[  213.932349][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.961989][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.982492][ T5287] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  214.001635][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.027720][ T5287] usb 2-1: config 0 descriptor??
[  214.076027][ T5327] ft260 0003:0403:6030.0010: failed to retrieve chip version
[  214.098808][ T5327] ft260 0003:0403:6030.0010: probe with driver ft260 failed with error -71
[  214.113314][ T5327] usb 3-1: USB disconnect, device number 15
[  214.460893][ T5287] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0
[  214.538135][ T5287] corsair 0003:1B1C:1B02.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[  214.655804][ T5287] corsair 0003:1B1C:1B02.0011: Read invalid backlight brightness: db.
[  214.873935][ T5327] usb 2-1: USB disconnect, device number 11
[  215.021531][ T5287] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  215.202407][ T5287] usb 4-1: Using ep0 maxpacket: 16
[  215.222133][ T5287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.241606][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  215.263236][ T5287] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32
[  215.281467][ T5287] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  215.307262][ T5287] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  215.317854][ T5287] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  215.342505][ T5287] usb 4-1: Manufacturer: syz
[  215.373782][ T5287] usb 4-1: config 0 descriptor??
[  215.532578][ T9096] netlink: 'syz.0.1404': attribute type 12 has an invalid length.
[  215.583913][ T9097] syzkaller0: tun_chr_ioctl cmd 1074025677
[  215.594015][ T9097] syzkaller0: linktype set to 768
[  215.789027][ T9102] loop1: detected capacity change from 0 to 2048
[  215.818886][ T9102] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  215.831637][ T5287] rc_core: IR keymap rc-hauppauge not found
[  215.837678][ T5287] Registered IR keymap rc-empty
[  215.843585][ T5287] mceusb 4-1:0.0: Error: mce write urb status = -71
[  215.864236][ T5287] mceusb 4-1:0.0: Error: mce write urb status = -71
[  215.882938][ T5287] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  215.883280][ T9102] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.896310][ T5287] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19
[  215.920781][ T5287] mceusb 4-1:0.0: Error: mce write urb status = -71
[  215.959032][ T5287] mceusb 4-1:0.0: Error: mce write urb status = -71
[  215.998046][ T5287] mceusb 4-1:0.0: Error: mce write urb status = -71
[  215.999889][ T5327] hid-generic 000D:0000:0000.0012: unknown main item tag 0x0
[  216.021746][ T5287] mceusb 4-1:0.0: Error: mce write urb status = -71
[  216.037705][ T5327] hid-generic 000D:0000:0000.0012: unknown main item tag 0x0
[  216.082744][ T5287] mceusb 4-1:0.0: Error: mce write urb status = -71
[  216.097562][ T5327] hid-generic 000D:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  216.108547][   T29] audit: type=1800 audit(1726813144.393:35): pid=9102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1407" name="file1" dev="loop1" ino=1346 res=0 errno=0
[  216.131941][ T5287] mceusb 4-1:0.0: Error: mce write urb status = -71
[  216.163464][ T5287] mceusb 4-1:0.0: Error: mce write urb status = -71
[  216.215553][ T5287] mceusb 4-1:0.0: Error: mce write urb status = -71
[  216.253983][ T5287] mceusb 4-1:0.0: Error: mce write urb status = -71
[  216.286904][ T5287] mceusb 4-1:0.0: Error: mce write urb status = -71
[  216.313134][ T9120] loop4: detected capacity change from 0 to 512
[  216.314398][ T9120] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  216.328024][ T5287] mceusb 4-1:0.0: Registered   with mce emulator interface version 1
[  216.357987][ T9120] EXT4-fs (loop4): 1 truncate cleaned up
[  216.381126][ T9120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.399230][ T5287] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  216.411146][ T5287] usb 4-1: USB disconnect, device number 8
[  216.491625][ T5289] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  216.540129][ T9124] loop2: detected capacity change from 0 to 512
[  216.564520][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.616929][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'.
[  216.647257][ T9124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  216.674985][ T5289] usb 2-1: Using ep0 maxpacket: 16
[  216.685089][ T9124] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.705937][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.737278][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.789942][ T9124] EXT4-fs (loop2): shut down requested (0)
[  216.806105][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  216.865983][ T5289] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  216.905953][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.962665][ T5289] usb 2-1: config 0 descriptor??
[  217.064514][ T6606] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  217.095910][ T1117] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  217.124691][ T9143] loop5: detected capacity change from 0 to 128
[  217.128447][ T1117] Quota error (device loop2): write_blk: dquota write failed
[  217.154109][ T1117] Quota error (device loop2): free_dqentry: Can't write quota data block 5
[  217.181796][ T1117] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  217.193605][ T9144] sp0: Synchronizing with TNC
[  217.211445][ T1117] Quota error (device loop2): write_blk: dquota write failed
[  217.218968][ T1117] Quota error (device loop2): free_dqentry: Can't write quota data block 5
[  217.263594][ T5221] sysv_free_block: flc_count > flc_size
[  217.271184][ T5221] sysv_free_block: flc_count > flc_size
[  217.289949][ T5221] sysv_free_block: flc_count > flc_size
[  217.331481][ T5221] sysv_free_block: flc_count > flc_size
[  217.337114][ T5221] sysv_free_block: flc_count > flc_size
[  217.364883][ T5221] sysv_free_block: flc_count > flc_size
[  217.387884][ T5221] sysv_free_block: flc_count > flc_size
[  217.431481][ T5221] sysv_free_block: flc_count > flc_size
[  217.433411][ T5289] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  217.444346][ T5289] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max
[  217.451509][ T5221] sysv_free_block: flc_count > flc_size
[  217.456818][ T5289] microsoft 0003:045E:07DA.0013: No inputs registered, leaving
[  217.501477][ T5221] sysv_free_block: flc_count > flc_size
[  217.513446][ T5289] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  217.525289][ T5289] microsoft 0003:045E:07DA.0013: no inputs found
[  217.531703][ T5289] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway
[  217.561667][ T5221] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  217.637910][ T5351] usb 2-1: USB disconnect, device number 12
[  217.825238][ T9141] loop3: detected capacity change from 0 to 32768
[  217.855812][ T9141] XFS: ikeep mount option is deprecated.
[  217.873795][ T9141] XFS: ikeep mount option is deprecated.
[  217.921539][ T9141] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  218.111129][ T9141] XFS (loop3): Ending clean mount
[  218.150207][ T9141] XFS (loop3): Quotacheck needed: Please wait.
[  218.227989][ T9141] XFS (loop3): Quotacheck: Done.
[  218.292948][ T9141] XFS (loop3): User initiated shutdown received.
[  218.299895][ T9141] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:457).  Shutting down filesystem.
[  218.346144][ T9141] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  218.455443][ T7641] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  218.928778][ T9175] loop2: detected capacity change from 0 to 32768
[  218.996075][ T9175] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  219.078849][ T9204] loop4: detected capacity change from 0 to 256
[  219.229813][ T9204] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  219.279402][ T9175] XFS (loop2): Ending clean mount
[  219.495048][ T6606] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  220.141588][ T5351] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  220.261861][ T9233] IPv6: NLM_F_CREATE should be specified when creating new route
[  220.279961][ T9233] netlink: 'syz.0.1454': attribute type 1 has an invalid length.
[  220.321005][ T5351] usb 6-1: Using ep0 maxpacket: 16
[  220.399140][ T5351] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  220.421486][ T5351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  220.556922][ T5351] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  220.566255][ T5351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.581456][ T5351] usb 6-1: Product: syz
[  220.595842][ T5351] usb 6-1: Manufacturer: syz
[  220.600471][ T5351] usb 6-1: SerialNumber: syz
[  220.672868][ T5351] usb 6-1: config 0 descriptor??
[  220.721154][ T5351] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  220.741554][ T5351] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  220.971652][ T5289] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  220.981495][ T5287] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  221.098515][ T9236] loop2: detected capacity change from 0 to 40427
[  221.107252][ T9236] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  221.115178][ T9236] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  221.145244][ T5289] usb 4-1: Using ep0 maxpacket: 8
[  221.151568][ T5287] usb 5-1: Using ep0 maxpacket: 32
[  221.163696][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  221.184958][ T5289] usb 4-1: config 0 has an invalid interface number: 151 but max is 1
[  221.202054][ T5289] usb 4-1: config 0 has no interface number 1
[  221.215981][ T5287] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  221.235954][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.246349][ T5289] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  221.261763][ T9236] F2FS-fs (loop2): Found nat_bits in checkpoint
[  221.265900][ T5287] usb 5-1: Product: syz
[  221.273218][ T5289] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  221.290240][ T5287] usb 5-1: Manufacturer: syz
[  221.295273][ T5287] usb 5-1: SerialNumber: syz
[  221.300282][ T5289] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[  221.313438][ T5289] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  221.324473][ T5289] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  221.338267][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  221.354339][ T5287] usb 5-1: config 0 descriptor??
[  221.370573][ T5287] hub 5-1:0.0: bad descriptor, ignoring hub
[  221.387143][ T5287] hub 5-1:0.0: probe with driver hub failed with error -5
[  221.398436][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  221.413437][ T5287] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20
[  221.421515][ T5351] em28xx 6-1:0.0: chip ID is em28178
[  221.424941][ T5289] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  221.437301][ T9248] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  221.455852][ T9236] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  221.488239][ T9236] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  221.508125][ T5287] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  221.519752][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.533913][ T5289] usb 4-1: Product: syz
[  221.538145][ T5289] usb 4-1: Manufacturer: syz
[  221.542820][ T9236] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  221.551836][ T5289] usb 4-1: SerialNumber: syz
[  221.559200][ T9236] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  221.565577][ T5289] usb 4-1: config 0 descriptor??
[  221.579644][ T9239] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  221.599754][ T5289] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  221.610717][ T5289] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  221.618046][ T5289] usb 4-1: invalid MIDI in EP 0
[  221.633749][ T5284] usb 6-1: USB disconnect, device number 9
[  221.640410][ T5284] em28xx 6-1:0.0: Disconnecting em28xx
[  221.649149][ T5284] em28xx 6-1:0.0: Freeing device
[  221.657269][ T5287] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8
[  221.678461][ T5289] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  221.692982][ T5287] usb 5-1: USB disconnect, device number 7
[  221.850095][ T5289] usb 4-1: USB disconnect, device number 9
[  222.551514][ T5287] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  222.769352][ T9275] loop1: detected capacity change from 0 to 2048
[  222.771496][ T5287] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  222.837494][ T9275] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  222.867203][ T5287] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  222.918049][ T5287] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  222.934201][ T9275] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  222.972161][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.012277][ T9264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  223.025177][ T5287] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  223.032969][ T9275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  223.367243][ T5351] usb 1-1: USB disconnect, device number 8
[  223.481704][ T5240] Bluetooth: hci0: command tx timeout
[  223.666147][ T9261] loop5: detected capacity change from 0 to 40427
[  223.781070][ T9261] F2FS-fs (loop5): Found nat_bits in checkpoint
[  224.049167][ T9261] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  224.209091][ T5221] syz-executor: attempt to access beyond end of device
[  224.209091][ T5221] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  224.243405][ T5221] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  224.473168][ T9308] loop1: detected capacity change from 0 to 32768
[  224.501239][ T9308] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  224.742664][ T9308] XFS (loop1): Ending clean mount
[  224.791244][ T9308] XFS (loop1): Quotacheck needed: Please wait.
[  224.925073][ T9308] XFS (loop1): Quotacheck: Done.
[  225.140502][ T9339] ubi0: attaching mtd0
[  225.157938][ T9339] ubi0: scanning is finished
[  225.186024][   T29] audit: type=1804 audit(1726813153.483:36): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1483" name="/newroot/273/file0/file1" dev="loop1" ino=9286 res=1 errno=0
[  225.271621][ T5287] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  225.297492][ T5225] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  225.315742][ T9342] loop3: detected capacity change from 0 to 256
[  225.340592][ T9342] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d)
[  225.361562][ T5351] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  225.449225][ T5287] usb 5-1: Using ep0 maxpacket: 16
[  225.460276][ T9339] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  225.479245][ T9342] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  225.490987][ T9339] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  225.518964][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.530138][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.540003][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  225.541500][ T5351] usb 6-1: Using ep0 maxpacket: 8
[  225.552872][ T5287] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  225.552907][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.562361][ T5287] usb 5-1: config 0 descriptor??
[  225.592878][ T9339] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  225.611482][ T9339] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  225.624527][ T9339] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  225.641494][ T9339] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  225.649400][ T5351] usb 6-1: config 0 has an invalid interface number: 151 but max is 1
[  225.657863][ T9339] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2066534784
[  225.667961][ T5351] usb 6-1: config 0 has no interface number 1
[  225.668064][ T5351] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  225.668101][ T5351] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  225.668137][ T5351] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[  225.668175][ T5351] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  225.668208][ T5351] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  225.668251][ T5351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  225.668286][ T5351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  225.677484][ T5351] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  225.718300][ T9339] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  225.735507][ T5351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.811453][ T5351] usb 6-1: Product: syz
[  225.815649][ T5351] usb 6-1: Manufacturer: syz
[  225.820263][ T5351] usb 6-1: SerialNumber: syz
[  225.841605][ T9340] ubi0: detaching mtd0
[  225.845870][ T5351] usb 6-1: config 0 descriptor??
[  225.851887][ T9343] ubi0: background thread "ubi_bgt0d" started, PID 9343
[  225.873326][ T9336] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  225.913924][ T9340] ubi0: mtd0 is detached
[  225.947417][ T5351] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  225.957602][ T5351] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  225.965124][ T5351] usb 6-1: invalid MIDI in EP 0
[  226.002750][ T5287] input: HID 0955:7214 Haptics as /devices/virtual/input/input21
[  226.029786][ T5287] shield 0003:0955:7214.0014: Registered Thunderstrike controller
[  226.117198][ T5287] shield 0003:0955:7214.0014: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  226.209602][ T5351] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[  226.209664][ T9330] random: crng reseeded on system resumption
[  226.253746][ T5351] usb 6-1: USB disconnect, device number 10
[  226.363225][ T9353] loop1: detected capacity change from 0 to 512
[  226.417640][ T9353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  226.451127][ T9353] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.517998][ T9362] loop3: detected capacity change from 0 to 1024
[  226.590430][ T9353] EXT4-fs (loop1): shut down requested (0)
[  226.614975][ T9362] Process accounting resumed
[  226.720070][ T5225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  226.926009][ T9367] netlink: 'syz.3.1504': attribute type 1 has an invalid length.
[  226.959665][ T9367] netlink: 'syz.3.1504': attribute type 2 has an invalid length.
[  226.987418][ T9367] net_ratelimit: 153 callbacks suppressed
[  226.987438][ T9367] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  227.207166][ T5287] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN
[  227.226698][ T5287] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  227.263929][ T5287] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  227.300339][ T5287] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE
[  227.350586][ T9357] loop2: detected capacity change from 0 to 32768
[  227.380346][ T5289] usb 5-1: reset high-speed USB device number 8 using dummy_hcd
[  227.394135][ T9357] XFS: ikeep mount option is deprecated.
[  227.424053][ T9357] XFS: ikeep mount option is deprecated.
[  227.470441][ T9373] loop3: detected capacity change from 0 to 512
[  227.489816][ T9373] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  227.527021][ T9378] loop1: detected capacity change from 0 to 64
[  227.593614][ T9373] EXT4-fs (loop3): 1 truncate cleaned up
[  227.605322][ T9373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.634349][ T9357] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  227.820220][ T9357] XFS (loop2): Ending clean mount
[  227.851169][ T9357] XFS (loop2): Quotacheck needed: Please wait.
[  227.870728][ T7641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.957626][ T9357] XFS (loop2): Quotacheck: Done.
[  228.370862][ T9397] loop4: detected capacity change from 0 to 32768
[  228.394319][ T6606] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  228.396803][    T9] usb 5-1: USB disconnect, device number 8
[  229.351815][ T9416] loop4: detected capacity change from 0 to 512
[  229.426300][ T9416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  229.459784][ T9416] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.482163][ T9398] loop1: detected capacity change from 0 to 32768
[  229.489370][ T9398] XFS: ikeep mount option is deprecated.
[  229.522287][ T9420] loop2: detected capacity change from 0 to 256
[  229.591566][ T9398] XFS: ikeep mount option is deprecated.
[  229.619667][ T9416] EXT4-fs (loop4): shut down requested (0)
[  229.655362][ T9398] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  229.835435][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  229.977587][ T9398] XFS (loop1): Ending clean mount
[  230.035216][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  230.221360][ T5225] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  230.221481][    T9] usb 4-1: Using ep0 maxpacket: 32
[  230.267984][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.283121][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.314628][    T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  230.361216][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.558216][    T9] usb 4-1: config 0 descriptor??
[  231.028754][    T9] ft260 0003:0403:6030.0015: unknown main item tag 0x0
[  231.237077][    T9] ft260 0003:0403:6030.0015: failed to retrieve chip version
[  231.245428][    T9] ft260 0003:0403:6030.0015: probe with driver ft260 failed with error -71
[  231.275600][    T9] usb 4-1: USB disconnect, device number 10
[  231.518594][ T9448] loop4: detected capacity change from 0 to 32768
[  231.660826][ T9453] loop5: detected capacity change from 0 to 40427
[  231.687530][ T9453] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  231.720050][ T9453] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  231.834035][ T9453] F2FS-fs (loop5): Found nat_bits in checkpoint
[  231.891801][   T29] audit: type=1800 audit(1726813160.193:37): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1530" name="bus" dev="loop4" ino=7 res=0 errno=0
[  232.095532][ T9462] loop2: detected capacity change from 0 to 32768
[  232.144687][ T9464] loop1: detected capacity change from 0 to 40427
[  232.145167][ T9462] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1536 (9462)
[  232.170664][ T9464] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  232.200037][ T9464] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  232.307727][ T9453] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  232.315054][ T9453] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  232.322660][ T9462] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  232.322788][ T9462] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  232.351626][ T9462] BTRFS info (device loop2): using free-space-tree
[  232.377061][ T9464] F2FS-fs (loop1): Found nat_bits in checkpoint
[  232.391540][   T29] audit: type=1800 audit(1726813160.683:38): pid=9453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1533" name="file2" dev="loop5" ino=10 res=0 errno=0
[  232.446425][ T9453] syz.5.1533: attempt to access beyond end of device
[  232.446425][ T9453] loop5: rw=0, sector=53328, nr_sectors = 8 limit=40427
[  232.468280][ T9453] syz.5.1533: attempt to access beyond end of device
[  232.468280][ T9453] loop5: rw=0, sector=53328, nr_sectors = 8 limit=40427
[  232.488711][ T9453] syz.5.1533: attempt to access beyond end of device
[  232.488711][ T9453] loop5: rw=0, sector=53328, nr_sectors = 8 limit=40427
[  232.503074][ T9484] syz.5.1533: attempt to access beyond end of device
[  232.503074][ T9484] loop5: rw=2049, sector=53336, nr_sectors = 8 limit=40427
[  232.601798][  T932] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  232.617446][ T9464] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  232.627114][ T9464] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  232.635181][ T5221] syz-executor: attempt to access beyond end of device
[  232.635181][ T5221] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  232.660751][ T5221] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  232.821592][  T932] usb 1-1: Using ep0 maxpacket: 32
[  232.834311][  T932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  232.860549][  T932] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  232.883427][  T932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.894001][  T932] usb 1-1: Product: syz
[  232.898184][  T932] usb 1-1: Manufacturer: syz
[  232.906114][  T932] usb 1-1: SerialNumber: syz
[  232.915023][  T932] usb 1-1: config 0 descriptor??
[  232.925279][  T932] hub 1-1:0.0: bad descriptor, ignoring hub
[  232.935751][  T932] hub 1-1:0.0: probe with driver hub failed with error -5
[  232.946128][  T932] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input22
[  232.958930][  T932] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  233.070534][  T932] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8
[  233.381775][ T9496] loop3: detected capacity change from 0 to 32768
[  233.389043][ T9496] XFS: ikeep mount option is deprecated.
[  233.394989][ T9496] XFS: ikeep mount option is deprecated.
[  233.559481][ T6606] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  233.681498][ T5284] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  233.692985][ T9496] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  233.893488][    T9] usb 1-1: USB disconnect, device number 9
[  234.057890][ T9496] XFS (loop3): Ending clean mount
[  234.101462][ T5284] usb 5-1: Using ep0 maxpacket: 32
[  234.173152][ T5284] usb 5-1: config 0 has no interfaces?
[  234.254622][ T5284] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  234.269248][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.277578][ T5284] usb 5-1: Product: syz
[  234.278397][ T9515] loop2: detected capacity change from 0 to 1024
[  234.281890][ T5284] usb 5-1: Manufacturer: syz
[  234.281914][ T5284] usb 5-1: SerialNumber: syz
[  234.322315][ T5284] usb 5-1: config 0 descriptor??
[  234.678008][ T9524] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[  234.694778][ T9515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.748100][ T5327] usb 5-1: USB disconnect, device number 9
[  234.766172][ T7641] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  234.860883][ T9515] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  234.889005][ T9515] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 17 with error 28
[  234.904426][ T9515] EXT4-fs (loop2): This should not happen!! Data will be lost
[  234.904426][ T9515] 
[  234.944802][ T9515] EXT4-fs (loop2): Total free blocks count 0
[  234.956741][ T9515] EXT4-fs (loop2): Free/Dirty block details
[  234.975364][ T9515] EXT4-fs (loop2): free_blocks=68451041280
[  234.987035][ T9532] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  234.999013][ T9515] EXT4-fs (loop2): dirty_blocks=32
[  235.041582][ T9515] EXT4-fs (loop2): Block reservation details
[  235.062087][ T9532] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  235.071486][ T9515] EXT4-fs (loop2): i_reserved_data_blocks=2
[  235.210132][   T29] audit: type=1800 audit(1726813163.513:39): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1552" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  235.373456][ T6606] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.880006][ T9558] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  235.967806][ T9561] 9pnet_virtio: no channels available for device syz
[  236.062799][ T5287] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  236.243828][ T5287] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  236.253694][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.268995][ T9579] loop4: detected capacity change from 0 to 256
[  236.291449][ T5287] usb 3-1: Product: syz
[  236.295651][ T5287] usb 3-1: Manufacturer: syz
[  236.300296][ T5287] usb 3-1: SerialNumber: syz
[  236.335945][ T5287] usb 3-1: config 0 descriptor??
[  236.338098][ T9581] loop3: detected capacity change from 0 to 64
[  236.353455][ T5287] gspca_main: sq905c-2.14.0 probing 2770:9052
[  236.964102][ T5287] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  236.995835][ T5287] sq905c 3-1:0.0: probe with driver sq905c failed with error -71
[  237.036063][ T5287] usb 3-1: USB disconnect, device number 16
[  237.158520][ T9612] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1591'.
[  237.198119][    T9] IPVS: starting estimator thread 0...
[  237.338432][ T9614] IPVS: using max 16 ests per chain, 38400 per kthread
[  237.744233][ T9637] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  237.857622][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1607'.
[  237.958808][ T9648] loop4: detected capacity change from 0 to 8
[  238.204152][ T9652] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  238.243390][ T9656] netlink: 'syz.4.1613': attribute type 1 has an invalid length.
[  238.266657][ T9656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1613'.
[  238.291927][ T9656] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1613'.
[  238.356073][ T9624] loop3: detected capacity change from 0 to 32768
[  238.408238][ T9624] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.620296][ T9624] XFS (loop3): Ending clean mount
[  238.636516][ T9624] XFS (loop3): Quotacheck needed: Please wait.
[  238.638600][ T9673] kernel profiling enabled (shift: 0)
[  238.727523][ T9624] XFS (loop3): Quotacheck: Done.
[  238.943720][ T7641] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.070967][ T9683] loop1: detected capacity change from 0 to 1024
[  239.211989][ T5327] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  239.364302][ T5327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.392244][ T5327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.427903][ T5327] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  239.465973][ T5327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.496143][ T5327] usb 6-1: config 0 descriptor??
[  239.496358][ T9687] loop4: detected capacity change from 0 to 32768
[  239.513267][ T9687] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1625 (9687)
[  239.536898][ T9683] hfsplus: bad catalog entry type
[  239.542103][ T9687] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  239.552421][ T9687] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  239.561139][ T9687] BTRFS info (device loop4): using free-space-tree
[  239.830311][ T5226] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  239.931068][ T9673] syz.2.1617: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  239.966722][ T5327] steelseries 0003:1038:12B6.0016: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.5-1/input0
[  239.981733][ T9673] CPU: 1 UID: 0 PID: 9673 Comm: syz.2.1617 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0
[  239.992092][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  240.002179][ T9673] Call Trace:
[  240.005480][ T9673]  <TASK>
[  240.008429][ T9673]  dump_stack_lvl+0x241/0x360
[  240.013156][ T9673]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.018743][ T9673]  ? __pfx__printk+0x10/0x10
[  240.023381][ T9673]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.029066][ T9673]  ? __rcu_read_unlock+0xa1/0x110
[  240.034141][ T9673]  warn_alloc+0x278/0x410
[  240.038507][ T9673]  ? __pfx_warn_alloc+0x10/0x10
[  240.043398][ T9673]  ? profile_init+0xb1/0x100
[  240.048028][ T9673]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.053705][ T9673]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.059382][ T9673]  ? __get_vm_area_node+0x23d/0x270
[  240.064631][ T9673]  __vmalloc_node_range_noprof+0x6a2/0x1400
[  240.070588][ T9673]  ? _printk+0xd5/0x120
[  240.074828][ T9673]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  240.081237][ T9673]  ? rcu_is_watching+0x15/0xb0
[  240.086039][ T9673]  ? rcu_is_watching+0x15/0xb0
[  240.090843][ T9673]  ? profile_init+0xb1/0x100
[  240.095466][ T9673]  ? __pfx_sysfs_kf_write+0x10/0x10
[  240.100705][ T9673]  vzalloc_noprof+0x79/0x90
[  240.105252][ T9673]  ? profile_init+0xb1/0x100
[  240.110043][ T9673]  profile_init+0xb1/0x100
[  240.114495][ T9673]  profiling_store+0x6c/0xf0
[  240.119140][ T9673]  kernfs_fop_write_iter+0x3a2/0x500
[  240.124476][ T9673]  vfs_write+0xa6f/0xc90
[  240.128757][ T9673]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  240.134599][ T9673]  ? __pfx_vfs_write+0x10/0x10
[  240.139724][ T9673]  ? do_futex+0x33b/0x560
[  240.144078][ T9673]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.149750][ T9673]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.155407][ T9673]  ? __fdget_pos+0x24e/0x320
[  240.160016][ T9673]  ksys_write+0x1a0/0x2c0
[  240.164361][ T9673]  ? srso_alias_return_thunk+0x5/0xfbef5
[  240.170026][ T9673]  ? __pfx_ksys_write+0x10/0x10
[  240.174912][ T9673]  ? do_syscall_64+0x100/0x230
[  240.179702][ T9673]  ? do_syscall_64+0xb6/0x230
[  240.184404][ T9673]  do_syscall_64+0xf3/0x230
[  240.188935][ T9673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.194847][ T9673] RIP: 0033:0x7ff196f7def9
[  240.199291][ T9673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.219185][ T9673] RSP: 002b:00007ff197d6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  240.227614][ T9673] RAX: ffffffffffffffda RBX: 00007ff197135f80 RCX: 00007ff196f7def9
[  240.235597][ T9673] RDX: 0000000000000048 RSI: 0000000020000280 RDI: 0000000000000003
[  240.243575][ T9673] RBP: 00007ff196ff0b76 R08: 0000000000000000 R09: 0000000000000000
[  240.251554][ T9673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.259528][ T9673] R13: 0000000000000000 R14: 00007ff197135f80 R15: 00007ffcbc1f6cc8
[  240.267535][ T9673]  </TASK>
[  240.298470][ T5327] steelseries 0003:1038:12B6.0016: hid_hw_raw_request() failed with -71
[  240.330611][ T5327] usb 6-1: USB disconnect, device number 11
[  240.349539][ T9673] Mem-Info:
[  240.353599][ T9673] active_anon:8027 inactive_anon:0 isolated_anon:0
[  240.353599][ T9673]  active_file:1834 inactive_file:38341 isolated_file:0
[  240.353599][ T9673]  unevictable:768 dirty:519 writeback:0
[  240.353599][ T9673]  slab_reclaimable:8924 slab_unreclaimable:102909
[  240.353599][ T9673]  mapped:28430 shmem:5537 pagetables:800
[  240.353599][ T9673]  sec_pagetables:0 bounce:0
[  240.353599][ T9673]  kernel_misc_reclaimable:0
[  240.353599][ T9673]  free:1307804 free_pcp:6708 free_cma:0
[  240.398696][    C0] vkms_vblank_simulate: vblank timer overrun
[  240.423793][ T9673] Node 0 active_anon:31356kB inactive_anon:0kB active_file:7336kB inactive_file:153268kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113648kB dirty:2080kB writeback:0kB shmem:19840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11036kB pagetables:3200kB sec_pagetables:0kB all_unreclaimable? no
[  240.457011][ T9673] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  240.487587][ T9673] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  240.515011][ T9673] lowmem_reserve[]: 0 2467 2468 0 0
[  240.520345][ T9673] Node 0 DMA32 free:1301208kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:29516kB inactive_anon:0kB active_file:7336kB inactive_file:152460kB unevictable:1536kB writepending:2080kB present:3129332kB managed:2554524kB mlocked:0kB bounce:0kB free_pcp:24084kB local_pcp:7996kB free_cma:0kB
[  240.551618][ T9673] lowmem_reserve[]: 0 0 0 0 0
[  240.556414][ T9673] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:808kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  240.584041][ T9673] lowmem_reserve[]: 0 0 0 0 0
[  240.588848][ T9673] Node 1 Normal free:3914452kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:6092kB local_pcp:1264kB free_cma:0kB
[  240.618517][ T9673] lowmem_reserve[]: 0 0 0 0 0
[  240.623378][ T9673] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  240.636696][ T9673] Node 0 DMA32: 370*4kB (UME) 221*8kB (UME) 286*16kB (UME) 126*32kB (UME) 80*64kB (UME) 36*128kB (UME) 34*256kB (ME) 18*512kB (UME) 12*1024kB (UME) 4*2048kB (UME) 305*4096kB (UM) = 1309264kB
[  240.656187][ T9673] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  240.668368][ T9673] Node 1 Normal: 5*4kB (UME) 8*8kB (UME) 16*16kB (UME) 174*32kB (UME) 69*64kB (UME) 31*128kB (UME) 13*256kB (UME) 13*512kB (UME) 7*1024kB (UME) 4*2048kB (UME) 946*4096kB (M) = 3914452kB
[  240.688386][ T9673] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  240.698356][ T9673] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  240.707796][ T9673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  240.717611][ T9673] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  240.727042][ T9673] 44027 total pagecache pages
[  240.732093][ T9673] 0 pages in swap cache
[  240.736278][ T9673] Free swap  = 124480kB
[  240.740622][ T9673] Total swap = 124996kB
[  240.745060][ T9673] 2097051 pages RAM
[  240.749150][ T9673] 0 pages HighMem/MovableOnly
[  240.754017][ T9673] 427082 pages reserved
[  240.758348][ T9673] 0 pages cma reserved
[  241.662135][ T9736] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1640'.
[  242.003908][ T9743] loop2: detected capacity change from 0 to 256
[  242.044258][ T9743] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  242.088554][ T9743] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  242.169781][ T9732] loop4: detected capacity change from 0 to 32768
[  242.770944][ T9724] loop5: detected capacity change from 0 to 32768
[  242.854770][ T9724] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  242.972024][ T9724] XFS (loop5): Ending clean mount
[  243.080790][ T5221] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  243.293893][ T9781] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  243.790008][ T9793] netlink: 'syz.5.1658': attribute type 4 has an invalid length.
[  244.161543][ T5327] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  244.321584][ T5327] usb 6-1: Using ep0 maxpacket: 8
[  244.334224][ T5327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.355606][ T5327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.385888][ T5327] usb 6-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  244.416178][ T5327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.457181][ T5327] usb 6-1: config 0 descriptor??
[  244.650015][ T9833] syz.3.1683[9833] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  244.650187][ T9833] syz.3.1683[9833] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  244.695347][   T29] audit: type=1326 audit(1726813173.003:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.3.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281c57def9 code=0x7ffc0000
[  244.772153][   T29] audit: type=1326 audit(1726813173.043:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.3.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281c57def9 code=0x7ffc0000
[  244.794728][ T5284] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  244.865643][   T29] audit: type=1326 audit(1726813173.043:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.3.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f281c57def9 code=0x7ffc0000
[  244.895315][ T5327] hid (null): unknown global tag 0xe
[  244.913807][ T5327] playstation 0003:054C:0CE6.0017: unknown main item tag 0x0
[  244.945150][ T5327] playstation 0003:054C:0CE6.0017: unknown global tag 0xe
[  244.959828][   T29] audit: type=1326 audit(1726813173.073:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9834 comm="syz.3.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f281c5affe5 code=0x7ffc0000
[  244.972633][ T5327] playstation 0003:054C:0CE6.0017: item 0 0 1 14 parsing failed
[  244.982022][    C0] vkms_vblank_simulate: vblank timer overrun
[  245.001459][ T5284] usb 2-1: Using ep0 maxpacket: 16
[  245.041011][ T5327] playstation 0003:054C:0CE6.0017: Parse failed
[  245.049498][ T5284] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  245.069304][ T5327] playstation 0003:054C:0CE6.0017: probe with driver playstation failed with error -22
[  245.069386][   T29] audit: type=1326 audit(1726813173.073:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.3.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281c57def9 code=0x7ffc0000
[  245.101307][    C0] vkms_vblank_simulate: vblank timer overrun
[  245.108433][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.131850][ T5284] usb 2-1: Product: syz
[  245.136154][ T5284] usb 2-1: Manufacturer: syz
[  245.140673][ T5327] usb 6-1: USB disconnect, device number 12
[  245.140739][ T5284] usb 2-1: SerialNumber: syz
[  245.202709][ T5284] usb 2-1: config 0 descriptor??
[  245.207825][   T29] audit: type=1326 audit(1726813173.113:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.3.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281c57def9 code=0x7ffc0000
[  245.230127][    C0] vkms_vblank_simulate: vblank timer overrun
[  245.297972][   T29] audit: type=1326 audit(1726813173.273:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9834 comm="syz.3.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f281c57def9 code=0x7ffc0000
[  245.364327][ T9815] loop2: detected capacity change from 0 to 32768
[  245.417457][ T9815] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  245.444219][ T9815] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  245.543037][ T9815] XFS (loop2): Ending clean mount
[  245.558661][ T9815] XFS (loop2): Quotacheck needed: Please wait.
[  245.657783][ T9815] XFS (loop2): Quotacheck: Done.
[  245.663833][ T5284] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  245.686396][ T5284] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  245.699754][ T5284] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  245.708659][ T5284] usb 2-1: media controller created
[  245.728587][ T5284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  245.779554][   T29] audit: type=1800 audit(1726813174.083:47): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1674" name="bus" dev="loop2" ino=4420 res=0 errno=0
[  246.025304][ T5284] zl10353_read_register: readreg error (reg=127, ret==0)
[  246.058537][ T5284] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  246.075456][ T6606] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  246.101690][ T5284] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  246.137851][ T5284] usb 2-1: USB disconnect, device number 13
[  246.215229][ T5284] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  246.493716][ T9859] loop5: detected capacity change from 0 to 32768
[  246.886502][ T9859] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,compression=zstd,norecovery,recovery_pass_last=check_dirents,nojournal_transaction_names,version_upgrade=none
[  246.912905][ T9859] bcachefs (loop5): recovering from clean shutdown, journal seq 7
[  246.996985][ T9859] invalid bkey u64s 11 type alloc_v4 0:14:0 len 0 ver 0: 
[  246.997072][ T9859]   gen 0 oldest_gen 0 data_type journal
[  246.997088][ T9859]   journal_seq       1
[  246.997102][ T9859]   need_discard      1
[  246.997123][ T9859]   need_inc_gen      1
[  246.997136][ T9859]   dirty_sectors     256
[  246.997150][ T9859]   stripe_sectors    0
[  246.997163][ T9859]   cached_sectors    0
[  246.997177][ T9859]   stripe            67108864
[  246.997192][ T9859]   stripe_redundancy 0
[  246.997205][ T9859]   io_time[READ]     1
[  246.997219][ T9859]   io_time[WRITE]    1
[  246.997232][ T9859]   fragmentation     0
[  246.997245][ T9859]   bp_start          8
[  246.997259][ T9859] 
[  246.997271][ T9859]   invalid data type (got 2 should be 7): delete?, fixing
[  247.131596][ T5351] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  247.182918][ T9859] bcachefs (loop5): accounting_read... done
[  247.209875][ T9859] bcachefs (loop5): alloc_read... done
[  247.232379][ T9859] bcachefs (loop5): stripes_read... done
[  247.256515][ T9859] bcachefs (loop5): snapshots_read... done
[  247.289336][ T5351] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  247.314135][ T5351] usb 4-1: config 0 has no interface number 0
[  247.329616][ T5351] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  247.346641][ T9859] bcachefs (loop5): going read-write
[  247.366180][ T5351] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  247.393953][ T5351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.425268][ T5351] usb 4-1: config 0 descriptor??
[  247.434821][ T5351] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  247.474400][ T9859] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean
[  247.496649][ T9912] netlink: 'syz.0.1709': attribute type 4 has an invalid length.
[  247.530896][ T9912] lo speed is unknown, defaulting to 1000
[  247.541561][ T9859] bcachefs (loop5): done starting filesystem
[  247.577128][ T9912] lo speed is unknown, defaulting to 1000
[  247.606447][ T9912] lo speed is unknown, defaulting to 1000
[  247.657320][ T5351] usb 4-1: USB disconnect, device number 11
[  247.681593][ T5351] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected
[  247.817940][ T9917] syz.5.1689 (9917) used greatest stack depth: 18080 bytes left
[  247.997080][ T5221] bcachefs (loop5): shutting down
[  248.012320][ T5221] bcachefs (loop5): going read-only
[  248.018354][ T5221] bcachefs (loop5): finished waiting for writes to stop
[  248.079943][    T9] lo speed is unknown, defaulting to 1000
[  248.114806][ T9912] infiniband syz2: set down
[  248.125666][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'.
[  248.142133][ T9912] infiniband syz2: added lo
[  248.210924][ T9912] RDS/IB: syz2: added
[  248.216631][ T9912] smc: adding ib device syz2 with port count 1
[  248.223985][ T9912] smc:    ib device syz2 port 1 has pnetid 
[  248.233958][ T5351] lo speed is unknown, defaulting to 1000
[  248.245040][ T9912] lo speed is unknown, defaulting to 1000
[  248.351620][    T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  248.424595][ T9912] lo speed is unknown, defaulting to 1000
[  248.552812][    T9] usb 3-1: Using ep0 maxpacket: 16
[  248.614851][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.652009][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4
[  248.661114][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.669324][    T9] usb 3-1: Product: syz
[  248.673595][    T9] usb 3-1: Manufacturer: syz
[  248.678204][    T9] usb 3-1: SerialNumber: syz
[  248.685440][    T9] usb 3-1: config 0 descriptor??
[  248.756775][ T9912] lo speed is unknown, defaulting to 1000
[  249.099817][    T9] usb 3-1: Found UVC 0.00 device syz (045e:0721)
[  249.106551][    T9] usb 3-1: No valid video chain found.
[  249.430503][ T5327] usb 3-1: USB disconnect, device number 17
[  249.559712][ T9912] lo speed is unknown, defaulting to 1000
[  250.037626][ T9912] lo speed is unknown, defaulting to 1000
[  250.373481][ T9964] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1730'.
[  250.407206][ T9964] netlink: get zone limit has 8 unknown bytes
[  250.659390][ T9968] loop4: detected capacity change from 0 to 2048
[  250.740037][ T9970] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  250.847896][ T9969] netlink: 'syz.1.1733': attribute type 10 has an invalid length.
[  250.861210][ T9970] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  250.903846][ T9970] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  250.918415][ T9969] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  250.928177][ T9970] Remounting filesystem read-only
[  250.939214][ T5226] NILFS (loop4): discard dirty page: offset=0, ino=5
[  250.956157][ T5226] NILFS (loop4): discard dirty block: blocknr=41, size=1024
[  250.985307][ T5226] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  251.022068][ T5226] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  251.073257][ T5226] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  251.114838][ T5226] NILFS (loop4): discard dirty page: offset=0, ino=4
[  251.140935][ T5226] NILFS (loop4): discard dirty block: blocknr=40, size=1024
[  251.164675][ T5226] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  251.198242][ T5226] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  251.237804][ T5226] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  251.250027][ T9979] 9pnet_fd: Insufficient options for proto=fd
[  251.737621][ T9981] loop4: detected capacity change from 0 to 4096
[  251.760217][ T9912] lo speed is unknown, defaulting to 1000
[  251.790886][ T9981] NILFS (loop4): invalid segment: Checksum error in segment payload
[  251.839194][ T9981] NILFS (loop4): trying rollback from an earlier position
[  251.905469][ T9981] NILFS (loop4): recovery complete
[  252.281732][ T5240] Bluetooth: hci5: command 0x0406 tx timeout
[  252.321063][ T9988] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  253.046800][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1750'.
[  253.098083][T10011] netlink: 'syz.3.1750': attribute type 9 has an invalid length.
[  253.140742][T10013] netlink: 'syz.2.1751': attribute type 1 has an invalid length.
[  253.353180][T10013] 8021q: adding VLAN 0 to HW filter on device bond1
[  253.389274][ T9912] lo speed is unknown, defaulting to 1000
[  253.512260][ T5286] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  253.562446][T10022] loop3: detected capacity change from 0 to 512
[  253.609731][T10022] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  253.684716][ T5286] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.703410][ T5286] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  253.716372][ T5286] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  253.734970][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  253.751530][ T5286] usb 5-1: SerialNumber: syz
[  253.899039][T10022] EXT4-fs (loop3): 1 truncate cleaned up
[  253.909217][T10022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.008772][ T5286] usb 5-1: 0:2 : does not exist
[  254.041873][T10022] EXT4-fs: Can't set or change test_dummy_encryption on remount
[  254.070810][ T5286] usb 5-1: USB disconnect, device number 10
[  254.372398][ T7641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.187535][ T1263] ieee802154 phy1 wpan1: encryption failed: -22
[  255.704497][T10064] trusted_key: syz.4.1774 sent an empty control message without MSG_MORE.
[  255.786450][T10066] loop2: detected capacity change from 0 to 256
[  256.026596][T10068] loop4: detected capacity change from 0 to 128
[  256.077220][T10070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1778'.
[  256.270226][T10068] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  256.298729][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1759'.
[  256.347397][T10068] ext4 filesystem being mounted at /344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  256.393361][ T5286] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  256.547729][ T5226] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  256.561730][ T5286] usb 2-1: Using ep0 maxpacket: 32
[  256.591606][ T5286] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.642417][ T5286] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.712339][ T5286] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  256.722468][T10081] loop2: detected capacity change from 0 to 4096
[  256.742814][ T5286] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  256.781801][ T5286] usb 2-1: Product: syz
[  256.805183][ T5286] usb 2-1: Manufacturer: syz
[  256.859386][ T5286] hub 2-1:4.0: USB hub found
[  256.947520][T10081] ntfs3: loop2: ino=21, The size of extended attributes must not exceed 64KiB
[  257.091683][ T5286] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  257.421838][ T5286] usb 2-1: USB disconnect, device number 14
[  259.065334][ T5237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  259.075682][ T5237] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  259.084625][ T5237] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  259.093878][ T5237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  259.102168][ T5237] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  259.109444][ T5237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  259.325499][T10098] loop3: detected capacity change from 0 to 32768
[  259.431500][T10122] lo speed is unknown, defaulting to 1000
[  260.089816][T10143] netlink: 'syz.1.1808': attribute type 1 has an invalid length.
[  260.121748][T10143] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.1808'.
[  260.166098][T10143] netlink: 'syz.1.1808': attribute type 1 has an invalid length.
[  260.196175][T10143] netlink: 'syz.1.1808': attribute type 2 has an invalid length.
[  261.322442][ T5237] Bluetooth: hci7: command tx timeout
[  261.454332][T10172] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  261.467433][T10172] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  261.477698][T10172] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  262.056451][T10122] chnl_net:caif_netlink_parms(): no params data found
[  262.152106][T10186] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1822'.
[  262.362897][T10187] netlink: 'syz.0.1822': attribute type 10 has an invalid length.
[  262.548959][T10187] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  262.977661][T10205] loop4: detected capacity change from 0 to 256
[  263.044235][T10205] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  263.226997][T10122] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.264994][T10122] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.305637][T10122] bridge_slave_0: entered allmulticast mode
[  263.351874][T10122] bridge_slave_0: entered promiscuous mode
[  263.401927][ T5237] Bluetooth: hci7: command tx timeout
[  263.412124][T10122] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.419281][T10122] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.426713][T10122] bridge_slave_1: entered allmulticast mode
[  263.434901][T10122] bridge_slave_1: entered promiscuous mode
[  263.635525][T10122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.718078][T10122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.084049][T10122] team0: Port device team_slave_0 added
[  264.101526][ T5351] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  264.158652][T10122] team0: Port device team_slave_1 added
[  264.267656][ T5351] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  264.289410][ T5351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.343620][ T5351] usb 2-1: config 0 descriptor??
[  264.369077][T10122] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.388828][ T5351] gspca_main: cpia1-2.14.0 probing 0813:0001
[  264.411270][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.549779][T10122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.610893][T10122] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.657062][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.787714][T10122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.197838][T10122] hsr_slave_0: entered promiscuous mode
[  265.204990][ T5351] gspca_cpia1: usb_control_msg 02, error -71
[  265.214433][ T5351] gspca_cpia1: usb_control_msg 05, error -71
[  265.227741][ T5351] gspca_cpia1: usb_control_msg 04, error -71
[  265.242303][T10122] hsr_slave_1: entered promiscuous mode
[  265.252994][ T5351] cpia1 2-1:0.0: probe with driver cpia1 failed with error -71
[  265.266667][T10122] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  265.298747][T10122] Cannot create hsr debugfs directory
[  265.311563][ T5351] usb 2-1: USB disconnect, device number 15
[  265.485846][ T5237] Bluetooth: hci7: command tx timeout
[  266.224081][T10122] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.663779][T10122] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.882327][ T5351] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  266.985039][T10122] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.061540][ T5351] usb 5-1: Using ep0 maxpacket: 8
[  267.104295][ T5351] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.169923][ T5351] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.196029][ T5351] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40
[  267.217767][ T5351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.269343][ T5351] usb 5-1: Product: syz
[  267.289827][ T5351] usb 5-1: Manufacturer: syz
[  267.321311][ T5351] usb 5-1: SerialNumber: syz
[  267.384510][T10122] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.572767][ T5237] Bluetooth: hci7: command tx timeout
[  267.580053][ T5351] usbhid 5-1:1.0: can't add hid device: -22
[  267.614469][ T5351] usbhid 5-1:1.0: probe with driver usbhid failed with error -22
[  267.678125][T10280] loop3: detected capacity change from 0 to 8
[  267.699587][T10280] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  267.843344][ T5286] usb 5-1: USB disconnect, device number 11
[  268.026973][T10122] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  268.099640][T10122] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  268.110601][T10285] option changes via remount are deprecated (pid=10284 comm=syz.0.1869)
[  268.174537][T10122] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  268.306980][T10122] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  268.854042][T10122] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.989911][T10122] 8021q: adding VLAN 0 to HW filter on device team0
[  269.115843][ T6638] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.123037][ T6638] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.203557][ T6638] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.210764][ T6638] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.293330][T10307] tipc: Started in network mode
[  269.302181][T10307] tipc: Node identity -name-of, cluster identity 4711
[  269.442516][T10307] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  269.598827][T10122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  269.838058][T10318] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  270.456159][T10332] loop3: detected capacity change from 0 to 512
[  270.499461][T10334] sch_fq: defrate 0 ignored.
[  270.670965][T10342] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  270.717486][T10332] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1888: corrupted in-inode xattr: invalid ea_ino
[  270.780540][T10332] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1888: couldn't read orphan inode 15 (err -117)
[  270.857592][T10332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.286813][ T7641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.423450][T10122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.586153][T10357] pimreg: entered allmulticast mode
[  271.638093][T10357] pimreg: left allmulticast mode
[  272.390390][T10376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1904'.
[  272.431711][ T5327] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  272.586140][T10122] veth0_vlan: entered promiscuous mode
[  272.641672][ T5327] usb 3-1: Using ep0 maxpacket: 8
[  272.653892][ T5327] usb 3-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.a0
[  272.672388][T10122] veth1_vlan: entered promiscuous mode
[  272.701261][ T5327] usb 3-1: New USB device strings: Mfr=250, Product=2, SerialNumber=3
[  272.756728][ T5327] usb 3-1: Product: syz
[  272.780810][ T5327] usb 3-1: Manufacturer: syz
[  272.811618][ T5327] usb 3-1: SerialNumber: syz
[  272.843483][T10122] veth0_macvtap: entered promiscuous mode
[  272.853483][ T5327] usb 3-1: config 0 descriptor??
[  272.902593][T10122] veth1_macvtap: entered promiscuous mode
[  273.010534][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.075133][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.127464][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.162203][ T5286] IPVS: starting estimator thread 0...
[  273.179305][ T5327] kaweth 3-1:0.0: Firmware present in device.
[  273.193775][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.217996][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.249937][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.260443][T10378] IPVS: using max 16 ests per chain, 38400 per kthread
[  273.298821][T10122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.340535][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.369176][ T5327] kaweth 3-1:0.0: Statistics collection: 0
[  273.376040][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.393511][ T5327] kaweth 3-1:0.0: Multicast filter limit: 0
[  273.422079][ T5327] kaweth 3-1:0.0: MTU: 0
[  273.440264][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.457105][ T5327] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00
[  273.487791][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.524618][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.555881][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.596784][T10122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.773121][ T5327] kaweth 3-1:0.0: Error setting SOFS wait
[  273.782317][ T5327] kaweth 3-1:0.0: probe with driver kaweth failed with error -5
[  273.836650][ T5327] usb 3-1: USB disconnect, device number 18
[  273.871472][T10122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.922928][T10122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.944275][T10122] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.961444][T10122] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.970187][T10122] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.001771][T10122] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.275099][ T6648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.293861][ T6648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.360979][T10382] loop3: detected capacity change from 0 to 32768
[  274.374517][ T6638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.382646][T10382] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1905 (10382)
[  274.452094][ T6638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.489452][T10382] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  274.531610][T10382] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  274.561596][T10382] BTRFS info (device loop3): using free-space-tree
[  275.127378][ T7641] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  275.935852][T10444] netlink: 'syz.5.1923': attribute type 1 has an invalid length.
[  276.021918][T10444] netlink: 9372 bytes leftover after parsing attributes in process `syz.5.1923'.
[  276.031140][T10444] netlink: 'syz.5.1923': attribute type 1 has an invalid length.
[  276.420430][T10463] loop2: detected capacity change from 0 to 128
[  276.528798][T10463] VFS: Found a Xenix FS (block size = 512) on device loop2
[  276.590889][T10463] sysv_free_block: trying to free block not in datazone
[  276.660416][T10463] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  277.663404][T10486] loop4: detected capacity change from 0 to 2048
[  277.798504][T10486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.172047][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.226523][T10485] loop2: detected capacity change from 0 to 4096
[  278.316421][T10485] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  278.339244][T10462] loop3: detected capacity change from 0 to 32768
[  278.405459][T10462] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1931 (10462)
[  279.512645][ T9913] Allocator stuck? Waited for 30 seconds
[  279.512670][ T9913] Allocator debug:
[  279.512683][ T9913]   capacity1536
[  279.512695][ T9913]   reserved             31232
[  279.512708][ T9913]   hidden               0
[  279.512722][ T9913]   btree                0
[  279.512734][ T9913]   data                 0
[  279.512747][ T9913]   cached               0
[  279.512760][ T9913]   reserved             0
[  279.512774][ T9913]   online_reserved      24
[  279.512787][ T9913]   nr_inodes            0
[  279.512800][ T9913]   
[  279.512812][ T9913]   freelist_wait        waiting
[  279.512825][ T9913]   open buckets allocated1
[  279.512839][ T9913]   open buckets total   1024
[  279.512852][ T9913]   open_buckets_wait    empty
[  279.512866][ T9913]   open_buckets_btree   0
[  279.512879][ T9913]   open_buckets_user    0
[  279.512892][ T9913]   btree reserve cache  0
[  279.512906][ T9913] 
[  279.512917][ T9913] Dev 0:
[  279.512929][ T9913]                      buckets         sectors      fragmented
[  279.512945][ T9913]   free                     0               0               0
[  279.512961][ T9913]   sb                       0               0               0
[  279.512977][ T9913]   journal                  0               0               0
[  279.512992][ T9913]   btree                    0               0               0
[  279.513008][ T9913]   user                     0               0               0
[  279.513024][ T9913]   cached                   0               0               0
[  279.513040][ T9913]   parity                   0               0               0
[  279.513056][ T9913]   stripe                   0               0               0
[  279.513072][ T9913]   need_gc_gens             0               0               0
[  279.513089][ T9913]   need_discard             0               0               0
[  279.513105][ T9913]   unstriped                0               0               0
[  279.513121][ T9913]   capacity               128
[  279.513134][ T9913]   
[  279.513146][ T9913]   reserves:
[  279.513158][ T9913]   stripe                  60
[  279.513171][ T9913]   normal                  58
[  279.513185][ T9913]   copygc                  56
[  279.513198][ T9913]   btree                   28
[  279.513212][ T9913]   btree_copygc             0
[  279.513226][ T9913]   reclaim                  0
[  279.513239][ T9913]   interior_updates         0
[  279.513253][ T9913]   
[  279.513264][ T9913]   open buckets             0
[  279.513278][ T9913]   buckets to invalidate    0
[  279.513292][ T9913] 
[  279.513303][ T9913] Copygc debug:
[  279.513315][ T9913]   running: 1
[  279.513328][ T9913]   copygc_wait:0
[  279.513340][ T9913]   copygc_wait_at:0
[  279.513353][ T9913]   Currently waiting for:0 B
[  279.513366][ T9913]   Currently waiting since:640 KiB
[  279.513381][ T9913]   Currently calculated wait:0 B
[  279.513394][ T9913] 
[  279.513405][ T9913] Journal debug:
[  279.513423][ T9913]   flags:                   running,may_skip_flush
[  279.513439][ T9913]   dirty journal entries:   2/32768
[  279.513453][ T9913]   seq:                     10
[  279.513467][ T9913]   seq_ondisk:              10
[  279.513480][ T9913]   last_seq:                9
[  279.513494][ T9913]   last_seq_ondisk:         9
[  279.513508][ T9913]   flushed_seq_ondisk:      10
[  279.513521][ T9913]   watermark:               stripe
[  279.513535][ T9913]   each entry reserved:     321
[  279.513549][ T9913]   nr flush writes:         3
[  279.513562][ T9913]   nr noflush writes:       0
[  279.513576][ T9913]   average write size:      1.56 KiB
[  279.513590][ T9913]   nr direct reclaim:       0
[  279.513604][ T9913]   nr background reclaim:   9
[  279.513617][ T9913]   reclaim kicked:          0
[  279.513631][ T9913]   reclaim runs in:         0 ms
[  279.513645][ T9913]   blocked:                 0
[  279.513658][ T9913]   current entry sectors:   256
[  279.513672][ T9913]   current entry error:     ok
[  279.513686][ T9913]   current entry:           closed
[  279.513700][ T9913]   unwritten entries:
[  279.513713][ T9913]   last buf closed
[  279.513726][ T9913]   space:
[  279.513738][ T9913]     discarded              256:1536
[  279.513752][ T9913]     clean ondisk           256:1536
[  279.513766][ T9913]     clean                  256:1536
[  279.513780][ T9913]     total                  256:2048
[  279.513795][ T9913]   dev 0:
[  279.513806][ T9913]     nr                     8
[  279.513819][ T9913]     bucket size            256
[  279.513833][ T9913]     available              6:232
[  279.513848][ T9913]     discard_idx            0
[  279.513861][ T9913]     dirty_ondisk           0 (seq 10)
[  279.513875][ T9913]     dirty_idx              0 (seq 10)
[  279.513890][ T9913]     cur_idx                0 (seq 10)
[  279.513904][ T9913] 
[  281.923988][T10485] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  281.956836][T10485] ntfs3: loop2: Failed to load $MFT (-22).
[  282.499186][T10536] program syz.3.1964 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  283.086993][T10544] netlink: 'syz.3.1968': attribute type 4 has an invalid length.
[  283.539039][T10556] Attempt to restore checkpoint with obsolete wellknown handles
[  283.642192][ T5286] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  283.861744][ T5286] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  283.908654][ T5286] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  284.005638][ T5286] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  284.071640][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  284.139514][ T5286] usb 4-1: SerialNumber: syz
[  284.394662][ T5286] usb 4-1: 0:2 : does not exist
[  284.469933][ T5286] usb 4-1: USB disconnect, device number 12
[  284.966737][T10584] binder: 10582:10584 ioctl c018620c 200005c0 returned -1
[  285.422787][T10589] loop3: detected capacity change from 0 to 2048
[  285.475483][T10594] loop4: detected capacity change from 0 to 128
[  285.546722][T10589] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1990: bad orphan inode 8192
[  285.574207][T10594] VFS: Found a Xenix FS (block size = 512) on device loop4
[  285.636957][T10589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.660565][T10594] sysv_free_block: trying to free block not in datazone
[  285.778675][T10594] sysv_count_free_blocks: free block count was -2041545929, correcting to 9
[  285.843693][T10589] process 'syz.3.1990' launched './file1' with NULL argv: empty string added
[  285.989428][T10594] sysv_count_free_inodes: unable to read inode table
[  286.281041][ T7641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.313286][ T5226] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  286.855205][T10579] loop2: detected capacity change from 0 to 32768
[  286.982678][T10579] find_entry called with index >= next_index
[  287.050166][T10613] vcan0: tx drop: invalid sa for name 0x0000000020000000
[  287.965810][ T5237] Bluetooth: hci4: command 0x0406 tx timeout
[  289.760151][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2018'.
[  289.834429][T10656] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2018'.
[  289.889719][   T29] audit: type=1400 audit(1726813218.193:48): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=10653 comm="syz.0.2017"
[  289.962698][T10656] macsec1: entered allmulticast mode
[  290.065155][T10660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2020'.
[  290.506841][   T29] audit: type=1326 audit(1726813218.813:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff196f7def9 code=0x7ffc0000
[  290.697333][   T29] audit: type=1326 audit(1726813218.853:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff196f7def9 code=0x7ffc0000
[  290.897278][   T29] audit: type=1326 audit(1726813218.853:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff196f7def9 code=0x7ffc0000
[  291.087433][   T29] audit: type=1326 audit(1726813218.853:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff196f7def9 code=0x7ffc0000
[  291.333129][   T29] audit: type=1326 audit(1726813218.853:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff196f7def9 code=0x7ffc0000
[  291.356509][   T29] audit: type=1326 audit(1726813218.853:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff196f7def9 code=0x7ffc0000
[  291.378753][    C0] vkms_vblank_simulate: vblank timer overrun
[  291.385445][   T29] audit: type=1326 audit(1726813218.853:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff196f7def9 code=0x7ffc0000
[  291.407862][   T29] audit: type=1326 audit(1726813218.873:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7ff196f7def9 code=0x7ffc0000
[  291.430103][    C0] vkms_vblank_simulate: vblank timer overrun
[  291.439072][   T29] audit: type=1326 audit(1726813218.873:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff196f7def9 code=0x7ffc0000
[  291.461328][    C0] vkms_vblank_simulate: vblank timer overrun
[  291.489306][T10678] program syz.2.2028 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  291.832068][T10686] netlink: 'syz.3.2031': attribute type 1 has an invalid length.
[  291.839852][T10686] netlink: 9364 bytes leftover after parsing attributes in process `syz.3.2031'.
[  291.861889][T10686] netlink: 'syz.3.2031': attribute type 2 has an invalid length.
[  291.869668][T10686] netlink: 'syz.3.2031': attribute type 1 has an invalid length.
[  293.655231][T10711] loop4: detected capacity change from 0 to 4096
[  293.719563][T10711] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  293.980158][T10722] netlink: 'syz.2.2046': attribute type 5 has an invalid length.
[  294.013145][T10722] netlink: 'syz.2.2046': attribute type 7 has an invalid length.
[  294.921314][T10742] ptrace attach of ""[10744] was attempted by "./syz-executor exec"[10742]
[  295.007014][T10744] coredump: 77(syz.5.2057): written to core: VMAs: 3, size 4096; core: 2771 bytes, pos 8192
[  295.250460][T10749] loop3: detected capacity change from 0 to 2048
[  295.317885][T10749] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  295.367150][T10736] could not allocate digest TFM handle sha512-neon
[  295.549375][T10711] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  295.588005][T10711] ntfs3: loop4: ino=1e, "file1" attr_set_size
[  296.486188][ T6638] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22.
[  296.546552][ T5226] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  296.582144][ T5226] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  296.613560][ T5226] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  296.658912][ T6644] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22.
[  296.989549][T10772] sctp: [Deprecated]: syz.4.2066 (pid 10772) Use of int in max_burst socket option deprecated.
[  296.989549][T10772] Use struct sctp_assoc_value instead
[  299.411196][T10780] loop3: detected capacity change from 0 to 32768
[  299.906276][T10803] netlink: 'syz.5.2084': attribute type 10 has an invalid length.
[  300.120723][T10803] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  300.274890][T10810] netlink: 'syz.4.2087': attribute type 1 has an invalid length.
[  300.460204][T10810] 8021q: adding VLAN 0 to HW filter on device bond1
[  301.488299][T10828] syz_tun: refused to change device tx_queue_len
[  301.527235][T10828] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  301.929534][T10831] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2096'.
[  302.794939][T10842] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  302.850385][T10845] cifs: Unknown parameter 'mode'
[  302.993502][T10846] netlink: 'syz.2.2103': attribute type 10 has an invalid length.
[  303.168922][T10818] loop4: detected capacity change from 0 to 32768
[  303.203670][T10846] team0: Port device wlan1 removed
[  303.248534][T10846] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  303.381458][T10818] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  303.824263][ T5226] ocfs2: Unmounting device (7,4) on (node local)
[  304.523942][T10863] netlink: 'syz.5.2111': attribute type 4 has an invalid length.
[  304.662520][T10863] rdma_rxe: rxe_newlink: failed to add lo
[  304.910792][T10840] loop3: detected capacity change from 0 to 32768
[  305.068425][T10840] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  305.332968][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2117'.
[  305.352534][T10840] XFS (loop3): Ending clean mount
[  305.418207][T10840] XFS (loop3): Quotacheck needed: Please wait.
[  305.559956][T10840] XFS (loop3): Quotacheck: Done.
[  305.786720][ T7641] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  307.546491][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2130'.
[  307.642960][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2130'.
[  307.673139][T10914] netlink: 'syz.5.2131': attribute type 1 has an invalid length.
[  307.742864][T10914] netlink: 9352 bytes leftover after parsing attributes in process `syz.5.2131'.
[  307.821540][T10914] netlink: 'syz.5.2131': attribute type 1 has an invalid length.
[  307.891580][T10914] netlink: 'syz.5.2131': attribute type 2 has an invalid length.
[  308.313246][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  308.326513][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  308.335831][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  308.345507][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  308.353765][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  308.376940][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  308.597742][T10919] lo speed is unknown, defaulting to 1000
[  309.060412][T10899] loop2: detected capacity change from 0 to 32768
[  309.129389][T10899] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  309.205657][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.267460][T10899] XFS (loop2): Ending clean mount
[  309.416393][ T6606] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  309.450305][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.602461][  T932] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  309.736366][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.771559][  T932] usb 5-1: Using ep0 maxpacket: 16
[  309.792450][  T932] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  309.803316][  T932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.848309][  T932] usb 5-1: Product: syz
[  309.853122][  T932] usb 5-1: Manufacturer: syz
[  309.861730][ T5327] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  309.877039][  T932] usb 5-1: SerialNumber: syz
[  309.889457][T10956] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2147'.
[  309.913574][  T932] usb 5-1: config 0 descriptor??
[  309.994419][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.012548][ T5327] usb 4-1: Using ep0 maxpacket: 8
[  310.033667][ T5327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  310.070292][ T5327] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x49, changing to 0x9
[  310.188302][ T5327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  310.262075][ T5327] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0
[  310.311473][ T5327] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  310.360849][  T932] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  310.377786][ T5327] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=e2.d0
[  310.400555][  T932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  310.406159][T10919] chnl_net:caif_netlink_parms(): no params data found
[  310.420681][ T5327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.429241][ T5327] usb 4-1: Product: syz
[  310.450375][ T5240] Bluetooth: hci3: command tx timeout
[  310.451808][  T932] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  310.465885][ T5327] usb 4-1: Manufacturer: syz
[  310.470589][ T5327] usb 4-1: SerialNumber: syz
[  310.537539][   T11] bridge_slave_1: left allmulticast mode
[  310.558495][ T5327] usb 4-1: config 0 descriptor??
[  310.567504][  T932] usb 5-1: media controller created
[  310.573586][   T11] bridge_slave_1: left promiscuous mode
[  310.599852][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.652394][   T11] bridge_slave_0: left allmulticast mode
[  310.677315][  T932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  310.692067][   T11] bridge_slave_0: left promiscuous mode
[  310.714796][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.784351][  T932] zl10353_read_register: readreg error (reg=127, ret==0)
[  310.821675][  T932] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  310.832015][ T5327] usb 4-1: probing VID:PID(0424:012C)   
[  310.838926][ T5327] usb 4-1: vub300 testing BULK OUT EndPoint(0) 09
[  310.859026][  T932] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  310.883896][ T5327] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[  310.898668][  T932] usb 5-1: USB disconnect, device number 12
[  310.983717][ T5327] vub300 4-1:0.0: probe with driver vub300 failed with error -22
[  311.019711][  T932] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  311.038684][ T5327] usb 4-1: USB disconnect, device number 13
[  311.463994][T10971] loop4: detected capacity change from 0 to 128
[  311.638024][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  311.638047][   T29] audit: type=1800 audit(1726813239.943:71): pid=10971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2152" name="file1" dev="loop4" ino=1048651 res=0 errno=0
[  311.711066][   T29] audit: type=1326 audit(1726813239.963:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.5.2156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f203fb7def9 code=0x0
[  312.535816][ T5240] Bluetooth: hci3: command 0x041b tx timeout
[  313.332488][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  313.399029][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.436545][   T11] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  313.511034][   T11] bond0 (unregistering): Released all slaves
[  313.627222][T11001] loop4: detected capacity change from 0 to 47
[  313.848351][T10919] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.950357][T10919] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.968833][T10919] bridge_slave_0: entered allmulticast mode
[  313.977087][T10919] bridge_slave_0: entered promiscuous mode
[  314.104182][T10919] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.112124][T10919] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.119503][T10919] bridge_slave_1: entered allmulticast mode
[  314.151571][T10919] bridge_slave_1: entered promiscuous mode
[  314.260241][T10919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.297504][T10919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  314.429401][T10919] team0: Port device team_slave_0 added
[  314.459600][T10919] team0: Port device team_slave_1 added
[  314.547883][T10919] batman_adv: batadv0: Adding interface: batadv_slave_0
[  314.569857][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.595907][    C0] vkms_vblank_simulate: vblank timer overrun
[  314.611648][ T5237] Bluetooth: hci3: command 0x041b tx timeout
[  314.669424][T10919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  314.706312][T10919] batman_adv: batadv0: Adding interface: batadv_slave_1
[  314.737982][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.764025][    C0] vkms_vblank_simulate: vblank timer overrun
[  314.809659][T10919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.947710][T10919] hsr_slave_0: entered promiscuous mode
[  314.973137][T10919] hsr_slave_1: entered promiscuous mode
[  314.994239][T10919] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  315.027041][T10919] Cannot create hsr debugfs directory
[  315.953107][T10919] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  315.990050][T10919] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  316.016607][T10919] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  316.048095][T10919] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  316.148866][T10919] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.156073][T10919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.163549][T10919] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.170672][T10919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.390160][T10919] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.454239][T10919] 8021q: adding VLAN 0 to HW filter on device team0
[  316.621908][ T1263] ieee802154 phy1 wpan1: encryption failed: -22
[  316.689389][ T5237] Bluetooth: hci3: command 0x041b tx timeout
[  317.074094][T10919] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.196175][T10919] veth0_vlan: entered promiscuous mode
[  317.236781][T10919] veth1_vlan: entered promiscuous mode
[  317.325070][T10919] veth0_macvtap: entered promiscuous mode
[  317.359055][T10919] veth1_macvtap: entered promiscuous mode
[  317.408412][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.447030][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.481406][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.510392][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.539176][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.580162][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.608226][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.638248][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.677775][T10919] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.710686][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.748565][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.784034][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.811387][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.821206][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.869173][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.901460][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.931380][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.958636][T10919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.998323][T10919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.032048][T10919] batman_adv: batadv0: Interface activated: batadv_slave_1
[  318.064362][T10919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.098160][T10919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.120840][T10919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.143415][T10919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.344363][ T6638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.373071][ T6638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.421523][ T6644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.429380][ T6644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.768363][ T5237] Bluetooth: hci3: command 0x041b tx timeout
[  318.922870][T10969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2161'.
[  423.981324][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  423.988364][    C0] rcu: 	1-...!: (0 ticks this GP) idle=1d8c/1/0x4000000000000000 softirq=38196/38196 fqs=2
[  424.000884][    C0] rcu: 	(detected by 0, t=10503 jiffies, g=39281, q=218 ncpus=2)
[  424.008635][    C0] Sending NMI from CPU 0 to CPUs 1:
[  424.008668][    C1] NMI backtrace for cpu 1
[  424.008682][    C1] CPU: 1 UID: 0 PID: 9897 Comm: bch-reclaim/loo Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0
[  424.008709][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  424.008723][    C1] RIP: 0010:__lock_acquire+0xc38/0x2050
[  424.008765][    C1] Code: 13 84 c0 0f 85 1f 0d 00 00 41 8b 07 a9 00 00 18 00 0f 84 d3 04 00 00 4c 89 e7 48 89 ee ba 08 00 00 00 e8 6b 60 00 00 45 31 f6 <85> c0 0f 84 d0 07 00 00 48 c7 c0 00 69 3a 9a 48 c1 e8 03 48 bf 00
[  424.008786][    C1] RSP: 0018:ffffc90000a18950 EFLAGS: 00000046
[  424.008807][    C1] RAX: 0000000000000001 RBX: 1ffff11004ba88f4 RCX: ffffffff81709d8a
[  424.008825][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9424f780
[  424.008841][    C1] RBP: ffff888025d44780 R08: ffffffff9424f787 R09: 1ffffffff2849ef0
[  424.008859][    C1] R10: dffffc0000000000 R11: fffffbfff2849ef1 R12: ffff888025d43c00
[  424.008878][    C1] R13: ffff888025d446d8 R14: 0000000000000000 R15: ffff888025d447a0
[  424.008903][    C1] FS:  0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000
[  424.008924][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  424.008941][    C1] CR2: 00007fc15ae656c0 CR3: 000000000e734000 CR4: 0000000000350ef0
[  424.008960][    C1] Call Trace:
[  424.008970][    C1]  <NMI>
[  424.008981][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  424.009009][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  424.009046][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  424.009082][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  424.009115][    C1]  ? nmi_handle+0x151/0x5a0
[  424.009139][    C1]  ? nmi_handle+0x2a/0x5a0
[  424.009163][    C1]  ? __lock_acquire+0xc38/0x2050
[  424.009199][    C1]  ? default_do_nmi+0x63/0x160
[  424.009228][    C1]  ? exc_nmi+0x123/0x1f0
[  424.009253][    C1]  ? end_repeat_nmi+0xf/0x53
[  424.009295][    C1]  ? mark_lock+0x9a/0x360
[  424.009317][    C1]  ? __lock_acquire+0xc38/0x2050
[  424.009358][    C1]  ? __lock_acquire+0xc38/0x2050
[  424.009395][    C1]  ? __lock_acquire+0xc38/0x2050
[  424.009431][    C1]  </NMI>
[  424.009439][    C1]  <IRQ>
[  424.009457][    C1]  lock_acquire+0x1ed/0x550
[  424.009492][    C1]  ? debug_object_deactivate+0x158/0x390
[  424.009525][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  424.009564][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.009601][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  424.009636][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.009673][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  424.009709][    C1]  _raw_spin_lock_irqsave+0xd5/0x120
[  424.009740][    C1]  ? debug_object_deactivate+0x158/0x390
[  424.009768][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  424.009806][    C1]  debug_object_deactivate+0x158/0x390
[  424.009835][    C1]  ? __pfx_debug_object_deactivate+0x10/0x10
[  424.009865][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.009903][    C1]  ? timerqueue_add+0x260/0x290
[  424.009925][    C1]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  424.009961][    C1]  debug_deactivate+0x1b/0x220
[  424.009987][    C1]  __hrtimer_run_queues+0x305/0xd50
[  424.010011][    C1]  ? ktime_get_update_offsets_now+0x3c/0x250
[  424.010052][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  424.010075][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.010113][    C1]  ? ktime_get_update_offsets_now+0x22d/0x250
[  424.010149][    C1]  hrtimer_interrupt+0x396/0x990
[  424.010184][    C1]  __sysvec_apic_timer_interrupt+0x112/0x3f0
[  424.010212][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  424.010245][    C1]  </IRQ>
[  424.010253][    C1]  <TASK>
[  424.010261][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  424.010298][    C1] RIP: 0010:lock_release+0xc1/0xa30
[  424.010334][    C1] Code: 48 89 d8 48 c1 e8 06 48 8d 3c c5 a8 5a 1c 90 be 08 00 00 00 e8 90 f9 8b 00 48 0f a3 1d 40 09 ac 0e 73 16 e8 71 54 0a 00 84 c0 <75> 0d 80 3d 40 cb 95 0e 00 0f 84 fc 05 00 00 48 c7 c0 fc 8c 1c 90
[  424.010371][    C1] RSP: 0018:ffffc900094cf700 EFLAGS: 00000202
[  424.010390][    C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81705160
[  424.010406][    C1] RDX: 0000000000000000 RSI: ffffffff8c60dce0 RDI: ffffffff8c60dca0
[  424.010424][    C1] RBP: ffffc900094cf830 R08: ffffffff901c5aaf R09: 1ffffffff2038b55
[  424.010442][    C1] R10: dffffc0000000000 R11: fffffbfff2038b56 R12: 1ffff92001299eec
[  424.010461][    C1] R13: ffffffff841fc89e R14: ffff88804ca046a0 R15: dffffc0000000000
[  424.010481][    C1]  ? btree_write_buffer_flush_seq+0x1a4e/0x1bc0
[  424.010521][    C1]  ? lock_release+0xb0/0xa30
[  424.010560][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.010600][    C1]  ? __pfx___might_resched+0x10/0x10
[  424.010635][    C1]  ? __pfx_lock_release+0x10/0x10
[  424.010673][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.010711][    C1]  ? rcu_is_watching+0x15/0xb0
[  424.010736][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.010774][    C1]  ? trace_contention_end+0x3c/0x120
[  424.010801][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.010839][    C1]  ? __mutex_lock+0x2ef/0xd70
[  424.010877][    C1]  ? btree_write_buffer_flush_seq+0x1a4e/0x1bc0
[  424.010913][    C1]  __mutex_unlock_slowpath+0xe2/0x750
[  424.010954][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  424.010996][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.011034][    C1]  ? bch2_trans_unlock+0x3a6/0x470
[  424.011072][    C1]  btree_write_buffer_flush_seq+0x1a4e/0x1bc0
[  424.011115][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.011157][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  424.011192][    C1]  ? __asan_memset+0x23/0x50
[  424.011221][    C1]  ? lockdep_init_map_type+0xa1/0x910
[  424.011256][    C1]  ? __pfx_btree_write_buffer_flush_seq+0x10/0x10
[  424.011293][    C1]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  424.011331][    C1]  ? journal_flush_pins+0x597/0xb20
[  424.011372][    C1]  ? do_raw_spin_lock+0x14f/0x370
[  424.011407][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.011444][    C1]  ? __bch2_trans_get+0x975/0xd20
[  424.011485][    C1]  bch2_btree_write_buffer_journal_flush+0x4e/0x80
[  424.011524][    C1]  ? __pfx_bch2_btree_write_buffer_journal_flush+0x10/0x10
[  424.011563][    C1]  journal_flush_pins+0x5f9/0xb20
[  424.011612][    C1]  __bch2_journal_reclaim+0x77d/0xe40
[  424.011663][    C1]  bch2_journal_reclaim_thread+0x174/0x560
[  424.011703][    C1]  ? bch2_journal_reclaim_thread+0x249/0x560
[  424.011745][    C1]  ? __pfx_bch2_journal_reclaim_thread+0x10/0x10
[  424.011783][    C1]  kthread+0x2f2/0x390
[  424.011806][    C1]  ? __pfx_bch2_journal_reclaim_thread+0x10/0x10
[  424.011844][    C1]  ? __pfx_kthread+0x10/0x10
[  424.011867][    C1]  ret_from_fork+0x4d/0x80
[  424.011902][    C1]  ? __pfx_kthread+0x10/0x10
[  424.011925][    C1]  ret_from_fork_asm+0x1a/0x30
[  424.011969][    C1]  </TASK>
[  424.012661][    C0] rcu: rcu_preempt kthread starved for 10495 jiffies! g39281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  424.662509][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  424.672492][    C0] rcu: RCU grace-period kthread stack dump:
[  424.678389][    C0] task:rcu_preempt     state:R  running task     stack:25656 pid:17    tgid:17    ppid:2      flags:0x00004000
[  424.690248][    C0] Call Trace:
[  424.693538][    C0]  <TASK>
[  424.696488][    C0]  __schedule+0x1893/0x4b50
[  424.701047][    C0]  ? __pfx___schedule+0x10/0x10
[  424.705928][    C0]  ? __pfx_lock_release+0x10/0x10
[  424.710981][    C0]  ? __asan_memset+0x23/0x50
[  424.715601][    C0]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  424.721435][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  424.727793][    C0]  ? schedule+0x90/0x320
[  424.732149][    C0]  schedule+0x14b/0x320
[  424.736335][    C0]  schedule_timeout+0x1be/0x310
[  424.741207][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  424.746603][    C0]  ? __pfx_process_timeout+0x10/0x10
[  424.751921][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.757586][    C0]  ? prepare_to_swait_event+0x330/0x350
[  424.763169][    C0]  rcu_gp_fqs_loop+0x2df/0x1330
[  424.768033][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  424.773273][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  424.779545][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  424.784847][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  424.790770][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.796434][    C0]  ? finish_swait+0xd4/0x1e0
[  424.801145][    C0]  rcu_gp_kthread+0xa7/0x3b0
[  424.805753][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  424.810963][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  424.816886][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.822551][    C0]  ? __kthread_parkme+0x169/0x1d0
[  424.827615][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  424.832829][    C0]  kthread+0x2f2/0x390
[  424.836916][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  424.842125][    C0]  ? __pfx_kthread+0x10/0x10
[  424.846728][    C0]  ret_from_fork+0x4d/0x80
[  424.851172][    C0]  ? __pfx_kthread+0x10/0x10
[  424.855775][    C0]  ret_from_fork_asm+0x1a/0x30
[  424.860583][    C0]  </TASK>
[  424.863618][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  424.870118][    C0] CPU: 0 UID: 0 PID: 6644 Comm: kworker/u8:16 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0
[  424.880716][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  424.891218][    C0] Workqueue: events_unbound toggle_allocation_gate
[  424.897767][    C0] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2ca0
[  424.904652][    C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 86 f1 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 31 ed 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 15 ed
[  424.924281][    C0] RSP: 0018:ffffc9000da1f6e0 EFLAGS: 00000293
[  424.930376][    C0] RAX: ffffffff8188d20b RBX: 1ffff110171288f9 RCX: ffff888051c1bc00
[  424.938366][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  424.946353][    C0] RBP: ffffc9000da1f8e0 R08: ffffffff8188d1da R09: 1ffffffff2849ef0
[  424.954343][    C0] R10: dffffc0000000000 R11: fffffbfff2849ef1 R12: dffffc0000000000
[  424.962507][    C0] R13: ffff8880b89447c8 R14: ffff8880b883fb80 R15: 0000000000000001
[  424.970495][    C0] FS:  0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000
[  424.979438][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  424.986031][    C0] CR2: 0000001b2d61dff8 CR3: 000000000e734000 CR4: 0000000000350ef0
[  424.994020][    C0] Call Trace:
[  424.997310][    C0]  <IRQ>
[  425.000161][    C0]  ? rcu_check_gp_kthread_starvation+0x278/0x310
[  425.006535][    C0]  ? print_other_cpu_stall+0x1475/0x15b0
[  425.012219][    C0]  ? __pfx_print_other_cpu_stall+0x10/0x10
[  425.018063][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  425.023734][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  425.029405][    C0]  ? kvm_check_and_clear_guest_paused+0x6a/0xd0
[  425.035672][    C0]  ? rcu_sched_clock_irq+0xa1a/0x10d0
[  425.041157][    C0]  ? __pfx_rcu_sched_clock_irq+0x10/0x10
[  425.046807][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  425.052470][    C0]  ? hrtimer_run_queues+0x16c/0x460
[  425.057684][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  425.063346][    C0]  ? acct_account_cputime+0x207/0x210
[  425.068744][    C0]  ? update_process_times+0x1ce/0x230
[  425.074145][    C0]  ? tick_nohz_handler+0x37c/0x500
[  425.079281][    C0]  ? __pfx_tick_nohz_handler+0x10/0x10
[  425.084758][    C0]  ? __hrtimer_run_queues+0x553/0xd50
[  425.090149][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[  425.096182][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  425.101924][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  425.107589][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[  425.113691][    C0]  ? hrtimer_interrupt+0x396/0x990
[  425.118841][    C0]  ? __sysvec_apic_timer_interrupt+0x112/0x3f0
[  425.125016][    C0]  ? sysvec_apic_timer_interrupt+0xa1/0xc0
[  425.130847][    C0]  </IRQ>
[  425.134046][    C0]  <TASK>
[  425.136985][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  425.143184][    C0]  ? smp_call_function_many_cond+0x19da/0x2ca0
[  425.149372][    C0]  ? smp_call_function_many_cond+0x1a0b/0x2ca0
[  425.155562][    C0]  ? smp_call_function_many_cond+0x19f3/0x2ca0
[  425.161765][    C0]  ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0
[  425.167850][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  425.173513][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  425.178570][    C0]  ? __pfx___text_poke+0x10/0x10
[  425.183524][    C0]  ? process_scheduled_works+0x976/0x1850
[  425.189271][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  425.194937][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  425.201294][    C0]  ? __pfx___might_resched+0x10/0x10
[  425.206603][    C0]  ? __mutex_trylock_common+0x183/0x2e0
[  425.212169][    C0]  ? __pfx___might_resched+0x10/0x10
[  425.217656][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  425.222708][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  425.227851][    C0]  text_poke_bp_batch+0x352/0xb30
[  425.232894][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  425.238568][    C0]  ? __pfx_text_poke_bp_batch+0x10/0x10
[  425.244208][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  425.249264][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  425.254929][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  425.260592][    C0]  ? arch_jump_label_transform_queue+0x9b/0x100
[  425.266862][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  425.272526][    C0]  ? process_scheduled_works+0x976/0x1850
[  425.278270][    C0]  text_poke_finish+0x30/0x50
[  425.282964][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  425.289051][    C0]  static_key_enable_cpuslocked+0x136/0x260
[  425.294968][    C0]  static_key_enable+0x1a/0x20
[  425.299748][    C0]  toggle_allocation_gate+0xb5/0x250
[  425.305061][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  425.310981][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  425.317351][    C0]  process_scheduled_works+0xa65/0x1850
[  425.322954][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  425.328965][    C0]  ? assign_work+0x364/0x3d0
[  425.333583][    C0]  worker_thread+0x870/0xd30
[  425.338219][    C0]  ? __kthread_parkme+0x169/0x1d0
[  425.343278][    C0]  ? __pfx_worker_thread+0x10/0x10
[  425.348589][    C0]  kthread+0x2f2/0x390
[  425.352674][    C0]  ? __pfx_worker_thread+0x10/0x10
[  425.357807][    C0]  ? __pfx_kthread+0x10/0x10
[  425.362501][    C0]  ret_from_fork+0x4d/0x80
[  425.366944][    C0]  ? __pfx_kthread+0x10/0x10
[  425.371546][    C0]  ret_from_fork_asm+0x1a/0x30
[  425.376358][    C0]  </TASK>
[  425.379890][    C0] vkms_vblank_simulate: vblank timer overrun