last executing test programs:

48.827853711s ago: executing program 3 (id=11):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8000}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x20}], 0x1)

47.639435219s ago: executing program 3 (id=18):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40054d0}, 0x4000020)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)

47.400614915s ago: executing program 3 (id=20):
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

47.055922893s ago: executing program 3 (id=21):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3200002, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x617, &(0x7f0000000bc0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0x4482c, 0x0, 0x3, 0x0, &(0x7f0000000680))
openat$rtc(0xffffffffffffff9c, 0x0, 0x200, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x2000c081)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210080, &(0x7f0000000ac0)={[{@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@lazytime}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@nombcache}, {@resuid}]}, 0x1, 0x5a0, &(0x7f0000000380)="$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")
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

46.379735609s ago: executing program 3 (id=26):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r1, r3, 0x4e, 0x5)
write$eventfd(r2, &(0x7f0000000000)=0x2, 0x8)

45.717978755s ago: executing program 3 (id=31):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1840, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0)

45.271088316s ago: executing program 32 (id=31):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1840, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0)

7.693616065s ago: executing program 0 (id=206):
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103042, 0xf2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0x101546, 0x0)
fsetxattr(r0, &(0x7f0000000400)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

7.50857027s ago: executing program 0 (id=209):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x81000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c)

7.07254252s ago: executing program 0 (id=211):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x20, 0x21, 0x6, "d60af4e6c25a"}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xbc}})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f00000001c0)={0x40, 0xa, 0x5, "a339304da6"}, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

4.042452003s ago: executing program 0 (id=224):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r2, 0x60b, 0x0)

3.73949638s ago: executing program 1 (id=226):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.273961901s ago: executing program 1 (id=229):
io_uring_setup(0x1694, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xd, 0x7, 0x7fc00002}]})
clock_gettime(0x0, 0x0)

2.543158028s ago: executing program 4 (id=232):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{}]}, 0x3, 0x5fe, &(0x7f0000000d40)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

2.262662905s ago: executing program 4 (id=235):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc)
sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
sendmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000100)='H\'', 0x2}], 0x1}}], 0x1, 0x20088085)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0xf9f2, 0x0, 0xea, 0x44, 0x0, 0x8, 0x5}, 0x20)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

2.151233118s ago: executing program 1 (id=236):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x2, 0x5, 0x64, @ipv4={'\x00', '\xff\xff', @empty}, @private0, 0x700, 0x700, 0x815a, 0xffe}})
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b<B\xc3k\xcd\x01\xe4\x05\n!\x02Y\xc7`ooveu`z\xb9\xf5r\xc0c\x95\xcbQbj5\xb1\x8f\xb9J\xa9#\x13\x92\x05H\x91\xa5\xdfxM\nD\xc70\xa11B\xf1\xab\xccw\x17\xbf\xc8W\xec\xb88\xc9\x1b*h\xc3c\x89n\x89ic\xfd\x9c\xfa~\xb5$VG\x85\xc2\x86\x89}*\x99\xda\x94\xba)\xb9b\xeb\xe9\x0f{V%TD\xbc\xee\x96C\x89No\xc9\n\x91\xe0\xfcqE4\x8c', 0x3a, '\x8c\xf0<\x06\xd3=(\xa0\x96k\xd8cf\x92\xd1\xed\xf5\x00\x00\xb5\xff\xd9o\x1c.\xecU \xc8\x12\xacf\x15I)S\xa5\xdb\x8f!\x8aA\xee$\x0e\x16\xf7wL\x9c~8\x10\xd2\nJ,D;Z \x92\xccY\xd7', 0x3a, './cgroup.cpu/cpuset.cpus/file0'}, 0x147)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.047589061s ago: executing program 4 (id=238):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32)
sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

1.959816353s ago: executing program 1 (id=239):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x4d}}}, &(0x7f0000000480)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x5d49, 0x0, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, &(0x7f00000009c0)=0x1e)

1.786533007s ago: executing program 2 (id=241):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5)

1.520530823s ago: executing program 2 (id=242):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x81000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c)

1.349924157s ago: executing program 2 (id=243):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001600)=@vmx={0x8, 0x0, 0x2080, {0xd000, 0x60000, {}, 0x1, 0x1}, {"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", "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"}})

1.160599082s ago: executing program 4 (id=244):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x8)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)

961.405906ms ago: executing program 2 (id=245):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
unlink(&(0x7f00000002c0)='./file0/file2\x00')
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)

874.305839ms ago: executing program 4 (id=246):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000840)="a6", 0xffffff1e, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic', 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
shutdown(r0, 0x1)

837.774009ms ago: executing program 1 (id=247):
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2008, 0x0, 0x3e, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4000000000000, 0xffffffffffbffffe, 0x7f, 0xfffffffd}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x44042, 0x120)
sendfile(r0, r0, 0x0, 0x252c000000000000)

650.184004ms ago: executing program 2 (id=248):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c)

558.044146ms ago: executing program 2 (id=249):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0xfffffffffffffee0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x1000, 0x9, 0x4, 0x8000, 0xfffd, 0xec, 0x3906, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0xfff}, 0x0})

547.348247ms ago: executing program 1 (id=250):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x1000040, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
chdir(&(0x7f0000000140)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000000700), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x290c471, 0x0, 0x1, 0x0, &(0x7f0000000740))
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240))
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000740)='./bus/file0\x00')

216.327214ms ago: executing program 0 (id=251):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2015816, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="f0e343"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

93.987967ms ago: executing program 4 (id=252):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000a31000)={0x20080522}, 0x0)
ioctl$FIBMAP(r0, 0x1261, 0x0)

0s ago: executing program 0 (id=253):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'ip6gretap0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts.
[   78.720099][ T5763] cgroup: Unknown subsys name 'net'
[   78.859397][ T5763] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.527665][ T5763] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   82.197072][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.206104][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.216867][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.224917][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.245103][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.253964][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.262606][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.270462][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   82.278543][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.333925][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.351990][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.352475][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.363043][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.374773][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.375170][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.389722][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   82.397432][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.403268][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.410551][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   82.418924][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.419350][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.438506][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.446440][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   82.461565][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.909024][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   82.966546][ T5782] chnl_net:caif_netlink_parms(): no params data found
[   83.027806][ T5777] chnl_net:caif_netlink_parms(): no params data found
[   83.127913][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.136380][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.144523][ T5774] bridge_slave_0: entered allmulticast mode
[   83.151906][ T5774] bridge_slave_0: entered promiscuous mode
[   83.177634][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.184957][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.192588][ T5774] bridge_slave_1: entered allmulticast mode
[   83.199659][ T5774] bridge_slave_1: entered promiscuous mode
[   83.220176][ T5780] chnl_net:caif_netlink_parms(): no params data found
[   83.318304][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.325915][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.333613][ T5782] bridge_slave_0: entered allmulticast mode
[   83.340859][ T5782] bridge_slave_0: entered promiscuous mode
[   83.349396][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.357791][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.365527][ T5777] bridge_slave_0: entered allmulticast mode
[   83.373542][ T5777] bridge_slave_0: entered promiscuous mode
[   83.385270][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.407109][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.414535][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.422215][ T5782] bridge_slave_1: entered allmulticast mode
[   83.429267][ T5782] bridge_slave_1: entered promiscuous mode
[   83.437062][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.444763][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.452205][ T5777] bridge_slave_1: entered allmulticast mode
[   83.459284][ T5777] bridge_slave_1: entered promiscuous mode
[   83.468116][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.566456][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.580071][ T5774] team0: Port device team_slave_0 added
[   83.599605][ T5774] team0: Port device team_slave_1 added
[   83.609026][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.621522][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.633105][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.699829][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.707174][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.733263][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.755882][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.764646][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.772389][ T5780] bridge_slave_0: entered allmulticast mode
[   83.779471][ T5780] bridge_slave_0: entered promiscuous mode
[   83.798402][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.806845][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.814183][ T5780] bridge_slave_1: entered allmulticast mode
[   83.821877][ T5780] bridge_slave_1: entered promiscuous mode
[   83.829613][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.836634][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.862912][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.884887][ T5777] team0: Port device team_slave_0 added
[   83.895546][ T5782] team0: Port device team_slave_0 added
[   83.935006][ T5777] team0: Port device team_slave_1 added
[   83.943477][ T5782] team0: Port device team_slave_1 added
[   83.964916][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.978073][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.064976][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.072347][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.098771][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.112123][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.119724][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.145738][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.157577][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.164933][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.191465][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.204884][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.212205][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.238222][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.253607][ T5780] team0: Port device team_slave_0 added
[   84.268106][ T5774] hsr_slave_0: entered promiscuous mode
[   84.274744][ T5774] hsr_slave_1: entered promiscuous mode
[   84.298813][ T5780] team0: Port device team_slave_1 added
[   84.322232][   T51] Bluetooth: hci2: command tx timeout
[   84.357714][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.364816][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.394071][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.417308][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.427482][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.453667][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.477419][ T5777] hsr_slave_0: entered promiscuous mode
[   84.482835][   T51] Bluetooth: hci1: command tx timeout
[   84.483701][ T5787] Bluetooth: hci0: command tx timeout
[   84.496254][ T5777] hsr_slave_1: entered promiscuous mode
[   84.503038][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.511096][ T5777] Cannot create hsr debugfs directory
[   84.560884][ T5787] Bluetooth: hci3: command tx timeout
[   84.583622][ T5782] hsr_slave_0: entered promiscuous mode
[   84.590498][ T5782] hsr_slave_1: entered promiscuous mode
[   84.597576][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.605786][ T5782] Cannot create hsr debugfs directory
[   84.714951][ T5780] hsr_slave_0: entered promiscuous mode
[   84.722374][ T5780] hsr_slave_1: entered promiscuous mode
[   84.728885][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.736701][ T5780] Cannot create hsr debugfs directory
[   85.099934][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.119217][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.131909][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.149691][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.237745][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.270551][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.284049][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.304857][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.364905][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.396190][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.413619][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.443459][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.549844][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.562288][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.577500][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.589775][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.613459][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.666714][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   85.716226][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.723655][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.737187][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.744361][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.836423][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.887017][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.914712][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[   85.939824][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   85.959723][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.966964][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.013668][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.020928][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.049314][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.056611][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.069725][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.088891][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.096223][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.195759][ T5780] 8021q: adding VLAN 0 to HW filter on device team0
[   86.236412][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.243684][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.285685][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.292927][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.411945][ T5787] Bluetooth: hci2: command tx timeout
[   86.427892][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.561123][ T5787] Bluetooth: hci1: command tx timeout
[   86.566651][ T5787] Bluetooth: hci0: command tx timeout
[   86.604763][ T5774] veth0_vlan: entered promiscuous mode
[   86.642176][ T5787] Bluetooth: hci3: command tx timeout
[   86.667636][ T5774] veth1_vlan: entered promiscuous mode
[   86.788715][ T5774] veth0_macvtap: entered promiscuous mode
[   86.836613][ T5774] veth1_macvtap: entered promiscuous mode
[   86.897625][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.922702][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.935038][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.946765][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.966922][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.979027][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.988854][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.000841][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.020943][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.136830][ T5780] veth0_vlan: entered promiscuous mode
[   87.212538][ T5780] veth1_vlan: entered promiscuous mode
[   87.275701][ T5782] veth0_vlan: entered promiscuous mode
[   87.284635][ T5777] veth0_vlan: entered promiscuous mode
[   87.328173][ T5782] veth1_vlan: entered promiscuous mode
[   87.347203][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.370413][ T5780] veth0_macvtap: entered promiscuous mode
[   87.381761][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.408253][ T5777] veth1_vlan: entered promiscuous mode
[   87.438215][ T5780] veth1_macvtap: entered promiscuous mode
[   87.510170][ T5782] veth0_macvtap: entered promiscuous mode
[   87.538609][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.550676][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.594488][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.622340][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.653451][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.696283][ T5782] veth1_macvtap: entered promiscuous mode
[   87.713941][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.725018][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.738138][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.750960][ T5777] veth0_macvtap: entered promiscuous mode
[   87.776554][ T5777] veth1_macvtap: entered promiscuous mode
[   87.799938][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.830761][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.840065][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.870709][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.934599][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.959840][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.980338][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.001552][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.026786][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.095079][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.114965][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.125802][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.137031][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.149755][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.183311][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.199557][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.209858][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.222272][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.232527][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.244421][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.258697][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.268745][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.278950][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.288145][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.297490][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.326967][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.337712][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.348345][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.362353][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.372612][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.383317][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.395403][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.449961][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.461733][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.470564][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.482255][ T5787] Bluetooth: hci2: command tx timeout
[   88.487918][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.530009][ T2884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.544456][ T2884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.604116][  T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.613490][  T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.641044][ T5787] Bluetooth: hci0: command tx timeout
[   88.646700][   T51] Bluetooth: hci1: command tx timeout
[   88.721698][ T5787] Bluetooth: hci3: command tx timeout
[   88.731353][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.748438][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.802472][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.810403][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.897633][ T2884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.925659][ T2884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.964111][ T5847] syz.2.3[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   89.027919][ T5847] loop2: detected capacity change from 0 to 1024
[   89.052028][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.059939][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.171608][ T5847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.353315][ T5854] loop0: detected capacity change from 0 to 512
[   89.386301][ T5854] EXT4-fs: inline encryption not supported
[   89.410910][ T5854] ext4: Unknown parameter 'nouser_xattr'
[   89.512670][ T5857] netlink: 'syz.3.4': attribute type 5 has an invalid length.
[   89.805143][ T5862] loop1: detected capacity change from 0 to 512
[   89.909188][ T5862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.004559][ T5862] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.031424][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.173357][ T5868] capability: warning: `syz.2.9' uses deprecated v2 capabilities in a way that may be insecure
[   90.217119][ T5868] =======================================================
[   90.217119][ T5868] WARNING: The mand mount option has been deprecated and
[   90.217119][ T5868]          and is ignored by this kernel. Remove the mand
[   90.217119][ T5868]          option from the mount to silence this warning.
[   90.217119][ T5868] =======================================================
[   90.308745][ T5854] loop0: detected capacity change from 0 to 40427
[   90.316362][ T5868] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   90.375252][ T5854] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(184549378) root(3)
[   90.387101][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.414927][ T5854] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   90.462726][ T5854] F2FS-fs (loop0): Unrecognized mount option "alloc_mQ�%�N]k�t�|�ode=default" or missing value
[   90.561608][ T5787] Bluetooth: hci2: command tx timeout
[   90.721813][ T5787] Bluetooth: hci0: command tx timeout
[   90.727303][ T5787] Bluetooth: hci1: command tx timeout
[   90.802340][ T5787] Bluetooth: hci3: command tx timeout
[   91.526265][ T5889] netlink: 'syz.2.16': attribute type 1 has an invalid length.
[   91.578489][ T5889] erspan1: entered allmulticast mode
[   91.591204][ T5889] bridge0: port 3(erspan1) entered blocking state
[   91.607045][ T5889] bridge0: port 3(erspan1) entered disabled state
[   91.630339][ T5889] erspan1: entered promiscuous mode
[   91.647757][   T27] audit: type=1326 audit(1786466096.041:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6159e0d9 code=0x7ffc0000
[   91.716346][   T27] audit: type=1326 audit(1786466096.041:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6159e0d9 code=0x7ffc0000
[   91.779477][   T27] audit: type=1326 audit(1786466096.041:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6159e0d9 code=0x7ffc0000
[   91.813755][   T27] audit: type=1326 audit(1786466096.041:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6159e0d9 code=0x7ffc0000
[   91.863850][   T27] audit: type=1326 audit(1786466096.041:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6159e0d9 code=0x7ffc0000
[   91.922206][   T27] audit: type=1326 audit(1786466096.041:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efe6159e0d9 code=0x7ffc0000
[   91.959046][   T27] audit: type=1326 audit(1786466096.101:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe6155e90e code=0x7ffc0000
[   91.988085][   T27] audit: type=1326 audit(1786466096.101:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe6155e90e code=0x7ffc0000
[   92.031831][   T27] audit: type=1326 audit(1786466096.111:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe6155e90e code=0x7ffc0000
[   92.070773][   T27] audit: type=1326 audit(1786466096.111:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe6155e90e code=0x7ffc0000
[   92.190797][ T5884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   92.255819][ T1190] cfg80211: failed to load regulatory.db
[   92.304020][ T5901] loop3: detected capacity change from 0 to 1024
[   92.393857][ T5901] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   92.423591][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'.
[   92.461433][ T5904] Zero length message leads to an empty skb
[   92.481595][ T5901] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[   92.492045][ T5901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.548854][ T5906] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.770406][ T5901] overlayfs: invalid origin (0000007900ecdddf6b53571c00f0ef4d7fa8d5ad1544b63d0cc187399ca96df7c3c160ee716c32617bda8b863616696aa449c576c2f461beec65c8608c09637f)
[   92.900025][ T5777] EXT4-fs warning (device loop3): empty_inline_dir:1864: bad inline directory (dir #12) - no `..'
[   92.913247][ T5777] EXT4-fs warning (device loop3): empty_inline_dir:1864: bad inline directory (dir #12) - no `..'
[   92.925212][ T5777] EXT4-fs warning (device loop3): empty_inline_dir:1864: bad inline directory (dir #12) - no `..'
[   92.937987][ T5777] EXT4-fs warning (device loop3): empty_inline_dir:1864: bad inline directory (dir #12) - no `..'
[   92.950467][ T5777] EXT4-fs warning (device loop3): empty_inline_dir:1864: bad inline directory (dir #12) - no `..'
[   92.965968][ T5777] EXT4-fs warning (device loop3): empty_inline_dir:1864: bad inline directory (dir #12) - no `..'
[   92.977831][ T5777] EXT4-fs warning (device loop3): empty_inline_dir:1864: bad inline directory (dir #12) - no `..'
[   92.989765][ T5777] EXT4-fs warning (device loop3): empty_inline_dir:1864: bad inline directory (dir #12) - no `..'
[   93.001723][ T5777] EXT4-fs warning (device loop3): empty_inline_dir:1864: bad inline directory (dir #12) - no `..'
[   93.013643][ T5777] EXT4-fs warning (device loop3): empty_inline_dir:1864: bad inline directory (dir #12) - no `..'
[   93.436046][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.526987][ T3450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.545949][ T5924] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   93.577610][ T5924] CIFS: Attempting to mount //127.0.0.1/share
[   93.679301][ T5926] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0
[   93.716211][ T5926] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes)
[   93.729852][ T3450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.847236][ T3450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.935094][ T3450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.966698][ T5924] CIFS: VFS: cifs_mount failed w/return code = -112
[   94.437847][ T5941] loop2: detected capacity change from 0 to 512
[   94.525440][ T5941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.681582][ T5941] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.37: Corrupt inode bitmap - block_group = 0, inode_bitmap = 3
[   94.823637][ T5952] loop0: detected capacity change from 0 to 256
[   94.890235][ T5952] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[   94.912516][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.153848][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.171066][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.182195][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.210301][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.221300][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   95.228771][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.519245][ T5971] loop0: detected capacity change from 0 to 1024
[   95.556875][ T5971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.807992][ T5971] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.43: Invalid inode table block 6087251719150590164 in block_group 0
[   95.924471][ T5820] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   95.970228][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.145979][ T5820] usb 2-1: Using ep0 maxpacket: 32
[   96.183894][ T5820] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[   96.195250][ T5820] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   96.210176][ T5820] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[   96.240031][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   96.250071][ T5820] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   96.300529][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   96.327928][ T5820] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   96.350745][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.402896][ T5820] usb 2-1: config 0 descriptor??
[   96.678567][ T5820] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   96.782662][ T5820] usb 2-1: USB disconnect, device number 2
[   96.816381][ T5958] chnl_net:caif_netlink_parms(): no params data found
[   96.855375][ T5820] usblp0: removed
[   97.187968][ T3450] hsr_slave_0: left promiscuous mode
[   97.210169][ T3450] hsr_slave_1: left promiscuous mode
[   97.227199][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.244988][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.281000][ T5787] Bluetooth: hci1: command tx timeout
[   97.287389][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.315007][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.343739][ T3450] bridge_slave_1: left allmulticast mode
[   97.388434][ T3450] bridge_slave_1: left promiscuous mode
[   97.400985][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.428518][ T3450] bridge_slave_0: left allmulticast mode
[   97.438177][ T3450] bridge_slave_0: left promiscuous mode
[   97.444878][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.453154][ T5820] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   97.516094][ T3450] veth1_macvtap: left promiscuous mode
[   97.535126][ T3450] veth0_macvtap: left promiscuous mode
[   97.552003][ T3450] veth1_vlan: left promiscuous mode
[   97.557742][ T3450] veth0_vlan: left promiscuous mode
[   97.640768][ T5820] usb 2-1: Using ep0 maxpacket: 32
[   97.648117][ T5820] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[   97.672698][ T5820] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   97.697289][ T5820] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[   97.724505][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   97.753254][ T5820] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   97.780795][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   97.810761][ T5820] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   97.830300][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.851645][ T5820] usb 2-1: config 0 descriptor??
[   98.090866][ T5820] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   98.315141][ T6026] loop0: detected capacity change from 0 to 4096
[   98.354756][ T6026] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[   98.524400][ T6027] usblp0:failed reading printer status (-32)
[   98.597177][ T1190] usb 2-1: USB disconnect, device number 3
[   98.656113][ T1190] usblp0: removed
[   98.874983][ T3450] team0 (unregistering): Port device team_slave_1 removed
[   98.959845][ T3450] team0 (unregistering): Port device team_slave_0 removed
[   99.055917][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.117527][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.362815][ T5787] Bluetooth: hci1: command tx timeout
[   99.561484][ T3450] bond0 (unregistering): Released all slaves
[   99.747640][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.756428][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.777386][ T5958] bridge_slave_0: entered allmulticast mode
[   99.799582][ T5958] bridge_slave_0: entered promiscuous mode
[   99.857382][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.882508][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.890303][ T5958] bridge_slave_1: entered allmulticast mode
[   99.917634][ T5958] bridge_slave_1: entered promiscuous mode
[  100.054869][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.105762][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.252846][ T6048] loop0: detected capacity change from 0 to 1024
[  100.266056][ T5958] team0: Port device team_slave_0 added
[  100.299862][ T5958] team0: Port device team_slave_1 added
[  100.311807][ T6048] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  100.341023][ T6048] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  100.410141][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.61'.
[  100.453385][ T6048] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  100.479854][ T6048] EXT4-fs (loop0): orphan cleanup on readonly fs
[  100.530396][ T6048] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.60: Freeing blocks not in datazone - block = 0, count = 4096
[  100.601228][ T6048] EXT4-fs (loop0): 1 orphan inode deleted
[  100.609061][ T6048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  101.200244][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.460825][ T5787] Bluetooth: hci1: command tx timeout
[  101.757113][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.766049][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.880830][ T6071] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  102.081580][ T6071] usb 1-1: Using ep0 maxpacket: 8
[  102.106406][ T6071] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  102.129029][ T6071] usb 1-1: config 0 has no interface number 0
[  102.145925][ T6071] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  102.169946][ T6071] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  102.179885][ T6071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.211449][ T6071] usb 1-1: config 0 descriptor??
[  102.228794][ T6071] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  102.475528][ T6071] usb 1-1: USB disconnect, device number 2
[  102.642561][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.730056][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.070838][ T6071] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  103.273989][ T6071] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  103.291620][ T6071] usb 1-1: config 0 has no interface number 0
[  103.314596][ T6071] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  103.331954][ T6071] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  103.352242][ T6071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.373436][ T6071] usb 1-1: config 0 descriptor??
[  103.392783][ T6071] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  103.520881][ T5787] Bluetooth: hci1: command tx timeout
[  103.580863][ T6050] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.589804][ T6050] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.612246][ T6100] loop1: detected capacity change from 0 to 512
[  103.627986][ T6100] EXT4-fs: Ignoring removed nomblk_io_submit option
[  103.636967][ T6050] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.655986][ T6050] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.685407][ T6100] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  103.711380][ T6100] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.74: corrupted in-inode xattr: e_value size too large
[  103.727697][ T6100] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.74: couldn't read orphan inode 15 (err -117)
[  103.743227][ T6100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.862164][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.952117][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.959146][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.001663][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.063045][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.107656][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.143693][ T6106] syz.1.75 uses obsolete (PF_INET,SOCK_PACKET)
[  104.164719][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.178352][ T6109] loop2: detected capacity change from 0 to 128
[  104.204544][   T23] usb 1-1: USB disconnect, device number 3
[  104.233290][ T6109] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  104.296532][ T5958] hsr_slave_0: entered promiscuous mode
[  104.324223][ T5958] hsr_slave_1: entered promiscuous mode
[  104.346873][ T6109] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  104.379554][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.406469][ T5958] Cannot create hsr debugfs directory
[  104.506927][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  104.905194][ T6121] netlink: 'syz.2.78': attribute type 1 has an invalid length.
[  104.917844][ T6121] netlink: 11 bytes leftover after parsing attributes in process `syz.2.78'.
[  105.237702][ T5958] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  105.337073][ T5958] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  105.379557][ T5958] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  105.433525][ T5958] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  105.660821][   T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  105.705013][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.734337][ T6149] VFS: file-max limit 0 reached
[  105.768311][ T5958] 8021q: adding VLAN 0 to HW filter on device team0
[  105.802897][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.810838][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.840563][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.847886][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.890797][   T23] usb 3-1: Using ep0 maxpacket: 16
[  105.902548][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.945540][   T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  105.991166][   T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  106.014253][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.054253][   T23] usb 3-1: config 0 descriptor??
[  106.616800][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.088703][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.108053][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.122941][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.131035][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.138486][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.158516][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.183197][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.200110][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.229986][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.256240][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.280096][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.331199][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.338534][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.366250][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  107.425664][ T5958] veth0_vlan: entered promiscuous mode
[  107.443722][   T23] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input5
[  107.499064][ T5958] veth1_vlan: entered promiscuous mode
[  107.582003][   T23] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  107.657677][ T5958] veth0_macvtap: entered promiscuous mode
[  107.686705][ T6198] loop1: detected capacity change from 0 to 8192
[  107.689801][ T2180] libceph: connect (1)[c::]:6789 error -101
[  107.710524][ T5958] veth1_macvtap: entered promiscuous mode
[  107.739995][ T6198] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  107.778324][ T2180] libceph: mon0 (1)[c::]:6789 connect error
[  107.790482][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.809120][ T2180] libceph: connect (1)[c::]:6789 error -101
[  107.823470][ T2180] libceph: mon0 (1)[c::]:6789 connect error
[  107.840195][ T6200] ceph: No mds server is up or the cluster is laggy
[  107.847141][ T6198] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  107.847686][ T6198] REISERFS (device loop1): using ordered data mode
[  107.879245][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.921541][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.939087][ T6198] reiserfs: using flush barriers
[  107.962697][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.981573][ T6198] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  108.024608][ T5843] usb 3-1: USB disconnect, device number 2
[  108.033437][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.052732][ T6198] REISERFS (device loop1): checking transaction log (loop1)
[  108.084541][ T6205] fido_id[6205]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  108.102618][   T23] libceph: connect (1)[c::]:6789 error -101
[  108.130888][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  108.170822][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.212545][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.263252][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.287922][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.324317][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.381818][ T5958] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.411563][ T5958] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.432799][ T5958] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.449146][ T5958] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.477603][ T6198] REISERFS (device loop1): Using tea hash to sort names
[  108.510456][ T6198] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  108.681533][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.700844][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.771934][ T5842] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  108.784711][   T27] kauditd_printk_skb: 81 callbacks suppressed
[  108.784730][   T27] audit: type=1804 audit(1786466113.181:93): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.94" name="/newroot/35/file6/bus" dev="loop1" ino=4 res=1 errno=0
[  108.834064][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.852404][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.046199][ T5842] usb 1-1: Using ep0 maxpacket: 32
[  109.071667][ T5842] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  109.090401][ T5842] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  109.137325][ T5842] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  109.166832][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  109.211463][ T5842] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  109.227527][ T5842] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  109.271064][ T5842] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  109.280194][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.313839][ T5842] usb 1-1: config 0 descriptor??
[  109.543697][ T5842] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  109.611069][ T5842] usb 1-1: USB disconnect, device number 4
[  109.633647][ T6236] lo: entered promiscuous mode
[  109.638771][ T6236] lo: entered allmulticast mode
[  109.645855][ T5842] usblp0: removed
[  109.657417][ T6236] bond0: entered promiscuous mode
[  109.670501][ T6236] bond0: entered allmulticast mode
[  109.690389][ T6236] dummy0: entered promiscuous mode
[  109.713577][ T6236] dummy0: entered allmulticast mode
[  109.719677][ T6236] eql: entered promiscuous mode
[  109.726503][ T6236] eql: entered allmulticast mode
[  109.732995][ T6236] ifb0: entered promiscuous mode
[  109.738012][ T6236] ifb0: entered allmulticast mode
[  109.748305][ T6236] ifb1: entered promiscuous mode
[  109.753540][ T6236] ifb1: entered allmulticast mode
[  109.759440][ T6236] virtio_net virtio1 eth0: entered promiscuous mode
[  109.772226][ T6236] virtio_net virtio1 eth0: entered allmulticast mode
[  109.779965][ T6236] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode
[  109.792825][ T6236] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode
[  109.806049][ T6236] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode
[  109.815529][ T6236] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode
[  109.827887][ T6236] hwsim0: entered promiscuous mode
[  109.854225][ T6236] hwsim0: entered allmulticast mode
[  109.860213][ T6236] ieee802154 phy0 wpan0: entered promiscuous mode
[  109.881197][ T6236] ieee802154 phy0 wpan0: entered allmulticast mode
[  109.888506][ T6236] ieee802154 phy1 wpan1: entered promiscuous mode
[  109.910095][ T6236] ieee802154 phy1 wpan1: entered allmulticast mode
[  109.931509][ T6236] teql0: entered promiscuous mode
[  109.947041][ T6236] teql0: entered allmulticast mode
[  109.967738][ T6236] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  110.050574][   T27] audit: type=1804 audit(1786466114.441:94): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.101" name="/newroot/37/bus/cpu.stat" dev="overlay" ino=48 res=1 errno=0
[  110.221006][ T5842] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  110.301245][   T27] audit: type=1326 audit(1786466114.691:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.1.102" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe6159e0d9 code=0x0
[  110.400734][ T5842] usb 1-1: Using ep0 maxpacket: 32
[  110.409829][ T5842] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  110.425209][ T5842] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  110.442804][ T5842] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  110.465788][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  110.489713][ T5842] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  110.511826][ T5842] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  110.539638][ T5842] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  110.560430][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.585960][ T5842] usb 1-1: config 0 descriptor??
[  110.708181][ T6246] loop4: detected capacity change from 0 to 32768
[  110.741700][ T6246] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.103 (6246)
[  110.778092][ T6246] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  110.810223][ T6246] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  110.834625][ T5842] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  110.840316][ T6246] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  110.856840][ T6246] BTRFS info (device loop4): use zstd compression, level 3
[  110.865641][ T6246] BTRFS info (device loop4): use no compression
[  110.900699][ T6246] BTRFS info (device loop4): using free space tree
[  111.029148][ T6246] BTRFS info (device loop4): enabling ssd optimizations
[  111.052337][ T6246] BTRFS info (device loop4): auto enabling async discard
[  111.218282][ T6278] usblp0:failed reading printer status (-32)
[  111.249202][ T5842] usb 1-1: USB disconnect, device number 5
[  111.260424][ T5842] usblp0: removed
[  111.680247][ T5958] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  112.397596][ T6305] io-wq is not configured for unbound workers
[  112.493308][ T6310] overlay: filesystem on ./file0 not supported as upperdir
[  112.766014][ T6309] loop1: detected capacity change from 0 to 8192
[  112.836787][ T6309] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  112.910908][ T2180] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  112.987516][ T6309] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050)
[  112.996969][ T6309] FAT-fs (loop1): Filesystem has been set read-only
[  113.004803][ T6309] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050)
[  113.013861][ T6309] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050)
[  113.122086][ T2180] usb 3-1: Using ep0 maxpacket: 32
[  113.150944][ T2180] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  113.187049][ T2180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.232231][ T2180] usb 3-1: config 0 descriptor??
[  113.275079][ T2180] gspca_main: nw80x-2.14.0 probing 055f:d001
[  114.137561][ T6325] loop0: detected capacity change from 0 to 32768
[  114.192268][ T6325] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.114 (6325)
[  114.228406][ T6325] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  114.254108][ T6325] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  114.280542][ T6325] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  114.306234][ T6325] BTRFS info (device loop0): use zstd compression, level 3
[  114.320739][ T6325] BTRFS info (device loop0): use no compression
[  114.337496][ T6325] BTRFS info (device loop0): using free space tree
[  114.471228][ T6325] BTRFS info (device loop0): enabling ssd optimizations
[  114.478408][ T6325] BTRFS info (device loop0): auto enabling async discard
[  114.779753][ T5843] usb 3-1: USB disconnect, device number 3
[  114.877867][ T5782] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  115.185987][ T5843] libceph: connect (1)[c::]:6789 error -101
[  115.199754][ T5843] libceph: mon0 (1)[c::]:6789 connect error
[  115.271493][ T6365] ceph: No mds server is up or the cluster is laggy
[  116.476461][ T6397] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  116.541771][ T6397] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  117.100772][ T2180] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  117.209985][ T6401] loop4: detected capacity change from 0 to 32768
[  117.248125][ T6401] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.131 (6401)
[  117.305016][ T2180] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  117.325909][ T2180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.355782][ T6401] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  117.410843][ T6401] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  117.431203][ T6401] BTRFS info (device loop4): setting nodatasum
[  117.437564][ T6401] BTRFS info (device loop4): force zlib compression, level 3
[  117.467704][ T6416] loop0: detected capacity change from 0 to 64
[  117.475245][ T6401] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  117.517752][ T6401] BTRFS info (device loop4): use lzo compression, level 0
[  117.558819][ T6401] BTRFS info (device loop4): turning on flush-on-commit
[  117.595276][ T6401] BTRFS info (device loop4): enabling auto defrag
[  117.610390][ T2180] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  117.640934][ T6401] BTRFS info (device loop4): max_inline at 4096
[  117.659113][ T6401] BTRFS info (device loop4): using free space tree
[  117.819663][ T6401] BTRFS info (device loop4): enabling ssd optimizations
[  118.245242][ T5958] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  118.279537][ T5843] snd_hda_intel 0000:00:00.0: Unknown PCI class/subclass/prog-if information (0x060000) found, selecting HDAudio legacy driver
[  118.374059][ T5843] snd_hda_intel 0000:00:01.0: Unknown PCI class/subclass/prog-if information (0x060100) found, selecting HDAudio legacy driver
[  118.426171][ T5842] snd_hda_intel 0000:00:01.3: Unknown PCI class/subclass/prog-if information (0x068000) found, selecting HDAudio legacy driver
[  118.519255][ T6442] loop2: detected capacity change from 0 to 128
[  118.569069][ T6442] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  118.583933][ T5842] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off
[  118.603529][ T5842] snd_hda_intel 0000:00:01.3: PCI INT A: no GSI
[  118.635548][ T6442] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  118.767480][ T5842] ACPI: \_SB_.LNKA: Enabled at IRQ 11
[  118.796356][ T5843] snd_hda_intel 0000:00:05.0: Unknown capability 0
[  118.842846][ T5843] snd_hda_intel 0000:00:05.0: no codecs found!
[  119.028328][   T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  119.390409][ T6450] loop0: detected capacity change from 0 to 8192
[  119.427268][ T6450] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  119.448012][ T6450] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  119.459226][ T6450] REISERFS (device loop0): using ordered data mode
[  119.468860][ T6450] reiserfs: using flush barriers
[  119.537303][ T6450] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  119.626785][ T6450] REISERFS (device loop0): checking transaction log (loop0)
[  119.950124][ T6450] REISERFS (device loop0): Using tea hash to sort names
[  119.968614][ T6450] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  120.195217][   T27] audit: type=1804 audit(1786466124.581:96): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.145" name="/newroot/41/file6/bus" dev="loop0" ino=4 res=1 errno=0
[  120.440440][ T6459] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c
[  121.104140][ T6470] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  122.272442][ T6486] loop2: detected capacity change from 0 to 8192
[  122.342535][ T6486] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  122.370719][ T6486] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  122.390842][ T6486] REISERFS (device loop2): using ordered data mode
[  122.407818][ T6486] reiserfs: using flush barriers
[  122.481559][ T6486] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  122.536134][ T6486] REISERFS (device loop2): checking transaction log (loop2)
[  122.662798][ T6481] loop4: detected capacity change from 0 to 32768
[  122.703082][ T6481] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.155 (6481)
[  122.764285][ T6481] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.774766][ T6481] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  122.787202][ T6481] BTRFS info (device loop4): setting nodatacow, compression disabled
[  122.797821][ T6481] BTRFS info (device loop4): turning on flush-on-commit
[  122.813864][ T6481] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  122.827456][ T6481] BTRFS info (device loop4): use lzo compression, level 0
[  122.834807][ T6481] BTRFS info (device loop4): setting nodatasum
[  122.860821][ T6481] BTRFS info (device loop4): use no compression
[  122.871046][ T6481] BTRFS info (device loop4): trying to use backup root at mount time
[  122.900857][ T6481] BTRFS info (device loop4): max_inline at 0
[  122.912588][ T6481] BTRFS info (device loop4): using free space tree
[  122.991957][ T1027] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[  123.071643][ T6481] BTRFS warning (device loop4): couldn't read tree root
[  123.081730][ T6486] REISERFS (device loop2): Using tea hash to sort names
[  123.088971][ T6481] BTRFS warning (device loop4): try to load backup roots slot 1
[  123.104043][   T11] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0
[  123.117814][ T6486] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  123.129857][ T6481] BTRFS warning (device loop4): couldn't read tree root
[  123.150855][ T6481] BTRFS warning (device loop4): try to load backup roots slot 2
[  123.193435][ T4105] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  123.231158][ T6481] BTRFS warning (device loop4): couldn't read tree root
[  123.238784][ T6481] BTRFS warning (device loop4): try to load backup roots slot 3
[  123.311249][ T2180] usb 2-1: USB disconnect, device number 4
[  123.380223][ T6481] BTRFS info (device loop4): enabling ssd optimizations
[  123.412449][ T6481] BTRFS info (device loop4): auto enabling async discard
[  123.426736][ T6481] BTRFS info (device loop4): rebuilding free space tree
[  123.622265][ T6481] BTRFS info (device loop4): checking UUID tree
[  123.688058][   T27] audit: type=1804 audit(1786466128.081:97): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.157" name="/newroot/35/file6/bus" dev="loop2" ino=4 res=1 errno=0
[  123.884893][   T27] audit: type=1800 audit(1786466128.281:98): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.155" name="file1" dev="loop4" ino=257 res=0 errno=0
[  124.578192][ T5958] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.952851][ T6544] loop5: detected capacity change from 0 to 7
[  124.981033][ T6544] Dev loop5: unable to read RDB block 7
[  125.001368][ T6544]  loop5: unable to read partition table
[  125.011303][ T6544] loop5: partition table beyond EOD, truncated
[  125.053937][ T6544] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  125.118777][ T6545] loop5: detected capacity change from 7 to 0
[  125.661355][ T6090] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  125.861792][ T6090] usb 1-1: Using ep0 maxpacket: 16
[  125.889728][ T6090] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  125.913313][ T6090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.939407][ T6090] usb 1-1: Product: syz
[  125.949972][ T6090] usb 1-1: Manufacturer: syz
[  125.962234][ T6090] usb 1-1: SerialNumber: syz
[  125.979633][ T6090] usb 1-1: config 0 descriptor??
[  126.001812][ T6090] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  126.435380][ T6598] loop5: detected capacity change from 0 to 7
[  126.454137][ T6598] Dev loop5: unable to read RDB block 7
[  126.459989][ T6598]  loop5: unable to read partition table
[  126.467869][ T6598] loop5: partition table beyond EOD, truncated
[  126.477475][ T6598] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  126.550950][ T6599] loop5: detected capacity change from 7 to 0
[  126.916627][ T6606] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3058022694 (6116045388 ns) > initial count (4472718528 ns). Using initial count to start timer.
[  126.967501][ T6606] kvm: kvm [6605]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  127.009735][ T6606] kvm: kvm [6605]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  127.135695][ T6616] af_packet: tpacket_rcv: packet too big, clamped from 78 to 4294967286. macoff=82
[  127.274310][ T6090] usb 1-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0
[  127.453222][ T6622] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[  127.514863][ T5843] usb 1-1: USB disconnect, device number 6
[  127.561765][ T5843] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0
[  127.604694][ T5843] ssu100 1-1:0.0: device disconnected
[  128.304402][ T6625] loop2: detected capacity change from 0 to 32768
[  128.426481][ T6625] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  128.532529][ T6625] XFS (loop2): Ending clean mount
[  129.082683][ T5780] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  129.436208][ T6676] loop0: detected capacity change from 0 to 4096
[  129.560054][ T6676] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  129.765794][ T6688] geneve2: entered promiscuous mode
[  130.263286][ T6702] loop1: detected capacity change from 0 to 128
[  130.315858][ T6702] EXT4-fs (loop1): Test dummy encryption mode enabled
[  130.365449][ T6702] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  130.409178][ T6702] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  130.570884][ T5843] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  130.770794][ T5843] usb 3-1: Using ep0 maxpacket: 16
[  130.781930][ T6702] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  130.800085][ T5843] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  130.828400][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.862113][ T5843] usb 3-1: config 0 descriptor??
[  130.912511][ T5843] gspca_main: sonixj-2.14.0 probing 0471:0327
[  130.940277][ T6697] netlink: 5 bytes leftover after parsing attributes in process `syz.0.201'.
[  130.963458][ T6702] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  130.975345][ T6697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.032053][ T6697] syz.0.201 (6697) used greatest stack depth: 20584 bytes left
[  131.057646][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  131.184972][ T6727] loop4: detected capacity change from 0 to 512
[  131.216768][ T6727] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: comm syz.4.205: inode #2147418112: comm syz.4.205: iget: illegal inode #
[  131.264928][ T6727] EXT4-fs (loop4): no journal found
[  131.270250][ T6727] EXT4-fs (loop4): can't get journal size
[  131.308123][ T6727] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  131.367287][ T6727] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  131.433514][ T6727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.504975][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.205'.
[  131.528721][ T6727] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  131.642974][ T6734] overlayfs: refusing to follow metacopy origin for (/file1)
[  131.748242][ T5958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.094562][ T6744] loop4: detected capacity change from 0 to 4096
[  132.112274][ T6744] EXT4-fs: inline encryption not supported
[  132.140167][ T6744] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  132.180335][ T6744] EXT4-fs (loop4): Test dummy encryption mode enabled
[  132.224271][ T6744] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  132.232780][ T6744] System zones: 0-5
[  132.240388][ T6744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.363676][ T6744] capability: warning: `syz.4.208' uses 32-bit capabilities (legacy support in use)
[  132.401090][ T5843] gspca_sonixj: i2c_w8 err -71
[  132.444309][ T5843] sonixj: probe of 3-1:0.0 failed with error -71
[  132.500764][ T5843] usb 3-1: USB disconnect, device number 4
[  132.567303][ T5958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.690957][ T5835] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  132.893102][ T5835] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  132.910700][ T5835] usb 1-1: config 0 has no interface number 0
[  132.927256][ T5835] usb 1-1: config 0 interface 41 has no altsetting 0
[  132.949124][ T5835] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  132.978829][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.004615][ T5835] usb 1-1: Product: syz
[  133.019153][ T5835] usb 1-1: Manufacturer: syz
[  133.028620][ T5835] usb 1-1: SerialNumber: syz
[  133.055944][ T5835] usb 1-1: config 0 descriptor??
[  133.211845][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  133.218907][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  133.250797][ T6090] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  133.474207][ T6090] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  133.491541][ T6090] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  133.511357][ T6090] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  133.541987][ T6090] usb 2-1: New USB device found, idVendor=15a4, idProduct=9020, bcdDevice= 1.00
[  133.570790][ T6090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.578975][ T6090] usb 2-1: Product: syz
[  133.614554][ T6090] usb 2-1: Manufacturer: syz
[  133.619311][ T6090] usb 2-1: SerialNumber: syz
[  133.662979][ T6766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  133.680398][ T6766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  133.708361][ T6766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  133.747114][ T6090] af9005: boot packet bulk message failed: -71 (252/0)
[  133.760772][ T6090] dvb-usb: found a 'Afatech DVB-T USB1.1 stick' in cold state, will try to load a firmware
[  133.817768][ T6785] loop2: detected capacity change from 0 to 2048
[  133.818733][ T6090] usb 2-1: Direct firmware load for af9005.fw failed with error -2
[  133.860015][ T6090] usb 2-1: Falling back to sysfs fallback for: af9005.fw
[  134.518285][ T6782] loop4: detected capacity change from 0 to 32768
[  134.536721][ T5835] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  134.555445][ T5835] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  134.565957][ T6782] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.218 (6782)
[  134.589658][ T5835] CoreChips: probe of 1-1:0.41 failed with error -71
[  134.596691][ T6782] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  134.596815][ T6782] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  134.596887][ T6782] BTRFS info (device loop4): setting nodatacow, compression disabled
[  134.596909][ T6782] BTRFS info (device loop4): setting datasum, datacow enabled
[  134.596928][ T6782] BTRFS info (device loop4): setting nodatasum
[  134.596945][ T6782] BTRFS info (device loop4): force clearing of disk cache
[  134.596965][ T6782] BTRFS info (device loop4): enabling ssd optimizations
[  134.674445][ T5835] usb 1-1: USB disconnect, device number 7
[  134.685506][ T6782] BTRFS info (device loop4): using spread ssd allocation scheme
[  134.696623][ T6782] BTRFS info (device loop4): turning on sync discard
[  134.707706][ T6782] BTRFS info (device loop4): turning on flush-on-commit
[  134.717821][ T6782] BTRFS info (device loop4): not using ssd optimizations
[  134.735279][ T6782] BTRFS info (device loop4): not using spread ssd allocation scheme
[  134.747382][ T6782] BTRFS info (device loop4): using free space tree
[  134.917987][ T6782] BTRFS info (device loop4): rebuilding free space tree
[  135.265495][ T6824] device-mapper: ioctl: Invalid ioctl structure: name mypool, dev f800
[  135.293299][   T27] audit: type=1804 audit(1786466142.695:99): pid=6782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.218" name="/newroot/31/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  135.433799][   T27] audit: type=1804 audit(1786466142.835:100): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.218" name="/newroot/31/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  135.619125][ T6831] loop2: detected capacity change from 0 to 256
[  135.681061][   T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  135.821316][ T5958] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  135.882906][   T23] usb 1-1: Using ep0 maxpacket: 32
[  135.895396][   T23] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  135.904866][   T23] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  135.928073][   T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  135.949002][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  135.998331][   T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  136.021170][   T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  136.076875][   T23] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  136.124052][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.175538][   T23] usb 1-1: config 0 descriptor??
[  136.421049][   T23] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  136.474728][   T23] usb 1-1: USB disconnect, device number 8
[  136.512200][   T23] usblp0: removed
[  136.553061][ T6844] loop4: detected capacity change from 0 to 64
[  136.816915][ T6849] loop4: detected capacity change from 0 to 1024
[  136.860218][ T6849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.993577][ T5958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.030797][   T23] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  137.232148][   T23] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  137.260925][   T23] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  137.269618][   T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  137.315854][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  137.349663][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  137.395734][   T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  137.453342][   T23] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  137.486595][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.524184][   T23] usb 1-1: config 0 descriptor??
[  137.549207][ T6828] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  137.804560][   T23] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  138.138489][    C1] usblp0: nonzero read bulk status received: -71
[  138.185044][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'.
[  138.469835][ T5842] usb 1-1: USB disconnect, device number 9
[  138.492016][ T5842] usblp0: removed
[  138.558500][   T27] audit: type=1800 audit(1786466145.955:101): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.247" name="file2" dev="overlay" ino=456 res=0 errno=0
[  139.070876][ T6095] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  139.254909][ T6898] 
[  139.257326][ T6898] ======================================================
[  139.264403][ T6898] WARNING: possible circular locking dependency detected
[  139.271476][ T6898] syzkaller #0 Not tainted
[  139.275931][ T6898] ------------------------------------------------------
[  139.283057][ T6898] syz.4.252/6898 is trying to acquire lock:
[  139.288994][ T6898] ffff88814d9f80e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_lock+0x189/0x390
[  139.298483][ T6898] 
[  139.298483][ T6898] but task is already holding lock:
[  139.305890][ T6898] ffff888148d31888 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x838/0x2580
[  139.316274][ T6898] 
[  139.316274][ T6898] which lock already depends on the new lock.
[  139.316274][ T6898] 
[  139.326727][ T6898] 
[  139.326727][ T6898] the existing dependency chain (in reverse order) is:
[  139.335790][ T6898] 
[  139.335790][ T6898] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}:
[  139.344030][ T6898]        __mutex_lock+0x135/0xc80
[  139.349124][ T6898]        bd_finish_claiming+0x229/0x3f0
[  139.354704][ T6898]        blkdev_get_by_dev+0x469/0x610
[  139.360183][ T6898]        bdev_open_by_dev+0x77/0x100
[  139.365637][ T6898]        setup_bdev_super+0x59/0x660
[  139.370947][ T6898]        mount_bdev+0x1ce/0x2c0
[  139.375824][ T6898]        legacy_get_tree+0xea/0x180
[  139.381099][ T6898]        vfs_get_tree+0x8c/0x280
[  139.386077][ T6898]        do_new_mount+0x24a/0xa40
[  139.391212][ T6898]        init_mount+0xde/0x130
[  139.395996][ T6898]        do_mount_root+0x97/0x230
[  139.401076][ T6898]        mount_root_generic+0x1a6/0x3e0
[  139.406800][ T6898]        prepare_namespace+0xc2/0x100
[  139.412307][ T6898]        kernel_init_freeable+0x41a/0x560
[  139.418067][ T6898]        kernel_init+0x1d/0x1c0
[  139.422961][ T6898]        ret_from_fork+0x48/0x80
[  139.427951][ T6898]        ret_from_fork_asm+0x11/0x20
[  139.433278][ T6898] 
[  139.433278][ T6898] -> #3 (bdev_lock){+.+.}-{3:3}:
[  139.440539][ T6898]        __mutex_lock+0x135/0xc80
[  139.445597][ T6898]        bd_prepare_to_claim+0x1d9/0x4a0
[  139.451275][ T6898]        truncate_bdev_range+0x4e/0x260
[  139.456846][ T6898]        blkdev_fallocate+0x428/0x6a0
[  139.462245][ T6898]        vfs_fallocate+0x585/0x6f0
[  139.467380][ T6898]        do_madvise+0x166b/0x3790
[  139.472444][ T6898]        __x64_sys_madvise+0xa6/0xc0
[  139.477776][ T6898]        do_syscall_64+0x55/0xb0
[  139.482749][ T6898]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.489214][ T6898] 
[  139.489214][ T6898] -> #2 (mapping.invalidate_lock){++++}-{3:3}:
[  139.497590][ T6898]        down_write+0x97/0x200
[  139.502399][ T6898]        set_blocksize+0x247/0x4b0
[  139.507538][ T6898]        sb_min_blocksize+0xbe/0x190
[  139.512928][ T6898]        ext4_fill_super+0x6e7/0x6870
[  139.518339][ T6898]        get_tree_bdev+0x3e5/0x520
[  139.523523][ T6898]        vfs_get_tree+0x8c/0x280
[  139.528493][ T6898]        do_new_mount+0x24a/0xa40
[  139.533548][ T6898]        init_mount+0xde/0x130
[  139.538384][ T6898]        do_mount_root+0x97/0x230
[  139.543444][ T6898]        mount_root_generic+0x1a6/0x3e0
[  139.549033][ T6898]        prepare_namespace+0xc2/0x100
[  139.554510][ T6898]        kernel_init_freeable+0x41a/0x560
[  139.560296][ T6898]        kernel_init+0x1d/0x1c0
[  139.565201][ T6898]        ret_from_fork+0x48/0x80
[  139.570267][ T6898]        ret_from_fork_asm+0x11/0x20
[  139.575778][ T6898] 
[  139.575778][ T6898] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}:
[  139.584443][ T6898]        down_write+0x97/0x200
[  139.589265][ T6898]        set_blocksize+0x1ff/0x4b0
[  139.594421][ T6898]        sb_min_blocksize+0xbe/0x190
[  139.599750][ T6898]        ext4_fill_super+0x6e7/0x6870
[  139.605182][ T6898]        get_tree_bdev+0x3e5/0x520
[  139.610328][ T6898]        vfs_get_tree+0x8c/0x280
[  139.615297][ T6898]        do_new_mount+0x24a/0xa40
[  139.620347][ T6898]        init_mount+0xde/0x130
[  139.625132][ T6898]        do_mount_root+0x97/0x230
[  139.630182][ T6898]        mount_root_generic+0x1a6/0x3e0
[  139.635778][ T6898]        prepare_namespace+0xc2/0x100
[  139.641234][ T6898]        kernel_init_freeable+0x41a/0x560
[  139.647009][ T6898]        kernel_init+0x1d/0x1c0
[  139.651951][ T6898]        ret_from_fork+0x48/0x80
[  139.656922][ T6898]        ret_from_fork_asm+0x11/0x20
[  139.662259][ T6898] 
[  139.662259][ T6898] -> #0 (&type->s_umount_key#32){++++}-{3:3}:
[  139.670549][ T6898]        __lock_acquire+0x37ef/0x7d80
[  139.675952][ T6898]        lock_acquire+0x19e/0x420
[  139.681003][ T6898]        down_read+0x46/0x2e0
[  139.685984][ T6898]        super_lock+0x189/0x390
[  139.690867][ T6898]        fs_bdev_sync+0xa4/0x170
[  139.695847][ T6898]        blkdev_common_ioctl+0x8a9/0x2580
[  139.701708][ T6898]        blkdev_ioctl+0x512/0x730
[  139.706781][ T6898]        __se_sys_ioctl+0xfd/0x170
[  139.711943][ T6898]        do_syscall_64+0x55/0xb0
[  139.716931][ T6898]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.723398][ T6898] 
[  139.723398][ T6898] other info that might help us debug this:
[  139.723398][ T6898] 
[  139.733657][ T6898] Chain exists of:
[  139.733657][ T6898]   &type->s_umount_key#32 --> bdev_lock --> &bdev->bd_holder_lock
[  139.733657][ T6898] 
[  139.747365][ T6898]  Possible unsafe locking scenario:
[  139.747365][ T6898] 
[  139.754847][ T6898]        CPU0                    CPU1
[  139.760240][ T6898]        ----                    ----
[  139.765626][ T6898]   lock(&bdev->bd_holder_lock);
[  139.770591][ T6898]                                lock(bdev_lock);
[  139.777045][ T6898]                                lock(&bdev->bd_holder_lock);
[  139.784537][ T6898]   rlock(&type->s_umount_key#32);
[  139.789683][ T6898] 
[  139.789683][ T6898]  *** DEADLOCK ***
[  139.789683][ T6898] 
[  139.797847][ T6898] 1 lock held by syz.4.252/6898:
[  139.802804][ T6898]  #0: ffff888148d31888 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x838/0x2580
[  139.813470][ T6898] 
[  139.813470][ T6898] stack backtrace:
[  139.819396][ T6898] CPU: 1 PID: 6898 Comm: syz.4.252 Not tainted syzkaller #0
[  139.826710][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  139.836823][ T6898] Call Trace:
[  139.840172][ T6898]  <TASK>
[  139.843132][ T6898]  dump_stack_lvl+0x18c/0x250
[  139.847844][ T6898]  ? load_image+0x420/0x420
[  139.852388][ T6898]  ? show_regs_print_info+0x20/0x20
[  139.857623][ T6898]  ? print_circular_bug+0x12b/0x1a0
[  139.862860][ T6898]  check_noncircular+0x2fc/0x400
[  139.867832][ T6898]  ? print_deadlock_bug+0x5d0/0x5d0
[  139.873057][ T6898]  ? lockdep_lock+0xf5/0x230
[  139.877678][ T6898]  ? _find_first_zero_bit+0xd6/0x100
[  139.883002][ T6898]  __lock_acquire+0x37ef/0x7d80
[  139.887893][ T6898]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.894085][ T6898]  ? verify_lock_unused+0x140/0x140
[  139.899323][ T6898]  ? verify_lock_unused+0x140/0x140
[  139.904560][ T6898]  ? stack_trace_save+0xaa/0x100
[  139.909538][ T6898]  ? stack_trace_snprint+0xf0/0xf0
[  139.914682][ T6898]  ? __stack_depot_save+0x1f/0x660
[  139.919818][ T6898]  ? do_syscall_64+0x55/0xb0
[  139.924440][ T6898]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.930553][ T6898]  lock_acquire+0x19e/0x420
[  139.935084][ T6898]  ? super_lock+0x189/0x390
[  139.939619][ T6898]  ? __might_sleep+0xe0/0xe0
[  139.944244][ T6898]  ? read_lock_is_recursive+0x20/0x20
[  139.949648][ T6898]  ? __mutex_trylock_common+0x160/0x270
[  139.955231][ T6898]  ? trace_raw_output_contention_end+0xd0/0xd0
[  139.961553][ T6898]  down_read+0x46/0x2e0
[  139.965754][ T6898]  ? super_lock+0x189/0x390
[  139.970291][ T6898]  super_lock+0x189/0x390
[  139.974740][ T6898]  ? end_current_label_crit_section+0x170/0x170
[  139.981019][ T6898]  ? user_get_super+0x180/0x180
[  139.985900][ T6898]  ? mutex_lock_nested+0x20/0x20
[  139.990923][ T6898]  fs_bdev_sync+0xa4/0x170
[  139.995371][ T6898]  ? fs_bdev_mark_dead+0x1f0/0x1f0
[  140.000519][ T6898]  blkdev_common_ioctl+0x8a9/0x2580
[  140.005750][ T6898]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  140.011679][ T6898]  ? blkdev_bszset+0x1f0/0x1f0
[  140.016474][ T6898]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  140.021987][ T6898]  blkdev_ioctl+0x512/0x730
[  140.026531][ T6898]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  140.032029][ T6898]  ? bpf_lsm_file_ioctl+0x9/0x10
[  140.037021][ T6898]  ? security_file_ioctl+0x80/0xa0
[  140.042170][ T6898]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  140.047659][ T6898]  __se_sys_ioctl+0xfd/0x170
[  140.052294][ T6898]  do_syscall_64+0x55/0xb0
[  140.056766][ T6898]  ? clear_bhb_loop+0x40/0x90
[  140.061485][ T6898]  ? clear_bhb_loop+0x40/0x90
[  140.066200][ T6898]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  140.072130][ T6898] RIP: 0033:0x7f9bf919e0d9
[  140.076574][ T6898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  140.096277][ T6898] RSP: 002b:00007f9bf73f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  140.105018][ T6898] RAX: ffffffffffffffda RBX: 00007f9bf9425fa0 RCX: 00007f9bf919e0d9
[  140.113024][ T6898] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000004
[  140.121024][ T6898] RBP: 00007f9bf9235024 R08: 0000000000000000 R09: 0000000000000000
[  140.129192][ T6898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.137282][ T6898] R13: 00007f9bf9426038 R14: 00007f9bf9425fa0 R15: 00007ffd5b666b58
[  140.145383][ T6898]  </TASK>
[  140.181764][ T6893] loop1: detected capacity change from 0 to 32768
[  140.234410][ T6095] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  140.245865][ T6095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.254576][ T6893] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  140.312720][ T6095] usb 3-1: Product: syz
[  140.317007][ T6095] usb 3-1: Manufacturer: syz
[  140.340696][ T6893] XFS (loop1): Ending clean mount
[  140.345872][ T6095] usb 3-1: SerialNumber: syz
[  140.454979][ T5774] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  141.399097][ T6095] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  141.804594][ T6095] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1
[  141.820347][ T6095] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1
[  141.830982][ T6095] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  141.846449][ T6095] usb 3-1: USB disconnect, device number 5
[  141.853161][ T6095] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[  141.863584][ T6095] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1
[  141.873021][ T6095] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1