last executing test programs:

33m43.01714696s ago: executing program 32 (id=18):
socketpair(0x1d, 0x2, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000580), 0x1f93}, 0x38)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0xfff8, 0xfffb, 0x5, 0x3}, 0x3d, [0xf0, 0xfffffffd, 0x1, 0x4, 0x1000, 0x7f, 0xffffc678, 0x9, 0x9, 0x971, 0x3, 0x9, 0x3e7, 0x7, 0x9, 0xd571, 0x8, 0xfffffff9, 0x2, 0x1, 0x40, 0x5, 0xa, 0x81, 0x8, 0x6, 0x2, 0x6, 0xffffffff, 0x80000001, 0x7f, 0x5, 0x9, 0xf35c, 0x6, 0x52b7568d, 0xad, 0x2, 0xfffffa2d, 0x7, 0xfffffffc, 0x2, 0x5, 0x778, 0x5, 0xac, 0x9, 0x7, 0x401, 0xfffffff8, 0x0, 0x7, 0x55, 0x2, 0xfffffff8, 0x7ff, 0x10001, 0x40, 0x8000, 0x80000000, 0x8ff2, 0x80000001, 0x200, 0x5], [0x6, 0x9, 0x5, 0x2, 0x101, 0x8, 0xff, 0x80000001, 0x6, 0xebd, 0x1, 0x401, 0x0, 0xfffffffd, 0x77, 0x4, 0x0, 0x100, 0x401, 0x4, 0x5, 0x32a, 0x6, 0x3, 0x5, 0x7, 0x5, 0x0, 0x3, 0x4, 0x8, 0x1f, 0x8, 0x9, 0xf995, 0x70, 0x9, 0x68, 0x2bb, 0x9, 0xc6e, 0x7f, 0x3, 0x3, 0xffff8001, 0x3, 0x7, 0x0, 0x4, 0x1, 0x800000, 0x5a, 0x3, 0x7, 0xc4df, 0x6, 0x6, 0x6, 0x10000, 0x8, 0x1462, 0x401, 0x4, 0x7fff], [0x1, 0x80000001, 0x6, 0xe71, 0x72df, 0x6a2f79f0, 0x401, 0x9, 0xfffffffb, 0x400, 0x1ff, 0x2, 0x3, 0x2, 0x6, 0x5, 0x1, 0x6, 0x0, 0x8, 0xffffffff, 0x8, 0x3, 0x2, 0x9, 0x6, 0x83, 0x9, 0x0, 0x2, 0x3, 0x2, 0x2, 0xb5, 0x4, 0xc00, 0x80000001, 0x1, 0x1, 0x7, 0x13b, 0x800, 0x101, 0x800, 0x1, 0x7, 0x6, 0x8, 0x0, 0x1, 0x8, 0xc739, 0x0, 0xfff, 0x8, 0xc00000, 0x8e0, 0x57, 0x8001, 0x6, 0x778, 0x100, 0x9, 0x5], [0x1587, 0x7, 0x2, 0x8651, 0x7, 0x0, 0x1, 0x0, 0x5, 0xd, 0x2, 0x8000, 0x4, 0x7, 0x4, 0x5, 0x10001, 0x80, 0x6, 0x5b5, 0xfffffff8, 0xfffffffc, 0xffffffff, 0x3, 0x2, 0x7, 0x8cf, 0x0, 0x7, 0x7f, 0x12, 0x10000, 0x4, 0x1, 0x1, 0x8001, 0x8, 0xc6e, 0x8, 0x4, 0x7fff, 0x2, 0x2, 0x81, 0x7, 0x7, 0xa, 0x3ffc000, 0x4, 0xd1d, 0x87, 0xb3, 0xfffffe00, 0x5, 0x2, 0x0, 0x3, 0x7, 0x2, 0xfffffffd, 0x1000, 0x1ae, 0x5]}, 0x45c)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r3, 0xda90)
accept4(r3, 0x0, 0x0, 0x0)

33m13.584773312s ago: executing program 33 (id=115):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

32m29.71832471s ago: executing program 34 (id=299):
syz_mount_image$jfs(&(0x7f00000021c0), &(0x7f0000002140)='./bus\x00', 0x2008010, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x6361, &(0x7f0000010f80)="$eJzs3U9vHGcdB/Df7D//KW2jHqoSIeS2AVpK87eEQIG2Bzj0wgHlihK5bhWRAkoCSquIuMqFAy8ChMQREEdOvIAeuHLjBRApQQJ66qCxn8cZL96s43R31n4+H8md+c0z432m3x3vbmZmnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4u3v//BMFRGXfpEWHIv4XPQjehErTb0WEStrx/L6g4h4Lraa49mIGC5FVLnx6YjXIuLjpyLu3b+13iw6u89+fO9Pf//dj574wd/+MDz1nz/f6L8+ab2bN3/977/cPvj+AgAAQInquq6r9DH/ePp83+u6UwDAXOTX/zrJy9ULV29OXT9ikfqrVqvV6gWs2+q93W4XEbHZ3qZ5z+B0PAAcMpvxSdddoEPyL9ogIp7ouhPAQqu67gAzce/+rfUq5Vu1Xw/WttvztSC78t+sdu7vmDSdZvwak3k9v+5EP56Z0J+VOfVhkeT8e+P5X9puH6X1Zp3/vEzKf7R961Nxcv798fzHHJ38e3vmX6qc/+CR8u/LHwAAAAAAFlj+9/9jHZ//XXr8XdmXh53/XZtTHwAAAAAAAADgs/a44//tqIz/BwAAAIuq+aze+M1TD5ZN+i62ZvnFKuLJsfWBwqSbZVa77gcAAAAAAAAAAAAAlGSwfQ3vxSpiGBFPrq7Wdd38tI3Xj+pxtz/sSt9/KFnXf+QBAGDbx0+N3ctfRSxHxMX0XX/D1dXVul5eWa1X65Wl/H52tLRcr7Q+1+Zps2xptI83xINR3fyy5dZ2bdM+L09rH/99zWON6v4+OjYfHQYOABGx/Wp0zyvSEVPXT0fX73I4HBz/R4/jn/3o+nkKAAAAzF5d13WVvs77eDrn3+u6UwDAXOTX//HzAmq1Wl1WvbJg/VGrZ1O31Xu73S4iYrO9TfOewXD8AHDIbMYnXXeBDsm/aIOIeK7rTgALreq6A8zEvfu31quUb9V+PUjju+drQXblv1ltbZe332s6zfg1JvN6ft2JfjwzoT/PzqkPiyTn3xvP/9J2+yitN+v852VS/s1+HuugP13L+ffH8x9zdPLv7Zl/qXL+g0fKvy9/AAAAAABYYPnf/48t1Pnf0UF3Z6qHnf9dm9mjAgAAAAAAAMBs3bt/az3f95rP/39hj/Xc/3k05fwr+Rcp55/u/9+58OalsfX6rfm7bz3I/1/3b63//sY/P5+n+81/Kc9U6ZlVpWdElR6pGqTpAXdsgjvD/qh5pGHV6w/SNT/18N24EldjI07vWreXjocH7Wd2tTc9HW611/3t9rO72gc77Xn7c7vah+lKp3olt5+M9fhpXI13ttqbtqUp+788pb2e0p7z7zv+i5TzH7R+mvxXU3s1Nm3c/aj3f8d9e7rX47x55Yu/Oj373ZnqTvR39q2t2b8XOujP1v+TJ0bx8+sb107evHzjxrUzkSa7lp6NNPmM5fyH6Sfn/9KL2+357377eL370eiR818Ud2IwMf8XW/PN/r485751Iec/Sj85/3dS+97H/2HOf/Lx/0oH/QEAAAAAAAAAAAAAAICHqet66xbRNyPifLr/p6t7MwGA+cqv/3WSl8+r7h90+z/u3o+u+q9Wz7muFqw/c60/rWf9eG8v1P6qD1T/d8H6s3B1W723N9pFRPy1vU3znuGXe/0yAGCRfRoR/+i6E3RG/gXL3/fXTE903Rlgrq5/8OGPL1+9unHtetc9AQAAAAAAAAAOKo//udYa//lEXde3x9bbNf7rW7H2uON/DvLMzgCjEwaq7j/6Pj1ML6Lfaw03/nxMGv97uDP3sPG/B1MebzilfTSlfWlK+/KU9j1v9GjJ+T/fGu/8REQcHxt+vYTxX8fHvC9Bzv+F1vO5yf8rY+u1869/e5jz7+3K/9SN93926voHH7565f3L7228t/GTc2fOnD53/vyFCxdOvXvl6sbp7f922OPZyvnnsa9dB1qWnH/OXP5lyfl/KdXyL0vO/8upln9Zcv75/Z78y5Lzz5995F+WnP/LqZZ/WXL+X021/MuS838l1fIvS87/a6mWf1ly/q+mWv5lyfmfTLX8y5LzP5Xqfea/Mut+MR85/3yGy/Fflpx/vrJB/mXJ+Z9NtfzLkvM/l2r5lyXn/1qq5V+WnP/XUy3/suT8z6da/mXJ+X8j1fIvS87/QqrlX5ac/zdTLf+y5Py/lWr5lyXn/3qq5V+WnP+3U72//Kfd9cZhkfP/TqoHU+8o5CjJ+X831f7+lyXn/0aq5V+WB9//b8aMGTN5puu/TAAAAAAAAAAAAADAuHlcTtz1PgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrrO+H/iZvXnjhMRAyN/J3wlrxxjjbLLrS3yhdTHh2nArCaHQC7brXZsF3/DaJdCodhQokTAqrWgbXrQFhNq8qbAqXlAEKC9QL1IlaF/QN4gKlRdRG1BAQqIIstXMeZ5nZ87Ozux6x+vZcz4fyf55Zs6c85wzz5zd366/cwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDZ5tdNf6KWZVmtVsvv2JBlN9XrDWMbGve8+vqODwAAAFi5Xzb+fv6WdMehJTypaZl/uutbX56bm5vL3jP4Z8OfmZtLD4xl2fC6LGs8Fl35/ntrzcsET2SjtYGm2wNdNj/Y5fGhLo8Pd3l8pMvj67o8Ptrl8QUHYIEbslpa2dbGPzfkhzS7NRtuPLa1zbOeqK0bqB+79Nys1njO3PDxbCY7mU1nky3L58vWGst/bXN9W2/O4rYGmra1qT5DfvzYsTiGWjjGW1u2Nb/O6IevzcZ+8uPHjv3N+edub1e7HoaW9eXj3L6lPs6PhXvysdaydemYxHEONI1zU5vXZLBlnLXG8+r/Lo7z+SWOc3B+mKuq+JqPZgONf3+7cZyGalmb47Qp3Pezu7MsuzQ/7OIyC7aVDWTrW+4ZmH99RvMZWV9HfSq9JBta1jzdvIR5Wq9TW1vnafE9EV//zeF5Q4uMofll+uHjI02v+y/mrmaeRvW9Xuy9UpyDvX6v9MscjPPi242dfrLtHNwa9v+xbYvPwbZzp80cTPvdNAe3dJuDAyODjTGnF6HWeM78HNzZsvxgY0u1Rn12W+c5OHH+1NmJ2Y989N6ZU0dPTJ+YPr17587J3Xv37t+/f+L4zMnpyfzvqzza/W99NpDeA1vCsYvvgVcWlm2eqnOfH1lw/r3a9+Foh/fhhsKyvX4fDhV3rrY6b8iFczp/b7yrftBHLw9ki7zHGq/PjpW/D9N+N70Ph5reh22/prR5Hw4t4X1YX+bsjqV9zzLU9KfdGBb/WrCyObihaQ4Wvx8pzsFefz/SL3NwNMyL7+5Y/GvBpjDeJ8eX+/3I4II5mHY3nHvq96Tv90f3N0q7eXlH/YEbR7ILs9Pn7nv06Pnz53ZmoayKlzbNleJ8Xd+0T9mC+Tqw7Pl6aOauJ+9oc/+GcKxG763/Nbroa1VfZs99nV+rxle39sez5d5dWSg9ttrHs91X8/rxHMmyz37z8Ye+/thnX7fo8az3mx+bWPn34qkvbTr/Di9y/o19/wv59tKqnhgcHsrfv4Pp6Ay3nI9bX6qhxrmr1tj28xNLOx8Phz+rfT6+tcP5eGNh2V6fj4eLOxfPx7VuP+1YmeLrORrmycnJzufj+jIbdy13Tg51PB/fHWotHP9XhU4h9UVNc2exeZu2NTQ0HPZrKG6hdZ7ubll+OPRm9W09vevq5un2u/N1Daa9m7da83SssGyv52n62ddi87TW7advV6f4eo6GeXHr7s7ztL7MM3tWfu68If6z6dw50m0ODg+O1Mc8nCZh43yfzd0Q5+B92bHsTHYym2o8OtKYT7XGtsbvX9ocHAl/VvtcubHDHNxeWLbXczB9HVts7tWGFu58DxRfz9EwL566v/McrC/z+n29/d51e7gnLdP0vWvx52uL/czrjsJhulZzZSiM85v7Ov9str7Myf3L7TM7H6d7wj03tjlOxffvYu+pqWx1jtPGMM7n9i9+nOrjqS/zmQNLnE+Hsiy7+KEHGj/vDb9f+fsL3/lyy+9d2v1O5+KHHvjRi47/43LGD8Da90Je1udf65p+M7WU3/8DAAAAa0Ls+wdCTfT/AAAAUBqx74//KzzR/wMAAEBpxL5/KNSkIv3/xtc/N/PCxSwl8+eC+Hg6DA/my8WM62S4PTY3r37/A1+c/ulXLy5t2wNZlv3iwT9ou/zGB+O4cmNhnFfe0Hr/Al++d0nbPvLIxbTd5vz658L64/4sdRq0i+BOZln2tVs+1djO2HsvN+ozDx5p1IcuPflEfZnnDxz56Vf/ef45z740X/4vQ/j30PGjLc9/NhyHH4Q6+Zb2xyM+70uXX7Vp37vntxefV9tyc2O3n3pfvt74OTmffiJfPh7nxcb/9U8+/aX68o++Ir9dK4z/4kD78T8d1vvFUP/3znz55tegfjs+7+Nh/HF78Xn3feEbbcd/5RP58mffmC93JNS4/e3h9tY3PjfTfLwerR1t2a/sTflycfuT3/njxuNxfXH9xfGPHr7ccjyK8+OZf8/XM1FYPt4ftxP9Q2H79fU0z8+4/af/6EjLce62/SsPPXtnfb3F7d9TWO7sh3Y0tj+/vtZPbPqrj3+q7fbieA793dmW/Tn0zvA+Dtt/6n1hPobHf34lX1/x0xWOvLP1/BOX/9yGiy37E735J/n2r7zmRKOuG71h/Y03vejmSy+vH7ss+/a6fH3dtn/ir8+0jP/zt+XHIz4eM/rF7S8mbv/ch8dPn5m9MDOVjupjtzQ+O+et+XjieG8J59bi7cNnzr9/+tzY5Nhklo2V9yP0rtoXQv1RXi51XnpuwRl0xyPh9bzjL762ftu/fTLe/x/vyu+//Jb869Yrw3KfDvdvCK/f8ra/0FObb2u8v2vPhBHOLfy84JXYtPW/9y9pwbD/xe8L4nw/+7L3N45D/bHG1434vl7h+L83la/nK+G4zoVPZt5y2/z2mpePn41w+eH8/b7i4xdOc/F1/dvwer/tB/n647ji/n4vfB/zjY2t57s4P75ycaC4/saneFwK55Ps0s9bjnA83pefv63t8OLnkGSXbm/c/tO0ntuXtZuLmf3I7MTJmdMXHp04Pz17fmL2Ix89fOrMhdPnDzc+y/PwB7o9f/78tL5xfpqa3rsna5ytzuTlGrve4z/7yLGpfZPbpqaPH71w/PwjZ6fPnTg2O3tsemp229Hjx6c/3O35M1MHd+46sHvfrvETM1MH9x84sPvA+MzpM/Vh5IPqYu/kB8dPnzvceMrswT0Hdt5//57J8VNnpqYP7pucHL/Q7fmNr03j9Wf//vi56ZNHz8+cmh6fnfno9MGdB/bu3dX10wBPnT0+OzZx7sLpiQuz0+cm8n0ZO9+4u/61r9vzKafZ/8y/ny2q5R/El73jnr3p81nrvvj4oqvKFyl8gOhz4bNo/uXFZ/cv5Xbs+4dDTSrS/wMAAEAVxL5/JNRE/w8AAAClEfv+daEm+n8AAAAojdj3j4aaVKT/L13+f+PFJW2/r/L/bfLz8v/y/5n8f9Lz/P/D/Zb/z88X8v+9sdL8vfx/IP+/Svn//PG4lPz/2h6//L/8Pwv1W/4/9v03ZFkl+38AAACogtj3rw810f8DAABAacS+/8ZQE/0/AAAAlEbs+28KNalI/y//L/8v/y//L//ffvvy/2uT/H9n8v9dyP9PZNXK/1/q5fjl/+X/Wajf8v+x739RqElF+n8AAACogtj33xxqov8HAACA0oh9/y2hJvp/AAAAKI3Y928INalI/y//L/+/6vn/P5H/l/+X/5f/v3bk/zuT/++i9/n/9YX1933+3/X/5f/l/+mlfsv/x77/xaEmFen/AQAAoApi3/+SUBP9PwAAAPSfoat7Wuz7XxpqsqD/v8oNAAAAANdd7PtvzQpB8Ir8/l/+X/6//6//vy49Jv8v/5/1Zf5/MJP/7x/y/53J/3fh+v/y//L/8v/0VL/l/xt9fzaavSzUpCL9PwAAAFRB7PtvCzXR/wMAAEBpxL7//4Wa6P8BAACgNGLfvzHUpCL9v/y//H//5/9d/1/+v9/z/67/30/k/zuT/+9C/l/+X/5f/p+e6rf8f+z7bw81qUj/DwAAAFUQ+/47Qk30/wAAAFAase///6Em+n8AAAAojdj3bwo1qUj/L//f5/n/mByV/5f/l/+X/5f/XxL5/87k/7uQ/5f/l/+X/6enVin//z9Zli0p/x/7/jtDTSrS/wMAAEAVxL7/rlAT/T8AAACURuz7Xx5qov8HAACA0oh9/1ioSUX6f/n/Ps//5zn4Edf/l/+X/8+ypwv7I/8v/9+O/H9n8v9dyP/L//ck/z93Uf5f/p9cv13/P/b9m0NNKtL/AwAAQBXEvn9LqIn+HwAAAEoj9v13h5ro/wEAAKA0Yt+/NdSkIv2//P+ayP9nPc7/r8vk/+X/12D+3/X/5f+XQv6/M/n/LuT/5f9d/1/+n57qt/x/7PtfEWpSkf4fAAAAqiD2/dtCTfT/AAAAUBqx739lqIn+HwAAAEoj9v3bQ00q0v/L/1cy/+/6//L/8v/y/6Ul/9+Z/H8X8v/y//L/8v/0VL/l/2Pf/6pQk4r0/wAAAFAFse/fEWqi/wcAAIDSiH3/PaEm+n8AAAAojdj3j4eaVKT/l/+X/5f/l/+X/2+/ffn/tUn+vzP5/y7k/+X/5f/l/+mpfsv/x77/3lCTivT/AAAAUAWx778v1ET/DwAAAKUR+/6JUBP9PwAAAJRG7PsnQ00q0v/L/8v/y//L/y8r///y+fXK/+fk//uL/H9n8v9dyP/L/1/3/P+w/D+l0m/5/9j37ww1qUj/DwAAAFUQ+/5doSb6fwAAACiN2PfvDjXR/wMAAEBpxL5/T6hJRfp/+X/5f/l/+X/X/2+/ffn/tUn+v7Pe5//jLsr/y//L/7v+v/w/C/Vb/j/2/feHmlSk/wcAAIAqiH3/3lAT/T8AAACURuz794Wa6P8BAACgNGLfvz/UpCL9v/y//L/8v/y//H/77cv/r03y/525/n8X8v/y//L/8v+s0MN/2HxrFfP/N2VLyP/Hvv9AqElF+n8AAACogtj3vzrURP8PAAAApRH7/l8JNdH/AwAAQGnEvv9XQ00q0v/L/7dkz+u7u7T8f22o9WabReT/5f+L80P+X/5f/v/auwb5/zhF5P/l/+X/u5D/l/+X/6do0fx/aL17mP9vm/cv3o59/8FQk4r0/wAAAFAFse//tVAT/T8AAACURuz7XxNqov8HAACA0oh9/6FQk4r0//L/rv8v/y//L//ffvurnf8fieuV/18R1//vTP6/C/l/+X/5f/l/emoVr/+/pPx/7PtfG2pSkf4fAAAAqiD2/Q+Emuj/AQAAoDRi3/+6UBP9PwAAAJRG7PtfH2pSkf5f/l/+f63k/2+U/5f/L+xP2fL/rv/fG9cz/z8o/y//H8j/y//L/8v/k+u3/H/s+98QalKR/h8AAACqIPb9bww10f8DAABAacS+/02hJvp/AAAAKI3Y97851KQi/b/8v/z/Wsn/Z/L/8v+F/ZH/l/9vx/X/O5P/70L+X/5f/l/+n94I58R+y//Hvv/XQ00q0v8DAABAFcS+/8FQE/0/AAAA9LHl/U+v2Pe/JdRE/w8AAAClEfv+t4aaVKT/l/+X/5f/l/+X/2+/ffn/tUn+v7M1lv//5c3hfvn/nPx/f49/ufn/ocLta5L///5i+f+5dcXny/9zLfRb/j/2/W8LNalI/w8AAABVEPv+t4ea6P8BAACgNGLf/45QE/0/AAAAlEbs+38j1KQi/b/8f30c8+ll+f+y5v8H5P/l/+X/K0L+v7M1lv93/f8C+f/+Hr/r/8v/s1C/5f9j3//OUJOK9P8AAABQBbHvfyjURP8PAAAApRH7/odDTfT/AAAAUBqx739XqElF+n/5f9f/r0b+3/X/M/l/+f+KkP/vTP6/C/l/+f9+y///l/w/a1u/5f9j3/9IqElF+n8AAACogtj3vzvURP8PAAAApRH7/t8MNdH/AwAAQGnEvv89oSYV6f/XXP5/pNsOlTX/P7ZG8/+Py/9fw/z/XTfny8n/y/8zr0L5/zuXu+5M/r87+X/5/37L/7v+P2tcv+X/Y9//3lCTpff/o0teEgAAALguYt//W6EmFfn9PwAAAFRB7Pt/O9RE/w8AAAClEfv+3wk1qUj/v+by/67/v8by/67/n7n+//y8rHT+f1j+f5WsXv4/nnlc/1/+X/4/kv+X/5f/p6jf8v+x7//dUJOK9P8AAABQBbHvf1+oif4fAAAA1oR2/ye7KPb9h0NN9P8AAABQGrHvPxJqUpH+X/5f/l/+v0/z/3++5V+/+623H9kp/1+S/L/r/6+WVb3+f/3Nf/2u/39V5P+7kP+X/5f/l/+np/ot/x/7/qOhJhXp/wEAAKAKYt//e6Em+n8AAAAojdj3Hws10f8DAABAacS+fyrUpCL9v/y//L/8f5/m/9fw9f/j8ZD/b9Wz/H886cr/t5Xn79Msurb5/3fP58Tl/5eb/x9pe6/8v/z/Wh6//L/8Pwv1W/4/9v3ToSYV6f8BAACgCkLfP3A8r/MP6P8BAACgNGLffyLURP8PAAAApRH7/veHmlSk/5f/l/+X/5f/d/3/9tvvlP+vDbn+f79K+fufNd4o8v8F/ZP/b0/+X/6/B+MfSDfl/+X/ue76Lf8f+/6ZUJOK9P8AAABQBbHv/0Coif4fAAAASiP2/R8MNdH/AwDA/7F3H0+WnWcdx0+b0UxPiSrYUCzYUEWx4k/wAtZQrFmwYUMVRYEJBkT2mBwNNjYZjE0ONmBjIwzY5GADxiCyBIgkogARJIRU45ru53k63HPP7XD73nPe9/NZ6GHa03OvVMOMfmp9dQCakbv/0+KWTva//l//r//X/+v/x19/ts//1/9Pum5/r/8P+v+++/9nF93/e/6//p8ZmVv/n7v/0+OWTvY/AAAA9CB3/8viFvsfAAAAmpG7/zPiFvsfAAAAmpG7/zPjlk72v/7/Ov3/SaWs/z/7/jf3//mKN9j/f7T+f93r6//1/y3T/0/T/28w3v/fHoahr/5/2c//1//r/5mRufX/ufs/K27pZP8DAABAD3L3f3bcYv8DAABAM3L3vzxusf8BAACgGbn7Pydu6WT/n+v/D4Y++//MeD3/3/P/9f/6f/3/wu22/3/lg1/59P8X7v/f/JpNLzvT/r/F5//fHvvgvvv569r3+79g/39n3efr/2nR3Pr/3P2fG7d0sv8BAACgB7n7Py9usf8BAACgGbn7H4lb7H8AAABoRu7+z49bOtn/23v+/92jjy+0/y/6f/3/0Qf0//p//f9ief7/tJ6e///yxx5+2TNv/7BHL/P6HfX/o/bdzy/9/Xv+v/6fVXPr/3P3f0Hc0sn+BwAAgB7k7v/CuMX+BwAAgGbk7v+iuMX+BwAAgGbk7v/iuKWT/b+9/n/Rz/8v+n/9/9EH9P/6f/3/Yun/p/XU/1/l9fX/+n/9v/6f7Zpb/5+7/0vilk72PwAAAPQgd/+Xxi32PwAAADQjd/8r4hb7HwAAAJqRu/9e3NLJ/tf/33z//+Lc+v/b+n/9v/5f/98u/f80/f8G+n/9v/5f/89Wza3/z93/yrilk/0PAAAAPcjd/2Vxi/0PAAAAzcjd/+Vxi/0PAAAAzcjd/xVxSyf7X//v+f876P9vD/r/I/p//b/+/+bp/6fp/zfQ/1+3n39I/6//1/9z2iX7/+cnftneSv+fu/8r45ZO9j8AAAD0IHf/V8Ut9j8AAAA0I3f/V8ct9j8AAAA0I3f/18Qtnex//b/+3/P/9f9X7v9Xf+od0f+P0//vhv5/2mz6/4Nbox/W/y++//f8f/2//p8z5vb8/9z9Xxu3dLL/AQAAoAe5+78ubpnY/5f+h/kAAADAXuXu//q4xdf/AQAAYPGyOsvd/w1xSyf7X/+v/9f/6/89/3/89af6/0dPvT/9/7zo/6fNpv9fQ/+v/1/y+9f/6/9ZNbf+P3f/N8Ytnex/AAAA6EHu/lfFLfY/AAAANCN3/zfFLfY/AAAANCN3/zfHLZ3s//H+/+R/1/9fjP7/7PvX/4///NhW/58/ov5/sv//GM//75P+f9ru+/87+v+zP77+/wbt+/033v/f3fT5+n/GzK3/z93/6rhl0/A7/zeoAAAAwGzl7n9N3NLJ1/8BAACgB7n7vyVusf8BAACgGbn7Xxu3dLL/Pf9///3/3UH/r//3/P9hYc//H3be/9/S/1+Q/n+a5/9voP/X/+v/Pf+frZpb/5+7/3VxSyf7HwAAAHrwuueGo93/rcNg/wMAAMASnf53B9b89/pz939b3GL/AwAAQDNy93973NLJ/tf/77//9/x//b/+/9jS+/9ND0b2/P/d0P9P0/9voP+/iX7+VmP9/+vXff4c+v9X6P+ZmTP9/ztPPr6v/j93/3fELZ3sfwAAAOhB7v7vjFvsfwAAAGhG7v7vilvsfwAAAGhG7v7vjls62f833v9PBLH6f/2//l//31L/v4n+fzf0/9P0/xvo/z3/3/P/9f9s1Un/f/bXw331/7n7vydu6WT/AwAAQA9y939v3GL/AwAAQDNy978+brH/AQAAoBm5+78vbulk//fy/P+Hz31b/6//P/3XS/+v/x97ff3/Mun/p+n/N9D/6//1//p/turM8/9P2Vf/n7v/DXFLJ/sfAAAAepC7/41xi/0PAAAAzcjd//1xi/0PAAAAzcjd/wNxSyf7v5f+/7xd9f/5cf2//n/Q/+v/9f870W3/fzD2O9GqNf3/ez7l3sed/Yj+v63+/9mL/envu5+/rn2/f/2//p9Vs+j/75/83WXu/h+MWzrZ/wAAANCD3P0/FLfY/wAAANCM3P0/HLfY/wAAANCM3P0/Erdccv9/8Fbf1e7o/z3/X/+v/9f/j7++/n+Zuu3/L8jz/zdotf+/oH3380t///p//T+rZtH/n/p27v4fjVt8/R8AAACakbv/x+IW+x8AAACakbv/x+MW+x8AAACakbv/J+KWTva//l//r//X/+v/x1//qv3/4TBO/78b+v9p+v8N9P/T/fwHTX++/l//r//nvJvp/5/6kPzgZfv/3P1vils62f8AAADQg9z9b45b7H8AAABoRu7+n4xb7H8AAABoRu7+n4pbOtn/+n/9v/5f/6//H399z/9fJv3/NP3/MAxvmXgDY/3//Tv6f8//1//r/7miuT3/P3f/T8ctnex/AAAA6EHu/rfELfY/AAAANCN3/1vjFvsfAAAAmpG7/2filk72v/5f/3/T/f8L9+/fn3H/f/RTWv+v/x97ff3/Mun/p+n/N/D8f/2//l//z1bNrf/P3f+2uKWT/Q8AAAA9yN3/9rjF/gcAAIBm5O7/2bjF/gcAAIBm5O5/NG7pZP9fq/8//Qn6/xX6f8//P//zo6v+/57+/zz9/27cXP8/6P/1//r/8w7PflP/r//X/3Pervr/5+PX+039f+7+n4tbOtn/AAAA0IPc/e+IW+x/AAAAaEbu/p+PW+x/AAAAaEbu/l+IWzrZ/57/r/+fc///4AfW/y+0//f8/xX6/93w/P9p+v8N9P+e/3/N/v8l+n/9P2fsqv9f1/uf/3bu/l+MWzrZ/wAAANCD3P3vjFvsfwAAAGhG7v53xS32PwAAADQjd/8vxS2d7H/9v/7/bP9/3NvPpf/v9/n/x/+fpv8/1nD/fzjo/7dubv3/3Uu+vv5f/6//v4H3/5Khoef/r/9VRf/PHM2t/8/d/8txSyf7HwAAAHqQu/9X4hb7HwAAAJqRu/9X4xb7HwAAAJqRu//X4paW9v+L69O35ff/d859ov5/GIbHH2nk+f/99v/H9P/HGu7/66+q/n975tb/X/b19f/6f/3/ct//bvr/9fT/zNHc+v/c/b8et7S0/wEAAKBzuft/I26x/wEAAKAZuft/M26x/wEAAKAZuft/K27pZP8vv/8//4n6/+Faz//X/x99YH79/yOD/l//r/+/kOv29284jN/T9P/6f/3/aD9/sObvewb9v/5f/8+IufX/uft/O27pZP8DAABAD3L3vztusf8BAACgGbn73xO32P8AAADQjNz9vxO3dLL/9f/6f/3/Ivr/lef/H+r/9f/6/1Fzef7/S1/6se/T/+v/W+z/p+j/9f/6f86bW/+fu/9345ZO9j8AAAD0IHf/78Ut9j8AAAA0I3f/e+MW+x8AAACa8d6jkPNw+P1h6HL/r/b/Dw3Hheqxsf4/GjX9/ynr+v+DYbin/9f/30T/P+j/9f/6/1Fz6f89//9q71//r/9f8vu/VP//4aufr/+nRXPr/3P3vy9u6WT/AwAAQA9y9/9B3GL/AwAAQDNy9/9h3GL/AwAAQDNy9z8Wt3Sy/z3/v8Hn/z+k/9f/T7++/l//3zL9/zT9/wb6/+v38/mrqv5/uc///wD9P9szt/4/d/8fxS1Hw+8jPvCKf5oAAADAjOTu/+O4pZOv/wMAAEAPcvf/Sdxi/wMAAEAzcvf/adzSyf7X/zfY/3v+v/5/w+vr//X/LdP/T9P/b9BP/3849sF99/PXte/330z/7/n/bNHc+v/c/X8Wt3Sy/wEAAKBtzx39MXf/n8ct9j8AAAA0I3f/X8Qt9j8AAAA0I3f/43FLJ/tf/6//b7///yT9/7nXb77/H4bh3oOfFPr/Lun/83f0cfr/Dfrp/0ftu59f+vvX/+v/WTW3/j93/xNxSyf7HwAAAHqQu/8v4xb7HwAAAJqRu/+v4hb7HwAAAJqRu/+v45Ym9v+tjd9D/99X/38w9Nj/e/5/d/2/5/93bTn9/xtHf5P2/H/9v/5/ue9f/6//Z9Xc+v/c/U8e3Gpw/wMAAEC7PuGjPvWJi37fJ4/+eDj8Tdxi/wMAAEAzcvf/bdxi/wMAAEAzcvf/XdzSyf7X//fV//f5/H/9v/5f/9+T5fT/4/T/l+n/T3730P/r/+fw/vX/+n9Wza3/z93/93HLqeG3+b+iBwAAAOzU7ct999z9/xC3dPL1fwAAAOhB7v6n4paV/X//gv9WOwAAADA3ufv/MW7p5Ov/+v+Z9//DDfX/8f30/8f0//r/sdfX/y+T/n/aNfv/+wez6v89/1//P6/3r/9f1/8/+F/1/72aW/+fu/8dbxu63P8AAADQqDP/ROGfjv54OPxz3GL/AwAAQDNy9/9L3GL/AwAAQDNy9/9r3NLJ/tf/z7z/v9Lz/+/W/+X5/533/686HH19/b/+v2X6/2ltPf9/ff+f9P+Xs+9+funvX//v+f+sukT/fzRIb7r/z93/b3FLJ/sfAAAAepC7/+m4xf4HAACAZuTu//e4xf4HAACAZuTu/4+4pZP9r//fQ///6jvDcKP9/wWe/6//76P/X/P67fT/H/rwvXd/4ie/9U36f07ssv/Pnwv6//n1/57/fzX77ueX/v71//p/Vs3t+f+5+/8zbulk/wMAAEAPcvc/E7fY/wAAANCM3P3/Fbc82P/v2te7AgAAALYpd/9/xy2dfP1f/9/i8/+X2f/nX+s99P/3ltf/Z1Pce//v+f/6/1We/z9N/7+B/l//P/H+n95Q0Ov/9f+sulz//9pbH/+Ra3+orfT/ufv/J27pZP8DAABAD3L3/2/ckvv/4NL/6B4AAACYmdz9z8Ytvv4PAAAAzcjd/1zc0sn+1//r/+fS/yfP/z/5PM//P6b/1/9fhv5/mv5/A/2//t/z/y/e/98++039P2Pm9vz/3P3/F7d0sv8BAACgB7n7n49b7H8AAABoRu7+/49b7H8AAABoRu7+F+KWTva//l//r//X/+v/x19f/79M+v9p+v8N9P/6f/2/5/+zVXPr/3P3vz8AAP//hh5niw==")
open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x100)

32m10.157642325s ago: executing program 35 (id=401):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000340)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x34}}], 0x48}, 0x0)

32m3.466649484s ago: executing program 36 (id=431):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180), 0x1, 0x979b, &(0x7f0000009780)="$eJzs3QWcrWWhsP3ZsIFNhyCIlJSYpISBdCiipCghSEsKiIDSoYQKioAKCijd3d1Id3d3d3y/DRvU7QUv5/3Oe/BwXdfPPWtWzJp73f/nfpw1z7DWMgssMc/AwDgDb/fO6T86f4+7VlhyzEU2OGG3wTfus/Oijw67eOS3T8ada9jp3MNO5xkYGBg07H4GvX3Z4DmPP2GEgcEDQ//3j8YYdbQRxhgYGG3Y2WH3MzDb2yejH/jO7d4cLh7oFEO/3U5v/3urMYfeydBPllvx9XUHBgaG/NPXDx3XDP/2QKUtM/eCC/zD6l23EYZdPegf1711Ovjtf6PvPzAw+r4D7719DL3tSP/0tf+TDf2e40w1sNRdH8L3/l/XMnMvuPBw/kPX4ojDLptt6Boffg0aG34733mJtR4eNoWDhk3c4H9aLx/Gdv9/1TJzL7DIwHuv44FF59/8oTff2m8Onm9gYPD8AwODFxgYGLzgh+1R/z19qBtfVVVVfSjNPc/MQ5+zjzDczwND3vm5ln4uvPi1Ge8bGBi86NvPEwev+M5zwaqqqqqqqqr6z2zueWaeF57/j/N+z/+nOG27cXv+X1VVVVVVVfW/p4Xnnmfmoc/1h3v+P9H7Pf9/6pEjDnj7b//nmu3tr3rjw30QVVVVVVVVVfW+LbAwPv+f4v2e/196/BRX9Py/qqqqqqqq6n9Pi7/55ptb/tPr7A27eLp3rqfn/2c8eMfyH9qAq6qqqqqqquq/3BuPn3rmP17zfbKB4V7v/a2G/V5g0NFnX3XVhzbQ/4wG/fvvQ7b6sMf0/7ehzkMOnWJgYN2lPuyh1IfQ/5rXqq//J+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uLe4/j/u6//f8axK7/zXvCfnmbmm079x1e+9d7/gxdd+PGtP6Shfxh9VI//D6w5aGBgmO84aw4MDCw69+JLTjcwMHDqTTNPM/XAu9fNPvS6r4w34ltvEP/OfyYy/7h8x1tN+fbp0A1lYPx37+Pot+5/4Tf3G3HQcIP4p8Y98YAD1ljmxVmGP532vR/HCO9+NuYJj7zz37KMMNyNhrzHF79z/+88luGdh419uqFjn36jddaffsNNN/vCmuustPqqq6+67hwzzTrjLHPMMeus06+25tqrzvD2x/easyne+jjvB5mzMYafs8fn/uc5G/6xvdecTfH+c/bWPe5+yZCvvzNng/+Lczbv+8/ZFGsO+0bjzjXSwIpvzc2ggYFx5xtpYJOhZ2YcZWBg3PmH3Xaiobf96ngjDAzs+o8HOvSzUd7dBgdtNfQ2yyywxDxv76YGBv5x+o/e4/3sRx428rmGnc497HSet7/NOAP/2BQHz3n8CSMMnYt/mY4xRh1thDEGBkYbdnbY/QzM8fbJaKe9c7v3eJ/14Qb61sus7PT2v7cac2BgYPShn0y20hnbD536/4H3af+/+v//f/OafdC72+OgYf+G3eZtr7kXXPgf3+utaRg6dyMOu2y2oSb/zW9t/y/923inGDIwxfuM931eF+etaPta+9QJtvnvel0cGu9E7zPe93kd3/cc79L37fXw23f13zbe4fZ1i7z1ca4Psq8beP993Yh0B6tePunw+7pvvvcQ/2V3+c4cjTLcjd5rXzfR3pNvNfT+53r/fd0iQ8c+0r/s60YYGBh33nf2dUN3fAuMNLDr0DMzDT2z4EgDBw89M/NbZ0YdOHvomS+uvN7aqwy9YKF/3w6mG/Qvf6AJ62yB4dbZoH967IOG+/vOwW+fjr7/O+/h9B77zUHDHtb/cV9B2+047zPe93n/KZznoZetcsyQCf673n+Kxjvk/cf7Xu+X/Z7j3eWFM+76bx7vu+tspH+aroU+yDqb4l/X2dCHOOI/rYwP+nPYKnD7tz+f6N1723iLR979mWKk4e73//QzxULvv87GWXO4r9tx34FB7zc3C36QuZnk3/ZBW//z3HzQn7emm+rt60d8n7kZZY4Vpn1nbkb+L87Ngv/VuZlrYMR/nZvBA/MPDAxMPWz/sMAHmZuJ3n9uPuh2Mxrc/u3PV333ovl2PvTCd+Zm+Ln4P83NAv/VuZni3e1m6reum3KEgZFHHthkpY022mDGtz++c3amtz++/xqc74PM5Tj/PXM58eD3mst/bKpj3HfF/v+HNfhv+/R37n++/+pcDrw7lwNrDr9Y6j+1fv/nLn93+bvL313+7vJ3l7+49zj+/+7r/+85zld2G/bLjZGumHzCHT7s8X7IfaSP/w/z/Zfj/ztMOPkVIwy8e937Hp99+zb/kcdnZ3v7ZPQD37nd8McHeaDvfXx23zlm2+5/6Pjs/1XvrNUP8Hu49v/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/ce9x/H+Gd/4O4MEZF3tm2IHQkR7ddtnFPuzxfsh9pI//D/P9l+P/iy277aMjDLx73fse/3/7No7j//e8usAu/8nH/99Zqx3/r/9D+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uPc4/j/XO38HcMQRe232zt8DXDfuTqd+2OP9kPuoHv/v/f+9tf93l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5ixt2/H9guLe3/E7bBQbH//939x7+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/3fzxyz+y+SPWfy/lz9m8f9+/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8f5A/ZvFfMX/M4r9S/pjF/4f5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/j/LHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/j/PHLP4b5I9Z/DfMH7P4b5Q/ZvH/Sf6YxX/j/DGL/0/zxyz+m+SPWfw3zR+z+G+WP2bx/1n+mMX/5/ljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx/kT9m8f9l/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8f5U/ZvH/df6Yxf83+WMW/13zxyz+u+WPWfx/mz9m8f9d/pjFf/f8MYv/7/PHLP575I9Z/PfMH7P475U/ZvH/Q/6Yxf+P+WMW/z/lj1n8984fs/jvkz9m8f9z/pjF/y/5Yxb/ffPHLP775Y9Z/PfPH7P4/zV/zOL/t/wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4v/3/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH5P4DxrIH7P4D8ofs/iPkD9m8R8xf8ziPzh/zOI/Uv6YxX/k/DGL/yj5Yxb/IfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfw/lj9m8R8/f8ziP0H+mMX/4/ljFv8J88cs/hPlj1n8P5E/ZvGfOH/M4v/J/DGL/yT5Yxb/SfPHLP6T5Y9Z/CfPH7P4T5E/ZvH/VP6YxX/Kd/yHfEjj+g/N4j9V6x+z+E+dP2bxnyZ/zOI/bf6Yxf/T+WMW/+nyxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/KX/M4j9r/pjFf7b8MYv/7PljFv858scs/l/OH7P4fyV/zOL/1fwxi//X8scs/nPmj1n8v54/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMX/G/ljFv9v5o9Z/BfJH7P4fyt/zOK/aP6Yxf/b+WMW/+/kj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/+/mj1n8l8kfs/h/L3/M4v/9/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4/yB/zOK/Yv6YxX+l/DGL/w/zxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/H+WPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+ePWfw3yB+z+G+YP2bx3yh/zOL/k/wxi//G+WMW/5/mj1n8N8kfs/hvmj9m8d8sf8zi/7P8MYv/z/PHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/j/In/M4v/L/DGL/475Yxb/nfLHLP47549Z/HfJH7P4/yp/zOL/6/wxi/9v8scs/rvmj1n8d8sfs/j/Nn/M4v+7/DGL/+75Yxb/3+ePWfz3yB+z+O+ZP2bx3yt/zOL/h/wxi/8f88cs/n/KH7P4750/ZvHfJ3/M4v/n/DGL/1/yxyz+++aPWfz3yx+z+O+fP2bx/2v+mMX/b/ljFv8D8scs/gfmj1n8D/pX/wf+x8f1H5rF/+DWP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjE/63y//ck/oMuyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+Y9MF1r8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMS/7c+zf/fs/gPyh+z+I+QP2bxHzF/zOI/OH/M4j9S/pjFf+T8MYv/KPljFv8h+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/D+WP2bxHz9/zOI/Qf6Yxf/j+WMW/wnzxyz+E+WPWfw/kT9m8Z84f8zi/8n8MYv/JPljFv9J88cs/pPlj1n8J88fs/hPkT9m8f9U/pjFf8r8MYv/VPljFv+p88cs/tPkj1n8p80fs/h/On/M4j9d/pjF/zP5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfynzx+z+M+QPzbo/D1GGhgY+Mj7z5g/Zln/M+WPWfxnzh+z+M+SP2bx/1L+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfznzB+z+H89f8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/zfyxyz+38wfs/gvkj9m8f9W/pjFf9H8MYv/t/PHLP7fyR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP7fzR+z+C+TP2bx/17+mMX/+/ljFv9l88cs/svlj1n8l88fs/ivkD9m8f9B/pjFf8X8MYv/SvljFv8f5o9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/j/KH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/OH7P4b5A/ZvHfMH/M4r9R/pjF/yf5Yxb/jfPHLP4/zR+z+G+SP2bx3zR/zOK/Wf6Yxf9n+WMW/5/nj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx/0X+mMX/l/ljFv8d88cs/jvlj1n8d84fs/jvkj9m8f9V/pjF/9f5Yxb/3+SPWfx3zR+z+O+WP2bx/23+mMX/d/ljFv/d88cs/r/PH7P475E/ZvHfM3/M4r9X/pjF/w/5Yxb/P+aPWfz/lD9m8d87f8ziv0/+mMX/z/ljFv+/5I9Z/PfNH7P475c/ZvHfP3/M4v/X/DGL/9/yxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/3/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M39M4j/iQP6YxX9Q/pjFf4T8MYv/iPljFv/B+WMW/5Hyxyz+I+ePWfxHyR+z+A/JH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8zi/7H8MYv/+PljFv8J8scs/h/PH7P4T5g/ZvGfKH/M4v+J/DGL/8T5Yxb/T+aPWfwnyR+z+E+aP2bxnyx/zOI/ef6YxX+K/DGL/6fyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6Yxf/T+WMW/+nyxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/KX/M4j9r/pjFf7b8MYv/7PljFv858scs/l/OH7P4fyV/zOL/1fwxi//X8scs/nPmj1n8v54/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMX/G/ljFv9v5o9Z/BfJH7P4fyt/zOK/aP6Yxf/b+WMW/+/kj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/+/mj1n8l8kfs/h/L3/M4v/9/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4/yB/zOK/Yv6YxX+l/DGL/w/zxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/H+WPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+ePWfw3yB+z+G+YP2bx3yh/zOL/k/wxi//G+WMW/5/mj1n8N8kfs/hvmj9m8d8sf8zi/7P8MYv/z/PHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/j/In/M4v/L/DGL/475Yxb/nfLHLP47549Z/HfJH7P4/yp/zOL/6/wxi/9v8scs/rvmj1n8d8sfs/j/Nn/M4v+7/DGL/+75Yxb/3+ePWfz3yB+z+O+ZP2bx3yt/zOL/h/wxi/8f88cs/n/KH7P4750/ZvHfJ3/M4v/n/DGL/1/yxyz+++aPWfz3yx+z+O+fP2bx/2v+mMX/b/ljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf/v+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZPybxHzyQP2bxH/TB/Ef+fzau/9As/iO0/jGL/4j5Yxb/wfljFv+R8scs/iPnj1n8R8kfs/gPyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4v+x/DGL//j5Yxb/CfLHLP4fzx+z+E+YP2bxnyh/zOL/ifwxi//E+WMW/0/mj1n8J8kfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+n8scs/lPmj1n8p8ofs/hPnT9m8Z8mf8ziP23+mMX/0/ljFv/p8scs/p/JH7P4fzZ/zOL/ufwxi//n88cs/l/IH7P4fzF/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fyl/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5z5o9Z/L+eP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjF/xv5Yxb/b+aPWfwXyR+z+H8rf8ziv2j+mMX/2/ljFv/v5I9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv/v5o9Z/JfJH7P4fy9/zOL//fwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+P8gf8ziv2L+mMV/pfwxi/8P88cs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/x/lj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/x/nj1n8N8gfs/hvmD9m8d8of8zi/5P8MYv/xvljFv+f5o9Z/DfJH7P4b5o/ZvHfLH/M4v+z/DGL/8/zxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P4/yJ/zOL/y/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+P8qf8zi/+v8MYv/b/LHLP675o9Z/HfLH7P4/zZ/zOL/u/wxi//u+WMW/9/nj1n898gfs/jvmT9m8d8rf8zi/4f8MYv/H/PHLP5/yh+z+O+dP2bx3yd/zOL/5/wxi/9f8scs/vvmj1n898sfs/jvnz9m8f9r/pjF/2/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/7/ljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT8m8R9pIH/M4j8of8ziP0L+mMV/xPwxi//g/DGL/0j5Yxb/kfPHLP6j5I9Z/Ifkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bx/1j+mMV//Pwxi/8E+WMW/4/nj1n8J8wfs/hPlD9m8f9E/pjFf+L8MYv/J/PHLP6T5I9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjF/1P5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4v/p/DGL/3T5Yxb/z+SPWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lD9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/znzxyz+X88fs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOL/jfwxi/8388cs/ovkj1n8v5U/ZvFfNH/M4v/t/DGL/3dc/oM/6A0t/ou5/D9wFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8zi/938MYv/MvljFv/v5Y9Z/L+fP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/H+SPWfxXzB+z+K+UP2bx/2H+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL/o/wxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/4/wxi/8G+WMW/w3zxyz+G+WPWfx/kj9m8d84f8zi/9P8MYv/JvljFv9N88cs/pvlj1n8f5Y/ZvH/ef6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv9f5I9Z/H+ZP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/X+WPWfx/nT9m8f9N/pjFf9f8MYv/bvljFv/f5o9Z/H+XP2bx3z1/zOL/+/wxi/8e+WMW/z3zxyz+e+WPWfz/kD9m8f9j/pjF/0/5Yxb/vfPHLP775I9Z/P+cP2bx/0v+mMV/3/wxi/9++WMW//3zxyz+f80fs/j/LX/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+P89f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyT+Iw/kj1n8B+WPWfxHyB+z+I+YP2bxH5w/ZvEfKX/M4j9y/pjFf5T8MYv/kPwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP4fyx+z+I+fP2bxnyB/zOL/8fwxi/+E+WMW/4nyxyz+n8gfs/hPnD9m8f9k/pjFf5L8MYv/pPljFv/J8scs/pPnj1n8p8gfs/h/Kn/M4j9l/pjFf6r8MYv/1PljFv9p8scs/tPmj1n8P50/ZvGfLn/M4v+Z/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/5fyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/Z/6Yxf/r+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/L+RP2bx/2b+mMV/kfwxi/+38scs/ovmj1n8v50/ZvH/Tv6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvH/bv6YxX+Z/DGL//fyxyz+388fs/gvmz/2EfUfNJz1yMvlj31E/d/qn9f/8vljFv8V8scs/j/IH7P4r5g/ZvFfKX/M4v/D/DGL/8r5Y4POHzRsZj7a/qvkj1nW/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/Uf6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/cf6YxX+D/DGL/4b5Yxb/jfLHLP4/yR+z+G+cP2bx/2n+mMV/k/wxi/+m+WMW/83yxyz+P8sfs/j/PH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/8v8scs/r/MH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/r/LHLP6/zh+z+P8mf8ziv2v+mMV/t/wxi/9v88cs/r/LH7P4754/ZvH/ff6YxX+P/DGL/575Yxb/vfLHLP5/yB+z+P8xf8zi/6f8MYv/3vljFv998scs/n/OH7P4/yV/zOK/b/6YxX+//DGL//75Yxb/v+aPWfz/lj9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/P+eP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8u/4FR4TKL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj0n8RxnIH7P4D8ofs/iPkD9m8R8xf8ziPzh/zOI/Uv6YxX/k/DGL/yj5Yxb/IfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3HzH9aQfzln8R8vf8zi/7H8MYv/+PljFv8J8scs/h/PH7P4T5g/ZvGfKH/M4v+J/DGL/8T5Yxb/T+aPWfwnyR+z+E+aP2bxnyx/zOI/ef6YxX+K/DGL/6fyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6Yxf/T+WMW/+nyxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/KX/M4j9r/pjFf7b8MYv/7PljFv858scs/l/OH7P4fyV/zOL/1fwxi//X8scs/nPmj1n8v54/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMX/G/ljFv9v5o9Z/BfJH7P4fyt/zOK/aP6Yxf/b+WMW/+/kj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/+/mj1n8l8kfs/h/L3/M4v/9/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4/yB/zOK/Yv6YxX+l/DGL/w/zxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/H+WPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+ePWfw3yB+z+G+YP2bx3yh/zOL/k/wxi//G+WMW/5/mj1n8N8kfs/hvmj9m8d8sf8zi/7P8MYv/z/PHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tujf1uExX+HtDGL/y/yxyz+v8wfs/jvmD9m8d8pf8ziv/Pb/q+/+WGN6z80i/8urX/M4v+r/DGL/6/zxyz+v8kfs/jvmj9m8d8tf8zi/9v8MYv/7/LHLP67549Z/H+fP2bx3yN/zOK/Z/6YxX+v/DGL/x/yxyz+f8wfs/j/KX/M4r93/pjFf5/8MYv/n/PHLP5/yR+z+O+bP2bx3y9/zOK/f/6Yxf+v+WMW/7/lj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/v+ePWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6YxH/IQP6YxX9Q/pjFf4T8MYv/iPljFv/B+WMW/5Hyxyz+I+ePWfxHyR+z+A/JH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8zi/7H8MYv/+PljFv8J8scs/h/PH7P4T5g/ZvGfKH/M4v+J/DGL/8T5Yxb/T+aPWfwnyR+z+E+aP2bxnyx/zOI/ef6YxX+K/DGL/6fyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6Yxf/T+WMW/+nyxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/KX/M4j9r/pjFf7b8MYv/7PljFv858scs/l/OH7P4f+V9/ff6fz+u/9As/l9t/WMW/6/lj1n858wfs/h/PX/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/838scs/t/MH7P4L5I/ZvH/Vv6YxX/R/DGL/7fzxyz+38kfs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+380fs/gvkz9m8f9e/pjF//v5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Qf6YxX/F/DGL/0r5Yxb/H+aPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP4/yh+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/zh+z+G+QP2bx3zB/zOK/Uf6Yxf8n+WMW/43zxyz+P80fs/hvkj9m8d80f8ziv1n+mMX/Z/ljFv+f549Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9F/pjF/5f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/Vf6Yxf/X+WMW/9/kj1n8d80fs/jvlj9m8f9t/pjF/3f5Yxb/3fPHLP6/zx+z+O+RP2bx3zN/zOK/V/6Yxf8P+WMW/z/mj1n8/5Q/ZvHfO3/M4r9P/pjF/8/5Yxb/v+SPWfz3zR+z+O+XP2bx3z9/zOL/1/wxi//f8scs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/9/zxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PHzP4Dxo8MOSJ/DGD/9D1/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjEf9SB/DGL/6D8MYv/CPljFv8R88cs/oPzxyz+I+WPWfxHzh+z+I+SP2bxH5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMX/Y/ljFv/x88cs/hPkj1n8P54/ZvGfMH/M4j9R/pjF/xP5Yxb/ifPHLP6fzB+z+E+SP2bxnzR/zOI/Wf6YxX/y/DGL/xT5Yxb/T+WPWfynzB+z+E+VP2bxnzp/zOI/Tf6YxX/a/DGL/6fzxyz+0+WPWfw/kz9m8f9s/pjF/3P5Yxb/z8v8Z/yAt7P4f0Hm/0Gz+H8xf8ziP33+mMV/hoGBLT+sIf0nZ/GfsfWPWfxnyh+z+M+cP2bxnyV/zOL/pfwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+M+ZP2bx/3r+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/b+SPWfy/mT9m8V8kf8zi/638MYv/ovljFv9v549Z/L+TP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/L+bP2bxXyZ/zOL/vfwxi//388cs/svmj1n8l8sfs/gvnz9m8V8hf8zi/4P8MYv/ivljFv+V8scs/j/MH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n8f5Q/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8f5w/ZvHfIH/M4r9h/pjFf6P8MYv/T/LHLP4b549Z/H+aP2bx3yR/zOK/af6YxX+z/DGL/8/yxyz+P88fs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/i/wxi/8v88cs/jvmj1n8d8ofs/jvnD9m8d8lf8zi/6v8MYv/r/PHLP6/yR+z+O+aP2bx3y1/zOL/2/wxi//v8scs/rvnj1n8f58/ZvHfI3/M4r9n/pjFf6/8MYv/H/LHLP5/zB+z+P8pf8ziv3f+mMV/n/wxi/+f88cs/n/JH7P475s/ZvHfL3/M4r9//pjF/6/5Yxb/v+WPWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv+/549Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjEf7SB/DGL/6D8MYv/CPljFv8R88cs/oPzxyz+I+WPWfxHzh+z+I+SP2bxH5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMX/Y/ljFv/x88cs/hPkj1n8P54/ZvGfMH/M4j9R/pjF/xP5Yxb/ifPHLP6fzB+z+E+SP2bxnzR/zOI/Wf6YxX/y/DGL/xT5Yxb/T+WPWfynzB+z+E+VP2bxnzp/zOI/Tf6YxX/a/DGL/6fzxyz+0+WPWfw/kz9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9S/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n858wfs/h/PX/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/838scs/t/MH7P4L5I/ZvH/Vv6YxX/R/DGL/7fzxyz+38kfs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+380fs/gvkz9m8f9e/pjF//v5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Qf6YxX/F/DGL/0r5Yxb/H+aPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP4/yh+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/zh+z+G+QP2bx3zB/zOK/Uf6Yxf8n+WMW/43zxyz+P80fs/hvkj9m8d80f8ziv1n+mMX/Z/ljFv+f549Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9F/pjF/5f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/Vf6Yxf/X+WMW/9/kj1n8d80fs/jvlj9m8f9t/pjF/3f5Yxb/3fPHLP6/zx+z+O+RP2bx3zN/zOK/V/6Yxf8P+WMW/z/mj1n8/5Q/ZvHfO3/M4r9P/pjF/8/5Yxb/v+SPWfz3zR+z+O+XP2bx3z9/zOL/1/wxi//f8scs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/9/zxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/TOI/+kD+mMV/UP6YxX+E/DGL/4j5Yxb/wfljFv+R8scs/iPnj1n8R8kfs/gPyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4v+x/DGL//j5Yxb/CfLHLP4fzx+z+E+YP2bxnyh/zOL/ifwxi//E+WMW/0/mj1n8J8kfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+n8scs/lPmj1n8p8ofs/hPnT9m8Z8mf8ziP23+mMX/0/ljFv/p8scs/p/JH7P4fzZ/zOL/ufwxi//n88cs/l/IH7P4fzF/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fyl/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5fzh+z+M83JH/K4v/V1j9m8f9a/pjFf878MYv/1/PHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/h/I3/M4v/N/DGL/yL5Yxb/b+WPWfwXzR+z+H87f8zi/538MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8zi/938MYv/MvljFv/v5Y9Z/L+fP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/H+SPWfxXzB+z+K+UP2bx/2H+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL/o/wxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/4/wxi/8G+WMW/w3zxyz+G+WPWfx/kj9m8d84f8zi/9P8MYv/JvljFv9N88cs/pvlj1n8f5Y/ZvH/ef6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv9f5I9Z/H+ZP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/X+WPWfx/nT9m8f9N/thHzv+fkP/Zf9f8sY+c/3us/93yxyz+v80fs/j/Ln/M4r97/pjF//f5Yxb/PfLHLP575o9Z/PfKH7P4/yF/zOL/x/wxi/+f8scs/nvnj1n898kfs/j/OX/M4v+X/DGL/775Yxb//fLHLP77549Z/P+aP2bx/1v+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf+wd/4EhAwMfZf/T88cs6/+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8f97/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD/m8E/+vXL4D4z+aFsBZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5YxL/MQbyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5Y9Z/MfPH7P4T5A/ZvH/eP6YxX/C/DGL/0T5Yxb/T+SPWfwnzh+z+H8yf8ziP0n+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfw/lT9m8Z8yf8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+n84fs/hPlz9m8f9M/pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/6fPHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/0v5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvGfM3/M4v/1/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/t/IH7P4fzN/zOK/SP6Yxf9b+WMW/0Xzxyz+384fs/h/J3/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/h/N3/M4r9M/pjF/3v5Yxb/7+ePWfyXzR+z+C+XP2bxXz5/zOK/Qv6Yxf8H+WMW/xXzxyz+K+WPWfx/mD9m8V85f8ziv4rR/wM8YIv/qkb/D5DFf7X8MYv/6vljFv818scs/mvmj1n8f5Q/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8f5w/ZvHfIH/M4r9h/pjFf6P8MYv/T/LHLP4b549Z/H+aP2bx3yR/zOK/af6YxX+z/DGL/8/yxyz+P88fs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/i/wxi/8v88cs/jvmj1n8d8ofs/jvnD9m8d8lf8zi/6v8MYv/r/PHLP6/yR+z+O+aP2bx3y1/zOL/2/wxi//v8scs/rvnj1n8f58/ZvHfI3/M4r9n/pjFf6/8MYv/H/LHLP5/zB+z+P8pf8ziv3f+mMV/n/wxi/+f88cs/n/JH7P475s/ZvHfL3/M4r9//pjF/6/5Yxb/v+WPWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv+/549Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/sI+o/zXCXjvFg/thH1P+t/nn9P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH5P4jzmQP2bxH5Q/ZvEfIX/M4j9i/pjFf3D+mMV/pPwxi//I+WMW/1Hyxyz+Q/LHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/h/LH/M4j9+/pjFf4L8MYv/x/PHLP4T5o9Z/CfKH7P4fyJ/zOI/cf6Yxf+T+WMW/0nyxyz+k+aPWfwnyx+z+E+eP2bxnyJ/zOL/qfwxi/+U+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bx/3T+mMV/uvwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/l/KH7P4z5o/ZvGfLX/M4j97/ti/+A+7bJwPeUz/v3oP/znyxyzr/8v5Yxb/r+SPWfy/mj9m8f9a/pjFf878MYv/1/PHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/h/I3/M4v/N/DGL/yL5Yxb/b+WPWfwXzR+z+H87f8zi/538MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8zi/938MYv/MvljFv/v5Y9Z/L+fP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/H+SPWfxXzB+z+K+UP2bx/2H+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL/o/wxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/4/wxi/8G+WMW/w3zxyz+G+WPWfx/kj9m8d84f8zi/9P8MYv/JvljFv9N88cs/pvlj1n8f5Y/ZvH/ef6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv9f5I9Z/H+ZP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/X+WPWfx/nT9m8f9N/pjFf9f8MYv/bvljH1X/IcP5/zZ/7KPqPzCc/+/yxyz+u+ePWfx/nz9m8d8jf8ziv2f+mMV/r/wxi/8f8scs/n/MH7P4/yl/zOK/d/6YxX+f/DGL/5/zxyz+f8kfs/jvmz9m8d8vf8ziv3/+mMX/r/ljFv+/5Y9Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/7/nj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/+Dw/lv9D4/rPzSL/0Otf8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT8m8R9rIH/M4j8of8ziP0L+mMV/xPwxi//g/DGL/0j5Yxb/kfPHLP6j5I9Z/Ifkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bx/1j+mMV//Pwxi/8E+WMW/4/nj1n8J8wfs/hPlD9m8f9E/pjFf+L8MYv/J/PHLP6T5I9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjF/1P5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4v/p/DGL/3T5Yxb/z+SPWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lD9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/znzxyz+X1f7rzj6e11j8Z9L7f/eWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4fyN/zOL/zfwxi/8i+WMW/2/lj1n8F80fs/h/O3/M4v+d/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4v/d/DGL/zL5Yxb/7+WPWfy/nz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/x/kj1n8V8wfs/ivlD9m8f9h/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi/6P8MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/+P8MYv/BvljFv8N88cs/hvlj1n8f5I/ZvHfOH/M4v/T/DGL/yb5Yxb/TfPHLP6b5Y9Z/H+WP2bx/3n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/X+SPWfx/mT9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/1/lj1n8f50/ZvH/Tf6YxX/X/DGL/275Yxb/3+aPWfx/lz9m8d89f8zi//v8MYv/HvljFv8988cs/nvlj1n8/5A/ZvH/Y/6Yxf9P+WMW/73zxyz+++SPWfz/nD9m8f9L/pjFf9/8MYv/fvljFv/988cs/n/NH7P4/y1/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/j/PX/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388ck/mMP5I9Z/Aflj1n8R8gfs/iPmD9m8R+cP2bxHyl/zOI/cv6YxX+U/DGL/5D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+H8sfs/iPnz9m8Z8gf8zi//H8MYv/hPljFv+J8scs/p/IH7P4T5w/ZvH/ZP6YxX+S/DGL/6T/Hzt3H+51Xd9x/Mc9Wc4+7brUa7bh0JhrMxIZjVqIiuLx5pSJZt6jHm6SG7mRAFNgo5U6Nl3qZsEmFo45W7XE4ea6W9GwrNkasbXKKa6FMeZgkTlj14FzCM7enmvny75fl+/H4w/O+f2O71/K83r5+3lxXekfytL/5/QPZek/TP9Qlv5H6x/K0v/n9Q9l6T9c/1CW/sfoH8rS/1j9Q1n6v0b/UJb+I/QPZen/C/qHsvQ/Tv9Qlv6/qH8oS//X6h/K0v+X9A9l6f/L+oey9D9e/1CW/q/TP5Sl/0j9Q1n6v17/UJb+J+gfytJ/lP6hLP1P1D+Upf9o/UNZ+v+K/qEs/cfoH8rS/w36h7L0/1X9Q1n6j9U/lKX/G/UPZen/Jv1DWfr/mv6hLP3frH8oS/9x+oey9D9J/1CW/uP1D2Xpf7L+oSz9T9E/lKX/qfqHsvSfoH8oS//T9A9l6X+6/qEs/SfqH8rS/wz9Q1n6t+kfytL/TP1DWfqfpX8oS/+z9Q9l6X+O/qEs/dv1D2Xp/xb9Q1n6v1X/UJb+5+ofytL/bfqHsvQ/T/9Qlv6T9A9l6X++/qEs/S/QP5Sl/9v1D2Xpf6H+oSz936F/KEv/i/QPZel/sf6hLP0v0T+Upf+l+oey9L9M/1CW/pfrH8rS/wr9Q1n6T9Y/lKX/lfqHsvS/Sv9Qlv5X6x/K0r9D/1CW/lP0D2XpP1X/UJb+0/QPZek/Xf9Qlv7v1D+Upf81+oey9J+hfyhL/5n6h7L0n6V/KEv/2fqHsvS/Vv9Qlv5z9A9l6T9X/1CW/vP0D2XpP1//UJb+1+kfytJ/gf6hLP3fpX8oS/+F+oey9F+kfyhL/8X6h7L0v17/UJb+79Y/lKX/DfqHsvS/Uf9Qlv5L9A9l6b9U/1CW/sv0D2Xp/+v6h7L0/w39Q1n6L9c/lKX/e/QPZen/m/qHsvR/r/6hLP3fp38oS/+b9A9l6X+z/qEs/W/RP5Sl/2/pH8rSf4X+oSz9f1v/UJb+v6N/KEv/W/UPZel/m/6hLP1/V/9Qlv7v1z+Upf/t+oey9L9D/1CW/nfqH8rS//f0D2Xp//v6h7L0v0v/UJb+H9A/lKX/B/UPZem/Uv9Qlv6r9A9l6f8H+oey9P9D/UNZ+t+tfyhL/9X6h7L0v0f/UJb+H9I/lKX/h/UPZem/Rv9Qlv736h/K0v+P9A9l6b9W/1CW/n+sfyhL//v0D2Xp/yf6h7L0v1//UJb+H9E/lKX/n+ofytL/o/qHsvT/mP6hLP0/rn8oS/8/0z+Upf8n9A9l6f+A/qEs/dfpH8rS/0H9Q1n6/7n+oSz91+sfytL/If1DWfr/hf6hLP3/Uv9Qlv4P6x/K0v+v9A9l6f9J/UNZ+n9K/1CW/p/WP5Sl/2f0D2Xp/1n9Q1n6/7X+oSz9P6d/KEv/z+sfytJ/g/6hLP2/oH8oS/+/0T+Upf9G/UNZ+j+ifyhL/y/qH8rS/0v6h7L0f1T/UJb+X9Y/lKX/V/QPZen/t/qHsvR/TP9Qlv5f1T+Upf/f6R/K0v9r+oey9P97/UNZ+m/SP5Sl/9f1D2Xpv1n/UJb+/6B/KEv/f9Q/lKX/N/QPZen/T/qHsvT/pv6hLP2/pX8oS/9v6x/K0v9x/UNZ+v+z/qEs/Z/QP5Sl/5P6h7L036J/KEv/p/QPZen/L/qHsvT/jv6hLP3/Vf9Qlv7f1T+Upf9W/UNZ+j+tfyhL/+/pH8rSf5v+oSz9/03/UJb+2/UPZen/7/qHsvR/Rv9Qlv7/oX8oS/8d+oey9N+pfyhL///UP5Sl//f1D2Xpv0v/UJb+P9A/lKX/s/qHsvT/of6hLP2f0z+Upf9/6R/K0v95/UNZ+v9I/1CW/rv1DyXp/8qW/qEs/fvpH8rSv7/+oSz9B+gfytJ/oP6hLP0H6R/K0n+w/qEs/YfoH8rSf6j+oSz9X6Z/KEv/Q/QPZen/cv1DWfq/Qv9Qlv6H6h/K0v+n9A9l6X+Y/qGXXH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/b+YtWnzN5BkzOub6xje+8c2+b17sfzMBAAD/1378of/F/jsBAAAAAAAAAAAAAAAAAACAvJr4vxN7sf8ZAQAAAAAAAAAAAADgJ11b+8nbBvQ74KkB+z/42Uc79nwdvevCaWvWPFi6v3b9+KzgJfvv/2D37t27Vz0zbkLXwyGtVqvzf+2VXY+H9jzufP2lw1YeufdRGf+5Ox+/bNKhZ89dd9vAr6+6pf3pQXueHdS6Ysr0GR2v799qlVMHtRZ2PjihX6tVTh/UurXzwajOBxMHtdZ2Pjhxz4OXtT7d+eB1V82ecXXnE2dU/j2Dl4q29qWtAQcstnXAvw323//SYU9M6/7ay0t2v9rAVtf+h6/74hE9ftbtBfbf/frl5J777/M/IPCC+rb/Zzd3f+3lJf/H+/+HNu5aHP3shfff/frlFPuH+gSf/w/YaM/P/T0+/x8dvOS++5OGbry9c/9t59/36q6nBv5vPv//+PXLqT333/+Az/+dn+MndH/+H9JqldMO8rcDUmlrX7att/f/3vc/8Gd63PTbf//3fHnLKzr3f+9zreVdTw3q4/4n9Pb+f1OPv1egb9raV+/u8f7fh/23RgQvuW//W9cduufz/5b7rzp8v5/1Zf+n9dz/yPkzrx05b9Hi46fPnDy1Y2rHrLGjxpwweuzYMWNG7vlEsPfXg/xNgSQO7v2/dUiPm36tVse++w333TKhc//bH1r+4a6nhvZx/6f3+v5/tPd/CA3v3xo8uLVw8vz5c0/Y+2v3w1F7f937lwX778N//x9zXNdf1v1nhv1arSP33Y+4bOyQzv1fP6es73pqcB/3P7HX/Y8/8M8qgb45yPf/q3vcHLD/k7beuKBz/8d+/1Vbup7q63//n9Hr/u/2/g8Ho629VeubaOf+Txyy7Mxq16XNn/9BfZrY/7Adt+6sdl3OtH+oTxP7n7TiTVdWuy5n2T/Up4n9Pzjz8hXVrsvZ9g/1aWL/z//0zqOqXZdz7B/q08T+H/vOU2uqXZd2+4f6NLH/D9zVfmK16/IW+4f6NLH/46/7wbhq1+Wt9g/1aWL/U15+3tpq1+Vc+4f6NLH/M3efcni16/I2+4f6NLH/fsu+u7TadTnP/qE+Tez/yckrZle7LpPsH+rTxP7XDhvxbLXrcr79Q32a2P/yp98wsdp1ucD+oT5N7P8rd6x8rNp1ebv9Q32a2P/HL3nVymrX5UL7h/o0sf8fDn/okGrX5R32D/VpYv+bNq19oNp1ucj+oT5N7H/V2gHDq12Xi+0f6tPE/pecMfXRatflEvuH+jSx/9FjvnRxtetyqf1DfZrY/5Gf/eZT1a7LZfYP9Wli/+c9vGBetetyuf1DfZrY/4KjPvajatflCvuH+jSx/zd3HDWt2nWZbP9Qnyb2X247ZFO163Kl/UN9mtj/RdtXj692Xa6yf6hPE/tff9jnP1rtulxt/1CfJva/Y86ssdWuS4f9Q32a2P+337PkvdWuyxT7h/o0sf/bn/taqXZdpto/1KeJ/W8dddEl1a7LNPuH+jSx/9VnP/NItesy3f6hPk3sf8X6x+dXuy7vtH+oTxP737DhrCeqXZdr7B/q08T+jx0x8tBq12WG/UN9mtj/7AuXf7DadZlp/1CfJvZ/6v13vKbadZll/1CfJvY/9KvjPlHtusy2f6hPE/v/1Lj3fbLadbnW/qE+Tex/5/hjjqt2XebYP9Snif1vfmDUndWuy1z7h/o0sf/3P3JXxesyz/6hPk3sf85rn99e7brMt3+oTxP7f+OkCxZVuy7X2T/Up4n9H373xC9Uuy4L7B/q08T+L/3W986tdl3eZf9Qnyb2f8wRV7662nVZaP9Qnyb2P236xpurXZdF9g/1aWL/E1ZtHl3tuiy2f6hPE/s/7Ml591S7LtfbP9Snif1vG3DEOdWuy7vtH+rTxP7vveHhb1S7LjfYP9Snif3ffNNHOqpdlxvtH+rTxP4/s2vwjmrXZYn9AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDf7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqI3g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKAAA//9ECubb")
truncate(0x0, 0xfbb0)
munmap(&(0x7f0000003000/0x3000)=nil, 0x3000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

31m23.000531663s ago: executing program 37 (id=590):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
creat(&(0x7f0000000300)='./file0\x00', 0x20)

29m35.482891243s ago: executing program 38 (id=1186):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x8, &(0x7f0000000280)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x40f00, 0x19}, 0x94)

25m34.141950711s ago: executing program 1 (id=2830):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

25m33.809399265s ago: executing program 1 (id=2837):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
pivot_root(0x0, 0x0)

25m33.576914582s ago: executing program 1 (id=2843):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'vcan0\x00'}}, 0x1e)
close(r1)

25m33.30198097s ago: executing program 1 (id=2848):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl(0xffffffffffffffff, 0x8b1a, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xa}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}]}}]}, 0x4c}}, 0x24040084)

25m31.174600766s ago: executing program 1 (id=2870):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10)
utimes(&(0x7f0000001ac0)='./file1\x00', 0x0)

25m30.945200173s ago: executing program 1 (id=2874):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RNDADDENTROPY(r1, 0x541b, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810)

25m17.335165171s ago: executing program 39 (id=2858):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
unshare(0x64000600)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5, 0x8}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x8, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x3, 0xed, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x80000000, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x8, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x2, 0x5001)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@sysvgroups}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
pselect6(0x40, &(0x7f0000000000)={0x40, 0xbd, 0xffffffff, 0x2db6, 0x6, 0x3, 0xff, 0x5}, &(0x7f0000000180)={0x6, 0x5, 0x7, 0x5, 0xfffffffffffffff7, 0x80000000, 0x4, 0x4e2}, &(0x7f0000000280)={0x0, 0x7b, 0x1, 0xffffffffffffff27, 0x8, 0x7, 0xfff, 0x6}, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000400)={[0x3]}, 0x8})
r6 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x1, 0x1)
fchdir(r7)
r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r8, 0xfffffffffffffffe, 0x29)

25m15.171186937s ago: executing program 40 (id=2874):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RNDADDENTROPY(r1, 0x541b, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810)

24m13.877530988s ago: executing program 0 (id=3295):
pipe(&(0x7f0000000d00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
sendmsg$nl_route(r4, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x714f, 0x0)

24m12.236846693s ago: executing program 0 (id=3303):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0)

24m11.491460115s ago: executing program 0 (id=3307):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
setgid(0x0)
getrusage(0x1, &(0x7f0000001000))

24m11.182539352s ago: executing program 0 (id=3313):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, 0x0, 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

24m10.716238078s ago: executing program 0 (id=3320):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

24m10.40262347s ago: executing program 0 (id=3326):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

23m55.116441136s ago: executing program 41 (id=3326):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

19m31.996490166s ago: executing program 7 (id=4488):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044)

19m31.654597965s ago: executing program 7 (id=4490):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)

19m29.946515931s ago: executing program 7 (id=4496):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0)

19m29.775059291s ago: executing program 7 (id=4498):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000002c80)=ANY=[@ANYBLOB="6d616e676c650000b428940000000000000000000000000000000000000000f8ff00000400"], &(0x7f0000000180)=0x2c)
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {0xa888, 0x88be, 0x81000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd600000000000000001811", @ANYRES32=r1], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, r2, 0x2f43f000)
sendmsg$NFT_BATCH(r2, 0x0, 0x4)

19m27.962041842s ago: executing program 7 (id=4502):
syz_usb_connect(0x0, 0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="12011003cae92120ca1101028236010203010902340001080100180904dc87039e7b34000724019703d1bb02472c6d"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0})

19m25.102847386s ago: executing program 7 (id=4508):
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10)
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x6d, 0x1}, 0x7)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)

19m10.00174166s ago: executing program 42 (id=4508):
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10)
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x6d, 0x1}, 0x7)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)

6m42.194528345s ago: executing program 2 (id=8257):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040))

6m38.146481528s ago: executing program 2 (id=8286):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r0, 0xffffffffffffffff, 0x0)

6m37.461099641s ago: executing program 2 (id=8288):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="d2cf4071eedf8b7b757a8a7286590f3b2b73e4d6501d0dcc9ade7118283ba63b6a59c5d5b4171e791290e0ed52580ccb12807717e072cf88cfb3c53a48a6dbff03000000000000c3540370d05aadfd82ee3d47b93dc852cea8715c826bf5c6b35e41f12c3e8347784e01e2e8666080b9d0f0461cc15d5724ba4ac41a7de92272a0c00dd240c18e9a6b2e060b87280e0453f4bd19193e2607e3efe6da34614c9ea45c38f3942252f7292f22b062ecd5351ee10b6d3c589f64abe3b959aaa5b7f093e2077a6b9889eddbd8d4c5d42daa980500"/219, 0xdb}, {&(0x7f0000002440)="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", 0x166}], 0x2}}], 0x1, 0x4000001)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))

6m37.226578715s ago: executing program 2 (id=8290):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x150, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x133, 0x33, @assoc_resp={{{}, {0x7ff6}, @device_a, @device_a, @from_mac=@device_b}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a, {0x10, 0x0, 0x7, 0x0, {0x7fffffffffffffff, 0x3, 0x0, 0x80, 0x0, 0x0, 0x1, 0x3}, 0x0, 0x7fd, 0x3}}, [{0xdd, 0x47, "37b517762281b218e6624c062c78c2a547bdd45d92f74ac371942425534bf112afaa4d46f447f48976a0124588a4ea93cbda8175130598695e14a5de3303092ae45a59fccb100d"}, {0xdd, 0xa8, "9a1a08db250efa5b44c8510e79ec3f0ed5598410442882e8e7b4449a44505bac9b3510fc2855860ed756254b0519a293b1a4fc393c5295aad1abf7b4522b0e41fa3dac0b0374888e468dcccf99e817e1b3c9ffb93bfcbd30c60d840dc47c8798b8bfaa8ca81109464281374eb3567c96ddedfcb99a847bf37418f395a7e608d3db2d4450ee338285bb0e35f0e11efb65d7a2748731475d4b2779214988eb8ccc287cc0fe7affbab9"}]}}]}, 0x150}}, 0x0)

6m36.949907147s ago: executing program 2 (id=8293):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mkdir(0x0, 0x0)
chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

6m35.826730133s ago: executing program 2 (id=8298):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4)

6m20.395942886s ago: executing program 43 (id=8298):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4)

3m40.359053839s ago: executing program 6 (id=8843):
syz_open_dev$tty20(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

3m37.840161382s ago: executing program 9 (id=8859):
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(0x0)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
gettid()
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0)
write$6lowpan_control(r0, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e)

3m36.014583937s ago: executing program 6 (id=8864):
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(r0, 0xab03, 0xffffffffffffffff)

3m35.450581412s ago: executing program 4 (id=8868):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/51, 0x33}], 0x1, 0x5, 0x0)

3m35.193615503s ago: executing program 3 (id=8871):
prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38)

3m35.110571044s ago: executing program 4 (id=8872):
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x14)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

3m34.692089789s ago: executing program 9 (id=8874):
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x3a, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f010000db040f957a34026a6375a22b930a6400"}, 0x48}}, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322", 0x77}], 0x1}, 0x20004804)
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

3m34.558555751s ago: executing program 6 (id=8876):
syz_open_dev$tty20(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

3m34.311404533s ago: executing program 3 (id=8878):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)

3m34.249541658s ago: executing program 9 (id=8879):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRES64, @ANYBLOB="44a837b4012b18a47d01872e42ba27df6fcd8ed404f2a8f480f04048ea693cd7ce5da6ec8d384c7d1aad3083b1a43ee2bec297b5047b0819438a106eab643e82c6503b6c27d0b82482568a35253741de9cf3223f17508862d111b3e3fa9c27c90671fffed0199ba8aa1d7608cf23409f2af5b3ef271c8a2ddc249f7c8aeae6c44be15c5401be5f02b5c1dbb05928c61853cb0c41b78e0271b1f74f0fbf410479caeb61ab29560a3c683509a2ae7ae3cc289a4ad24e664123a1afcd0f0e53d104ead941905d3655413b014a3f17437b55f47f7067fb74d08700a80e19ba77ee8e8e22bd2ff003", @ANYRES16=r1, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x210000, 0x1b8)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
lseek(r4, 0x400008, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x21e2f, 0x3, 0x0, 0x0, 0xc, 0x400, 0x0, 0x9})
readv(r7, &(0x7f0000000180), 0x56)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f0000000800)=""/169, 0xa9}, {&(0x7f00000008c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/44, 0x2c}, {&(0x7f00000009c0)=""/213, 0xd5}, {&(0x7f0000000ac0)=""/207, 0xcf}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001f80)=""/215, 0xd7}, 0xfffffffa}, {{&(0x7f00000004c0)=@xdp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000cc0)=""/123, 0x7b}, {&(0x7f0000000d40)=""/9, 0x9}, {&(0x7f0000000d80)=""/91, 0x5b}], 0x3}, 0xbbe}, {{&(0x7f0000000e40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000ec0)=""/199, 0xc7}, {&(0x7f0000000c40)=""/57, 0x39}, {&(0x7f0000001040)=""/64, 0x40}, {&(0x7f0000001080)=""/243, 0xf3}, {&(0x7f0000001ec0)=""/170, 0xaa}, {&(0x7f0000001280)=""/159, 0x9f}, {&(0x7f0000001180)=""/27, 0x1b}, {&(0x7f0000001380)=""/184, 0xb8}, {&(0x7f0000001440)=""/224, 0xe0}], 0x9}, 0x9}, {{&(0x7f00000015c0)=@x25={0x9, @remote}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001640)=""/254, 0xfe}, {&(0x7f0000000bc0)=""/125, 0x7d}], 0x2, &(0x7f0000001800)=""/37, 0x25}, 0xb4}, {{&(0x7f0000001840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/183, 0xb7}, {&(0x7f0000001980)=""/102, 0x66}, {&(0x7f0000001a80)=""/141, 0x8d}, {&(0x7f0000001b40)=""/100, 0x64}, {&(0x7f0000001bc0)=""/213, 0xd5}], 0x6, &(0x7f0000001d00)=""/238, 0xee}, 0x2}], 0x5, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xe7}, {0x2, 0xcc, 0x5, 0xd}]})
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xb8)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r6)

3m34.015592845s ago: executing program 4 (id=8880):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0)

3m33.594430162s ago: executing program 9 (id=8881):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@host})
epoll_create(0x7)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='lp\x00', 0x3)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}})

3m33.033149857s ago: executing program 8 (id=8882):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, 0x0)
io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1)

3m32.505475513s ago: executing program 4 (id=8883):
syz_usb_connect(0x0, 0x1cb, 0x0, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf7e)
read$dsp(r1, &(0x7f0000000140)=""/4106, 0x100a)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784c", 0x1f)

3m31.8302204s ago: executing program 8 (id=8886):
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x50c}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

3m30.607046815s ago: executing program 8 (id=8888):
r0 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452509005ad94a461cdbfee9bdb942352359a351d1ec0cffb4792cd8000080", 0x4c, 0x0, 0x0, 0x0)

3m30.502250137s ago: executing program 9 (id=8889):
r0 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)

3m30.362565877s ago: executing program 6 (id=8890):
prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000300"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38)

3m30.252733543s ago: executing program 9 (id=8891):
r0 = syz_usb_connect(0x4, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b010205010902240001fe00", @ANYBLOB="40e020499598551ad89c367107188c5cc9f25eb7b8da8d8a"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000100001"], 0x20}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f00000002c0)={0x10})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)

3m30.11183258s ago: executing program 8 (id=8892):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='afs_cb_miss\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r5=>r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r7, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRESDEC=r5], 0x50)
sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000)

3m29.979552123s ago: executing program 5 (id=8893):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1400}], 0x0, 0x0, 0x0})

3m29.886461561s ago: executing program 3 (id=8894):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000002c0)="88", 0x1, 0x31, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000200)=""/185, 0xb9, 0x40000002, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0)

3m28.841388783s ago: executing program 8 (id=8895):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file1\x00', 0xc0ed000e, &(0x7f0000000200)={[{@orlov}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@bh}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x784d800}}]}, 0xfe, 0x487, &(0x7f0000000f00)="$eJzs3c1vFOUfAPDvbHfbAj9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVUkilUENrIoRo9YBHQ+Ld+F8YT3ox6kUTr3o3JMRwAfWyZnZmoC877ZZut8B+Pslsn2dm2uf5zsyz+8zz7G4D6FpD6UMS8b+I+D0iBrLs4h2Gsh83r1+a+Pv6pYkk6vW3/koa+924fmmi2LX4vW1Zpl7P831Nyr38bsT49PTk+Tw/Mnf2g5HZCxdfmDo7fnry9OS5sWPHDh/a23t07Ehb4kzjurH745k9u46/c+WNiRNX3vspqUQWdyyJo12GsqPb1NPtLmyTbV+QTqrpY3+e2/dLsX6g47ViNT0RkZ6uWqP9D0RPbLm1bSBe+2xTKwdsqHq9Xm/2+pybrwP3sSQ2uwbA5ihe6NP732LpUNfjrnDt5ewGKI37Zr5kW6pRyRL7akvub9tpKCJOzP/zVbrEBo1DAAAs9F3a/3k+63cki+Z+KvFwluhNH/6fj98PRsQDEbEjIh6MiJ0R8VBEY99HIuLRNZa/dIZkef+ncvXOImtN2v97KZ/bWtz/qxS7DPbkue2N+GvJqanpyYP5MTkQtb5TU8nk6AplfP/qb1+UbVvY/0uXtPyiL5jX42q1b1F94uT43Ph64y5c+zRid7VZ/EljXiDya2JXROy+wzKmnq2Wbls9/hWU/9mW1b+OeCY7//OxJP5CUjo/Ofri0bEjI/0xPXlwpLgqlvv518tvlpW/rvjbID3/W5te/7fiH0z6I2YvXDzTmK+dXXsZl//4vPSepvXrv+H49vz6703ebqzozTd8ND43d340ojd5ffn6sdt/rcgX+6fxH9jfvP3viNtH4rGI2BMReyPi8fSmMK/7ExHxZETsXyH+H1956v21x7/CqHwbpfGfXO38x8Lzv/ZEz5kfvl09/v6IKDv/hxupA/maVp7/Wq3geo4dAAAA3Cuy98AnleHb6WR4OHsP/87YWpmemZ177tTMh+dOZu+VH4xapRjpGlgwHjqajw0X+bEl+UP5uPGXPVsa+eGJmenOjHAAZbYta/+VStr+U3/2bHbtgA3Xhnk04B6l/UP30v6hOyWrtv9ax+oCdJ7Xf+hezdr/J6V7D3+zoZUBOqq64AMTQHdpof8/n/0o7xUA9yb3/9C9tH/oSqWfja+s6yP/HU/8m3+f4d1Sn/s/EZW7ohr3f6La8pdZlCVqy9tyPf9nDOmavqa/tdnPTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3xXwAAAP//xprfHQ==")
socket(0x2, 0x80805, 0x0)
r0 = semget$private(0x0, 0x3, 0x480)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000240)=""/166)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
ioctl$SIOCAX25CTLCON(r5, 0x89e8, 0x0)
mlockall(0x7)
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, 0x0)

3m28.818200857s ago: executing program 3 (id=8896):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x10, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000a00)={'comedi_bond\x00', [0x3, 0x80208000, 0x40, 0xfffffffc, 0x0, 0x5, 0x5, 0x4, 0xffe, 0x1, 0x8, 0x800001, 0x8, 0x4, 0x100, 0x6, 0xffffffa7, 0xf0, 0xfffffffd, 0x5, 0x3fb, 0x10000, 0x800, 0xe, 0x9, 0xfffffffe, 0x1af, 0x10003, 0xa, 0x5, 0x5]})

3m28.758566527s ago: executing program 5 (id=8897):
syz_emit_ethernet(0x29a, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

3m28.167193112s ago: executing program 4 (id=8898):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, 0x0)
io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1)

3m28.109978427s ago: executing program 6 (id=8899):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close(0xffffffffffffffff)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffff90b, 0x7, 0x2, 0x0, 0xfffffff7, 0x1, 0x8, 0x1, 0x80000000}}}}]}, 0x58}}, 0x4008000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3m28.10901218s ago: executing program 5 (id=8900):
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00')
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x50c}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

3m27.856853834s ago: executing program 3 (id=8901):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r1 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
ioctl$NBD_SET_SOCK(r1, 0xab03, r0)

3m27.736655162s ago: executing program 3 (id=8902):
syz_open_dev$tty20(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

3m27.571669961s ago: executing program 5 (id=8903):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_setup(0x20, &(0x7f0000001140)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="fc", 0x7}])

3m26.406587757s ago: executing program 4 (id=8904):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@host})
epoll_create(0x7)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='lp\x00', 0x3)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}})

3m26.339056692s ago: executing program 5 (id=8905):
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(0x0)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
gettid()
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0)
write$6lowpan_control(r0, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e)

3m26.150048651s ago: executing program 6 (id=8906):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)

3m25.442571094s ago: executing program 8 (id=8907):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
read$usbfs(0xffffffffffffffff, &(0x7f0000000000)=""/103, 0x67)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0x9, 0x4}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0)

3m25.427064292s ago: executing program 5 (id=8908):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x31, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000200)=""/185, 0xb9, 0x40000002, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0)

2m26.417286103s ago: executing program 44 (id=8904):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@host})
epoll_create(0x7)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='lp\x00', 0x3)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}})

0s ago: executing program 45 (id=8907):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
read$usbfs(0xffffffffffffffff, &(0x7f0000000000)=""/103, 0x67)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0x9, 0x4}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0)

kernel console output (not intermixed with test programs):

[   T10] usb 10-1: config 0 has an invalid interface number: 41 but max is 0
[ 1587.679222][   T10] usb 10-1: config 0 has no interface number 0
[ 1588.001112][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7655'.
[ 1588.172064][   T10] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1588.182566][   T10] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1588.192655][   T10] usb 10-1: config 0 interface 41 has no altsetting 0
[ 1591.043961][   T10] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1591.053317][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1591.163747][   T10] usb 10-1: Product: syz
[ 1591.189099][   T10] usb 10-1: config 0 descriptor??
[ 1591.437675][   T10] usb 10-1: can't set config #0, error -71
[ 1591.488131][   T10] usb 10-1: USB disconnect, device number 16
[ 1591.534356][ T9620] fuse: Bad value for 'group_id'
[ 1591.572852][ T9620] fuse: Bad value for 'group_id'
[ 1592.585995][ T7483] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1592.643663][ T7483] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1593.718605][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1593.733891][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1593.741809][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1593.751194][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1593.759079][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1593.834851][ T9661] netlink: 'syz.3.7668': attribute type 1 has an invalid length.
[ 1593.998589][ T7483] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1594.023301][ T7483] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1594.070935][ T9670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1594.178881][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7672'.
[ 1594.228259][ T7483] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1594.243201][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1594.403228][   T10] usb 3-1: Using ep0 maxpacket: 16
[ 1594.433333][ T7483] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1594.445015][   T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[ 1594.453730][   T10] usb 3-1: config 0 has no interface number 0
[ 1594.460313][   T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1594.470755][   T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1594.481179][   T10] usb 3-1: config 0 interface 41 has no altsetting 0
[ 1594.491451][   T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1594.519263][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1594.538684][ T9682] syzkaller0: entered promiscuous mode
[ 1594.544459][ T9682] syzkaller0: entered allmulticast mode
[ 1594.558467][ T9698] tipc: Resetting bearer <eth:syzkaller0>
[ 1594.588750][   T10] usb 3-1: Product: syz
[ 1594.663156][   T10] usb 3-1: Manufacturer: syz
[ 1594.685140][   T10] usb 3-1: SerialNumber: syz
[ 1594.709999][ T9669] tipc: Resetting bearer <eth:syzkaller0>
[ 1595.094828][   T10] usb 3-1: config 0 descriptor??
[ 1595.100940][ T9681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1595.119692][ T9681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1595.120913][   T24] tipc: Node number set to 2864949646
[ 1595.912040][ T9669] tipc: Disabling bearer <eth:syzkaller0>
[ 1595.939828][ T5426] Bluetooth: hci3: command tx timeout
[ 1596.139857][ T9681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1596.168526][ T7483] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1596.189996][ T9681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1596.217946][ T7483] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1596.275033][ T9716] fuse: Bad value for 'group_id'
[ 1596.281380][ T9716] fuse: Bad value for 'group_id'
[ 1596.404664][ T9719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1596.471148][ T9719] syzkaller0: entered promiscuous mode
[ 1596.479087][ T9719] syzkaller0: entered allmulticast mode
[ 1597.182396][ T9719] tipc: Resetting bearer <eth:syzkaller0>
[ 1597.282173][ T9718] tipc: Resetting bearer <eth:syzkaller0>
[ 1597.295674][   T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32
[ 1597.378235][ T9718] tipc: Disabling bearer <eth:syzkaller0>
[ 1597.594090][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7680'.
[ 1598.060093][ T5426] Bluetooth: hci3: command tx timeout
[ 1598.151559][ T9735] vxcan1: entered allmulticast mode
[ 1598.982827][   T10] usb 3-1: USB disconnect, device number 13
[ 1599.359617][ T9790] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7685'.
[ 1599.872769][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1600.092253][ T5426] Bluetooth: hci3: command tx timeout
[ 1601.001473][ T7483]  (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1601.015342][ T7483]  (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1601.031476][ T7483]  (unregistering): Released all slaves
[ 1601.172248][ T7483] bond1 (unregistering): (slave batadv0): Releasing backup interface
[ 1601.182488][ T7483] bond1 (unregistering): Released all slaves
[ 1601.200512][ T7483] bond2 (unregistering): Released all slaves
[ 1601.218173][ T7483] bond3 (unregistering): Released all slaves
[ 1601.240204][ T7483] bond4 (unregistering): Released all slaves
[ 1601.257510][ T7483] bond5 (unregistering): Released all slaves
[ 1601.281339][ T7483] bond6 (unregistering): Released all slaves
[ 1601.573607][ T7483] : left promiscuous mode
[ 1601.748674][ T9665] chnl_net:caif_netlink_parms(): no params data found
[ 1601.755811][ T6151] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1601.942590][ T6151] usb 4-1: Using ep0 maxpacket: 16
[ 1601.969728][ T6151] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[ 1602.005507][ T6151] usb 4-1: config 0 has no interface number 0
[ 1602.044204][ T7483] tipc: Left network mode
[ 1602.066952][ T6151] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1602.074302][ T9932] block nbd6: Dead connection, failed to find a fallback
[ 1602.097271][ T6151] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1602.123713][ T9932] block nbd6: shutting down sockets
[ 1602.175563][ T6151] usb 4-1: config 0 interface 41 has no altsetting 0
[ 1602.184691][ T5426] Bluetooth: hci3: command tx timeout
[ 1602.201485][ T9932] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1602.378678][ T6151] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1602.628867][ T9932] buffer_io_error: 548 callbacks suppressed
[ 1602.628890][ T9932] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1602.667680][ T6151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1602.711706][ T6151] usb 4-1: Product: syz
[ 1602.715952][ T6151] usb 4-1: Manufacturer: syz
[ 1602.764195][ T9945] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7701'.
[ 1602.774066][ T9932] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1602.782649][ T6151] usb 4-1: SerialNumber: syz
[ 1602.804893][ T6151] usb 4-1: config 0 descriptor??
[ 1602.812329][ T9901] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1602.853251][ T9901] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1602.863225][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7701'.
[ 1602.891522][ T9932] Buffer I/O error on dev nbd6, logical block 1, async page read
[ 1603.005711][ T9932] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1603.098551][ T9932] Buffer I/O error on dev nbd6, logical block 2, async page read
[ 1603.201078][ T9932] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1603.323187][ T9932] Buffer I/O error on dev nbd6, logical block 3, async page read
[ 1603.377793][ T9901] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1603.386699][ T9901] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1603.494875][ T9932] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1603.603159][ T9932] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1603.715059][ T9932] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1603.768726][ T9932] Buffer I/O error on dev nbd6, logical block 1, async page read
[ 1603.780437][ T6151] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -32
[ 1603.835035][ T9932] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1603.882774][ T9932] Buffer I/O error on dev nbd6, logical block 2, async page read
[ 1603.890853][ T9932] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1603.992444][ T9932] Buffer I/O error on dev nbd6, logical block 3, async page read
[ 1604.031686][ T9932] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1604.043501][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7705'.
[ 1604.070685][ T9932] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1604.082682][ T9665] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1604.095734][ T9665] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1604.115715][ T9665] bridge_slave_0: entered allmulticast mode
[ 1604.122180][ T9932] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1604.150023][ T9665] bridge_slave_0: entered promiscuous mode
[ 1604.173883][ T9932] Buffer I/O error on dev nbd6, logical block 1, async page read
[ 1604.186383][ T9665] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1604.213708][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1604.236561][ T9665] bridge_slave_1: entered allmulticast mode
[ 1604.248648][ T9932] ldm_validate_partition_table(): Disk read failed.
[ 1604.264297][ T9665] bridge_slave_1: entered promiscuous mode
[ 1604.285228][ T9932] Dev nbd6: unable to read RDB block 0
[ 1604.357280][ T7483] hsr_slave_0: left promiscuous mode
[ 1604.376108][ T9932]  nbd6: unable to read partition table
[ 1604.386884][ T7483] hsr_slave_1: left promiscuous mode
[ 1604.417623][ T7483] veth1_vlan: left promiscuous mode
[ 1604.465424][ T9943] ldm_validate_partition_table(): Disk read failed.
[ 1604.538541][ T9943] Dev nbd6: unable to read RDB block 0
[ 1604.636138][ T9943]  nbd6: unable to read partition table
[ 1605.188189][   T10] usb 4-1: USB disconnect, device number 24
[ 1605.194023][T10014] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7708'.
[ 1605.940889][ T7483] team0 (unregistering): Port device team_slave_1 removed
[ 1606.014073][ T7483] team0 (unregistering): Port device team_slave_0 removed
[ 1606.506463][ T7483] team0 (unregistering): Port device dummy0 removed
[ 1606.655295][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1606.837638][ T9665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1606.907929][ T9665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1607.299316][ T9665] team0: Port device team_slave_0 added
[ 1607.375294][ T9665] team0: Port device team_slave_1 added
[ 1608.188024][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1608.220672][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1608.282131][ T9665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1608.295588][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1608.302633][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1608.328879][ T9665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1609.267611][ T9665] hsr_slave_0: entered promiscuous mode
[ 1610.092680][ T9665] hsr_slave_1: entered promiscuous mode
[ 1610.099364][ T9665] debugfs: 'hsr0' already exists in 'hsr'
[ 1610.156076][ T9665] Cannot create hsr debugfs directory
[ 1610.281584][ T7483] IPVS: stop unused estimator thread 0...
[ 1611.081463][T10075] syz.6.7714 (10075): drop_caches: 2
[ 1611.289797][T10242] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7725'.
[ 1612.109291][T10259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7727'.
[ 1615.424184][ T9665] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1615.566290][T10286] netlink: 'syz.2.7733': attribute type 4 has an invalid length.
[ 1615.574655][T10286] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7733'.
[ 1615.729675][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7733'.
[ 1616.128268][ T9665] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1616.240059][ T9665] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1616.408984][ T9665] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1616.918548][ T9665] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1617.248988][ T9665] 8021q: adding VLAN 0 to HW filter on device team0
[ 1617.309708][ T3847] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1617.361165][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1617.368321][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1617.424223][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1617.431528][ T7478] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1617.480730][ T3847] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1617.506163][ T3847] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[ 1617.519213][   T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1617.564493][ T3847] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11
[ 1617.589871][ T3847] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1617.622433][ T3847] usb 10-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[ 1617.635718][ T3847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1617.654192][ T3847] usb 10-1: Product: syz
[ 1617.684994][ T3847] usb 10-1: Manufacturer: syz
[ 1617.700143][   T10] usb 4-1: Using ep0 maxpacket: 32
[ 1617.702308][ T3847] usb 10-1: SerialNumber: syz
[ 1617.722236][   T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1617.723049][ T3847] usb 10-1: config 0 descriptor??
[ 1617.764979][   T10] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1617.790860][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1617.819081][   T10] usb 4-1: Product: syz
[ 1617.831478][   T10] usb 4-1: Manufacturer: syz
[ 1617.843560][   T10] usb 4-1: SerialNumber: syz
[ 1617.866083][   T10] usb 4-1: config 0 descriptor??
[ 1617.975229][   T10] usb 10-1: USB disconnect, device number 17
[ 1618.227865][ T9665] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1618.396415][T10267] syz.6.7730 (10267): drop_caches: 2
[ 1618.789656][ T5066] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1619.102578][ T5066] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[ 1619.223544][ T5066] usb 3-1: config 0 has no interface number 0
[ 1619.230895][ T5066] usb 3-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30
[ 1619.246021][ T5066] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1619.257223][ T5066] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1619.319202][ T5066] usb 3-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[ 1619.422006][ T9665] veth0_vlan: entered promiscuous mode
[ 1619.492561][ T9665] veth1_vlan: entered promiscuous mode
[ 1619.669184][ T9665] veth0_macvtap: entered promiscuous mode
[ 1619.697711][ T5066] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[ 1619.713237][ T5066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1619.726156][ T5066] usb 3-1: config 0 descriptor??
[ 1619.754755][ T9665] veth1_macvtap: entered promiscuous mode
[ 1619.833141][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1619.846321][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1619.862713][ T7480] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1619.888201][ T7480] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1620.130366][T10415] netlink: 'syz.6.7750': attribute type 4 has an invalid length.
[ 1620.138501][T10415] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7750'.
[ 1620.244006][ T7480] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1620.336155][   T10] usb 4-1: USB disconnect, device number 25
[ 1620.352664][ T5066] usbhid 3-1:0.2: can't add hid device: -71
[ 1620.364490][ T5066] usbhid 3-1:0.2: probe with driver usbhid failed with error -71
[ 1620.369891][ T7480] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1620.429783][ T5066] usb 3-1: USB disconnect, device number 14
[ 1620.536647][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7750'.
[ 1620.742999][T10415] : renamed from bond0 (while UP)
[ 1621.177780][T25374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1621.230446][T25374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1621.347275][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1621.381346][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1625.394026][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7776'.
[ 1625.518211][T10522] bridge_slave_1: left allmulticast mode
[ 1625.558542][T10522] bridge_slave_1: left promiscuous mode
[ 1625.608336][T10522] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1625.843838][T10522] bridge_slave_0: left allmulticast mode
[ 1625.954078][T10522] bridge_slave_0: left promiscuous mode
[ 1626.074059][T10522] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1627.958599][T10558] netlink: 'syz.2.7788': attribute type 10 has an invalid length.
[ 1627.997182][T10559] vxcan1: entered allmulticast mode
[ 1629.387474][ T6151] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1629.557229][ T6151] usb 3-1: Using ep0 maxpacket: 16
[ 1629.596842][ T6151] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1629.618355][ T6151] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1630.255457][T10538] overlayfs: failed to resolve './file0': -2
[ 1630.362112][ T6151] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1630.374615][ T6151] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1630.389048][ T6151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1630.397328][ T6151] usb 3-1: Product: syz
[ 1630.401542][ T6151] usb 3-1: Manufacturer: syz
[ 1630.406182][ T6151] usb 3-1: SerialNumber: syz
[ 1630.799183][   T30] audit: type=1800 audit(1753985340.641:3587): pid=10604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7803" name="file1" dev="tmpfs" ino=402 res=0 errno=0
[ 1631.337305][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1631.424778][ T6151] usb 3-1: 0:2 : does not exist
[ 1631.472204][ T6151] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1)
[ 1631.596778][   T10] usb 5-1: Using ep0 maxpacket: 16
[ 1631.612659][ T6151] usb 3-1: USB disconnect, device number 15
[ 1631.636131][   T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[ 1631.660794][   T10] usb 5-1: config 0 has no interface number 0
[ 1631.686314][   T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1631.713866][   T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1631.735009][   T10] usb 5-1: config 0 interface 41 has no altsetting 0
[ 1631.750433][   T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1631.777094][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1631.796274][   T10] usb 5-1: Product: syz
[ 1631.806234][   T10] usb 5-1: Manufacturer: syz
[ 1631.816354][   T10] usb 5-1: SerialNumber: syz
[ 1631.837784][   T10] usb 5-1: config 0 descriptor??
[ 1631.844988][T10599] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1631.853130][T10599] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1632.094301][T10599] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1632.106784][T10599] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1632.564755][   T10] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22
[ 1633.549781][T10662] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7813'.
[ 1633.583052][T10634] vlan2: entered promiscuous mode
[ 1633.593586][T10634] vlan2: entered allmulticast mode
[ 1633.598991][T10634] hsr_slave_1: entered allmulticast mode
[ 1633.718585][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7807'.
[ 1633.961517][ T5066] usb 5-1: USB disconnect, device number 16
[ 1634.346377][   T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1634.516717][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1634.529470][   T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1634.543401][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7821'.
[ 1634.558179][   T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1634.578019][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1634.591019][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1634.603917][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1634.619955][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1634.634438][   T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1634.650022][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1634.670070][   T10] usb 3-1: config 0 descriptor??
[ 1634.894209][   T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1635.670672][ T6151] usb 3-1: USB disconnect, device number 16
[ 1635.702283][ T6151] usblp0: removed
[ 1635.754400][T10727] dvmrp0: entered allmulticast mode
[ 1636.127179][T10744] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7828'.
[ 1637.516358][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7837'.
[ 1637.636433][T10780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7841'.
[ 1638.984964][T10799] netlink: 'syz.8.7846': attribute type 10 has an invalid length.
[ 1639.008263][T10796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1639.033403][T10796] syzkaller0: entered promiscuous mode
[ 1639.042083][T10796] syzkaller0: entered allmulticast mode
[ 1639.102826][T10807] netlink: 'syz.6.7848': attribute type 10 has an invalid length.
[ 1639.129531][T10799] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1639.149704][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1639.163471][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1639.194383][T10807] batman_adv: batadv0: Adding interface: netdevsim0
[ 1639.204509][T10807] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1639.237152][T10807] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[ 1639.256360][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7850'.
[ 1640.140418][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7850'.
[ 1640.203559][T10796] tipc: Resetting bearer <eth:syzkaller0>
[ 1640.337946][T10795] tipc: Resetting bearer <eth:syzkaller0>
[ 1640.422886][T10795] tipc: Disabling bearer <eth:syzkaller0>
[ 1640.748227][T10936] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7856'.
[ 1643.385106][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7866'.
[ 1643.563974][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7866'.
[ 1643.846290][T11033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1643.858051][T11033] syzkaller0: entered promiscuous mode
[ 1643.863579][T11033] syzkaller0: entered allmulticast mode
[ 1643.929796][T11033] tipc: Resetting bearer <eth:syzkaller0>
[ 1643.981280][T11032] tipc: Resetting bearer <eth:syzkaller0>
[ 1644.062429][T11032] tipc: Disabling bearer <eth:syzkaller0>
[ 1644.283686][T11047] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7871'.
[ 1644.834191][ T6151] IPVS: starting estimator thread 0...
[ 1645.077989][T11063] IPVS: using max 23 ests per chain, 55200 per kthread
[ 1647.026373][T11092] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7885'.
[ 1647.045410][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7886'.
[ 1647.084281][T15671] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1647.265556][T15671] usb 4-1: Using ep0 maxpacket: 32
[ 1647.282528][T15671] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1647.324243][T15671] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1647.332884][T15671] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1647.393656][T15671] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1647.403505][T15671] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1647.414263][T15671] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1647.534499][    T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1647.658585][T15671] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1647.668002][T15671] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1647.702001][T11114] overlayfs: missing 'workdir'
[ 1647.727719][    T9] usb 10-1: Using ep0 maxpacket: 16
[ 1647.824216][    T9] usb 10-1: config 0 has an invalid interface number: 41 but max is 0
[ 1647.824931][T15671] usb 4-1: config 0 descriptor??
[ 1647.838654][    T9] usb 10-1: config 0 has no interface number 0
[ 1647.849182][    T9] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1647.956245][    T9] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1648.098168][    T9] usb 10-1: config 0 interface 41 has no altsetting 0
[ 1648.344115][    T9] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1648.547786][T15671] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1648.564026][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1648.572307][    T9] usb 10-1: Product: syz
[ 1648.585075][    T9] usb 10-1: Manufacturer: syz
[ 1648.590031][    T9] usb 10-1: SerialNumber: syz
[ 1648.621305][    T9] usb 10-1: config 0 descriptor??
[ 1648.634903][T11104] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1648.643030][T11104] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1648.644829][T15671] usb 4-1: USB disconnect, device number 26
[ 1648.700582][T15671] usblp0: removed
[ 1648.839374][T11142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7897'.
[ 1648.906094][T11104] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1648.938696][T11104] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1649.031942][T11090] fuse: Bad value for 'fd'
[ 1649.369428][    T9] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -22
[ 1649.385100][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7900'.
[ 1649.793935][T11157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7902'.
[ 1650.056956][T11164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7903'.
[ 1650.634055][ T5066] usb 10-1: USB disconnect, device number 18
[ 1651.021489][T11191] overlayfs: missing 'workdir'
[ 1651.190343][ T5066] IPVS: starting estimator thread 0...
[ 1651.454030][T11193] IPVS: using max 23 ests per chain, 55200 per kthread
[ 1652.149278][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7914'.
[ 1652.250259][T11211] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7913'.
[ 1652.303193][T11211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7913'.
[ 1652.312153][T11211] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7913'.
[ 1652.386939][T11211] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7913'.
[ 1652.407534][T11214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7915'.
[ 1653.423368][T11236] overlayfs: failed to resolve './file0': -2
[ 1654.028552][T11239] netlink: 'syz.4.7923': attribute type 4 has an invalid length.
[ 1654.036347][T11239] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7923'.
[ 1655.525790][T11268] __nla_validate_parse: 1 callbacks suppressed
[ 1655.525835][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7932'.
[ 1656.640780][T11281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1656.678576][T11281] syzkaller0: entered promiscuous mode
[ 1656.712949][T11281] syzkaller0: entered allmulticast mode
[ 1656.860939][T11281] tipc: Resetting bearer <eth:syzkaller0>
[ 1657.076306][T11280] tipc: Resetting bearer <eth:syzkaller0>
[ 1657.136401][T11280] tipc: Disabling bearer <eth:syzkaller0>
[ 1657.723780][    T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1657.907807][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1657.939336][    T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1657.971539][    T9] usb 7-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[ 1658.018304][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1658.074545][    T9] usb 7-1: config 0 descriptor??
[ 1658.293494][    T9] usb 7-1: USB disconnect, device number 13
[ 1658.489099][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7947'.
[ 1659.496974][T11333] netem: change failed
[ 1660.999829][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7962'.
[ 1661.802329][ T5066] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1661.869181][T11383] netlink: 'syz.8.7967': attribute type 10 has an invalid length.
[ 1661.917519][T11383] batman_adv: batadv0: Adding interface: netdevsim0
[ 1661.925210][T11383] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1661.961065][T11383] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[ 1662.003791][ T5066] usb 4-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[ 1662.024484][ T5066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1662.072689][ T5066] usb 4-1: config 0 descriptor??
[ 1662.106997][ T5066] usb-storage 4-1:0.0: USB Mass Storage device detected
[ 1662.312628][ T5066] usb 4-1: USB disconnect, device number 27
[ 1662.885637][T11419] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7976'.
[ 1663.138520][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7978'.
[ 1665.244006][T11454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7982'.
[ 1665.531222][T11453] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1665.556534][T11453] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1665.599878][T11453] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1665.648070][T11453] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1665.722037][T11453] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1666.001482][T11484] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7990'.
[ 1666.011608][T15671] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1666.196874][T15671] usb 3-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[ 1666.214888][T15671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1666.251965][T15671] usb 3-1: config 0 descriptor??
[ 1666.272070][T15671] usb-storage 3-1:0.0: USB Mass Storage device detected
[ 1666.474278][T15671] usb 3-1: USB disconnect, device number 17
[ 1667.600749][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1667.601261][ T5426] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1667.606951][   T51] Bluetooth: hci5: command 0x0405 tx timeout
[ 1668.083833][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.096804][T11565] random: crng reseeded on system resumption
[ 1668.390577][ T5066] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1668.568378][ T5066] usb 5-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[ 1668.617988][ T5066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1668.717286][ T5066] usb 5-1: config 0 descriptor??
[ 1668.773964][ T5066] usb-storage 5-1:0.0: USB Mass Storage device detected
[ 1669.174244][ T5066] usb 5-1: USB disconnect, device number 17
[ 1669.690573][ T5426] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1670.672391][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8025'.
[ 1671.811448][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8031'.
[ 1671.825413][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1672.897353][T11655] : (slave bond_slave_0): Releasing backup interface
[ 1673.748295][T11655] : (slave bond_slave_1): Releasing backup interface
[ 1673.839945][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1673.940186][T11655] team0: Port device team_slave_0 removed
[ 1674.084781][T11655] team0: Port device team_slave_1 removed
[ 1674.230360][T11655] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1674.305342][T11655] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1674.372121][T11655] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1674.412948][T11655] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1674.599075][T11656] team0: Mode changed to "broadcast"
[ 1674.660896][T11661] tipc: Started in network mode
[ 1674.693539][T11661] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[ 1674.715218][T11661] tipc: Enabled bearer <eth:team0>, priority 0
[ 1675.004309][T11678] usb usb7: usbfs: process 11678 (syz.6.8042) did not claim interface 0 before use
[ 1675.024069][T11676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1675.048501][T11676] syzkaller0: entered promiscuous mode
[ 1675.056812][T11676] syzkaller0: entered allmulticast mode
[ 1675.209681][T11681] tipc: Resetting bearer <eth:syzkaller0>
[ 1675.217335][T11684] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8044'.
[ 1675.429006][T11675] tipc: Resetting bearer <eth:syzkaller0>
[ 1675.607839][T11675] tipc: Disabling bearer <eth:syzkaller0>
[ 1675.768018][T11702] netlink: 'syz.6.8050': attribute type 10 has an invalid length.
[ 1675.829350][   T10] tipc: Node number set to 11578026
[ 1684.253556][   T30] audit: type=1800 audit(1753985394.110:3588): pid=11799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.8066" name="bus" dev="tmpfs" ino=3076 res=0 errno=0
[ 1684.289093][T11822] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1684.315739][T11822] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1684.346177][T11822] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1684.354303][T11822] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1685.687131][T11857] vlan0: entered promiscuous mode
[ 1685.719335][T11857] dummy0: entered promiscuous mode
[ 1685.724727][T11857] vlan0: entered allmulticast mode
[ 1685.770454][T11857] dummy0: entered allmulticast mode
[ 1686.317702][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1686.323857][ T5846] Bluetooth: hci5: command 0x0405 tx timeout
[ 1686.699957][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1686.896969][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8089'.
[ 1687.617044][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8091'.
[ 1688.792133][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1690.100882][T11893] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1690.117550][T11893] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1690.167171][T11893] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1691.527874][ T5846] Bluetooth: hci5: command 0x0405 tx timeout
[ 1691.943018][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8107'.
[ 1692.156834][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1692.240456][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1693.491345][T11997] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8113'.
[ 1693.659560][T12009] wg2: entered allmulticast mode
[ 1693.803553][T12003] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1693.900987][T12003] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1694.406220][T12003] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1695.034629][T12022] syzkaller0: entered promiscuous mode
[ 1695.071604][T12022] syzkaller0: entered allmulticast mode
[ 1695.514041][ T8663] IPVS: starting estimator thread 0...
[ 1695.596535][ T5846] Bluetooth: hci5: command 0x0405 tx timeout
[ 1695.636034][T12050] IPVS: using max 33 ests per chain, 79200 per kthread
[ 1696.126070][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1696.228390][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8126'.
[ 1696.595794][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1696.808353][T12070] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8128'.
[ 1697.529136][T12088] bond0: (slave veth5): Enslaving as an active interface with an up link
[ 1698.787103][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8144'.
[ 1698.877200][ T5426] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1698.895881][ T5426] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1698.903879][ T5426] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1698.912926][ T5426] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1698.922376][ T5426] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1699.009256][T12182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8146'.
[ 1699.203994][T12172] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8146'.
[ 1701.035020][ T5846] Bluetooth: hci6: command tx timeout
[ 1702.917477][T12374] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8158'.
[ 1703.050423][T12164] chnl_net:caif_netlink_parms(): no params data found
[ 1703.119659][ T5846] Bluetooth: hci6: command tx timeout
[ 1703.559493][T12164] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1703.583862][T12164] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1703.594961][T12164] bridge_slave_0: entered allmulticast mode
[ 1703.604794][T12164] bridge_slave_0: entered promiscuous mode
[ 1703.613579][T12164] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1703.631084][T12164] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1703.651820][T12164] bridge_slave_1: entered allmulticast mode
[ 1703.679055][T12164] bridge_slave_1: entered promiscuous mode
[ 1703.848546][T12164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1703.887993][T12164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1704.202276][T12164] team0: Port device team_slave_0 added
[ 1704.247717][T12164] team0: Port device team_slave_1 added
[ 1704.481606][T12164] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1704.500178][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1704.528240][T12164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1704.541859][T12164] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1704.549917][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1704.619806][T12164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1704.879729][T12164] hsr_slave_0: entered promiscuous mode
[ 1704.912095][T12164] hsr_slave_1: entered promiscuous mode
[ 1704.940281][T12164] debugfs: 'hsr0' already exists in 'hsr'
[ 1704.959480][T12164] Cannot create hsr debugfs directory
[ 1705.222014][ T5426] Bluetooth: hci6: command tx timeout
[ 1706.307453][T12625] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8179'.
[ 1706.753764][   T30] audit: type=1800 audit(1753985416.614:3589): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8165" name="bus" dev="tmpfs" ino=767 res=0 errno=0
[ 1706.815023][T12640] netlink: 'syz.4.8182': attribute type 4 has an invalid length.
[ 1706.841046][T12640] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8182'.
[ 1706.942828][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8182'.
[ 1707.276844][ T5846] Bluetooth: hci6: command tx timeout
[ 1707.487170][T12164] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1707.759405][T12164] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1708.481892][T12164] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1709.797083][T12700] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[ 1710.565269][T12719] tipc: Started in network mode
[ 1710.608126][T12719] tipc: Node identity 080211000001, cluster identity 4711
[ 1710.694579][T12719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1710.796173][T12719] tipc: Resetting bearer <eth:syzkaller0>
[ 1711.112126][T12164] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1711.176006][T12164] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1711.208341][T12164] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1711.238909][T12164] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1712.112655][T25378] tipc: Node number set to 134418688
[ 1712.192393][T12768] binder: BINDER_SET_CONTEXT_MGR already set
[ 1712.208974][T12768] binder: 12767:12768 ioctl 4018620d 2000000002c0 returned -16
[ 1712.419461][T12164] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1712.451565][T12164] 8021q: adding VLAN 0 to HW filter on device team0
[ 1712.537971][T10852] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1712.545221][T10852] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1712.632415][T10875] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1712.639702][T10875] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1713.050545][   T30] audit: type=1800 audit(1753985422.915:3590): pid=12713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8198" name="bus" dev="tmpfs" ino=1536 res=0 errno=0
[ 1713.123174][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8215'.
[ 1713.397772][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8218'.
[ 1715.061181][T12164] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1716.502753][T12859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8232'.
[ 1716.577319][T12869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8232'.
[ 1717.326367][T12164] veth0_vlan: entered promiscuous mode
[ 1717.407254][T12164] veth1_vlan: entered promiscuous mode
[ 1717.588621][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8236'.
[ 1717.597906][T12164] veth0_macvtap: entered promiscuous mode
[ 1717.609392][T12164] veth1_macvtap: entered promiscuous mode
[ 1717.830587][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8237'.
[ 1718.036063][T12164] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1718.073525][T12164] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1718.082267][ T3847] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1718.167215][T25374] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1718.241888][T10875] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1718.292580][T10875] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1718.341407][T10875] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1718.564250][T25374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1718.611118][T25374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1718.671411][T25374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1718.682539][ T3847] usb 7-1: Using ep0 maxpacket: 16
[ 1718.690459][ T3847] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[ 1718.708754][ T3847] usb 7-1: config 0 has no interface number 0
[ 1718.719187][ T3847] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1718.739384][ T3847] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1718.752167][T25374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1718.779778][ T3847] usb 7-1: config 0 interface 41 has no altsetting 0
[ 1718.792374][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8248'.
[ 1718.830149][ T3847] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1718.847434][ T3847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1718.855655][ T3847] usb 7-1: Product: syz
[ 1718.859818][ T3847] usb 7-1: Manufacturer: syz
[ 1718.865119][ T3847] usb 7-1: SerialNumber: syz
[ 1718.877013][ T3847] usb 7-1: config 0 descriptor??
[ 1718.882942][T12897] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1718.887990][T12944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8248'.
[ 1718.890194][T12897] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1718.953558][T12954] Bluetooth: MGMT ver 1.23
[ 1719.108067][T12897] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1719.128841][T12897] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1719.428831][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8256'.
[ 1719.533732][T12986] bridge_slave_1: left allmulticast mode
[ 1719.546088][T12986] bridge_slave_1: left promiscuous mode
[ 1719.558113][T12986] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1719.562822][ T3847] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22
[ 1719.580400][T12986] bridge_slave_0: left allmulticast mode
[ 1719.589941][T12986] bridge_slave_0: left promiscuous mode
[ 1719.596783][T12986] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1719.611892][T25378] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[ 1719.808958][T25378] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1719.834985][T25378] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1719.897132][T25378] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1719.929033][T25378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1720.058447][T13010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8265'.
[ 1720.073695][T13013] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8262'.
[ 1720.147258][T13022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8265'.
[ 1720.194352][T25378] usb 3-1: usb_control_msg returned -32
[ 1720.199978][T25378] usbtmc 3-1:16.0: can't read capabilities
[ 1720.498888][T13007] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8262'.
[ 1720.957726][ T6151] usb 7-1: USB disconnect, device number 14
[ 1721.601494][ T6151] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1721.821574][ T6151] usb 5-1: Using ep0 maxpacket: 32
[ 1722.190040][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8280'.
[ 1722.925333][ T6151] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1722.941274][ T6151] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1722.950713][ T6151] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1722.964521][ T6151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1722.974364][ T6151] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1722.991432][ T6151] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1723.005019][ T6151] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1723.016269][ T6151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1723.034204][ T6151] usb 5-1: config 0 descriptor??
[ 1723.090049][ T8663] usb 3-1: USB disconnect, device number 18
[ 1723.368856][ T6151] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1723.611181][T25378] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1723.704246][ T3847] usb 5-1: USB disconnect, device number 18
[ 1723.896308][ T3847] usblp0: removed
[ 1724.049539][T25378] usb 10-1: Using ep0 maxpacket: 16
[ 1724.065090][T25378] usb 10-1: config 0 has an invalid interface number: 41 but max is 0
[ 1724.091373][T25378] usb 10-1: config 0 has no interface number 0
[ 1724.138747][T25378] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1724.186783][T25378] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1724.234522][T25378] usb 10-1: config 0 interface 41 has no altsetting 0
[ 1724.305416][T25378] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1724.344403][T25378] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1724.365829][T25378] usb 10-1: Product: syz
[ 1724.370124][T25378] usb 10-1: Manufacturer: syz
[ 1724.410029][T25378] usb 10-1: SerialNumber: syz
[ 1724.494188][T25378] usb 10-1: config 0 descriptor??
[ 1724.526680][T13096] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1724.568943][T13096] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1724.902721][T13096] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1724.932647][T13096] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1725.396126][T25378] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -22
[ 1726.045259][T13170] macsec0: entered promiscuous mode
[ 1726.457446][T13170] macsec0: entered allmulticast mode
[ 1726.656472][ T6151] usb 10-1: USB disconnect, device number 19
[ 1726.705332][T13170] veth1_macvtap: entered allmulticast mode
[ 1726.871991][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8303'.
[ 1727.370699][   T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1727.480754][ T5066] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1727.520597][   T10] usb 7-1: Using ep0 maxpacket: 32
[ 1727.533447][   T10] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1727.563144][   T10] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1727.577191][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1727.616954][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1727.656198][   T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1727.968626][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1727.983116][   T10] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1727.994451][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1728.005736][ T5066] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1728.031636][   T10] usb 7-1: config 0 descriptor??
[ 1728.040280][ T5066] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1728.087843][ T5066] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1728.133124][ T5066] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1728.172386][ T5066] usb 10-1: config 0 descriptor??
[ 1728.194296][ T5066] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1728.334153][   T10] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1728.831494][   T10] usb 7-1: USB disconnect, device number 15
[ 1728.851740][   T10] usblp0: removed
[ 1729.010907][T13268] trusted_key: encrypted_key: insufficient parameters specified
[ 1729.500985][T13280] netlink: 'syz.6.8313': attribute type 10 has an invalid length.
[ 1729.515077][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1729.675924][T13280] : (slave dummy0): Enslaving as an active interface with an up link
[ 1731.113764][T13311] comedi comedi3: Cannot bond this driver to itself!
[ 1731.542938][T15671] usb 10-1: USB disconnect, device number 20
[ 1731.803852][   T30] audit: type=1800 audit(1753985441.668:3591): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8327" name="nullb0" dev="tmpfs" ino=3090 res=0 errno=0
[ 1731.840049][ T5066] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1731.942875][T13332] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1732.029736][T13332] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[ 1732.049761][ T5066] usb 5-1: Using ep0 maxpacket: 32
[ 1732.063902][ T5066] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1732.100017][ T5066] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1732.110170][T13332] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[ 1732.119884][ T5066] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1732.155875][ T5066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1732.176640][ T5066] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1732.200096][ T5066] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1732.228819][ T5066] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1732.251596][ T5066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1732.279167][ T5066] usb 5-1: config 0 descriptor??
[ 1732.513821][ T5066] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1733.097615][ T5066] usb 5-1: USB disconnect, device number 19
[ 1733.113857][ T5066] usblp0: removed
[ 1736.609450][ T5066] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1736.845581][ T5066] usb 5-1: config 0 has no interfaces?
[ 1736.924119][ T5066] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1736.967715][ T5066] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1737.020500][ T5066] usb 5-1: Manufacturer: syz
[ 1737.040116][ T5066] usb 5-1: config 0 descriptor??
[ 1737.279102][ T8663] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1737.363251][ T1094] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1737.439073][ T8663] usb 10-1: Using ep0 maxpacket: 16
[ 1737.458150][ T8663] usb 10-1: config 0 has an invalid interface number: 41 but max is 0
[ 1737.476718][ T8663] usb 10-1: config 0 has no interface number 0
[ 1737.487279][ T1094] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1737.488795][ T8663] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1737.512557][ T8663] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1737.542549][ T8663] usb 10-1: config 0 interface 41 has no altsetting 0
[ 1737.570606][ T5426] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1737.603569][ T5426] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1737.614442][ T5426] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1737.623008][ T5426] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1737.633314][ T5426] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1737.670910][ T1094] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1737.717433][T13415] tipc: Started in network mode
[ 1737.723028][T13415] tipc: Node identity 7, cluster identity 4711
[ 1737.733208][T13415] tipc: Node number set to 7
[ 1737.802508][ T8663] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1737.811696][ T8663] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1737.820277][ T8663] usb 10-1: Product: syz
[ 1737.824530][ T8663] usb 10-1: Manufacturer: syz
[ 1737.829338][ T8663] usb 10-1: SerialNumber: syz
[ 1737.848762][T15671] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1737.865078][ T8663] usb 10-1: config 0 descriptor??
[ 1737.961856][T13396] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1737.979684][T13396] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1738.029035][T15671] usb 7-1: Using ep0 maxpacket: 32
[ 1738.060244][T15671] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1738.071447][T15671] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1738.080742][T15671] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1738.174619][T15671] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1738.184623][T15671] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1738.194425][T15671] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1738.213935][T13396] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1738.221500][T13396] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1738.228902][T15671] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1738.238379][T15671] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1738.277530][T15671] usb 7-1: config 0 descriptor??
[ 1738.345619][ T1094] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1738.507130][T15671] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1738.700795][T15671] usb 7-1: USB disconnect, device number 16
[ 1738.724388][T15671] usblp0: removed
[ 1738.821159][T13411] chnl_net:caif_netlink_parms(): no params data found
[ 1738.849882][ T8663] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1739.385302][T15671] usb 5-1: USB disconnect, device number 20
[ 1739.751194][ T5846] Bluetooth: hci2: command tx timeout
[ 1741.098382][ T8663] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1741.120353][ T8663] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71
[ 1741.141196][ T8663] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71
[ 1741.211361][ T8663] usb 10-1: USB disconnect, device number 21
[ 1741.680939][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8359'.
[ 1741.811775][ T1094]  (unregistering): Released all slaves
[ 1741.828845][ T5846] Bluetooth: hci2: command tx timeout
[ 1741.872357][ T1094] bond0 (unregistering): (slave veth5): Releasing backup interface
[ 1741.891109][ T1094] bond0 (unregistering): Released all slaves
[ 1741.928773][ T1094] bond1 (unregistering): Released all slaves
[ 1741.985790][ T1094] bond2 (unregistering): Released all slaves
[ 1742.007544][ T5426] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1742.026031][ T5426] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1742.043357][ T5426] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1742.060496][ T5426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1742.077794][ T5426] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1742.901147][ T7521] syz_tun (unregistering): left allmulticast mode
[ 1742.945986][ T1094] tipc: Disabling bearer <eth:team0>
[ 1742.969832][ T1094] tipc: Left network mode
[ 1743.286586][T13411] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1743.294030][T13411] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1743.311542][T13411] bridge_slave_0: entered allmulticast mode
[ 1743.323459][T13411] bridge_slave_0: entered promiscuous mode
[ 1743.414995][T13411] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1743.428771][T13411] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1743.436195][T13411] bridge_slave_1: entered allmulticast mode
[ 1743.574849][T13411] bridge_slave_1: entered promiscuous mode
[ 1743.910337][ T5426] Bluetooth: hci2: command tx timeout
[ 1744.335977][ T5426] Bluetooth: hci1: command tx timeout
[ 1744.367181][T13688] syz_tun: entered allmulticast mode
[ 1744.374423][T13686] syz_tun: left allmulticast mode
[ 1744.436978][T13692] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[ 1744.443945][T13692] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1744.455276][T13692] vhci_hcd vhci_hcd.0: Device attached
[ 1744.513836][T13411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1744.528125][ T5066] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1744.633117][T13411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1744.648136][    T9] vhci_hcd: vhci_device speed not set
[ 1744.719069][ T5066] usb 10-1: Using ep0 maxpacket: 16
[ 1744.724619][    T9] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[ 1744.782655][ T5066] usb 10-1: config 0 has an invalid interface number: 41 but max is 0
[ 1744.831019][ T5066] usb 10-1: config 0 has no interface number 0
[ 1744.906988][ T5066] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1744.980689][ T5066] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1745.003604][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8372'.
[ 1745.067917][T13714] vhci_hcd: connection reset by peer
[ 1745.092719][ T5066] usb 10-1: config 0 interface 41 has no altsetting 0
[ 1745.113959][T10852] vhci_hcd: stop threads
[ 1745.141545][ T5066] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1745.154759][T10852] vhci_hcd: release socket
[ 1745.176393][T10852] vhci_hcd: disconnect device
[ 1745.181864][ T5066] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1745.205349][ T5066] usb 10-1: Product: syz
[ 1745.211993][ T5066] usb 10-1: Manufacturer: syz
[ 1745.217982][ T5066] usb 10-1: SerialNumber: syz
[ 1745.249959][T13411] team0: Port device team_slave_0 added
[ 1745.258428][ T5066] usb 10-1: config 0 descriptor??
[ 1745.275641][T13703] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1745.298530][ T1094] hsr_slave_0: left promiscuous mode
[ 1745.306139][T13703] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1745.345788][ T1094] hsr_slave_1: left promiscuous mode
[ 1745.462529][ T1094] veth1_macvtap: left allmulticast mode
[ 1745.474966][ T1094] veth1_macvtap: left promiscuous mode
[ 1745.488842][ T1094] veth0_macvtap: left promiscuous mode
[ 1745.500744][ T1094] veth1_vlan: left promiscuous mode
[ 1745.516300][ T1094] veth0_vlan: left promiscuous mode
[ 1745.541683][T13703] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1745.574466][T13703] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1745.987615][ T5426] Bluetooth: hci2: command tx timeout
[ 1746.202385][ T5066] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1746.203820][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1746.398921][ T5426] Bluetooth: hci1: command tx timeout
[ 1747.480920][ T5066] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1747.506209][ T5066] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1747.537892][ T5066] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71
[ 1747.561203][ T5066] usb 10-1: USB disconnect, device number 22
[ 1747.609707][T13411] team0: Port device team_slave_1 added
[ 1747.856527][T13411] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1747.864331][T13411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1747.891746][T13411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1747.913029][T13411] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1747.924322][T13411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1747.950516][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1747.957754][T13411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1748.444355][T13411] hsr_slave_0: entered promiscuous mode
[ 1748.468412][T13411] hsr_slave_1: entered promiscuous mode
[ 1748.478614][T13411] debugfs: 'hsr0' already exists in 'hsr'
[ 1748.484451][ T5426] Bluetooth: hci1: command tx timeout
[ 1748.508313][T13411] Cannot create hsr debugfs directory
[ 1748.555373][T13935] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8381'.
[ 1748.578465][T13910] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8381'.
[ 1748.695213][T13987] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1748.781824][ T1094] IPVS: stop unused estimator thread 0...
[ 1748.962167][T13623] chnl_net:caif_netlink_parms(): no params data found
[ 1749.051539][T13987] syzkaller0: entered promiscuous mode
[ 1749.060255][T13987] syzkaller0: entered allmulticast mode
[ 1749.244583][T14031] netlink: 'syz.9.8387': attribute type 4 has an invalid length.
[ 1749.252493][T14031] netlink: 152 bytes leftover after parsing attributes in process `syz.9.8387'.
[ 1749.299042][T14039] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8387'.
[ 1749.324565][T14031] : renamed from bond0 (while UP)
[ 1749.900417][T13623] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1749.929426][T13623] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1749.950134][T13623] bridge_slave_0: entered allmulticast mode
[ 1749.965112][T13623] bridge_slave_0: entered promiscuous mode
[ 1749.983236][    T9] vhci_hcd: vhci_device speed not set
[ 1749.983886][T13623] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1750.030379][T13623] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1750.044691][T13623] bridge_slave_1: entered allmulticast mode
[ 1750.073211][T13623] bridge_slave_1: entered promiscuous mode
[ 1750.403580][T13623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1750.724619][ T5426] Bluetooth: hci1: command tx timeout
[ 1751.161068][T13623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1751.605523][T14179] bond0: (slave bond_slave_0): Releasing backup interface
[ 1751.629920][T14179] bond0: (slave bond_slave_1): Releasing backup interface
[ 1751.700991][T14179] team0: Port device team_slave_0 removed
[ 1751.731405][T14179] team0: Port device team_slave_1 removed
[ 1751.742816][T14179] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1751.758972][T14179] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1751.777936][T14179] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1751.785496][T14179] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1751.805672][T14179] batman_adv: batadv0: Removing interface: netdevsim0
[ 1751.824373][T14179] bond0: (slave wlan1): Releasing backup interface
[ 1751.868093][T13623] team0: Port device team_slave_0 added
[ 1751.908210][T14200] team0: Mode changed to "activebackup"
[ 1751.933913][T14201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8395'.
[ 1751.954088][T14203] vlan0: entered promiscuous mode
[ 1751.971337][T14203] team0: Port device vlan0 added
[ 1751.984318][T13623] team0: Port device team_slave_1 added
[ 1752.040410][T14206] tipc: Enabled bearer <eth:team0>, priority 0
[ 1752.061242][T14195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8395'.
[ 1752.097454][T14230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1752.104658][T14230] IPv6: NLM_F_CREATE should be set when creating new route
[ 1752.114190][T14214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1752.187657][T14231] netlink: 'syz.9.8399': attribute type 10 has an invalid length.
[ 1752.195699][T14231] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8399'.
[ 1752.313053][T14231] team0: Port device geneve0 added
[ 1752.455205][T14250] vivid-002: disconnect
[ 1752.460778][T14229] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1752.496196][T13623] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1752.512937][T13623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1752.625285][T13623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1752.643409][T13623] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1752.650543][T13623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1752.679231][T13623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1752.963153][T14229] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1753.262481][T14245] vivid-002: reconnect
[ 1753.562114][ T3847] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1753.608456][T14229] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1753.652350][T14272] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8404'.
[ 1753.746743][ T3847] usb 5-1: Using ep0 maxpacket: 32
[ 1753.779189][ T3847] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1753.802890][ T3847] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1753.831861][ T3847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1753.864592][ T3847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1753.891835][ T3847] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1753.908058][T14229] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1753.928888][ T3847] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1754.010866][ T3847] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1754.045903][ T3847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1754.063718][T13623] hsr_slave_0: entered promiscuous mode
[ 1754.067445][ T3847] usb 5-1: config 0 descriptor??
[ 1754.102009][T13623] hsr_slave_1: entered promiscuous mode
[ 1754.123767][T13623] debugfs: 'hsr0' already exists in 'hsr'
[ 1754.135416][T13623] Cannot create hsr debugfs directory
[ 1754.332911][ T3847] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1754.473047][T13411] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1754.526663][T13411] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1754.544888][ T7504] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1754.547935][ T3847] usb 5-1: USB disconnect, device number 21
[ 1754.611835][T13411] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1754.625546][ T7504] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1754.648810][ T3847] usblp0: removed
[ 1754.673343][T13411] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1754.734092][T11045] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1754.794977][T11045] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1755.621944][T13411] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1755.689911][T13411] 8021q: adding VLAN 0 to HW filter on device team0
[ 1755.724367][ T7504] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1755.731554][ T7504] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1755.783044][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1755.790267][ T7504] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1755.928602][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8410'.
[ 1756.166882][T13623] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1756.401372][T13623] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1756.434022][T13623] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1757.235599][T14445] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1757.427910][T13623] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1759.175370][T13411] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1759.289714][T13623] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1759.457182][T13623] 8021q: adding VLAN 0 to HW filter on device team0
[ 1759.509141][T25374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1759.516362][T25374] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1759.531677][T25374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1759.538882][T25374] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1759.692328][T13623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1759.739491][T13623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1759.759993][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8424'.
[ 1759.922107][T13411] veth0_vlan: entered promiscuous mode
[ 1760.018398][T13411] veth1_vlan: entered promiscuous mode
[ 1760.243432][T13411] veth0_macvtap: entered promiscuous mode
[ 1760.310314][T13411] veth1_macvtap: entered promiscuous mode
[ 1760.447923][T13411] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1760.543225][T13411] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1760.641042][T10852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1760.679084][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1760.752766][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1760.812996][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1760.874320][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8426'.
[ 1761.043871][T13623] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1761.061614][T14523] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1761.084742][T14526] mac80211_hwsim hwsim52 syzkaller0: entered promiscuous mode
[ 1761.105357][T14526] mac80211_hwsim hwsim52 syzkaller0: entered allmulticast mode
[ 1761.240879][T11045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1761.318843][T11045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1761.558112][T10853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1761.608505][T10853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1762.122908][T14545] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1764.445752][T13623] veth0_vlan: entered promiscuous mode
[ 1764.513984][T14572] netlink: 'syz.3.8434': attribute type 4 has an invalid length.
[ 1764.560992][T14564] syzkaller0: entered promiscuous mode
[ 1764.567399][T14564] syzkaller0: entered allmulticast mode
[ 1764.594479][T14572] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8434'.
[ 1764.594801][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8434'.
[ 1764.946332][ T5066] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1765.114812][ T5066] usb 5-1: Using ep0 maxpacket: 32
[ 1765.127606][ T5066] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1765.136444][ T5066] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1765.150903][ T5066] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1765.175058][ T5066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1765.190212][ T5066] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1765.234261][ T5066] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1765.264874][ T5066] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1765.284769][ T5066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1765.321086][ T5066] usb 5-1: config 0 descriptor??
[ 1765.565767][ T5066] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1765.776969][ T5066] usb 5-1: USB disconnect, device number 22
[ 1765.786057][ T5066] usblp0: removed
[ 1772.704504][T14572] : renamed from bond0 (while UP)
[ 1772.811789][T14609] tipc: Enabled bearer <ib:bond0>, priority 10
[ 1772.828049][T13623] veth1_vlan: entered promiscuous mode
[ 1773.256550][T13623] veth0_macvtap: entered promiscuous mode
[ 1773.335426][T13623] veth1_macvtap: entered promiscuous mode
[ 1773.365249][T13623] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1773.592349][T13623] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1773.660899][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1773.724295][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1773.773067][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1773.781797][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1775.043461][   T30] audit: type=1326 audit(1753985484.085:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14661 comm="syz.4.8457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88738eb69 code=0x7ffc0000
[ 1775.069703][T25374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1775.145822][T25374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1775.292645][   T30] audit: type=1326 audit(1753985484.085:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14661 comm="syz.4.8457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88738eb69 code=0x7ffc0000
[ 1775.346245][   T30] audit: type=1326 audit(1753985484.085:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14661 comm="syz.4.8457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc88738eb69 code=0x7ffc0000
[ 1775.490449][   T30] audit: type=1326 audit(1753985484.095:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14661 comm="syz.4.8457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88738eb69 code=0x7ffc0000
[ 1775.691774][T25374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1775.958497][T25374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1775.988922][   T30] audit: type=1326 audit(1753985484.095:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14661 comm="syz.4.8457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88738eb69 code=0x7ffc0000
[ 1776.095967][   T30] audit: type=1326 audit(1753985484.095:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14661 comm="syz.4.8457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc88738eb69 code=0x7ffc0000
[ 1776.134234][T14683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1776.192320][   T30] audit: type=1326 audit(1753985484.095:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14661 comm="syz.4.8457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88738eb69 code=0x7ffc0000
[ 1776.310422][   T30] audit: type=1326 audit(1753985484.095:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14661 comm="syz.4.8457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88738eb69 code=0x7ffc0000
[ 1776.455205][   T30] audit: type=1326 audit(1753985484.095:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14661 comm="syz.4.8457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc88738eb69 code=0x7ffc0000
[ 1776.481278][   T30] audit: type=1326 audit(1753985484.095:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14661 comm="syz.4.8457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88738eb69 code=0x7ffc0000
[ 1776.887696][T14700] tipc: Started in network mode
[ 1776.892713][T15671] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1777.024938][T14700] tipc: Node identity aac3b0f8e67a, cluster identity 4711
[ 1777.072453][T14700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1777.149855][T15671] usb 7-1: Using ep0 maxpacket: 32
[ 1777.236725][T15671] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1777.259251][T14707] syzkaller0: entered promiscuous mode
[ 1777.382763][T15671] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1777.398711][T14707] syzkaller0: entered allmulticast mode
[ 1777.644707][T14700] tipc: Resetting bearer <eth:syzkaller0>
[ 1777.650722][T15671] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1777.664419][T15671] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1777.694049][T14699] tipc: Resetting bearer <eth:syzkaller0>
[ 1777.699219][T15671] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1777.959883][T14699] tipc: Disabling bearer <eth:syzkaller0>
[ 1778.550980][T15671] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1778.565179][T15671] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1778.575309][T15671] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1778.586752][T15671] usb 7-1: config 0 descriptor??
[ 1778.808913][T15671] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1779.018862][ T5066] usb 7-1: USB disconnect, device number 17
[ 1779.030732][ T5066] usblp0: removed
[ 1783.633651][T14774] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[ 1783.640275][T14774] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1783.873142][T14775] vhci_hcd: connection closed
[ 1784.844610][T14774] vhci_hcd vhci_hcd.0: Device attached
[ 1784.870943][    T9] usb 41-1: new high-speed USB device number 3 using vhci_hcd
[ 1784.886949][T14780] vhci_hcd: sendmsg failed!, ret=-32 for 48
[ 1784.913787][T14785] loop5: detected capacity change from 0 to 512
[ 1784.931673][T14785] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1784.944118][   T13] vhci_hcd: stop threads
[ 1784.960962][   T13] vhci_hcd: release socket
[ 1784.970139][   T13] vhci_hcd: disconnect device
[ 1785.115726][T14785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1785.128372][T14785] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1787.146733][   T30] kauditd_printk_skb: 56 callbacks suppressed
[ 1787.146755][   T30] audit: type=1800 audit(1753985497.027:3658): pid=14793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8482" name="file1" dev="loop5" ino=15 res=0 errno=0
[ 1787.616995][T13623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1787.710143][T14806] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8485'.
[ 1787.795209][T14798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8485'.
[ 1788.065510][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8488'.
[ 1788.323595][T14813] bridge_slave_1: left allmulticast mode
[ 1788.360439][T14813] bridge_slave_1: left promiscuous mode
[ 1788.377542][T14813] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1788.560132][T14813] bridge_slave_0: left allmulticast mode
[ 1788.569883][T14813] bridge_slave_0: left promiscuous mode
[ 1788.581013][T14813] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1789.920993][T14831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1789.951312][T14831] syzkaller0: entered promiscuous mode
[ 1789.985290][    T9] vhci_hcd: vhci_device speed not set
[ 1790.007677][T14831] syzkaller0: entered allmulticast mode
[ 1790.226482][T14844] tipc: Resetting bearer <eth:syzkaller0>
[ 1790.336769][T14830] tipc: Resetting bearer <eth:syzkaller0>
[ 1790.520903][T14830] tipc: Disabling bearer <eth:syzkaller0>
[ 1790.591838][ T6151] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1790.944167][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1790.951799][ T6151] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1790.976173][ T6151] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1791.007854][T14864] loop5: detected capacity change from 0 to 512
[ 1791.017749][T14864] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1791.124469][T14864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1791.137309][T14864] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1791.772293][   T30] audit: type=1800 audit(1753985501.638:3659): pid=14872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8500" name="file1" dev="loop5" ino=15 res=0 errno=0
[ 1791.793018][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1791.823004][ T6151] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1791.832746][ T6151] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1792.019893][T13623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1792.069004][T14848] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1792.083958][ T6151] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 1792.296992][T14848] netlink: 48 bytes leftover after parsing attributes in process `syz.9.8497'.
[ 1792.362397][T14848] netlink: 'syz.9.8497': attribute type 2 has an invalid length.
[ 1792.373256][T14848] netlink: 'syz.9.8497': attribute type 1 has an invalid length.
[ 1794.216334][ T8663] usb 10-1: USB disconnect, device number 23
[ 1794.398490][T14905] loop5: detected capacity change from 0 to 8192
[ 1795.282530][T14942] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 1795.293695][T14942] FAT-fs (loop5): Filesystem has been set read-only
[ 1796.020010][T14953] loop5: detected capacity change from 0 to 512
[ 1796.028468][T14953] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1796.121539][T14953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1796.163438][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8517'.
[ 1796.178762][T14953] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1797.191189][   T30] audit: type=1800 audit(1753985507.039:3660): pid=14964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8514" name="file1" dev="loop5" ino=15 res=0 errno=0
[ 1797.273304][T13623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1797.284725][T14970] overlayfs: invalid origin (00000079004e22000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[ 1797.901069][T14963] bridge_slave_1: left allmulticast mode
[ 1797.990389][T14963] bridge_slave_1: left promiscuous mode
[ 1798.005852][T14963] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1798.257720][T14963] bridge_slave_0: left allmulticast mode
[ 1798.285444][T14963] bridge_slave_0: left promiscuous mode
[ 1798.368995][T14963] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1798.959055][ T5846] Bluetooth: hci6: hardware error 0x05
[ 1799.273796][T14991] loop5: detected capacity change from 0 to 8192
[ 1800.163621][T15010] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 1800.172544][T15010] FAT-fs (loop5): Filesystem has been set read-only
[ 1800.358409][ T8663] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1800.558574][ T8663] usb 7-1: Using ep0 maxpacket: 32
[ 1800.707529][ T8663] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1800.992783][ T8663] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1801.001901][ T8663] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1801.011173][ T8663] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1801.028337][ T5846] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[ 1801.036472][ T8663] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1801.046666][ T8663] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1801.060363][ T8663] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1801.078336][ T8663] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1803.107194][ T8663] usb 7-1: config 0 descriptor??
[ 1803.350509][ T8663] usb 7-1: can't set config #0, error -71
[ 1803.477960][ T8663] usb 7-1: USB disconnect, device number 18
[ 1803.642266][T15042] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8536'.
[ 1804.285259][T15042]  (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1804.320650][T15042]  (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1804.340572][T15042]  (unregistering): Released all slaves
[ 1807.598227][T15091] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1808.674528][T15101] binder: 15100:15101 ioctl 4018620d 0 returned -22
[ 1808.856198][T15109] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1808.957041][   T30] audit: type=1326 audit(1753985518.831:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.6.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69958eb69 code=0x7ffc0000
[ 1809.888098][   T30] audit: type=1326 audit(1753985518.831:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.6.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69958eb69 code=0x7ffc0000
[ 1809.888159][   T30] audit: type=1326 audit(1753985518.881:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.6.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff69958eb69 code=0x7ffc0000
[ 1809.888209][   T30] audit: type=1326 audit(1753985518.901:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.6.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69958eb69 code=0x7ffc0000
[ 1809.888260][   T30] audit: type=1326 audit(1753985518.901:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.6.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69958eb69 code=0x7ffc0000
[ 1809.888312][   T30] audit: type=1326 audit(1753985518.911:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.6.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7ff69958eb69 code=0x7ffc0000
[ 1809.888362][   T30] audit: type=1326 audit(1753985518.911:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.6.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69958eb69 code=0x7ffc0000
[ 1809.888410][   T30] audit: type=1326 audit(1753985518.911:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.6.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69958eb69 code=0x7ffc0000
[ 1809.888460][   T30] audit: type=1326 audit(1753985518.911:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.6.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7ff69958eb69 code=0x7ffc0000
[ 1809.888512][   T30] audit: type=1326 audit(1753985518.911:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.6.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69958eb69 code=0x7ffc0000
[ 1809.987000][T15103] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[ 1809.987067][T15103] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1809.987865][T15103] vhci_hcd vhci_hcd.0: Device attached
[ 1810.210775][ T6151] vhci_hcd: vhci_device speed not set
[ 1810.266718][ T6151] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[ 1810.669389][T15120] vhci_hcd: connection reset by peer
[ 1810.669735][T10858] vhci_hcd: stop threads
[ 1810.669765][T10858] vhci_hcd: release socket
[ 1810.671651][T10858] vhci_hcd: disconnect device
[ 1812.723518][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8562'.
[ 1813.357438][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8564'.
[ 1813.731174][T15170] binder: 15167:15170 ioctl 4018620d 0 returned -22
[ 1815.230683][T15178] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7)
[ 1815.237221][T15178] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1815.406020][ T6151] vhci_hcd: vhci_device speed not set
[ 1815.541511][T15178] vhci_hcd vhci_hcd.0: Device attached
[ 1815.578807][T15186] random: crng reseeded on system resumption
[ 1815.664002][T15182] vhci_hcd: connection closed
[ 1815.668359][T10848] vhci_hcd: stop threads
[ 1815.687145][T10848] vhci_hcd: release socket
[ 1815.694344][T10848] vhci_hcd: disconnect device
[ 1816.854321][T15203] tipc: Started in network mode
[ 1816.911943][T15203] tipc: Node identity 4, cluster identity 4711
[ 1816.955858][T15203] tipc: Node number set to 4
[ 1817.086579][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8576'.
[ 1819.367150][T15247] tipc: Started in network mode
[ 1819.386906][T15247] tipc: Node identity ac141413, cluster identity 4711
[ 1819.406619][T15247] tipc: New replicast peer: 10.1.1.2
[ 1819.424503][T15247] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1819.562153][T15260] syz.8.8592: attempt to access beyond end of device
[ 1819.562153][T15260] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1819.645567][T15260] syz.8.8592: attempt to access beyond end of device
[ 1819.645567][T15260] nbd8: rw=0, sector=120, nr_sectors = 8 limit=0
[ 1819.916689][T15260] Mount JFS Failure: -5
[ 1820.425198][ T3847] tipc: Node number set to 2886997011
[ 1821.859733][T15291] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8599'.
[ 1821.931556][T15289] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8599'.
[ 1822.594566][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1822.610981][   T30] audit: type=1326 audit(1753985532.463:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.9.8594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d4618eb69 code=0x0
[ 1822.769429][T15301] comedi comedi3: Cannot bond this driver to itself!
[ 1823.161697][T15307] blk_print_req_error: 118 callbacks suppressed
[ 1823.161720][T15307] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1823.411727][T15307] buffer_io_error: 118 callbacks suppressed
[ 1823.411748][T15307] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1823.495067][T15307] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1823.513751][T15307] Buffer I/O error on dev nbd6, logical block 1, async page read
[ 1823.522224][T15307] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1823.563322][T15307] Buffer I/O error on dev nbd6, logical block 2, async page read
[ 1823.654766][T15307] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1823.724003][T15307] Buffer I/O error on dev nbd6, logical block 3, async page read
[ 1823.789021][T15307] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1824.302823][T15307] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1824.313382][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8612'.
[ 1824.342609][T15307] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1824.413368][T15307] Buffer I/O error on dev nbd6, logical block 1, async page read
[ 1824.453806][T15307] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1824.526360][T15307] Buffer I/O error on dev nbd6, logical block 2, async page read
[ 1824.547676][T15307] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1824.590528][T15307] Buffer I/O error on dev nbd6, logical block 3, async page read
[ 1824.624698][T15307] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1824.652917][T15307] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1824.692548][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8615'.
[ 1824.708602][T15307] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1824.724668][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8615'.
[ 1824.742093][T15307] Buffer I/O error on dev nbd6, logical block 1, async page read
[ 1824.826175][T15307] ldm_validate_partition_table(): Disk read failed.
[ 1824.979096][T15347] overlayfs: failed to resolve './file1': -2
[ 1824.989878][T15307] Dev nbd6: unable to read RDB block 0
[ 1825.010066][T15307]  nbd6: unable to read partition table
[ 1826.245657][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8621'.
[ 1826.465538][T15366] loop5: detected capacity change from 0 to 512
[ 1826.472714][T15366] EXT4-fs: Ignoring removed orlov option
[ 1826.531625][T15366] EXT4-fs: Ignoring removed bh option
[ 1826.565024][T15359] gre1: entered promiscuous mode
[ 1826.576659][T15366] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[ 1827.084210][ T5066] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[ 1827.347213][ T5066] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1827.635886][ T5066] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1827.718225][ T5066] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1827.765434][ T5066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1827.842747][ T5066] usb 4-1: config 0 descriptor??
[ 1828.016650][ T5066] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1828.032656][ T5066] dvb-usb: bulk message failed: -22 (3/0)
[ 1828.125087][ T5066] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1828.193539][ T5066] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1828.233131][ T5066] usb 4-1: media controller created
[ 1828.267148][ T5066] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1828.594900][ T5066] dvb-usb: bulk message failed: -22 (6/0)
[ 1828.601107][ T5066] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1828.658483][ T5066] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31
[ 1828.678082][T15408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1828.685528][T15408] syzkaller0: entered promiscuous mode
[ 1828.711630][T15408] syzkaller0: entered allmulticast mode
[ 1828.738686][ T5066] dvb-usb: schedule remote query interval to 150 msecs.
[ 1828.784500][ T5066] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1828.787433][T15408] tipc: Resetting bearer <eth:syzkaller0>
[ 1828.839371][ T5066] usb 4-1: USB disconnect, device number 28
[ 1828.879941][T15406] tipc: Resetting bearer <eth:syzkaller0>
[ 1828.985048][T15406] tipc: Disabling bearer <eth:syzkaller0>
[ 1829.027917][ T5066] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1829.104223][ T5846] Bluetooth: hci2: unexpected Set CIG Parameters response data
[ 1829.532521][T15432] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8633'.
[ 1829.605112][T15431] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8633'.
[ 1829.761787][T15434] overlayfs: failed to resolve './file1': -2
[ 1833.178831][ T5846] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1833.204334][ T5846] Bluetooth: hci2: Injecting HCI hardware error event
[ 1833.246301][ T5426] Bluetooth: hci2: hardware error 0x00
[ 1833.858426][T15491] overlayfs: failed to resolve './file1': -2
[ 1834.171100][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8648'.
[ 1835.767666][ T5426] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1836.394149][T15500] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1836.400707][T15500] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1836.400864][T15500] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1836.401000][T15500] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1836.401051][T15500] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1836.517719][T15500] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1837.003983][T15512] netlink: 'syz.5.8654': attribute type 4 has an invalid length.
[ 1837.011745][T15512] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8654'.
[ 1837.027641][T15512] : renamed from bond0 (while UP)
[ 1837.054564][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8654'.
[ 1837.264195][T15520] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8657'.
[ 1837.466557][T15527] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[ 1837.473129][T15527] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1837.483505][T15527] vhci_hcd vhci_hcd.0: Device attached
[ 1837.503393][T15526] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8657'.
[ 1838.180244][T15528] vhci_hcd: connection closed
[ 1838.442324][   T10] usb 45-1: new high-speed USB device number 2 using vhci_hcd
[ 1838.462251][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1838.468313][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1838.478455][ T5426] Bluetooth: hci5: command 0x0405 tx timeout
[ 1838.512041][T11045] vhci_hcd: stop threads
[ 1838.570140][T11045] vhci_hcd: release socket
[ 1838.641445][T11045] vhci_hcd: disconnect device
[ 1839.766956][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8663'.
[ 1840.591562][T15532] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1841.340691][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1842.652247][T15532] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1843.641285][   T10] vhci_hcd: vhci_device speed not set
[ 1844.937438][T15581] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1845.081902][T15581] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1845.088027][T15581] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1845.710085][T15596] dvmrp8: entered allmulticast mode
[ 1846.076759][ T8663] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1846.413182][ T8663] usb 5-1: Using ep0 maxpacket: 32
[ 1846.433835][ T8663] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1846.444996][ T8663] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1847.141266][ T5846] Bluetooth: hci5: command 0x0405 tx timeout
[ 1847.147326][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1847.190593][T15532] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1847.341061][ T8663] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1847.529731][ T8663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1847.582644][ T8663] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1847.602875][ T8663] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1847.641546][T15636] overlayfs: failed to resolve './file0': -2
[ 1847.768583][ T8663] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1847.805143][ T8663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1847.964015][ T8663] usb 5-1: config 0 descriptor??
[ 1848.080647][ T3847] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1848.172050][T15645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8683'.
[ 1848.868531][ T8663] usb 5-1: can't set config #0, error -71
[ 1848.925742][ T8663] usb 5-1: USB disconnect, device number 23
[ 1849.043280][ T3847] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1850.168173][ T3847] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1850.542670][ T3847] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1850.722368][ T3847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1850.760006][ T3847] usb 4-1: can't set config #27, error -71
[ 1850.781766][ T3847] usb 4-1: USB disconnect, device number 29
[ 1851.671968][T15689] comedi comedi3: Cannot bond this driver to itself!
[ 1852.380087][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1854.158780][T15698] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1854.193834][T15698] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1854.291035][T15698] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1854.495588][T15708] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8693'.
[ 1854.721641][T15716] overlayfs: failed to resolve './file0': -2
[ 1854.889730][T15668] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1856.129187][T15532] Bluetooth: hci5: command 0x0405 tx timeout
[ 1856.209407][T15532] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1856.369117][T15532] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1856.387058][T15668] usb 10-1: Using ep0 maxpacket: 32
[ 1856.862146][T15668] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1857.737371][T15668] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1857.828526][T15668] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1857.901378][T15668] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1858.142076][T15668] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1858.931256][T15668] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1859.029218][T15532] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1859.409336][T15668] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1859.448856][T15668] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1859.658810][T15751] comedi comedi3: Cannot bond this driver to itself!
[ 1859.784076][T15668] usb 10-1: config 0 descriptor??
[ 1859.909634][T15668] usb 10-1: can't set config #0, error -71
[ 1860.111355][T15668] usb 10-1: USB disconnect, device number 24
[ 1862.029828][T15767] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1862.036161][T15767] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1862.044506][T15767] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1862.070108][T15774] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8710'.
[ 1862.178669][T15772] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8710'.
[ 1863.547919][    T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1863.727932][ T5846] Bluetooth: hci5: command 0x0405 tx timeout
[ 1863.741859][    T9] usb 4-1: Using ep0 maxpacket: 32
[ 1863.773582][    T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1863.818844][    T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1863.845904][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1863.870744][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1863.894357][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1864.034564][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1864.047948][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1864.098359][T15807] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8718'.
[ 1864.129896][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1864.422994][    T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1864.435951][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1864.462904][    T9] usb 4-1: config 0 descriptor??
[ 1864.784044][    T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1864.867595][    T9] usb 4-1: USB disconnect, device number 30
[ 1864.907995][    T9] usblp0: removed
[ 1866.039985][T15867] tipc: Started in network mode
[ 1866.044911][T15867] tipc: Node identity 56723fa712ac, cluster identity 4711
[ 1866.073624][T15867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1866.186419][T15871] Bluetooth: MGMT ver 1.23
[ 1866.277537][T15863] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1866.284349][T15863] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1866.309980][T15863] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1866.357216][T15859] tipc: Disabling bearer <eth:syzkaller0>
[ 1866.577440][T15554] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1867.350992][T15554] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1867.389075][T15554] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1867.413113][T15554] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1867.436915][T15554] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1867.639312][T15554] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1867.653017][T15554] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1867.662310][T15554] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1867.670641][T15554] usb 10-1: Product: syz
[ 1867.676971][T15554] usb 10-1: Manufacturer: syz
[ 1867.690658][T15554] cdc_wdm 10-1:1.0: skipping garbage
[ 1867.696950][T15554] cdc_wdm 10-1:1.0: skipping garbage
[ 1867.723306][T15554] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1868.127465][ T5846] Bluetooth: hci5: command 0x0405 tx timeout
[ 1868.297496][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1868.367785][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1868.439783][T15554] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1868.530888][ T3847] usb 10-1: USB disconnect, device number 25
[ 1868.941942][T15916] tmpfs: Bad value for 'mpol'
[ 1870.287106][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8741'.
[ 1872.258463][T15939] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1872.316954][T15939] syzkaller0: entered promiscuous mode
[ 1872.322438][T15939] syzkaller0: entered allmulticast mode
[ 1872.421978][T15939] tipc: Resetting bearer <eth:syzkaller0>
[ 1872.474707][T15937] tipc: Resetting bearer <eth:syzkaller0>
[ 1873.540822][T15972] comedi comedi3: Cannot bond this driver to itself!
[ 1875.036655][T15937] tipc: Disabling bearer <eth:syzkaller0>
[ 1875.567100][T15992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1875.828673][T15992] syzkaller0: entered promiscuous mode
[ 1875.834226][T15992] syzkaller0: entered allmulticast mode
[ 1875.844047][T15989] tipc: Resetting bearer <eth:syzkaller0>
[ 1876.679964][ T3847] tipc: Node number set to 1155415975
[ 1876.801758][T15989] tipc: Disabling bearer <eth:syzkaller0>
[ 1878.025594][   T10] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1878.775557][   T10] usb 10-1: Using ep0 maxpacket: 32
[ 1878.792906][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1878.871723][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 58759, setting to 1024
[ 1878.930447][   T10] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[ 1879.018163][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1879.103559][   T10] usb 10-1: Product: syz
[ 1879.316837][   T10] usb 10-1: Manufacturer: syz
[ 1879.434394][   T10] usb 10-1: SerialNumber: syz
[ 1879.539920][   T10] usb 10-1: config 0 descriptor??
[ 1879.557250][T16026] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1879.593670][   T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input33
[ 1880.699978][   T10] usb 10-1: USB disconnect, device number 26
[ 1881.597141][T16094] netlink: 'syz.8.8778': attribute type 4 has an invalid length.
[ 1881.612138][T16094] netlink: 152 bytes leftover after parsing attributes in process `syz.8.8778'.
[ 1881.678468][T16094] bond0: MTU too low for tipc bearer
[ 1881.715085][T16094] tipc: Disabling bearer <ib:bond0>
[ 1881.819968][T16094] : renamed from bond0 (while UP)
[ 1882.820334][T16122] blktrace: Concurrent blktraces are not allowed on sg0
[ 1885.371947][   T30] audit: type=1326 audit(1753985595.133:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.5.8786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b858eb69 code=0x7ffc0000
[ 1885.405033][   T30] audit: type=1326 audit(1753985595.163:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.5.8786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b858eb69 code=0x7ffc0000
[ 1885.582180][   T30] audit: type=1326 audit(1753985595.173:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.5.8786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b858eb69 code=0x7ffc0000
[ 1885.723803][T16145] netlink: 'syz.3.8794': attribute type 4 has an invalid length.
[ 1885.771946][T16145] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8794'.
[ 1885.773463][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8794'.
[ 1885.794305][   T30] audit: type=1326 audit(1753985595.173:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.5.8786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f22b858eb69 code=0x7ffc0000
[ 1885.905387][   T30] audit: type=1326 audit(1753985595.173:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.5.8786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b858eb69 code=0x7ffc0000
[ 1885.938143][   T30] audit: type=1326 audit(1753985595.183:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.5.8786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f22b858eb69 code=0x7ffc0000
[ 1886.005354][   T30] audit: type=1326 audit(1753985595.193:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.5.8786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b858eb69 code=0x7ffc0000
[ 1886.096217][   T30] audit: type=1326 audit(1753985595.203:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.5.8786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22b858eb69 code=0x7ffc0000
[ 1886.664280][   T30] audit: type=1326 audit(1753985595.213:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.5.8786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b858eb69 code=0x7ffc0000
[ 1886.816082][   T30] audit: type=1326 audit(1753985595.223:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16116 comm="syz.5.8786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b858eb69 code=0x7ffc0000
[ 1887.933330][T16162] comedi comedi3: Cannot bond this driver to itself!
[ 1888.776193][T16167] netlink: 'syz.4.8802': attribute type 4 has an invalid length.
[ 1888.784386][T16167] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8802'.
[ 1888.820209][T16167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8802'.
[ 1894.739390][T16235] overlayfs: failed to resolve './file0': -2
[ 1896.636695][   T10] IPVS: starting estimator thread 0...
[ 1896.716764][T16259] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8830'.
[ 1897.022624][T16260] IPVS: using max 24 ests per chain, 57600 per kthread
[ 1897.593569][T16276] vxcan1: entered allmulticast mode
[ 1898.238956][T16288] block nbd9: Dead connection, failed to find a fallback
[ 1898.257043][T16285] overlayfs: failed to resolve './file0': -2
[ 1898.273791][T16288] block nbd9: shutting down sockets
[ 1898.282340][T16288] blk_print_req_error: 54 callbacks suppressed
[ 1898.282360][T16288] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1898.498714][T16293] netlink: 'syz.8.8838': attribute type 4 has an invalid length.
[ 1898.506685][T16293] netlink: 152 bytes leftover after parsing attributes in process `syz.8.8838'.
[ 1898.542607][T16293] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8838'.
[ 1898.572852][T16288] buffer_io_error: 54 callbacks suppressed
[ 1898.572920][T16288] Buffer I/O error on dev nbd9, logical block 0, async page read
[ 1898.774842][T16288] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1898.841595][T16288] Buffer I/O error on dev nbd9, logical block 1, async page read
[ 1898.945272][T16288] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1900.024773][T16288] Buffer I/O error on dev nbd9, logical block 2, async page read
[ 1900.089104][T16288] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1900.412573][T16288] Buffer I/O error on dev nbd9, logical block 3, async page read
[ 1900.424444][T16288] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1901.192097][T16288] Buffer I/O error on dev nbd9, logical block 0, async page read
[ 1901.200081][T16288] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1901.307133][T16288] Buffer I/O error on dev nbd9, logical block 1, async page read
[ 1901.335789][T16288] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1901.374809][T16288] Buffer I/O error on dev nbd9, logical block 2, async page read
[ 1901.420798][T16288] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1901.511857][T16288] Buffer I/O error on dev nbd9, logical block 3, async page read
[ 1901.546353][T16288] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1901.567887][T16313] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8844'.
[ 1901.576989][T16288] Buffer I/O error on dev nbd9, logical block 0, async page read
[ 1901.577948][T16288] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1901.626162][T16288] Buffer I/O error on dev nbd9, logical block 1, async page read
[ 1901.659806][T16288] ldm_validate_partition_table(): Disk read failed.
[ 1901.765472][T16319] comedi comedi0: Minor 3 could not be opened
[ 1902.602704][T16288] Dev nbd9: unable to read RDB block 0
[ 1902.610120][T16288]  nbd9: unable to read partition table
[ 1904.169537][   T10] IPVS: starting estimator thread 0...
[ 1904.261978][T16349] IPVS: using max 33 ests per chain, 79200 per kthread
[ 1904.546751][T16355] fuse: Bad value for 'fd'
[ 1905.680020][T16364] blk_print_req_error: 54 callbacks suppressed
[ 1905.680044][T16364] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1905.698289][T16366] netlink: 'syz.5.8865': attribute type 1 has an invalid length.
[ 1905.707210][T16364] buffer_io_error: 54 callbacks suppressed
[ 1905.707271][T16364] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1905.739161][T16364] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1905.751808][T16364] Buffer I/O error on dev nbd6, logical block 1, async page read
[ 1905.881609][T16364] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1905.931022][T16364] Buffer I/O error on dev nbd6, logical block 2, async page read
[ 1905.961754][T16364] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1906.050613][T16371] bond0: (slave veth3): Enslaving as an active interface with an up link
[ 1906.051342][T16364] Buffer I/O error on dev nbd6, logical block 3, async page read
[ 1906.105354][T16364] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1906.150824][T16364] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1906.168902][T16364] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1906.192799][T16364] Buffer I/O error on dev nbd6, logical block 1, async page read
[ 1906.209671][T16364] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1906.228744][T16364] Buffer I/O error on dev nbd6, logical block 2, async page read
[ 1906.238623][T16364] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1906.269579][T16364] Buffer I/O error on dev nbd6, logical block 3, async page read
[ 1906.296522][T16364] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1906.371012][T16364] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1906.435498][T16364] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1906.583339][T16364] Buffer I/O error on dev nbd6, logical block 1, async page read
[ 1906.631132][T16364] ldm_validate_partition_table(): Disk read failed.
[ 1906.669904][T16364] Dev nbd6: unable to read RDB block 0
[ 1906.710245][T16364]  nbd6: unable to read partition table
[ 1911.070010][ T3847] IPVS: starting estimator thread 0...
[ 1911.170329][T16485] IPVS: using max 33 ests per chain, 79200 per kthread
[ 1911.431653][T16493] netlink: 'syz.9.8891': attribute type 4 has an invalid length.
[ 1911.451272][T16493] netlink: 152 bytes leftover after parsing attributes in process `syz.9.8891'.
[ 1911.566108][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8891'.
[ 1912.969875][T16508] comedi comedi3: Cannot bond this driver to itself!
[ 1913.761956][T16515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1913.816204][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1913.841022][T16515] syzkaller0: entered promiscuous mode
[ 1913.909948][T16515] syzkaller0: entered allmulticast mode
[ 1915.074272][T16514] tipc: Resetting bearer <eth:syzkaller0>
[ 1915.271360][T16514] tipc: Disabling bearer <eth:syzkaller0>
[ 1915.739831][T10852] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1928.477253][    C0] sched: DL replenish lagged too much
[ 1984.241731][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2036.666222][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2099.200417][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2128.805770][   T31] INFO: task kworker/u8:4:59 blocked for more than 144 seconds.
[ 2128.813455][   T31]       Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0
[ 2132.222446][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2132.354885][   T31] task:kworker/u8:4    state:D stack:20856 pid:59    tgid:59    ppid:2      task_flags:0x4208160 flags:0x00004000
[ 2132.505527][   T31] Workqueue: events_unbound linkwatch_event
[ 2132.511493][   T31] Call Trace:
[ 2132.607673][   T31]  <TASK>
[ 2132.610649][   T31]  __schedule+0x1798/0x4cc0
[ 2132.915209][   T31]  ? __pfx___schedule+0x10/0x10
[ 2132.920127][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2133.074800][   T31]  ? schedule+0x91/0x360
[ 2133.079108][   T31]  schedule+0x165/0x360
[ 2133.083277][   T31]  schedule_preempt_disabled+0x13/0x30
[ 2133.350322][   T31]  __mutex_lock+0x7e3/0x1340
[ 2133.425640][   T31]  ? look_up_lock_class+0x74/0x170
[ 2133.430829][   T31]  ? __mutex_lock+0x5b6/0x1340
[ 2133.694580][   T31]  ? linkwatch_event+0xe/0x60
[ 2133.699330][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 2133.704377][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2135.341865][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2135.418378][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 2135.424166][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 2135.500220][   T31]  linkwatch_event+0xe/0x60
[ 2135.624360][   T31]  process_scheduled_works+0xae1/0x17b0
[ 2135.630020][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2135.774236][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2135.779945][   T31]  worker_thread+0x8a0/0xda0
[ 2135.929966][   T31]  kthread+0x711/0x8a0
[ 2136.000946][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 2136.044386][   T31]  ? __pfx_kthread+0x10/0x10
[ 2136.049031][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2136.156933][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2136.162186][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2136.267707][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2136.272962][   T31]  ? __pfx_kthread+0x10/0x10
[ 2136.389680][   T31]  ret_from_fork+0x3fc/0x770
[ 2136.456085][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2136.461297][   T31]  ? __switch_to_asm+0x39/0x70
[ 2136.564326][   T31]  ? __switch_to_asm+0x33/0x70
[ 2136.569146][   T31]  ? __pfx_kthread+0x10/0x10
[ 2136.573748][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2136.672587][   T31]  </TASK>
[ 2136.694860][   T31] 
[ 2136.694860][   T31] Showing all locks held in the system:
[ 2136.702579][   T31] 1 lock held by pool_workqueue_/3:
[ 2136.864049][   T31]  #0: ffffffff8e13f878 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[ 2136.984252][   T31] 4 locks held by kworker/1:0/24:
[ 2136.989314][   T31]  #0: ffff88805d9f3d48 ((wq_completion)wg-kex-wg0#46){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 2137.186988][   T31]  #1: ffffc900001e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
SYZFAIL: failed to send rpc
fd=3 want=976 sent=0 n=-1 (errno 32: Broken pipe)
[ 2137.623990][   T31]  #2: ffff88803aa45160 (&r->consumer_lock#2){+.+.}-{3:3}, at: wg_packet_handshake_receive_worker+0xd4/0xfb0
[ 2137.754249][   T31]  #3: ffff8880780ec890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900
[ 2137.853884][   T31] 1 lock held by khungtaskd/31:
[ 2137.858761][   T31]  #0: ffffffff8e139de0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2138.053937][   T31] 3 locks held by kworker/u8:4/59:
[ 2138.059089][   T31]  #0: ffff88801a481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 2138.274917][   T31]  #1: ffffc9000210fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 2138.413956][   T31]  #2: ffffffff8f508748 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 2138.423037][   T31] 7 locks held by kworker/u8:6/1094:
[ 2138.524208][   T31]  #0: ffff88801b2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 2138.663770][   T31]  #1: ffffc9000381fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 2138.773714][   T31]  #2: ffffffff8f4fb8d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[ 2138.783118][   T31]  #3: ffff8880207d70e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0