last executing test programs:

27.32858411s ago: executing program 3 (id=1766):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000080406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x0, 0x24, 0x5c, {0x5c, 0xf, "55f1fb20a5edb75d707bf51a721342738d54cc1ba3bc09f37ca41cf0d7311dfe8ccf63208f3684295098501c9aea3b357a2251eed9c5c2defe21e7d6b809e157cf6fe8d63deeb350f4ef1b8042bd5a6e9d785f960718ec5d9c80"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x40, 0xe, 0x86, "24e18aa29c80000644d2f4acc77f668c9ccfa0ecab0725ac69b8e6278dfe7c7a14ac1f6302da9af49bbdd9cba079b9273a411bd0ac7de4055a30ea55267229932573909dd25502670e40c9ff66028d05067f3565a166b80c0c5863c26a384ecee2f725fb40d8cfe57ce11cdc06e5a3a64acd533563a1c8c289e9bcde31f81e50153b65f45592"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x3, 0x7, 0x7, 0x401, 0xb7, 0xf5, 0x81, 0x9bed, 0xfff7, 0x6, 0x3}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000740)={0x20, 0x83, 0x2}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000007c0)={0x20, 0x89, 0x2}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xc00}], 0x1, 0x0, 0x0, 0x0)

23.881037464s ago: executing program 3 (id=1781):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280), 0x208e26f)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)

22.815871247s ago: executing program 3 (id=1791):
mlockall(0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
readahead(r1, 0x0, 0x0)

8.518957318s ago: executing program 3 (id=1792):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000080406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x0, 0x24, 0x5c, {0x5c, 0xf, "55f1fb20a5edb75d707bf51a721342738d54cc1ba3bc09f37ca41cf0d7311dfe8ccf63208f3684295098501c9aea3b357a2251eed9c5c2defe21e7d6b809e157cf6fe8d63deeb350f4ef1b8042bd5a6e9d785f960718ec5d9c80"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x40, 0xe, 0x86, "24e18aa29c80000644d2f4acc77f668c9ccfa0ecab0725ac69b8e6278dfe7c7a14ac1f6302da9af49bbdd9cba079b9273a411bd0ac7de4055a30ea55267229932573909dd25502670e40c9ff66028d05067f3565a166b80c0c5863c26a384ecee2f725fb40d8cfe57ce11cdc06e5a3a64acd533563a1c8c289e9bcde31f81e50153b65f45592"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x3, 0x7, 0x7, 0x401, 0xb7, 0xf5, 0x81, 0x9bed, 0xfff7, 0x6, 0x3}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000740)={0x20, 0x83, 0x2}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000007c0)={0x20, 0x89, 0x2}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xc00}], 0x1, 0x0, 0x0, 0x0)

4.373964183s ago: executing program 3 (id=1864):
creat(&(0x7f0000000000)='./bus\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = creat(0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(r0, 0x2008002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x28, 0x2b, 0x0, @remote, @local, {[@hopopts={0x87}, @routing={0x0, 0x0, 0x2}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)

4.061083608s ago: executing program 2 (id=1868):
socket(0x0, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

3.21185665s ago: executing program 3 (id=1872):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)

2.959678376s ago: executing program 4 (id=1874):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280), 0x208e26f)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}])

2.766155343s ago: executing program 1 (id=1876):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x10000004})
writev(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000680), 0x3b1, r1}, 0x38)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

2.623002294s ago: executing program 0 (id=1877):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x28c0bf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1020, 0x0)

2.617780185s ago: executing program 4 (id=1878):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)

2.473861525s ago: executing program 4 (id=1879):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

2.391832227s ago: executing program 0 (id=1880):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})

2.174688768s ago: executing program 0 (id=1881):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
write(r0, &(0x7f0000000bc0)="1c0000001a000da560f142ffff00", 0xe)

2.059430975s ago: executing program 0 (id=1882):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x10, 0xffffffffffffffff, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0})
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000180)={0x0, r4})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='jbd2_handle_stats\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x301}, 0x14}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$ndb(0x0, 0x0, 0x202001)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x1e401, 0x0)
sendmmsg$inet6(r7, &(0x7f0000000b00)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @private0, 0xff}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000380)="77e576b67b419c785bbe8e27619bfbaa46ac3a92f298c2e36447bd2524a3cb4427592cdac1de69d1323999abba9858b6cb4b11704dc2e934e26e536893fe351565e657231518a7ff4e3f7b9bbbbba5406ba0afd63998e2bff29a96787b66accb4deace412960cce04aaa767a59b836a22dfba197233c9a6319c3a156c54d85262be826c1a60bafc1ab0d394ccce0482d3805e1124e0a1391289bffb825fab78e7b13d560b7f47b4eb0f48087952208b8882362704c11905ea03f", 0xba}, {&(0x7f00000004c0)="334491b6bde497e30138937ded6187f0d3492d00c23663882ae42596f5fa97a5a8dd00763970e91b37f9bd733d6810c3c09bb0a421b9799c72d5cedb815ca3808b1ee394fc33ba605b92f1a8fa5a90113c7941f8dd9937e0849eeba1e29c56e7b0111ad8f7149e6a6695c4406303fc34cc1a0f9f1ca4e20324dffabb9c1b12c9c1adb85b2cf7c38e4ca71fdd91b01c07ca1044e02745f8ae7740be686b6a5f83d052ac032c6640b1ee5f3ddc021597a7aa50e300e3fad8ad70361478254bdb6980913e605dca07d6d59daaf331dda3039480a3dcd4bdaa7d8a8b594881d1a987800099a2e78976e200e49702c1", 0xed}, {&(0x7f00000005c0)="2e6489c3b6c5387c138ee72e1cfc104670915c778877e8231ef6781e1c5a8bb0fb0870a12620698f5b132f65b86bf42f25def5d66001cb1ecaa8060261132d5ca3aa807f9ac7aad1b968bd444cae7008b48a5ac9f6f6211e6dad09d73b90006a09281b7be888917e3b84da794c60a3ed8889d5745fb7d12638d97401304327d0bd9836fd2dae08ff7c7ec2243dc751caec8d53aff4cf03e4e824c4d0cfaed41924b5700c6a0b572266cca099652a1b02b184872957dec1394aef9c7cf693ccfb7e7b99583ebe59d873d2c38599273a3a72ee773c2cbdbcb61741694e11d00674c2365d8971ce17cabf0a7f18479971a2", 0xf0}, {&(0x7f00000006c0)="8a33f7d3c32589d998c31d8c642cc16b3a51bec30ec5bfd732993912669df9b27392f7ef9949f3d891a49655c87d13be5718209a25bd82103bc07220d935213458c8e7c6743e1dbe3d9f0537d5775316fbb8724fd6315cd1a1021a38281431259454fa7e9f4d0818b1c5d34492106d137e2b664232aecb4e48efbd7d34af9adfd860806c92b6ce02c8dad3517636b58a98abc240fb0a5e6f6afcc7e8cfadbe0f6f6e17ca40f93af2008d4e8b12659d3275686e6c75bab7ff452d722f5f3808496d3f256cb2b457749af3f63c587bf37c64c38ebe45d835907f194d7a7c0c9853906ddc29c0", 0xe5}, {&(0x7f0000000800)="2689965b0755818d93e00fc1e09611fd06", 0x11}, {&(0x7f0000000840)}, {&(0x7f0000000880)="8981355d6371dfe711c864a13cb27d8a0cd02ca54b03e3f1450323a05db7d8c597a1926fb16d039cd94830e0bcb680fa956e6ba55fcf5e6cfddd8000d55abb731c2220f670c3687541196476b559d9fe0816736551ff9765400e488cb7d511f5fe852e5450bbc95e9238020a678c9df5db5a8d77922d343635add51ab4246de49bf5148a612927e96ba37a6e793c203c05", 0x91}, {&(0x7f0000000940)="c7a6e634ba33cf0276542c8cea9976", 0xf}, {&(0x7f0000000980)="1161d07d2a238c792e3ea93619e883a8b67f3faefd573f9cc066296b8a8cd923c38f3ad52edd3888538332f5d0a3a7378ed0c1fb97e3c4e15168dc1c94b5f71e4c37c1c3401e38144296813e76dca53f305d50edda614894a8318263e4f3a9045ae1cdb43e3dbe7c9287fc95d857c33011784d3be46652c039a7e1ea9166f03aa05fe8d8cf1e1fd950310356fa6ae38330883501826b53ab2dbd27532a21bca139ac7dce", 0xa4}], 0x9}}], 0x1, 0x890)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)

1.855174764s ago: executing program 2 (id=1883):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)

1.797714492s ago: executing program 1 (id=1884):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=<r2=>0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1700000007"], 0xd)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x54, 0x28, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x6, 0x4}, {0x0, 0xb}, {0x3, 0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x100}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x800}, @TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x54}}, 0x20040800)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="bf73b9e561c5"}, 0x14)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000000)={<r6=>0xffffffffffffffff, 0x20000000000, 0x1c00})
ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f00000000c0))
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x43, 0x0, 0x4}, 0xc)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x9, @fixed}, 0xe)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x4}, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'sit0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x8d0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
unshare(0x28000600)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r8, 0x0)
poll(&(0x7f0000000100)=[{r8}], 0x1, 0x0)

1.67095166s ago: executing program 2 (id=1885):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000029000000040000001d25"], 0x40}}], 0x2, 0x0)

1.5329615s ago: executing program 2 (id=1886):
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000140)={[{@grpid}, {@filestreams}, {@uqnoenforce}, {@largeio}, {}, {@quota}]}, 0xfe, 0x97d9, &(0x7f000001c700)="$eJzs3QeUJXWBeP8emIEhRxXFgICCqGSJBjIiQYmCguSkJAEVkCgoAgooBsQAiETJOeecc8455xz/Z5gZxfGC7O+/u7jee8+Znn7VVdXV38+rqu6u1+8tv9DS8w0MDB0Y3hQDo/bY7GdssOnDSww64uSVH59m0QnmGjF5xAKTjbg52aAR/482MDAw2oj1jJg2zoPHHjfawOA3p/+9ccYae9B4AwMzj7g5z4j/Zx/+3yQPjZzvjVEadUMH/e3moJ2H/3uzCYZ9imHvzLrni/MODAxM+Jblhy0y4z99odKWn3fhhf5u9Te3YVZDRrz/1n9jDP83yT0DA5PcOcD3j7fOO+g9+JKGfc4Jb7pui+nfg8/9f67l5114kVH8h+2Lo4+YNvuwfXzUfdDYqPfzEw4+/MkRQ/jm/W1gYNgh7h/2lf8TLT/vQosNvP1xfuDiOV5+4o03j5vjPDkwMM5TAwPjPD0wMM4zAwPjPDswMM5z77VL/f9r3vlmmW/Y/j7y9gj2kfflCel+8fzcnzhuYGBgzOHzjPP68PPFuFOMPCdUVVXVv3fzzjfL/HD+H/pO5/+Hr9v9mc7/VVVV/3dbZN75Zhl2Hh/l/D/uO53/p9phyMLDf/c/z+zDl3r9vf0iqqqq6r/UQovg+X/Cdzr/r3Xb6Dt1/q+qqvq/21KLv3n+H3eU8/+k73T+HzL5eHePmG/k9w2vvWWVbz5+bMT0V94yffS3TH/5LdOHvGU9b51/jLdMf/Et04cODIzz4Ijpr/598jhPDlvmn9czzvN/fzzOZIPfMv2Ft0wf4y3TXxyxTcOmj/mW6a+9Zf6hf58+7rA3U4z4vC+9w1BXVVX927TULAvNP/CWx9mPmDzygf34uNDz31jm+fdqe6uqqqqqqqrqv97rj518+t//5vujA2/529W//Q3riN8LDDryzCuvfM829N+jQf/8+5Bt3+tt+v/bMOehh0wxMLDBsu/1ptR70P+Zv1Wv/5Hyd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xb3P9/29//7/jRcsvOGLWOc8+bLRF/77kZAPrjnjvsdnP2GDd92Db34P+U6//D6w7aGBghO+EwyyXmHepZaYdGBhYdLTDzp5t4G8fm2PYx+aeePQ3/5hzYGDaN98Omext1jziVRbefHGHSf+2jiPfXP8ib+w7+qBRNuItTXT8/vuvs/wLs476/zRv/3X87fUlXphk/ylG/i3LaKPMNPRtFh65/pFfy6jOI7Z92mHbPsOm6280wyabb/HZdddfde01115zg1lmnn3mOWafcc45Z5lhrXXXW3PG4W/fZsyGv3TF6O9mzMYddcwem/etYzbq1/Z2Y/bPr+rxD6t4c40Hzj7lhSPHbPB/ccxGf+cxm2LdEZ9osoEhA6u8OTSDBgYmGzxkYLNhN2Yac2BgsiEj5p1s2Lyfn3i0gYHd//6FDhrxZKPD5xm07bB5/s1et2TOESOy1cj5Rn2e9VE39F+9bskt8x005SivW/I/1f/T+f+fvOYY9LeBGvkCCCPmGe71Hr/OxD9t7xSD3zzJvd32vsPz4rwZ3b8GzzHH1v9dz4tD2zvuO2zvOzyP39tu77yrfvHI4av6b9veUY51iw3/4Ls51g2887FudFp+zcs+MuqxbtG338R/2I9HjtGYo8z0dse6G5c8cdth6x9452PdYuuOePKAvx/rRhsYmGz0kce6YQe+MYYM7D7sxszDbow5ZOCgYTdmefPGWANnDrsx/eobrrfGoDefZmDEemcctt55Jh70pvu20023xxt7vPHG4BHb8vw4/7itI+4fU7z1fD7vxMMHc+SyI9c7bNaR651xi+EfG2PEel/4L6x35LK0vS+uOPxjY45Y74ujrHfIO6x35LL/tD9MO+gfHqgKx5v39HWNaP8d+g7b+w7Pw433t2HT9t50t8v+G56He9Dbbe/gd97et3vdkLfd3u33mmuX/67nDaf72Y3TDL+vDB1xP3vtv3D/HbnsqMex4U8EMvywP/TdHMem+Kfj2HajjzbKYL+lt/uebQ2Yf/j7k/1tbbftcOWnRo79kFHW+6++Z3vL1zIIjmMTjvLz3KBt9hkYRGO++16DVnv9X4z5kIF//Nli5JiPXPadxnzMdzPmH37nMX+33ydPO9Xwjw8ZZfvfOub7D8x2ysgxH2OU9f6rMR/znc8d/zzmAwNDaMyfvHf4uL3T8fTtxnzksiPHfNjnmXviwQPDfsifesSYj/Fuxnyy/577+dgw//D31/zbpLkfvOv0kWM+6hj/qzEf47845lvf+bf7+dRvfmzK0QbGGGNgs1U33XTjmYa/HXlz5uFv+Vh04gXDx/mdzqVvZzRy2XfaLwa/G6MJ35XRoH9l9KHBb2f0913rvL0WPe3/9Vg0+L9qdCYfizY7evi4vdP3RW835iOXpfPgpG9ZftSfQ9/h+bPwaxo2bb3JV9h35CpHLPZePn/WyJ93/08+f9bI30muO+pBvt5t/f7fXf7u8neXv7v8xb3N9f8pRl7/v3fXpVca8UPnkAeXm+Cu93p73+P+o6//j/D9h+v/d02w3IPDfrQa8bF3vD47fJ5/y+uzsw//b5KHRs436vXBUTf0X12ffeGWL8/yv3R99v+pkfvqu/i5uOO/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9zbXP+fceTjAKZa/PRFR1wIHbLAlsvu8V5v73vcf/T1/xG+/3D9f49lt1xgtIG/fewdr/8Pn8dx/X/n0eff79/5+v/IfbXr//Uvyt9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb3N9f95Rj4O4JoZ9j1g5OMBDnhw+mXe6+19j/tPvf7f6/976/jvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yFzfi+v/AKC+T+LXuFxhc//+/3dv4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/l/PH7P4L58/ZvFfIX/M4v+N/DGL/zfzxyz+K+aPWfxXyh+z+H8rf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/b+ePWfy/kz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+380fs/hvnD9m8d8kf8ziv2n+mMX/e/ljFv/v549Z/H+QP2bx3yx/zOK/ef6YxX+L/DGL/w/zxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/4/yxyz+2+ePWfx3yB+z+P84f8zi/5P8MYv/jvljFv+f5o9Z/HfKH7P475w/ZvHfJX/M4v+z/DGL/8/zxyz+u+aPWfx3yx+z+O+eP2bx/0X+mMX/l/ljFv898scs/r/KH7P4/zp/zOL/m/wxi/9v88cs/nvmj1n8f5c/ZvHfK3/M4v/7/DGL/x/yxyz+f8wfs/j/KX/M4r93/pjFf5/8MYv/vvljFv8/549Z/PfLH7P4/yV/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4/zV/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/un/lP9b/7Gb9u2bxv779H7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+2N/9B/9H+7+cP2bZ/1/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/oIH8MYv/oPwxi/9o+WMW/9Hzxyz+g/PHLP5D8scs/mPkj1n8x8wfs/gPzR+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/+/LHLP7vzx+z+H8gf8ziP1n+mMX/g/ljFv8P5Y9Z/CfPH7P4fzh/zOL/kfwxi/9H88cs/h/LH7P4T5E/ZvH/eP6YxX/K/DGL/1T5Yxb/qfPHLP6fyB+z+H8yf8ziP03+mMV/2vwxi/+n8scs/tPlj1n8P50/ZvH/TP6Yxf+z+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/+fyxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/l/PHLP6L5I9Z/L+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/r+aPWfy/lj9m8V8yf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+y+WPWfy/nj9m8V8+f8ziv0L+mMX/G/ljFv9v5o9Z/FfMH7P4r5Q/ZvH/Vv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/t/OH7P4fyd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/L+bP2bx3zh/zOK/Sf6YxX/T/DGL//fyxyz+388fs/j/IH/M4r9Z/pjFf/P8MYv/FvljFv8f5o9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv8f5Y9Z/LfPH7P475A/ZvH/cf6Yxf8nb++/4Dr/Kxv275nFf8f2f8zi/9P8MYv/TvljFv+d88cs/rvkj1n8f5Y/ZvH/ef6YxX/X/DGL/275Yxb/3fPHLP6/yB+z+P8yf8ziv0f+mMX/V/ljFv9f549Z/H+TP2bx/23+mMV/z/wxi//v8scs/nvlj1n8f58/ZvH/Q/6Yxf+P+WMW/z/lj1n8984fs/jvkz9m8d83f8zi/+f8MYv/fvljFv+/5I9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv+/5o9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzX9kg996w+J/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/zffzf+fs/gPyh+z+I+WP2bxHz1/zOI/OH/M4j8kf8ziP0b+mMV/zPwxi//Q/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/i/L3/M4v/+/DGL/wfyxyz+k+WPWfw/mD9m8f9Q/pjFf/L8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/FPljFv+P549Z/KfMH7P4T5U/ZvGfOn/M4v+J/DGL/yfzxyz+0+SPWfynzR+z+H8qf8ziP13+mMX/0/ljFv/P5I9Z/D+bP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fy5/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/h/OX/M4r9I/pjF/yv5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvH/av6Yxf9r+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/r+WMW/+Xzxyz+K+SPWfy/kT9m8f9m/pjFf8X8MYv/SvljFv9v5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/+38MYv/d/LHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/7v5Yxb/jfPHLP6b5I9Z/DfNH7P4fy9/zOL//fwxi/8P8scs/pvlj1n8N88fs/hvkT9m8f9h/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8f9R/pjFf/v8MYv/DvljFv8f549Z/H+SP2bx3zF/zOL/0/wxi/9O+WMW/53zxyz+u+SPWfx/lj9m8f95/pjFf9f8MYv/bvljFv/d88cs/r/IH7P4/zJ/zOK/R/6Yxf9X+WMW/1/nj1n8f5M/ZvH/bf6YxX/P/DGL/+/yxyz+e+WPWfx/nz9m8f9D/pjF/4/5Yxb/P+WPWfz3zh+z+O+TP2bx3zd/zOL/5/wxi/9++WMW/7/kj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/7/mj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b7X5j/XuZrP432bzf5dZ/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1r+mMV/9Pwxi//g/DGL/5D8MYv/GPljFv8x88cs/kPzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v++/DGL//vzxyz+H8gfs/hPlj9m8f9g/pjF/0P5Yxb/yfPHLP4fzh+z+H8kf8zi/9H8MYv/x/LHLP5T5I9Z/D+eP2bxnzJ/zOI/Vf6YxX/q/DGL/yfyxyz+n8wfs/hPkz9m8Z82f8zi/6n8MYv/dPljFv9P549Z/D+TP2bx/2z+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/ufwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4v/l/DGL/yL5Yxb/r+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf+r+WMW/6/lj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/9y+WMW/6/nj1n8l88fs/ivkD9m8f9G/pjF/5v5Yxb/FfPHLP4r5Y9Z/L+VP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/t/PHLP7fyR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/7+aPWfw3zh+z+G+SP2bx3zR/zOL/vfwxi//388cs/j/IH7P4b5Y/ZvHfPH/M4r9F/pjF/4f5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/0f5Yxb/7fPHLP475I9Z/H+cP2bx/0n+mMV/x/wxi/9P88cs/jvlj1n8d84fs/jvkj9m8f9Z/pjF/+f5Yxb/XfPHLP675Y9Z/HfPH7P4/yJ/zOL/y/wxi/8e+WMW/1/lj1n8f50/ZvH/Tf6Yxf+3+WMW/z3zxyz+v8sfs/jvlT9m8f99/pjF/w/5Yxb/P+aPWfz/lD9m8d87f8ziv0/+mMV/3/wxi/+f36X/GP9T2/VvmsV/v/Z/zOL/l/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOL/1/wxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH5P4Dx7IH7P4D8ofs/iPlj9m8R89f8ziPzh/zOI/JH/M4j9G/pjFf8z8MYv/0Pwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4vy9/zOL//vwxi/8H8scs/pPlj1n8P5g/ZvH/UP6YxX/y/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/xT5Yxb/j+ePWfynzB+z+E+VP2bxnzp/zOL/ifwxi/8n88cs/tPkj1n8p80fs/h/Kn/M4j9d/pjF/9P5Yxb/z+SPWfw/mz/2n+8/ZNibwdPnj/3n+7/Z4Bnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf9z+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjF/8v5Yxb/RfLHLP5fyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/1fzxyz+X8sfs/gvmT9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+X88fs/gvnz9m8V8hf8zi/438MYv/N/PHLP4r5o9Z/FfKH7P4fyt/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv9v549Z/L+TP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP7fzR+z+G+cP2bx3yR/zOK/af6Yxf97+WMW/+/nj1n8f5A/ZvHfLH/M4r95/pjFf4v8MYv/D/PHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/j/LHLP7b549Z/HfIH7P4/zh/zOL/k/wxi/+O+WMW/5/mj1n8d8ofs/jvnD9m8d8lf8zi/7P8MYv/z/PHLP675o9Z/HfLH7P4754/ZvH/Rf6Yxf+X+WMW/z3yxyz+v8ofs/j/On/M4v+b/DGL/2/zxyz+e+aPWfx/lz9m8d8rf8zi//v8MYv/H/LHLP5/zB+z+P8pf8ziv3f+mMV/n/wxi/+++WMW/z/nj1n898sfs/j/JX/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/j/NX/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G2T+87zL+Sz+N8r8320W/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/kIH8MYv/oPwxi/9o+WMW/9Hzxyz+g/PHLP5D8scs/mPkj1n8x8wfs/gPzR+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/+/LHLP7vzx+z+H8gf8ziP1n+mMX/g/ljFv8P5Y9Z/CfPH7P4fzh/zOL/kfwxi/9H88cs/h/LH7P4T5E/ZvH/eP6YxX/K/DGL/1T5Yxb/qfPHLP6fyB+z+H8yf8ziP03+mMV/2vwxi/+n8scs/tPlj1n8P50/ZvH/TP6Yxf+z+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/+fyxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/l/PHLP6L5I9Z/L+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/r+aPWfy/lj9m8V8yf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+y+WPWfy/nj9m8V8+f8ziv0L+mMX/G/ljFv9v5o9Z/FfMH7P4r5Q/ZvH/Vv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/t/OH7P4fyd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/L+bP2bx3zh/zOK/Sf6YxX/T/DGL//fyxyz+388fs/j/IH/M4r9Z/pjFf/P8MYv/FvljFv8f5o9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv8f5Y9Z/LfPH7P475A/ZvH/cf6Yxf8n+WMW/x3zxyz+P80fs/jvlD9m8d85f8ziv0v+mMX/Z/ljFv+f549Z/HfNH7P475Y/ZvHfPX/M4v+L/DGL/y/zxyz+e+SPWfx/lT9m8f91/pjF/zf5Yxb/3+aPWfz3zB+z+P8uf8ziv1f+mMX/9/ljFv8/5I9Z/P+YP2bx/1P+mMV/7/wxi/8++WMW/33zxyz+f84fs/jvlz9m8f9L/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8f9r/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPSfzHGMgfs/gPyh+z+I+WP2bxHz1/zOI/OH/M4j8kf8ziP0b+mMV/zPwxi//Q/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/i/L3/M4v/+/DGL/wfyxyz+k+WPWfw/mD9m8f9Q/pjFf/L8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/FPljFv+P549Z/KfMH7P4T5U/ZvGfOn/M4v+J/DGL/yfzxyz+0+SPWfynzR+z+H8qf8ziP13+mMX/0/ljFv/P5I9Z/D+bP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fy5/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/h/OX/M4r9I/pjF/yv5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvH/av6Yxf9r+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/r+WMW/+Xzxyz+K+SPWfy/kT9m8f9m/pjFf8X8MYv/SvljFv9v5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/+38MYv/d/LHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/7v5Yxb/jfPHLP6b5I9Z/DfNH7P4fy9/zOL//fwxi/8P8scs/pvlj1n8N88fs/hvkT9m8f9h/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8f9R/pjFf/v8MYv/DvljFv8f549Z/H+SP2bx3zF/zOL/0/wxi/9O+WMW/53zxyz+u+SPWfx/lj9m8f95/pjFf9f8MYv/bvljFv/d88cs/r/IH7P4/zJ/zOK/R/6Yxf9X+WMW/1/nj1n8f5M/ZvH/bf6YxX/P/DGL/+/yxyz+e+WPWfx/nz9m8f9D/pjF/4/5Yxb/P+WPWfz3zh+z+O+TP2bx3zd/zOL/5/wxi/9++WMW/7/kj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/7/mj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k1X+Y7zrOS3+p6j8330W/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxv/Gf/Qf/r27Xv2kW/5va/zGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP+ZA/pjFf1D+mMV/tPwxi//o+WMW/8H5Yxb/IfljFv8x8scs/mPmj1n8h+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/335Yxb/9+ePWfw/kD9m8Z8sf8zi/8H8MYv/h/LHLP6T549Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/KfIH7P4fzx/zOI/Zf6YxX+q/DGL/9T5Yxb/T+SPWfw/mT9m8Z8mf8ziP23+mMX/U/ljFv/p8scs/p/OH7P4fyZ/zOL/2fwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf9z+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjF/8v5Yxb/RfLHLP5fyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/1fzxyz+X8sfs/gvmT9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+X88fs/gvnz9m8V8hf8zi/438MYv/N/PHLP4r5o9Z/FfKH7P4fyt/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv9v549Z/L+TP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP7fzR+z+G+cP2bx3yR/zOK/af6Yxf97+WMW/+/nj1n8f5A/ZvHfLH/M4r95/pjFf4v8MYv/D/PHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/j/LHLP7b549Z/HfIH7P4/zh/zOL/k/wxi/+O+WMW/5/mj1n8d8ofs/jvnD9m8d8lf8zi/7P8MYv/z/PHLP675o9Z/HfLH7P4754/ZvH/Rf6Yxf+X+WMW/z3yxyz+v8ofs/j/On/M4v+b/DGL/2/zxyz+e+aPWfx/lz9m8d8rf8zi//v8MYv/H/LHLP5/zB+z+P8pf8ziv3f+mMV/n/wxi/+++WMW/z/nj1n898sfs/j/JX/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/j/NX/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyT+Qwfyxyz+g/LHLP6j5Y9Z/EfPH7P4D84fs/gPyR+z+I+RP2bxHzN/zOI/NH/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+78sfs/i/P3/M4v+B/DGL/2T5Y/+R/v8MPfSD+WP/kf4j3n3r/v+h/DGL/+T5Yxb/D+ePWfw/kj9m8f9o/pjF/2P5Yxb/KfLHLP4fzx+z+E+ZP2bxnyp/zOI/df6Yxf8T+WMW/0/mj1n8p8kfs/hPmz9m8f9U/pjFf7r8MYv/p/PHLP6fyR+z+H82f8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/1z+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvH/cv6YxX+R/DGL/1fyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/1fwxi//X8scs/kvmj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//X88cs/svnj1n8V8gfs/h/I3/M4v/N/DGL/4r5Yxb/lfLHLP7fyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjF/9v5Yxb/7+SPWfzXyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/3fzxyz+G+ePWfw3yR+z+G+aP2bx/17+mMX/+/ljFv8f5I9Z/DfLH7P4b54/ZvHfIn/M4v/D/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v+j/DGL//b5Yxb/HfLHLP4/zh+z+P8kf8ziv2P+mMX/p/ljFv+d8scs/jvnj1n8d8kfs/j/LH/M4v/z/DGL/675Yxb/3fLHLP67549Z/H+RP2bx/2X+mMV/j/wxi/+v8scs/r/OH7P4/yZ/zOL/2/wxi/+e+WMW/9/lj1n898ofs/j/Pn/M4v+H/DGL/x/zxyz+f8ofs/jvnT9m8d8nf8ziv2/+mMX/z/ljFv/98scs/n/JH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/n/NH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxif9YA/ljFv9B+WMW/9Hyxyz+o+ePWfwH549Z/Ifkj1n8x8gfs/iPmT9m8R+aP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/35Y9Z/N+fP2bx/0D+mMV/svwxi/8H88cs/h/KH7P4T54/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvGfIn/M4v/x/DGL/5T5Yxb/qfLHLP5T549Z/D+RP2bx/2T+mMV/mvwxi/+0+WMW/0/lj1n8p8sfs/h/On/M4v+Z/DGL/2fzxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/z+WPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv8v549Z/BfJH7P4fyV/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5fzR+z+H8tf8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+H89f8ziv3z+mMV/hfwxi/838scs/t/MH7P4r5g/ZvFfKX/M4v+t/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8v50/ZvH/Tv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4fzd/zOK/cf6YxX+T/DGL/6b5Yxb/7+WPWfy/nz9m8f9B/pjFf7P8MYv/5vljFv8t8scs/j/MH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/j/KH7P4b58/ZvHfIX/M4v/j/DGL/0/yxyz+O+aPWfx/mj9m8d8pf8ziv3P+mMV/l/wxi//P8scs/j/PH7P475o/ZvHfLX/M4r97/pjF/xf5Yxb/X+aPWfz3yB+z+P8qf8zi/+v8MYv/b/LHLP6/zR+z+O+ZP2bx/13+mMV/r/wxi//v88cs/n/IH7P4/zF/zOL/p/wxi//e+WMW/33yxyz+++aPWfz/nD9m8d8vf8zi/5f8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zi/9f8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+T+I89kD9m8R+UP2bxHy1/zOI/ev6YxX9w/pjFf0j+mMV/jPwxi/+Y+WMW/6H5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8X9f/pjF//35Yxb/D+SPWfwnyx+z+H8wf8zi/6H8MYv/5PljFv8P549Z/D+SP2bx/2j+mMX/Y/ljFv8p8scs/h/PH7P4T5k/ZvGfKn/M4j91/pjF/xP5Yxb/T+aPWfynyR+z+E+bP2bx/1T+mMV/uvwxi/+n88cs/p/JH7P4fzZ/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvH/XP6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvH/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8f9y/pjFf5H8MYv/V/LHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v/V/DGL/9fyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL/9fzxyz+y+ePWfxXyB+z+H8jf8zi/838MYv/ivljFv+V8scs/t/KH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/2/ljFv/v5I9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/d/PHLP4b549Z/DfJH7P4b5o/ZvH/Xv6Yxf/7+WMW/x/kj1n8N8sfs/hvnj9m8d8if8zi/8P8MYv/lvljFv+t8scs/ltvmz9l8d+m/R+z+G+bP2bx3y5/zOL/o/wxi//2+WMW/x3yxyz+P84fs/j/JH/M4r9j/pjF/6f5Yxb/nfLHLP47549Z/HfJH7P4/yx/zOL/8/wxi/+u+WMW/93yxyz+u+ePWfx/kT9m8f9l/pjFf4/8MYv/r/LHLP6/zh+z+P8mf8zi/9v8MYv/nvljFv/f5Y9Z/PfKH7P4/z5/zOL/h/wxi/8f88cs/n/KH7P4750/ZvHfJ3/M4r9v/pjF/8/5Yxb//fLHLP5/yR+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP5/zR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/OAP5Yxb/QfljFv/R8scs/qPnj1n8B+ePWfyH5I9Z/MfIH7P4j5k/ZvEfmj9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/9+WPWfzfnz9m8f9A/pjFf7L8MYv/B/PHLP4fyh+z+E+eP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bxnyJ/zOL/8fwxi/+U+WMW/6nyxyz+U+ePWfw/kT9m8f9k/pjFf5r8MYv/tPljFv9P5Y9Z/KfLH7P4fzp/zOL/mfwxi/9n88cs/tPnj1n8Z8gfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/8/lj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/L+ePWfwXyR+z+H8lf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+X80fs/h/LX/M4r9k/pjFf6n8MYv/0vljFv9l8scs/svmj1n8l8sfs/h/PX/M4r98/pjFf4X8MYv/N/LHLP7fzB+z+K+YP2bxXyl/zOL/rfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/L+dP2bx/07+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+H83f8ziv3H+mMV/k/wxi/+m+WMW/+/lj1n8v58/ZvH/Qf6YxX+z/DGL/+b5Yxb/LfLHLP4/zB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP4/yh+z+G+fP2bx3yF/zOL/4/wxi/9P8scs/jvmj1n8f5o/ZvHfKX/M4r9z/pjFf5f8MYv/z/LHLP4/zx+z+O+aP2bx3y1/zOK/e/6Yxf8X+WMW/1/mj1n898gfs/j/Kn/M4v/r/DGL/2/yxyz+v80fs/jvmT9m8f9d/pjFf6/8MYv/7/PHLP5/yB+z+P8xf8zi/6f8MYv/3vljFv998scs/vvmj1n8/5w/ZvHfL3/M4v+X/DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4v/X/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/iPO5A/ZvEflD9m8R8tf8ziP3r+mMV/cP6YxX9I/pjFf4z8MYv/mPljFv+h+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvF/X/6Yxf/9+WMW/w/kj1n8J8sfs/h/MH/M4v+h/DGL/+T5Yxb/D+ePWfw/kj9m8f9o/pjF/2P5Yxb/KfLHLP4fzx+z+E+ZP2bxnyp/zOI/df6Yxf8T+WMW/0/mj1n8p8kfs/hPmz9m8f9U/pjFf7r8MYv/p/PHLP6fyR+z+H82f8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/1z+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvH/cv6YxX+R/DGL/1fyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/1fwxi//X8scs/kvmj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//X88cs/svnj1n8V8gfs/h/I3/M4v/N/DGL/4r5Yxb/lfLHLP7fyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjF/9v5Yxb/7+SPWfzXyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/3fzxyz+G+ePWfw3yR+z+G+aP2bx/17+mMX/+/ljFv8f5I9Z/DfLH7P4b54/ZvHfIn/M4v/D/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v+j/DGL//b5Yxb/HfLHLP4/zh+z+P8kf8ziv2P+mMX/p/ljFv+d8scs/jvnj1n8d8kfs/j/LH/M4v/z/DGL/675Yxb/3f7Bf+j//nb9m2bx3739H7P4/yJ/zOL/y/wxi/8e+WMW/1/lj1n8f50/ZvH/Tf6Yxf+3+WMW/z3zxyz+v8sfs/jvlT9m8f99/pjF/w/5Yxb/P+aPWfz/lD9m8d87f8ziv0/+mMV/3/wxi/+f88cs/vvlj1n8/5I/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8/5o/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS//EG8scs/oN0/mO+q7ks/qPp/N9dFv/R88cs/oPzxyz+Q/LHLP5j5I9Z/MfMH7P4D80fs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL//vyxyz+788fs/h/IH/M4j9Z/pjF/4P5Yxb/D+WPWfwnzx+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+E+RP2bx/3j+mMV/yvwxi/9U+WMW/6nzxyz+n8gfs/h/Mn/M4j9N/pjFf9r8MYv/p/LHLP7T5Y9Z/D+dP2bx/0z+mMX/s/ljFv/p88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi//n8scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi//n88cs/l/IH7P4fzF/zOL/pfwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/5fzxyz+i+SPWfy/kj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/6/mj1n8v5Y/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8v54/ZvFfPn/M4r9C/pjF/xv5Yxb/b+aPWfxXzB+z+K+UP2bx/1b+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7fzh+z+H8nf8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfy/mz9m8d84f8ziv0n+mMV/0/wxi//38scs/t/PH7P4/yB/zOK/Wf6YxX/z/DGL/xb5Yxb/H+aPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/H+WPWfy3zx+z+O+QP2bx/3H+mMX/J/ljFv8d88cs/j/NH7P475Q/ZvHfOX/M4r9L/pjF/2f5Yxb/n+ePWfx3zR+z+O+WP2bx3z1/zOL/i/wxi/8v88cs/nvkj1n8f5U/ZvH/df6Yxf83+WMW/9/mj1n898wfs/j/Ln/M4r9X/pjF//f5Yxb/P+SPWfz/mD9m8f9T/pjFf+/8MYv/PvljFv9988cs/n/OH7P475c/ZvH/S/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvH/a/6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj0n8xx/IH7P4D8ofs/iPlj9m8R89f8ziPzh/zOI/JH/M4j9G/pjFf8z8MYv/0Pwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4vy9/zOL//vwxi/8H8scs/pPlj1n8P5g/ZvH/UP6YxX/y/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/xT5Yxb/j+ePWfynzB+z+E+VP2bxnzp/zOL/ifwxi/8n88cs/tPkj1n8p80fs/h/Kn/M4j9d/pjF/9P5Yxb/z+SPWfw/mz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H8uf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4fzl/zOK/SP6Yxf8r+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/2r+mMX/a/ljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMX/6/ljFv/l88cs/ivkj1n8v5E/ZvH/Zv6YxX/F/DGL/0r5Yxb/b+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v/t/DGL/3fyxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6Yxf+7+WMW/43zxyz+m+SPWfw3zR+z+H8vf8zi//38MYv/D/LHLP6b5Y9Z/DfPH7P4b5E/ZvH/Yf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvH/Uf6YxX/7/DGL/w75Yxb/H+ePWfx/kj9m8d8xf8zi/9P8MYv/TvljFv+d88cs/rvkj1n8f5Y/ZvH/ef6YxX/X/DGL/275Yxb/3fPHLP6/yB+z+P9yYGj+kMV/j/Z/zOL/q/wxi/+v88cs/r/JH7P4/zZ/zOK/Z/6Yxf93+WMW/73yxyz+v88fs/j/IX/M4v/H/DGL/5/yxyz+e+ePWfz3yR+z+O+bP2bx/3P+mMV/v/wxi/9f8scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/9f88cs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+ePzZ0YEDh/0b+mGT/n2Agf8ziPyh/zOI/Wv6YxX/0/DGL/+D8MYv/kPwxi/8Y+WMW/zHzxyz+Q/PHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J85/eEP/8abFf5L8/z/26aELEAMBwuDO7s4yOsS2bdu2bdu27Uxs27Y5sW3buuXl0L8gXXXq+/c6auk/rP5RS//h9I9a+g+vf9TSfwT9o5b+I+oftfQfSf+opf/I+kct/UfRP2rpP6r+UUv/0fSPWvqPrn/U0n8M/aOW/mPqH7X0H0v/qKX/2PpHLf3H0T9q6T+u/lFL//H0j1r6j69/1NJ/Av2jlv4T6h+19J9I/6il/8T6Ry39J9E/auk/qf5RS//J9I9a+k+uf9TSfwr9o5b+U+oftfSfSv+opf/U+kct/afRP2rpP63+UUv/6fSPWvpPr3/U0n8G/aOW/jPqH7X0n0n/qKX/zPpHLf1n0T9q6T+r/lFL/9n0j1r6z65/1NJ/Dv2jlv5z6h8NGDyoov9c+kct/59b/6il/zz6Ry3959U/auk/n/5RS//59Y9a+i+gf9TSf0H9o5b+C+kftfRfWP+opf8i+kct/RfVP2rpv5j+UUv/xfWPWvovoX/U0n9J/aOW/kvpH7X0X1r/qKX/MvpHLf2X1T9q6b+c/lFL/+X1j1r6r6B/1NJ/Rf2jlv4r6R+19F9Z/6il/yr6Ry39V9U/aum/mv5RS//V9Y9a+q+hf9TSf039o5b+a+kftfRfW/+opf86+kct/dfVP2rpv57+UUv/9fWPWvpvoH/U0n9D/aOW/hvpH7X031j/qKX/JvpHLf031T9q6b+Z/lFL/831j1r6b6F/1NJ/S/2jlv5b6R+19N9a/6il/zb6Ry39t9U/aum/nf5RS//t9Y9a+u+gf9TSf0f9o5b+O+kftfTfWf+opf8u+kct/XfVP2rpv5v+UUv/3fWPWvrvoX/U0n9P/aOW/nvpH7X031v/qKX/PvpHLf331T9q6b+f/lFL//31j1r6H6B/1NL/QP2jlv4H6R+19D9Y/6il/yH6Ry39D9U/aul/mP5RS//D9Y9a+h+hf9TS/0j9o5b+R+kftfQ/Wv+opf8x+kct/Y/VP2rpf5z+UUv/4/WPWvqfoP+fDPxjtfQ/Uf+opf9J+kct/QfpH7X0P1n/qKX/KfpHLf1P1T9q6X+a/lFL/9P1j1r6n6F/1NL/TP2jlv5n6R+19D9b/6il/zn6Ry39z9U/aul/nv5RS//z9Y9a+l+gf9TS/0L9o5b+F+kftfS/WP+opf8l+kct/S/VP2rpf5n+UUv/y/WPWvpfoX/U0v9K/aOW/lfpH7X0v1r/qKX/NfpHLf2v1T9q6X+d/lFL/+v1j1r636B/1NL/Rv2jlv436R+19L9Z/6il/y36Ry39b9U/aul/m/5RS//b9Y9a+t+hf9TS/079o5b+d+kftfS/W/+opf89+kct/e/VP2rpf5/+UUv/+/WPWvo/oH/U0v9B/aOW/g/pH7X0f1j/qKX/I/pHLf0f1T9q6f+Y/lFL/8f1j1r6P6F/1NJ/sP5RS/8n9Y9a+j+lf9TS/2n9o5b+z+gftfR/Vv+opf9z+kct/Z/XP2rp/4L+UUv/F/WPWvq/pH/U0v9l/aOW/q/oH7X0f1X/qKX/a/pHLf1f1z9q6f+G/lFL/zf1j1r6v6V/1NL/bf2jlv7v6B+19H9X/6il/3v6Ry3939c/aun/gf5RS/8P9Y9a+n+kf9TS/2P9o5b+n+gftfT/VP+opf9n+kct/T/XP2rp/4X+UUv/L/WPWvp/pX/U0v9r/aOW/t/oH7X0/1b/qKX/d/pHLf2/1z9q6f+D/lFL/x/1j1r6/6R/1NL/Z/2jlv6/6B+19P9V/6il/2/6RyX9h/mb/lFL/wH6Ry39/65/1NL/H/pHLf3/qX/U0n+g/lFL/3/pH7X0/7f+UUv//+gftfT/r/5RS///6R+19P+//lFL/yH0j1r6D6l/1NJ/KP2jlv5D6x/95foDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOvv3HeF0XcBz/3E8UC1BI31L8CMpDDY4fxvGjZNZqnKxjpGu6lsLgRO1Qg1vxw+jYtPUHm7hYs6aT1m5mizWmcyRRWrqYG9NNWmnZpJwxHE7bQvuxrn257/e4+3rc/L6v95s/eDz+uPt+Psfrc8D25PO5cQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKW3asvWra7q6Ojd64YUXXgy8ONv/MgGpnY7+bP9OAAAAAAAAAAAAAACAM8nx40Rn+88IAAAAAADnmvaOa0401A051TD4YMrhzlPvr3rnhlt7e5+4sPK+/OEVw1yyfvBBX19f344DbywvH44piqL02SaUj8+rHpeu37N/1R/6j0Jxou1Xd3Qf76j72ZM3v9myYvySplNnm4rVt9zW1Tm3vihCQ1OxuXQwr64oQnNTsat0ML90MKap+HHpYMGpg/OLp0oHc9be2bWudOI9nxrOOe0dPUXDkGKLIf8aDO6/Z//D71bej3DJytUai3L/l3z+6V1VH6s4Q/+V64e66v5r/gMCZ1Rb/4/1VN6PcMn33P8n/XX7tcN97Mz9V64f6vUP6Qzz/D+k0ern/qrn/+nDXHJgf2hG2yOl/rc99NyD5VON7+f5//T1Q0N1//VDnv9Lz/GNlef/MUURmkb51wHnlPaOHSdGuv+P3H/j5KpN3eD+D674wbOl/qd1TGosn2qqsf/GEe7/ddufGvp7BWrT3vHDvqr7fw39Fy3DXHKg/+m9E98p9X/1hH+/NuhjtfTfVN1/a/eGu1o3bdk6+7YNa9Z3ru+8Y8H8tvmL2uYuXryg9dQjQf/bUf6twLlhdPf/YmzVpq4oOgf2vzx6bGmp/01Hjm0unzqvxv6bR7z/v+r+D8OaUV80Nxeb13R3b5zX/7ZyOL//bf8vG6b/Gr7+nzmr/MsqX3eXviAf2B9YWPSW+t/58vVbyqeaa+x/zEj9f+v05wUijPL+v65qM6T/y1+455VS//veeuO68qlav/4/b8T+97j/w2i0d1R9w8//Wan/kycPRn6zTTjf//9BOjn6f7n+p0/ErcNY/UM6Ofq//+4xw32fwPsQLtA/pJOj/00Prn0+bh0+oH9IJ0f/i/5y6Ma4dfig/iGdHP1Puvilv8Wtwzj9Qzo5+r/51o1fi1uH8fqHdHL0f+yeZ+6OW4cJ+od0cvT/o3/deTxuHS7UP6STo//7xm2/Pm4dLtI/pJOj/2fu+t2v49Zhov4hnRz9X7Zr3+y4dZikf0gnR/8b3px8IG4dPqR/SCdH/9dMviDy53TDxfqHdHL0P3bdnu/GrcMl+od0cvTfvXfOn+PWIegf0snR/7IX710etw6X6h/SydH/xJbdJ+PWYbL+IZ0c/d9w47LVcevwYf1DOjn6f/LnX74vbh0+on9IJ0f/b//2rUvj1mGK/iGdHP2/suDoI3HrMFX/kE6O/r/3hWvnxa3DNP1DOjn6f+z4zl/ErcN0/UM6Ofp/d3fLFXHr8FH9Qzo5+j+yeuHuuHWYoX9IJ0f/D099qD5uHWbqH9LJ0f83//vPE3Hr8DH9Qzo5+l/Y88Vtcevwcf1DOjn6n9z92Wfj1uEy/UM6OfpfNfbYdXHr0KJ/SCdH/62/uWVq3DrM0j+kk6P/dQcPfyduHS7XP6STo//l7X9aGLcOV+gf0snRf0PbN/bErcOV+od0cvR/9PcTV8atwyf0D+nk6P8nj+5/KW4dZusf0snR/7e/8uj6uHWYo39IJ0f/h2fWvx23Dq36h3Ry9L/1+cf/E7cOc/UP6eTof96+abfHrcM8/UM6Ofqf8rlxR+LWYb7+IZ0c/X9pae9n4tZhgf4hnRz9P/7Hp/fGrcNV+od0cvTf13v70rh1+KT+IZ0c/b+4atu9ceuwUP+QTo7+H2h9YWLcOrTpH9LJ0f/rr990U9w6LNI/pJOj/70P/ONQ3Dos1j+kk6P/HV2vfT1uHZboH9LJ0f9zF618NW4dluof0snR/6y/Xzk+bh0+pX9IJ0f/a3f2fD9uHT6tf0gnR/8rN9/fErcOV+sf0snRf2Pzkn1x67BM/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cyAAAAAAI87fOo/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE8BAAD//1oYYGk=")
setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0)
setxattr$incfs_metadata(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)

1.370662054s ago: executing program 0 (id=1887):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}, @IFLA_TXQLEN={0x8}]}, 0x3c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0)
socket$inet(0x2, 0x3, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x80, 0x8, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
listen(r0, 0x4)
accept(r0, &(0x7f0000000080)=@can, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg(r8, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="4634788bf9126d00830aece8d5000f7fd5", 0x11}], 0x1}}], 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

861.234437ms ago: executing program 1 (id=1888):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)

768.93961ms ago: executing program 1 (id=1889):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r1}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0)
writev(r4, &(0x7f0000000580)=[{&(0x7f00000003c0)='k', 0x1600}], 0x1)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x10f340, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000280))
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

495.628609ms ago: executing program 1 (id=1890):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})

453.812345ms ago: executing program 2 (id=1891):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
write(r0, &(0x7f0000000bc0)="1c0000001a000da560f142ffff00", 0xe)

402.863833ms ago: executing program 0 (id=1892):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0)
getsockname(r1, &(0x7f0000000280)=@xdp={0x2c, 0x0, <r2=>0x0}, &(0x7f0000000040)=0x80)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0xa}, @local, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80800000, r2})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x0, 0x84)

331.305293ms ago: executing program 1 (id=1893):
socket(0x0, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

314.782545ms ago: executing program 4 (id=1894):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)

213.409ms ago: executing program 4 (id=1895):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000029000000040000001d25"], 0x40}}], 0x2, 0x0)

142.94873ms ago: executing program 4 (id=1896):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@noquota}, {@errors_continue}, {@discard_size={'discard', 0x3d, 0x4}}, {@errors_continue}, {@quota}, {@discard}, {@grpquota}]}, 0x1, 0x60b9, &(0x7f0000013cc0)="$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")
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x588, 0x3c8, 0xf8, 0x0, 0x228, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {0x3000000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@dscp={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}}}}, {{@ipv6={@remote, @dev, [], [], 'macvlan1\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
munlockall()
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
creat(0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x7, 'vlan0\x00', {0x2}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x10000, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES64, @ANYRESDEC=r4], 0x1, 0x182, &(0x7f0000000800)="$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")
getresgid(&(0x7f0000000140), &(0x7f0000000580), &(0x7f0000000180))
openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x109543, 0x0)
fsync(r2)

0s ago: executing program 2 (id=1897):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=<r2=>0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1700000007"], 0xd)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x54, 0x28, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x6, 0x4}, {0x0, 0xb}, {0x3, 0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x100}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x800}, @TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x54}}, 0x20040800)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="bf73b9e561c5"}, 0x14)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000000)={<r6=>0xffffffffffffffff, 0x20000000000, 0x1c00})
ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f00000000c0))
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x43, 0x0, 0x4}, 0xc)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x9, @fixed}, 0xe)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x4}, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'sit0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x8d0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
unshare(0x28000600)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r8, 0x0)
poll(&(0x7f0000000100)=[{r8}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

865][ T7673] random: crng reseeded on system resumption
[  309.111467][ T3596] usb 1-1: device descriptor read/64, error -71
[  309.209348][ T4191] usb 4-1: USB disconnect, device number 32
[  309.231991][ T3596] usb usb1-port1: attempt power cycle
[  309.310660][ T7683] loop3: detected capacity change from 0 to 2048
[  309.399827][ T7683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  309.651382][ T3596] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  309.758847][ T3596] usb 1-1: device descriptor read/8, error -71
[  309.768551][ T4070] EXT4-fs (loop3): unmounting filesystem.
[  309.932481][   T22] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  310.181370][ T3596] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  310.271606][ T3596] usb 1-1: device descriptor read/8, error -71
[  310.311389][   T22] usb 5-1: Using ep0 maxpacket: 32
[  310.392238][ T3596] usb usb1-port1: unable to enumerate USB device
[  310.431537][   T22] usb 5-1: config 0 has an invalid interface number: 115 but max is 1
[  310.445058][   T22] usb 5-1: config 0 has an invalid interface number: 41 but max is 1
[  310.453738][   T22] usb 5-1: config 0 has no interface number 0
[  310.459980][   T22] usb 5-1: config 0 has no interface number 1
[  310.466256][   T22] usb 5-1: config 0 interface 41 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  310.482881][   T22] usb 5-1: config 0 interface 115 has no altsetting 0
[  310.568042][ T7711] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  310.641535][   T22] usb 5-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=a3.63
[  310.651046][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.659308][   T22] usb 5-1: Product: syz
[  310.664011][   T22] usb 5-1: Manufacturer: syz
[  310.668622][   T22] usb 5-1: SerialNumber: syz
[  310.682537][   T22] usb 5-1: config 0 descriptor??
[  310.724153][   T22] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.115/input/input27
[  310.791415][ T4556] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  310.841402][   T14] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  310.941435][ T2987] bcm5974 5-1:0.115: could not read from device
[  310.954161][   T22] usb 5-1: USB disconnect, device number 28
[  310.960401][ T2987] bcm5974 5-1:0.115: could not read from device
[  311.031586][ T3596] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  311.051475][ T4556] usb 4-1: Using ep0 maxpacket: 32
[  311.101412][   T14] usb 3-1: Using ep0 maxpacket: 16
[  311.191687][ T4556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  311.207684][ T4556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.218531][ T4556] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  311.230009][ T4556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.243058][ T4556] usb 4-1: config 0 descriptor??
[  311.257519][   T27] audit: type=1326 audit(1719541229.576:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.2.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fc175b29 code=0x7ffc0000
[  311.281433][ T3596] usb 2-1: Using ep0 maxpacket: 32
[  311.288891][   T27] audit: type=1326 audit(1719541229.576:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.2.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f66fc175b29 code=0x7ffc0000
[  311.313576][ T4556] hub 4-1:0.0: USB hub found
[  311.319256][   T27] audit: type=1326 audit(1719541229.576:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.2.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fc175b29 code=0x7ffc0000
[  311.341915][   T27] audit: type=1326 audit(1719541229.576:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.2.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fc175b29 code=0x7ffc0000
[  311.521547][ T4556] hub 4-1:0.0: 1 port detected
[  311.561907][ T3596] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  311.581139][ T3596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.590859][ T3596] usb 2-1: Product: syz
[  311.602527][ T3596] usb 2-1: Manufacturer: syz
[  311.607217][ T3596] usb 2-1: SerialNumber: syz
[  311.623402][ T3596] usb 2-1: config 0 descriptor??
[  311.701914][ T3596] usb 2-1: bad CDC descriptors
[  311.731577][ T4556] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  311.737970][ T4556] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  311.740523][ T3596] usb 2-1: unsupported MDLM descriptors
[  311.861469][ T4556] usbhid 4-1:0.0: can't add hid device: -71
[  311.867470][ T4556] usbhid: probe of 4-1:0.0 failed with error -71
[  311.982185][ T4556] usb 4-1: USB disconnect, device number 33
[  312.047336][ T7736] random: crng reseeded on system resumption
[  313.700066][ T3596] usb 2-1: USB disconnect, device number 30
[  313.721691][   T22] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  313.916563][   T22] usb 5-1: device descriptor read/64, error -71
[  314.101522][ T3596] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  314.199604][   T22] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  314.349240][ T3858] Bluetooth: hci4: Frame reassembly failed (-90)
[  314.356206][ T3596] usb 2-1: Using ep0 maxpacket: 32
[  314.389988][ T3858] Bluetooth: hci4: Frame reassembly failed (-84)
[  314.396898][   T22] usb 5-1: device descriptor read/64, error -71
[  314.581998][   T22] usb usb5-port1: attempt power cycle
[  314.661561][ T3596] usb 2-1: config 0 has an invalid interface number: 115 but max is 1
[  314.672870][ T3596] usb 2-1: config 0 has an invalid interface number: 41 but max is 1
[  314.683673][ T3596] usb 2-1: config 0 has no interface number 0
[  314.689779][ T3596] usb 2-1: config 0 has no interface number 1
[  314.696661][ T3596] usb 2-1: config 0 interface 41 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  314.706530][ T3596] usb 2-1: config 0 interface 115 has no altsetting 0
[  314.871580][ T3596] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=a3.63
[  314.880702][ T3596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.888746][ T3596] usb 2-1: Product: syz
[  314.892932][ T3596] usb 2-1: Manufacturer: syz
[  314.897567][ T3596] usb 2-1: SerialNumber: syz
[  314.904248][ T3596] usb 2-1: config 0 descriptor??
[  314.942934][ T3596] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.115/input/input28
[  315.001808][   T22] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  315.091490][   T22] usb 5-1: device descriptor read/8, error -71
[  315.162423][ T2987] bcm5974 2-1:0.115: could not read from device
[  315.173237][ T3596] usb 2-1: USB disconnect, device number 31
[  315.361519][   T22] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  315.461576][   T22] usb 5-1: device descriptor read/8, error -71
[  315.581977][   T22] usb usb5-port1: unable to enumerate USB device
[  316.271442][   T14] usb 3-1: unable to get BOS descriptor or descriptor too short
[  316.279167][   T14] usb 3-1: no configurations
[  316.281903][ T3562] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  316.288155][   T14] usb 3-1: can't read configurations, error -22
[  316.531428][   T14] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  316.932605][ T7800] random: crng reseeded on system resumption
[  317.403773][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  317.410080][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  317.601421][   T14] usb 3-1: device descriptor read/64, error -32
[  317.731576][   T14] usb usb3-port1: attempt power cycle
[  317.787902][ T3552] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  317.813743][ T3552] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  317.822396][ T3552] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  317.830773][ T3552] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  317.838470][ T3552] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  317.845906][ T3552] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  317.864522][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.074703][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.161513][   T14] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  318.224316][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.261541][   T14] usb 3-1: device descriptor read/8, error -32
[  318.505552][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.651403][   T14] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  318.731581][   T14] usb 3-1: device descriptor read/8, error -32
[  318.799044][ T7807] chnl_net:caif_netlink_parms(): no params data found
[  318.851528][   T14] usb usb3-port1: unable to enumerate USB device
[  318.861413][ T3596] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  319.006227][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.013693][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.022060][ T7807] device bridge_slave_0 entered promiscuous mode
[  319.033819][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.041065][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.049539][ T7807] device bridge_slave_1 entered promiscuous mode
[  319.088553][ T7807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.115612][ T3594] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  319.137403][ T7807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.162312][ T7807] team0: Port device team_slave_0 added
[  319.169977][ T7807] team0: Port device team_slave_1 added
[  319.556785][ T4859] Bluetooth: hci4: Frame reassembly failed (-90)
[  319.831834][ T3594] usb 1-1: not running at top speed; connect to a high speed hub
[  319.881639][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_0
[  319.888607][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.888699][ T3562] Bluetooth: hci2: command tx timeout
[  319.922316][ T7807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.935838][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.942827][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.971039][ T7807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.019706][ T7807] device hsr_slave_0 entered promiscuous mode
[  320.034704][ T7807] device hsr_slave_1 entered promiscuous mode
[  320.048919][ T3594] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  320.067555][ T3594] usb 1-1: config 1 interface 0 has no altsetting 0
[  320.078108][ T7807] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  320.085986][ T7807] Cannot create hsr debugfs directory
[  320.312116][ T3594] usb 1-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40
[  320.358376][ T3594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.420784][ T3594] usb 1-1: Product: syz
[  320.440884][ T3594] usb 1-1: Manufacturer: 뤼ꡚ鯸撇糖璓጑眺楅盵⩤〳䙿ꌻ籫丞聎产뛫퍃颜軒꾗㉞샵麍뙥Ắ뛇և왵糶灷蔓祉驫漂瞾銲􆖪쩪➟買᭔﵂侂♐㪥핝Ӵ楛黼ɸೲ儎觶橶靎껜ꎹ賄봲（ࣨ幂᰷蒮ൢ䉑愳
[  320.565927][ T3594] usb 1-1: SerialNumber: syz
[  320.623358][ T7821] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  320.791384][ T3596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.811428][ T3596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.821196][ T3596] usb 5-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00
[  320.830845][ T3596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.850710][ T3596] usb 5-1: config 0 descriptor??
[  320.873192][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.881953][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.081674][ T3591] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  321.208186][   T11] device hsr_slave_0 left promiscuous mode
[  321.215813][   T11] device hsr_slave_1 left promiscuous mode
[  321.224358][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.231939][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.239455][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.246936][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.255004][   T11] device bridge_slave_1 left promiscuous mode
[  321.261199][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.269424][   T11] device bridge_slave_0 left promiscuous mode
[  321.278458][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.300714][   T11] device veth1_macvtap left promiscuous mode
[  321.301497][ T3594] usbhid 1-1:1.0: can't add hid device: -71
[  321.306806][   T11] device veth0_macvtap left promiscuous mode
[  321.318979][ T3594] usbhid: probe of 1-1:1.0 failed with error -71
[  321.319091][   T11] device veth1_vlan left promiscuous mode
[  321.328337][ T3594] usb 1-1: USB disconnect, device number 29
[  321.331229][   T11] device veth0_vlan left promiscuous mode
[  321.351745][ T3591] usb 4-1: Using ep0 maxpacket: 32
[  321.493598][ T3591] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.504834][ T3591] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.515058][ T3591] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  321.527315][ T3591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.543656][ T3591] usb 4-1: config 0 descriptor??
[  321.574992][ T3562] Bluetooth: hci4: command 0xfc11 tx timeout
[  321.575164][ T3552] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  321.601471][ T3596] usbhid 5-1:0.0: can't add hid device: -71
[  321.601812][ T3591] hub 4-1:0.0: USB hub found
[  321.610729][ T3596] usbhid: probe of 5-1:0.0 failed with error -71
[  321.623605][ T3596] usb 5-1: USB disconnect, device number 33
[  321.909614][   T11] team0 (unregistering): Port device team_slave_1 removed
[  321.937104][ T3591] hub 4-1:0.0: 1 port detected
[  321.961807][ T3552] Bluetooth: hci2: command tx timeout
[  322.011922][   T11] team0 (unregistering): Port device team_slave_0 removed
[  322.100713][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  322.147809][ T3591] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  322.159609][ T3591] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  322.208617][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  322.253328][ T7857] loop2: detected capacity change from 0 to 256
[  322.274788][ T3591] usbhid 4-1:0.0: can't add hid device: -71
[  322.281022][ T3591] usbhid: probe of 4-1:0.0 failed with error -71
[  322.332120][ T3591] usb 4-1: USB disconnect, device number 34
[  322.416036][ T7860] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  322.703649][ T3596] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  322.948208][   T11] bond0 (unregistering): Released all slaves
[  322.961628][ T3596] usb 1-1: Using ep0 maxpacket: 16
[  323.038779][   T27] audit: type=1326 audit(1719541241.356:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ee775b29 code=0x7ffc0000
[  323.100514][   T27] audit: type=1326 audit(1719541241.356:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f02ee775b29 code=0x7ffc0000
[  323.123837][ T3596] usb 1-1: unable to get BOS descriptor or descriptor too short
[  323.132127][   T27] audit: type=1326 audit(1719541241.356:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ee775b29 code=0x7ffc0000
[  323.154701][ T3596] usb 1-1: no configurations
[  323.159307][ T3596] usb 1-1: can't read configurations, error -22
[  323.166271][   T27] audit: type=1326 audit(1719541241.386:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.0.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ee775b29 code=0x7ffc0000
[  323.307066][ T7807] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  323.316019][ T7807] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  323.326212][ T7807] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  323.355109][ T7807] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  323.362541][ T4197] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  323.507470][ T7807] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.536115][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  323.548101][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  323.570660][ T7807] 8021q: adding VLAN 0 to HW filter on device team0
[  323.607426][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  323.624512][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  323.639131][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.646274][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.686120][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  323.702402][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  323.711142][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  323.726309][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.733434][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.749143][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  323.758020][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  323.771507][ T4197] usb 5-1: not running at top speed; connect to a high speed hub
[  323.796535][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  323.810147][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  323.825943][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  323.849559][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  323.851528][ T4197] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  323.867587][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  323.889628][ T4197] usb 5-1: config 1 interface 0 has no altsetting 0
[  323.962813][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  323.972110][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  323.980673][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  323.991200][ T7807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  324.010453][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  324.043349][ T3552] Bluetooth: hci2: command tx timeout
[  324.051430][ T3596] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  324.071503][ T4197] usb 5-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40
[  324.087168][ T4197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.095332][ T4197] usb 5-1: Product: syz
[  324.099506][ T4197] usb 5-1: Manufacturer: 뤼ꡚ鯸撇糖璓጑眺楅盵⩤〳䙿ꌻ籫丞聎产뛫퍃颜軒꾗㉞샵麍뙥Ắ뛇և왵糶灷蔓祉驫漂瞾銲􆖪쩪➟買᭔﵂侂♐㪥핝Ӵ楛黼ɸೲ儎觶橶靎껜ꎹ賄봲（ࣨ幂᰷蒮ൢ䉑愳
[  324.130870][ T4197] usb 5-1: SerialNumber: syz
[  324.151741][ T7869] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  324.288199][   T14] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  324.321381][ T3596] usb 1-1: Using ep0 maxpacket: 32
[  324.373709][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.398628][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.416832][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  324.426103][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  324.441510][ T3596] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  324.450009][ T7807] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.498001][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  324.507488][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  324.542497][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  324.552650][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  324.573102][ T7807] device veth0_vlan entered promiscuous mode
[  324.580810][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  324.601651][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  324.613461][ T7807] device veth1_vlan entered promiscuous mode
[  324.621440][ T3596] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.40
[  324.630580][ T3596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.651713][ T3596] usb 1-1: Product: syz
[  324.656461][ T3596] usb 1-1: Manufacturer: syz
[  324.678100][ T3596] usb 1-1: SerialNumber: syz
[  324.680494][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  324.701622][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.722157][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  324.729698][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.733268][ T3596] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  324.740341][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  324.755260][   T14] usb 3-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00
[  324.765373][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.774235][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  324.784148][   T14] usb 3-1: config 0 descriptor??
[  324.794486][ T7807] device veth0_macvtap entered promiscuous mode
[  324.813554][ T4197] usbhid 5-1:1.0: can't add hid device: -71
[  324.819635][ T4197] usbhid: probe of 5-1:1.0 failed with error -71
[  324.821050][ T7807] device veth1_macvtap entered promiscuous mode
[  324.846250][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.849418][ T4197] usb 5-1: USB disconnect, device number 34
[  324.856759][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.856775][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.856789][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.856799][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.856811][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.856822][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.962044][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.972322][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.982913][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.003476][ T7807] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.012726][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  325.030984][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  325.040098][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  325.048864][ T7892] loop3: detected capacity change from 0 to 2048
[  325.055974][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  325.073199][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.109874][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.122243][ T7892] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  325.139591][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.178320][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.208010][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.231628][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.245069][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.257032][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.267409][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.278711][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.290498][ T7807] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.300957][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  325.315146][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  325.334162][ T7807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.351460][ T7807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.359823][   T14] wacom 0003:056A:0309.0007: hidraw0: USB HID v0.00 Device [HID 056a:0309] on usb-dummy_hcd.2-1/input0
[  325.370439][ T7807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.411413][ T7807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.472835][ T4191] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  325.509824][ T3997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.525199][ T3997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.549598][ T4070] EXT4-fs (loop3): unmounting filesystem.
[  325.554206][ T3596] usb 3-1: USB disconnect, device number 41
[  325.587390][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  325.599208][ T3896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.616653][ T3896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.634718][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  325.731373][ T4191] usb 5-1: Using ep0 maxpacket: 32
[  325.752035][ T3552] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  325.824822][ T3552] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  325.851567][ T4191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.869933][ T4191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.879850][ T4191] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  325.889476][ T4191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.898698][ T4191] usb 5-1: config 0 descriptor??
[  325.942114][ T4191] hub 5-1:0.0: USB hub found
[  326.128759][ T3552] Bluetooth: hci2: command tx timeout
[  326.161623][ T4191] hub 5-1:0.0: 1 port detected
[  326.381436][ T4191] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  326.388979][ T4191] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  326.491546][ T4191] usbhid 5-1:0.0: can't add hid device: -71
[  326.498912][ T4191] usbhid: probe of 5-1:0.0 failed with error -71
[  326.532146][ T4191] usb 5-1: USB disconnect, device number 35
[  326.626682][ T7919] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  326.688288][ T3591] usb 1-1: USB disconnect, device number 31
[  326.921557][   T14] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  327.531458][   T14] usb 4-1: Using ep0 maxpacket: 16
[  327.594817][   T27] audit: type=1326 audit(1719541245.916:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cbf75b29 code=0x7ffc0000
[  327.657179][   T27] audit: type=1326 audit(1719541245.946:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cbf75b29 code=0x7ffc0000
[  327.861572][   T14] usb 4-1: unable to get BOS descriptor or descriptor too short
[  327.861985][   T27] audit: type=1326 audit(1719541245.946:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f54cbf75b29 code=0x7ffc0000
[  327.879435][   T14] usb 4-1: no configurations
[  327.959985][ T7937] loop1: detected capacity change from 0 to 16
[  327.971449][ T7937] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  328.483324][   T14] usb 4-1: can't read configurations, error -22
[  328.738158][   T27] audit: type=1326 audit(1719541245.946:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cbf75b29 code=0x7ffc0000
[  328.871100][   T27] audit: type=1326 audit(1719541245.946:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cbf75b29 code=0x7ffc0000
[  328.962994][ T3552] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection
[  329.113496][ T3552] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260
[  329.289021][ T7963] random: crng reseeded on system resumption
[  329.671504][   T14] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  330.071408][   T14] usb 4-1: Using ep0 maxpacket: 32
[  330.931574][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.952656][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.971400][   T14] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  331.010924][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.042055][   T14] usb 4-1: config 0 descriptor??
[  331.092407][   T14] hub 4-1:0.0: USB hub found
[  331.248842][ T4857] Bluetooth: hci4: Frame reassembly failed (-90)
[  331.312774][   T14] hub 4-1:0.0: 1 port detected
[  331.541723][   T14] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  331.556304][   T14] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  331.853654][   T14] usbhid 4-1:0.0: can't add hid device: -71
[  331.860335][   T14] usbhid: probe of 4-1:0.0 failed with error -71
[  331.932253][   T14] usb 4-1: USB disconnect, device number 36
[  331.957699][ T7983] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  332.043418][ T7977] loop0: detected capacity change from 0 to 40427
[  332.064209][ T7977] F2FS-fs (loop0): invalid crc value
[  332.228149][ T7977] F2FS-fs (loop0): Found nat_bits in checkpoint
[  332.307500][ T7977] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  332.411978][ T3591] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  332.691677][ T3591] usb 2-1: Using ep0 maxpacket: 16
[  332.811849][   T27] audit: type=1326 audit(1719541251.106:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.1.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bee375b29 code=0x7ffc0000
[  332.861581][ T3591] usb 2-1: unable to get BOS descriptor or descriptor too short
[  332.886328][ T3591] usb 2-1: no configurations
[  332.921244][ T3591] usb 2-1: can't read configurations, error -22
[  332.977212][   T27] audit: type=1326 audit(1719541251.106:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.1.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f3bee375b29 code=0x7ffc0000
[  333.020136][   T27] audit: type=1326 audit(1719541251.106:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.1.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bee375b29 code=0x7ffc0000
[  333.068955][   T27] audit: type=1326 audit(1719541251.116:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.1.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bee375b29 code=0x7ffc0000
[  333.251588][ T3552] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  333.566735][ T3594] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  334.253201][ T8025] random: crng reseeded on system resumption
[  334.581508][ T3594] usb 4-1: Using ep0 maxpacket: 32
[  334.629717][   T27] audit: type=1800 audit(1719541252.946:128): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1333" name="bus" dev="sda1" ino=2019 res=0 errno=0
[  334.731562][ T3594] usb 4-1: config 0 has an invalid interface number: 115 but max is 1
[  334.739765][ T3594] usb 4-1: config 0 has an invalid interface number: 41 but max is 1
[  334.773127][ T3594] usb 4-1: config 0 has no interface number 0
[  334.779235][ T3594] usb 4-1: config 0 has no interface number 1
[  334.816609][ T3594] usb 4-1: config 0 interface 41 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  334.841595][ T3594] usb 4-1: config 0 interface 115 has no altsetting 0
[  335.028121][ T3594] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=a3.63
[  335.061564][ T3594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.076540][ T3594] usb 4-1: Product: syz
[  335.086251][ T3594] usb 4-1: Manufacturer: syz
[  335.095298][ T3594] usb 4-1: SerialNumber: syz
[  335.111128][ T3594] usb 4-1: config 0 descriptor??
[  335.164159][ T3594] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.115/input/input32
[  335.257785][ T8029] loop1: detected capacity change from 0 to 40427
[  335.274762][ T8029] F2FS-fs (loop1): invalid crc value
[  335.311361][ T8029] F2FS-fs (loop1): Found nat_bits in checkpoint
[  335.381451][ T2987] bcm5974 4-1:0.115: could not read from device
[  335.396282][ T3594] usb 4-1: USB disconnect, device number 37
[  335.444397][ T8029] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  336.248961][ T4469] Bluetooth: hci4: Frame reassembly failed (-90)
[  336.255836][ T4469] Bluetooth: hci4: Frame reassembly failed (-84)
[  337.510424][ T8084] Bluetooth: MGMT ver 1.22
[  337.603185][ T8086] random: crng reseeded on system resumption
[  338.282341][ T3552] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  338.290160][ T3562] Bluetooth: hci4: command 0xfc11 tx timeout
[  338.391765][ T3591] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  338.671548][ T3591] usb 5-1: Using ep0 maxpacket: 32
[  338.813661][ T3591] usb 5-1: config 0 has an invalid interface number: 115 but max is 1
[  338.833877][ T3591] usb 5-1: config 0 has an invalid interface number: 41 but max is 1
[  338.881447][ T3591] usb 5-1: config 0 has no interface number 0
[  338.901780][ T3591] usb 5-1: config 0 has no interface number 1
[  338.931587][ T3591] usb 5-1: config 0 interface 41 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  338.971232][ T3591] usb 5-1: config 0 interface 115 has no altsetting 0
[  338.994938][ T8108] loop0: detected capacity change from 0 to 256
[  339.048171][ T8108] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[  339.171129][ T3591] usb 5-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=a3.63
[  339.180918][ T3591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.196727][ T3591] usb 5-1: Product: syz
[  339.200983][ T3591] usb 5-1: Manufacturer: syz
[  339.205748][ T3591] usb 5-1: SerialNumber: syz
[  339.212323][ T3591] usb 5-1: config 0 descriptor??
[  339.259089][ T8112] kvm: emulating exchange as write
[  339.266963][ T3591] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.115/input/input33
[  339.411381][   T22] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  339.471507][ T2987] bcm5974 5-1:0.115: could not read from device
[  339.489485][ T3591] usb 5-1: USB disconnect, device number 36
[  339.514754][ T8127] loop2: detected capacity change from 0 to 256
[  339.771495][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.797183][   T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  339.833942][   T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  339.855061][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.866420][   T22] usb 1-1: config 0 descriptor??
[  340.334128][ T8136] random: crng reseeded on system resumption
[  340.610630][   T22] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  340.652681][   T22] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  340.802873][ T3552] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  340.869685][ T3552] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  342.527628][   T14] usb 1-1: USB disconnect, device number 32
[  342.754997][ T8176] loop2: detected capacity change from 0 to 256
[  342.976393][ T8180] loop1: detected capacity change from 0 to 16
[  342.988879][ T8180] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  343.869211][ T8184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1378'.
[  343.914050][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1378'.
[  344.135947][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'.
[  345.321426][ T4197] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  346.011630][ T4197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.028233][ T4197] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  346.048618][ T4197] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  346.059651][ T4197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.071716][ T4197] usb 2-1: config 0 descriptor??
[  346.234670][   T22] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  346.355354][ T8230] loop3: detected capacity change from 0 to 16
[  346.368048][ T8230] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  346.491389][   T22] usb 1-1: Using ep0 maxpacket: 32
[  346.576806][ T4197] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  346.612186][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.705692][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.724769][ T4197] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  347.011728][   T22] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.40
[  347.041606][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.061169][   T22] usb 1-1: Product: syz
[  347.075781][   T22] usb 1-1: Manufacturer: syz
[  347.091502][   T22] usb 1-1: SerialNumber: syz
[  347.108901][ T8236] device bond0 entered promiscuous mode
[  347.123168][ T8236] device bond_slave_0 entered promiscuous mode
[  347.129525][ T8236] device bond_slave_1 entered promiscuous mode
[  347.371554][   T22] usbhid 1-1:1.0: can't add hid device: -22
[  347.378768][   T22] usbhid: probe of 1-1:1.0 failed with error -22
[  347.401106][   T22] usb 1-1: USB disconnect, device number 33
[  347.407547][ T4197] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  347.500218][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1396'.
[  348.252382][ T4191] usb 2-1: USB disconnect, device number 34
[  348.561498][ T4197] usb 5-1: Using ep0 maxpacket: 32
[  349.261656][ T4197] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  349.387362][ T4197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.397304][ T4197] usb 5-1: config 0 descriptor??
[  349.442931][ T4197] gspca_main: sunplus-2.14.0 probing 0458:7006
[  350.290910][ T8270] loop3: detected capacity change from 0 to 256
[  350.629222][ T8276] loop1: detected capacity change from 0 to 32768
[  350.780459][ T8276] XFS (loop1): Mounting V5 Filesystem
[  350.909131][ T8276] XFS (loop1): Ending clean mount
[  351.041837][ T8276] XFS (loop1): Quotacheck needed: Please wait.
[  351.107694][ T8297] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  351.754390][ T3619] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[  351.789681][ T4197] usb 5-1: USB disconnect, device number 37
[  351.823708][ T3619] XFS (loop1): Unmount and run xfs_repair
[  351.833318][ T3619] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  351.840786][ T3619] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  351.871416][ T3619] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  351.880424][ T3619] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  351.891484][ T3619] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  351.901151][ T3619] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  351.916736][   T27] audit: type=1800 audit(1719541270.236:129): pid=8296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1410" name="bus" dev="sda1" ino=2020 res=0 errno=0
[  351.937199][ T3619] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  351.937248][ T3619] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  351.937262][ T3619] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  351.937543][ T3619] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  351.987881][ T3619] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x6a5/0xb80 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  352.015463][ T3619] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  352.028052][ T8276] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  352.108446][ T7807] XFS (loop1): Unmounting Filesystem
[  352.256467][ T8316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1414'.
[  352.275532][ T4556] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  352.283710][ T3552] Bluetooth: hci6: ACL packet for unknown connection handle 0
[  353.321725][ T4556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.349237][ T4556] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  353.378291][ T4556] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  353.397633][ T4556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.429555][ T4556] usb 1-1: config 0 descriptor??
[  353.708785][   T27] audit: type=1800 audit(1719541272.026:130): pid=8348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1424" name="bus" dev="sda1" ino=1991 res=0 errno=0
[  353.729117][    C0] vkms_vblank_simulate: vblank timer overrun
[  353.994850][ T4556] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  354.011227][ T4556] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  354.846471][ T8335] loop4: detected capacity change from 0 to 32768
[  355.043667][ T8335] XFS (loop4): Mounting V5 Filesystem
[  355.172622][   T14] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  355.471561][   T14] usb 2-1: Using ep0 maxpacket: 8
[  355.557824][ T8335] XFS (loop4): Ending clean mount
[  355.752376][ T3591] usb 1-1: USB disconnect, device number 34
[  355.817591][   T14] usb 2-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c
[  355.836319][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.855655][ T3552] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  355.897624][   T14] usb 2-1: Product: syz
[  355.902227][   T14] usb 2-1: Manufacturer: syz
[  355.906848][   T14] usb 2-1: SerialNumber: syz
[  355.913282][   T14] usb 2-1: config 0 descriptor??
[  355.930249][ T6715] XFS (loop4): Unmounting Filesystem
[  355.948175][ T3552] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  356.161342][  T152] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  356.188130][   T14] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in cold state, will try to load a firmware
[  356.207130][   T14] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  356.216087][   T14] dib0700: firmware download failed at 7 with -22
[  356.225866][   T14] usb 2-1: USB disconnect, device number 35
[  356.432529][  T152] usb 3-1: Using ep0 maxpacket: 32
[  356.555157][  T152] usb 3-1: config 0 has an invalid interface number: 115 but max is 1
[  356.567577][  T152] usb 3-1: config 0 has an invalid interface number: 41 but max is 1
[  356.579212][  T152] usb 3-1: config 0 has no interface number 0
[  356.588795][  T152] usb 3-1: config 0 has no interface number 1
[  356.598908][  T152] usb 3-1: config 0 interface 41 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  356.639240][  T152] usb 3-1: config 0 interface 115 has no altsetting 0
[  356.811717][  T152] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=a3.63
[  356.820793][  T152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.842957][  T152] usb 3-1: Product: syz
[  356.847142][  T152] usb 3-1: Manufacturer: syz
[  356.861396][  T152] usb 3-1: SerialNumber: syz
[  356.881909][  T152] usb 3-1: config 0 descriptor??
[  356.901497][ T8441] loop0: detected capacity change from 0 to 2048
[  356.925305][ T8441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  356.943878][  T152] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.115/input/input38
[  357.067685][ T4191] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  357.481775][ T4191] usb 4-1: not running at top speed; connect to a high speed hub
[  357.521854][ T3596] usb 3-1: USB disconnect, device number 42
[  357.552171][ T2987] bcm5974 3-1:0.115: could not read from device
[  357.592180][ T4191] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  357.711817][ T4191] usb 4-1: config 1 interface 0 has no altsetting 0
[  357.803195][ T5400] EXT4-fs (loop0): unmounting filesystem.
[  357.948144][ T4191] usb 4-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40
[  357.974272][ T4191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.000124][ T4191] usb 4-1: Product: syz
[  358.017958][ T4191] usb 4-1: Manufacturer: 뤼ꡚ鯸撇糖璓጑眺楅盵⩤〳䙿ꌻ籫丞聎产뛫퍃颜軒꾗㉞샵麍뙥Ắ뛇և왵糶灷蔓祉驫漂瞾銲􆖪쩪➟買᭔﵂侂♐㪥핝Ӵ楛黼ɸೲ儎觶橶靎껜ꎹ賄봲（ࣨ幂᰷蒮ൢ䉑愳
[  358.069363][ T4191] usb 4-1: SerialNumber: syz
[  358.091718][ T8434] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  358.218859][ T3562] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  358.286335][ T8462] loop0: detected capacity change from 0 to 40427
[  358.300142][ T3557] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  358.300711][ T8462] F2FS-fs (loop0): invalid crc value
[  358.313120][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.321567][ T8462] F2FS-fs (loop0): Found nat_bits in checkpoint
[  358.329221][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.352062][ T3596] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  358.358016][ T8462] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  358.380335][ T5400] syz-executor: attempt to access beyond end of device
[  358.380335][ T5400] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  358.534649][ T8477] netlink: 'syz.0.1453': attribute type 10 has an invalid length.
[  358.544720][ T8477] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1453'.
[  358.593242][ T3596] usb 2-1: Using ep0 maxpacket: 8
[  358.635811][   T27] audit: type=1800 audit(1719541276.956:131): pid=8481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1455" name="bus" dev="sda1" ino=2021 res=0 errno=0
[  358.738147][ T4191] usbhid 4-1:1.0: can't add hid device: -71
[  358.744703][ T4191] usbhid: probe of 4-1:1.0 failed with error -71
[  358.756998][ T4191] usb 4-1: USB disconnect, device number 38
[  358.871518][ T3596] usb 2-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c
[  358.880585][ T3596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.901379][ T3596] usb 2-1: Product: syz
[  358.905560][ T3596] usb 2-1: Manufacturer: syz
[  358.910164][ T3596] usb 2-1: SerialNumber: syz
[  358.932920][ T3596] usb 2-1: config 0 descriptor??
[  359.282195][ T3596] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in cold state, will try to load a firmware
[  359.341572][ T4191] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  359.364475][ T3596] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  359.484704][ T3596] dib0700: firmware download failed at 7 with -22
[  359.616445][ T3596] usb 2-1: USB disconnect, device number 36
[  359.622739][ T4191] usb 3-1: Using ep0 maxpacket: 32
[  359.741646][ T4191] usb 3-1: config 0 has an invalid interface number: 115 but max is 1
[  359.760761][ T4191] usb 3-1: config 0 has an invalid interface number: 41 but max is 1
[  359.796863][ T4191] usb 3-1: config 0 has no interface number 0
[  359.839526][ T4191] usb 3-1: config 0 has no interface number 1
[  359.876250][ T4191] usb 3-1: config 0 interface 41 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  359.918532][ T4191] usb 3-1: config 0 interface 115 has no altsetting 0
[  359.951594][ T8508] loop1: detected capacity change from 0 to 512
[  359.961702][ T3552] Bluetooth: hci6: command 0x0406 tx timeout
[  359.979645][ T8508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  360.004586][ T8508] EXT4-fs (loop1): orphan cleanup on readonly fs
[  360.028997][ T8508] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1466: bg 0: block 248: padding at end of block bitmap is not set
[  360.075059][ T8508] Quota error (device loop1): write_blk: dquota write failed
[  360.091546][ T4191] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=a3.63
[  360.110946][ T4191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.119032][ T4191] usb 3-1: Product: syz
[  360.123341][ T4191] usb 3-1: Manufacturer: syz
[  360.127942][ T4191] usb 3-1: SerialNumber: syz
[  360.140186][ T4191] usb 3-1: config 0 descriptor??
[  360.143790][ T8508] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  360.176723][   T27] audit: type=1800 audit(1719541278.496:132): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1467" name="bus" dev="sda1" ino=2021 res=0 errno=0
[  360.183880][ T4191] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.115/input/input40
[  360.197038][    C0] vkms_vblank_simulate: vblank timer overrun
[  360.234143][ T8508] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.1466: Failed to acquire dquot type 1
[  360.268187][ T8508] EXT4-fs (loop1): 1 truncate cleaned up
[  360.315833][ T8508] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  360.401412][ T2987] bcm5974 3-1:0.115: could not read from device
[  360.419270][ T4191] usb 3-1: USB disconnect, device number 43
[  360.449215][ T8505] loop3: detected capacity change from 0 to 32768
[  360.468594][ T7807] EXT4-fs (loop1): unmounting filesystem.
[  360.507176][ T8505] XFS (loop3): Mounting V5 Filesystem
[  360.559477][ T8505] XFS (loop3): Ending clean mount
[  360.566920][ T8505] XFS (loop3): Quotacheck needed: Please wait.
[  360.609077][ T8505] XFS (loop3): Quotacheck: Done.
[  360.620251][ T8535] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1473'.
[  360.669316][ T4070] XFS (loop3): Unmounting Filesystem
[  360.921513][ T3591] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  360.987367][   T27] audit: type=1800 audit(1719541279.306:133): pid=8546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1479" name="bus" dev="sda1" ino=2022 res=0 errno=0
[  361.161607][ T3591] usb 1-1: Using ep0 maxpacket: 32
[  361.272329][ T8568] loop1: detected capacity change from 0 to 256
[  361.282104][ T3591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.304304][ T8568] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39394bcb, utbl_chksum : 0xe619d30d)
[  361.310305][ T3591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.347689][ T3591] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  361.357774][ T3591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.365861][ T3594] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  361.387258][ T3591] usb 1-1: config 0 descriptor??
[  361.442340][ T3591] hub 1-1:0.0: USB hub found
[  361.550778][ T8576] loop1: detected capacity change from 0 to 1024
[  361.575525][ T8576] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1024)!
[  361.614416][ T8576] EXT4-fs (loop1): group descriptors corrupted!
[  361.621444][ T3594] usb 4-1: Using ep0 maxpacket: 8
[  361.649512][ T8566] loop4: detected capacity change from 0 to 32768
[  361.661429][ T8566] XFS (loop4): Mounting V5 Filesystem
[  361.671969][ T3591] hub 1-1:0.0: 1 port detected
[  361.698779][ T8566] XFS (loop4): Ending clean mount
[  361.706506][ T8566] XFS (loop4): Quotacheck needed: Please wait.
[  361.732076][ T8566] XFS (loop4): Quotacheck: Done.
[  361.753810][ T6715] XFS (loop4): Unmounting Filesystem
[  361.887251][ T8589] tmpfs: Unknown parameter 'seclabel'
[  361.902791][ T3591] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  361.914975][ T3591] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  361.921431][ T4191] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  361.943698][ T3594] usb 4-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c
[  361.957522][ T3594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.973746][ T3594] usb 4-1: Product: syz
[  361.978007][ T3594] usb 4-1: Manufacturer: syz
[  361.985784][ T3594] usb 4-1: SerialNumber: syz
[  361.994348][ T3594] usb 4-1: config 0 descriptor??
[  362.010903][   T27] audit: type=1800 audit(1719541280.326:134): pid=8593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1495" name="bus" dev="sda1" ino=2020 res=0 errno=0
[  362.053511][ T3591] usbhid 1-1:0.0: can't add hid device: -71
[  362.061814][ T3591] usbhid: probe of 1-1:0.0 failed with error -71
[  362.102989][ T3591] usb 1-1: USB disconnect, device number 35
[  362.161385][ T4191] usb 3-1: Using ep0 maxpacket: 32
[  362.271653][ T3594] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in cold state, will try to load a firmware
[  362.281511][ T4191] usb 3-1: config 0 has an invalid interface number: 115 but max is 1
[  362.284854][ T3594] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  362.293346][ T4191] usb 3-1: config 0 has an invalid interface number: 41 but max is 1
[  362.298786][ T3594] dib0700: firmware download failed at 7 with -22
[  362.316088][ T3594] usb 4-1: USB disconnect, device number 39
[  362.327626][ T4191] usb 3-1: config 0 has no interface number 0
[  362.336368][ T4191] usb 3-1: config 0 has no interface number 1
[  362.345109][ T4191] usb 3-1: config 0 interface 41 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  362.354906][ T4191] usb 3-1: config 0 interface 115 has no altsetting 0
[  362.487794][ T8604] loop0: detected capacity change from 0 to 512
[  362.497024][ T8604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  362.521463][ T4191] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=a3.63
[  362.531568][ T4191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.540051][ T4191] usb 3-1: Product: syz
[  362.545455][ T4191] usb 3-1: Manufacturer: syz
[  362.550742][ T4191] usb 3-1: SerialNumber: syz
[  362.557369][ T4191] usb 3-1: config 0 descriptor??
[  362.568621][ T8604] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1500: bg 0: block 248: padding at end of block bitmap is not set
[  362.584080][ T8604] Quota error (device loop0): write_blk: dquota write failed
[  362.593017][ T8604] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  362.605775][ T4191] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.115/input/input42
[  362.611446][ T8604] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.1500: Failed to acquire dquot type 1
[  362.627605][ T8604] EXT4-fs (loop0): 1 truncate cleaned up
[  362.633318][ T8604] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  362.642525][ T8604] ext4 filesystem being mounted at /root/syzkaller.xMTnu3/187/bus supports timestamps until 2038 (0x7fffffff)
[  362.796189][ T5400] EXT4-fs (loop0): unmounting filesystem.
[  362.817149][ T2987] bcm5974 3-1:0.115: could not read from device
[  362.839566][ T4191] usb 3-1: USB disconnect, device number 44
[  362.916174][ T8614] loop0: detected capacity change from 0 to 1024
[  363.238320][ T8618] loop3: detected capacity change from 0 to 16
[  363.245815][ T8618] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  363.559152][ T3998] Bluetooth: hci4: Frame reassembly failed (-90)
[  363.602007][ T3998] Bluetooth: hci4: Frame reassembly failed (-84)
[  363.827802][ T8624] tmpfs: Unknown parameter 'seclabel'
[  363.966158][ T3552] Bluetooth: hci5: unexpected event for opcode 0x0c1c
[  364.760249][ T8657] loop1: detected capacity change from 0 to 16
[  364.767645][ T8657] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  364.833078][ T8656] tmpfs: Unknown parameter 'seclabel'
[  365.369884][ T8659] loop0: detected capacity change from 0 to 1024
[  365.481460][ T3557] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  365.573729][ T3557] Bluetooth: hci1: unexpected event for opcode 0x0c1c
[  365.757896][ T3557] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  365.839990][ T3557] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  366.131448][   T22] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  366.338582][ T8682] random: crng reseeded on system resumption
[  366.402678][   T22] usb 5-1: Using ep0 maxpacket: 32
[  366.601878][   T22] usb 5-1: config 1 interface 0 has no altsetting 0
[  366.761719][   T22] usb 5-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40
[  366.779243][ T8690] tmpfs: Bad value for 'mpol'
[  366.784147][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.801463][   T22] usb 5-1: Product: syz
[  366.805775][   T22] usb 5-1: Manufacturer: 뤼ꡚ鯸撇糖璓጑眺楅盵⩤〳䙿ꌻ籫丞聎产뛫퍃颜軒꾗㉞샵麍뙥Ắ뛇և왵糶灷蔓祉驫漂瞾銲􆖪쩪➟買᭔﵂侂♐㪥핝Ӵ楛黼ɸೲ儎觶橶靎껜ꎹ賄봲（ࣨ幂᰷蒮ൢ䉑愳
[  366.885127][   T22] usb 5-1: SerialNumber: syz
[  367.008948][   T27] audit: type=1800 audit(1719541285.326:135): pid=8692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1530" name="bus" dev="sda1" ino=2020 res=0 errno=0
[  367.142839][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.207621][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.292005][ T8699] loop3: detected capacity change from 0 to 1024
[  367.436865][ T3557] Bluetooth: hci3: unexpected event for opcode 0x0c1c
[  367.501442][ T4191] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  367.775127][   T22] usbhid 5-1:1.0: can't add hid device: -71
[  367.781996][   T22] usbhid: probe of 5-1:1.0 failed with error -71
[  367.790754][   T22] usb 5-1: USB disconnect, device number 38
[  367.792053][ T8695] loop0: detected capacity change from 0 to 32768
[  367.823728][ T8695] XFS (loop0): Mounting V5 Filesystem
[  367.953000][ T4859] Bluetooth: hci4: Frame reassembly failed (-90)
[  367.983921][ T4859] Bluetooth: hci4: Frame reassembly failed (-84)
[  368.196285][ T8695] XFS (loop0): Ending clean mount
[  368.262913][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'.
[  368.531064][ T5400] XFS (loop0): Unmounting Filesystem
[  368.553910][ T4191] usb 3-1: Using ep0 maxpacket: 8
[  368.629672][ T8722] loop4: detected capacity change from 0 to 256
[  368.691525][ T4191] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFB, skipping
[  368.770136][ T3552] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[  368.848869][ T3552] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260
[  368.871491][ T4191] usb 3-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice= f.71
[  368.888156][ T4191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.898195][ T4191] usb 3-1: Product: syz
[  368.902566][ T4191] usb 3-1: Manufacturer: syz
[  368.908155][ T4191] usb 3-1: SerialNumber: syz
[  368.916508][ T4191] usb 3-1: config 0 descriptor??
[  369.150805][ T8727] tmpfs: Bad value for 'mpol'
[  369.166806][   T14] usb 3-1: USB disconnect, device number 45
[  369.971672][ T3552] Bluetooth: hci4: command 0xfc11 tx timeout
[  369.980079][ T3557] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  370.071470][ T3594] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  370.129978][ T8749] loop3: detected capacity change from 0 to 256
[  370.143512][ T8749] FAT-fs (loop3): bogus logical sector size 0
[  370.164338][ T8749] FAT-fs (loop3): Can't find a valid FAT filesystem
[  370.238491][ T8750] random: crng reseeded on system resumption
[  370.324066][ T8744] loop4: detected capacity change from 0 to 32768
[  370.351400][ T3594] usb 1-1: Using ep0 maxpacket: 32
[  370.390843][ T8744] XFS (loop4): Mounting V5 Filesystem
[  370.482860][ T8744] XFS (loop4): Ending clean mount
[  370.564285][ T6715] XFS (loop4): Unmounting Filesystem
[  370.571984][ T3594] usb 1-1: config 1 interface 0 has no altsetting 0
[  370.781584][ T3594] usb 1-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40
[  370.800442][ T3594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.824257][ T3594] usb 1-1: Product: syz
[  370.840787][ T3594] usb 1-1: Manufacturer: 뤼ꡚ鯸撇糖璓጑眺楅盵⩤〳䙿ꌻ籫丞聎产뛫퍃颜軒꾗㉞샵麍뙥Ắ뛇և왵糶灷蔓祉驫漂瞾銲􆖪쩪➟買᭔﵂侂♐㪥핝Ӵ楛黼ɸೲ儎觶橶靎껜ꎹ賄봲（ࣨ幂᰷蒮ൢ䉑愳
[  370.890190][ T3594] usb 1-1: SerialNumber: syz
[  370.922134][ T8767] sg_read: process 319 (syz.4.1551) changed security contexts after opening file descriptor, this is not allowed.
[  371.262073][ T8743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.270572][ T8743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.537333][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'.
[  371.738790][ T8769] loop4: detected capacity change from 0 to 40427
[  371.745394][ T3594] usbhid 1-1:1.0: can't add hid device: -71
[  371.751479][ T3594] usbhid: probe of 1-1:1.0 failed with error -71
[  371.774029][ T8769] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  371.780644][ T8769] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  371.794435][ T3594] usb 1-1: USB disconnect, device number 36
[  371.816673][ T8769] F2FS-fs (loop4): Found nat_bits in checkpoint
[  371.888382][ T8769] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  371.909371][ T8769] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  371.971791][   T14] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  371.979969][ T6715] syz-executor: attempt to access beyond end of device
[  371.979969][ T6715] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  372.231633][   T14] usb 4-1: Using ep0 maxpacket: 8
[  372.270750][   T27] audit: type=1800 audit(1719541290.586:136): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1561" name="bus" dev="sda1" ino=2015 res=0 errno=0
[  372.326954][ T8794] loop1: detected capacity change from 0 to 164
[  372.402305][   T14] usb 4-1: unable to read config index 0 descriptor/start: -71
[  372.431326][   T14] usb 4-1: can't read configurations, error -71
[  374.012926][ T3557] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  374.085567][ T3557] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  374.181435][   T26] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  374.471363][   T26] usb 5-1: Using ep0 maxpacket: 32
[  374.611563][   T22] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  374.752292][   T26] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  374.773987][   T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.827164][   T26] usb 5-1: Product: syz
[  374.850387][   T26] usb 5-1: Manufacturer: syz
[  374.870880][   T26] usb 5-1: SerialNumber: syz
[  374.885436][   T26] usb 5-1: config 0 descriptor??
[  374.953726][   T26] usb 5-1: bad CDC descriptors
[  374.958670][   T26] usb 5-1: unsupported MDLM descriptors
[  374.981660][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.010953][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.055459][   T22] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  375.096010][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.145756][   T27] audit: type=1800 audit(1719541293.466:137): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1588" name="bus" dev="sda1" ino=2021 res=0 errno=0
[  375.175969][   T22] usb 2-1: config 0 descriptor??
[  375.497582][ T8875] loop2: detected capacity change from 0 to 2048
[  375.571540][ T8875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  375.663395][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'.
[  375.724585][   T22] uclogic 0003:5543:0005.000B: unknown main item tag 0x0
[  375.758412][   T22] uclogic 0003:5543:0005.000B: No inputs registered, leaving
[  375.821524][   T22] uclogic 0003:5543:0005.000B: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0
[  375.928023][   T22] usb 2-1: USB disconnect, device number 37
[  376.159235][ T3548] EXT4-fs (loop2): unmounting filesystem.
[  376.812121][ T8894] x_tables: duplicate underflow at hook 2
[  377.786202][ T3591] usb 5-1: USB disconnect, device number 39
[  377.874854][ T3557] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  377.998775][   T27] audit: type=1800 audit(1719541296.316:138): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1600" name="bus" dev="sda1" ino=2021 res=0 errno=0
[  378.080611][ T8883] loop0: detected capacity change from 0 to 40427
[  378.127513][ T8883] F2FS-fs (loop0): invalid crc value
[  378.170256][ T8883] F2FS-fs (loop0): Found nat_bits in checkpoint
[  378.291045][ T8883] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  378.359389][ T5400] syz-executor: attempt to access beyond end of device
[  378.359389][ T5400] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  378.378504][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  378.384874][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  378.868964][ T3557] Bluetooth: hci3: unexpected event for opcode 0x0c1c
[  378.971656][   T22] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  379.099787][   T14] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  379.341418][   T14] usb 5-1: Using ep0 maxpacket: 16
[  379.471447][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  379.508903][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.943162][   T22] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  380.049184][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.066454][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  380.078513][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  380.089073][   T14] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  380.098161][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.132821][   T14] usb 5-1: config 0 descriptor??
[  380.163989][   T22] usb 2-1: config 0 descriptor??
[  380.194661][ T3557] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  380.278183][ T3557] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  380.393468][ T8924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.429601][ T8924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.629764][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'.
[  380.634249][ T8956] loop3: detected capacity change from 0 to 256
[  380.653062][ T8956] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  380.673013][ T8924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.689328][   T22] uclogic 0003:5543:0005.000C: unknown main item tag 0x0
[  380.691489][ T8924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.707126][   T22] uclogic 0003:5543:0005.000C: No inputs registered, leaving
[  380.733705][   T22] uclogic 0003:5543:0005.000C: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0
[  380.752222][   T14] hid (null): bogus close delimiter
[  380.763276][   T14] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0
[  380.772450][   T14] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0
[  380.779850][   T14] hid-generic 0003:0158:0100.000D: bogus close delimiter
[  380.787042][   T14] hid-generic 0003:0158:0100.000D: item 0 0 2 10 parsing failed
[  380.803167][   T14] hid-generic: probe of 0003:0158:0100.000D failed with error -22
[  380.905416][   T26] usb 2-1: USB disconnect, device number 38
[  380.966014][ T4556] usb 5-1: USB disconnect, device number 40
[  381.051157][ T8963] loop2: detected capacity change from 0 to 512
[  381.075945][ T8963] EXT4-fs (loop2): orphan cleanup on readonly fs
[  381.083723][ T8963] EXT4-fs error (device loop2): ext4_quota_enable:6968: inode #4: comm syz.2.1620: iget: bogus i_mode (3600)
[  381.099492][ T8963] EXT4-fs error (device loop2): ext4_quota_enable:6971: comm syz.2.1620: Bad quota inode: 4, type: 1
[  381.126105][ T8963] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  381.142333][ T8963] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  381.149048][ T8963] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  381.189552][ T8963] EXT4-fs error (device loop2): __ext4_remount:6425: comm syz.2.1620: Abort forced by user
[  381.190168][ T8961] loop0: detected capacity change from 0 to 32768
[  381.213817][ T8961] XFS (loop0): Mounting V5 Filesystem
[  381.223900][ T3548] EXT4-fs (loop2): unmounting filesystem.
[  381.289006][ T8961] XFS (loop0): Ending clean mount
[  381.313137][ T5400] XFS (loop0): Unmounting Filesystem
[  382.854305][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'.
[  382.871689][ T4556] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  382.893090][ T9006] device geneve2 entered promiscuous mode
[  383.157691][ T4556] usb 1-1: Using ep0 maxpacket: 16
[  383.276670][ T8992] loop4: detected capacity change from 0 to 32768
[  383.384373][ T3997] Bluetooth: hci4: Frame reassembly failed (-90)
[  383.391072][ T3997] Bluetooth: hci4: Frame reassembly failed (-84)
[  383.400716][ T3997] Bluetooth: hci4: Frame reassembly failed (-84)
[  383.473080][ T8992] XFS (loop4): Mounting V5 Filesystem
[  383.494108][ T4556] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f
[  383.549387][ T4556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.695602][ T4556] usb 1-1: Product: syz
[  383.769677][ T4556] usb 1-1: Manufacturer: syz
[  383.840633][ T4556] usb 1-1: SerialNumber: syz
[  383.937440][ T4556] usb 1-1: config 0 descriptor??
[  383.976290][ T8992] XFS (loop4): Ending clean mount
[  383.985107][ T8992] XFS (loop4): Quotacheck needed: Please wait.
[  384.002590][ T4556] kobil_sct 1-1:0.0: required endpoints missing
[  384.016751][ T9003] loop1: detected capacity change from 0 to 32768
[  384.030224][ T9003] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1631 (9003)
[  384.032553][ T8992] XFS (loop4): Quotacheck: Done.
[  384.053796][ T9003] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  384.070151][ T9003] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  384.079178][ T9003] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  384.089020][ T9003] BTRFS info (device loop1): use zstd compression, level 3
[  384.096428][ T9003] BTRFS info (device loop1): using free space tree
[  384.109489][ T6715] XFS (loop4): Unmounting Filesystem
[  384.145618][ T9003] BTRFS info (device loop1): enabling ssd optimizations
[  384.206445][ T4556] usb 1-1: USB disconnect, device number 37
[  384.242684][   T14] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  384.364309][ T7807] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  385.402143][ T3557] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  385.501777][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.523977][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.571575][   T14] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  386.364015][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.377139][   T14] usb 3-1: config 0 descriptor??
[  386.409354][ T9065] loop1: detected capacity change from 0 to 256
[  386.619172][ T9071] loop1: detected capacity change from 0 to 512
[  386.885755][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1638'.
[  387.421430][   T14] uclogic 0003:5543:0005.000E: unknown main item tag 0x0
[  387.435266][   T14] uclogic 0003:5543:0005.000E: No inputs registered, leaving
[  387.456834][   T14] uclogic 0003:5543:0005.000E: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.2-1/input0
[  387.632163][   T26] usb 3-1: USB disconnect, device number 46
[  387.780261][ T9059] loop4: detected capacity change from 0 to 40427
[  387.828571][ T9059] F2FS-fs (loop4): invalid crc value
[  387.865924][ T9059] F2FS-fs (loop4): Found nat_bits in checkpoint
[  387.901432][ T9084] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  387.971366][ T9059] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  388.031827][ T6715] syz-executor: attempt to access beyond end of device
[  388.031827][ T6715] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  388.061693][ T9071] loop1: detected capacity change from 0 to 32768
[  388.070275][ T9071] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1645 (9071)
[  388.112266][ T9071] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  388.141412][ T9071] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  388.160356][ T9071] BTRFS info (device loop1): setting nodatacow, compression disabled
[  388.170828][ T9071] BTRFS info (device loop1): turning on flush-on-commit
[  388.178118][ T9071] BTRFS info (device loop1): using default commit interval 30s
[  388.187174][ T9071] BTRFS info (device loop1): enabling auto defrag
[  388.193759][   T26] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  388.221402][ T9071] BTRFS info (device loop1): using free space tree
[  388.297182][ T9080] loop0: detected capacity change from 0 to 40427
[  388.332177][ T9080] F2FS-fs (loop0): Unrecognized mount option "disable_roll_ground_gc=on" or missing value
[  388.390097][ T9104] loop2: detected capacity change from 0 to 512
[  388.401361][ T9104] EXT4-fs (loop2): orphan cleanup on readonly fs
[  388.407778][ T9104] EXT4-fs error (device loop2): ext4_quota_enable:6968: inode #4: comm syz.2.1653: iget: bogus i_mode (3600)
[  388.420163][ T9071] BTRFS info (device loop1): enabling ssd optimizations
[  388.434881][ T9104] EXT4-fs error (device loop2): ext4_quota_enable:6971: comm syz.2.1653: Bad quota inode: 4, type: 1
[  388.451422][   T26] usb 4-1: Using ep0 maxpacket: 16
[  388.473542][   T27] audit: type=1800 audit(1719541306.796:139): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1645" name="bus" dev="loop1" ino=263 res=0 errno=0
[  388.503844][ T9104] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  388.519542][ T9104] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  388.527893][   T27] audit: type=1326 audit(1719541306.846:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.3.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cbf75b29 code=0x7ffc0000
[  388.561651][ T9104] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  388.571557][   T26] usb 4-1: unable to get BOS descriptor or descriptor too short
[  388.579388][   T26] usb 4-1: no configurations
[  388.579442][   T27] audit: type=1326 audit(1719541306.846:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.3.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f54cbf75b29 code=0x7ffc0000
[  388.586644][ T7807] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  388.616223][   T27] audit: type=1326 audit(1719541306.846:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.3.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cbf75b29 code=0x7ffc0000
[  388.618270][   T26] usb 4-1: can't read configurations, error -22
[  388.672389][ T3548] EXT4-fs (loop2): unmounting filesystem.
[  388.711393][   T27] audit: type=1326 audit(1719541306.876:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9083 comm="syz.3.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cbf75b29 code=0x7ffc0000
[  388.734041][   T14] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  388.839617][ T9115] loop2: detected capacity change from 0 to 24
[  388.854483][ T9115] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  388.905359][ T9115] romfs: bad initial checksum on dev loop2.
[  389.011005][ T9116] loop0: detected capacity change from 0 to 1024
[  389.020317][ T9116] EXT4-fs: Ignoring removed orlov option
[  389.066294][ T9116] EXT4-fs (loop0): Test dummy encryption mode enabled
[  389.563701][ T9116] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  389.665334][ T9123] tmpfs: Bad value for 'mpol'
[  389.672351][   T14] usb 5-1: Using ep0 maxpacket: 16
[  389.812049][ T5400] EXT4-fs (loop0): unmounting filesystem.
[  389.991452][   T14] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f
[  390.030496][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.052398][   T14] usb 5-1: Product: syz
[  390.056575][   T14] usb 5-1: Manufacturer: syz
[  390.067691][   T14] usb 5-1: SerialNumber: syz
[  390.071476][ T3590] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  390.073092][ T9130] loop0: detected capacity change from 0 to 4096
[  390.087412][   T14] usb 5-1: config 0 descriptor??
[  390.097889][ T9130] ntfs3: Invalid value for umask.
[  390.142537][   T14] kobil_sct 5-1:0.0: required endpoints missing
[  390.169984][ T9135] loop3: detected capacity change from 0 to 4096
[  390.186997][ T9135] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  390.232729][ T9135] ntfs3: loop3: Failed to load $MFT.
[  390.270206][   T27] audit: type=1800 audit(1719541308.586:144): pid=9140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1663" name="bus" dev="sda1" ino=2022 res=0 errno=0
[  390.311390][ T3590] usb 2-1: Using ep0 maxpacket: 8
[  390.346328][   T26] usb 5-1: USB disconnect, device number 41
[  390.408044][ T3557] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  390.464393][ T3557] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  390.591985][ T3590] usb 2-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c
[  390.610395][ T3590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.620319][ T3590] usb 2-1: Product: syz
[  390.627047][ T3590] usb 2-1: Manufacturer: syz
[  390.634915][ T3590] usb 2-1: SerialNumber: syz
[  390.645368][ T3590] usb 2-1: config 0 descriptor??
[  390.691460][ T4838] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  390.902594][ T3590] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in cold state, will try to load a firmware
[  390.922362][ T3590] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  390.930382][ T3590] dib0700: firmware download failed at 7 with -22
[  390.933682][ T9151] tmpfs: Bad value for 'mpol'
[  390.939199][ T3590] usb 2-1: USB disconnect, device number 39
[  390.947508][ T4838] usb 1-1: Using ep0 maxpacket: 32
[  391.051369][   T14] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  391.111567][ T4838] usb 1-1: unable to get BOS descriptor or descriptor too short
[  391.201492][ T4838] usb 1-1: config 0 has no interfaces?
[  391.305400][ T9161] loop3: detected capacity change from 0 to 512
[  391.322167][   T14] usb 3-1: Using ep0 maxpacket: 8
[  391.332555][ T9161] EXT4-fs: Ignoring removed mblk_io_submit option
[  391.349465][ T9161] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  391.362686][ T4838] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  391.381327][ T4838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.389479][ T4838] usb 1-1: Product: syz
[  391.391329][ T9161] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  391.393729][ T4838] usb 1-1: Manufacturer: syz
[  391.413221][ T4838] usb 1-1: SerialNumber: syz
[  391.425839][ T4838] usb 1-1: config 0 descriptor??
[  391.444796][   T14] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  391.459954][ T9161] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  391.480401][   T14] usb 3-1: config 0 has no interface number 0
[  391.491580][   T14] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  391.507912][ T9161] EXT4-fs (loop3): 1 truncate cleaned up
[  391.514042][ T9161] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  391.524918][   T14] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  391.561329][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.582811][   T14] usb 3-1: config 0 descriptor??
[  391.638936][   T14] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  391.767309][ T4070] EXT4-fs (loop3): unmounting filesystem.
[  391.854767][ T9049] usb 1-1: USB disconnect, device number 38
[  392.527508][ T9170] loop3: detected capacity change from 0 to 256
[  392.545114][ T9170] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  392.558538][   T14] usb 3-1: USB disconnect, device number 47
[  392.566910][ T9176] loop0: detected capacity change from 0 to 512
[  392.575714][   T14] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected
[  392.583810][ T9176] EXT4-fs: Ignoring removed oldalloc option
[  392.590269][ T9170] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  392.653594][ T9180] tmpfs: Bad value for 'mpol'
[  392.669893][ T9176] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.1677: Parent and EA inode have the same ino 15
[  392.714884][ T9176] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.1677: Parent and EA inode have the same ino 15
[  392.763705][ T9176] EXT4-fs (loop0): 1 orphan inode deleted
[  392.770595][ T9176] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  392.890765][ T5400] EXT4-fs (loop0): unmounting filesystem.
[  394.106659][ T9192] loop1: detected capacity change from 0 to 256
[  394.521616][ T9212] loop4: detected capacity change from 0 to 16
[  394.528884][ T9212] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  394.916608][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1691'.
[  396.607839][ T4191] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  396.911414][ T4191] usb 4-1: Using ep0 maxpacket: 8
[  397.031726][ T4191] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  397.201408][ T4191] usb 4-1: config 0 has no interface number 0
[  397.221430][ T4191] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  397.268296][ T4191] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  397.308884][ T4191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.512630][ T4191] usb 4-1: config 0 descriptor??
[  397.583418][ T4191] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  397.850309][ T4191] usb 4-1: USB disconnect, device number 44
[  398.132184][ T4191] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected
[  398.767861][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'.
[  398.786130][ T9254] loop0: detected capacity change from 0 to 16
[  398.796358][ T9254] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  399.571268][    C1] sched: RT throttling activated
[  401.259100][ T9300] loop2: detected capacity change from 0 to 16
[  401.266367][ T9300] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  401.450739][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1718'.
[  401.560472][   T27] audit: type=1800 audit(1719541319.876:145): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1721" name="bus" dev="sda1" ino=2021 res=0 errno=0
[  402.070910][ T9326] device ip6gretap0 entered promiscuous mode
[  403.432320][ T9326] device batadv_slave_0 entered promiscuous mode
[  404.103781][   T27] audit: type=1800 audit(1719541322.416:146): pid=9350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1735" name="bus" dev="sda1" ino=2020 res=0 errno=0
[  404.435839][   T27] audit: type=1800 audit(1719541322.756:147): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1739" name="bus" dev="sda1" ino=2022 res=0 errno=0
[  404.756606][ T9366] 9pnet_fd: Insufficient options for proto=fd
[  406.089116][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1745'.
[  406.755668][ T9392] loop2: detected capacity change from 0 to 1024
[  406.841058][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'.
[  408.541501][ T3557] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection
[  408.620214][ T3557] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260
[  408.641553][ T9049] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  408.677538][   T27] audit: type=1800 audit(1719541326.996:148): pid=9421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1757" name="bus" dev="sda1" ino=1991 res=0 errno=0
[  408.826457][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'.
[  408.971445][ T9049] usb 3-1: Using ep0 maxpacket: 8
[  409.081087][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1762'.
[  409.861568][ T9049] usb 3-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c
[  409.921297][ T9049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.949606][ T9049] usb 3-1: Product: syz
[  409.981549][ T9049] usb 3-1: Manufacturer: syz
[  409.986174][ T9049] usb 3-1: SerialNumber: syz
[  410.022787][ T9049] usb 3-1: config 0 descriptor??
[  410.171332][   T14] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  410.271443][ T9049] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in cold state, will try to load a firmware
[  410.293195][ T9049] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  410.317930][ T9049] dib0700: firmware download failed at 7 with -22
[  410.344879][ T9049] usb 3-1: USB disconnect, device number 48
[  410.531645][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.556962][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.584750][   T14] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  410.608270][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.640054][   T14] usb 4-1: config 0 descriptor??
[  411.069132][   T27] audit: type=1800 audit(1719541329.386:149): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1772" name="bus" dev="sda1" ino=2022 res=0 errno=0
[  411.132714][ T9446] loop3: detected capacity change from 0 to 1024
[  411.258878][ T9446] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  411.690267][   T27] audit: type=1804 audit(1719541330.006:150): pid=9480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1766" name="/root/syzkaller.ZoWvF4/341/bus/file1" dev="loop3" ino=15 res=1 errno=0
[  411.715854][ T9480] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz.3.1766: Invalid inode table block 0 in block_group 0
[  411.937417][ T9480] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz.3.1766: Invalid inode table block 0 in block_group 0
[  412.050380][ T9480] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  412.128777][ T9480] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #15: comm syz.3.1766: mark_inode_dirty error
[  412.162510][ T9480] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz.3.1766: Invalid inode table block 0 in block_group 0
[  412.470558][ T9488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1777'.
[  413.083493][ T4070] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.ZoWvF4/341/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  413.111521][ T9492] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  413.185217][ T9492] 8021q: adding VLAN 0 to HW filter on device batadv1
[  413.194917][ T9492] bond1: (slave batadv1): Enslaving as a backup interface with an up link
[  413.203714][   T14] usb 4-1: string descriptor 0 read error: -71
[  413.210128][ T4070] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0
[  413.229189][   T14] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #200: -71
[  413.259419][   T14] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71
[  413.282557][ T9495] 8021q: adding VLAN 0 to HW filter on device bond1
[  413.291869][   T14] uclogic 0003:256C:006D.000F: failed probing pen v2 parameters: -71
[  413.302984][ T3619] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  413.321599][ T4070] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  413.342406][   T14] uclogic 0003:256C:006D.000F: failed probing parameters: -71
[  413.370319][ T4070] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error
[  413.400122][   T14] uclogic: probe of 0003:256C:006D.000F failed with error -71
[  413.430091][   T14] usb 4-1: USB disconnect, device number 45
[  413.525269][ T5699] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm kworker/u4:18: Invalid inode table block 0 in block_group 0
[  413.565553][ T6809] EXT4-fs (loop3): unmounting filesystem.
[  413.717397][ T9513] loop4: detected capacity change from 0 to 512
[  413.770939][ T9513] EXT4-fs: Ignoring removed oldalloc option
[  413.778877][ T9492] bond1 (unregistering): (slave batadv1): Removing an active aggregator
[  413.790938][   T27] audit: type=1800 audit(1719541332.106:151): pid=9508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1785" name="bus" dev="sda1" ino=2019 res=0 errno=0
[  413.798698][ T9492] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  413.848214][ T9492] bond1 (unregistering): Released all slaves
[  413.859196][ T9513] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1787: Parent and EA inode have the same ino 15
[  413.995774][ T9513] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1787: Parent and EA inode have the same ino 15
[  414.061700][ T9513] EXT4-fs (loop4): 1 orphan inode deleted
[  414.075703][ T9513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  414.158526][ T6715] EXT4-fs (loop4): unmounting filesystem.
[  414.328111][ T3619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.590657][ T3619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.754579][ T3619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.954904][ T3619] team0: Port device netdevsim0 removed
[  414.992353][ T3619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.081455][   T14] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  415.297616][ T3619] tipc: Disabling bearer <udp:syz2>
[  415.309104][ T3619] tipc: Left network mode
[  415.337788][ T3552] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  415.348384][ T3552] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  415.356628][ T3552] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  415.372063][ T3552] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  415.380414][ T3552] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  415.388969][ T3552] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  415.452046][ T3619] device ip6gretap0 left promiscuous mode
[  415.481429][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  415.501345][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  415.511106][   T14] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  415.522275][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.532977][   T14] usb 1-1: config 0 descriptor??
[  416.014315][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'.
[  416.078198][   T14] uclogic 0003:5543:0005.0010: unknown main item tag 0x0
[  416.100025][   T14] uclogic 0003:5543:0005.0010: No inputs registered, leaving
[  416.117573][ T9534] chnl_net:caif_netlink_parms(): no params data found
[  416.145081][   T14] uclogic 0003:5543:0005.0010: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.0-1/input0
[  416.278514][ T4197] usb 1-1: USB disconnect, device number 39
[  416.393437][ T9553] netlink: 'syz.2.1799': attribute type 1 has an invalid length.
[  416.539930][ T9554] 8021q: adding VLAN 0 to HW filter on device batadv1
[  416.606522][ T9554] bond1: (slave batadv1): Enslaving as a backup interface with an up link
[  416.994317][ T3998] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  417.013923][ T9558] 8021q: adding VLAN 0 to HW filter on device bond1
[  417.243486][ T3998] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  417.385734][ T9534] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.393395][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.411651][ T9534] device bridge_slave_0 entered promiscuous mode
[  417.422089][ T9534] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.429934][ T9534] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.437924][ T9534] device bridge_slave_1 entered promiscuous mode
[  417.481488][ T3562] Bluetooth: hci3: command tx timeout
[  417.509407][ T9566] loop4: detected capacity change from 0 to 2048
[  417.554816][ T9566] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  417.770590][   T27] audit: type=1326 audit(1719541336.086:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.0.1803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02ee775b29 code=0x0
[  418.036455][ T6715] EXT4-fs (loop4): unmounting filesystem.
[  418.061598][ T9553] bond1 (unregistering): (slave batadv1): Removing an active aggregator
[  418.070506][ T9553] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  418.116021][ T9553] bond1 (unregistering): Released all slaves
[  418.423779][ T9534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.517025][ T9534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.623541][ T3562] Bluetooth: hci6: unexpected event for opcode 0x0c1c
[  418.743957][ T9534] team0: Port device team_slave_0 added
[  418.773407][ T9534] team0: Port device team_slave_1 added
[  418.821881][ T3619] device batadv_slave_0 left promiscuous mode
[  418.851590][ T3619] device hsr_slave_0 left promiscuous mode
[  418.874447][ T9591] overlayfs: conflicting lowerdir path
[  418.890271][ T3619] device hsr_slave_1 left promiscuous mode
[  418.907737][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  418.921495][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_0
[  418.936377][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  418.950944][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_1
[  418.994408][ T3619] device bridge_slave_1 left promiscuous mode
[  419.001056][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.082132][ T3619] device bridge_slave_0 left promiscuous mode
[  419.088373][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.135849][ T3591] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  419.155457][ T3619] device veth1_macvtap left promiscuous mode
[  419.161688][ T3619] device veth0_macvtap left promiscuous mode
[  419.181600][ T3619] device veth1_vlan left promiscuous mode
[  419.187438][ T3619] device veth0_vlan left promiscuous mode
[  419.571347][ T3562] Bluetooth: hci3: command tx timeout
[  420.408658][ T3591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.420259][ T3591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.430055][ T3591] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  420.439553][ T3591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.451346][ T3591] usb 5-1: config 0 descriptor??
[  420.993643][ T3591] uclogic 0003:5543:0005.0011: unknown main item tag 0x0
[  421.001232][ T3591] uclogic 0003:5543:0005.0011: No inputs registered, leaving
[  421.043146][ T3591] uclogic 0003:5543:0005.0011: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.4-1/input0
[  421.446334][   T27] audit: type=1326 audit(1719541339.766:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9616 comm="syz.2.1819" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66fc175b29 code=0x0
[  421.484262][ T3619] team0 (unregistering): Port device team_slave_1 removed
[  421.587788][ T3619] team0 (unregistering): Port device team_slave_0 removed
[  421.645166][ T3557] Bluetooth: hci3: command tx timeout
[  421.669656][ T3619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  421.692732][ T3619] device bond_slave_1 left promiscuous mode
[  421.708569][ T3557] Bluetooth: hci5: unexpected event for opcode 0x0c1c
[  421.757600][ T3619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  421.774808][ T3619] device bond_slave_0 left promiscuous mode
[  422.478312][ T3619] bond0 (unregistering): Released all slaves
[  422.805786][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'.
[  422.964612][ T9534] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.085036][ T9534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.287802][ T4197] usb 5-1: USB disconnect, device number 42
[  423.532494][ T9534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.609614][ T9534] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.637952][ T9633] loop1: detected capacity change from 0 to 2048
[  423.638048][ T9534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.721535][ T3557] Bluetooth: hci3: command tx timeout
[  423.740340][ T9534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.771837][ T9633] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  423.892296][ T9534] device hsr_slave_0 entered promiscuous mode
[  423.923550][ T9534] device hsr_slave_1 entered promiscuous mode
[  423.941835][ T9534] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  423.949406][ T9534] Cannot create hsr debugfs directory
[  424.061461][ T4197] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  424.255607][ T7807] EXT4-fs (loop1): unmounting filesystem.
[  424.462959][ T4197] usb 5-1: Using ep0 maxpacket: 32
[  424.582151][ T4197] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  424.612608][ T4197] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  424.747468][ T9534] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  424.761623][ T4197] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  424.783357][ T9534] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  424.791477][ T4197] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  424.799829][ T4197] usb 5-1: Product: syz
[  424.806879][ T9534] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  424.830337][ T4197] usb 5-1: Manufacturer: syz
[  424.846902][ T4197] usb 5-1: config 0 descriptor??
[  424.854229][ T9534] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  425.007038][ T9534] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.011377][ T4191] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  425.035483][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  425.052172][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  425.065579][ T9534] 8021q: adding VLAN 0 to HW filter on device team0
[  425.086076][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  425.101993][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  425.123940][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.131278][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.205980][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  425.224580][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  425.239466][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  425.257404][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.264548][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.281322][ T4191] usb 2-1: Using ep0 maxpacket: 16
[  425.286940][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  425.305313][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  425.320099][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  425.333857][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  425.360060][ T9534] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  425.385184][ T9534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  425.408636][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  425.411654][ T4191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  425.421899][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  425.444996][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  425.455469][ T4191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  425.459529][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  425.485929][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  425.486250][ T4191] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  425.520544][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  425.535707][ T4191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.537067][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  425.563019][ T4191] usb 2-1: config 0 descriptor??
[  425.567949][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  425.675369][ T3557] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[  425.754592][ T3557] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260
[  425.912309][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  425.923271][   T27] audit: type=1326 audit(1719541344.236:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fc175b29 code=0x7ffc0000
[  425.937231][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  425.970663][   T27] audit: type=1326 audit(1719541344.276:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fc175b29 code=0x7ffc0000
[  425.983046][ T9534] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.010147][   T27] audit: type=1326 audit(1719541344.286:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66fc175b29 code=0x7ffc0000
[  426.034669][   T27] audit: type=1326 audit(1719541344.286:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fc175b29 code=0x7ffc0000
[  426.059992][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  426.074523][ T4191] lenovo 0003:17EF:6009.0012: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0
[  426.078997][   T27] audit: type=1326 audit(1719541344.286:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fc175b29 code=0x7ffc0000
[  426.112014][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  426.137294][   T27] audit: type=1326 audit(1719541344.286:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66fc175b29 code=0x7ffc0000
[  426.159936][   T27] audit: type=1326 audit(1719541344.286:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fc175b29 code=0x7ffc0000
[  426.182988][   T27] audit: type=1326 audit(1719541344.286:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66fc175b29 code=0x7ffc0000
[  426.205550][   T27] audit: type=1326 audit(1719541344.286:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66fc175b29 code=0x7ffc0000
[  426.229979][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  426.242262][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  426.284276][ T9534] device veth0_vlan entered promiscuous mode
[  426.302576][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  426.318748][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  426.344727][ T9534] device veth1_vlan entered promiscuous mode
[  426.383174][ T3602] usb 2-1: USB disconnect, device number 40
[  426.414599][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  426.427450][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  426.447893][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  426.460625][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  426.474383][ T9534] device veth0_macvtap entered promiscuous mode
[  426.495882][ T9534] device veth1_macvtap entered promiscuous mode
[  426.535710][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.571286][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.595790][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.619552][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.643498][ T3557] Bluetooth: hci5: unexpected event for opcode 0x0c1c
[  426.653659][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.664814][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.692964][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.749653][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.764642][ T4838] usb 5-1: USB disconnect, device number 43
[  426.776612][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.799914][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.841485][ T9534] batman_adv: batadv0: Interface activated: batadv_slave_0
[  426.872843][ T9049] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  426.893109][ T9049] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  426.903258][ T9049] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  426.950662][ T9049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  426.972403][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.995196][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.005749][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.016362][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.026319][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.036965][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.046965][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.070865][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.099635][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.126786][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.161703][ T9534] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.183970][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  427.193311][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  427.223470][ T9534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.242216][ T9534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.261091][ T9534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.300716][ T9534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.423341][ T5416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.538848][ T9699] random: crng reseeded on system resumption
[  427.801924][ T5416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.333203][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  428.403103][ T3619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.411203][ T3619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.463963][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  428.682469][ T9715] syz.4.1848[9715] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  428.682570][ T9715] syz.4.1848[9715] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  428.871313][ T3602] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  429.773637][ T3557] Bluetooth: hci5: unexpected event for opcode 0x0c1c
[  430.086371][ T9738] loop4: detected capacity change from 0 to 16
[  430.093772][ T9738] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  430.121796][ T3602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  430.141391][ T3602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  430.167694][ T3602] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  430.187004][ T3602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.201842][ T9049] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  430.232463][ T3602] usb 4-1: config 0 descriptor??
[  430.621673][ T9049] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  430.658933][ T9737] loop0: detected capacity change from 0 to 32768
[  430.715632][ T9710] loop3: detected capacity change from 0 to 1024
[  430.765522][ T9737] XFS (loop0): Mounting V5 Filesystem
[  430.804931][ T9710] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  430.813909][ T9049] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  430.831473][ T9049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.866974][ T9049] usb 3-1: Product: syz
[  430.872472][ T9049] usb 3-1: Manufacturer: syz
[  430.879093][ T9049] usb 3-1: SerialNumber: syz
[  430.887682][ T9737] XFS (loop0): Ending clean mount
[  430.906017][ T9737] XFS (loop0): Quotacheck needed: Please wait.
[  430.944026][ T9049] usb 3-1: config 0 descriptor??
[  430.999211][ T9737] XFS (loop0): Quotacheck: Done.
[  431.080436][ T5400] XFS (loop0): Unmounting Filesystem
[  431.862502][   T27] kauditd_printk_skb: 14 callbacks suppressed
[  431.862518][   T27] audit: type=1804 audit(1719541350.186:177): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1792" name="/root/syzkaller.vkmBrZ/0/bus/file1" dev="loop3" ino=15 res=1 errno=0
[  431.955971][ T9049] snd-usb-audio: probe of 3-1:0.0 failed with error -2
[  431.995065][ T9049] usb 3-1: USB disconnect, device number 49
[  432.051419][ T3602] usb 4-1: string descriptor 0 read error: -71
[  432.072574][ T3602] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #200: -71
[  432.082587][ T3602] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71
[  432.090767][ T3602] uclogic 0003:256C:006D.0013: failed probing pen v2 parameters: -71
[  432.099012][ T3602] uclogic 0003:256C:006D.0013: failed probing parameters: -71
[  432.106774][ T3602] uclogic: probe of 0003:256C:006D.0013 failed with error -71
[  432.116980][ T3602] usb 4-1: USB disconnect, device number 46
[  432.415091][ T9766] loop2: detected capacity change from 0 to 512
[  432.433582][ T9766] EXT4-fs: Ignoring removed oldalloc option
[  432.472441][ T9766] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1861: Parent and EA inode have the same ino 15
[  432.501795][ T9766] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1861: Parent and EA inode have the same ino 15
[  432.532798][ T9766] EXT4-fs (loop2): 1 orphan inode deleted
[  432.538611][ T9766] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  432.596762][ T3602] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  432.610239][ T3548] EXT4-fs (loop2): unmounting filesystem.
[  432.669098][ T9534] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.vkmBrZ/0/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  432.700767][ T9773] netlink: 'syz.2.1862': attribute type 33 has an invalid length.
[  432.717785][ T9773] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1862'.
[  432.741974][ T9534] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0
[  432.760463][ T9534] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  432.804698][ T9534] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error
[  432.849459][ T5699] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm kworker/u4:18: Invalid inode table block 0 in block_group 0
[  432.873766][ T3602] usb 5-1: Using ep0 maxpacket: 8
[  432.879628][ T5699] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm kworker/u4:18: Invalid inode table block 0 in block_group 0
[  432.909187][ T9534] EXT4-fs (loop3): unmounting filesystem.
[  433.171541][ T3602] usb 5-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c
[  433.190820][ T3602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.207572][ T3602] usb 5-1: Product: syz
[  433.227867][ T3602] usb 5-1: Manufacturer: syz
[  433.234889][ T3602] usb 5-1: SerialNumber: syz
[  433.260569][ T3602] usb 5-1: config 0 descriptor??
[  433.521497][ T3602] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in cold state, will try to load a firmware
[  433.538394][ T3602] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  433.557843][ T3602] dib0700: firmware download failed at 7 with -22
[  433.567980][ T9794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  433.577062][ T3602] usb 5-1: USB disconnect, device number 44
[  433.904745][ T5699] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.032567][ T5699] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.174242][ T5699] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.307973][ T5699] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.436560][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1876'.
[  434.517979][ T3562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  434.534639][ T3562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  434.548925][ T3562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  434.569811][ T3562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  434.577486][ T3562] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  434.585020][ T3562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  435.109045][ T9834] loop0: detected capacity change from 0 to 2048
[  435.165974][ T9818] chnl_net:caif_netlink_parms(): no params data found
[  435.205744][ T9834] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  435.512461][ T9818] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.551395][ T9818] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.560226][ T9818] device bridge_slave_0 entered promiscuous mode
[  435.678296][ T9818] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.678595][ T5400] EXT4-fs (loop0): unmounting filesystem.
[  435.688071][ T9818] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.724526][ T9818] device bridge_slave_1 entered promiscuous mode
[  435.878696][ T9854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  435.925105][ T9818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  435.969901][ T5699] device hsr_slave_0 left promiscuous mode
[  435.984082][ T5699] device hsr_slave_1 left promiscuous mode
[  436.010948][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  436.021392][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0
[  436.040547][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  436.058321][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_1
[  436.068575][ T5699] device bridge_slave_1 left promiscuous mode
[  436.086256][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.103399][ T5699] device bridge_slave_0 left promiscuous mode
[  436.119863][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.209530][ T5699] device veth1_macvtap left promiscuous mode
[  436.215966][ T5699] device veth0_macvtap left promiscuous mode
[  436.223400][ T5699] device veth1_vlan left promiscuous mode
[  436.229327][ T5699] device veth0_vlan left promiscuous mode
[  436.335814][ T9852] loop2: detected capacity change from 0 to 32768
[  436.389366][ T9852] XFS (loop2): Mounting V5 Filesystem
[  436.437840][   T27] audit: type=1800 audit(1719541354.756:178): pid=9860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1889" name="bus" dev="sda1" ino=2030 res=0 errno=0
[  436.478492][ T9852] XFS (loop2): Ending clean mount
[  436.485295][ T9852] XFS (loop2): Quotacheck needed: Please wait.
[  436.530247][ T9852] XFS (loop2): Quotacheck: Done.
[  436.599345][ T3548] XFS (loop2): Unmounting Filesystem
[  436.686992][ T3557] Bluetooth: hci3: command tx timeout
[  437.582963][ T5699] team0 (unregistering): Port device team_slave_1 removed
[  437.599265][ T9886] loop4: detected capacity change from 0 to 32768
[  437.660256][ T5699] team0 (unregistering): Port device team_slave_0 removed
[  437.677960][ T9886] Cannot find del_set index 0 as target
[  437.755791][ T5699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  437.835043][ T5699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  437.878822][ T9896] find_entry called with index = 0
[  438.006399][ T9896] read_mapping_page failed!
[  438.041685][ T9896] BUG at fs/jfs/jfs_txnmgr.c:2795 assert(mp->nohomeok)
[  438.142026][ T9896] ------------[ cut here ]------------
[  438.147555][ T9896] kernel BUG at fs/jfs/jfs_txnmgr.c:2795!
[  438.175059][ T9896] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  438.181154][ T9896] CPU: 0 PID: 9896 Comm: syz.4.1896 Not tainted 6.1.96-syzkaller #0
[  438.189129][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  438.199172][ T9896] RIP: 0010:txAbort+0x5d3/0x5e0
[  438.204037][ T9896] Code: 33 a7 7e 07 0f 0b e8 9c 24 80 fe 48 c7 c7 00 e1 24 8b 48 c7 c6 f9 dc 24 8b ba eb 0a 00 00 48 c7 c1 e0 f4 24 8b e8 0d a7 7e 07 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 57 41 56 41 55 41 54
[  438.223648][ T9896] RSP: 0018:ffffc9000320f3d0 EFLAGS: 00010246
[  438.229729][ T9896] RAX: 0000000000000034 RBX: 0000000000000024 RCX: ab61bbf87d193a00
[  438.237701][ T9896] RDX: ffffc900158a1000 RSI: 00000000000373be RDI: 00000000000373bf
[  438.245769][ T9896] RBP: 0000000000000000 R08: ffffffff816e30dc R09: fffff52000641dd9
[  438.253744][ T9896] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900028a2000
[  438.261731][ T9896] R13: ffff8880672990f8 R14: dffffc0000000000 R15: 0000000000000004
[  438.269705][ T9896] FS:  00007f9d80bcd6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  438.278614][ T9896] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  438.285178][ T9896] CR2: 0000001b2f310ff8 CR3: 0000000063090000 CR4: 00000000003506f0
[  438.293131][ T9896] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  438.301081][ T9896] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  438.309050][ T9896] Call Trace:
[  438.312316][ T9896]  <TASK>
[  438.315238][ T9896]  ? __die_body+0x5e/0xa0
[  438.319582][ T9896]  ? die+0x83/0xb0
[  438.323313][ T9896]  ? do_trap+0x11e/0x350
[  438.327546][ T9896]  ? txAbort+0x5d3/0x5e0
[  438.331783][ T9896]  ? txAbort+0x5d3/0x5e0
[  438.336011][ T9896]  ? do_error_trap+0x13d/0x1e0
[  438.340756][ T9896]  ? txAbort+0x5d3/0x5e0
[  438.344978][ T9896]  ? do_int3+0x30/0x30
[  438.349029][ T9896]  ? rcu_is_watching+0x11/0xb0
[  438.353773][ T9896]  ? handle_invalid_op+0x2c/0x40
[  438.358696][ T9896]  ? txAbort+0x5d3/0x5e0
[  438.362921][ T9896]  ? exc_invalid_op+0x2f/0x40
[  438.367588][ T9896]  ? asm_exc_invalid_op+0x16/0x20
[  438.372599][ T9896]  ? __wake_up_klogd+0xcc/0x100
[  438.377430][ T9896]  ? txAbort+0x5d3/0x5e0
[  438.381671][ T9896]  txCommit+0x5d4d/0x6ba0
[  438.385998][ T9896]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[  438.392222][ T9896]  ? __mark_inode_dirty+0x747/0xf80
[  438.397403][ T9896]  ? ktime_get_coarse_real_ts64+0x107/0x120
[  438.403286][ T9896]  ? txLinelock+0x160/0x160
[  438.407773][ T9896]  ? rcu_is_watching+0x11/0xb0
[  438.412515][ T9896]  ? __mark_inode_dirty+0x430/0xf80
[  438.417712][ T9896]  jfs_create+0x98a/0xbb0
[  438.422025][ T9896]  ? jfs_lookup+0x400/0x400
[  438.426507][ T9896]  ? jfs_get_parent+0xa0/0xa0
[  438.431165][ T9896]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  438.437134][ T9896]  ? security_inode_create+0x51/0x100
[  438.442498][ T9896]  ? bpf_lsm_inode_init_security_anon+0x10/0x10
[  438.448722][ T9896]  ? bpf_lsm_inode_create+0x5/0x10
[  438.453818][ T9896]  ? security_inode_create+0xb4/0x100
[  438.459172][ T9896]  ? jfs_lookup+0x400/0x400
[  438.463654][ T9896]  path_openat+0x12f1/0x2e60
[  438.468232][ T9896]  ? do_filp_open+0x480/0x480
[  438.472898][ T9896]  do_filp_open+0x230/0x480
[  438.477383][ T9896]  ? vfs_tmpfile+0x4a0/0x4a0
[  438.481974][ T9896]  ? _raw_spin_unlock+0x24/0x40
[  438.486825][ T9896]  ? alloc_fd+0x59c/0x640
[  438.491142][ T9896]  do_sys_openat2+0x13b/0x500
[  438.495817][ T9896]  ? do_sys_open+0x220/0x220
[  438.500457][ T9896]  ? xfd_validate_state+0x6a/0x140
[  438.505586][ T9896]  ? restore_fpregs_from_fpstate+0xfc/0x230
[  438.511475][ T9896]  __x64_sys_openat+0x243/0x290
[  438.516343][ T9896]  ? __ia32_sys_open+0x270/0x270
[  438.521277][ T9896]  ? syscall_enter_from_user_mode+0x2e/0x230
[  438.527254][ T9896]  ? lockdep_hardirqs_on+0x94/0x130
[  438.532449][ T9896]  ? syscall_enter_from_user_mode+0x2e/0x230
[  438.538412][ T9896]  do_syscall_64+0x3b/0xb0
[  438.542828][ T9896]  ? clear_bhb_loop+0x45/0xa0
[  438.547517][ T9896]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  438.553395][ T9896] RIP: 0033:0x7f9d7fd75b29
[  438.557800][ T9896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  438.577384][ T9896] RSP: 002b:00007f9d80bcd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  438.585776][ T9896] RAX: ffffffffffffffda RBX: 00007f9d7ff04070 RCX: 00007f9d7fd75b29
[  438.593727][ T9896] RDX: 0000000000109543 RSI: 0000000020000100 RDI: ffffffffffffff9c
[  438.601686][ T9896] RBP: 00007f9d7fdf6756 R08: 0000000000000000 R09: 0000000000000000
[  438.609657][ T9896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  438.617605][ T9896] R13: 000000000000006e R14: 00007f9d7ff04070 R15: 00007fff4bad1828
[  438.625572][ T9896]  </TASK>
[  438.628592][ T9896] Modules linked in:
[  438.642483][ T9896] ---[ end trace 0000000000000000 ]---
[  438.648073][ T9896] RIP: 0010:txAbort+0x5d3/0x5e0
[  438.653495][ T9896] Code: 33 a7 7e 07 0f 0b e8 9c 24 80 fe 48 c7 c7 00 e1 24 8b 48 c7 c6 f9 dc 24 8b ba eb 0a 00 00 48 c7 c1 e0 f4 24 8b e8 0d a7 7e 07 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 57 41 56 41 55 41 54
[  438.673215][ T9896] RSP: 0018:ffffc9000320f3d0 EFLAGS: 00010246
[  438.679537][ T9896] RAX: 0000000000000034 RBX: 0000000000000024 RCX: ab61bbf87d193a00
[  438.687670][ T9896] RDX: ffffc900158a1000 RSI: 00000000000373be RDI: 00000000000373bf
[  438.695767][ T9896] RBP: 0000000000000000 R08: ffffffff816e30dc R09: fffff52000641dd9
[  438.703813][ T9896] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900028a2000
[  438.712354][ T9896] R13: ffff8880672990f8 R14: dffffc0000000000 R15: 0000000000000004
[  438.720405][ T9896] FS:  00007f9d80bcd6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  438.729812][ T9896] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  438.736790][ T9896] CR2: 0000001b2f310ff8 CR3: 0000000063090000 CR4: 00000000003506f0
[  438.745394][ T9896] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  438.753679][ T9896] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  438.761702][ T3557] Bluetooth: hci3: command tx timeout
[  438.769154][ T9896] Kernel panic - not syncing: Fatal exception
[  438.775444][ T9896] Kernel Offset: disabled
[  438.779751][ T9896] Rebooting in 86400 seconds..