last executing test programs:

1m38.427422966s ago: executing program 3 (id=241):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x891e, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x158, 0xa, 0x148, 0x0, 0x10, 0x3b0, 0x2a8, 0x2a8, 0x3b0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xf0, 0x158, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa22f8d2241e9cfd6, 0x6, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f8, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00'}}, @common=@ah={{0x30}, {[], 0x1}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a8)
sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000000)=[{r3, 0x2181}, {r1, 0xfd72}, {r0, 0x508}], 0x3, 0x0, 0x0, 0x0)
close(r0)

1m38.172889557s ago: executing program 3 (id=244):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x900, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x28}}, 0x0)

1m38.101573758s ago: executing program 3 (id=245):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000909"], 0x4c}}, 0x0)

1m38.042864388s ago: executing program 3 (id=246):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)
r1 = syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x3218a5d, &(0x7f0000000040)={[{@grpquota}, {@nouuid}, {@sysvgroups}, {@discard}]}, 0x0, 0x965a, &(0x7f0000012c40)="$eJzs+gm8pnPh+P/fZxi7jKGSUlMRLbJmiWpmMEMhWaIdkZSlpELbUFKoiGhT9i1bWULZWkn2FkoIlTXSYhvm/zjmTMb04lPfPv+fT71er8fjnPu+r/u6rvO+389rOYfZbNJGEweDuQbTGzeYtfOunTx1zNXr33nUlgseu9yp9+7/2BUXHz/yOGHkceJgMBg18vbQ9GVjB6edPmow+yPLH23euecZmn8wWH7k5ch+BitPf5j/ihnrTZulWQc69Oi3vad/PdICwz9i+Mnh++95xGAwGDPT9kODwdCUf/ig0jabMHnSo1Z/dxu2Gj3yfOavOaZ/zX/xYDD/mQM+PmZed+hJ+EjDP3PKi84dvf6T8LP/49pswuR1ZvEfPhdnG1m28vA5Pus5aGzW4/z2JTZfdWQKHzneBoPhS9xjzpX/iDabMGndweNf5wdHrXbh3tOmXzfnHEy/Ucw9GAzmGbm+zvdku9S/14SJKzxyz57xeoR9xrE8hY6LE9568sPDN+nBYLDQYDB27Rn3gqqqqvrPaMLEFdaA+/9cT3T/P+WURc/s/l9VVfWf2zoTJq4wfK+f5f4/3xPd/3da9KI9pv+3//ErT9/q4Sf3Q1RVVdW/1KR18P4/5onu/yuvcdm63f+rqqr+c9twvUfu//PNcv9f+Inu/286ebXFRtab8XvDQzPtcmim/5/w4EzLZ5tp+QMzLR89035mXn+OmZbfN9PyOYffg/XHDQZjZ/x7wamPLh47bvi9keX3z7R8/KP/TmfxNWdaPmGm5ZNmWj5xZKzDyyfPtHzyTOuv/QRTXVVV9X+mDVeYtMZgpn9nP7J4kRnv0/3/grOuW/rJGm9VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVX9Z/bwnWefOxgMhgaDwajBYOpg5PnMj4Np06ZNG359yvmXX/6kDfT/RkPnXTt56pir17/zqC0XPHa5U+/d/9FZ+o/tP/8T1L/TsP9cx48bDHbY5MkeSj0Jdf67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uIfvPPvckWNg1GAwdTDyfMqMx7P2e+ObR1ZdddNT7z7o0S0XH7/tyLPzrp08ddsnYexPQkPDn3XM1evfedSWCx673Kn37v9fcPb853+C+nd6xH/bocFg5PweM3wurz9hw42XGgwGB9196qYrDf7+3irD7602drbBbI9sutQj39danHc8Ze3pj+OHvy38932c8sj+15l22GxDswxipl5x3o1HvXOze1ec9XHJx/8co2Y8OeL6M+6ZNm3atMcsHGmux9l4xv5nfJZZz/ORsS81PPZldt7+Pcu8b9fdlt52+y222XqbrXdYboVVVlxp+eVWWvVly7xj2+22Xnb698eZs3GPfF/jn5mz+WadszsnzDxns362x5uzcU88Z4/scepuQxvPmLPZ/8U5W+OJ52zctiM/aPHxowebPzI1Q4PB4muOHuwy/GK5OQeDxdcaWXeR4XVXHztqMNjv0Q86/GzOvx+DQ1OG19ls0kYTHx3ZP37Cf7hOP2bFxcePPE4YeZw4fYjjBo8eimMHp50+anguHjPN8849z9D8g8HyIy9H9jNYdeTdQ2esN22WZh3o0KPf9p7+9UgLDO9k+Mm7lj37muFzcZbt///R/9P1/x+8Vhn6+0QNjXyNrDPda8LkdR79WY9Mw/DczTaybOVhk1nn7H+zfxjvuNkHY55gvJPWmbjC8OJZ5n/GJnh83bXEhR+afmyNX3n6Vg//P6PQeOd7gvGuMwHHO98Tjff4D196+vRd/a+Nd5Zr3bqPfB//z1zrBk98rZuNdrD1JYvNeq17zeMP8THn8Yw5mnOWlR7vWrfLwctPGd7/+Ce+1q07PPbRj7nWjRoMFl9jxrVu+MI3afRgv+EXyw+/mDx6cOzwixUeeTH34PzhFy99+47bbTW8YO0Zc7Ls8H7Hjx16xP3ClW9bctoB06atOTKW8WMfO9aR42PczPfzCWOnT+aMbWfsd3jVGfu95enT35s0st8J/8J+Z2xL4717genvTR7Z78RZ9jv6CfY7Y9t/OB+WGvr7hetxrjeTZrnejPyNM+PHPeZrjulf8188GMx/JvnOsu7/eM2k83euJxjvhIkrrDE8vlnO378fjnT+Xjr56uF7xfyDwWChwWDs2jPG/i829Hjjnf2JxzsRxjv7E433yuO2X+9/YbyDmcb7mONssw2nHytrjxxnk/+F43fGtrNex0Y/8u70y/7a/8x1bNw/XMd2n23ULJM9U4/3O9tWsP7054s8+nvutScdM2PuR8+y3//pd7aZPssQXMfGzPL3/Ki1bxgM0ZxPOX71y4YOfOI5Hz147N8WM+Z8xrZPNOeT/5k5f9YTz/k/+3vyUs+f/v7oWcY/85xvsO8z95kx53PMst//ac4nP/G94x/nfPxgNM35sg9Mn7cnup4+3pzP2HbGnA9/xNXGzj5Ya/ieNTLnk/6ZOV/kf+c4nwfWn/58678vOueoU18/Y85nneP/ac4n/atzPu7vx/nij7z3vFGDOeYY7LLFzjvvtNz07zNeLj/9O1+L7rt2+jw/0b308YxmbPtE58Wa/4zRmH/KaOh/Mlp09sczevTUOnLHnZ72/3otWvNfNRrwtejqY6bP2xP9XvR4cz5jW7oPLjzT9rP+Hbrheo/83j3fLPfBGZvgffCcs9bda8YuRzZ7aJZhzrivPjjT8tlmWv7ATMtHz7SfmdefY6bl9820fPgjzDHT+jNYxw3/zTuyfOqjq48d/uVp3Mjy+2daPv7RbRdfc6blE2ZaPmmm5RMfPTQWnzzT8skzrb/24F9sxn+T3nbWi3z9s/Xff93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yt7+M6zzx05BkYNBlMH058PjTwOpgxtcMerhh8Hg8HolU+ctsGTPd4nuaHzrp08dczV69951JYLHrvcqffu/19w9vznf4L6d3rEf9uhwWDk/B6z7WAwWH/ChhsvNRgMNph24sqjBn9/b5Hh91YfO2ow2G/oMTuY8+/rDE0ZXmezSRtNHAzmGllj3D/80H84jx6z4uLjRx4njDxOnH59Gjd49HgdOzjt9FGD2R9Z/mjzzj3P0PyDwfIjL0f2M1h5+sP8V8xYb9oszTrQoUe/7T3965EWGP4Rw0922Wbys4fnapbt/88041q97aj/cdXOf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf38J1nnztyDIwaDKYOpj8fmjLyOBg6+bQXjhwio3e96ujDnuzxPskNnXft5Kljrl7/zqO2XPDY5U69d///grPnP/8T1L/TI/7bDg0GI+f3mG0Hg8H6EzbceKnBYHDY0VftOmrw9/cWGX5v9bGjBoP9hh6zgzn/vs7QlOF1Npu00cTBYK6RNcb9ww/9h/PoMSsuPn7kccLI48Tp16dxg0eP17GD004fNZj9keWPNu/c8wzNPxgsP/JyZD+Dlac/zH/FjPWmzdKsAx169Nve078eaYHhHzH8ZM/5rj15eK5m2f7/TDOu1duO+h9X7fx3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cQ/fefa5I8fAqMFg6mD681Ejj0NTbr7poxsPPw6/XnDtva59ssf7JDd03rWTp465ev07j9pywWOXO/Xe/f8Lzp7//E9Q/07D/nMdP24w2GGTJ3so9STU+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iHr7z7HNHno56dOmoKR0X2NB5106eOubq9e88assFj13u1Hv3f7IH9O/2OP67549Z/PfIH7P4fzx/zOL/ifwxi/+e+WMW/0/mj1n898ofs/h/Kn/M4v/p/DGL/975Yxb/ffLHLP775o9Z/D+TP2bx/2z+mMX/c/ljFv/98scs/vvnj1n8P58/ZvE/IH/M4n9g/pjF/wv5Yxb/g/LHLP4H549Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bxPyR/zOL/tfwxi//X88cs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bx/0b+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+H8zf8zi/638MYv/qfljFv/T8scs/qfnj1n8z8gfs/h/O3/M4n9m/pjF/6z8MYv/2fljFv/v5I9Z/L+bP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP7fyx+z+H8/f8zi/4P8MYv/D/PHLP4/yh+z+P84f8zif2H+mMX/ovwxi/9P8scs/hfnj1n8f5o/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/hfnT9m8b8mf8zi/6v8MYv/r/PHLP7X5o9Z/H+TP2bxvy5/zOJ/ff6Yxf+G/DGL/2/zxyz+N+aPWfxvyh+z+N+cP2bx/13+mMX/9/ljFv8/5I9Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv8/5o9Z/O/KH7P4350/ZvH/U/6Yxf+e/DGL/5/zxyz+f8kfs/j/NX/M4v+3/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvGfmj9m8X8of8zi/3D+mMV/Wv6YxH+2Qf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/9T8scs/gvkj1n8x9j8Xz3/P7WaxX9Bm/8/mcV/bP6YxX+h/DGL/8L5Yxb/p+aPWfyflj9m8X96/pjFf5H8MYv/M/LHLP6L5o9Z/J+ZP2bxf1b+mMV/sfwxi/+z88cs/s/JH7P4j8sfs/g/N3/M4v+8/DGL//Pzxyz+i+ePWfyXyB+z+L8gf8ziv2T+mMV/qfwxi/8L88cs/i/KH7P4vzh/zOL/kvwxi//S+WMW/5fmj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5flj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMX/5fljFv/V8scs/qvnj1n8X5E/ZvF/Zf6Yxf9V+WMW//H5Yxb/CfljFv+J+WMW/zXyxyz+a+aPWfzXyh+z+E/KH7P4T84fs/ivnT9m8V8nf8zi/+r8MYv/a/LHLP7r5o9Z/NfLH7P4r58/ZvF/bf6YxX+D/DGL/+vyxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/+vwxi/+m+WMW/83yxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/+b5Yxb/LfLHLP5b5o9Z/N+eP2bx3yp/zOK/df6Yxf8d+WMW/23yxyz+78wfs/hvmz9m8X9X/pjF/935Yxb/7fLHLP7b549Z/HfIH7P475g/ZvF/T/6Yxf+9+WMW/53yxyz+78sfs/jvnD9m8X9//pjF/wP5Yxb/D+aPWfx3yR+z+O+aP2bx3y1/zOL/ofwxi/+H88cs/h/JH7P4fzR/zOL/sfwxi/+U/DGL/+75Yxb/PfLHLP4fzx+z+H8if8ziv2f+mMX/k/ljFv+98scs/p/KH7P4fzp/zOK/d/6YxX+f/DGL/775Yxb/z+SPWfw/mz9m8f9c/pjFf7/8MYv//vljFv/P549Z/A/IH7P4H5g/ZvH/Qv6Yxf+g/DGL/8H5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfwPyR+z+H8tf8zi//X8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfy/kT9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+38wfs/h/K3/M4n9q/pjF/7T8MYv/6fljFv8z8scs/t/OH7P4n5k/ZvE/K3/M4n92/pjF/zv5Yxb/7+aPWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL//fyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/hfmD9m8b8of8zi/5P8MYv/xfljFv+f5o9Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/j/LH7P4/zx/zOL/i/wxi/8v88cs/lfnj1n8r8kfs/j/Kn/M4v/r/DGL/7X5Yxb/3+SPWfyvyx+z+F+fP2bxvyF/zOL/2/wxi/+N+WMW/5vyxyz+N+ePWfx/lz9m8f99/pjF/w/5Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/4/5Yxb/u/LHLP53549Z/P+UP2bxvyd/zOL/5/wxi/9f8scs/n/NH7P4/y1/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/Kfmj1n8H8ofs/g/nD9m8Z+WPybxn32QP2bxH8ofs/iPyh+z+M+WP2bxnz1/zOI/On/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8zi/5T8MYv/AvljFv8x+WMW/wXzxyz+Y/PHLP4L5Y9Z/BfOH7P4PzV/zOL/tPwxi//T88cs/ovkj1n8n5E/ZvFfNH/M4v/M/DGL/7Pyxyz+i+WPWfyfnT9m8X9O/pjFf1z+mMX/ufljFv/n5Y9Z/J+fP2bxXzx/zOK/RP6Yxf8F+WMW/yXzxyz+S+WPWfxfmD9m8X9R/pjF/8X5Yxb/l+SPWfyXzh+z+L80f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+L8sf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+L88fs/ivlj9m8V89f8zi/4r8MYv/K/PHLP6vyh+z+I/PH7P4T8gfs/hPzB+z+K+RP2bxXzN/zOK/Vv6YxX9S/pjFf3L+mMV/7fwxi/86+WMW/1fnj1n8X5M/ZvFfN3/M4r9e/pjFf/38MYv/a/PHLP4b5I9Z/F+XP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/1+ePWfw3zR+z+G+WP2bxf0P+mMX/jfljFv835Y9Z/N+cP2bxf0v+mMX/rfljFv+35Y9Z/DfPH7P4b5E/ZvHfMn/M4v/2/DGL/1b5Yxb/rfPHLP7vyB+z+G+TP2bxf2f+mMV/2/wxi/+78scs/u/OH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/e/LHLP7vzR+z+O+UP2bxf1/+mMV/5/wxi//788cs/h/IH7P4fzB/zOK/S/6YxX/X/DGL/275Yxb/D+WPWfw/nD9m8f9I/pjF/6P5Yxb/j+WPWfyn5I9Z/HfPH7P475E/ZvH/eP6Yxf8T+WMW/z3zxyz+n8wfs/jvlT9m8f9U/pjF/9P5Yxb/vfPHLP775I9Z/PfNH7P4fyZ/zOL/2fwxi//n8scs/vvlj1n8988fs/h/Pn/M4n9A/pjF/8D8MYv/F/LHLP4H5Y9Z/A/OH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOJ/SP6Yxf9r+WMW/6/nj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOL/jfwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bx/2b+mMX/W/ljFv9T88cs/qflj1n8T88fs/ifkT9m8f92/pjF/8z8MYv/WfljFv+z88cs/t/JH7P4fzd/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/L+XP2bx/37+mMX/B/ljFv8f5o9Z/H+UP2bx/3H+mMX/wvwxi/9F+WMW/5/kj1n8L84fs/j/NH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8f9Z/pjF/+f5Yxb/X+SPWfx/mT9m8b86f8zif03+mMX/V/ljFv9f549Z/K/NH7P4/yZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/3+aPWfxvzB+z+N+UP2bxvzl/zOL/u/wxi//v88cs/n/IH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/n/MH7P435U/ZvG/O3/M4v+n/DGL/z35Yxb/P+ePWfz/kj9m8f9r/pjF/2/5Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4j81f8zi/1D+mMX/4fwxi/+0/DGJ/+hB/pjFfyh/zOI/Kn/M4j9b/pjFf/b8MYv/6Pwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/1Pyxyz+C+SPWfzH5I9Z/BfMH7P4j80fs/gvlD9m8V84f8zi/9T8MYv/0/LHLP5Pzx+z+C+SP2bxf0b+mMV/0fwxi/8z88cs/s/KH7P4L5Y/ZvF/dv6Yxf85+WMW/3H5Yxb/5+aPWfyflz9m8X9+/pjFf/H8MYv/EvljFv8X5I9Z/JfMH7P4L5U/ZvF/Yf6Yxf9F+WMW/xfnj1n8X5I/ZvFfOn/M4v/S/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v+y/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4vzx/zOK/Wv6YxX/1/DGL/yvyxyz+r8wfs/i/Kn/M4j8+f8ziPyF/zOI/MX/M4r9G/pjFf838MYv/WvljFv9J+WMW/8n5Yxb/tfPHLP7r5I9Z/F+dP2bxf03+mMV/3fwxi/96+WMW//Xzxyz+r80fs/hvkD9m8X9d/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8X58/ZvHfNH/M4r9Z/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjF/y35Yxb/t+aPWfzflj9m8d88f8ziv0X+mMV/y/wxi//b88cs/lvlj1n8t84fs/i/I3/M4r9N/pjF/535Yxb/bfPHLP7vyh+z+L87f8ziv13+mMV/+/wxi/8O+WMW/x3zn50WWvzfkz9m8X9v/pjFf6f8MYv/+/LHLP47549Z/N+fP2bx/0D+mMX/g/ljFv9d8scs/rvmj1n8d8sfs/h/KH/M4v/h/DGL/0fyxyz+H80fs/h/LH/M4j8lf8ziv3v+mMV/j/wxi//H88cs/p/IH7P475k/ZvH/ZP6YxX+v/DGL/6fyxyz+n84fs/jvnT9m8d8nf8ziv2/+mMX/M/ljFv/P5o9Z/D+XP2bx3y9/zOK/f/6Yxf/z+WMW/wPyxyz+B+aPWfy/kD9m8T8of8zif3D+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv9D8scs/l/LH7P4fz1/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv9v5I9Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/N/PHLP7fyh+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/7fzxyz+Z+aPWfzPyh+z+J+dP2bx/07+mMX/u/ljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zi/738MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4X5o9Z/C/KH7P4/yR/zOJ/cf6Yxf+n+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/8/yxyz+P88fs/j/In/M4v/L/DGL/9X5Yxb/a/LHLP6/yh+z+P86f8zif23+mMX/N/ljFv/r8scs/tfnj1n8b8gfs/j/Nn/M4n9j/pjF/6b8MYv/zfljFv/f5Y9Z/H+fP2bx/0P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bx/2P+mMX/rvwxi//d+WMW/z/lj1n878kfs/j/OX/M4v+X/DGL/1/zxyz+f8sfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/6n5Yxb/h/LHLP4P549Z/Kflj0n85xjkj1n8h/LHLP6j8scs/rPlj1n8Z88fs/iPzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4PyV/zOK/QP6YxX9M/pjFf8H8MYv/2Pwxi/9C+WMW/4Xzxyz+T80fs/g/LX/M4v/0/DGL/yL5Yxb/Z+SPWfwXzR+z+D8zf8zi/6z8MYv/YvljFv9n549Z/J+TP2bxH5c/ZvF/bv6Yxf95+WMW/+fnj1n8F88fs/gvkT9m8X9B/pjFf8n8MYv/UvljFv8X5o9Z/F+UP2bxf3H+mMX/JfljFv+l88cs/i/NH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/i/LH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/y/PHLP6r5Y9Z/FfPH7P4vyJ/zOL/yvwxi/+r8scs/uPzxyz+E/LHLP4T88cs/mvkj1n818wfs/ivlT9m8Z+UP2bxn5w/ZvFfO3/M4r9O/pjF/9X5Yxb/1+SPWfzXzR+z+K+XP2bxXz9/zOL/2vwxi/8G+WMW/9flj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/9fljFv9N88cs/pvlj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6Yxf9t+WMW/83zxyz+W+SPWfy3zB+z+L89f8ziv1X+mMV/6/wxi/878scs/tvkj1n835k/ZvHfNn/M4v+u/DGL/7vzxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/nvwxi/9788cs/jvlj1n835c/ZvHfOX/M4v/+/DGL/wfyxyz+H8wfs/jvkj9m8d81f8ziv1v+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMX/Y/ljFv8p+WMW/93zxyz+e+SPWfw/nj9m8f9E/pjFf8/8MYv/J/PHLP575Y9Z/D+VP2bx/3T+mMV/7/wxi/8++WMW/33zxyz+n8kfs/h/Nn/M4v+5/DGL/375Yxb//fPHLP6fzx+z+B+QP2bxPzB/zOL/hfwxi/9B+WMW/4Pzxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/gfkj9m8f9a/pjF/+v5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/I3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5k/ZvH/Vv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+dP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fyxyz+380fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/lj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvG/MH/M4n9R/pjF/yf5Yxb/i/PHLP4/zR+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/K/OH7P4X5M/ZvH/Vf6Yxf/X+WMW/2vzxyz+v8kfs/hflz9m8b8+f8zif0P+mMX/t/ljFv8b88cs/jflj1n8b84fs/j/Ln/M4v/7/DGL/x/yxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/x/zxyz+d+WPWfzvzh+z+P8pf8zif0/+mMX/z/ljFv+/5I9Z/P+aP2bx/1v+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+E/NH7P4P5Q/ZvF/OH/M4j8tf0ziP+cgf8ziP5Q/ZvEflT9m8Z8tf8ziP3v+mMV/dP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/yn5Yxb/BfLHLP5j8scs/gvmj1n8x+aPWfwXyh+z+C+cP2bxf2r+mMX/afljFv+n549Z/BfJH7P4PyN/zOK/aP6Yxf+Z+WMW/2flj1n8F8sfs/g/O3/M4v+c/DGL/7j8MYv/c/PHLP7Pyx+z+D8/f8ziv3j+mMV/ifwxi/8L8scs/kvmj1n8l8ofs/i/MH/M4v+i/DGL/4vzxyz+L8kfs/gvnT9m8X9p/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8X9Z/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8X54/ZvFfLX/M4r96/pjF/xX5Yxb/V+aPWfxflT9m8R+fP2bxn5A/ZvGfmD9m8V8jf8ziv2b+mMV/rfwxi/+k/DGL/+T8MYv/2vljFv918scs/q/OH7P4vyZ/zOK/bv6YxX+9/DGL//r5Yxb/1+aPWfw3yB+z+L8uf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+r88fs/hvmj9m8d8sf8zi/4b8MYv/G/PHLP5vyh+z+L85f8zi/5b8MYv/W/PHLP5vyx+z+G+eP2bx3yJ/zOK/Zf6Yxf/t+WMW/63yxyz+W+ePWfzfkT9m8d8mf8zi/878MYv/tvljFv935Y9Z/N+dP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/9+SPWfzfmz9m8d8pf8zi/778MYv/zvljFv/3549Z/D+QP2bx/2D+mMV/l/wxi/+u+WMW/93yxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/hPyR+z+O+eP2bx3yN/zOL/8fwxi/8n8scs/nvmj1n8P5k/ZvHfK3/M4v+p/DGL/6fzxyz+e+ePWfz3yR+z+O+bP2bx/0z+mMX/s/ljFv/P5Y9Z/PfLH7P4758/ZvH/fP6Yxf+A/DGL/4H5Yxb/L+SPWfwPyh+z+B+cP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/kPwxi//X8scs/l/PH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/G/ljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zi/838MYv/t/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4v/t/DGL/5n5Yxb/s/LHLP5n549Z/L+TP2bx/27+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+H8vf8zi//38MYv/D/LHLP4/zB+z+P8of8zi/+P8MYv/hfljFv+L8scs/j/JH7P4X5w/ZvH/af6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4n91/pjF/5r8MYv/r/LHLP6/zh+z+F+bP2bx/03+mMX/uvwxi//1+WMW/xvyxyz+v80fs/jfmD9m8b8pf8zif3P+mMX/d/ljFv/f549Z/P+QP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/P+YP2bxvyt/zOJ/d/6Yxf9P+WMW/3vyxyz+f84fs/j/JX/M4v/X/DGL/9/yxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6YxX9q/pjF/6H8MYv/w/ljFv9p+WMS/7kG+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOL/qvwxi//4/DGL/4T8MYv/xPwxi/8a+WMW/zXzxyz+a+WPWfwn5Y9Z/Cfnj1n8184fs/ivkz9m8X91/pjF/zX5Yxb/dfPHLP7r5Y9Z/NfPH7P4vzZ/zOK/Qf6Yxf91+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bxf33+mMV/0/wxi/9m+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvF/W/6YxX/z/DGL/xb5Yxb/LfPHLP5vzx+z+G+VP2bx3zp/zOL/jvwxi/82+WMW/3fmj1n8t80fs/i/K3/M4v/u/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4vyd/zOL/3vwxi/9O+WMW//flj1n8d84fs/i/P3/M4v+B/DGL/wfzxyz+u+SPWfx3zR+z+O+WP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMV/Sv6YxX/3/DGL/x75Yxb/j+ePWfw/kT9m8d8zf8zi/8n8MYv/XvljFv9P5Y9Z/D+dP2bx3zt/zOK/T/6YxX/f/DGL/2fyxyz+n80fs/h/Ln/M4r9f/pjFf//8MYv/5/PHLP4H5I9Z/A/MH7P4fyF/zOJ/UP6Yxf/g/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+h+SPWfy/lj9m8f96/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+38gfs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/2/mj1n8v5U/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv9v549Z/M/MH7P4n5U/ZvE/O3/M4v+d/DGL/3fzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf97+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8L8wfs/hflD9m8f9J/pjF/+L8MYv/T/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv+r88cs/tfkj1n8f5U/ZvH/df6Yxf/a/DGL/2/yxyz+1+WPWfyvzx+z+N+QP2bx/23+mMX/xvwxi/9N+WMW/5vzxyz+v8sfs/j/Pn/M4v+H/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4v/H/DGL/135Yxb/u/PHLP5/yh+z+N+TP2bx/3P+mMX/L/ljFv+/5o9Z/P+WP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP5T88cs/g/lj1n8H84fs/hPyx+T+M89yB+z+A/lj1n8R+WPWfxnyx+z+M+eP2bxH50/ZvGfI3/M4j9n/pjFf678sZn8Z/9v9p87f8xy/s+TP2bxnzd/zOI/X/6YxX/+/DGL/1Pyxyz+C+SPWfzH5I9Z/BfMH7P4j80fs/gvlD9m8V84f8zi/9T8MYv/0/LHLP5Pzx+z+C+SP2bxf0b+mMV/0fwxi/8z88cs/s/KH7P4L5Y/ZvF/dv6Yxf85+WMW/3H5Yxb/5+aPWfyflz9m8X9+/pjFf/H8MYv/EvljFv8X5I9Z/JfMH7P4L5U/ZvF/Yf6Yxf9F+WMW/xfnj1n8X5I/ZvFfOn/M4v/S/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v+y/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4vzx/zOK/Wv6YxX/1/DGL/yvyxyz+r8wfs/i/Kn/M4j8+f8ziPyF/zOI/MX/M4r9G/pjFf838MYv/WvljFv9J+WMW/8n5Yxb/tfPHLP7r5I9Z/F+dP2bxf03+mMV/3fwxi/96+WMW//Xzxyz+r80fs/hvkD9m8X9d/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8X58/ZvHfNH/M4r9Z/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjF/y35Yxb/t+aPWfzflj9m8d88f8ziv0X+mMV/y/wxi//b88cs/lvlj1n8t84fs/i/I3/M4r9N/pjF/535Yxb/bfPHLP7vyh+z+L87f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+78kfs/i/N3/M4r9T/pjF/335Yxb/nfPHLP7vzx+z+H8gf8zi/8H8MYv/LvljFv9d88cs/rvlj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvGfkj9m8d89f8ziv0f+mMX/4/ljFv9P5I9Z/PfMH7P4fzJ/zOK/V/6Yxf9T+WMW/0/nj1n8984fs/jvkz9m8d83f8zi/5n8MYv/Z/PHLP6fyx+z+O+XP2bx3z9/zOL/+fwxi/8B+WMW/wPzxyz+X8gfs/gflD9m8T84f8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/IfljFv+v5Y9Z/L+eP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/N/LHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/5v5Yxb/b+WPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/b+WMW/zPzxyz+Z+WPWfzPzh+z+H8nf8zi/938MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9e/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/C/PHLP4X5Y9Z/H+SP2bxvzh/zOL/0/wxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf9n+WMW/5/nj1n8f5E/ZvH/Zf6Yxf/q/DGL/zX5Yxb/X+WPWfx/nT9m8b82f8zi/5v8MYv/dfljFv/r88cs/jfkj1n8f5s/ZvG/MX/M4n9T/pjF/+b8MYv/7/LHLP6/zx+z+P8hf8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+P8xf8zif1f+mMX/7vwxi/+f8scs/vfkj1n8/5w/ZvH/S/6Yxf+v+WMW/7/lj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi//U/DGL/0P5Yxb/h/PHLP7T8sck/vMM8scs/kP5Yxb/UfljFv/Z8scs/rPnj1n8R+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/J+SP2bxXyB/zOI/Jn/M4r9g/pjFf2z+mMV/ofwxi//C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+R/DGL/zPyxyz+i+aPWfyfmT9m8X9W/pjFf7H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovnj1n8l8gfs/i/IH/M4r9k/pjFf6n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/0vljFv+X5o9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+X5Yxb/1fLHLP6r549Z/F+RP2bxf2X+mMX/VfljFv/x+WMW/wn5Yxb/ifljFv818scs/mvmj1n818ofs/hPyh+z+E/OH7P4r50/ZvFfJ3/M4v/q/DGL/2vyxyz+6+aPWfzXyx+z+K+fP2bxf23+mMV/g/wxi//r8scs/hvmj1n8N8ofs/hvnD9m8d8kf8zi//r8MYv/pvljFv/N8scs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//m+WMW/y3yxyz+W+aPWfzfnj9m8d8qf8ziv3X+mMX/HfljFv9t8scs/u/MH7P4b5s/ZvF/1z/6v/L/03H9H83i/+7Of8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+78kfs/i/N3/M4r9T/pjF/335Yxb/nfPHLP7vzx+z+H8gf8zi/8H8MYv/LvljFv9d88cs/rvlj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvGfkj9m8d89f+y/13/a0Mz+e+SP/ff6P/b8/3j+mMX/E/ljFv8988cs/p/MH7P475U/ZvH/VP6Yxf/T+WMW/73zxyz+++SPWfz3zR+z+H8mf8zi/9n8MYv/5/LHLP775Y9Z/PfPH7P4fz5/zOJ/QP6Yxf/A/DGL/xfyxyz+B+WPWfwPzh+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zif0j+mMX/a/ljFv+v549Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zi/438MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8f9m/pjF/1v5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvH/dv6Yxf/M/DGL/1n5Yxb/s/PHLP7fyR+z+H83f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfy/lz9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/8L8MYv/RfljFv+f5I9Z/C/OH7P4/zR/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvH/Wf6Yxf/n+WMW/1/kj1n8f5k/ZvG/On/M4n9N/pjF/1f5Yxb/X+ePWfyvzR+z+P8mf8zif13+mMX/+vwxi/8N+WMW/9/mj1n8b8wfs/jflD9m8b85f8zi/7v8MYv/7/PHLP5/yB+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP5/zB+z+N+VP2bxvzt/zOL/p/wxi/89+WMW/z/nj1n8/5I/ZvH/a/6Yxf9v+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOI/NX/M4v9Q/pjF/+H8MYv/tPwxif+8g/wxi/9Q/pjFf1T+mMV/tvwxi//s+WMW/9H5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv+n5I9Z/BfIH7P4j8kfs/gvmD9m8R+bP2bxXyh/zOK/cP6Yxf+p+WMW/6flj1n8n54/ZvFfJH/M4v+M/DGL/6L5Yxb/Z+aPWfyflT9m8V8sf8zi/+z8MYv/c/LHLP7j8scs/s/NH7P4Py9/zOL//Pwxi//i+WMW/yXyxyz+L8gfs/gvmT9m8V8qf8zi/8L8MYv/i/LHLP4vzh+z+L8kf8ziv3T+mMX/pfljFv9l8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMX/ZfljFv+V8scs/ivnj1n8V8kfs/ivmj9m8X95/pjFf7X8MYv/6vljFv9X5I9Z/F+ZP2bxf1X+mMV/fP6YxX9C/pjFf2L+mMV/jfwxi/+a+WMW/7Xyxyz+k/LHLP6T88cs/mvnj1n818kfs/i/On/M4v+a/DGL/7r5Yxb/9fLHLP7r549Z/F+bP2bx3yB/zOL/uvwxi/+G+WMW/43yxyz+G+ePWfw3yR+z+L8+f8ziv2n+mMV/s/wxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4vy1/zOK/ef6YxX+L/DGL/5b5Yxb/t+ePWfy3yh+z+G+dP2bxf0f+mMV/m/wxi/8788cs/tvmj1n835U/ZvF/d/6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/N+TP2bxf2/+mMV/p/wxi//78scs/jvnj1n8358/ZvH/QP6Yxf+D+WMW/13yxyz+u+aPWfx3yx+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+H8sf8ziPyV/zOK/e/6YxX+P/DGL/8fzxyz+n8gfs/jvmT9m8f9k/pjFf6/8MYv/p/LHLP6fzh+z+O+dP2bx3yd/zOK/b/6Yxf8z+WMW/8/mj1n8P5c/ZvHfL3/M4r9//pjF//P5Yxb/A/LHLP4H5o9Z/L+QP2bxPyh/zOJ/cP6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/0Pyxyz+X8sfs/h/PX/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/kj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/8388cs/t/KH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/t/PHLP5n5o9Z/M/KH7P4n50/ZvH/Tv6Yxf+7+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL/vfwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/hfmj1n8L8ofs/j/JH/M4n9x/pjF/6f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/LHLP4/zx+z+P8if8zi/8v8MYv/1fljFv9r8scs/r/KH7P4/zp/zOJ/bf6Yxf83+WMW/+vyxyz+1+ePWfxvyB+z+P82f8zif2P+mMX/pvwxi//N+WMW/9/lj1n8f58/ZvH/Q/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvH/Y/6Yxf+u/DGL/935Yxb/P+WPWfzvyR+z+P85f8zi/5f8MYv/X/PHLP5/yx+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/qfljFv+H8scs/g/nj1n8p+WPSfznG+SPWfyH8scs/qPyxyz+s+WPWfxnzx+z+I/OH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/g/JX/M4r9A/pjFf0z+mMV/wfwxi//Y/DGL/0L5Yxb/hfPHLP5PzR+z+D8tf8zi//T8MYv/IvljFv9n5I9Z/BfNH7P4PzN/zOL/rPwxi/9i+WMW/2fnj1n8n5M/ZvEflz9m8X9u/pjF/3n5Yxb/5+ePWfwXzx+z+C+RP2bxf0H+mMV/yfwxi/9S+WMW/xfmj1n8X5Q/ZvF/cf6Yxf8l+WMW/6Xzxyz+L80fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+L8sfs/ivlD9m8V85f8ziv0r+mMV/1fwxi//L88cs/qvlj1n8V88fs/i/In/M4v/K/DGL/6vyxyz+4/PHLP4T8scs/hPzxyz+a+SPWfzXzB+z+K+VP2bxn5Q/ZvGfnD9m8V87f8ziv07+mMX/1fljFv/X5I9Z/NfNH7P4r5c/ZvFfP3/M4v/a/DGL/wb5Yxb/1+WPWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf/1+WMW/03zxyz+m+WPWfzfkD9m8X9j/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/zfPHLP5b5I9Z/LfMH7P4vz1/zOK/Vf6YxX/r/DGL/zvyxyz+2+SPWfzfmT9m8d82f8zi/678MYv/u/PHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4v+e/DGL/3vzxyz+O+WPWfzflz9m8d85f8zi//78MYv/B/LHLP4fzB+z+O+SP2bx3zV/zOK/W/6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/yn5Yxb/3fPHLP575I9Z/D+eP2bx/0T+mMV/z/wxi/8n88cs/nvlj1n8P5U/ZvH/dP6YxX/v/DGL/z75Yxb/ffPHLP6fyR+z+H82f8zi/7n8MYv/fvljFv/988cs/p/PH7P4H5A/ZvE/MH/M4v+F/DGL/0H5Yxb/g/PHLP5fzB+z+H8pf8zi/+X8MYv/V/LHhv0Hg8GU/3b/r+aPWc7/Q/LHLP5fyx+z+H89f8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/b+SPWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/zfzxyz+38ofs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+388cs/mfmj1n8z8ofs/ifnT9m8f9O/pjF/7v5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4v+9/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+F+aPWfwvyh+z+P8kf8zif3H+mMX/p/ljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//P8scs/j/PH7P4/yJ/zOL/y/wxi//V+WMW/2vyxyz+v8ofs/j/On/M4n9t/pjF/zf5Yxb/6/LHLP7X549Z/G/IH7P4/zZ/zOJ/Y/6Yxf+m/DGL/835Yxb/3+WPWfx/nz9m8f9D/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8f9j/pjF/678MYv/3fljFv8/5Y9Z/O/JH7P4/zl/zOL/l/wxi/9f88cs/n/LH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+p+WMW/4fyxyz+D+ePWfyn5Y9J/Ocf5I9Z/Ifyxyz+o/LHLP6z5Y9Z/GfPH7P4j84fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+D8lf8ziv0D+mMV/TP6YxX/B/DGL/9j8MYv/QvljFv+F88cs/k/NH7P4Py1/zOL/9Pwxi/8i+WMW/2fkj1n8F80fs/g/M3/M4v+s/DGL/2L5Yxb/Z+ePWfyfkz9m8R+XP2bxf27+mMX/efljFv/n50/tPpD4L54/Zjn/l8gfs/i/IH/M4r9k/pjFf6n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/0vljFv+X5o9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+X5Yxb/1fLHLP6r549Z/F+RP2bxf2X+mMX/VfljFv/x+WMW/wn5Yxb/ifljFv818scs/mvmj1n818ofs/hPyh+z+E/OH7P4r50/ZvFfJ3/M4v/q/DGL/2vyxyz+6+aPWfzXyx+z+K+fP2bxf23+mMV/g/wxi//r8scs/hvmj1n8N8ofs/hvnD9m8d8kf8zi//r8MYv/pvljFv/N8scs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//m+WMW/y3yxyz+W+aPWfzfnj9m8d8qf8ziv3X+mMX/HfljFv9t8scs/u/MH7P4b5s/ZvF/V/6Yxf/d+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bxf0/+mMX/vfljFv+d8scs/u/LH7P475w/ZvF/f/6Yxf8D+WMW/w/mj1n8d8kfs/jvmj9m8d8tf8zi/6H8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/lPwxi//u+WMW/z3yxyz+H88fs/h/In/M4r9n/pjF/5P5Yxb/vfLHLP6fyh+z+H86f8ziv3f+mMV/n/wxi/+++WMW/8/kj1n8P5s/ZvH/XP6YxX+//DGL//75Yxb/z+ePWfwPyB+z+B+YP2bx/0L+mMX/oPwxi//B+WMW/y/K/ed4nOUW/y/J/R8vi/+X88cs/l/JH7P4fzV/zOJ/SP6Yxf9r+WMW/6/nj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOL/jfwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bx/2b+mMX/W/ljFv9T88cs/qflj1n8T88fs/ifkT9m8f92/pjF/8z8MYv/WfljFv+z88cs/t/JH7P4fzd/zOJ/Tv7TO+TWsdvN9NLif27+mMX/vPwxi//5+WMW/wvyxyz+38sfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4n9h/pjF/6L8MYv/T/LHLP4X549Z/H+aP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/yx/zOL/8/wxi/8v8scs/r/MH7P4X50/ZvG/Jn/M4v+r/DGL/6/zxyz+1+aPWfx/kz9m8b8uf8zif33+mMX/hvwxi/9v88cs/jfmj1n8b8ofs/jfnD9m8f9d/pjF//f5Yxb/P+SPWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/P+aPWfzvyh+z+N+dP2bx/1P+mMX/nvwxi/+f88cs/n/JH7P4/zV/zOL/t/wxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxn5o/ZvF/KH/M4v9w/pjFf1r+mMT/KYP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/p+SPWfwXyB+z+I/JH7P4L5g/ZvEfmz9m8V8of8ziv3D+mMX/qfljFv+n5Y9Z/J+eP2bxXyR/zOL/jPwxi/+i+WMW/2fmj1n8n5U/ZvFfLH/M4v/s/DGL/3Pyxyz+4/LHLP7PzR+z+D8vf8zi//z8MYv/4vljFv8l8scs/i/IH7P4L5k/ZvFfKn/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4r90/pjF/6X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/2X5Yxb/lfLHLP4r5/+YZsyNxX+V/DGL/6r5Yxb/l+ePWfxXyx+z+K+eP2bxf0X+mMX/lfljFv9X5Y9Z/Mfnj1n8J+SPWfwn5o9Z/NfIH7P4r5k/ZvFfK3/M4j8pf8ziPzl/zOK/dv6YxX+d/DGL/6vzxyz+r8kfs/ivmz9m8V8vf8ziv37+mMX/tfljFv8N8scs/q/LH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/6/PHLP6b5o9Z/DfLH7P4vyF/zOL/xvwxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/pvnj1n8t8gfs/hvmT9m8X97/pjFf6v8MYv/1vljFv935I9Z/LfJH7P4vzN/zOK/bf6Yxf9d+WMW/3fnj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMX/PfljFv/35o9Z/HfKH7P4vy9/zOK/c/6Yxf/9+WMW/w/kj1n8P5g/ZvHfJX/M4r9r/pjFf7f8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/x/LHLP5T8scs/rvnj1n898gfs/h/PH/M4v+J/DGL/575Yxb/T+aPWfz3yh+z+H8qf8zi/+n8MYv/3vljFv998scs/vvmj1n8P5M/ZvH/bP6Yxf9z+WMW//3yxyz+++ePWfw/nz9m8T8gf8zif2D+mMX/C/ljFv+D8scs/gfnj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvE/JH/M4v+1/DGL/9fzxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvH/Rv6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4fzN/zOL/rfwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+H87f8zif2b+mMX/rPwxi//Z+WMW/+/kj1n8v5s/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/t/LH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOJ/Yf6Yxf+i/DGL/0/yxyz+F+ePWfx/mj9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+P8sf8zi//P8MYv/L/LHLP6/zB+z+F+dP2bxvyZ/zOL/q/wxi/+v88cs/tfmj1n8f5M/ZvG/Ln/M4n99/pjF/4b8MYv/b/PHLP435o9Z/G/KH7P435w/ZvH/Xf6Yxf/3+WMW/z/kj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/z/mj1n878ofs/jfnT9m8f9T/pjF/578MYv/n/PHLP5/yR+z+P81f8zi/7f8MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8Z+aP2bxfyh/zOL/cP6YxX9a/pjEf4FB/pjFfyh/zOI/Kn/M4j9b/pjFf/b8MYv/6Pwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/1Pyxyz+C+SPWfzH5I9Z/BfMH7P4j80fs/gvlD9m8V84f8zi/9T8MYv/0/LHLP5Pzx+z+C+SP2bxf0b+mMV/0fwxi/8z88cs/s/KH7P4L5Y/ZvF/dv6Yxf85+WMW/3H5Yxb/5+aPWfyflz9m8X9+/pjFf/H8MYv/EvljFv8X5I9Z/JfMH7P4L5U/ZvF/Yf6Yxf9F+WMW/xfnj1n8X5I/ZvFfOn/M4v/S/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v+y/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4vzx/zOK/Wv6YxX/1/DGL/yvyxyz+r8wfs/i/Kn/M4j8+f8ziPyF/zOI/MX/M4r9G/pjFf838MYv/WvljFv9J+WMW/8n5Yxb/tfPHLP7r5I9Z/F+dP2bxf03+mMV/3fwxi/96+WMW//Xzxyz+r80fs/hvkD9m8X9d/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8X58/ZvHfNH/M4r9Z/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjF/y35Yxb/t+aPWfzflj9m8d88f8ziv0X+mMV/y/wxi//b88cs/lvlj1n8t84fs/i/I3/M4r9N/pjF/535Yxb/bfPHLP7vyh+z+L87f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+78kfs/i/N3/M4r9T/pjF/335Yxb/nfPHLP7vzx+z+H8gf8zi/8H8MYv/LvljFv9d88cs/rvlj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvGfkj9m8d89//8f+/TQBIiBAGF0Zz27wcS2bdu2bdtOqmLbtm3btm3bvuTYv2D6vVPfv+qopf/e+kct/ffRP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/gfqH7X0P0j/qKX/wfpHLf0P0T9q6X+o/lFL/8P0j1r6H65/1NL/CP2jlv5H6h+19D9K/6il/9H6Ry39j9E/aul/rP5RS//j9I9a+h+vf9TS/wT9o5b+J+oftfQ/Sf+opf/J+kct/U/RP2rpf6r+UUv/0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/2fpHLf3P0T9q6X+u/lFL//P0j1r6n69/1NL/Av2jlv4X6h+19L9I/6il/8X6Ry39L9E/aul/qf5RS//L9I9a+l+uf9TS/wr9o5b+V+oftfS/Sv+opf/V+kct/a/RP2rpf63+UUv/6/SPWvpfr3/U0v8G/aOW/jfqH7X0v0n/qKX/zfpHLf1v0T9q6X+r/lFL/9v0j1r6365/1NL/Dv2jlv536h+19L9L/6il/936Ry3979E/aul/r/5RS//79I9a+t+vf9TS/wH9o5b+D+oftfR/SP+opf/D+kct/R/RP2rp/6j+UUv/x/SPWvo/rn/U0v8J/aOW/k/qH7X0f0r/qKX/0/pHLf2f0T9q6f+s/lFL/+f0j1r6P69/1NL/Bf2jlv4v6h+19H9J/6il/8v6Ry39X9E/aun/qv5RS//X9I9a+r+uf9TS/w39o5b+b+oftfR/S/+opf/b+kct/d/RP2rp/67+UUv/9/SPWvq/r3/U0v8D/aOW/h/qH7X0/0j/qKX/x/pHLf0/0T9q6f+p/lFL/8/0j1r6f65/1NL/C/2jlv5f6h+19P9K/6il/9f6Ry39v9E/aun/rf5RS//v9I9a+n+vf9TS/wf9o5b+P+oftfT/Sf+opf/P+kct/X/RP2rp/6v+UUv/3/SPWvr/rn/U0v8P/aOS/oP+pn/U0n+A/lFL/7/rH7X0/4f+UUv/f+oftfT/l/5RS/9/6x+19P+P/lFL///qH7X0H6h/1NL/f/pHLf3/r3/U0n8I/aOW/kPqH7X0H0r/qKX/0PpHLf0H6R+19B9G/6il/7D6Ry39h9M/auk/vP5RS/8R9I9a+o+of9TSfyT9o5b+I+sftfQfRf+opf+o+kct/UfTP2rpP7r+UUv/MfSPWvqPqX/U0n8s/aOW/mPrH7X0H0f/qKX/uPpHLf3H0z9q6T++/lFL/wn0j1r6T6h/1NJ/Iv2jlv4T6x+19J9E/6il/6T6Ry39J9M/auk/uf5RS/8p9I9a+k+pf9TSfyr9o5b+U+sftfSfRv+opf+0+kct/afTP2rpP73+UUv/GfSPWvrPqH/U0n8m/aOW/jPrH7X0n0X/qKX/rPpHLf1n0z9q6T+7/lFL/zn0j1r6z6l/1NJ/Lv2jlv5z6x+19J9H/6il/7z6Ry3959M/auk/v/5RS/8F9I9a+i+of9TSfyH9o5b+C+sftfRfRP+opf+i+kct/RfTP2rpv7j+UUv/JfSPWvovqX/U0n8p/aOW/kvrH7X0X0b/qKX/svpHLf2X0z9q6b+8/lFL/xX0j1r6r6h/1NJ/Jf2jlv4r6x+19F9F/6il/6r6Ry39V9M/aum/uv5RS/819I9a+q+pf9TSfy39o5b+a+sftfRfR/+opf+6+kct/dfTP2rpv77+UUv/DfSPWvpvqH/U0n8j/aOW/hvrH7X030T/qKX/pvpHLf030z8aMPCvMZj331z/qOX/W+gftfTfUv+opf9W+kct/bfWP2rpv43+UUv/bfWPWvpvp3/U0n97/aOW/jvoH7X031H/qKX/TvpHLf131j9q6b+L/lFL/131j1r676Z/1NJ/d/2jlv576B+19N9T/6il/176R4NdfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTfbuNrbMs/Dh+d1vH2J9/MuKCy9BkkwuFRJjtHjJeEDYZ2+qgG89jgKNbu7HRbrPrsCvgHl5MIoQHSSZZokTZMpQwExqJgWAFEQ26qIkGHwBRiKJxIgTdEhdrTnta2mPXeK56XYvy+bzoOfd99ru3NfnuvhcYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+9GhoXHhlfM+zU+KEHHzzc0vc65+jKmw/8tufCgdfyx8tGuOS4oQe9vb29c56bvaN8eEpRFKWfbWf5eFLluHT9nfVf6Ow/Cgt6XlpyfMrPG48cWHP6I3XdR++v7TtbW9y0bkNry8fGFUW4uLboLB3U1RRFWFxb3Fc6qC8dLKktHikdzO47OLX4dung/LWbW5tLJ5ZGf8/gf0VD485i/LBii2F/Ggztf2f9t+4ceB3lkgNXm1CU+7+i6/tvVXw24AT9D1w/LKzsv+rfIHBC1fX/woKB11Eu+S/3/8lPrXplpM9O3P/A9cPH9Q/pjPD8P6zRyuf+iuf/GSNccnB/VU3X8VL/l9727MzyqQn/zvP/u9cPF1f2P27Y83/pOX7RwPP/KUURLhnjtwPeUxoadx0Z7f4/ev8Tpldsaob2f0b75v2l/h9f8r0nyqdqq+x/0Sj3/3FLK36tQHUaGr/cW3H/r6L/4iMjXHKw/7ef+PXDpf4f+/0DZw75rJr+L6nsf1ZH25ZZW7d3nbehrWl9y/qWTXWz58+ZV18374K5s/oeCfq/jvG7Au8NY7v/F5MrNjVF0TK4v6b7wNOl/uc++OCc8qlJVfa/eNT7/wz3fxjRh8YVEycWnU0dHe11/V8HDuv7v/b/sBH6r+Lv/2edU/5hteXXmqKYNri/68y7V5T6f+fQs7vLpyZW2f+SUftfMPjzAhHGeP9vrtgM6//goZf6nv+X3XvwjPKpav/+v3TU/l91/4exaGis+B9+/sNK/e8qLovsNDT473+QTo7+H3vnhp64dfiE/iGdHP3/7nNHz41bh2X6h3Ry9D9h4wPPx63DpfqHdHL0v3zq/BVx63CZ/iGdHP2vffXcP8etQ6P+IZ0c/Z/zpd2dceuwXP+QTo7+H2qfsy1uHVboH9LJ0f9PT3votbh1uFz/kE6O/o8du+fGuHW4Qv+QTo7+u/ec/YO4dbhS/5BOjv4vX7cwxK3DVfqHdHL0P33aHx+PW4er9Q/p5Oh/3p/+flrcOlyjf0gnR/93fH7Fvrh1uFb/kE6O/sdf/8qLceuwUv+QTo7+l569bWHcOlynf0gnR//NP2nujVuHVfqHdHL0P+vrP9oQtw7X6x/SydH/4eWP7olbhxv0D+nk6H9PXTElbh1u1D+kk6P/r3339ENx6/BJ/UM6Ofr/zVNPzo9bh9X6h3Ry9P/cB27/Rtw63KR/SCdH//euefGsuHVo0j+kk6P/h/c+/8W4dVijf0gnR/9vvNH2f3HrsFb/kE6O/idPOvX1uHVo1j+kk6P/hbd+pT1uHVr0D+nk6L9td/cP49Zhnf4hnRz9f/j4tFVx67Be/5BOjv5Xzt37/rh1uFn/kE6O/t+37MJdceuwQf+QTo7+L+r56EVx67BR/5BOjv47nvnsV+PW4Rb9Qzo5+t8787XFcevQqn9IJ0f/L69e+uO4dWjTP6STo/+3Hr1uU9w6bNI/pJOj/yd/9vaxuHXYrH9IJ0f//3/Bor/GrcMW/UM6OfpfvOTNtXHr8Cn9Qzo5+t/Y/Y+X49ahXf+QTo7+Zx6+elncOmzVP6STo//vnFe3P24dOvQP6eTo/84r99XHrcM2/UM6Ofrff/Cuu+PW4Vb9Qzo5+n/zFzOmx63Dp/UP6eTo//4ph66NW4dO/UM6Ofr/5abaZ+LWYbv+IZ0c/f9t39QdcevQpX9IJ0f/T7/e84e4dbhN/5BOjv5XT/jVxLh1uF3/kE6O/qd2bbkvbh3u0D+kk6P/+fc0nR+3Dp/RP6STo/+tf3nhm3HrsEP/kM7W7V23NLW2trR744033gy+Odl/MgGpvRv9yf6VAAAAAAAAAAAAAAAAJ5LjnxOd7N8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOoncDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKwAA//8ZLeDr")
ioctl$FS_IOC_GETFSMAP(r1, 0x40105870, &(0x7f00000000c0)=ANY=[])

1m36.953362525s ago: executing program 3 (id=249):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x4})

1m36.407781718s ago: executing program 3 (id=251):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x34, r1, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000909"], 0x4c}}, 0x0)

1m36.320505418s ago: executing program 32 (id=251):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x34, r1, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000909"], 0x4c}}, 0x0)

53.497856222s ago: executing program 0 (id=424):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) (fail_nth: 3)

53.023324045s ago: executing program 0 (id=429):
r0 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80281, 0x0)
io_setup(0x2, &(0x7f0000001f00)=<r3=>0x0)
io_submit(r3, 0x0, &(0x7f0000003300)=[&(0x7f0000002040)={0x0, 0x0, 0x0, 0x1, 0x8c2d, r2, &(0x7f0000001f40)="26c5ae", 0x3, 0xffffffffffffffff}])
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ftruncate(r5, 0x1362001)
pipe2(&(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x84000)
unshare(0xe020600)
bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000005002e000100000005040800010000001830000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', @random='\a\x00\x00 \x00'})
fcntl$setpipe(r6, 0x407, 0x80000000)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000500)='b', 0x1}], 0x1, 0xfff, 0x1, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24)
ioctl$KDSIGACCEPT(r1, 0x5607, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080)
unshare(0x20040400)
unshare(0x0)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102ae299820fc0d0100ac240102030109022b0001fffa10170904510302ffffff01090507100800060808070593"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x9d, 0x17c, &(0x7f0000000240)="$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")

51.638114553s ago: executing program 0 (id=437):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)="e3da71f50355da9ea203076dc622791761a70f404e70c015c38137ed41d31125e71c53e4e234f25a923a8c19be3cf22c52f421f70777f0fb8a444cd4c183ba4423fc46e62f3f73d354bce6bcd311837a3bd84820ff1ad5d7025e069cdb701cd3ad7ae4c843d24b74464ac3110c2453436427f5d8477127b31326049cbdd80fd7eefb52bd1a70700fe0d978cf0388fd2734c44e13912fb44d55611eb98d1f530cb033c9f088bff216f5fa87b196bde778ba0e", 0xb2}, {&(0x7f0000000640)="60222318b2b323a228d6dd5f2baf6a5ee74bd13ceafee876ac327f2f67ec98f913d2dce2879c99714a33b396686b2b70c30da7e78f7a3b2b31d6defe8b6c4b08cf8472b0c40056869538e85ed7fd5d035945bdd9da95d867dd69ef40c602d46daab3176b1dd1c12456485c9563a2a8eb7ae09e1e7036cc1b48cab2685abcb88c0f48", 0x82}, {&(0x7f0000000180)="63a9cc7bc4915c112fa912dd3d38e5377c4230549871c90046354a96774a67ca6cf3632d5c404200a0565db3934565", 0x2f}, {&(0x7f0000000840)="59901f6d9fe8c6e2956d7e39b4215f63830db597de0fa0666cb12737a30677f0864a597ef07bb0259712ddf1ef56c97b5f4347cdda6f6c1e48edd934beb7a51c6a7bdd8e7760e323150f0c4e3455a0b8f5860a2a752e7e7401811c609c67b5039e7dbd427893a78cf4d83ca63c355cd119ef2ee56dfe4d2ee4afa6cd88db40d5aad01e6d3298eb5775a750ea332c8abd56b82002dbb74fc32ffabedebe7208d3e5faf61a61e89f139ce9ae0eb4863f107504", 0xff90}, {&(0x7f0000000900)="62bed5ce8e17986dc53f671125dc9bf52b6b4a79864ba54d5f982982ab0cd7808ce5ae0ed4ea4b24ea584ca52dc5f23f8b63206247bd9f832fc057a922067c4b3bf6498b25341a4d6e373315dd44bee75140eec71ec957c79dc8fb856ab6078af3cda81788c81173413b1ea07639088cff06a7dd5dadb17cf0da3874418e7c7b3661e0650be532add6129c8de3bd82a5228f6c381ec4dc92c454818d874f8a085b2926f661835299f767acdd49c96e526a07c5e528353087a10372dcae55ab3ecb50c2fd65e71d7fb4045f5a171663a9bc12", 0xd2}], 0x5, &(0x7f0000000a80)}}], 0x1, 0x84)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="f39561fc17b7f981"})
openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="7569649163507d396ffb9e5dbd0570bace3db5ca739e08fdb12f9d530d832074934cfc256444c11dc29f2e025f6ceb5a5bb2d1ca8bd6c834ca15813d38053cf4b93d3195bdd3", @ANYRESHEX=0x0, @ANYBLOB=',\x00'])
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x3)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@dev={0xac, 0x14, 0x14, 0x3c}, @in=@empty, 0x4e20, 0x2, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0xaa}, {0x3, 0x400, 0xa398, 0x5, 0x0, 0xeab, 0x2, 0x2}, {0x8, 0x3, 0xf2, 0xfffffffffffffff7}, 0x5, 0x6e6bbb, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x4d4, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x3502, 0x1, 0x3, 0x70, 0x162800, 0x6, 0xa0ad}}, 0xe8)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}, @const={0x0, {0x0, 0x0, 0x0, 0x80}}})
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r5, &(0x7f0000003040)={0x2020}, 0x2020)
ioctl(r4, 0x8b2c, &(0x7f0000000040))
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="400ac900000027"], 0x0, 0x0})

49.151274438s ago: executing program 0 (id=447):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000020202000900030073797a30000000000900010001"], 0x34}, 0x1, 0x40030000000000}, 0x0)
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000002200)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES32, @ANYBLOB="b30954f290a6717aa0e8ff2ba2cb525db65ab61eb84c11cef7c22fc9188d182aae883658fe1ac874c2d4eceb46e540f12bec0da2515a3ad122c0bb8f1593d25a08d9aaebb3d2389aa31a44941fee6af96df6c50db04d20799ecf7e220f20107a23b0631f1f37386b147109c33b8bf39901ca75bbc85c5c6c8c52a30a5f83c2e98bfa43d09c6da5d7a45e79d2325c", @ANYRES8, @ANYRESDEC, @ANYBLOB="40a9e162847ad70344b7f6dea8e6fcd004050ed00e2924fc1fb44e5f8849a11cd067f20794f7a609739ffa0dcec14bc68f0a84388bf31b2518a9c47ad82929678f88acb9dc642bc33f11fe09d6441eed7c32b58efa1e952624659491307dfc20de98df04b2fa6972c496a0007d70c944e36f2d1c6c5680a2edbe1e0dc11c01458e2f0b6939726ac77b7c9f5a5cf20594ef9ad63c1d0906307dd8a0221642e17e", @ANYRESHEX, @ANYRES32], 0x1, 0x1e5, &(0x7f00000006c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x10)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x110, r3, 0x3000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r4, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20010080)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x801081, &(0x7f0000000300)=ANY=[], 0x0, 0x394, &(0x7f00000012c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000007c0)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x1, 0x3, 0x7ff, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2016, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x8000)

48.682238061s ago: executing program 0 (id=448):
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x3070c3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f396a352617efe99005fa44a044cdd30ec11b861dd3bea91805bdfa6e8a142e72aac688ba8573aad80f6d002e77e998f141b0b35732059ebcf53becfe898ffd8c2117b6bddbdc515f677540fbf0362285ca7c6f4bfa4319e0a6c26e9c6a1a450ba5d58d87302e4a9c1c3c12947287cb98131e247c87392a2325c6767b8c80f59d5bb0edd51428b4f54aa95c4da37a03d5db14877bc8ceec9216d96c33ab93d56cf4a8eb7fb4004c8a69d8d7ec7ac4ec979c21cfee728cdd9b25f70413772ed8bc5360c4f65", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001900)={r0, &(0x7f0000001800), &(0x7f00000018c0)=@udp6=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f00000000c0), 0x0}, 0x20)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0xd7, 0x0)
munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000)
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', 0x0, 0x4, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000008380)={0x0, 0x0, &(0x7f0000008340)={&(0x7f0000006a40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c0000000c000380040003800400040001801400020077673100"/50], 0x38}}, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000180)={0x0, @default, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @null, 0x0, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]})
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30, 0x1}], 0x1, 0x0)

47.320818039s ago: executing program 0 (id=461):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_open_dev$amidi(&(0x7f0000001480), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xad26}}, './file0\x00'})
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x2810880, &(0x7f0000000240)=ANY=[], 0x8b, 0x2a4, &(0x7f00000009c0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x90)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000280)={0xdcb, 0x3, 0x42, 0xfffffffc, 0x0, "c7eded010000000000000000804000"})
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x400, 0x0, 0x1000, 0x0, 0x11, "4415264a88b82c522013fb235902af2556c6b6"})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0)
renameat2(r4, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000140)='./bus/file0\x00', 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f00000004c0)='./bus/file0\x00', r5, &(0x7f0000000500)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r7 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r6, 0x0, 0x0, 0x1000f4)
io_setup(0x7, &(0x7f00000000c0)=<r8=>0x0)
io_submit(r8, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
open_by_handle_at(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c00020081000000ff7f0000000000000200000000005e00000000000000000002c31200585c1799d91976c4280754cae57edc67f29df48d2bcea4a7c57d5cc54b0e517d1e5a4089aa9a720618423b0cdb84051d7e83449b8da7a573b0e7c38d90383fa6f5be84b4b9853691e2923ed883108011d3874bbc552bffbae9ff798e8ec046d539731ac7e14f87b4969210123de6726c1784112cdc17db1bef7399b7104a"], 0x200)

47.237249899s ago: executing program 33 (id=461):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_open_dev$amidi(&(0x7f0000001480), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xad26}}, './file0\x00'})
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x2810880, &(0x7f0000000240)=ANY=[], 0x8b, 0x2a4, &(0x7f00000009c0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x90)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000280)={0xdcb, 0x3, 0x42, 0xfffffffc, 0x0, "c7eded010000000000000000804000"})
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x400, 0x0, 0x1000, 0x0, 0x11, "4415264a88b82c522013fb235902af2556c6b6"})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0)
renameat2(r4, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000140)='./bus/file0\x00', 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f00000004c0)='./bus/file0\x00', r5, &(0x7f0000000500)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r7 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r6, 0x0, 0x0, 0x1000f4)
io_setup(0x7, &(0x7f00000000c0)=<r8=>0x0)
io_submit(r8, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
open_by_handle_at(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c00020081000000ff7f0000000000000200000000005e00000000000000000002c31200585c1799d91976c4280754cae57edc67f29df48d2bcea4a7c57d5cc54b0e517d1e5a4089aa9a720618423b0cdb84051d7e83449b8da7a573b0e7c38d90383fa6f5be84b4b9853691e2923ed883108011d3874bbc552bffbae9ff798e8ec046d539731ac7e14f87b4969210123de6726c1784112cdc17db1bef7399b7104a"], 0x200)

13.537605059s ago: executing program 4 (id=570):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)="e3da71f50355da9ea203076dc622791761a70f404e70c015c38137ed41d31125e71c53e4e234f25a923a8c19be3cf22c52f421f70777f0fb8a444cd4c183ba4423fc46e62f3f73d354bce6bcd311837a3bd84820ff1ad5d7025e069cdb701cd3ad7ae4c843d24b74464ac3110c2453436427f5d8477127b31326049cbdd80fd7eefb52bd1a70700fe0d978cf0388fd2734c44e13912fb44d55611eb98d1f530cb033c9f088bff216f5fa87b196bde778ba0e", 0xb2}, {&(0x7f0000000640)="60222318b2b323a228d6dd5f2baf6a5ee74bd13ceafee876ac327f2f67ec98f913d2dce2879c99714a33b396686b2b70c30da7e78f7a3b2b31d6defe8b6c4b08cf8472b0c40056869538e85ed7fd5d035945bdd9da95d867dd69ef40c602d46daab3176b1dd1c12456485c9563a2a8eb7ae09e1e7036cc1b48cab2685abcb88c0f48", 0x82}, {&(0x7f0000000180)="63a9cc7bc4915c112fa912dd3d38e5377c4230549871c90046354a96774a67ca6cf3632d5c404200a0565db3934565", 0x2f}, {&(0x7f0000000840)="59901f6d9fe8c6e2956d7e39b4215f63830db597de0fa0666cb12737a30677f0864a597ef07bb0259712ddf1ef56c97b5f4347cdda6f6c1e48edd934beb7a51c6a7bdd8e7760e323150f0c4e3455a0b8f5860a2a752e7e7401811c609c67b5039e7dbd427893a78cf4d83ca63c355cd119ef2ee56dfe4d2ee4afa6cd88db40d5aad01e6d3298eb5775a750ea332c8abd56b82002dbb74fc32ffabedebe7208d3e5faf61a61e89f139ce9ae0eb4863f107504", 0xff90}, {&(0x7f0000000900)="62bed5ce8e17986dc53f671125dc9bf52b6b4a79864ba54d5f982982ab0cd7808ce5ae0ed4ea4b24ea584ca52dc5f23f8b63206247bd9f832fc057a922067c4b3bf6498b25341a4d6e373315dd44bee75140eec71ec957c79dc8fb856ab6078af3cda81788c81173413b1ea07639088cff06a7dd5dadb17cf0da3874418e7c7b3661e0650be532add6129c8de3bd82a5228f6c381ec4dc92c454818d874f8a085b2926f661835299f767acdd49c96e526a07c5e528353087a10372dcae55ab3ecb50c2fd65e71d7fb4045f5a171663a9bc12", 0xd2}], 0x5, &(0x7f0000000a80)}}], 0x1, 0x84)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="f39561fc17b7f981"})
openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="7569649163507d396ffb9e5dbd0570bace3db5ca739e08fdb12f9d530d832074934cfc256444c11dc29f2e025f6ceb5a5bb2d1ca8bd6c834ca15813d38053cf4b93d3195bdd3", @ANYRESHEX=0x0, @ANYBLOB=',\x00'])
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x3)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@dev={0xac, 0x14, 0x14, 0x3c}, @in=@empty, 0x4e20, 0x2, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0xaa}, {0x3, 0x400, 0xa398, 0x5, 0x0, 0xeab, 0x2, 0x2}, {0x8, 0x3, 0xf2, 0xfffffffffffffff7}, 0x5, 0x6e6bbb, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x4d4, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x3502, 0x1, 0x3, 0x70, 0x162800, 0x6, 0xa0ad}}, 0xe8)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}, @const={0x0, {0x0, 0x0, 0x0, 0x80}}})
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000003040)={0x2020}, 0x2020)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000200)={0x60, 0x2, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x7, &(0x7f00000002c0)=[{0x5, 0x1ff, 0x2}, {0x100, 0x8, 0x101}, {0x7, 0x9, 0x6}, {0x5, 0x7}, {0x7, 0x1, 0x7}, {0x40, 0x5, 0x4}, {0x6, 0x8, 0x2}], 0x7, 0x4, 0x2a, 0x0, 0x6c, 0x59})
ioctl(r4, 0x8b2c, &(0x7f0000000040))
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="400ac900000027"], 0x0, 0x0})

10.264724439s ago: executing program 4 (id=581):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4030ae7b, &(0x7f00000006c0)={0x1, 0x0, @ioapic={0x0, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x20, 0x9, 0x0, '\x00', 0x20}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {0x0, 0x3}]}})

9.697248312s ago: executing program 4 (id=583):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$SIOCGSTAMP(r1, 0x8906, 0x0)
setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
dup3(r6, r5, 0x0)
r7 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x60)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x80000001, @private2}}}, 0x90)
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r9, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r8, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r9}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r8, &(0x7f00000008c0)}, 0x20)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600), 0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r7, @ANYRES8=r0, @ANYBLOB="3b77a18d4a883cd02e985e610ddc51438da2fac5d978bdcd3a803c2b0f7500000000000000"], 0x40}, 0x0)
read$char_usb(r1, &(0x7f0000000080)=""/139, 0xfdef)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x80041b, &(0x7f00000000c0)=ANY=[], 0x21, 0x1ab, &(0x7f0000000600)="$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")

7.007945708s ago: executing program 5 (id=589):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb933"], 0xfdef) (fail_nth: 3)

6.830928509s ago: executing program 2 (id=591):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)="e3da71f50355da9ea203076dc622791761a70f404e70c015c38137ed41d31125e71c53e4e234f25a923a8c19be3cf22c52f421f70777f0fb8a444cd4c183ba4423fc46e62f3f73d354bce6bcd311837a3bd84820ff1ad5d7025e069cdb701cd3ad7ae4c843d24b74464ac3110c2453436427f5d8477127b31326049cbdd80fd7eefb52bd1a70700fe0d978cf0388fd2734c44e13912fb44d55611eb98d1f530cb033c9f088bff216f5fa87b196bde778ba0e", 0xb2}, {&(0x7f0000000640)="60222318b2b323a228d6dd5f2baf6a5ee74bd13ceafee876ac327f2f67ec98f913d2dce2879c99714a33b396686b2b70c30da7e78f7a3b2b31d6defe8b6c4b08cf8472b0c40056869538e85ed7fd5d035945bdd9da95d867dd69ef40c602d46daab3176b1dd1c12456485c9563a2a8eb7ae09e1e7036cc1b48cab2685abcb88c0f48", 0x82}, {&(0x7f0000000180)="63a9cc7bc4915c112fa912dd3d38e5377c4230549871c90046354a96774a67ca6cf3632d5c404200a0565db3934565", 0x2f}, {&(0x7f0000000840)="59901f6d9fe8c6e2956d7e39b4215f63830db597de0fa0666cb12737a30677f0864a597ef07bb0259712ddf1ef56c97b5f4347cdda6f6c1e48edd934beb7a51c6a7bdd8e7760e323150f0c4e3455a0b8f5860a2a752e7e7401811c609c67b5039e7dbd427893a78cf4d83ca63c355cd119ef2ee56dfe4d2ee4afa6cd88db40d5aad01e6d3298eb5775a750ea332c8abd56b82002dbb74fc32ffabedebe7208d3e5faf61a61e89f139ce9ae0eb4863f107504", 0xff90}, {&(0x7f0000000900)="62bed5ce8e17986dc53f671125dc9bf52b6b4a79864ba54d5f982982ab0cd7808ce5ae0ed4ea4b24ea584ca52dc5f23f8b63206247bd9f832fc057a922067c4b3bf6498b25341a4d6e373315dd44bee75140eec71ec957c79dc8fb856ab6078af3cda81788c81173413b1ea07639088cff06a7dd5dadb17cf0da3874418e7c7b3661e0650be532add6129c8de3bd82a5228f6c381ec4dc92c454818d874f8a085b2926f661835299f767acdd49c96e526a07c5e528353087a10372dcae55ab3ecb50c2fd65e71d7fb4045f5a171663a9bc12", 0xd2}], 0x5, &(0x7f0000000a80)}}], 0x1, 0x84)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="f39561fc17b7f981"})
openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="7569649163507d396ffb9e5dbd0570bace3db5ca739e08fdb12f9d530d832074934cfc256444c11dc29f2e025f6ceb5a5bb2d1ca8bd6c834ca15813d38053cf4b93d3195bdd3", @ANYRESHEX=0x0, @ANYBLOB=',\x00'])
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x3)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@dev={0xac, 0x14, 0x14, 0x3c}, @in=@empty, 0x4e20, 0x2, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0xaa}, {0x3, 0x400, 0xa398, 0x5, 0x0, 0xeab, 0x2, 0x2}, {0x8, 0x3, 0xf2, 0xfffffffffffffff7}, 0x5, 0x6e6bbb, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x4d4, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x3502, 0x1, 0x3, 0x70, 0x162800, 0x6, 0xa0ad}}, 0xe8)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}, @const={0x0, {0x0, 0x0, 0x0, 0x80}}})
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r4, &(0x7f0000003040)={0x2020}, 0x2020)
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000200)={0x60, 0x2, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x7, &(0x7f00000002c0)=[{0x5, 0x1ff, 0x2}, {0x100, 0x8, 0x101}, {0x7, 0x9, 0x6}, {0x5, 0x7}, {0x7, 0x1, 0x7}, {0x40, 0x5, 0x4}, {0x6, 0x8, 0x2}], 0x7, 0x4, 0x2a, 0x0, 0x6c, 0x59})
ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040))
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="400ac900000027"], 0x0, 0x0})

6.354182162s ago: executing program 4 (id=593):
r0 = gettid()
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x8080)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=<r2=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000300)={{0x4, 0x3, 0x0, 0x7ac, 'syz0\x00', 0xe01b}, 0x1, 0x1, 0x8, r2, 0x4, 0x4, 'syz0\x00', &(0x7f0000000140)=['\xcb!', '\x00', 'GPL\x00', '\xaa\xaa\xaa\xaa\xaa'], 0xc})
timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0))
sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x7)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r3, 0x0)
ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000000)={0x0, 0x0, 0x5})
getpid()
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_emit_ethernet(0x76, &(0x7f00000005c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ff0300", 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "bc30ef", 0x0, 0x33, 0x0, @private0, @loopback, [@hopopts={0x29}], "74787e11758fa556"}}}}}}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6a, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
socket(0x8, 0x0, 0x3a63)

5.942179915s ago: executing program 6 (id=594):
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x3070c3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f396a352617efe99005fa44a044cdd30ec11b861dd3bea91805bdfa6e8a142e72aac688ba8573aad80f6d002e77e998f141b0b35732059ebcf53becfe898ffd8c2117b6bddbdc515f677540fbf0362285ca7c6f4bfa4319e0a6c26e9c6a1a450ba5d58d87302e4a9c1c3c12947287cb98131e247c87392a2325c6767b8c80f59d5bb0edd51428b4f54aa95c4da37a03d5db14877bc8ceec9216d96c33ab93d56cf4a8eb7fb4004c8a69d8d7ec7ac4ec979c21cfee728cdd9b25f70413772ed8bc5360c4f65", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001900)={r0, &(0x7f0000001800), &(0x7f00000018c0)=@udp6=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f00000000c0), 0x0}, 0x20)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000008380)={0x0, 0x0, &(0x7f0000008340)={&(0x7f0000006a40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c0000000c000380040003800400040001801400020077673100"/50], 0x38}}, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000180)={0x0, @default, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @null, 0x0, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]})
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30, 0x1}], 0x1, 0x0)

5.752194566s ago: executing program 5 (id=595):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r0, &(0x7f0000000080)=""/1, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0) (fail_nth: 3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
read(r1, &(0x7f0000000080)=""/1, 0x2d)

5.656502536s ago: executing program 1 (id=597):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
chdir(&(0x7f0000000040)='./file0\x00')
truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0)

4.761637372s ago: executing program 6 (id=598):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_connect$cdc_ecm(0x0, 0x6f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109025d000101000000090400000002060000052406000005240000000d240f010000000004000000001524120000a317a88b045e4f01a607c0ffcb7e312a072414faffffff052407"], 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@mcast2, <r1=>0x0}, &(0x7f00000001c0)=0x14)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x18)
r3 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x4000)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/vlan/config\x00')
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000002380)=""/237, 0xed}], 0x1, 0x81, 0x4000000)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x2, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x801)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.645047112s ago: executing program 5 (id=599):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000716f00000000000033"], 0xfc}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchmodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0)
getdents(r2, &(0x7f0000001080)=""/4096, 0x1000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000104000000fb00000000000000188f282095af27c61fd32633e057d0e00a6df064048e009fce4379073aba699a9fb384f699112bf8be3e9e81a707818ca19acba607a20a8725de207f98f421899950e925981651c2a1bcdceb7d3701daa43365e2657f373cf4284047ddc6515d1ba7bb01a26accf2ea84d77d3881a55676468bc40380d9a91182abe78cebb83ebcbe30bcc28a5890501eaab0c3416a6271ebc2691e2ec2b6cd1e106e55ae1ab71ecd371ed8eeb039c0835f2c83d5445cb3a1abac88ba76d86416032ba1eec75e2e657d8a045a81cbd1784d9bd6b67310495e860189cda73bb41c6216207130f9b38e10fbf0b4dde5707e23239cb2b1a0da58979cead625d952269600ba1ac7a31bbfe9e2cf2e96202d4e77b97fa4ad3905a8ab0226d677c9ab833241811083ade9bf006ab89fc4c137b81bc0896b3dad8808dd671fcefd511eaae3d33c4e42b2dd1b995f285b4d238a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

4.389854584s ago: executing program 5 (id=600):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf09000026a1cb095ee725667f0000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_da_reserve_space\x00', r1}, 0x10) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0x2000000000000084, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_da_reserve_space\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000100), 0x1001) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x2000}]}}}]}, 0x44}}, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={r1, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000d00)=[0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000000d80)=[{}], 0x8, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000001040)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)=@ipv4_getnexthop={0x2c, 0x6a, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r7}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0xffffffff, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000240), 0x0}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf1, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r4, 0x20, &(0x7f0000000940)={&(0x7f0000000840)=""/162, 0xa2, <r10=>0x0, &(0x7f0000000900)=""/35, 0x23}}, 0x10) (async)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0x4e7, 0x10}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0xa6, 0x1f, &(0x7f0000000140)=""/31, 0x41100, 0x15, '\x00', r9, @flow_dissector, r4, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x5, 0xc0, 0x3f}, 0x10, r10, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[r8, r0, r4, r11, r0, r2, r4, 0xffffffffffffffff, r8], &(0x7f0000000ac0)=[{0x0, 0x4, 0xb, 0x3}, {0x5, 0x4, 0xc, 0x8}], 0x10, 0x34, @void, @value}, 0x90)

4.216368075s ago: executing program 5 (id=601):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0x40045506, &(0x7f0000000500))

3.826156487s ago: executing program 1 (id=602):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r0, &(0x7f0000000080)=""/1, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
read(r1, &(0x7f0000000080)=""/1, 0x2d)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001400), r2)
sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r3, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}}, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x336, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008054}, 0x8010)

3.197500941s ago: executing program 4 (id=603):
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
pipe2$watch_queue(0x0, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)

2.647022214s ago: executing program 4 (id=604):
setresuid(0x0, 0xee00, 0xee00)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$inet(0x2, 0xa, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000b40)={0x55, 0xa32d, 0x1, {0x402, 0x1}, {0x46, 0x4}, @ramp={0x4, 0xfff7, {0x3, 0x9, 0x6, 0x7}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
r6 = open(0x0, 0x141042, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r6, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r6, 0x5411, &(0x7f0000000180))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0)
mq_unlink(&(0x7f0000000340)='eth0\x00')
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)

2.067536578s ago: executing program 6 (id=605):
r0 = gettid()
timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r2 = syz_open_dev$radio(&(0x7f00000014c0), 0x1, 0x2)
ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000001500))
rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000600)={'#! ', './file0', [{0x20, 'H9\xeba\x9e\xdb'}], 0xa, "e6709d6a1d1cc30f94601c55423aa55bb60d0232212bb4b8f2e877c1098ec6cca3c5c20322bf9945c77c60f710be3af12fe1"}, 0x44)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
timer_create(0x9, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000500))
timer_settime(r1, 0x0, &(0x7f0000000700)={{}, {0x77359400}}, &(0x7f0000000380))

1.744472229s ago: executing program 1 (id=606):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0)

1.697195929s ago: executing program 1 (id=607):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

1.6591171s ago: executing program 2 (id=608):
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x3070c3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f396a352617efe99005fa44a044cdd30ec11b861dd3bea91805bdfa6e8a142e72aac688ba8573aad80f6d002e77e998f141b0b35732059ebcf53becfe898ffd8c2117b6bddbdc515f677540fbf0362285ca7c6f4bfa4319e0a6c26e9c6a1a450ba5d58d87302e4a9c1c3c12947287cb98131e247c87392a2325c6767b8c80f59d5bb0edd51428b4f54aa95c4da37a03d5db14877bc8ceec9216d96c33ab93d56cf4a8eb7fb4004c8a69d8d7ec7ac4ec979c21cfee728cdd9b25f70413772ed8bc5360c4f65", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001900)={r0, &(0x7f0000001800), &(0x7f00000018c0)=@udp6=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f00000000c0), 0x0}, 0x20)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000008380)={0x0, 0x0, &(0x7f0000008340)={&(0x7f0000006a40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c0000000c000380040003800400040001801400020077673100"/50], 0x38}}, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000180)={0x0, @default, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @null, 0x0, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]})
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30, 0x1}], 0x1, 0x0)

1.63558472s ago: executing program 6 (id=609):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004084}, 0x20)

1.556214s ago: executing program 1 (id=610):
r0 = socket$packet(0x11, 0x3, 0x300)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x101000, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x40002, 0x0, [0x1, 0x1, 0x401, 0x6, 0x0, 0x4, 0x8, 0xdd40]})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000004001"])
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003e0000000e0001006e65746465136aa332ac12835c003a710aef69e36a6b73696d300000"], 0x34}}, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1b2968150001"], 0xffdd)

1.389187792s ago: executing program 6 (id=611):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="17000000000000000400008170bf1a00e23b3eb39e91ff00d26a3ece18e242b6cc38e9188a3db945cbd4960fd53c0f9b38295573edba7641fb26035d38b5cce44164d85d21689b484c0b3bb4adb1a905811157238360371def3474d895554c086b882e8e0bc15a46a59da29419bfc8e4b2ca7ad2d71e5dbe57d6c02f3b33387422c8dcf21eff9820bb35c0c43100"/153, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\"\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv6_newroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8, 0x1e}, @RTA_GATEWAY={0x14, 0x5, @remote}]}, 0x38}}, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="67f8d6660f1ae8670fc75fc80f01c9f20f38f07500ba430066ed6426f3669066b9850800000f320f32", 0x29}], 0x1, 0x7c, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

640.161916ms ago: executing program 5 (id=612):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@nl, 0x80, &(0x7f0000001700)=[{&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000380)=""/53, 0x35}, {&(0x7f0000001480)=""/97, 0x61}, {&(0x7f0000001500)=""/246, 0xf6}, {&(0x7f0000001600)=""/94, 0x5e}, {&(0x7f0000001680)=""/89, 0x59}], 0x7, &(0x7f0000002a00)=""/4096, 0x1000}, 0x10001)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x381b43, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./bus\x00', 0x800000, &(0x7f00000005c0)=ANY=[], 0x1, 0x5d8e, &(0x7f000000dd80)="$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")
truncate(&(0x7f0000000040)='./file1\x00', 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)={0x34, 0x6, 0x0, {0x0, 0x5, 0xb, 0x0, ']#./!\x1e(+-))'}}, 0x34)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000160a010000000000000000000100000a0900010003000000000000000900020073797a3000000005000000800800010b3afed8e668e00e40000000002c0003801400010076657468305f746f5f627269646765000400000067656e6576653000000000000000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010065727370616e30000000000000000000140000001000010000000000000000000000000a"], 0xdc}}, 0x0)
socket(0x40000000015, 0x5, 0x0)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000200), &(0x7f00000003c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r4, 0xd7e, 0x0, 0x0, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb933"], 0xfdef)

528.707117ms ago: executing program 2 (id=613):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1b2968150001"], 0xffdd)

222.404989ms ago: executing program 2 (id=614):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)

138.198099ms ago: executing program 1 (id=615):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x24)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./file1\x00', 0x20c893, &(0x7f00000001c0)=ANY=[], 0x1, 0x68b, &(0x7f000001f640)="$eJzs3c1vHGcdB/DvbDZONi2p2yZtQJVqNRIgIhI7VgrmQkAI5VChqhw4W4nTWNmkxdlWboWIw+u1h/4B5ZAL4oTEPVLhwAVuvSFzq4TEpRfMadGMZ9fr9UvWhOw65fOJZp5n5nnmmd/zm519i6wN8H/ryrk0H6TIlXOvrZbb6/fn2+v352/16kmOJVlLmkkaSYp/dbvdj5PLSdEfphgqd/hweeGNTz5b/3Rzq1kvVf/GfscNqfutDe1e6+2bSXKkLh/BtvGuPvJ4RT/yy0nO1iVM3NEk3W1+/Oen+y0DWrsdfXwsMQKPV7H5upn69bhvOjlR3+jl+4DeK29j/BGO5tiI/YbfQQAAAMCTZpTPwM9sZCOrxckxhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfC2tbv/9f1EujV59J0fv9/6l6X+r64fLywbo/eFxxAAAAAAAAAMBY/L1av7yRjazmZH/38Wr9SrU+Va2fyju5k6Ws5HxWs5hOOlnJXJLpgeGmVhc7nZW5EY68uP3Ibrd7t9NZufiQcI/VZevRZw4AAAAAAAAAn0M/y5WB//8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBDoEiObBYp7g3snk6jmeR4kqlyx1ry1179SfZg0gEAAADAGDyzkY2s5mRvu1vkVJIXqu8Ajued3E4ny+mknaVcq74X2PzU31i/P99evz9/q1x2jvudfx4ojGrEbH73sPuZz1Q9Wrn+bu+Yq3kr7VxLozqydKaOp9djKK57ZUzFt2sjRnatLsuZf1CXO9w90GT3csAvU6arjBzN9SxXOZqtYyuz8Wzvyux+hQ54dYbPNJdGP9hTQ2camkSd84NN7URdlvP51V45n4jhTFwcePS9sH/Ok6/84Xc/mq3rh2dKozlSl91q3dqZifmBTLw4SiZutG/fvHH9zrknLRM7zFaZON3fvpLv54c5l5m8npUs590sppOlzOR7VW2xvvjFwC2/R6Yub9t6/WGRTNWP0M2LdbCYXqmOPZnl/CBv5VqW8mr172Lm8o1cyqUsDFzh0/tf4equb+zxTNv9wq7Bn/1qXWkl+XVd7mrPhselzOuzA3kdfM6drtoG92xl6bkRsnTA16Pml+pKeY6f1+XhMJyJuYFMPL9/Jn5TPa3cad++uXJj8e3RTvfcB3WlvI9+eaieUsvHy3Plxaq2tj86yrbn+z2356tsO9U/rrGj7XS/rbpTi+aed+pU/R5u50gXq7YXd22br9rODLS1+m3n+++3ADj0TnztxFTrH62/tD5q/aJ1o/Xa8e8e++axl6Zy9I9Hv9WcPfLlxkvF7/NRfrr1+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjv3Xnv/ZuL7fbSylCl2+3e3aUpl3fr/HgrzYeEuqOSmb89VR7Q29NNv6n3c2ZjnMUXn07GnLE9K0eH97SSjOXs/+52u/WeYo8+v/3ToUlUtzbp6zXJyuSek4DxuNC59faFO++9//XlW4tvLr25dHvh0qWF2YVLr85fuL7cXprdXE86SuBx2HrRn3QkAAAAAAAAAAAAwKjG8ecEk54jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GS7ci7NBykyN3t+ttxevz/fLpdefatnM0kjSfGTpPg4uZzNJdMDwxV7nefD5YU3Pvls/dOtsZq9/o39jhvNWr1kJsmRzfLe/2q8q3W5r2K/KRT9GZYJO9tLHEzafwIAAP//FqwEKg==")
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000980)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="d7", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0x5, @private1, 0x78000000}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="359dd9f8", 0x4}], 0x1}}], 0x2, 0x840)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x8, 0x100, 0xaeba, 0x3, 0x8, 0xaf8a, 0x72850feb, {0x0, @in={{0x2, 0x4e24, @remote}}, 0x800, 0x200, 0x3, 0x54, 0x152d}}, &(0x7f0000000000)=0xb0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000280)="eda5b4301e8727fa8ea821e41e965fdb3fe5dc2e66c7dc7381169bead2293c8e3995713916b0322d5f933fade43e38d638a3935e8e5229", 0x37, r0}, 0x68)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000010bd408205000000000000000109022400011b0000000904"], 0x0)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
recvfrom$rxrpc(r1, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000200))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000001a0001000000000000f61e000a000000000000000000000006001d000000000008001e80"], 0x2c}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r4)

129.262639ms ago: executing program 6 (id=616):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_connect$cdc_ecm(0x0, 0x6f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109025d000101000000090400000002060000052406000005240000000d240f010000000004000000001524120000a317a88b045e4f01a607c0ffcb7e312a072414faffffff052407"], 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@mcast2, <r1=>0x0}, &(0x7f00000001c0)=0x14)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x18)
r3 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x4000)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/vlan/config\x00')
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000002380)=""/237, 0xed}], 0x1, 0x81, 0x4000000)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x2, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x801)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

97.901739ms ago: executing program 2 (id=617):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0)

0s ago: executing program 2 (id=618):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)="e3da71f50355da9ea203076dc622791761a70f404e70c015c38137ed41d31125e71c53e4e234f25a923a8c19be3cf22c52f421f70777f0fb8a444cd4c183ba4423fc46e62f3f73d354bce6bcd311837a3bd84820ff1ad5d7025e069cdb701cd3ad7ae4c843d24b74464ac3110c2453436427f5d8477127b31326049cbdd80fd7eefb52bd1a70700fe0d978cf0388fd2734c44e13912fb44d55611eb98d1f530cb033c9f088bff216f5fa87b196bde778ba0e", 0xb2}, {&(0x7f0000000640)="60222318b2b323a228d6dd5f2baf6a5ee74bd13ceafee876ac327f2f67ec98f913d2dce2879c99714a33b396686b2b70c30da7e78f7a3b2b31d6defe8b6c4b08cf8472b0c40056869538e85ed7fd5d035945bdd9da95d867dd69ef40c602d46daab3176b1dd1c12456485c9563a2a8eb7ae09e1e7036cc1b48cab2685abcb88c0f48", 0x82}, {&(0x7f0000000180)="63a9cc7bc4915c112fa912dd3d38e5377c4230549871c90046354a96774a67ca6cf3632d5c404200a0565db3934565", 0x2f}, {&(0x7f0000000840)="59901f6d9fe8c6e2956d7e39b4215f63830db597de0fa0666cb12737a30677f0864a597ef07bb0259712ddf1ef56c97b5f4347cdda6f6c1e48edd934beb7a51c6a7bdd8e7760e323150f0c4e3455a0b8f5860a2a752e7e7401811c609c67b5039e7dbd427893a78cf4d83ca63c355cd119ef2ee56dfe4d2ee4afa6cd88db40d5aad01e6d3298eb5775a750ea332c8abd56b82002dbb74fc32ffabedebe7208d3e5faf61a61e89f139ce9ae0eb4863f107504", 0xff90}, {&(0x7f0000000900)="62bed5ce8e17986dc53f671125dc9bf52b6b4a79864ba54d5f982982ab0cd7808ce5ae0ed4ea4b24ea584ca52dc5f23f8b63206247bd9f832fc057a922067c4b3bf6498b25341a4d6e373315dd44bee75140eec71ec957c79dc8fb856ab6078af3cda81788c81173413b1ea07639088cff06a7dd5dadb17cf0da3874418e7c7b3661e0650be532add6129c8de3bd82a5228f6c381ec4dc92c454818d874f8a085b2926f661835299f767acdd49c96e526a07c5e528353087a10372dcae55ab3ecb50c2fd65e71d7fb4045f5a171663a9bc12", 0xd2}], 0x5, &(0x7f0000000a80)}}], 0x1, 0x84)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="f39561fc17b7f981"})
openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="7569649163507d396ffb9e5dbd0570bace3db5ca739e08fdb12f9d530d832074934cfc256444c11dc29f2e025f6ceb5a5bb2d1ca8bd6c834ca15813d38053cf4b93d3195bdd3", @ANYRESHEX=0x0, @ANYBLOB=',\x00'])
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x3)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@dev={0xac, 0x14, 0x14, 0x3c}, @in=@empty, 0x4e20, 0x2, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0xaa}, {0x3, 0x400, 0xa398, 0x5, 0x0, 0xeab, 0x2, 0x2}, {0x8, 0x3, 0xf2, 0xfffffffffffffff7}, 0x5, 0x6e6bbb, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x4d4, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x3502, 0x1, 0x3, 0x70, 0x162800, 0x6, 0xa0ad}}, 0xe8)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}, @const={0x0, {0x0, 0x0, 0x0, 0x80}}})
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r4, &(0x7f0000003040)={0x2020}, 0x2020)
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000200)={0x60, 0x2, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x7, &(0x7f00000002c0)=[{0x5, 0x1ff, 0x2}, {0x100, 0x8, 0x101}, {0x7, 0x9, 0x6}, {0x5, 0x7}, {0x7, 0x1, 0x7}, {0x40, 0x5, 0x4}, {0x6, 0x8, 0x2}], 0x7, 0x4, 0x2a, 0x0, 0x6c, 0x59})
ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040))
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="400ac900000027"], 0x0, 0x0})

kernel console output (not intermixed with test programs):

2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  154.113587][ T6335] loop4: detected capacity change from 0 to 512
[  154.140614][ T6249] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504).  Shutting down filesystem.
[  154.191165][ T6335] EXT4-fs (loop4): old and new quota format mixing
[  154.213956][ T6249] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  154.385035][ T6249] syz.2.382 (6249) used greatest stack depth: 19360 bytes left
[  154.904029][ T6345] tmpfs: Unknown parameter 'uid‘cP}9oûž]½pºÎ'
[  155.214601][ T4307] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  155.321549][ T4180] XFS (loop2): Unmounting Filesystem
[  155.542498][ T6348] loop5: detected capacity change from 0 to 4096
[  155.681432][ T6348] ntfs: volume version 3.1.
[  155.696485][ T6350] loop4: detected capacity change from 0 to 4096
[  155.930811][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.399'.
[  156.131061][ T6368] loop5: detected capacity change from 0 to 1764
[  156.202319][ T6373] loop2: detected capacity change from 0 to 8
[  156.374539][ T6373] squashfs image failed sanity check
[  156.409015][ T3836] gs_usb 2-1:0.0 can0: bit-timing not yet defined
[  156.660108][ T6386] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0
[  156.719652][ T4619] usb 2-1: USB disconnect, device number 12
[  156.753496][ T6354] loop0: detected capacity change from 0 to 40427
[  156.869765][ T6354] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  156.898627][ T6354] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  156.940569][ T6395] FAULT_INJECTION: forcing a failure.
[  156.940569][ T6395] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  156.961171][ T6354] F2FS-fs (loop0): invalid crc value
[  156.983708][ T6395] CPU: 1 PID: 6395 Comm: syz.1.407 Not tainted 5.15.173-syzkaller #0
[  156.991813][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  157.001897][ T6395] Call Trace:
[  157.005211][ T6395]  <TASK>
[  157.008163][ T6395]  dump_stack_lvl+0x1e3/0x2d0
[  157.012958][ T6395]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  157.018614][ T6395]  ? panic+0x860/0x860
[  157.022711][ T6395]  ? perf_event_mmap+0x3e4/0x1c70
[  157.027770][ T6395]  should_fail+0x38a/0x4c0
[  157.032218][ T6395]  prepare_alloc_pages+0x1db/0x5b0
[  157.037358][ T6395]  __alloc_pages+0x14f/0x700
[  157.041977][ T6395]  ? __rmqueue_pcplist+0x23a0/0x23a0
[  157.047297][ T6395]  ? alloc_pages+0x458/0x570
[  157.051910][ T6395]  pte_alloc_one+0x86/0x360
[  157.056442][ T6395]  ? rcu_lock_release+0x20/0x20
[  157.061340][ T6395]  __pte_alloc+0x75/0x210
[  157.065693][ T6395]  ? remove_device_exclusive_entry+0xbf0/0xbf0
[  157.071872][ T6395]  ? free_pgtables+0x2a0/0x2a0
[  157.076665][ T6395]  handle_mm_fault+0x4d9a/0x5960
[  157.081657][ T6395]  ? numa_migrate_prep+0x1a0/0x1a0
[  157.086817][ T6395]  ? vmacache_find+0x4f9/0x590
[  157.091599][ T6395]  ? vmacache_update+0x9f/0xf0
[  157.096383][ T6395]  exc_page_fault+0x271/0x700
[  157.101090][ T6395]  asm_exc_page_fault+0x22/0x30
[  157.105972][ T6395] RIP: 0033:0x7f93d3fc0833
[  157.110402][ T6395] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  157.130043][ T6395] RSP: 002b:00007f93d25744a0 EFLAGS: 00010206
[  157.136132][ T6395] RAX: 0000000000000000 RBX: 00007f93d2574540 RCX: 00007f93ca155000
[  157.144127][ T6395] RDX: 00007f93d25746e0 RSI: 0000000000000005 RDI: 00007f93d25745e0
[  157.152116][ T6395] RBP: 000000000000013c R08: 000000000000000a R09: 00000000000003b3
[  157.160110][ T6395] R10: 00000000000003c2 R11: 00007f93d2574540 R12: 00007f93d2574540
[  157.168102][ T6395] R13: 00007f93d4184fc0 R14: 00000000000000eb R15: 00007f93d25745e0
[  157.172469][ T6370] loop4: detected capacity change from 0 to 32768
[  157.176131][ T6395]  </TASK>
[  157.192816][ T6354] F2FS-fs (loop0): Found nat_bits in checkpoint
[  157.222352][ T6395] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  157.254208][ T6370] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.400 (6370)
[  157.287396][ T6370] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  157.307306][ T6370] BTRFS info (device loop4): using free space tree
[  157.313857][ T6370] BTRFS info (device loop4): has skinny extents
[  157.325504][ T6354] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  157.332652][ T6354] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  157.429937][ T6395] loop1: detected capacity change from 0 to 4096
[  157.444728][ T6354] attempt to access beyond end of device
[  157.444728][ T6354] loop0: rw=2051, want=45064, limit=40427
[  157.490335][ T6354] attempt to access beyond end of device
[  157.490335][ T6354] loop0: rw=2051, want=131072, limit=40427
[  157.537930][ T6354] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5
[  157.537986][ T6354] F2FS-fs (loop0): Issue discard(5637, 5637, 10747) failed, ret: -5
[  157.561834][ T6395] ntfs: volume version 3.1.
[  157.571307][ T6422] loop5: detected capacity change from 0 to 4096
[  157.695805][ T6370] BTRFS info (device loop4): enabling ssd optimizations
[  157.754713][ T6438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.410'.
[  157.774585][ T4619] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[  157.858389][ T6440] FAULT_INJECTION: forcing a failure.
[  157.858389][ T6440] name failslab, interval 1, probability 0, space 0, times 0
[  157.909029][ T6440] CPU: 1 PID: 6440 Comm: syz.1.411 Not tainted 5.15.173-syzkaller #0
[  157.917221][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  157.927386][ T6440] Call Trace:
[  157.930692][ T6440]  <TASK>
[  157.933638][ T6440]  dump_stack_lvl+0x1e3/0x2d0
[  157.938342][ T6440]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  157.943999][ T6440]  ? panic+0x860/0x860
[  157.948097][ T6440]  ? __might_sleep+0xc0/0xc0
[  157.952713][ T6440]  should_fail+0x38a/0x4c0
[  157.957156][ T6440]  should_failslab+0x5/0x20
[  157.961679][ T6440]  slab_pre_alloc_hook+0x53/0xc0
[  157.966760][ T6440]  __kmalloc_node_track_caller+0x6b/0x390
[  157.966970][ T6442] loop2: detected capacity change from 0 to 128
[  157.972500][ T6440]  ? netlink_ack+0x33c/0xb10
[  157.972529][ T6440]  ? kmem_cache_alloc_node+0x154/0x2c0
[  157.972550][ T6440]  ? __alloc_skb+0xdd/0x590
[  157.993352][ T6440]  ? netlink_ack+0x33c/0xb10
[  157.997984][ T6440]  __alloc_skb+0x12c/0x590
[  158.002425][ T6440]  netlink_ack+0x33c/0xb10
[  158.006876][ T6440]  ? netlink_dump+0xca0/0xca0
[  158.011589][ T6440]  netlink_rcv_skb+0x24c/0x410
[  158.016420][ T6440]  ? nfnetlink_bind+0x280/0x280
[  158.021291][ T6440]  ? netlink_ack+0xb10/0xb10
[  158.025913][ T6440]  ? bpf_lsm_capable+0x5/0x10
[  158.030613][ T6440]  ? security_capable+0x86/0xb0
[  158.035491][ T6440]  nfnetlink_rcv+0x28c/0x25f0
[  158.040188][ T6440]  ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0
[  158.046188][ T6440]  ? __local_bh_enable_ip+0x164/0x1f0
[  158.051664][ T6440]  ? lockdep_hardirqs_on+0x94/0x130
[  158.056890][ T6440]  ? __local_bh_enable_ip+0x164/0x1f0
[  158.062285][ T6440]  ? local_bh_enable+0x5/0x20
[  158.066977][ T6440]  ? _local_bh_enable+0xa0/0xa0
[  158.071861][ T6440]  ? __dev_queue_xmit+0x1bf8/0x32b0
[  158.077085][ T6440]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  158.082663][ T6440]  ? __copy_skb_header+0x47b/0x600
[  158.087793][ T6440]  ? dev_queue_xmit+0x20/0x20
[  158.092486][ T6440]  ? memcpy+0x3c/0x60
[  158.096489][ T6440]  ? __copy_skb_header+0x47b/0x600
[  158.101638][ T6440]  ? rcu_lock_release+0x5/0x20
[  158.106418][ T6440]  ? __lock_acquire+0x1ff0/0x1ff0
[  158.111475][ T6440]  netlink_unicast+0x7b6/0x980
[  158.116269][ T6440]  ? netlink_detachskb+0x90/0x90
[  158.121226][ T6440]  ? __virt_addr_valid+0x3bb/0x460
[  158.126381][ T6440]  ? 0xffffffff81000000
[  158.130548][ T6440]  ? __check_object_size+0x300/0x410
[  158.135851][ T6440]  ? bpf_lsm_netlink_send+0x5/0x10
[  158.140979][ T6440]  netlink_sendmsg+0xa30/0xd60
[  158.144731][ T4619] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  158.145762][ T6440]  ? netlink_getsockopt+0x5b0/0x5b0
[  158.158555][ T4619] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  158.159165][ T6440]  ? aa_sock_msg_perm+0x91/0x150
[  158.172143][ T6440]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  158.177441][ T6440]  ? security_socket_sendmsg+0x7d/0xa0
[  158.180256][ T4619] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  158.182909][ T6440]  ? netlink_getsockopt+0x5b0/0x5b0
[  158.182937][ T6440]  ____sys_sendmsg+0x59e/0x8f0
[  158.201729][ T6440]  ? iovec_from_user+0x300/0x390
[  158.206702][ T6440]  ? __sys_sendmsg_sock+0x30/0x30
[  158.206784][ T4619] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  158.211753][ T6440]  ___sys_sendmsg+0x252/0x2e0
[  158.227187][ T6440]  ? __sys_sendmsg+0x260/0x260
[  158.232012][ T6440]  ? __fdget+0x191/0x220
[  158.236318][ T6440]  __se_sys_sendmsg+0x19a/0x260
[  158.240403][ T4619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  158.241194][ T6440]  ? __x64_sys_sendmsg+0x80/0x80
[  158.256003][ T6440]  ? syscall_enter_from_user_mode+0x2e/0x240
[  158.261999][ T6440]  ? lockdep_hardirqs_on+0x94/0x130
[  158.263897][ T4619] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  158.267207][ T6440]  ? syscall_enter_from_user_mode+0x2e/0x240
[  158.267240][ T6440]  do_syscall_64+0x3b/0xb0
[  158.267262][ T6440]  ? clear_bhb_loop+0x15/0x70
[  158.267283][ T6440]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  158.267308][ T6440] RIP: 0033:0x7f93d40fd759
[  158.305648][ T6440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.325269][ T6440] RSP: 002b:00007f93d2575038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  158.333706][ T6440] RAX: ffffffffffffffda RBX: 00007f93d42b4f80 RCX: 00007f93d40fd759
[  158.341696][ T6440] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  158.349678][ T6440] RBP: 00007f93d2575090 R08: 0000000000000000 R09: 0000000000000000
[  158.357661][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.365642][ T6440] R13: 0000000000000000 R14: 00007f93d42b4f80 R15: 00007fff9b8c3278
[  158.373639][ T6440]  </TASK>
[  158.554267][ T6442] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000081,nouid32,,errors=continue. Quota mode: none.
[  158.613069][ T4619] usb 1-1: string descriptor 0 read error: -71
[  158.621863][ T4619] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  158.640526][ T6442] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.644823][ T4619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.697362][ T4619] usb 1-1: config 0 descriptor??
[  158.716746][ T6444] loop5: detected capacity change from 0 to 32768
[  158.724743][ T4619] usb 1-1: can't set config #0, error -71
[  158.741347][ T4619] usb 1-1: USB disconnect, device number 17
[  158.814773][ T6444] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.414 (6444)
[  158.848080][ T4165] attempt to access beyond end of device
[  158.848080][ T4165] loop0: rw=2049, want=45104, limit=40427
[  158.887210][ T6444] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  158.920464][ T6444] BTRFS info (device loop5): using free space tree
[  158.952501][ T6444] BTRFS info (device loop5): has skinny extents
[  158.958940][ T4212] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  158.974557][ T6447] loop1: detected capacity change from 0 to 32768
[  159.038657][ T6447] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.415 (6447)
[  159.080209][ T4244] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4244)
[  159.199455][ T6444] BTRFS info (device loop5): enabling ssd optimizations
[  159.234459][ T4212] usb 3-1: Using ep0 maxpacket: 16
[  159.384028][ T6471] FAULT_INJECTION: forcing a failure.
[  159.384028][ T6471] name failslab, interval 1, probability 0, space 0, times 0
[  159.404678][ T4212] usb 3-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config
[  159.424611][ T4212] usb 3-1: config 134 has 0 interfaces, different from the descriptor's value: 1
[  159.444494][ T6471] CPU: 1 PID: 6471 Comm: syz.5.414 Not tainted 5.15.173-syzkaller #0
[  159.452604][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  159.462677][ T6471] Call Trace:
[  159.465967][ T6471]  <TASK>
[  159.468907][ T6471]  dump_stack_lvl+0x1e3/0x2d0
[  159.473605][ T6471]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  159.479258][ T6471]  ? panic+0x860/0x860
[  159.483349][ T6471]  ? __might_sleep+0xc0/0xc0
[  159.487967][ T6471]  should_fail+0x38a/0x4c0
[  159.492410][ T6471]  should_failslab+0x5/0x20
[  159.496931][ T6471]  slab_pre_alloc_hook+0x53/0xc0
[  159.501890][ T6471]  __kmalloc+0x6e/0x300
[  159.506060][ T6471]  ? tomoyo_realpath_from_path+0xd8/0x5e0
[  159.511805][ T6471]  tomoyo_realpath_from_path+0xd8/0x5e0
[  159.517379][ T6471]  tomoyo_path_number_perm+0x225/0x810
[  159.522870][ T6471]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  159.528396][ T6471]  ? __fget_files+0x413/0x480
[  159.533118][ T6471]  security_file_ioctl+0x6d/0xa0
[  159.538081][ T6471]  __se_sys_ioctl+0x47/0x160
[  159.542699][ T6471]  do_syscall_64+0x3b/0xb0
[  159.547128][ T6471]  ? clear_bhb_loop+0x15/0x70
[  159.551822][ T6471]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  159.557736][ T6471] RIP: 0033:0x7f42190e6759
[  159.562167][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.581790][ T6471] RSP: 002b:00007f421753d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  159.590234][ T6471] RAX: ffffffffffffffda RBX: 00007f421929e058 RCX: 00007f42190e6759
[  159.598281][ T6471] RDX: 0000000020000300 RSI: 00000000c0109428 RDI: 0000000000000005
[  159.603782][  T154] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[  159.606261][ T6471] RBP: 00007f421753d090 R08: 0000000000000000 R09: 0000000000000000
[  159.606279][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.606292][ T6471] R13: 0000000000000000 R14: 00007f421929e058 R15: 00007fffee90bed8
[  159.606323][ T6471]  </TASK>
[  159.714478][   T13] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  159.722935][ T6471] ERROR: Out of memory at tomoyo_realpath_from_path.
[  159.754742][ T4212] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 6.0d
[  159.763887][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.793751][ T4212] usb 3-1: Product: syz
[  159.798441][ T4212] usb 3-1: Manufacturer: syz
[  159.803058][ T4212] usb 3-1: SerialNumber: syz
[  159.843152][ T6477] loop0: detected capacity change from 0 to 1024
[  159.981823][ T6477] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,nombcache,noblock_validity,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  160.027043][ T6474] loop4: detected capacity change from 0 to 32768
[  160.110622][ T6474] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.418 (6474)
[  160.129784][   T13] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  160.140790][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.163591][   T13] usb 2-1: config 0 descriptor??
[  160.203284][ T6474] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  160.245243][ T6474] BTRFS info (device loop4): using free space tree
[  160.260162][ T6474] BTRFS info (device loop4): has skinny extents
[  160.267042][ T4212] usb 3-1: USB disconnect, device number 17
[  160.591178][ T6474] BTRFS info (device loop4): enabling ssd optimizations
[  160.625590][ T6506] loop5: detected capacity change from 0 to 4096
[  160.822277][ T6506] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512)
[  161.134035][ T6511] tmpfs: Unknown parameter 'uid‘cP}9oûž]½pºÎ'
[  161.439956][ T6517] FAULT_INJECTION: forcing a failure.
[  161.439956][ T6517] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.505870][ T6517] CPU: 0 PID: 6517 Comm: syz.0.424 Not tainted 5.15.173-syzkaller #0
[  161.514075][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  161.524128][ T6517] Call Trace:
[  161.527422][ T6517]  <TASK>
[  161.530345][ T6517]  dump_stack_lvl+0x1e3/0x2d0
[  161.535017][ T6517]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  161.540650][ T6517]  ? panic+0x860/0x860
[  161.544721][ T6517]  ? validate_chain+0x112/0x5930
[  161.549653][ T6517]  ? validate_chain+0x112/0x5930
[  161.554583][ T6517]  should_fail+0x38a/0x4c0
[  161.558996][ T6517]  _copy_from_user+0x2d/0x170
[  161.563720][ T6517]  iovec_from_user+0x13b/0x390
[  161.568506][ T6517]  __import_iovec+0x72/0x4b0
[  161.573121][ T6517]  ? __ia32_sys_shutdown+0x60/0x60
[  161.578267][ T6517]  import_iovec+0xe6/0x120
[  161.582719][ T6517]  ___sys_sendmsg+0x215/0x2e0
[  161.587455][ T6517]  ? __sys_sendmsg+0x260/0x260
[  161.592283][ T6517]  ? __fdget+0x191/0x220
[  161.596568][ T6517]  __se_sys_sendmsg+0x19a/0x260
[  161.601444][ T6517]  ? __x64_sys_sendmsg+0x80/0x80
[  161.606425][ T6517]  ? syscall_enter_from_user_mode+0x2e/0x240
[  161.612422][ T6517]  ? lockdep_hardirqs_on+0x94/0x130
[  161.617644][ T6517]  ? syscall_enter_from_user_mode+0x2e/0x240
[  161.623649][ T6517]  do_syscall_64+0x3b/0xb0
[  161.628080][ T6517]  ? clear_bhb_loop+0x15/0x70
[  161.632771][ T6517]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  161.638684][ T6517] RIP: 0033:0x7fa183800759
[  161.643114][ T6517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.662730][ T6517] RSP: 002b:00007fa181c78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.671160][ T6517] RAX: ffffffffffffffda RBX: 00007fa1839b7f80 RCX: 00007fa183800759
[  161.679129][ T6517] RDX: 0000000000000000 RSI: 0000000020001780 RDI: 0000000000000003
[  161.687097][ T6517] RBP: 00007fa181c78090 R08: 0000000000000000 R09: 0000000000000000
[  161.695067][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.703034][ T6517] R13: 0000000000000000 R14: 00007fa1839b7f80 R15: 00007ffc2a412718
[  161.711022][ T6517]  </TASK>
[  161.725201][   T13] gs_usb 2-1:0.0: Couldn't get device config: (err=-110)
[  161.741552][   T13] gs_usb: probe of 2-1:0.0 failed with error -110
[  161.820470][   T13] usb 2-1: USB disconnect, device number 13
[  161.858273][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'.
[  161.922417][ T5074] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  162.148032][ T6530] loop5: detected capacity change from 0 to 4096
[  162.173968][ T6531] loop0: detected capacity change from 0 to 8192
[  162.196915][ T6538] udc-core: couldn't find an available UDC or it's busy
[  162.211362][ T6530] ntfs3: loop5: ino=0, Correct links count -> 1.
[  162.222541][ T6538] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  162.268501][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'.
[  162.303300][ T6531] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  162.313335][ T6531] REISERFS (device loop0): using ordered data mode
[  162.319959][ T6531] reiserfs: using flush barriers
[  162.326700][ T6538] udc-core: couldn't find an available UDC or it's busy
[  162.334089][ T6531] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  162.350723][ T6531] REISERFS (device loop0): checking transaction log (loop0)
[  162.360760][ T6540] udc-core: couldn't find an available UDC or it's busy
[  162.367915][ T6540] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  162.373968][ T6538] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  162.464703][ T1110] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  162.478367][ T6544] FAULT_INJECTION: forcing a failure.
[  162.478367][ T6544] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  162.563401][ T6531] REISERFS (device loop0): Using tea hash to sort names
[  162.572072][ T6531] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  162.583096][ T6544] CPU: 0 PID: 6544 Comm: syz.2.433 Not tainted 5.15.173-syzkaller #0
[  162.587502][ T6545] overlayfs: unrecognized mount option "fsuuid=933¼6170-f" or missing value
[  162.591199][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  162.591223][ T6544] Call Trace:
[  162.591231][ T6544]  <TASK>
[  162.591241][ T6544]  dump_stack_lvl+0x1e3/0x2d0
[  162.620922][ T6544]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  162.626578][ T6544]  ? panic+0x860/0x860
[  162.630685][ T6544]  ? __fget_files+0x413/0x480
[  162.635389][ T6544]  should_fail+0x38a/0x4c0
[  162.639831][ T6544]  _copy_from_user+0x2d/0x170
[  162.644539][ T6544]  __sys_bind+0x268/0x400
[  162.648894][ T6544]  ? __ia32_sys_socketpair+0xb0/0xb0
[  162.654233][ T6544]  ? syscall_enter_from_user_mode+0x2e/0x240
[  162.660234][ T6544]  ? lockdep_hardirqs_on+0x94/0x130
[  162.665464][ T6544]  __x64_sys_bind+0x76/0x80
[  162.670004][ T6544]  do_syscall_64+0x3b/0xb0
[  162.674431][ T6544]  ? clear_bhb_loop+0x15/0x70
[  162.679126][ T6544]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  162.685058][ T6544] RIP: 0033:0x7fe1344c7759
[  162.689502][ T6544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.709129][ T6544] RSP: 002b:00007fe13293f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  162.717569][ T6544] RAX: ffffffffffffffda RBX: 00007fe13467ef80 RCX: 00007fe1344c7759
[  162.725559][ T6544] RDX: 0000000000000010 RSI: 0000000020000440 RDI: 0000000000000003
[  162.733544][ T6544] RBP: 00007fe13293f090 R08: 0000000000000000 R09: 0000000000000000
[  162.741529][ T6544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  162.749507][ T6544] R13: 0000000000000000 R14: 00007fe13467ef80 R15: 00007ffc60ee7078
[  162.757509][ T6544]  </TASK>
[  162.766472][ T6530] ntfs3: loop5: MFT: r=0, expect seq=1 instead of 0!
[  162.774437][ T6530] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  162.794890][ T6530] ntfs3: loop5: Failed to load $MFT.
[  162.857077][ T6548] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 1)
[  163.420710][ T6557] loop4: detected capacity change from 0 to 1764
[  164.283082][ T6568] loop1: detected capacity change from 0 to 256
[  164.293683][ T6562] loop2: detected capacity change from 0 to 8192
[  164.360266][ T6562] Dev loop2: RDB in block 1 has bad checksum
[  164.364803][ T6568] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  164.386506][ T6568] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  164.402184][ T6568] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  164.412040][ T4407] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  164.422306][ T3544] Dev loop2: RDB in block 1 has bad checksum
[  164.428097][ T6568] UDF-fs: Scanning with blocksize 512 failed
[  164.434473][ T4406] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  164.451501][ T6568] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  164.464757][ T6562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.438'.
[  164.466739][ T6568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.636238][ T6575] loop5: detected capacity change from 0 to 2048
[  164.655187][ T4407] usb 5-1: device descriptor read/64, error -71
[  164.756449][ T6575] UDF-fs: bad mount option "adiOicb" or missing value
[  164.831268][ T4406] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  164.859678][ T4406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.884628][ T4406] usb 1-1: config 0 descriptor??
[  164.944746][ T4407] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  165.109883][ T6579] loop1: detected capacity change from 0 to 32768
[  165.113311][ T6562] loop2: detected capacity change from 0 to 32768
[  165.144543][ T4407] usb 5-1: device descriptor read/64, error -71
[  165.157234][ T6562] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.438 (6562)
[  165.186506][ T6579] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.444 (6579)
[  165.201964][ T6562] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  165.213536][ T6562] BTRFS info (device loop2): using free space tree
[  165.220500][ T1110] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  165.221667][ T6562] BTRFS info (device loop2): has skinny extents
[  165.233133][ T6579] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  165.262196][ T6579] BTRFS error (device loop1): unrecognized mount option 'fragment=all'
[  165.272758][ T4407] usb usb5-port1: attempt power cycle
[  165.293955][ T6579] BTRFS error (device loop1): open_ctree failed
[  165.439618][ T6598] tmpfs: Unknown parameter 'uid‘cP}9oûž]½pºÎ'
[  165.482494][ T6579] binder: 6578:6579 ioctl 40046205 0 returned -22
[  165.490168][ T6562] BTRFS info (device loop2): enabling ssd optimizations
[  165.490231][ T6579] binder: 6578:6579 ioctl c0306201 20001100 returned -11
[  165.587424][ T6579] loop1: detected capacity change from 0 to 1024
[  165.634608][ T1110] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[  165.653119][ T1110] usb 6-1: config 0 has no interface number 0
[  165.694637][ T4407] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  165.724871][ T4406] gs_usb 1-1:0.0: Couldn't get device config: (err=-71)
[  165.731879][ T4406] gs_usb: probe of 1-1:0.0 failed with error -71
[  165.798108][ T4406] usb 1-1: USB disconnect, device number 18
[  165.860428][ T6579] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none.
[  165.898943][ T4407] usb 5-1: device descriptor read/8, error -71
[  165.915779][ T1110] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  165.930270][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.938938][ T6611] loop0: detected capacity change from 0 to 128
[  165.953031][ T1110] usb 6-1: Product: syz
[  165.963925][ T1110] usb 6-1: Manufacturer: syz
[  165.998661][ T1110] usb 6-1: SerialNumber: syz
[  166.004814][ T6611] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  166.017819][ T6611] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  166.059246][ T1110] usb 6-1: config 0 descriptor??
[  166.071241][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'.
[  166.127718][ T1110] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected
[  166.144932][ T4165] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  166.149812][ T1110] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81
[  166.185123][ T4165] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  166.212099][ T1110] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1
[  166.223914][ T4165] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  166.253156][ T1110] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2
[  166.261171][ T4407] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  166.289839][ T1110] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  166.324882][ T4165] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  166.391409][ T4165] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  166.436262][ T4165] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  166.464286][ T4165] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  166.475899][ T6581] loop5: detected capacity change from 0 to 4096
[  166.492161][ T4165] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  166.513444][ T4165] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  166.526972][ T4407] usb 5-1: device not accepting address 20, error -71
[  166.549890][ T4407] usb usb5-port1: unable to enumerate USB device
[  166.565507][ T4165] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  166.661992][   T21] usb 6-1: USB disconnect, device number 3
[  166.695379][   T21] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  166.726973][   T21] keyspan 6-1:0.133: device disconnected
[  166.939342][ T4407] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  166.941855][ T6632] FAULT_INJECTION: forcing a failure.
[  166.941855][ T6632] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.963297][ T6632] CPU: 1 PID: 6632 Comm: syz.1.456 Not tainted 5.15.173-syzkaller #0
[  166.971464][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  166.981531][ T6632] Call Trace:
[  166.984820][ T6632]  <TASK>
[  166.987771][ T6632]  dump_stack_lvl+0x1e3/0x2d0
[  166.992471][ T6632]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  166.998145][ T6632]  ? panic+0x860/0x860
[  167.002247][ T6632]  should_fail+0x38a/0x4c0
[  167.006690][ T6632]  strncpy_from_user+0x32/0x370
[  167.011566][ T6632]  __se_sys_request_key+0x9f/0x3b0
[  167.016694][ T6632]  ? print_irqtrace_events+0x210/0x210
[  167.022295][ T6632]  ? __x64_sys_request_key+0xa0/0xa0
[  167.027602][ T6632]  ? syscall_enter_from_user_mode+0x2e/0x240
[  167.033710][ T6632]  ? lockdep_hardirqs_on+0x94/0x130
[  167.038953][ T6632]  ? syscall_enter_from_user_mode+0x2e/0x240
[  167.044978][ T6632]  do_syscall_64+0x3b/0xb0
[  167.049410][ T6632]  ? clear_bhb_loop+0x15/0x70
[  167.054103][ T6632]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  167.060027][ T6632] RIP: 0033:0x7f93d40fd759
[  167.064449][ T6632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.084065][ T6632] RSP: 002b:00007f93d2575038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  167.092510][ T6632] RAX: ffffffffffffffda RBX: 00007f93d42b4f80 RCX: 00007f93d40fd759
[  167.100496][ T6632] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000020000480
[  167.108496][ T6632] RBP: 00007f93d2575090 R08: 0000000000000000 R09: 0000000000000000
[  167.116685][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.124688][ T6632] R13: 0000000000000000 R14: 00007f93d42b4f80 R15: 00007fff9b8c3278
[  167.132690][ T6632]  </TASK>
[  167.200372][ T6624] loop2: detected capacity change from 0 to 32768
[  167.295906][ T6624] XFS (loop2): Mounting V5 Filesystem
[  167.324720][ T4407] usb 5-1: device descriptor read/64, error -71
[  167.337072][ T6624] XFS (loop2): Ending clean mount
[  167.344929][ T6624] XFS (loop2): Quotacheck needed: Please wait.
[  167.383763][ T6624] XFS (loop2): Quotacheck: Done.
[  167.417990][ T4180] XFS (loop2): Unmounting Filesystem
[  167.494562][   T21] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  167.543042][ T4331] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.633927][ T4331] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.644564][ T4407] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  167.663113][ T6649] FAULT_INJECTION: forcing a failure.
[  167.663113][ T6649] name failslab, interval 1, probability 0, space 0, times 0
[  167.676373][ T6649] CPU: 1 PID: 6649 Comm: syz.5.463 Not tainted 5.15.173-syzkaller #0
[  167.684479][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  167.694550][ T6649] Call Trace:
[  167.697836][ T6649]  <TASK>
[  167.700775][ T6649]  dump_stack_lvl+0x1e3/0x2d0
[  167.705472][ T6649]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  167.711124][ T6649]  ? panic+0x860/0x860
[  167.715211][ T6649]  ? __might_sleep+0xc0/0xc0
[  167.719831][ T6649]  should_fail+0x38a/0x4c0
[  167.724265][ T6649]  should_failslab+0x5/0x20
[  167.728788][ T6649]  slab_pre_alloc_hook+0x53/0xc0
[  167.733877][ T6649]  __kmalloc+0x6e/0x300
[  167.738044][ T6649]  ? tomoyo_encode+0x26b/0x530
[  167.742836][ T6649]  tomoyo_encode+0x26b/0x530
[  167.747447][ T6649]  tomoyo_realpath_from_path+0x5a2/0x5e0
[  167.753103][ T6649]  tomoyo_mount_permission+0x395/0xb20
[  167.758587][ T6649]  ? kmem_cache_free+0x91/0x1f0
[  167.763463][ T6649]  ? kasan_set_track+0x4b/0x80
[  167.768251][ T6649]  ? kasan_set_free_info+0x1f/0x40
[  167.773378][ T6649]  ? slab_free_freelist_hook+0xdd/0x160
[  167.778942][ T6649]  ? kmem_cache_free+0x91/0x1f0
[  167.783804][ T6649]  ? user_path_at_empty+0x12b/0x180
[  167.789026][ T6649]  ? tomoyo_get_name+0x530/0x530
[  167.794016][ T6649]  ? lockdep_hardirqs_on+0x94/0x130
[  167.799242][ T6649]  security_sb_mount+0x88/0xc0
[  167.804062][ T6649]  path_mount+0xbd/0x10a0
[  167.808405][ T6649]  ? user_path_at_empty+0x12b/0x180
[  167.813636][ T6649]  __se_sys_mount+0x2d5/0x3c0
[  167.818325][ T6649]  ? __x64_sys_mount+0xc0/0xc0
[  167.823097][ T6649]  ? syscall_enter_from_user_mode+0x2e/0x240
[  167.829095][ T6649]  ? lockdep_hardirqs_on+0x94/0x130
[  167.834311][ T6649]  ? __x64_sys_mount+0x1c/0xc0
[  167.839092][ T6649]  do_syscall_64+0x3b/0xb0
[  167.843523][ T6649]  ? clear_bhb_loop+0x15/0x70
[  167.848200][ T6649]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  167.854204][ T6649] RIP: 0033:0x7f42190e6759
[  167.858621][ T6649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.878226][ T6649] RSP: 002b:00007f421755e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  167.886650][ T6649] RAX: ffffffffffffffda RBX: 00007f421929df80 RCX: 00007f42190e6759
[  167.894674][ T6649] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000
[  167.902643][ T6649] RBP: 00007f421755e090 R08: 0000000020000280 R09: 0000000000000000
[  167.910616][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.918601][ T6649] R13: 0000000000000000 R14: 00007f421929df80 R15: 00007fffee90bed8
[  167.926604][ T6649]  </TASK>
[  167.974217][ T6649] ERROR: Out of memory at tomoyo_realpath_from_path.
[  168.004282][ T4331] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.088165][ T6653] FAULT_INJECTION: forcing a failure.
[  168.088165][ T6653] name failslab, interval 1, probability 0, space 0, times 0
[  168.111146][ T6653] CPU: 0 PID: 6653 Comm: syz.5.464 Not tainted 5.15.173-syzkaller #0
[  168.116915][ T6655] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  168.119262][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  168.119278][ T6653] Call Trace:
[  168.119286][ T6653]  <TASK>
[  168.119294][ T6653]  dump_stack_lvl+0x1e3/0x2d0
[  168.125970][ T6655] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  168.136022][ T6653]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  168.145678][ T6655] vhci_hcd vhci_hcd.0: Device attached
[  168.146895][ T6653]  ? panic+0x860/0x860
[  168.146929][ T6653]  ? __kmalloc_node+0x199/0x390
[  168.146954][ T6653]  ? alloc_netdev_mqs+0x85/0xc10
[  168.164911][ T4407] usb 5-1: device descriptor read/64, error -71
[  168.165545][ T6653]  ? rtnl_create_link+0x2e9/0x9c0
[  168.190613][ T6653]  ? rtnl_newlink+0x13f6/0x2070
[  168.195483][ T6653]  ? netlink_rcv_skb+0x1cf/0x410
[  168.200440][ T6653]  ? netlink_unicast+0x7b6/0x980
[  168.205388][ T6653]  ? netlink_sendmsg+0xa30/0xd60
[  168.210344][ T6653]  ? ____sys_sendmsg+0x59e/0x8f0
[  168.215290][ T6653]  ? ___sys_sendmsg+0x252/0x2e0
[  168.220158][ T6653]  should_fail+0x38a/0x4c0
[  168.220674][   T21] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  168.224589][ T6653]  should_failslab+0x5/0x20
[  168.224615][ T6653]  slab_pre_alloc_hook+0x53/0xc0
[  168.233640][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.238173][ T6653]  kmem_cache_alloc_trace+0x49/0x290
[  168.238201][ T6653]  ? __hw_addr_add_ex+0x206/0x770
[  168.238230][ T6653]  __hw_addr_add_ex+0x206/0x770
[  168.238259][ T6653]  dev_addr_init+0x13f/0x220
[  168.238287][ T6653]  ? dev_addr_flush+0x200/0x200
[  168.238324][ T6653]  alloc_netdev_mqs+0x116/0xc10
[  168.238346][ T6653]  ? get_rxsa_from_nl+0x530/0x530
[  168.238371][ T6653]  ? bpf_lsm_capable+0x5/0x10
[  168.238400][ T6653]  rtnl_create_link+0x2e9/0x9c0
[  168.238432][ T6653]  rtnl_newlink+0x13f6/0x2070
[  168.238481][ T6653]  ? rtnl_setlink+0x560/0x560
[  168.238515][ T6653]  ? reacquire_held_locks+0x660/0x660
[  168.238538][ T6653]  ? rcu_lock_release+0x5/0x20
[  168.314762][ T6653]  ? __lock_acquire+0x1ff0/0x1ff0
[  168.319804][ T6653]  ? unwind_next_frame+0x1437/0x1fa0
[  168.325189][ T6653]  ? rtnetlink_rcv_msg+0x94c/0xee0
[  168.329942][ T4407] usb usb5-port1: attempt power cycle
[  168.330329][ T6653]  ? rtnl_setlink+0x560/0x560
[  168.340349][ T6653]  rtnetlink_rcv_msg+0x993/0xee0
[  168.345317][ T6653]  ? rtnetlink_bind+0x80/0x80
[  168.350005][ T6653]  ? __local_bh_enable_ip+0x164/0x1f0
[  168.355389][ T6653]  ? lockdep_hardirqs_on+0x94/0x130
[  168.360690][ T6653]  ? __local_bh_enable_ip+0x164/0x1f0
[  168.366080][ T6653]  ? local_bh_enable+0x5/0x20
[  168.370615][ T4212] vhci_hcd: vhci_device speed not set
[  168.370771][ T6653]  ? _local_bh_enable+0xa0/0xa0
[  168.370810][ T6653]  ? __dev_queue_xmit+0x1bf8/0x32b0
[  168.370849][ T6653]  ? __copy_skb_header+0x47b/0x600
[  168.370870][ T6653]  ? dev_queue_xmit+0x20/0x20
[  168.396359][ T6653]  ? memcpy+0x3c/0x60
[  168.400368][ T6653]  ? __copy_skb_header+0x47b/0x600
[  168.405511][ T6653]  netlink_rcv_skb+0x1cf/0x410
[  168.410296][ T6653]  ? rtnetlink_bind+0x80/0x80
[  168.414998][ T6653]  ? netlink_ack+0xb10/0xb10
[  168.419623][ T6653]  netlink_unicast+0x7b6/0x980
[  168.424414][ T6653]  ? netlink_detachskb+0x90/0x90
[  168.429372][ T6653]  ? __virt_addr_valid+0x3bb/0x460
[  168.434514][ T6653]  ? 0xffffffff81000000
[  168.438676][ T6653]  ? __check_object_size+0x300/0x410
[  168.443986][ T6653]  ? bpf_lsm_netlink_send+0x5/0x10
[  168.449121][ T6653]  netlink_sendmsg+0xa30/0xd60
[  168.453911][ T6653]  ? netlink_getsockopt+0x5b0/0x5b0
[  168.459123][ T6653]  ? aa_sock_msg_perm+0x91/0x150
[  168.464083][ T6653]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  168.469381][ T6653]  ? security_socket_sendmsg+0x7d/0xa0
[  168.472790][ T4212] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  168.474845][ T6653]  ? netlink_getsockopt+0x5b0/0x5b0
[  168.474873][ T6653]  ____sys_sendmsg+0x59e/0x8f0
[  168.474898][ T6653]  ? iovec_from_user+0x300/0x390
[  168.486961][   T21] usb 2-1: config 0 descriptor??
[  168.487520][ T6653]  ? __sys_sendmsg_sock+0x30/0x30
[  168.507162][ T6653]  ___sys_sendmsg+0x252/0x2e0
[  168.511868][ T6653]  ? __sys_sendmsg+0x260/0x260
[  168.516699][ T6653]  ? __fdget+0x191/0x220
[  168.520984][ T6653]  __se_sys_sendmsg+0x19a/0x260
[  168.525856][ T6653]  ? __x64_sys_sendmsg+0x80/0x80
[  168.530824][ T6653]  ? syscall_enter_from_user_mode+0x2e/0x240
[  168.536823][ T6653]  ? lockdep_hardirqs_on+0x94/0x130
[  168.542041][ T6653]  ? syscall_enter_from_user_mode+0x2e/0x240
[  168.548044][ T6653]  do_syscall_64+0x3b/0xb0
[  168.552485][ T6653]  ? clear_bhb_loop+0x15/0x70
[  168.557194][ T6653]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  168.563128][ T6653] RIP: 0033:0x7f42190e6759
[  168.567557][ T6653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.587177][ T6653] RSP: 002b:00007f421755e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.595618][ T6653] RAX: ffffffffffffffda RBX: 00007f421929df80 RCX: 00007f42190e6759
[  168.602740][ T6658] loop2: detected capacity change from 0 to 32768
[  168.603642][ T6653] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003
[  168.603660][ T6653] RBP: 00007f421755e090 R08: 0000000000000000 R09: 0000000000000000
[  168.603676][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.634033][ T6653] R13: 0000000000000000 R14: 00007f421929df80 R15: 00007fffee90bed8
[  168.642010][ T6653]  </TASK>
[  168.664884][ T4331] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.722924][ T6662] loop5: detected capacity change from 0 to 64
[  168.910752][ T6662] loop5: detected capacity change from 0 to 512
[  169.086145][ T6662] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  169.167006][ T6666] tmpfs: Unknown parameter 'uid‘cP}9oûž]½pºÎ'
[  169.205641][ T4302] usb 3-1: new low-speed USB device number 19 using dummy_hcd
[  169.240720][ T6662] EXT4-fs (loop5): unable to read superblock
[  169.334736][ T4407] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  169.429591][   T21] gs_usb 2-1:0.0: Couldn't get device config: (err=-71)
[  169.467776][   T21] gs_usb: probe of 2-1:0.0 failed with error -71
[  169.484698][ T4407] usb 5-1: device descriptor read/8, error -71
[  169.544120][   T21] usb 2-1: USB disconnect, device number 14
[  169.558862][ T6674] loop5: detected capacity change from 0 to 2048
[  169.569589][ T6650] chnl_net:caif_netlink_parms(): no params data found
[  169.575021][ T4302] usb 3-1: config 0 has no interfaces?
[  169.582085][ T4302] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  169.609792][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.641823][ T4302] usb 3-1: config 0 descriptor??
[  169.686176][ T6674] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  169.733540][ T6674] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  169.817368][ T6674] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  169.856832][ T6674] UDF-fs: Scanning with blocksize 512 failed
[  169.877330][ T6674] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.966808][   T26] audit: type=1800 audit(1732030378.990:4956): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.467" name="file1" dev="loop5" ino=838 res=0 errno=0
[  169.978688][ T4302] Bluetooth: hci1: command 0x0409 tx timeout
[  169.988211][ T4407] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  170.087421][ T4407] usb 5-1: Using ep0 maxpacket: 32
[  170.284808][ T4407] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  170.312527][ T4407] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  170.368721][ T4407] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  170.399667][ T6705] loop5: detected capacity change from 0 to 512
[  170.415754][ T4407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  170.459753][ T4407] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  170.513139][ T4407] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  170.528727][ T6705] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  170.549686][ T4407] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  170.563128][ T4407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.573092][ T4407] usb 5-1: config 0 descriptor??
[  170.579472][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.583654][ T6705] Quota error (device loop5): v2_read_file_info: Free block number too big (58381 >= 6).
[  170.597580][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.600996][ T6705] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  170.619948][ T6650] device bridge_slave_0 entered promiscuous mode
[  170.651402][ T6705] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  170.662725][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.670150][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.677782][ T6705] Quota error (device loop5): v2_read_file_info: Free block number too big (58381 >= 6).
[  170.678873][ T6650] device bridge_slave_1 entered promiscuous mode
[  170.695415][ T6705] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  170.742959][ T6650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.755397][ T6650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.811365][ T6650] team0: Port device team_slave_0 added
[  170.830464][ T6650] team0: Port device team_slave_1 added
[  170.855534][ T4407] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  170.952188][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.993206][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.010351][ T6716] loop1: detected capacity change from 0 to 512
[  171.034532][ T4619] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  171.034648][ T6650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.083259][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.094595][ T6716] EXT4-fs (loop1): unsupported inode size: 0
[  171.115096][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.131302][ T6716] EXT4-fs (loop1): blocksize: 4096
[  171.150237][ T6681] kAFS: unparsable volume name
[  171.165730][ T6650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.228569][ T6681] loop4: detected capacity change from 0 to 4096
[  171.238959][ T4302] usb 3-1: USB disconnect, device number 19
[  171.258520][ T6656] usb 37-1: recv xbuf, -104
[  171.299075][ T4232] vhci_hcd: stop threads
[  171.329483][ T4232] vhci_hcd: release socket
[  171.342345][ T6650] device hsr_slave_0 entered promiscuous mode
[  171.349538][ T4212] vhci_hcd: vhci_device speed not set
[  171.357552][ T4232] vhci_hcd: disconnect device
[  171.394747][ T4619] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  171.401962][ T6681] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  171.425368][ T4619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.446815][   T26] audit: type=1800 audit(1732030380.460:4957): pid=6681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.469" name="file0" dev="loop4" ino=13 res=0 errno=0
[  171.468031][ T6650] device hsr_slave_1 entered promiscuous mode
[  171.477729][ T6650] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.495062][ T6650] Cannot create hsr debugfs directory
[  171.519109][ T6681] fs-verity: sha512 using implementation "sha512-avx2"
[  171.523875][ T4619] usb 6-1: config 0 descriptor??
[  171.561832][ T4302] usb 5-1: USB disconnect, device number 24
[  171.568057][    C0] usblp0: nonzero read bulk status received: -71
[  171.605708][ T4619] cp210x 6-1:0.0: cp210x converter detected
[  171.825000][ T6680] usblp0: removed
[  171.866812][ T6735] loop2: detected capacity change from 0 to 4096
[  171.989041][ T6735] ntfs: volume version 3.1.
[  172.005011][ T4331] device hsr_slave_0 left promiscuous mode
[  172.021465][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.472'.
[  172.042776][ T4331] device hsr_slave_1 left promiscuous mode
[  172.050500][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.060672][ T4619] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: 2
[  172.072892][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.081798][ T4302] Bluetooth: hci1: command 0x041b tx timeout
[  172.096762][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.113789][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.126168][ T4331] device bridge_slave_1 left promiscuous mode
[  172.133028][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.149743][ T4331] device bridge_slave_0 left promiscuous mode
[  172.156562][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.171319][ T4407] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  172.223450][ T4331] device veth1_macvtap left promiscuous mode
[  172.233993][ T4331] device veth0_macvtap left promiscuous mode
[  172.274800][ T4331] device veth1_vlan left promiscuous mode
[  172.280653][ T4331] device veth0_vlan left promiscuous mode
[  172.494507][ T4407] usb 2-1: Using ep0 maxpacket: 32
[  172.541233][ T4619] usb 6-1: cp210x converter now attached to ttyUSB0
[  172.594567][ T4424] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  172.614732][ T4407] usb 2-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64
[  172.623807][ T4407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.634910][ T4407] usb 2-1: config 0 descriptor??
[  172.660979][ T4331] team0 (unregistering): Port device team_slave_1 removed
[  172.676824][ T4407] usb 2-1: Found UVC 0.00 device <unnamed> (0458:706e)
[  172.677250][ T4331] team0 (unregistering): Port device team_slave_0 removed
[  172.690963][ T4407] usb 2-1: No valid video chain found.
[  172.706826][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.721212][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.851200][ T4331] bond0 (unregistering): Released all slaves
[  172.881466][ T4302] usb 2-1: USB disconnect, device number 15
[  172.958953][ T4619] usb 6-1: USB disconnect, device number 4
[  172.977367][ T4619] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  173.008987][ T6764] loop4: detected capacity change from 0 to 256
[  173.016155][ T6650] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  173.024924][ T4424] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  173.043611][ T4619] cp210x 6-1:0.0: device disconnected
[  173.054486][ T4424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.067002][ T6650] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  173.076412][ T4424] usb 3-1: config 0 descriptor??
[  173.098757][ T6650] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  173.161936][ T6650] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  173.189938][ T6764] FAT-fs (loop4): Directory bread(block 64) failed
[  173.205077][ T6764] FAT-fs (loop4): Directory bread(block 65) failed
[  173.224994][ T6764] FAT-fs (loop4): Directory bread(block 66) failed
[  173.238884][ T6764] FAT-fs (loop4): Directory bread(block 67) failed
[  173.255383][ T6764] FAT-fs (loop4): Directory bread(block 68) failed
[  173.261975][ T6764] FAT-fs (loop4): Directory bread(block 69) failed
[  173.313207][ T6764] FAT-fs (loop4): Directory bread(block 70) failed
[  173.334058][ T6764] FAT-fs (loop4): Directory bread(block 71) failed
[  173.350675][ T6764] FAT-fs (loop4): Directory bread(block 72) failed
[  173.388140][ T6764] FAT-fs (loop4): Directory bread(block 73) failed
[  173.433589][ T6650] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.465730][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  173.505716][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  173.546826][ T6650] 8021q: adding VLAN 0 to HW filter on device team0
[  173.584066][ T6779] loop1: detected capacity change from 0 to 4096
[  173.627864][ T6784] tmpfs: Unknown parameter 'uid‘cP}9oûž]½pºÎ'
[  173.634229][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  173.662622][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  173.728998][  T484] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.736238][  T484] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.749209][ T6779] ntfs: (device loop1): ntfs_read_inode_mount(): Incorrect mft record size 0 in superblock, should be 2048.
[  173.778209][ T6779] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[  173.790099][  T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  173.814234][ T6779] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata.
[  173.887841][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  173.919961][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  174.065140][ T4424] gs_usb 3-1:0.0: Couldn't get device config: (err=-71)
[  174.163912][ T4424] gs_usb: probe of 3-1:0.0 failed with error -71
[  174.360151][ T5204] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.367316][ T5204] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.585316][ T4424] usb 3-1: USB disconnect, device number 20
[  174.721901][ T4302] Bluetooth: hci1: command 0x040f tx timeout
[  174.742456][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  174.752269][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  174.795425][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  174.839112][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  174.853310][ T6801] FAULT_INJECTION: forcing a failure.
[  174.853310][ T6801] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  174.878160][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  174.896406][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  174.911039][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  174.921398][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  174.924563][ T6801] CPU: 1 PID: 6801 Comm: syz.4.483 Not tainted 5.15.173-syzkaller #0
[  174.937224][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  174.947432][ T6801] Call Trace:
[  174.950727][ T6801]  <TASK>
[  174.953673][ T6801]  dump_stack_lvl+0x1e3/0x2d0
[  174.958477][ T6801]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  174.964128][ T6801]  ? panic+0x860/0x860
[  174.968220][ T6801]  ? perf_event_mmap+0x3e4/0x1c70
[  174.973280][ T6801]  should_fail+0x38a/0x4c0
[  174.973639][ T6650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.977727][ T6801]  prepare_alloc_pages+0x1db/0x5b0
[  174.977763][ T6801]  __alloc_pages+0x14f/0x700
[  174.977787][ T6801]  ? __rmqueue_pcplist+0x23a0/0x23a0
[  174.977824][ T6801]  ? alloc_pages+0x458/0x570
[  174.977856][ T6801]  pte_alloc_one+0x86/0x360
[  174.977885][ T6801]  ? rcu_lock_release+0x20/0x20
[  174.977920][ T6801]  __pte_alloc+0x75/0x210
[  175.019106][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  175.021452][ T6801]  ? remove_device_exclusive_entry+0xbf0/0xbf0
[  175.021488][ T6801]  ? free_pgtables+0x2a0/0x2a0
[  175.039490][ T6801]  handle_mm_fault+0x4d9a/0x5960
[  175.044560][ T6801]  ? numa_migrate_prep+0x1a0/0x1a0
[  175.049725][ T6801]  ? vmacache_find+0x4f9/0x590
[  175.054506][ T6801]  ? vmacache_update+0x9f/0xf0
[  175.059294][ T6801]  exc_page_fault+0x271/0x700
[  175.063999][ T6801]  asm_exc_page_fault+0x22/0x30
[  175.068871][ T6801] RIP: 0033:0x7fe6eb7308d6
[  175.073410][ T6801] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[  175.093033][ T6801] RSP: 002b:00007fe6e9ce44a0 EFLAGS: 00010246
[  175.099121][ T6801] RAX: 0000000000000001 RBX: 00007fe6e9ce4540 RCX: 0000000000000101
[  175.107112][ T6801] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fe6e9ce45e0
[  175.115112][ T6801] RBP: 0000000000000102 R08: 00007fe6e18c5000 R09: 0000000000000000
[  175.119662][ T6796] loop2: detected capacity change from 0 to 4096
[  175.123099][ T6801] R10: 0000000000000000 R11: 00007fe6e9ce4550 R12: 0000000000000001
[  175.137388][ T6801] R13: 00007fe6eb8f4fc0 R14: 0000000000000000 R15: 00007fe6e9ce45e0
[  175.145395][ T6801]  </TASK>
[  175.202309][ T6808] loop1: detected capacity change from 0 to 128
[  175.213379][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  175.235431][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  175.254695][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  175.301411][ T6808] FAT-fs (loop1): Unrecognized mount option "mask=^MAY_WRITE" or missing value
[  175.324620][ T4212] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  175.513739][ T6650] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.559288][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  175.575048][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  175.576031][ T6799] ntfs3: loop2: failed to convert "0080" to cp857
[  175.671791][ T6799] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  175.696851][ T4212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.717266][ T4212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.744587][ T6801] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  175.761420][ T4212] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  175.776439][ T6801] loop4: detected capacity change from 0 to 256
[  175.794122][ T4212] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  175.834409][ T4212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.855697][ T4212] usb 6-1: config 0 descriptor??
[  175.860928][ T6801] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  175.907687][ T6801] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  175.938528][ T6825] loop1: detected capacity change from 0 to 8
[  175.974638][ T6801] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  175.992634][ T6801] UDF-fs: Scanning with blocksize 512 failed
[  176.030789][ T6801] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  176.061431][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  176.090941][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  176.101162][ T6801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.109467][ T6803] udc-core: couldn't find an available UDC or it's busy
[  176.166620][ T6803] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  176.180009][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  176.224804][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  176.256465][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  176.303760][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  176.333219][ T6840] udc-core: couldn't find an available UDC or it's busy
[  176.347432][ T6840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  176.360414][ T6650] device veth0_vlan entered promiscuous mode
[  176.408557][ T6650] device veth1_vlan entered promiscuous mode
[  176.469445][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  176.483693][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  176.513655][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  176.542835][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  176.583503][ T6650] device veth0_macvtap entered promiscuous mode
[  176.618668][ T6650] device veth1_macvtap entered promiscuous mode
[  176.710124][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.744438][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.772294][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.794848][ T4302] Bluetooth: hci1: command 0x0419 tx timeout
[  176.806199][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.831367][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.853510][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.873812][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.895953][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.938660][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.963100][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  176.985571][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  177.020195][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  177.059565][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  177.095888][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.113191][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.133661][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.182999][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.196320][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.219081][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.251708][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.274426][ T4302] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  177.290847][ T6839] loop4: detected capacity change from 0 to 32768
[  177.292157][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.334523][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.355941][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  177.371070][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  177.416329][ T6650] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.441542][ T6650] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.455878][ T6650] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.473630][ T6650] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.634665][ T4302] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  177.649656][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.693978][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.707650][ T4302] usb 3-1: config 0 descriptor??
[  177.722944][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.783201][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  177.803099][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.848764][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.932928][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  177.944611][ T4212] usb 6-1: string descriptor 0 read error: -71
[  178.064823][ T4212] usbhid 6-1:0.0: can't add hid device: -71
[  178.071886][ T4212] usbhid: probe of 6-1:0.0 failed with error -71
[  178.842424][ T6873] loop6: detected capacity change from 0 to 256
[  179.003153][ T4212] usb 6-1: USB disconnect, device number 5
[  179.044536][ T6881] netlink: 260 bytes leftover after parsing attributes in process `syz.5.497'.
[  179.054568][ T4302] gs_usb 3-1:0.0: Couldn't get device config: (err=-71)
[  179.061605][ T4302] gs_usb: probe of 3-1:0.0 failed with error -71
[  179.104296][ T4302] usb 3-1: USB disconnect, device number 21
[  179.308456][ T4619] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  179.382566][ T6892] loop5: detected capacity change from 0 to 512
[  179.418758][   T26] audit: type=1326 audit(1732030388.440:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.4.502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6eb86d759 code=0x0
[  179.420913][ T6897] loop2: detected capacity change from 0 to 1024
[  179.607040][ T6897] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  179.629902][ T6892] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.500: inode #1: comm syz.5.500: iget: illegal inode #
[  179.644911][ T6897] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.656403][ T6892] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.500: error while reading EA inode 1 err=-117
[  179.694608][ T4619] usb 7-1: config 0 has an invalid interface number: 46 but max is 0
[  179.707121][ T4619] usb 7-1: config 0 has no interface number 0
[  179.713321][ T4619] usb 7-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  179.722754][ T6892] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.500: inode #1: comm syz.5.500: iget: illegal inode #
[  179.760498][ T6897] EXT4-fs error (device loop2): ext4_nfs_get_inode:1434: inode #18: comm syz.2.501: unexpected EA_INODE flag
[  179.777332][ T6892] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.500: error while reading EA inode 1 err=-117
[  179.806480][ T6892] EXT4-fs (loop5): 1 orphan inode deleted
[  179.812288][ T6892] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback.
[  179.921148][ T4619] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  179.941988][ T6892] EXT4-fs (loop5): shut down requested (2)
[  179.957793][ T4619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.980266][ T4619] usb 7-1: Product: syz
[  179.990874][ T6914] loop1: detected capacity change from 0 to 512
[  180.001819][ T4619] usb 7-1: Manufacturer: syz
[  180.012102][ T4619] usb 7-1: SerialNumber: syz
[  180.045173][ T4619] usb 7-1: config 0 descriptor??
[  180.085573][ T4619] ums-karma 7-1:0.46: USB Mass Storage device detected
[  180.134892][ T6914] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.503: inode #1: comm syz.1.503: iget: illegal inode #
[  180.151923][ T4619] ums-karma: probe of 7-1:0.46 failed with error -5
[  180.159081][ T6914] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.503: error while reading EA inode 1 err=-117
[  180.174516][ T4302] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  180.258591][ T6914] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.503: inode #1: comm syz.1.503: iget: illegal inode #
[  180.309579][ T4418] usb 7-1: USB disconnect, device number 2
[  180.331730][ T6914] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.503: error while reading EA inode 1 err=-117
[  180.386031][ T6914] EXT4-fs (loop1): 1 orphan inode deleted
[  180.391852][ T6914] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback.
[  180.444542][ T4302] usb 3-1: Using ep0 maxpacket: 32
[  180.525286][ T4212] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  180.706950][ T4302] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  180.716609][ T4302] usb 3-1: config 0 has no interface number 0
[  180.794650][ T4245] Bluetooth: hci3: command 0x0406 tx timeout
[  180.803591][ T4245] Bluetooth: hci2: command 0x0406 tx timeout
[  180.940924][ T4302] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  181.066809][ T4302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.215852][ T4302] usb 3-1: Product: syz
[  181.302715][ T4302] usb 3-1: Manufacturer: syz
[  181.424483][ T4302] usb 3-1: SerialNumber: syz
[  181.440438][ T6943] loop1: detected capacity change from 0 to 4096
[  181.460877][ T4302] usb 3-1: config 0 descriptor??
[  181.467200][ T4212] usb 5-1: Using ep0 maxpacket: 8
[  181.516236][ T4302] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  181.624580][ T4212] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  181.628075][   T26] audit: type=1800 audit(1732030390.650:4959): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.507" name="file0" dev="loop1" ino=0 res=0 errno=0
[  181.635411][ T4212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  181.694428][ T4212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  181.710079][ T4212] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  181.723592][   T26] audit: type=1800 audit(1732030390.690:4960): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.507" name="file0" dev="loop1" ino=0 res=0 errno=0
[  181.744517][ T4212] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  181.754041][ T4212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.779871][ T4302] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  181.826252][ T4302] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  181.917578][   T21] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  181.983051][ T6897] udc-core: couldn't find an available UDC or it's busy
[  181.997768][ T6897] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  182.058375][ T4212] usb 5-1: GET_CAPABILITIES returned 0
[  182.065458][ T4212] usbtmc 5-1:16.0: can't read capabilities
[  182.276546][ T6978] FAULT_INJECTION: forcing a failure.
[  182.276546][ T6978] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  182.283117][ T4212] usb 5-1: USB disconnect, device number 25
[  182.329017][ T6978] CPU: 0 PID: 6978 Comm: syz.1.513 Not tainted 5.15.173-syzkaller #0
[  182.337242][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  182.347336][ T6978] Call Trace:
[  182.350640][ T6978]  <TASK>
[  182.353602][ T6978]  dump_stack_lvl+0x1e3/0x2d0
[  182.358329][ T6978]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  182.363988][ T6978]  ? panic+0x860/0x860
[  182.368096][ T6978]  should_fail+0x38a/0x4c0
[  182.372554][ T6978]  _copy_from_user+0x2d/0x170
[  182.377265][ T6978]  kstrtouint_from_user+0xca/0x2a0
[  182.382406][ T6978]  ? kstrtol_from_user+0x310/0x310
[  182.387554][ T6978]  ? read_lock_is_recursive+0x10/0x10
[  182.392984][ T6978]  proc_fail_nth_write+0xa6/0x290
[  182.398042][ T6978]  ? rcu_read_lock_bh_held+0x110/0x110
[  182.403503][ T6978]  ? proc_fail_nth_read+0x210/0x210
[  182.408706][ T6978]  ? proc_fail_nth_read+0x210/0x210
[  182.414018][ T6978]  vfs_write+0x30c/0xe50
[  182.418267][ T6978]  ? file_end_write+0x250/0x250
[  182.423252][ T6978]  ? __fget_files+0x413/0x480
[  182.427940][ T6978]  ? mutex_lock_nested+0x17/0x20
[  182.432875][ T6978]  ? __fdget_pos+0x2cb/0x380
[  182.434757][   T21] usb 7-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  182.437464][ T6978]  ? ksys_write+0x77/0x2c0
[  182.447072][   T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.450910][ T6978]  ksys_write+0x1a2/0x2c0
[  182.463203][ T6978]  ? print_irqtrace_events+0x210/0x210
[  182.468687][ T6978]  ? __ia32_sys_read+0x80/0x80
[  182.472881][   T21] usb 7-1: config 0 descriptor??
[  182.473485][ T6978]  ? syscall_enter_from_user_mode+0x2e/0x240
[  182.484431][ T6978]  ? lockdep_hardirqs_on+0x94/0x130
[  182.489654][ T6978]  ? syscall_enter_from_user_mode+0x2e/0x240
[  182.495735][ T6978]  do_syscall_64+0x3b/0xb0
[  182.500180][ T6978]  ? clear_bhb_loop+0x15/0x70
[  182.504888][ T6978]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  182.510815][ T6978] RIP: 0033:0x7f93d40fc23f
[  182.515272][ T6978] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[  182.534919][ T6978] RSP: 002b:00007f93d2575030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  182.543364][ T6978] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f93d40fc23f
[  182.551357][ T6978] RDX: 0000000000000001 RSI: 00007f93d25750a0 RDI: 0000000000000004
[  182.559330][ T6978] RBP: 00007f93d2575090 R08: 0000000000000000 R09: 0000000000000000
[  182.567300][ T6978] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  182.575269][ T6978] R13: 0000000000000000 R14: 00007f93d42b4f80 R15: 00007fff9b8c3278
[  182.583253][ T6978]  </TASK>
[  182.586351][    C0] vkms_vblank_simulate: vblank timer overrun
[  183.004087][ T4302] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  183.026236][ T6990] tmpfs: Unknown parameter 'uid‘cP}9oûž]½pºÎ'
[  183.124120][ T6992] FAULT_INJECTION: forcing a failure.
[  183.124120][ T6992] name failslab, interval 1, probability 0, space 0, times 0
[  183.137418][ T6992] CPU: 1 PID: 6992 Comm: syz.4.516 Not tainted 5.15.173-syzkaller #0
[  183.145516][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  183.155587][ T6992] Call Trace:
[  183.158877][ T6992]  <TASK>
[  183.161817][ T6992]  dump_stack_lvl+0x1e3/0x2d0
[  183.166515][ T6992]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  183.172177][ T6992]  ? panic+0x860/0x860
[  183.176269][ T6992]  ? mark_lock+0x98/0x340
[  183.180625][ T6992]  should_fail+0x38a/0x4c0
[  183.185107][ T6992]  should_failslab+0x5/0x20
[  183.189623][ T6992]  slab_pre_alloc_hook+0x53/0xc0
[  183.194659][ T6992]  kmem_cache_alloc_node+0x49/0x2c0
[  183.199883][ T6992]  ? __alloc_skb+0xdd/0x590
[  183.204404][ T6992]  __alloc_skb+0xdd/0x590
[  183.208750][ T6992]  nr_write_internal+0xc7/0xc10
[  183.213760][ T6992]  nr_establish_data_link+0x5e/0xb0
[  183.218975][ T6992]  nr_connect+0x6c4/0xe00
[  183.223319][ T6992]  ? nr_bind+0x5d0/0x5d0
[  183.227567][ T6992]  ? __fget_files+0x413/0x480
[  183.232269][ T6992]  ? bpf_lsm_socket_connect+0x5/0x10
[  183.237662][ T6992]  ? security_socket_connect+0x7d/0xa0
[  183.243136][ T6992]  ? nr_bind+0x5d0/0x5d0
[  183.247397][ T6992]  __sys_connect+0x38b/0x410
[  183.252018][ T6992]  ? __sys_connect_file+0x170/0x170
[  183.257248][ T6992]  ? syscall_enter_from_user_mode+0x2e/0x240
[  183.263244][ T6992]  ? lockdep_hardirqs_on+0x94/0x130
[  183.268451][ T6992]  __x64_sys_connect+0x76/0x80
[  183.273229][ T6992]  do_syscall_64+0x3b/0xb0
[  183.277673][ T6992]  ? clear_bhb_loop+0x15/0x70
[  183.282413][ T6992]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  183.288341][ T6992] RIP: 0033:0x7fe6eb86d759
[  183.292774][ T6992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.312506][ T6992] RSP: 002b:00007fe6e9ca3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  183.320944][ T6992] RAX: ffffffffffffffda RBX: 00007fe6eba25130 RCX: 00007fe6eb86d759
[  183.328929][ T6992] RDX: 0000000000000048 RSI: 0000000020000140 RDI: 0000000000000006
[  183.336909][ T6992] RBP: 00007fe6e9ca3090 R08: 0000000000000000 R09: 0000000000000000
[  183.344894][ T6992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.352876][ T6992] R13: 0000000000000000 R14: 00007fe6eba25130 R15: 00007ffe40903aa8
[  183.360874][ T6992]  </TASK>
[  183.634770][   T21] gs_usb 7-1:0.0: Configuring for 1 interfaces
[  183.767937][ T4245] usb 3-1: USB disconnect, device number 22
[  183.774395][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  184.590161][ T4245] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  184.607954][ T4245] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  184.708964][ T7010] loop2: detected capacity change from 0 to 512
[  184.804449][ T7010] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  184.813766][ T7010] EXT4-fs (loop2): error: journal path ./bus is not a block device
[  185.182693][ T7011] input: syz1 as /devices/virtual/input/input7
[  185.316407][ T4245] quatech2 3-1:0.51: device disconnected
[  185.323208][ T4302] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.333386][ T4302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  185.344880][ T4302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  185.354629][ T4302] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  185.450921][ T4302] usb 6-1: New USB device found, idVendor=abcd, idProduct=ccee, bcdDevice= 5.b9
[  185.564444][ T4302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.651628][ T4302] usb 6-1: config 0 descriptor??
[  185.727514][ T4302] usb 6-1: can't set config #0, error -71
[  185.763237][ T4302] usb 6-1: USB disconnect, device number 6
[  186.418722][ T4245] usb 7-1: USB disconnect, device number 3
[  186.522969][ T7040] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  186.712121][ T7045] loop6: detected capacity change from 0 to 2048
[  186.820345][ T7045] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  186.885340][ T7045] netlink: 32 bytes leftover after parsing attributes in process `syz.6.526'.
[  186.934583][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.6.526'.
[  187.033559][ T7051] 9pnet: Insufficient options for proto=fd
[  187.274702][ T7062] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  187.326690][ T7022] loop1: detected capacity change from 0 to 40427
[  187.337230][ T7062] exFAT-fs (loop4): unable to read boot sector
[  187.343438][ T7062] exFAT-fs (loop4): failed to read boot sector
[  187.367334][ T7062] exFAT-fs (loop4): failed to recognize exfat type
[  187.404509][ T4245] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  187.412133][ T4302] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  187.463109][ T7022] F2FS-fs (loop1): Found nat_bits in checkpoint
[  187.469608][ T7037] loop5: detected capacity change from 0 to 32768
[  187.644516][ T7022] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  187.661502][ T7037] XFS (loop5): invalid log iosize: 0 [not 12-30]
[  187.698866][ T7022] netlink: 312 bytes leftover after parsing attributes in process `syz.1.521'.
[  187.784422][ T4302] usb 3-1: Using ep0 maxpacket: 8
[  187.794493][ T4245] usb 7-1: Using ep0 maxpacket: 32
[  187.895569][ T7036] loop5: detected capacity change from 0 to 2048
[  187.917334][ T4302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  187.934648][ T4245] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  187.976970][ T4167] attempt to access beyond end of device
[  187.976970][ T4167] loop1: rw=2049, want=45112, limit=40427
[  187.988514][ T4302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  188.001319][ T4245] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  188.072176][ T7036] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  188.092973][ T4245] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  188.110784][ T4302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  188.141764][ T7036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.184950][ T4245] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  188.208197][ T4302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  188.273129][ T4245] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  188.303399][ T4245] usb 7-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  188.396723][ T7092] device veth1_macvtap left promiscuous mode
[  188.426045][ T7036] loop_set_status: loop5 () has still dirty pages (nrpages=4)
[  188.436012][ T4302] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=2f.d8
[  188.445689][ T4302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.453706][ T4302] usb 3-1: Product: syz
[  188.460745][ T4302] usb 3-1: Manufacturer: syz
[  188.476677][ T7036] netlink: 16 bytes leftover after parsing attributes in process `syz.5.523'.
[  188.489698][ T4302] usb 3-1: SerialNumber: syz
[  188.524744][ T4245] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01
[  188.538365][ T4302] usb 3-1: config 0 descriptor??
[  188.563189][ T4245] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.603815][ T4302] gspca_main: spca501-2.14.0 probing 0000:0000
[  188.623204][ T7036] fuse: Unknown parameter 'fsmagic'
[  188.628552][ T4245] usb 7-1: Product: syz
[  188.632736][ T4245] usb 7-1: Manufacturer: syz
[  189.394431][ T4245] usb 7-1: SerialNumber: syz
[  189.403133][ T4245] usb 7-1: config 0 descriptor??
[  189.434673][ T4302] gspca_spca501: reg write: error -71
[  189.442977][ T4302] spca501 3-1:0.0: Reg write failed for 0x02,0x0f,0x05
[  189.501065][ T4302] spca501: probe of 3-1:0.0 failed with error -22
[  189.582585][ T4302] usb 3-1: USB disconnect, device number 23
[  189.656211][ T7045] udc-core: couldn't find an available UDC or it's busy
[  189.663225][ T7045] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  189.724754][ T4245] cxacru 7-1:0.0: cxacru_bind: interface has incorrect endpoints
[  189.732609][ T4245] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19!
[  189.764071][ T7115] FAULT_INJECTION: forcing a failure.
[  189.764071][ T7115] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  189.786896][ T4245] usb 7-1: USB disconnect, device number 4
[  189.852268][ T7115] CPU: 0 PID: 7115 Comm: syz.2.535 Not tainted 5.15.173-syzkaller #0
[  189.860383][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  189.870474][ T7115] Call Trace:
[  189.873784][ T7115]  <TASK>
[  189.876727][ T7115]  dump_stack_lvl+0x1e3/0x2d0
[  189.881430][ T7115]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  189.887076][ T7115]  ? panic+0x860/0x860
[  189.891169][ T7115]  ? snprintf+0xd6/0x120
[  189.895429][ T7115]  should_fail+0x38a/0x4c0
[  189.899865][ T7115]  _copy_to_user+0x2d/0x130
[  189.904380][ T7115]  simple_read_from_buffer+0xc6/0x150
[  189.909772][ T7115]  proc_fail_nth_read+0x1a3/0x210
[  189.914815][ T7115]  ? proc_fault_inject_write+0x390/0x390
[  189.920488][ T7115]  ? fsnotify_perm+0x442/0x590
[  189.925271][ T7115]  ? proc_fault_inject_write+0x390/0x390
[  189.930923][ T7115]  vfs_read+0x2fc/0xe10
[  189.935105][ T7115]  ? kernel_read+0x1f0/0x1f0
[  189.939716][ T7115]  ? __fget_files+0x413/0x480
[  189.944416][ T7115]  ? mutex_lock_nested+0x17/0x20
[  189.949372][ T7115]  ? __fdget_pos+0x2cb/0x380
[  189.953971][ T7115]  ? ksys_read+0x77/0x2c0
[  189.958315][ T7115]  ksys_read+0x1a2/0x2c0
[  189.962649][ T7115]  ? print_irqtrace_events+0x210/0x210
[  189.968160][ T7115]  ? vfs_write+0xe50/0xe50
[  189.972601][ T7115]  ? syscall_enter_from_user_mode+0x2e/0x240
[  189.978606][ T7115]  ? lockdep_hardirqs_on+0x94/0x130
[  189.983828][ T7115]  ? syscall_enter_from_user_mode+0x2e/0x240
[  189.984025][ T4212] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  189.989830][ T7115]  do_syscall_64+0x3b/0xb0
[  190.001817][ T7115]  ? clear_bhb_loop+0x15/0x70
[  190.006508][ T7115]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  190.012430][ T7115] RIP: 0033:0x7fe1344c619c
[  190.016940][ T7115] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  190.036539][ T7115] RSP: 002b:00007fe13291e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  190.044943][ T7115] RAX: ffffffffffffffda RBX: 00007fe13467f058 RCX: 00007fe1344c619c
[  190.052912][ T7115] RDX: 000000000000000f RSI: 00007fe13291e0a0 RDI: 0000000000000003
[  190.060894][ T7115] RBP: 00007fe13291e090 R08: 0000000000000000 R09: 0000000000000000
[  190.068975][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.077076][ T7115] R13: 0000000000000000 R14: 00007fe13467f058 R15: 00007ffc60ee7078
[  190.085088][ T7115]  </TASK>
[  190.108341][ T7119] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  190.119720][ T7119] exFAT-fs (loop1): unable to read boot sector
[  190.126057][ T7119] exFAT-fs (loop1): failed to read boot sector
[  190.132638][ T7119] exFAT-fs (loop1): failed to recognize exfat type
[  190.405355][ T4212] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  190.482681][ T4212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.716530][ T4212] usb 5-1: config 0 descriptor??
[  190.951723][ T7132] RDS: rds_bind could not find a transport for ::4006:20:0:0, load rds_tcp or rds_rdma?
[  191.069706][ T7137] loop6: detected capacity change from 0 to 128
[  191.089309][ T4909] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  191.161728][ T7137] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  191.186167][ T7137] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  191.292237][ T7140] tmpfs: Unknown parameter 'uid‘cP}9oûž]½pºÎ'
[  191.304444][ T4909] usb 3-1: device descriptor read/64, error -71
[  191.450983][ T7132] loop1: detected capacity change from 0 to 40427
[  191.504615][ T4212] gs_usb 5-1:0.0: Couldn't get device config: (err=-71)
[  191.515104][ T4212] gs_usb: probe of 5-1:0.0 failed with error -71
[  191.531958][ T7132] F2FS-fs (loop1): invalid crc value
[  191.539272][ T4212] usb 5-1: USB disconnect, device number 26
[  191.565844][ T7132] F2FS-fs (loop1) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x1c5b/0x5840
[  191.604667][ T4909] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  191.624712][ T7132] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12)
[  191.814727][ T4909] usb 3-1: device descriptor read/64, error -71
[  191.829589][ T7155] FAULT_INJECTION: forcing a failure.
[  191.829589][ T7155] name failslab, interval 1, probability 0, space 0, times 0
[  191.847985][ T7155] CPU: 1 PID: 7155 Comm: syz.5.546 Not tainted 5.15.173-syzkaller #0
[  191.856263][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  191.866340][ T7155] Call Trace:
[  191.869637][ T7155]  <TASK>
[  191.872571][ T7155]  dump_stack_lvl+0x1e3/0x2d0
[  191.877268][ T7155]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  191.882921][ T7155]  ? panic+0x860/0x860
[  191.887164][ T7155]  should_fail+0x38a/0x4c0
[  191.891614][ T7155]  should_failslab+0x5/0x20
[  191.896139][ T7155]  slab_pre_alloc_hook+0x53/0xc0
[  191.901093][ T7155]  ? __build_skb+0x25/0x2f0
[  191.905723][ T7155]  kmem_cache_alloc+0x3f/0x280
[  191.910516][ T7155]  __build_skb+0x25/0x2f0
[  191.914943][ T7155]  build_skb+0x1f/0x180
[  191.919113][ T7155]  ? __tun_build_skb+0x23/0x230
[  191.923981][ T7155]  __tun_build_skb+0x2d/0x230
[  191.928678][ T7155]  tun_get_user+0x1d3c/0x40f0
[  191.933386][ T7155]  ? tun_ring_recv+0xcc0/0xcc0
[  191.938174][ T7155]  ? rcu_lock_release+0x5/0x20
[  191.943057][ T7155]  tun_chr_write_iter+0x10c/0x1e0
[  191.948103][ T7155]  vfs_write+0xacd/0xe50
[  191.952387][ T7155]  ? file_end_write+0x250/0x250
[  191.957262][ T7155]  ? __fget_files+0x413/0x480
[  191.961975][ T7155]  ? __fdget_pos+0x1e9/0x380
[  191.966580][ T7155]  ? ksys_write+0x77/0x2c0
[  191.971028][ T7155]  ksys_write+0x1a2/0x2c0
[  191.975375][ T7155]  ? print_irqtrace_events+0x210/0x210
[  191.980854][ T7155]  ? __ia32_sys_read+0x80/0x80
[  191.985653][ T7155]  ? syscall_enter_from_user_mode+0x2e/0x240
[  191.991653][ T7155]  ? lockdep_hardirqs_on+0x94/0x130
[  191.996870][ T7155]  ? syscall_enter_from_user_mode+0x2e/0x240
[  192.002878][ T7155]  do_syscall_64+0x3b/0xb0
[  192.007307][ T7155]  ? clear_bhb_loop+0x15/0x70
[  192.012014][ T7155]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  192.017929][ T7155] RIP: 0033:0x7f42190e523f
[  192.022363][ T7155] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[  192.041979][ T7155] RSP: 002b:00007f421755e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  192.050386][ T7155] RAX: ffffffffffffffda RBX: 00007f421929df80 RCX: 00007f42190e523f
[  192.058377][ T7155] RDX: 000000000000004a RSI: 0000000020000440 RDI: 00000000000000c8
[  192.066339][ T7155] RBP: 00007f421755e090 R08: 0000000000000000 R09: 0000000000000000
[  192.074405][ T7155] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001
[  192.082377][ T7155] R13: 0000000000000000 R14: 00007f421929df80 R15: 00007fffee90bed8
[  192.090453][ T7155]  </TASK>
[  192.100497][ T4909] usb usb3-port1: attempt power cycle
[  192.259547][ T7161] loop5: detected capacity change from 0 to 1024
[  192.266371][ T4212] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  192.397458][ T7161] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  192.643745][ T7161] EXT4-fs (loop5): can't mount with commit=4, fs mounted w/o journal
[  193.144584][ T4909] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  193.264766][ T4909] usb 3-1: device descriptor read/8, error -71
[  193.374488][ T4245] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  193.386411][ T4302] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  193.431283][ T4212] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 65, using maximum allowed: 30
[  193.442744][ T4212] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.454211][ T4212] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[  193.467766][ T4212] usb 5-1: config 0 interface 0 has no altsetting 0
[  193.475018][ T4212] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  193.493262][ T4212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.525134][ T4212] usb 5-1: config 0 descriptor??
[  193.545832][ T4909] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  193.564495][ T4619] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  193.614954][ T4245] usb 2-1: Using ep0 maxpacket: 16
[  193.624420][ T4302] usb 7-1: Using ep0 maxpacket: 16
[  193.734609][ T4245] usb 2-1: config 1 has an invalid interface number: 243 but max is 0
[  193.743847][ T4245] usb 2-1: config 1 has no interface number 0
[  193.750525][ T4302] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.761568][ T4245] usb 2-1: config 1 interface 243 altsetting 249 endpoint 0x4 has an invalid bInterval 253, changing to 11
[  193.773126][ T4302] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.783534][ T4245] usb 2-1: config 1 interface 243 has no altsetting 0
[  193.790571][ T4302] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  193.794797][ T4909] usb 3-1: device not accepting address 27, error -71
[  193.803792][ T4302] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  193.817656][ T4909] usb usb3-port1: unable to enumerate USB device
[  193.819919][ T4302] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.838942][ T4302] usb 7-1: config 0 descriptor??
[  193.934677][ T4619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.946683][ T4619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.956627][ T4245] usb 2-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=8a.10
[  193.965704][ T4619] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  193.978650][ T4245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.986688][ T4245] usb 2-1: Product: syz
[  193.990919][ T4245] usb 2-1: Manufacturer: syz
[  193.996190][ T4619] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  194.005334][ T4245] usb 2-1: SerialNumber: syz
[  194.010759][ T4619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.023319][ T4619] usb 6-1: config 0 descriptor??
[  194.077760][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.084140][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  194.090632][ T4212] usbhid 5-1:0.0: can't add hid device: -71
[  194.099059][ T4212] usbhid: probe of 5-1:0.0 failed with error -71
[  194.107422][ T4212] usb 5-1: USB disconnect, device number 27
[  194.355378][ T4245] mct_u232 2-1:1.243: MCT U232 converter detected
[  194.362502][ T4245] mct_u232 ttyUSB0: expected endpoint missing
[  194.370780][ T4302] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  194.388012][ T4302] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max
[  194.405426][ T4245] usb 2-1: USB disconnect, device number 16
[  194.412785][ T4245] mct_u232 2-1:1.243: device disconnected
[  194.420414][ T4302] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  194.427711][ T4302] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  194.436555][ T4302] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  194.444226][ T4302] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  194.453415][ T4302] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  194.471744][ T4302] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0003/input/input8
[  194.507778][ T4619] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  194.533735][ T4619] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  194.611908][ T4302] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  194.773743][ T7175] udc-core: couldn't find an available UDC or it's busy
[  194.783591][ T4245] usb 6-1: USB disconnect, device number 7
[  194.788025][ T7175] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  194.856221][   T21] usb 7-1: USB disconnect, device number 5
[  194.959068][ T4302] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  195.221310][ T4215] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  195.469856][ T4302] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  195.566807][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.655593][ T4215] usb 3-1: Using ep0 maxpacket: 8
[  195.876898][   T26] audit: type=1326 audit(1732030404.900:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.6.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  195.960088][   T26] audit: type=1326 audit(1732030404.930:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.6.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  195.985968][ T4302] usb 5-1: config 0 descriptor??
[  196.054715][ T4215] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.064396][   T26] audit: type=1326 audit(1732030404.930:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.6.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  196.084564][ T4215] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.101181][ T7258] loop5: detected capacity change from 0 to 4096
[  196.116148][   T26] audit: type=1326 audit(1732030404.940:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.6.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  196.117201][ T4215] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  196.138314][    C0] vkms_vblank_simulate: vblank timer overrun
[  196.148125][   T26] audit: type=1326 audit(1732030404.940:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.6.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  196.178827][ T4215] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  196.190922][   T26] audit: type=1326 audit(1732030404.940:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.6.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  196.209495][ T4215] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  196.213658][   T21] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  196.233391][ T4215] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  196.244625][ T7258] ntfs: (device loop5): ntfs_read_inode_mount(): Couldn't find first extent of $DATA attribute in attribute list. $MFT is corrupt. Run chkdsk.
[  196.287799][ T7258] ntfs: (device loop5): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[  196.289948][   T26] audit: type=1326 audit(1732030404.940:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.6.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  196.307204][ T7258] ntfs: (device loop5): ntfs_fill_super(): Failed to load essential metadata.
[  196.444640][ T4215] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  196.478912][ T4215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.505968][ T4215] usb 3-1: Product: syz
[  196.513007][ T7275] tmpfs: Unknown parameter 'uid‘cP}9oûž]½pºÎ'
[  196.524589][ T4215] usb 3-1: Manufacturer: syz
[  196.529297][ T4215] usb 3-1: SerialNumber: syz
[  196.536982][ T7258] loop5: detected capacity change from 0 to 64
[  196.702859][ T4302] gs_usb 5-1:0.0: Couldn't get device config: (err=-71)
[  196.707354][ T7263] loop1: detected capacity change from 0 to 32768
[  196.717262][   T21] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.726739][ T4302] gs_usb: probe of 5-1:0.0 failed with error -71
[  196.752688][ T4302] usb 5-1: USB disconnect, device number 28
[  196.786000][ T7237] FAULT_INJECTION: forcing a failure.
[  196.786000][ T7237] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.811673][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.557'.
[  196.824972][   T21] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  196.832120][ T7237] CPU: 0 PID: 7237 Comm: syz.2.555 Not tainted 5.15.173-syzkaller #0
[  196.842090][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  196.844330][   T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  196.852154][ T7237] Call Trace:
[  196.852167][ T7237]  <TASK>
[  196.852176][ T7237]  dump_stack_lvl+0x1e3/0x2d0
[  196.852208][ T7237]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  196.876711][ T7237]  ? panic+0x860/0x860
[  196.880815][ T7237]  ? snprintf+0xd6/0x120
[  196.885059][ T7237]  should_fail+0x38a/0x4c0
[  196.889485][ T7237]  _copy_to_user+0x2d/0x130
[  196.893989][ T7237]  simple_read_from_buffer+0xc6/0x150
[  196.899368][ T7237]  proc_fail_nth_read+0x1a3/0x210
[  196.904395][ T7237]  ? proc_fault_inject_write+0x390/0x390
[  196.910030][ T7237]  ? fsnotify_perm+0x442/0x590
[  196.914887][ T7237]  ? proc_fault_inject_write+0x390/0x390
[  196.920890][ T7237]  vfs_read+0x2fc/0xe10
[  196.925069][ T7237]  ? kernel_read+0x1f0/0x1f0
[  196.929668][ T7237]  ? __fget_files+0x413/0x480
[  196.934352][ T7237]  ? mutex_lock_nested+0x17/0x20
[  196.939295][ T7237]  ? __fdget_pos+0x2cb/0x380
[  196.944145][ T7237]  ? ksys_read+0x77/0x2c0
[  196.948481][ T7237]  ksys_read+0x1a2/0x2c0
[  196.952727][ T7237]  ? print_irqtrace_events+0x210/0x210
[  196.958188][ T7237]  ? vfs_write+0xe50/0xe50
[  196.962606][ T7237]  ? syscall_enter_from_user_mode+0x2e/0x240
[  196.968585][ T7237]  ? lockdep_hardirqs_on+0x94/0x130
[  196.973790][ T7237]  ? syscall_enter_from_user_mode+0x2e/0x240
[  196.979770][ T7237]  do_syscall_64+0x3b/0xb0
[  196.984191][ T7237]  ? clear_bhb_loop+0x15/0x70
[  196.988864][ T7237]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  196.994756][ T7237] RIP: 0033:0x7fe1344c619c
[  196.999173][ T7237] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  197.019481][ T7237] RSP: 002b:00007fe13293f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  197.027894][ T7237] RAX: ffffffffffffffda RBX: 00007fe13467ef80 RCX: 00007fe1344c619c
[  197.035884][ T7237] RDX: 000000000000000f RSI: 00007fe13293f0a0 RDI: 0000000000000004
[  197.043850][ T7237] RBP: 00007fe13293f090 R08: 0000000000000000 R09: 0000000000000000
[  197.052100][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.060098][ T7237] R13: 0000000000000000 R14: 00007fe13467ef80 R15: 00007ffc60ee7078
[  197.068093][ T7237]  </TASK>
[  197.071135][    C0] vkms_vblank_simulate: vblank timer overrun
[  197.091344][   T21] usb 7-1: SerialNumber: syz
[  197.178149][ T4215] cdc_ncm 3-1:1.0: bind() failure
[  197.218534][ T4215] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  197.471232][ T4215] cdc_ncm 3-1:1.1: bind() failure
[  197.716901][ T7294] loop4: detected capacity change from 0 to 1024
[  197.923668][ T7294] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  198.021029][ T7294] hfsplus: filesystem is marked journaled, leaving read-only.
[  198.105538][   T21] cdc_ether 7-1:1.0: skipping garbage
[  198.306151][ T4215] usb 3-1: USB disconnect, device number 28
[  198.324418][   T21] usb 7-1: bad CDC descriptors
[  198.486955][ T4418] usb 7-1: USB disconnect, device number 6
[  199.552206][ T7311] loop5: detected capacity change from 0 to 2048
[  200.146006][ T7311] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  200.177190][ T7311] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.409129][ T7308] loop2: detected capacity change from 0 to 32768
[  201.504142][ T7314] loop6: detected capacity change from 0 to 32768
[  201.551082][ T7308] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.564 (7308)
[  201.612605][ T7314] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by syz.6.566 (7314)
[  201.646154][ T7308] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  201.684453][ T4215] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  201.685410][ T7308] BTRFS info (device loop2): using free space tree
[  201.744355][ T7308] BTRFS info (device loop2): has skinny extents
[  201.937332][ T7308] BTRFS info (device loop2): enabling ssd optimizations
[  202.059612][ T4215] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  202.089217][ T4215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.157499][ T4215] usb 5-1: config 0 descriptor??
[  203.754483][   T26] kauditd_printk_skb: 49 callbacks suppressed
[  203.754527][   T26] audit: type=1326 audit(1732030412.690:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d40fd759 code=0x7ffc0000
[  203.807487][ T7386] tmpfs: Unknown parameter 'uid‘cP}9oûž]½pºÎ'
[  204.060553][   T26] audit: type=1326 audit(1732030412.730:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d40fd759 code=0x7ffc0000
[  204.113102][   T26] audit: type=1326 audit(1732030412.910:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f93d40fd759 code=0x7ffc0000
[  204.135344][    C0] vkms_vblank_simulate: vblank timer overrun
[  204.256048][   T26] audit: type=1326 audit(1732030412.910:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d40fd759 code=0x7ffc0000
[  204.605148][ T4215] gs_usb 5-1:0.0: Couldn't get device config: (err=-71)
[  204.612520][ T4215] gs_usb: probe of 5-1:0.0 failed with error -71
[  204.894649][ T4413] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  205.052301][   T26] audit: type=1326 audit(1732030412.910:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d40fd759 code=0x7ffc0000
[  205.168881][ T4215] usb 5-1: USB disconnect, device number 29
[  205.179988][   T26] audit: type=1326 audit(1732030412.990:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93d40fd759 code=0x7ffc0000
[  205.202349][    C0] vkms_vblank_simulate: vblank timer overrun
[  205.214250][   T26] audit: type=1326 audit(1732030412.990:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d40fd759 code=0x7ffc0000
[  205.236618][    C0] vkms_vblank_simulate: vblank timer overrun
[  205.259913][   T26] audit: type=1326 audit(1732030412.990:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d40fd759 code=0x7ffc0000
[  205.299707][   T26] audit: type=1326 audit(1732030412.990:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93d40fc0f0 code=0x7ffc0000
[  205.321973][    C0] vkms_vblank_simulate: vblank timer overrun
[  205.374923][ T4413] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.385719][   T26] audit: type=1326 audit(1732030412.990:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.1.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93d40fd35b code=0x7ffc0000
[  205.494633][ T4413] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  205.524438][ T4413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  205.532471][ T4413] usb 2-1: SerialNumber: syz
[  205.581460][ T7419] loop2: detected capacity change from 0 to 1764
[  205.645711][ T4413] cdc_ether 2-1:1.0: skipping garbage
[  205.651251][ T4413] usb 2-1: bad CDC descriptors
[  205.881525][ T4215] usb 2-1: USB disconnect, device number 17
[  205.990011][ T4413] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  206.010450][ T7409] loop4: detected capacity change from 0 to 8
[  206.222222][ T7417] loop5: detected capacity change from 0 to 32768
[  206.271853][ T7417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.585 (7417)
[  206.315002][ T7418] loop6: detected capacity change from 0 to 32768
[  206.339027][ T7417] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  206.368502][ T7417] BTRFS info (device loop5): using free space tree
[  206.388732][ T7417] BTRFS info (device loop5): has skinny extents
[  206.398091][ T7418] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by syz.6.586 (7418)
[  206.414457][ T4413] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  206.435136][ T4413] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.459551][ T4276] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by udevd (4276)
[  206.474526][ T4413] usb 3-1: config 0 has no interface number 0
[  206.481013][ T4413] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  206.521199][ T4413] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  206.564375][ T4413] usb 3-1: config 0 interface 52 has no altsetting 0
[  206.754616][ T4413] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  206.788499][ T4413] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  206.806258][ T4413] usb 3-1: Product: syz
[  206.810833][ T4413] usb 3-1: Manufacturer: syz
[  206.817353][ T4413] usb 3-1: SerialNumber: syz
[  206.879992][ T4413] usb 3-1: config 0 descriptor??
[  207.306375][ T4413] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input9
[  207.344768][ T7417] BTRFS info (device loop5): enabling ssd optimizations
[  207.535456][ T4413] usb 3-1: USB disconnect, device number 29
[  208.534912][ T7459] FAULT_INJECTION: forcing a failure.
[  208.534912][ T7459] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.602645][ T7459] CPU: 0 PID: 7459 Comm: syz.5.589 Not tainted 5.15.173-syzkaller #0
[  208.610747][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  208.620812][ T7459] Call Trace:
[  208.624086][ T7459]  <TASK>
[  208.627016][ T7459]  dump_stack_lvl+0x1e3/0x2d0
[  208.631715][ T7459]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  208.637366][ T7459]  ? panic+0x860/0x860
[  208.641462][ T7459]  ? __lock_acquire+0x1ff0/0x1ff0
[  208.646507][ T7459]  should_fail+0x38a/0x4c0
[  208.650949][ T7459]  _copy_from_iter+0x243/0xe90
[  208.655733][ T7459]  ? __lock_acquire+0x1ff0/0x1ff0
[  208.660775][ T7459]  ? copy_mc_pipe_to_iter+0x760/0x760
[  208.666163][ T7459]  ? __virt_addr_valid+0x3bb/0x460
[  208.671282][ T7459]  ? __phys_addr_symbol+0x2b/0x70
[  208.676311][ T7459]  ? 0xffffffff81000000
[  208.680472][ T7459]  ? __check_object_size+0x300/0x410
[  208.685785][ T7459]  skb_copy_datagram_from_iter+0xef/0x6b0
[  208.691531][ T7459]  tun_get_user+0x15a7/0x40f0
[  208.696235][ T7459]  ? tun_ring_recv+0xcc0/0xcc0
[  208.701016][ T7459]  ? rcu_lock_release+0x5/0x20
[  208.705817][ T7459]  tun_chr_write_iter+0x10c/0x1e0
[  208.710866][ T7459]  vfs_write+0xacd/0xe50
[  208.715133][ T7459]  ? file_end_write+0x250/0x250
[  208.720005][ T7459]  ? __fget_files+0x413/0x480
[  208.724706][ T7459]  ? __fdget_pos+0x1e9/0x380
[  208.729308][ T7459]  ? ksys_write+0x77/0x2c0
[  208.733741][ T7459]  ksys_write+0x1a2/0x2c0
[  208.738174][ T7459]  ? print_irqtrace_events+0x210/0x210
[  208.743648][ T7459]  ? __ia32_sys_read+0x80/0x80
[  208.748430][ T7459]  ? syscall_enter_from_user_mode+0x2e/0x240
[  208.754441][ T7459]  ? lockdep_hardirqs_on+0x94/0x130
[  208.759658][ T7459]  ? syscall_enter_from_user_mode+0x2e/0x240
[  208.765659][ T7459]  do_syscall_64+0x3b/0xb0
[  208.770086][ T7459]  ? clear_bhb_loop+0x15/0x70
[  208.774776][ T7459]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  208.780773][ T7459] RIP: 0033:0x7f42190e6759
[  208.785201][ T7459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.804814][ T7459] RSP: 002b:00007f421753d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  208.813249][ T7459] RAX: ffffffffffffffda RBX: 00007f421929e058 RCX: 00007f42190e6759
[  208.821231][ T7459] RDX: 000000000000fdef RSI: 0000000020000440 RDI: 0000000000000003
[  208.829216][ T7459] RBP: 00007f421753d090 R08: 0000000000000000 R09: 0000000000000000
[  208.837198][ T7459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.845401][ T7459] R13: 0000000000000001 R14: 00007f421929e058 R15: 00007fffee90bed8
[  208.853405][ T7459]  </TASK>
[  208.856523][    C0] vkms_vblank_simulate: vblank timer overrun
[  208.934429][ T4171] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  209.143653][ T4301] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  209.345280][ T4301] usb 5-1: device descriptor read/64, error -71
[  209.495264][ T4171] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  209.566394][ T4171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.624482][ T4301] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  209.717382][ T7468] FAULT_INJECTION: forcing a failure.
[  209.717382][ T7468] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  209.788438][ T4171] usb 3-1: config 0 descriptor??
[  209.844408][ T4301] usb 5-1: device descriptor read/64, error -71
[  209.884148][ T7468] CPU: 0 PID: 7468 Comm: syz.5.595 Not tainted 5.15.173-syzkaller #0
[  209.892349][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  209.902418][ T7468] Call Trace:
[  209.905754][ T7468]  <TASK>
[  209.908688][ T7468]  dump_stack_lvl+0x1e3/0x2d0
[  209.913390][ T7468]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  209.919074][ T7468]  ? panic+0x860/0x860
[  209.923156][ T7468]  ? __lock_acquire+0x1295/0x1ff0
[  209.928194][ T7468]  ? __lock_acquire+0x1ff0/0x1ff0
[  209.933327][ T7468]  should_fail+0x38a/0x4c0
[  209.937765][ T7468]  fpu__restore_sig+0x1e0/0x1100
[  209.942727][ T7468]  ? copy_fpstate_to_sigframe+0xb40/0xb40
[  209.948472][ T7468]  ? __might_fault+0xb4/0x110
[  209.953168][ T7468]  restore_sigcontext+0x638/0x710
[  209.958213][ T7468]  ? __do_compat_sys_x32_rt_sigreturn+0x250/0x250
[  209.964662][ T7468]  ? set_current_blocked+0x40/0x40
[  209.969791][ T7468]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  209.975456][ T7468]  ? lockdep_hardirqs_on+0x94/0x130
[  209.980680][ T7468]  __do_sys_rt_sigreturn+0x190/0x250
[  209.985986][ T7468]  ? x32_copy_siginfo_to_user+0x270/0x270
[  209.991743][ T7468]  ? syscall_enter_from_user_mode+0x37/0x240
[  209.997738][ T7468]  ? syscall_enter_from_user_mode+0x2e/0x240
[  210.003738][ T7468]  do_syscall_64+0x3b/0xb0
[  210.008163][ T7468]  ? clear_bhb_loop+0x15/0x70
[  210.012846][ T7468]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  210.018750][ T7468] RIP: 0033:0x7f42190e6759
[  210.023175][ T7468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.042799][ T7468] RSP: 002b:00007f421755e038 EFLAGS: 00000246
[  210.048879][ T7468] RAX: 0000000000000000 RBX: 00007f421929df80 RCX: 00007f42190e6759
[  210.056860][ T7468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  210.064835][ T7468] RBP: 00007f421755e090 R08: 0000000000000000 R09: 0000000000000000
[  210.072810][ T7468] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  210.080787][ T7468] R13: 0000000000000000 R14: 00007f421929df80 R15: 00007fffee90bed8
[  210.088791][ T7468]  </TASK>
[  210.091936][    C0] vkms_vblank_simulate: vblank timer overrun
[  210.114792][   T26] kauditd_printk_skb: 19 callbacks suppressed
[  210.114807][   T26] audit: type=1326 audit(1732030419.130:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  210.146162][ T4301] usb usb5-port1: attempt power cycle
[  210.184597][   T26] audit: type=1326 audit(1732030419.130:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  210.235475][   T26] audit: type=1326 audit(1732030419.130:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  210.269579][   T26] audit: type=1326 audit(1732030419.130:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  210.297267][   T26] audit: type=1326 audit(1732030419.130:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  210.309049][ T7479] overlayfs: failed to get index nlink (file2/file1, err=-61)
[  210.330912][   T26] audit: type=1326 audit(1732030419.130:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  210.365253][   T26] audit: type=1326 audit(1732030419.130:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  210.393981][   T26] audit: type=1326 audit(1732030419.130:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  210.424401][ T4616] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  210.433780][ T7475] loop1: detected capacity change from 0 to 32768
[  210.440649][   T26] audit: type=1326 audit(1732030419.130:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  210.483760][   T26] audit: type=1326 audit(1732030419.130:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.6.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc888a759 code=0x7ffc0000
[  210.521033][ T7475] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.597 (7475)
[  210.564404][ T4301] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  210.624725][ T7475] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  210.649941][ T7487] tmpfs: Unknown parameter 'uid‘cP}9oûž]½pºÎ'
[  210.656563][ T4301] usb 5-1: device descriptor read/8, error -71
[  210.671844][ T7475] BTRFS info (device loop1): using free space tree
[  210.680096][ T7475] BTRFS info (device loop1): has skinny extents
[  210.744618][ T4171] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  210.784741][ T4616] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.875470][ T4616] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.884885][ T4616] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  210.892509][ T7475] BTRFS info (device loop1): enabling ssd optimizations
[  210.893020][ T4616] usb 7-1: SerialNumber: syz
[  210.924454][ T4301] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  210.980404][ T4616] cdc_ether 7-1:1.0: skipping garbage
[  211.012216][ T4616] usb 7-1: bad CDC descriptors
[  211.024691][ T4301] usb 5-1: device descriptor read/8, error -71
[  211.146561][ T4301] usb usb5-port1: unable to enumerate USB device
[  211.204429][ T4215] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  211.444803][ T4215] usb 6-1: Using ep0 maxpacket: 8
[  211.588017][ T4215] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.616968][ T4215] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.653919][ T4215] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  211.673944][ T4215] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  211.708275][ T4215] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  212.804341][ T4215] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  212.828531][ T4304] usb 7-1: USB disconnect, device number 7
[  212.945412][ T3836] gs_usb 3-1:0.0 can0: bit-timing not yet defined
[  213.177064][ T4212] usb 3-1: USB disconnect, device number 30
[  213.214658][ T4215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  213.234171][ T4215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.244423][ T4215] usb 6-1: Product: syz
[  213.248616][ T4215] usb 6-1: Manufacturer: syz
[  213.253251][ T4215] usb 6-1: SerialNumber: syz
[  213.531618][ T7550] device syzkaller0 entered promiscuous mode
[  213.534572][ T4215] cdc_ncm 6-1:1.0: bind() failure
[  213.556086][ T4215] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  213.562911][ T4215] cdc_ncm 6-1:1.1: bind() failure
[  213.584446][ T1107] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  213.834185][ T4215] usb 6-1: USB disconnect, device number 8
[  213.975236][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  214.181377][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.271768][ T1107] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  214.313621][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.385876][ T1107] usb 5-1: config 0 descriptor??
[  214.449677][ T7570] device syzkaller0 entered promiscuous mode
[  214.800467][ T7581] loop1: detected capacity change from 0 to 1024
[  214.918910][ T7581] hfsplus: xattr searching failed
[  215.026251][ T7567] loop5: detected capacity change from 0 to 32768
[  215.104463][ T4418] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  215.129263][   T26] kauditd_printk_skb: 65 callbacks suppressed
[  215.129282][   T26] audit: type=1326 audit(1732030424.150:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc888a35b code=0x7ffc0000
[  215.144485][ T4617] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  215.176713][ T7567] ERROR: (device loop5): diWrite: ixpxd invalid
[  215.176713][ T7567] 
[  215.188839][   T26] audit: type=1326 audit(1732030424.190:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc888a35b code=0x7ffc0000
[  215.200391][ T7567] ERROR: (device loop5): remounting filesystem as read-only
[  215.228002][ T4212] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  215.238100][ T7567] ERROR: (device loop5): txCommit: 
[  215.238100][ T7567] 
[  215.292601][ T7567] netlink: 64 bytes leftover after parsing attributes in process `syz.5.612'.
[  215.343880][  T276] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  215.358624][  T276] ------------[ cut here ]------------
[  215.364179][  T276] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  215.376234][  T276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  215.382324][  T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted 5.15.173-syzkaller #0
[  215.390313][  T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  215.400374][  T276] RIP: 0010:txUnlock+0xc6e/0xca0
[  215.405330][  T276] Code: 58 ac 4c 07 0f 0b e8 21 dd 99 fe 48 c7 c7 80 7c c1 8a 48 c7 c6 79 78 c1 8a ba a3 03 00 00 48 c7 c1 40 87 c1 8a e8 32 ac 4c 07 <0f> 0b e8 fb dc 99 fe 48 c7 c7 80 7c c1 8a 48 c7 c6 79 78 c1 8a ba
[  215.425114][  T276] RSP: 0018:ffffc90002c97d08 EFLAGS: 00010246
[  215.431191][  T276] RAX: 0000000000000037 RBX: 0000000000000000 RCX: c5d84e2b83ac1800
[  215.439177][  T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  215.440585][   T26] audit: type=1326 audit(1732030424.460:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc888a35b code=0x7ffc0000
[  215.447169][  T276] RBP: ffff88801a387ba0 R08: ffffffff81669a1c R09: ffffed10172067a8
[  215.447187][  T276] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807bd39000
[  215.447202][  T276] R13: ffff88807a482694 R14: ffffc9000280a000 R15: dffffc0000000000
[  215.447218][  T276] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  215.447236][  T276] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  215.447250][  T276] CR2: 00007fffee90afa8 CR3: 0000000077b58000 CR4: 00000000003526f0
[  215.447269][  T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  215.447283][  T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  215.447296][  T276] Call Trace:
[  215.447303][  T276]  <TASK>
[  215.447311][  T276]  ? __die_body+0x5e/0xa0
[  215.447336][  T276]  ? die+0x83/0xb0
[  215.447356][  T276]  ? do_trap+0x11e/0x350
[  215.447379][  T276]  ? txUnlock+0xc6e/0xca0
[  215.494892][   T26] audit: type=1326 audit(1732030424.520:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc888a35b code=0x7ffc0000
[  215.502447][  T276]  ? txUnlock+0xc6e/0xca0
[  215.502477][  T276]  ? do_error_trap+0x13d/0x1e0
[  215.547319][   T26] audit: type=1326 audit(1732030424.570:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc888a35b code=0x7ffc0000
[  215.551471][  T276]  ? txUnlock+0xc6e/0xca0
[  215.551503][  T276]  ? do_int3+0x30/0x30
[  215.597554][   T26] audit: type=1326 audit(1732030424.620:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc888a35b code=0x7ffc0000
[  215.609122][  T276]  ? rcu_is_watching+0x11/0xa0
[  215.609154][  T276]  ? handle_invalid_op+0x2c/0x40
[  215.645487][   T26] audit: type=1326 audit(1732030424.670:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc888a35b code=0x7ffc0000
[  215.649307][  T276]  ? txUnlock+0xc6e/0xca0
[  215.649338][  T276]  ? exc_invalid_op+0x2f/0x40
[  215.649361][  T276]  ? asm_exc_invalid_op+0x16/0x20
[  215.649387][  T276]  ? __wake_up_klogd+0xcc/0x100
[  215.649409][  T276]  ? txUnlock+0xc6e/0xca0
[  215.649431][  T276]  ? txUnlock+0xc6e/0xca0
[  215.649457][  T276]  ? lockdep_hardirqs_on+0x94/0x130
[  215.649480][  T276]  jfs_lazycommit+0x5cd/0xc30
[  215.649498][  T276]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  215.707350][ T4418] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.708950][  T276]  ? lockdep_hardirqs_on+0x94/0x130
[  215.715180][   T26] audit: type=1326 audit(1732030424.730:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc888a35b code=0x7ffc0000
[  215.724881][  T276]  ? txFreelock+0x580/0x580
[  215.724906][  T276]  ? sched_dynamic_update+0x240/0x240
[  215.754943][   T26] audit: type=1326 audit(1732030424.780:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc888a35b code=0x7ffc0000
[  215.756787][  T276]  kthread+0x3f6/0x4f0
[  215.788322][  T276]  ? txFreelock+0x580/0x580
[  215.792841][  T276]  ? kthread_blkcg+0xd0/0xd0
[  215.797432][  T276]  ret_from_fork+0x1f/0x30
[  215.801938][  T276]  </TASK>
[  215.804948][  T276] Modules linked in:
[  215.808925][    C0] vkms_vblank_simulate: vblank timer overrun
[  215.809405][   T26] audit: type=1326 audit(1732030424.830:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.6.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc888a35b code=0x7ffc0000
[  215.821534][  T276] ---[ end trace d03da864213b463e ]---
[  215.840779][ T4212] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  215.842962][  T276] RIP: 0010:txUnlock+0xc6e/0xca0
[  215.859537][  T276] Code: 58 ac 4c 07 0f 0b e8 21 dd 99 fe 48 c7 c7 80 7c c1 8a 48 c7 c6 79 78 c1 8a ba a3 03 00 00 48 c7 c1 40 87 c1 8a e8 32 ac 4c 07 <0f> 0b e8 fb dc 99 fe 48 c7 c7 80 7c c1 8a 48 c7 c6 79 78 c1 8a ba
[  215.861919][ T4212] usb 2-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00
[  215.882109][  T276] RSP: 0018:ffffc90002c97d08 EFLAGS: 00010246
[  215.888991][ T4418] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  215.897628][  T276] RAX: 0000000000000037 RBX: 0000000000000000 RCX: c5d84e2b83ac1800
[  215.912125][  T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  215.913689][ T4418] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  215.923141][  T276] RBP: ffff88801a387ba0 R08: ffffffff81669a1c R09: ffffed10172067a8
[  215.935702][ T4418] usb 7-1: SerialNumber: syz
[  215.941006][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.948701][  T276] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807bd39000
[  215.960409][  T276] R13: ffff88807a482694 R14: ffffc9000280a000 R15: dffffc0000000000
[  215.984165][  T276] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  215.995740][ T4418] cdc_ether 7-1:1.0: skipping garbage
[  215.995760][ T4617] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  216.010138][ T4418] usb 7-1: bad CDC descriptors
[  216.019274][ T4212] snd-usb-audio: probe of 2-1:27.0 failed with error -22
[  216.019685][  T276] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  216.033596][ T4617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.044244][ T1107] usbhid 5-1:0.0: can't add hid device: -71
[  216.050832][ T1107] usbhid: probe of 5-1:0.0 failed with error -71
[  216.060688][  T276] CR2: 00007fe6eb9f7ab8 CR3: 000000002af26000 CR4: 00000000003526f0
[  216.071197][ T4617] usb 3-1: config 0 descriptor??
[  216.072722][ T4563] udevd[4563]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  216.090353][ T1107] usb 5-1: USB disconnect, device number 34
[  216.098475][  T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  216.109046][  T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  216.118935][  T276] Kernel panic - not syncing: Fatal exception
[  216.125098][  T276] Kernel Offset: disabled
[  216.129426][  T276] Rebooting in 86400 seconds..