last executing test programs:

3m24.776175473s ago: executing program 1 (id=171):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
socket(0x25, 0x5, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0xf0f002, 0x6})
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000})
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0205838, &(0x7f00000001c0)={0x4, 0x0, 0x8000, 0x7206, 0x1, 0xfffe})
syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a", @ANYRES16], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e7780)

3m21.47698246s ago: executing program 1 (id=176):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$nl80211(0x0, r0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x21, 0x1e9, &(0x7f00000002c0)="$eJzs2k1rVFcYB/Bz05SkCXkppS3Jpoe2i3ZzabIsXSSUBEoHFM0IKkhuyESHGWfC3FnMiItZu/IjuBaX7gTJF8h3cOEuCNFVVl7R0bwRFyrJCPn9NvOHPwPn4cDhWdydf+7frm3k6UbWDkNJEoYWQi/sJWE6DIUPeuHP3/9+ee/y1Wv/L5ZKS5diXF5cmZuPMU7+8vT63Ue/brXHrzyefDIStqdv7OzOP9/+aXtm5/XKrWoeq3lsNNsxi2vNZjtbq1fiejWvpTFerFeyvBKrjbzSOtJv1Jubm92YNdYnxjZblTyPWaMba5VubDdju9WN2c2s2ohpmsaJscCXKD/cK4qwW3y7Goqi+O5BGN8KE8/CVEi+j8kPC8mPq8nPvWRmtyimBn1UToX7P98OPeqjIbzodcqdcv+33y//V1r6K74zffCvV51O+Zv9fq7fx6P9SBh738+f2I+GP37r92+7fy+UjvWzYf30xwcAOHfSuO/E/S5NP9b306H98Nj+Nhxmh89sDD5T3r1Ty+r1SksQBGE/DPpl4iwcXPqgTwIAAAAAAAAAAMCnOIvPCQc9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HV7EwAA///n0Xgk")
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x200, &(0x7f0000000140)=<r2=>0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3f, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}])

3m19.091578092s ago: executing program 1 (id=178):
mknod$loop(0x0, 0x208c, 0x1)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@hyper})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4019c9a7f40a1d17ab900000000a0b040000000000000000020000000600000010000180090001006d617371000000000900010073797a30000000000904020073797a3200000000140000001100010000000000"], 0x68}}, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e", 0xc}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd})

3m17.780065023s ago: executing program 1 (id=181):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000440)='./file1\x00', 0x208410, &(0x7f0000000540)=ANY=[], 0xf5, 0x5a91, &(0x7f0000000480)="$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")
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0x1000, 0x2, 0xb, 0x46af, 0x0, [{0x0, 0x6, 0x39, '\x00', 0x91}, {0xff, 0xf, 0xff, '\x00', 0x6}, {0x6, 0x6, 0x7, '\x00', 0x6}, {0xfa, 0x6, 0x5, '\x00', 0x3}, {0x9, 0xb, 0x7, '\x00', 0x1}, {0x2, 0x6, 0x7, '\x00', 0x18}, {0x3, 0x8, 0xa, '\x00', 0x8}, {0x37, 0x8, 0x23, '\x00', 0x1}, {0x8, 0x7, 0x1, '\x00', 0x2}, {0x38, 0x8e, 0x64, '\x00', 0xc9}, {0x31, 0x6a, 0x3}, {0xa, 0xb, 0x8, '\x00', 0x4}, {0xff, 0x9, 0x0, '\x00', 0x4}, {0x5, 0x4, 0x0, '\x00', 0xd}, {0x15, 0x8, 0x5, '\x00', 0x3}, {0x64, 0xe9, 0x1c, '\x00', 0x7}, {0x9, 0xd, 0x2, '\x00', 0x3}, {0xde, 0x5, 0x6, '\x00', 0x11}, {0xfd, 0xff, 0x5, '\x00', 0x40}, {0x9f, 0xd, 0x0, '\x00', 0xf9}, {0x7, 0x80, 0x4, '\x00', 0x5}, {0x6, 0x7f, 0xc, '\x00', 0x81}, {0x8, 0x6, 0x4, '\x00', 0x7}, {0x0, 0x1, 0x10, '\x00', 0x9}]}})

3m12.628130294s ago: executing program 1 (id=191):
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x80)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000000000000a004e2200000001ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000a009d8400000002fe8000000000000000000000000000bbc90d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000002fe8000000000000000000000000000bb02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e220000f2270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000009ff01000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24000080010000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000000500000000000000000000000000000001f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000aff010000000000000000000000000001"], 0x510)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m11.701687964s ago: executing program 1 (id=194):
socket$kcm(0x15, 0x5, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000640)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r1, 0x47bc, 0x20, 0x3e000000, 0x0, 0x0)

2m56.249246994s ago: executing program 32 (id=194):
socket$kcm(0x15, 0x5, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000640)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r1, 0x47bc, 0x20, 0x3e000000, 0x0, 0x0)

57.867888015s ago: executing program 5 (id=457):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x44}}, 0x0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={<r2=>0x0, <r3=>0x0}, &(0x7f00000003c0)=0xc)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYRES8=r2], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044)
syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r5)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000060c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000200)='%pS    \x00', 0x2}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r8}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x2000000000000081, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
setresuid(r3, r3, r3)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c020000", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf2501000000080001000200000008000200020000000800010000000000080002000200000008000100010000000800010001000000080002000200000008000200020000000800010003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x400c5}, 0x20000080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000880)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090212000142d8000a0904"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0})
ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000280))
syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x40000)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$BTRFS_IOC_ADD_DEV(r9, 0x5000940a, &(0x7f0000000b40)={{r0}, "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"})
sendmmsg$inet6(r10, &(0x7f0000000040)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x8}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000380)='3', 0x1}], 0x1}}], 0x1, 0x44191)
listen(r10, 0x100)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r10, 0x29, 0x37, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x8)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4(r10, 0x0, 0x0, 0x0)

52.338268506s ago: executing program 5 (id=469):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b8192300400000fe8000000000000000000000000000aafe8000000000000000000000000000aa89070000000000003136b04faa6f243a113a3fbf8e044fb9f8335c53a9f6bf5970cb6ec8ce2900ffba087c7de1a271084cad038ef0720635b93832241def"], 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r1}, 0x18)
r2 = socket(0x2c, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d80ff0008000200", @ANYRES16=r5, @ANYRES32=r7], 0x44}}, 0x0)
eventfd(0x800a6)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x9}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0xbcf}, 0xfffffffffffffcf4, 0x0)
ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"})
r10 = syz_open_pts(r9, 0x0)
dup3(r10, r9, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x12)
getsockopt$sock_buf(r11, 0x1, 0x1c, 0x0, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
socket(0x10, 0x80002, 0x0)

50.770750224s ago: executing program 5 (id=471):
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x9, 0x1a2, &(0x7f0000000000)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf)

49.73893965s ago: executing program 5 (id=474):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)=@known='user.syz\x00')
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@usrjquota}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c})
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4, 0x100000})
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x1, 0x9ab4, 0x8, 0x41, 0x7, "de5bbb43220fd975"})

47.999769981s ago: executing program 5 (id=479):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, 0x0)

47.096836973s ago: executing program 5 (id=482):
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
unshare(0x20000400)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
splice(r1, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x8, 0x0)
fchown(r0, 0x0, 0x0)
msgsnd(0x0, 0x0, 0x8, 0x800)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000)

42.485775459s ago: executing program 33 (id=482):
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
unshare(0x20000400)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
splice(r1, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x8, 0x0)
fchown(r0, 0x0, 0x0)
msgsnd(0x0, 0x0, 0x8, 0x800)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000)

15.317389334s ago: executing program 0 (id=535):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0xb, 0xa, "0f45aa72f622bcaee898"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5b}, &(0x7f0000000500)={0x20, 0x1, 0x6c, "83617d522872c2bc1e5d58bca1453f248a1d30970aa9f7a5080b715261c25a2c03c6374f1eeddefbc2caa9b5c543c7fdb72b77b7ab26422bcca123731f0345772f38dec0e04772f03b1450c9e72a3217c58fe4d308adb048c1a0d4ca048a37f944f058a18597cdbeace014ec"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x1}})
listen(0xffffffffffffffff, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

14.658963615s ago: executing program 2 (id=538):
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x9, 0x1a2, &(0x7f0000000000)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf)

12.944372236s ago: executing program 2 (id=541):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_drop_inode\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_drop_inode\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000240)={[{}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@block_validity}, {@errors_continue}, {@nombcache}, {@usrjquota}]}, 0x3, 0x446, &(0x7f0000000ec0)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQuFWp26AmSLSqICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dae2Z3nJmvd8ee2YkDGFjj6UMSsSsifo+I0Vq2scB47enm8uXZv5cvzyZRqbz5V1Itd2P58mxeNH/dzjwzFFH4NIkDLepduHgpLVG6kOUnF8+9N7lw8dKzZ87NnC6dLp2fPnHi2NGp549PP9eTONO4buz/cP7gvlffvvr67Mmr7/z8bZLH3xRHj4x3Ovh4pdLj6vqjkD3vrtuXDPWpMXStWOumMVzt/6NRjNWTNxqvfNLXxgGbqlKpVO5rf3ipAtzFkuh3C4D+yL/o0/lvvm3R0OOOcP3F2gQojftmttWODK3MbYeb5re9NB4RJ5f++SrdYnPuQwAANPg+Hf8802r8V4j6+0L/z9ZQxiLinojYExHHI2JvRNwbUS17f0Q80GX9zYska8c/hWsbCmyd0vHfC9naVuP4Lx/9xVgxy+2uxj+cnDpTLh3J3pPDMbwtzU91qOOHl3/7vN2x+vFfuqX152PBrB3XhrY1vmZuZnHmdmKud/3jiP1DreJPVlYCkojYFxH7N1jHmae+Odju2K3j76AH60yVryOeqJ3/pWiKP5d0Xp+c/F+US0cm86tirV9+vfJGu/pvK/4eSM//jpbX/0r8Y0ltvfbsTLlcurDQzV//8sn08cofn7Wd02z0+h9J3mrY98HM4uKFqYiR5LVao+v3TzeVm14tn8Z/+FDr/r8nVt+JAxGRXsQPRsRDEfFw1vZHIuLRiDjU4V346aXH3t14/JsrjX+uq/O/mhiJ5j2tE8WzP37XUOlYN/Gn5/9YNXU427Oez7/1tKvbqxkAAAD+qwoRsSuSwsRKulCYmKj9D//e2FEozy8sPn1q/v3zc7XfCIzFcCG/0zVadz90KpvW5/nppvzR7L7xF8Xt1fzE7Hx5rt/Bw4Db2ab/p/4s9rt1wKbzey0YXPo/DC79HwaX/g+Dq0X/396PdgBbr9X3/0d9aAew9Zr6v2U/GCDm/zC4NtL/fWbA3aFjXx7ZunYAW2phe9z6R/ISEmsSUbgjmiGxSYl+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xr8BAAD//4kK5gE=")

10.811280703s ago: executing program 2 (id=546):
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x2}, 0x8)
mmap(&(0x7f0000ad3000/0x2000)=nil, 0x2000, 0x2000009, 0x3032, 0xffffffffffffffff, 0x3000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000090}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/rt_acct\x00')
ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000340)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@bcast, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r4]}, 0x94)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000898500000071000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003cc0)=""/4081, 0xc26bfe8e8f6baca8}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='rpc_stats_latency\x00', r7, 0x0, 0xbba2}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x34}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r6}, 0x8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r10], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1, 0x7ff}, 0x28)

10.473858573s ago: executing program 0 (id=549):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000300)=""/56, 0x38}, {&(0x7f0000000340)=""/35, 0x23}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000700)=""/139, 0x8b}, {&(0x7f00000007c0)=""/91, 0x5b}], 0x66, 0x9, 0x7)

9.895570327s ago: executing program 4 (id=550):
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000f11fac5b600346a3cf2dc67c5bf96eefd90802c528f84db5e3fc53e166dfc62a0d50ae803645e5d16182a2681f3849384200268bfa5c4991d8ef3c2679ce26a969c0d9046f3f64ca6999c39077bd2c8cd6cab448c9c880591bb4e20c350915203da8e126912d9df6847dee13e1c99fe1999a7b66331fd2447fc60d6e06e2ce393943ae07f22346d6901708f493c5ec64ff21318445692e7c4cbd1c3360a1c9c69c3c57c988c1be650748e46bebd0763aa5cfb62ae68c6f908897d422d607cb65e839037ce40e454621c4890a7c30e256743482503efa45da94b89b1d2e078021f4a898561f56659c12ed92ada36baa5f86f44d5546688f6b9e5fc5"], 0x9, 0x1a2, &(0x7f0000000000)="$eJzs0L9r1GAcx/H390nul1DlVBwq2AOLMUe1yVUdnA6nEy7g4CJ46HGNvWKqXHODLS10kYJU+y/oIHVUQScR/QeKg+CgcekmvaE4iIOcJPdU8G/o84Lkk+8Hknx5unEvLgB/9lY61MlYHOYTgg1MyKhTapRv9fxD5+YouKLnDZ0vdI7HS8t321EULlYuVyj/VwA/s+5fFb/ihKIk1JEveyudttwOGNZZULMB5SbVx1gteu4Txu0xjt/CYuhscFXRE6cJR6b7RabjpeVz8wvtuXAuvFerzVzyLnjexXT/KPTeIO4jUTxlFTegEFByV8m1eLhtH2JKELerEkuqA/ItNrets6enBih3lyHCB2dA4ZvdrajrnKF4M12+wTHhGVbAZJOSwubOfBR6DeSaei2+/dn+lVMU1yzrfOd+NLt+Q8nv/FZddovi75BzfGpVn5n0aDjKR9YTJhMaCVsJO9+ZkHfpX/bP1V5L7y/1dJJTPM/zoN3vL/o5QJyAWnqVYSz7nMr2KsN7/Y4Ovu4/GIZhGIZhGIZhGAfA3wAAAP//qqZhEQ==")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf)

9.083248303s ago: executing program 4 (id=551):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
syz_mount_image$hpfs(&(0x7f0000009e80), &(0x7f0000009e40)='./file0\x00', 0x41, &(0x7f0000000040)={[{@err_cont}, {@check_strict}, {@err_cont}]}, 0x1, 0x9e0b, &(0x7f0000009fc0)="$eJwsk2MX34fjLFOntm1jatu2bdtT9/uxkdq2G9W2bbepjZT3/M797wvYB7szdw9w+ABHDHDkAEcNcPQA7xngvQO8b4D3D/CBAT44wIcG+PAAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAY4Z4JcD/GqAXw/wmwF+O8DvBvj9AH8Y4I8D/GmAPw/wlwH+OsDfBvj7AP8Y4NgB/jnAvwb49wD/GeC/A/xvgEMCHCfAcQMcL8DxA5wgwAkDnCjAoQFOHOAkAU4a4GQBTh7gFAFOGeBUAU4d4DQBThvgdAFOH+AMAc4Y4EwBzhzgLAHOGuBsAc4e4BwBzhngXAHOHeA8Ac4b4HwBzh/gAgEuGOBCAS4c4CIBLhrgYgEuHuASAS4Z4FIBEuDSAS4T4LIBLhfg8gGuEOCKAa4U4MoBrhLgqgGuFuDqAa4R4JoBrhXg2gGuE+C6Aa4X4PoBbhDghgFuFODGAW4S4KYBbhbg5gFuEeCWAW4V4NYBbhPgtgFuF+D2Ae4Q4I4B7hTgzgHuEuCuAe4W4O4B7hHgngHuFeDeAe4T4L4B7hfg/gEeEOCBAR4U4MEBHhLgoQEeFuDhAR4R4JEBHhXg0QEeE+CxAR4X4PEBnhDgiQGeFODJARrgKQGeGuBpAZ4e4BkBnhngWQGeHeAgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AYQGeE+C5AZ4X4PkBXhDghQFeFODFAV4S4KUBXhbg5QFeEeCVAV4V4NUBXhPgtQFeF+D1Ad4Q4I0B3hTgzQHeEuCtAd4W4O0B3hHgnQHeFeDdAQ4PcESAIwMcFeDoAO8J8N4A7wvw/gAfCPDBAB8K8OEAHwnw0QAfC/DxAJ8I8MkAnwrw6QCfCfDZAJ8L8PkAXwjwxQBfCvDlAF8J8NUAXwvw9QDfCPDNAN8K8O0A3wnw3QDfC/D9AD8I8MMAPwrw4wA/CfDTAD8L8PMAvwhwTIBfBvhVgF8H+E2A3wb4XYDfB/hDgD8G+FOAPwf4S4C/BvhbgL8H+EeAYwP8M8C/Avw7wH8C/DfA/wIcEuI4IY4b4nghjh/iBCFOGOJEIQ4NceIQJwlx0hAnC3HyEKcIccoQpwpx6hCnCXHaEKcLcfoQZwhxxhBnCnHmEGcJcdYQZwtx9hDnCHHOEOcKce4Q5wlx3hDnC3H+EBcIccEQFwpx4RAXCXHREBcLcfEQlwhxyRCXCpEQlw5xmRCXDXG5EJcPcYUQVwxxpRBXDnGVEFcNcbUQVw9xjRDXDHGtENcOcZ0Q1w1xvRDXD3GDEDcMcaMQNw5xkxA3DXGzEDcPcYsQtwxxqxC3DnGbELcNcbsQtw9xhxB3DHGnEHcOcZcQdw1xtxB3D3GPEPcMca8Q9w5xnxD3DXG/EPcP8YAQDwzxoBAPDvGQEA8N8bAQDw/xiBCPDPGoEI8O8ZgQjw3xuBCPD/GEEE8M8aQQTw7REE8J8dQQTwvx9BDPCPHMEM8K8ewQByEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2IQ4L8ZwQzw3xvBDPD/GCEC8M8aIQLw7xkhAvDfGyEC8P8YoQrwzxqhCvDvGaEK8N8boQrw/xhhBvDPGmEG8O8ZYQbw3xthBvD/GOEO8M8a4Q7w5xeIgjQhwZ4qgQR4d4T4j3hnhfiPeH+ECID4b4UIgPh/hIiI+G+FiIj4f4RIhPhvhUiE+H+EyIz4b4XIjPh/hCiC+G+FKIL4f4SoivhvhaiK+H+EaIb4b4Vohvh/hOiO+G+F6I74f4QYgfhvhRiB+H+EmIn4b4WYifh/hFiGNC/DLEr0L8OsRvQvw2xO9C/D7EH0L8McSfQvw5xF9C/DXE30L8PcQ/Qhwb4p8h/hXi3yH+E+K/If4X4pAIx4lw3AjHi3D8CCeIcMIIJ4pwaIQTRzhJhJNGOFmEk0c4RYRTRjhVhFNHOE2E00Y4XYTTRzhDhDNGOFOEM0c4S4SzRjhbhLNHOEeEc0Y4V4RzRzhPhPNGOF+E80e4QIQLRrhQhAtHuEiEi0a4WISLR7hEhEtGuFSERLh0hMtEuGyEy0W4fIQrRLhihCtFuHKEq0S4aoSrRbh6hGtEuGaEa0W4doTrRLhuhOtFuH6EG0S4YYQbRbhxhJtEuGmEm0W4eYRbRLhlhFtFuHWE20S4bYTbRbh9hDtEuGOEO0W4c4S7RLhrhLtFuHuEe0S4Z4R7Rbh3hPtEuG+E+0W4f4QHRHhghAdFeHCEh0R4aISHRXh4hEdEeGSER0V4dITHRHhshMdFeHyEJ0R4YoQnRXhyhEZ4SoSnRnhahKdHeEaEZ0Z4VoRnRziIMIgwjDCKMI4wiTCNMIswj7CIsIywirCOsImwjbCLsI9wWITnRHhuhOdFeH6EF0R4YYQXRXhxhJdEeGmEl0V4eYRXRHhlhFdFeHWE10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4R3RXh3hMMjHBHhyAhHRTg6wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wicifDLCpyJ8OsJnInw2wucifD7CFyJ8McKXInw5wlcifDXC1yJ8PcI3InwzwrcifDvCdyJ8N8L3Inw/wg8i/DDCjyL8OMJPIvw0ws8i/DzCLyIcE+GXEX4V4dcRfhPhtxF+F+H3Ef4Q4Y8R/hThzxH+EuGvEf4W4e8R/hHh2Aj/jPCvCP+O8J8I/43wvwiHxDhOjOPGOF6M48c4QYwTxjhRjENjnDjGSWKcNMbJYpw8xilinDLGqWKcOsZpYpw2xulinD7GGWKcMcaZYpw5xllinDXG2WKcPcY5YpwzxrlinDvGeWKcN8b5Ypw/xgViXDDGhWJcOMZFYlw0xsViXDzGJWJcMsalYiTGpWNcJsZlY1wuxuVjXCHGFWNcKcaVY1wlxlVjXC3G1WNcI8Y1Y1wrxrVjXCfGdWNcL8b1Y9wgxg1j3CjGjWPcJMZNY9wsxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjPCnGk2M0xlNiPDXG02I8PcYzYjwzxrNiPDvGQYxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jMNiPCfGc2M8L8bzY7wgxgtjvCjGi2O8JMZLY7wsxstjvCLGK2O8KsarY7wmxmtjvC7G62O8IcYbY7wpxptjvCXGW2O8LcbbY7wjxjtjvCvGu2McHuOIGEfGOCrG0THeE+O9Md4X4/0xPhDjgzE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45gYv4zxqxi/jvGbGL+N8bsYv4/xhxh/jPGnGH+O8ZcYf43xtxh/j/GPGMfG+GeMf8X4d4z/xPhvjP/FOCTBcRIcN8HxEhw/wQkSnDDBiRIcmuDECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsp+NsCc6e4BwJzpngXAnOneA8Cc6b4HwJzp/gAgkumOBCCS6c4CIJLprgYgkunuASCS6Z4FIJkuDSCS6T4LIJLpfg8gmukOCKCa6U4MoJrpLgqgmuluDqCa6R4JoJrpXg2gmuk+C6Ca6X4PoJbpDghglulODGCW6S4KYJbpbg5glukeCWCW6V4NYJbpPgtglul+D2Ce6Q4I4J7pTgzgnukuCuCe6W4O4J7pHgngnuleDeCe6T4L4J7pfg/gkekOCBCR6U4MEJHpLgoQkeluDhCR6R4JEJHpXg0Qkek+CxCR6X4PEJnpDgiQmelODJCZrgKQmemuBpCZ6e4BkJnpngWQmeneAgwSDBMMEowTjBJME0wSzBPMEiwTLBKsE6wSbBNsEuwT7BYQmek+C5CZ6X4PkJXpDghQlelODFCV6S4KUJXpbg5QlekeCVCV6V4NUJXpPgtQlel+D1Cd6Q4I0J3pTgzQnekuCtCd6W4O0J3pHgnQneleDdCQ5PcESCIxMcleDoBO9J8N4E70vw/gQfSPDBBB9K8OEEH0nw0QQfS/DxBJ9I8MkEn0rw6QSfSfDZBJ9L8PkEX0jwxQRfSvDlBF9J8NUEX0vw9QTfSPDNBN9K8O0E30nw3QTfS/D9BD9I8MMEP0rw4wQ/SfDTBD9L8PMEv0hwTIJfJvhVgl8n+E2C3yb4XYLfJ/hDgj8m+FOCPyf4S4K/Jvhbgr8n+EeCYxP8M8G/Evw7wX8S/DfB/xIckuI4KY6b4ngpjp/iBClOmOJEKQ5NceIUJ0lx0hQnS3HyFKdIccoUp0px6hSnSXHaFKdLcfoUZ0hxxhRnSnHmFGdJcdYUZ0tx9hTnSHHOFOdKce4U50lx3hTnS3H+FBdIccEUF0px4RQXSXHRFBdLcfEUl0hxyRSXSpEUl05xmRSXTXG5FJdPcYUUV0xxpRRXTnGVFFdNcbUUV09xjRTXTHGtFNdOcZ0U101xvRTXT3GDFDdMcaMUN05xkxQ3TXGzFDdPcYsUt0xxqxS3TnGbFLdNcbsUt09xhxR3THGnFHdOcZcUd01xtxR3T3GPFPdMca8U905xnxT3TXG/FPdP8YAUD0zxoBQPTvGQFA9N8bAUD0/xiBSPTPGoFI9O8ZgUj03xuBSPT/GEFE9M8aQUT07RFE9J8dQUT0vx9BTPSPHMFM9K8ewUBykGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2KQ5L8ZwUz03xvBTPT/GCFC9M8aIUL07xkhQvTfGyFC9P8YoUr0zxqhSvTvGaFK9N8boUr0/xhhRvTPGmFG9O8ZYUb03xthRvT/GOFO9M8a4U705xeIojUhyZ4qgUR6d4T4r3pnhfiven+ECKD6b4UIoPp/hIio+m+FiKj6f4RIpPpvhUik+n+EyKz6b4XIrPp/hCii+m+FKKL6f4Soqvpvhaiq+n+EaKb6b4Vopvp/hOiu+m+F6K76f4QYofpvhRih+n+EmKn6b4WYqfp/hFimNS/DLFr1L8OsVvUvw2xe9S/D7FH1L8McWfUvw5xV9S/DXF31L8PcU/Uhyb4p8p/pXi3yn+k+K/Kf6X4pAMx8lw3AzHy3D8DCfIcMIMJ8pwaIYTZzhJhpNmOFmGk2c4RYZTZjhVhlNnOE2G02Y4XYbTZzhDhjNmOFOGM2c4S4azZjhbhrNnOEeGc2Y4V4ZzZzhPhvNmOF+G82e4QIYLZrhQhgtnuEiGi2a4WIaLZ7hEhktmuFSGZLh0hstkuGyGy2W4fIYrZLhihitluHKGq2S4aoarZbh6hmtkuGaGa2W4dobrZLhuhutluH6GG2S4YYYbZbhxhptkuGmGm2W4eYZbZLhlhltluHWG22S4bYbbZbh9hjtkuGOGO2W4c4a7ZLhrhrtluHuGe2S4Z4Z7Zbh3hvtkuG+G+2W4f4YHZHhghgdleHCGh2R4aIaHZXh4hkdkeGSGR2V4dIbHZHhshsdleHyGJ2R4YoYnZXhyhmZ4SoanZnhahqdneEaGZ2Z4VoZnZzjIMMgwzDDKMM4wyTDNMMswz7DIsMywyrDOsMmwzbDLsM9wWIbnZHhuhudleH6GF2R4YYYXZXhxhpdkeGmGl2V4eYZXZHhlhldleHWG12R4bYbXZXh9hjdkeGOGN2V4c4a3ZHhrhrdleHuGd2R4Z4Z3ZXh3hsMzHJHhyAxHZTg6w3syvDfD+zK8P8MHMnwww4cyfDjDRzJ8NMPHMnw8wycyfDLDpzJ8OsNnMnw2w+cyfD7DFzJ8McOXMnw5w1cyfDXD1zJ8PcM3Mnwzw7cyfDvDdzJ8N8P3Mnw/ww8y/DDDjzL8OMNPMvw0w88y/DzDLzIck+GXGX6V4dcZfpPhtxl+l+H3Gf6Q4Y8Z/pThzxn+kuGvGf6W4e8Z/pHh2Az/zPCvDP/O8J8M/83wvwyH5DhOjuPmOF6O4+c4QY4T5jhRjkNznDjHSXKcNMfJcpw8xylynDLHqXKcOsdpcpw2x+lynD7HGXKcMceZcpw5x1lynDXH2XKcPcc5cpwzx7lynDvHeXKcN8f5cpw/xwVyXDDHhXJcOMdFclw0x8VyXDzHJXJcMselciTHpXNcJsdlc1wux+VzXCHHFXNcKceVc1wlx1VzXC3H1XNcI8c1c1wrx7WHDhnyvy3WzXG9HNfPcYMcN8xxoxw3znGTHDfNcbMcN89xixy3zHGrnPGH/P+4bY7b5bh9jjvkuGOOO+W4c4675LhrjrvluHuOe+S4Z4575bh3jvvkuG+O++W4f44H5HhgjgfleHCOh+R4aI6H5Xh4jkfkeGSOR+V4dI7H5HhsjsfleHyOJ+R4Yo4n5XhyjuZ4So6n5nhajqfneEaOZ+Z4Vo5n5zjIMcgxzDHKMc4xyTHNMcsxz7HIscyxyrHOscmxzbHLsc9xWI7n5HhujufleH6OF+R4YY4X5XhxjpfkeGmOl+V4eY5X5HhljlfleHWO1+R4bY7X5Xh9jjfkeGOON+V4c4635HhrjrfleHuOd+R4Z453/e+vMcPGDs9xRI4jcxyV4+gc78nx3hzvy/H+HB/I8cEcH8rx4RwfyfHRHB/L8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yHFMjl/m+FWOX+f4TY7f5vhdjt/n+EOOP+b4U44/5/hLjr/m+FuOv+f4R45jc/wzx79y/DvHf3L8N8f/chxS4DgFjlvgeAWOX+AEBU5Y4EQFDi1w4gInKXDSAicrcPICpyhwygKnKnDqAqcpcNoCpytw+gJnKHDGAmcqcOYCZylw1gJnK3D2AucocM4C5ypw7gLnKXDeAucrcP4CFyhwwQIXKnDhAhcpcNECFytw8QKXKHDJApcqkAKXLnCZApctcKOZmrHLF7hCgSsWuFKBKxe4SoGrFrhagasXuEaBaxa4VoFrF7hOgesWuF6B6xe4QYEb/q+vwI0L3KTATQvcrMDNC9yiwC0L3KrArQvcpsBtC9yuwO0L3KHAHQvcqcCdC9ylwF0L3K3A3Qvco8A9C9yrwL0L3KfAfQvcr8D9CzygwAMLPKjAgws8pMBDCzyswMMLPKLAIws8qsCjCzymwGMLPK7A4ws8ocATCzypwJMLtMBTCjy1wNMKPL3AMwo8s8CzCjy7wEGBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYHDCjynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLHF7giAJHFjiqwNEF3lPgvQXeV+D9BT5Q4IMFPlTgwwU+UuCjBT5W4OMFPlHgkwU+VeDTBT5T4LMFPlfg8wW+UOCLBb5U4MsFvlLgqwW+VuDrBb5R4JsFvlXg2wW+U+C7Bb5X4PsFflDghwV+VODHBX5S4KcFflbg5wV+UeCYAr8s8KsCvy7wmwK/LfC7Ar8v8IcCfyzwpwJ/LvCX//P0twJ/L/CPAscW+GeBfxX4d4H/FPhvgf8VOKTEcUoct8TxShy/xAlKnLDEiUocWuLEJU5S4qQlTlbi5CVOUeKUJU5V4tQlTlPitCVOV+L0Jc5Q4owlzlTizCXOUuKsJc5W4uwlzlHinCXOVeLcJc5T4rwlzlfi/CUuUOKCJS5U4sIlLlLioiUuVuLiJS5R4pIlLlUiJS5d4jIlLlviciUuX+IKJa5Y4kolrlziKiWuWuJqJa5e4holrlniWiWuXeI6Ja5b4nolrl/iBiVuWOJGJW5c4iYlblriZiVuXuIWJW5Z4lYlbl3iNiVuW+J2JW5f4g4l7ljiTiXuXOIuJe5a4m4l7l7iHiXuWeJeJe5d4j4l7lvifiXuX+IBJR5Y4kElHlziISUeWuJhJR5e4hElHlniUSUeXeIxJR5b4nElHl/iCSWeWOJJJZ5coiWeUuKpJZ5W4uklnlHimSWeVeLZJQ5KDEoMS4xKjEtMSkxLzErMSyxKLEusSqxLbEpsS+xK7EscVuI5JZ5b4nklnl/iBSVeWOJFJV5c4iUlXlriZSVeXuIVJV5Z4lUlXl3iNSVeW+J1JV5f4g0l3ljiTSXeXOItJd5a4m0l3l7iHSXeWeJdJd5d4vASR5Q4ssRRJY4u8Z4S7y3xvhLvL/GBEh8s8aESHy7xkRIfLfGxEh8v8YkSnyzxqRKfLvGZEp8t8bkSny/xhRJfLPGlEl8u8ZUSXy3xtRJfL/GNEt8s8a0S3y7xnRLfLfG9Et8v8YMSPyzxoxI/LvGTEj8t8bMSPy/xixLHlPhliV+V+HWJ35T4bYnflfh9iT+U+GOJP5X4c4m/lPhrib+V+HuJf5Q4tsQ/S/yrxL9L/KfEf0v8r8QhFY5T4bgVjlfh+BVOUOGEFU5U4dAKJ65wkgonrXCyCievcIoKp6xwqgqnrnCaCqetcLoKp69whgpnrHCmCmeucJYKZ61wtgpnr3COCuescK4K565wngrnrXC+CuevcIEKF6xwoQoXrnCRChetcLEKF69wiQqXrHCpCqlw6QqXqXDZCpercPkKV6hwxQpXqnDlClepcNUKV6tw9QrXqHDNCteqcO0K16lw3QrXq3D9CjeocMMKN6pw4wo3qXDTCjercPMKt6hwywq3qnDrCrepcNsKt6tw+wp3qHDHCneqcOcKd6lw1wp3q3D3CveocM8K96pw7wr3qXDfCvercP8KD6jwwAoPqvDgCg+p8NAKD6vw8AqPqPDICo+q8OgKj6nw2AqPq/D4Ck+o8MQKT6rw5Aqt8JQKT63wtApPr/CMCs+s8KwKz65wUGFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2Ff4bAKz6nw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76rw7gqHVziiwpEVjqpwdIX3VHhvhfdVeH+FD1T4YIUPVfhwhY9U+GiFj1X4eIVPVPhkhU9V+HSFz1T4bIXPVfh8hS9U+GKFL1X4coWvVPhqha9V+HqFb1T4ZoVvVfh2he9U+G6F71X4foUfVPhhhR9V+HGFn1T4aYWfVfh5hV9UOKbCLyv8qsKvK/ymwm8r/K7C7yv8ocIfK/ypwp8r/KXCXyv8rcLfK/yjwrEV/lnhXxX+XeE/Ff5b4X8VDqlxnBrHrXG8GsevcYIaJ6xxohqH1jhxjZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOGONM9U4c42z1DhrjbPVOHuNc9Q4Z41z1Th3jfPUOG+N89U4f40L1LhgjQvVuHCNi9S4aI2L1bh4jUvUuGSNS9VIjUvXuEyNy9a4XI3L17hCjSvWuFKNK9e4So2r1rhajavXuEaNa9a4Vo1r17hOjevWuF6N69e4QY0b1rhRjRvXuEmNm9a4WY2b17hFjVvWuFWNW9e4TY3b1rhdjdvXuEONO9a4U40717hLjbvWuFuNu9e4R4171rhXjXvXuE+N+9a4X43713hAjQfWeFCNB9d4SI2H1nhYjYfXeESNR9Z4VI1H13hMjcfWeFyNx9d4Qo0n1nhSjSfXaI2n1HhqjafVeHqNZ9R4Zo1n1Xh2jYMagxrDGqMa4xqTGtMasxrzGosayxqrGusamxrbGrsa+xqH1XhOjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXOLzGETWOrHFUjaNrvKfGe2u8r8b7a3ygxgdrfKjGh2t8pMZHa3ysxsdrfKLGJ2t8qsana3ymxmdrfK7G52t8ocYXa3ypxpdrfKXGV2t8rcbXa3yjxjdrfKvGt2t8p8Z3a3yvxvdr/KDGD2v8qMaPa/ykxk9r/KzGz2v8osYxNX5Z41c1fl3jNzV+W+N3NX5f4w81/ljjTzX+XOMvNf5a4281/l7jHzWOrfHPGv+q8e8a/6nx3xr/q3FIg+M0OG6D4zU4foMTNDhhgxM1OLTBiRucpMFJG5yswckbnKLBKRucqsGpG5ymwWkbnK7B6RucocEZG5ypwZkbnKXBWRucrcHZG5yjwTkbnKvBuRucp8F5G5yvwfkbXKDBBRtcqMGFG1ykwUUbXKzBxRtcosElG1yqQRpcusFlGly2weUaXL7BFRpcscGVGly5wVUaXLXB1RpcvcE1GlyzwbUaXLvBdRpct8H1Gly/wQ0a3LDBjRrcuMFNGty0wc0a3LzBLRrcssGtGty6wW0a3LbB7RrcvsEdGtyxwZ0a3LnBXRrctcHdGty9wT0a3LPBvRrcu8F9Gty3wf0a3L/BAxo8sMGDGjy4wUMaPLTBwxo8vMEjGjyywaMaPLrBYxo8tsHjGjy+wRMaPLHBkxo8uUEbPKXBUxs8rcHTGzyjwTMbPKvBsxscNBg0GDYYNRg3mDSYNpg1mDdYNFg2WDVYN9g02DbYNdg3OKzBcxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsavLPBuxq8u8HhDY5ocGSDoxoc3eA9Dd7b4H0N3t/gAw0+2OBDDT7c4CMNPtrgYw0+3uATDT7Z4FMNPt3gMw0+2+BzDT7f4AsNvtjgSw2+3OArDb7a4GsNvt7gGw2+2eBbDb7d4DsNvtvgew2+3+AHDX7Y4EcNftzgJw1+2uBnDX7e4BcNjmnwywa/avDrBr9p8NsGv2vw+wZ/aPDHBn9q8OcGf2nw1wZ/a/D3Bv9ocGyDfzb4V4N/N/hPg/82+F+DQ1ocp8VxWxyvxfFbnKDFCVucqMWhLU7c4iQtTtriZC1O3uIULU7Z4lQtTt3iNC1O2+J0LU7f4gwtztjiTC3O3OIsLc7a4mwtzt7iHC3O2eJcLc7d4jwtztvifC3O3+ICLS7Y4kItLtziIi0u2uJiLS7e4hItLtniUi3S4tItLtPisi0u1+LyLa7Q4ootrtTiyi2u0uKqLa7W4uotrtHimi2u1eLaLa7T4rotrtfi+i1u0OKGLW7U4sYtbtLipi1u1uLmLW7R4pYtbtXi1i1u0+K2LW7X4vYt7tDiji3u1OLOLe7S4q4t7tbi7i3u0eKeLe7V4t4t7tPivi3u1+L+LR7Q4oEtHtTiwS0e0uKhLR7W4uEtHtHikS0e1eLRLR7T4rEtHtfi8S2e0OKJLZ7U4skt2uIpLZ7a4mktnt7iGS2e2eJZLZ7d4qDFoMWwxajFuMWkxbTFrMW8xaLFssWqxbrFpsW2xa7FvsVhLZ7T4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKdLd7V4t0tDm9xRIsjWxzV4ugW72nx3hbva/H+Fh9o8cEWH2rx4RYfafHRFh9r8fEWn2jxyRafavHpFp9p8dkWn2uZ+H/evNDiiy2+1OLLLb7S4qstvtbi6y2+0eKbLb7V4tstvtPiuy2+1+L7LX7Q4octftTixy1+0uKnLX7W4uctftHimBa/bPGrFr9u8ZsWv23xuxa/b/GHFn9s8acWf27xlxZ/bfG3Fn9v8Y8Wx7b4Z4t/tfh3i/+0+G+L/7U4pMNxOhy3w/E6HL/DCTqcsMOJOhza4cQdTtLhpB1O1uHkHU7R4ZQdTtXh1B1O0+G0HU7X4fQdztDhjB3O1OHMHc7S4awdztbh7B3O0eGcHc7V4dwdztPhvB3O1+H8HS7Q4YIdLtThwh0u0uGiHS7W4eIdLtHhkh0u1SEdLt3hMh0u2+FyHS7f4QodrtjhSh2u3OEqHa7a4Wodrt7hGh2u2eFaHa7d4Todrtvheh2u3+EGHW7Y4UYdbtzhJh1u2uFmHW7e4RYdbtnhVh1u3eE2HW7b4XYdbt/hDh3u2OFOHe7c4S4d7trhbh3u3uEeHe7Z4V4d7t3hPh3u2+F+He7f4QEdHtjhQR0e3OEhHR7a4WEdHt7hER0e2eFRHR7d4TEdHtvhcR0e3+EJHZ7Y4UkdntyhHZ7S4akdntbh6R2e0eGZHZ7V4dkdDjoMOgw7jDqMO0w6TDvMOsw7LDosO6w6rDtsOmw77DrsOxzW4TkdntvheR2e3+EFHV7Y4UUdXtzhJR1e2uFlHV7e4RUdXtnhVR1e3eE1HV7b4XUdXt/hDR3e2OFNHd7c4S0d3trhbR3e3uEdHd7Z4V0d3t3h8A5HdDiyw1Edjh46ZMj/WL+3w/s6vL/DBzp8sMOHOny4w0c6fLTDxzp8vMMnOnyyw6c6fLrDZzp8tsPnOny+wxc6fLHDlzp8ucNXOny1w9c6fL3DNzp8s8O3Ony7w3c6fLfD9zp8v8MPOvyww486/LjDTzr8tMPPOvy8wy86HNPhlx1+1eHXHX7T4bcdftfh9x3+0OGPHf7U4c8d/tLhrx3+1uHvHf7R4dgO/+zwrw7/7vCfDv/t8L8Oh/Q4To/j9jhej+P3OEGPE/Y4UY9De5y4x0l6nLTHyXqcvMcpepyyx6l6nLrHaXqctsfpepy+xxl6nLHHmXqcucdZepy1x9l6nL3HOXqcs8e5epy7x3l6nLfH+Xqcv8cFelywx4V6XLjHRXpctMfFely8xyV6XLLHpXqkx6V7XKbHZXtcrsfle1yhxxV7XKnHlXtcpcdVe1ytx9V7XKPHNXtcq8e1e1ynx3V7XK/H9XvcoMcNe9yox4173KTHTXvcrMfNe9yixy173KrHrXvcpsdte9yux+173KHHHXvcqcede9ylx1173K3H3Xvco8c9e9yrx7173KfHfXvcr8f9ezygxwN7PKjHg3s8pMdDezysx8N7PKLHI3s8qsejezymx2N7PK7H43s8occTezypx5N7tMdTejy1x9N6PL3HM3o8s8ezejy7x0GPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12PfY/Dejynx3N7PK/H83u8oMcLe7yox4t7vKTHS3u8rMfLe7yixyt7vKrHq3u8psdre7yux+t7vKHHG3u8qcebe7ylx1t7vK3H23u8o8c7e7yrx7t7HN7jiB5H9jiqx9E93tP/P4rpgYnzQgGgaG3ebNvuZtu2bds32/z/bGRbm23btrl+877CmTk4bIAPD/CRAT46wMcG+PgAnxjgkwN8aoBPD/CZAT47wOcG+PwAXxjgiwN8aYAvD/CVAb46wNcG+PoA3xjgmwN8a4BvD/CdAb47wPcG+P4APxjghwP8aIAfD/CTAX46wM8G+PkAvxjglwP8aoBfD/CbAX47wO8G+P0AfxjgjwP8aYA/D/CXAf46wN8G+PsA/xjgnwP8a4B/D/CfAf47wP8GOHyAIwY4coCjBjh6gGMGOHaA4wQ4boBDAhwvwPEDnCDACQOcKMCJA5wkwKEBThrgZAFOHuAUAU4Z4FQBTh3gNAFOG+B0AU4f4AwBzhjgTAHOHOAsAc4a4GwBzh7gHAHOGeBcAc4d4DwBzhvgfAHOH+ACAS4Y4EIBLhzgIgEuGuBiAS4e4BIBLhngUgES4NIBLhPgsgEuF+DyAa4Q4IoBrhTgygGuEuCqAa4W4OoBrhHgmgGuFeDaAa4T4LoBrhfg+gFuEOCGAW4U4MYBbhLgpgFuFuDmAW4R4JYBbhXg1gFuE+C2AW4X4PYB7hDgjgHuFODOAe4S4K4B7hbg7gHuEeCeAe4V4N4B7hPgvgHuF+D+AR4Q4IEBHhTgwQEeEuChAR4W4OEBHhHgkQEeFeDRAR4T4LEBHhfg8QGeEOCJAZ4U4MkBGuApAZ4a4GkBnh7gGQGeGeBZAZ4d4DkBnhvgeQGeH+AFAV4Y4EUBXhzgJQFeGuBlAV4e4BUBXhngVQFeHeAgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AawK8NsDrArw+wBsCvDHAmwK8OcBbArw1wNsCvD3AOwK8M8C7Arw7wHsCvDfA+wK8P8AHAnwwwIcCHBbgwwE+EuCjAT4W4OMBPhHgkwE+FeDTAT4T4LMBPhfg8wG+EOCLAb4U4MsBvhLgqwG+FuDrAb4R4JsBvhXg2wG+E+C7Ab4X4PsBfhDghwF+FODHAX4S4KcBfhbg5wF+EeCXAX4V4NcBfhPgtwF+F+D3Af4Q4I8B/hTgzwH+EuCvAf4W4O8B/hHgnwH+FeDfAf4T4L8B/hfg8ABHBDgywFEBjg5wTIBjAxwnxHFDHBLieCGOH+IEIU4Y4kQhThziJCEODXHSECcLcfIQpwhxyhCnCnHqEKcJcdoQpwtx+hBnCHHGEGcKceYQZwlx1hBnC3H2EOcIcc4Q5wpx7hDnCXHeEOcLcf4QFwhxwRAXCnHhEBcJcdEQFwtx8RCXCHHJEJcKkRCXDnGZEJcNcbkQlw9xhRBXDHGlEFcOcZUQVw1xtRBXD3GNENcMca0Q1w5xnRDXDXG9ENcPcYMQNwxxoxA3DnGTEDcNcbMQNw9xixC3DHGrELcOcZsQtw1xuxC3D3GHEHcMcacQdw5xlxB3DXG3EHcPcY8Q9wxxrxD3DnGfEPcNcb8Q9w/xgBAPDPGgEA8O8ZAQDw3xsBAPD/GIEI8M8agQjw7xmBCPDfG4EI8P8YQQTwzxpBBPDtEQTwnx1BBPC/H0EM8I8cwQzwrx7BDPCfHcEM8L8fwQLwjxwhAvCvHiEC8J8dIQLwvx8hCvCPHKEK8K8eoQByEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2IV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4p0h3hXi3SHeE+K9Id4X4v0hPhDigyE+FOKwEB8O8ZEQHw3xsRAfD/GJEJ8M8akQnw7xmRCfDfG5EJ8P8YUQXwzxpRBfDvGVEF8N8bUQXw/xjRDfDPGtEN8O8Z0Q3w3xvRDfD/GDED8M8aMQPw7xkxA/DfGzED8P8YsQvwzxqxC/DvGbEL8N8bsQvw/xhxB/DPGnEH8O8ZcQfw3xtxB/D/GPEP8M8a8Q/w7xnxD/DfG/EIeHOCLEkSGOCnF0iGNCHBviOBGOG+GQCMeLcPwIJ4hwwggninDiCCeJcGiEk0Y4WYSTRzhFhFNGOFWEU0c4TYTTRjhdhNNHOEOEM0Y4U4QzRzhLhLNGOFuEs0c4R4RzRjhXhHNHOE+E80Y4X4TzR7hAhAtGuFCEC0e4SISLRrhYhItHuESES0a4VIREuHSEy0S4bITLRbh8hCtEuGKEK0W4coSrRLhqhKtFuHqEa0S4ZoRrRbh2hOtEuG6E60W4foQbRLhhhBtFuHGEm0S4aYSbRbh5hFtEuGWEW0W4dYTbRLhthNtFuH2EO0S4Y4Q7RbhzhLtEuGuEu0W4e4R7RLhnhHtFuHeE+0S4b4T7Rbh/hAdEeGCEB0V4cISHRHhohIdFeHiER0R4ZIRHRXh0hMdEeGyEx0V4fIQnRHhihCdFeHKERnhKhKdGeFqEp0d4RoRnRnhWhGdHeE6E50Z4XoTnR3hBhBdGeFGEF0d4SYSXRnhZhJdHeEWEV0Z4VYRXRziIMIgwjDCKMI4wiTCNMIswj7CIsIywirCOsImwjbCLsI/wmgivjfC6CK+P8IYIb4zwpghvjvCWCG+N8LYIb4/wjgjvjPCuCO+O8J4I743wvgjvj/CBCB+M8KEIh0X4cISPRPhohI9F+HiET0T4ZIRPRfh0hM9E+GyEz0X4fIQvRPhihC9F+HKEr0T4aoSvRfh6hG9E+GaEb0X4doTvRPhuhO9F+H6EH0T4YYQfRfhxhJ9E+GmEn0X4eYRfRPhlhF9F+HWE30T4bYTfRfh9hD9E+GOEP0X4c4S/RPhrhL9F+HuEf0T4Z4R/Rfh3hP9E+G+E/0U4PMIREY6McFSEoyMcE+HYCMeJcdwYh8Q4XozjxzhBjBPGOFGME8c4SYxDY5w0xslinDzGKWKcMsapYpw6xmlinDbG6WKcPsYZYpwxxplinDnGWWKcNcbZYpw9xjlinDPGuWKcO8Z5Ypw3xvlinD/GBWJcMMaFYlw4xkViXDTGxWJcPMYlYlwyxqViJMalY1wmxmVjXC7G5WNcIcYVY1wpxpVjXCXGVWNcLcbVY1wjxjVjXCvGtWNcJ8Z1Y1wvxvVj3CDGDWPcKMaNY9wkxk1j3CzGzWPcIsYtY9wqxq1j3CbGbWPcLsbtY9whxh1j3CnGnWPcJcZdY9wtxt1j3CPGPWPcK8a9Y9wnxn1j3C/G/WM8IMYDYzwoxoNjPCTGQ2M8LMbDYzwixiNjPCrGo2M8JsZjYzwuxuNjPCHGE2M8KcaTYzTGU2I8NcbTYjw9xjNiPDPGs2I8O8ZzYjw3xvNiPD/GC2K8MMaLYrw4xktivDTGy2K8PMYrYrwyxqtivDrGQYxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jNfEeG2M18V4fYw3xHhjjDfFeHOMt8R4a4y3xXh7jHfEeGeMd8V4d4z3xHhvjPfFeH+MD8T4YIwPxTgsxodjfCTGR2N8LMbHY3wixidjfCrGp2N8JsZnY3wuxudjfCHGF2N8KcaXY3wlxldjfC3G12N8I8Y3Y3wrxrdjfCfGd2N8L8b3Y/wgxg9j/CjGj2P8JMZPY/wsxs9j/CLGL2P8KsavY/wmxm9j/C7G72P8IcYfY/wpxp9j/CXGX2P8LcbfY/wjxj9j/CvGv2P8J8Z/Y/wvxuExjohxZIyjYhwd45gYx8Y4ToLjJjgkwfESHD/BCRKcMMGJEpw4wUkSHJrgpAlOluDkCU6R4JQJTpXg1AlOk+C0CU6X4PQJzpDgjAnOlODMCc6S4KwJzpbg7AnOkeCcCc6V4NwJzpPgvAnOl+D8CS6Q4IIJLpTgwgkukuCiCS6W4OIJLpHgkgkulSAJLp3gMgkum+ByCS6f4AoJrpjgSgmunOAqCa6a4GoJrp7gGgmumeBaCa6d4DoJrpvgegmun+AGCW6Y4EYJbpzgJglumuBmCW6e4BYJbpngVgluneA2CW6b4HYJbp/gDgnumOBOCe6c4C4J7prgbgnunuAeCe6Z4F4J7p3gPgnum+B+Ce6f4AEJHpjgQQkenOAhCR6a4GEJHp7gEQkemeBRCR6d4DEJHpvgcQken+AJCZ6Y4EkJnpygCZ6S4KkJnpbg6QmekeCZCZ6V4NkJnpPguQmel+D5CV6Q4IUJXpTgxQlekuClCV6W4OUJXpHglQleleDVCQ4SDBIME4wSjBNMEkwTzBLMEywSLBOsEqwTbBJsE+wS7BO8JsFrE7wuwesTvCHBGxO8KcGbE7wlwVsTvC3B2xO8I8E7E7wrwbsTvCfBexO8L8H7E3wgwQcTfCjBYQk+nOAjCT6a4GMJPp7gEwk+meBTCT6d4DMJPpvgcwk+n+ALCb6Y4EsJvpzgKwm+muBrCb6e4BsJvpngWwm+neA7Cb6b4HsJvp/gBwl+mOBHCX6c4CcJfprgZwl+nuAXCX6Z4FcJfp3gNwl+m+B3CX6f4A8J/pjgTwn+nOAvCf6a4G8J/p7gHwn+meBfCf6d4D8J/pvgfwkOT3BEgiMTHJXg6ATHJDg2wXFSHDfFISmOl+L4KU6Q4oQpTpTixClOkuLQFCdNcbIUJ09xihSnTHGqFKdOcZoUp01xuhSnT3GGFGdMcaYUZ05xlhRnTXG2FGdPcY4U50xxrhTnTnGeFOdNcb4U509xgRQXTHGhFBdOcZEUF01xsRQXT3GJFJdMcakUSXHpFJdJcdkUl0tx+RRXSHHFFFdKceUUV0lx1RRXS3H1FNdIcc0U10px7RTXSXHdFNdLcf0UN0hxwxQ3SnHjFDdJcdMUN0tx8xS3SHHLFLdKcesUt0lx2xS3S3H7FHdIcccUd0px5xR3SXHXFHdLcfcU90hxzxT3SnHvFPdJcd8U90tx/xQPSPHAFA9K8eAUD0nx0BQPS/HwFI9I8cgUj0rx6BSPSfHYFI9L8fgUT0jxxBRPSvHkFE3xlBRPTfG0FE9P8YwUz0zxrBTPTvGcFM9N8bwUz0/xghQvTPGiFC9O8ZIUL03xshQvT/GKFK9M8aoUr05xkGKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2Kf4jUpXpvidSlen+INKd6Y4k0p3pziLSnemuJtKd6e4h0p3pniXSneneI9Kd6b4n0p3p/iAyk+mOJDKQ5L8eEUH0nx0RQfS/HxFJ9I8ckUn0rx6RSfSfHZFJ9L8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cMUP0rx4xQ/SfHTFD9L8fMUv0jxyxS/SvHrFL9J8dsUv0vx+xR/SPHHFH9K8ecUf0nx1xR/S/H3FP9I8c8U/0rx7xT/SfHfFP9LcXiKI1IcmeKoFEenOCbFsSmOk+G4GQ7JcLwMx89wggwnzHCiDCfOcJIMh2Y4aYaTZTh5hlNkOGWGU2U4dYbTZDhthtNlOH2GM2Q4Y4YzZThzhrNkOGuGs2U4e4ZzZDhnhnNlOHeG82Q4b4bzZTh/hgtkuGCGC2W4cIaLZLhohotluHiGS2S4ZIZLZUiGS2e4TIbLZrhchstnuEKGK2a4UoYrZ7hKhqtmuFqGq2e4RoZrZrhWhmtnuE6G62a4XobrZ7hBhhtmuFGGG2e4SYabZrhZhptnuEWGW2a4VYZbZ7hNhttmuF2G22e4Q4Y7ZrhThjtnuEuGu2a4W4a7Z7hHhntmuFeGe2e4T4b7ZrhfhvtneECGB2Z4UIYHZ3hIhodmeFiGh2d4RIZHZnhUhkdneEyGx2Z4XIbHZ3hChidmeFKGJ2dohqdkeGqGp2V4eoZnZHhmhmdleHaG52R4bobnZXh+hhdkeGGGF2V4cYaXZHhphpdleHmGV2R4ZYZXZXh1hoMMgwzDDKMM4wyTDNMMswzzDIsMywyrDOsMmwzbDLsM+wyvyfDaDK/L8PoMb8jwxgxvyvDmDG/J8NYMb8vw9gzvyPDODO/K8O4M78nw3gzvy/D+DB/I8MEMH8pwWIYPZ/hIho9m+FiGj2f4RIZPZvhUhk9n+EyGz2b4XIbPZ/hChi9m+FKGL2f4SoavZvhahq9n+EaGb2b4VoZvZ/hOhu9m+F6G72f4QYYfZvhRhh9n+EmGn2b4WYafZ/hFhl9m+FWGX2f4TYbfZvhdht9n+EOGP2b4U4Y/Z/hLhr9m+FuGv2f4R4Z/ZvhXhn9n+E+G/2b4X4bDMxyR4cgMR2U4OsMxGY7NcJwcx81xSI7j5Th+jhPkOGGOE+U4cY6T5Dg0x0lznCzHyXOcIscpc5wqx6lznCbHaXOcLsfpc5whxxlznCnHmXOcJcdZc5wtx9lznCPHOXOcK8e5c5wnx3lznC/H+XNcIMcFc1wox4VzXCTHRXNcLMfFc1wixyVzXCpHclw6x2VyXDbH5XJcPscVclwxx5VyXDnHVXJcNcfVclw9xzVyXDPHtXJcO8d1clw3x/VyXD/HDXLcMMeNctw4x01y3DTHzXLcPMctctwyx61y3DrHbXLcNsftctw+xx1y3DHHnXLcOcddctw1x91y3D3HPXLcM8e9ctw7x31y3DfH/XLcP8cDcjwwx4NyPDjHQ3I8NMfDcjw8xyNyPDLHo3I8Osdjcjw2x+NyPD7HE3I8MceTcjw5R3M8JcdTczwtx9NzPCPHM3M8K8ezczwnx3NzPC/H83O8IMcLc7wox4tzvCTHS3O8LMfLc7wixytzvCrHq3Mc5BjkGOYY5RjnmOSY5pjlmOdY5FjmWOVY59jk2ObY5djneE2O1+Z4XY7X53hDjjfmeFOON+d4S4635nhbjrfneEeOd+Z4V45353hPjvfmeF+O9+f4QI4P5vhQjsNyfDjHR3J8NMfHcnw8xydyfDLHp3J8Osdncnw2x+dyfD7HF3J8MceXcnw5x1dyfDXH13J8Pcc3cnwzx7dyfDvHd3J8N8f3cnw/xw9y/DDHj3L8OMdPcvw0x89y/DzHL3L8Msevcvw6x29y/DbH73L8Pscfcvwxx59y/DnHX3L8Ncffcvw9xz9y/DPHv3L8O8d/cvw3x/9yHJ7jiBxH5jgqx9E5jslxbI7jFDhugUMKHK/A8QucoMAJC5yowIkLnKTAoQVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBS5a4GIFLl7gEgUuWeBSBVLg0gUuU+CyBS5X4PIFrlDgigWuVODKBa5S4KoFrlbg6gWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmBW5W4OYFblHglgVuVeDWBW5T4LYFblfg9gXuUOCOBe5U4M4F7lLgrgXuVuDuBe5R4J4F7lXg3gXuU+C+Be5X4P4FHlDggQUeVODBBR5S4KEFHlbg4QUeUeCRBR5V4NEFHlPgsQUeV+DxBZ5Q4IkFnlTgyQVa4CkFnlrgaQWeXuAZBZ5Z4FkFnl3gOQWeW+B5BZ5f4AUFXljgRQVeXOAlBV5a4GUFXl7gFQVeWeBVBV5d4KDAoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsBrCry2wOsKvL7AGwq8scCbCry5wFsKvLXA2wq8vcA7CryzwLsKvLvAewq8t8D7Cry/wAcKfLDAhwocVuDDBT5S4KMFPlbg4wU+UeCTBT5V4NMFPlPgswU+V+DzBb5Q4IsFvlTgywW+UuCrBb5W4OsFvlHgmwW+VeDbBb5T4LsFvlfg+wV+UOCHBX5U4McFflLgpwV+VuDnBX5R4JcFflXg1wV+U+C3BX5X4PcF/lDgjwX+VDDk/2d/KfDXAn8r8PcC/yjwzwL/+r/PUPynwH8L/K/A4QWOKHBkgaMKHF3gmALHFjhOieOWOKTE8Uocv8QJSpywxIlKnLjESUocWuKkJU5W4uQlTlHilCVOVeLUJU5T4rQlTlfi9CXOUOKMJc5U4swlzlLirCXOVuLsJc5R4pwlzlXi3CXOU+K8Jc5X4vwlLlDigiUuVOLCJS5S4qIlLlbi4iUuUeKSJS5VIiUuXeIyJS5b4nIlLl/iCiWuWOJKJa5c4iolrlriaiWuXuIaJa5Z4lolrl3iOiWuW+J6Ja5f4gYlbljiRiVuXOImJW5a4mYlbl7iFiVuWeJWJW5d4jYlblvidiVuX+IOJe5Y4k4l7lziLiXuWuJuJe5e4h4l7lniXiXuXeI+Je5b4n4l7l/iASUeWOJBJR5c4iElHlriYSUeXuIRJR5Z4lElHl3iMSUeW+JxJR5f4gklnljiSSWeXKIlnlLiqSWeVuLpJZ5R4pklnlXi2SWeU+K5JZ5X4vklXlDihSVeVOLFJV5S4qUlXlbi5SVeUeKVJV5V4tUlDkoMSgxLjEqMS0xKTEvMSsxLLEosS6xKrEtsSmxL7ErsS7ymxGtLvK7E60u8ocQbS7ypxJtLvKXEW0u8rcTbS7yjxDtLvKvEu0u8p8R7S7yvxPtLfKDEB0t8qMRhJT5c4iMlPlriYyU+XuITJT5Z4lMlPl3iMyU+W+JzJT5f4gslvljiSyW+XOIrJb5a4mslvl7iGyW+WeJbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J/JQ4vcUSJI0scVeLoEseUOLbEcSoct8IhFY5X4fgVTlDhhBVOVOHEFU5S4dAKJ61wsgonr3CKCqescKoKp65wmgqnrXC6CqevcIYKZ6xwpgpnrnCWCmetcLYKZ69wjgrnrHCuCueucJ4K561wvgrnr3CBChescKEKF65wkQoXrXCxChevcIkKl6xwqQqpcOkKl6lw2QqXq3D5CleocMUKV6pw5QpXqXDVClercPUK16hwzQrXqnDtCtepcN0K16tw/Qo3qHDDCjeqcOMKN6lw0wo3q3DzCreocMsKt6pw6wq3qXDbCrercPsKd6hwxwp3qnDnCnepcNcKd6tw9wr3qHDPCveqcO8K96lw3wr3q3D/Cg+o8MAKD6rw4AoPqfDQCg+r8PAKj6jwyAqPqvDoCo+p8NgKj6vw+ApPqPDECk+q8OQKrfCUCk+t8LQKT6/wjArPrPCsCs+u8JwKz63wvArPr/CCCi+s8KIKL67wkgovrfCyCi+v8IoKr6zwqgqvrnBQYVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV/hNRVeW+F1FV5f4Q0V3ljhTRXeXOEtFd5a4W0V3l7hHRXeWeFdFd5d4T0V3lvhfRXeX+EDFT5Y4UMVDqvw4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKn6vw+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8K/6tweIUjKhxZ4agKR1c4psKxFY5T47g1DqlxvBrHr3GCGiescaIaJ65xkhqH1jhpjZPVOHmNU9Q4ZY1T1Th1jdPUOG2N09U4fY0z1DhjjTPVOHONs9Q4a42z1Th7jXPUOGeNc9U4d43z1DhvjfPVOH+NC9S4YI0L1bhwjYvUuGiNi9W4eI1L1LhkjUvVSI1L17hMjcvWuFyNy9e4Qo0r1rhSjSvXuEqNq9a4Wo2r17hGjWvWuFaNa9e4To3r1rhejevXuEGNG9a4UY0b17hJjZvWuFmNm9e4RY1b1rhVjVvXuE2N29a4XY3b17hDjTvWuFONO9e4S4271rhbjbvXuEeNe9a4V41717hPjfvWuF+N+9d4QI0H1nhQjQfXeEiNh9Z4WI2H13hEjUfWeFSNR9d4TI3H1nhcjcfXeEKNJ9Z4Uo0n12iNp9R4ao2n1Xh6jWfUeGaNZ9V4do3n1HhujefVeH6NF9R4YY0X1XhxjZfUeGmNl9V4eY1X1HhljVfVeHWNgxqDGsMaoxrjGpMa0xqzGvMaixrLGqsa6xqbGtsauxr7Gq+p8doar6vx+hpvqPHGGm+q8eYab6nx1hpvq/H2Gu+o8c4a76rx7hrvqfHeGu+r8f4aH6jxwRofqnFYjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1vhcjc/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNf9f4T43/1vhfjcNrHFHjyBpH1Ti6xjE1jq1xnAbHbXBIg+M1OH6DEzQ4YYMTNThxg5M0OLTBSRucrMHJG5yiwSkbnKrBqRucpsFpG5yuwekbnKHBGRucqcGZG5ylwVkbnK3B2Ruco8E5G5yrwbkbnKfBeRucr8H5G1ygwQUbXKjBhRtcpMFFG1yswcUbXKLBJRtcqkEaXLrBZRpctsHlGly+wRUaXLHBlRpcucFVGly1wdUaXL3BNRpcs8G1Gly7wXUaXLfB9Rpcv8ENGtywwY0a3LjBTRrctMHNGty8wS0a3LLBrRrcusFtGty2we0a3L7BHRrcscGdGty5wV0a3LXB3RrcvcE9Gtyzwb0a3LvBfRrct8H9Gty/wQMaPLDBgxo8uMFDGjy0wcMaPLzBIxo8ssGjGjy6wWMaPLbB4xo8vsETGjyxwZMaPLlBGzylwVMbPK3B0xs8o8EzGzyrwbMbPKfBcxs8r8HzG7ygwQsbvKjBixu8pMFLG7yswcsbvKLBKxu8qsGrGxw0GDQYNhg1GDeYNJg2mDWYN1g0WDZYNVg32DTYNtg12Dd4TYPXNnhdg9c3eEODNzZ4U4M3N3hLg7c2eFuDtzd4R4N3NnhXg3c3eE+D9zZ4X4P3N/hAgw82+FCDwxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvy7wX8a/LfB/xoc3uCIBkc2OKrB0Q2OaXBsg+O0OG6LQ1ocr8XxW5ygxQlbnKjFiVucpMWhLU7a4mQtTt7iFC1O2eJULU7d4jQtTtvidC1O3+IMLc7Y4kwtztziLC3O2uJsLc7e4hwtztniXC3O3eI8Lc7b4nwtzt/iAi0u2OJCLS7c4iItLtriYi0u3uISLS7Z4lIt0uLSLS7T4rItLtfi8i2u0OKKLa7U4sotrtLiqi2u1uLqLa7R4potrtXi2i2u0+K6La7X4votbtDihi1u1OLGLW7S4qYtbtbi5i1u0eKWLW7V4tYtbtPiti1u1+L2Le7Q4o4t7tTizi3u0uKuLe7W4u4t7tHini3u1eLeLe7T4r4t7tfi/i0e0OKBLR7U4sEtHtLioS0e1uLhLR7R4pEtHtXi0S0e0+KxLR7X4vEtntDiiS2e1OLJLdriKS2e2uJpLZ7e4hktntniWS2e3eI5LZ7b4nktnt/iBS1e2OJFLV7c4iUtXtriZS1e3uIVLV7Z4lUtXt3ioMWgxbDFqMW4xaTFtMWsxbzFosWyxarFusWmxbbFrsW+xWtavLbF61q8vsUbWryxxZtavLnFW1q8tcXbWry9xTtavLPFu1q8u8V7Wry3xftavL/FB1p8sMWHWhzW4sMtPtLioy0+1uLjLT7R4pMtPtXi0y0+0+KzLT7X4vMtvtDiiy2+1OLLLb7S4qstvtbi6y2+0eKbLb7V4tstvtPiuy2+1+L7LX7Q4octftTixy1+0uKnLX7W4uctftHily1+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4p8t/tXi3y3+0+K/Lf7X4vAWR7Q4ssVRLY5ucUyLY1scp8NxOxzS4Xgdjt/hBB1O2OFEHU7c4SQdDu1w0g4n63DyDqfocMoOp+pw6g6n6XDaDqfrcPoOZ+hwxg5n6nDmDmfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g7n63D+DhfocMEOF+pw4Q4X6XDRDhfrcPEOl+hwyQ6X6pAOl+5wmQ6X7XC5DpfvcIUOV+xwpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s8KQOT+7QDk/p8NQOT+vw9A7P6PDMDs/q8OwOz+nw3A7P6/D8Di/o8MIOL+rw4g4v6fDSDi/r8PIOr+jwyg6v6vDqDgcdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h1e0+G1HV7X4fUd3tDhjR3e1OHNHd7S4a0d3tbh7R3e0eGdHd7V4d0d3tPhvR3e1+H9HT7Q4YMdPtThsA4f7vCRDh/t8LEOH+/wiQ6f7PCpDp/u8JkOn+3wuQ6f7/CFDl/s8KUOX+7wlQ5f7fC1Dl/v8I0O3+zwrQ7f7vCdDt/t8L0O3+/wgw4/7PCjDj/u8JMOP+3wsw4/7/CLDr/s8KsOv+7wmw6/7fC7Dr/v8IcOf+zwpw5/7vCXDn/t8LcOf+/wjw7/7PCvDv/u8J8O/+3wvw6Hdziiw5EdjupwdIdjOhzb4Tg9jtvjkB7H63H8HifoccIeJ+px4h4n6XFoj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj0v2uFSP9Lh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo8n9Xhyj/Z4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOj+f2eF6P5/d4QY8X9nhRjxf3eEmPl/Z4WY+X93hFj1f2eFWPV/c46DHoMewx6jHuMekx7THrMe+x6LHsseqx7rHpse2x67Hv8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR4f7PGhHof1+D8WzLELz4PhlmmK1LZtTW2ltm3bnlqpbeO+bNSNatu2bfesZ513/4Q982lGDnDUAEcPcMwAxw7wwQE+NMCHB/jIAB8d4GMDfHyATwzwyQE+NcCnB/jMAJ8d4HMDfH6ALwzwxQG+NMCXB/jKAF8d4GsDfH2AbwzwzQG+NcC3B/jOAN8d4HsDfH+AHwzwwwF+NMCPB/jJAD8d4GcD/HyAXwzwywF+NcCvB/jNAL8d4HcD/H6APwzwxwH+NMCfB/jLAH8d4G8D/H2AfwzwzwH+NcC/B/jPAP8d4H8DHBLgOAEODXDcAMcLcPwAJwhwWIATBjhRgBMHOEmAkwY4WYCTBzhFgFMGOFWAUwc4TYDTBjhdgNMHOEOAMwY4U4AzBzhLgLMGOFuAswc4R4BzBjhXgHMHOE+A8wY4X4DzB7hAgAsGuFCACwe4SICLBrhYgIsHuESASwZIgEsFuHSAywS4bIDLBbh8gCsEuGKAKwW4coCrBLhqgKsFuHqAawS4ZoBrBTg8wLUDXCfAdQNcL8D1A9wgwA0D3CjAjQPcJMBNA9wswM0D3CLALQPcKsCtA9wmwG0D3C7A7QPcIcAdA9wpwJ0D3CXAXQPcLcDdA9wjwD0D3CvAvQPcJ8B9A9wvwP0DPCDAAwM8KMCDAzwkwEMDPCzAwwM8IsAjAzwqwKMDPCbAYwM8LsDjAzwhwBMDNMCTAjw5wFMCPDXA0wI8PcAzAjwzwLMCPDvAcwIcEeC5AZ4X4PkBXhDghQFeFODFAV4S4KUBXhbg5QFeEeCVAV4V4NUBXhPgtQFeF+D1Ad4Q4I0B3hTgzQHeEuCtAd4W4O0B3hHgIMAgwDDAKMA4wCTANMAswDzAIsAywCrAOsAmwDbALsA+wDsDvCvAuwO8J8B7A7wvwPsDfCDAkQGOCnB0gGMCHBvggwE+FODDAT4S4KMBPhbg4wE+EeCTAT4V4NMBPhPgswE+F+DzAb4Q4IsBvhTgywG+EuCrAb4W4OsBvhHgmwG+FeDbAb4T4LsBvhfg+wF+EOCHAX4U4McBfhLgpwF+FuDnAX4R4JcBfhXg1wF+E+C3AX4X4PcB/hDgjwH+FODPAf4S4K8B/hbg7wH+EeCfAf4V4N8B/hPgvwH+F+CQEMcJcWiI44Y4XojjhzhBiMNCnDDEiUKcOMRJQpw0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyREJcKsSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvE4SGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFuHuIWIW4Z4lYhbh3iNiFuG+J2IW4f4g4h7hjiTiHuHOIuIe4a4m4h7h7iHiHuGeJeIe4d4j4h7hvifiHuH+IBIR4Y4kEhHhziISEeGuJhIR4e4hEhHhniUSEeHeIxIR4b4nEhHh/iCSGeGKIhnhTiySGeEuKpIZ4W4ukhnhHimSGeFeLZIZ4T4ogQzw3xvBDPD/GCEC8M8aIQLw7xkhAvDfGyEC8P8YoQrwzxqhCvDvGaEK8N8boQrw/xhhBvDPGmEG8O8ZYQbw3xthBvD/GOEAchBiGGIUYhxiEmIaYhZiHmIRYhliFWIdYhNiG2IXYh9iHeGeJdId4d4j0h3hvifSHeH+IDIY4McVSIo0McE+LYEB8M8aEQHw7xkRAfDfGxEB8P8YkQnwzxqRCfDvGZEJ8N8bkQnw/xhRBfDPGlEF8O8ZUQXw3xtRBfD/GNEN8M8a0Q3w7xnRDfDfG9EN8P8YMQPwzxoxA/DvGTED8N8bMQPw/xixC/DPGrEL8O8ZsQvw3xuxC/D/GHEH8M8acQfw7xlxB/DfG3EH8P8Y8Q/wzxrxD/DvGfEP8N8b8Qh0Q4ToRDIxw3wvEiHD/CCSIcFuGEEU4U4cQRThLhpBFOFuHkEU4R4ZQRThXh1BFOE+G0EU4X4fQRzhDhjBHOFOHMEc4S4awRzhbh7BHOEeGcEc4V4dwRzhPhvBHOF+H8ES4Q4YIRLhThwhEuEuGiES4W4eIRLhHhkhES4VIRLh3hMhEuG+FyES4f4QoRrhjhShGuHOEqEa4a4WoRrh7hGhGuGeFaEQ6PcO0I14lw3QjXi3D9CDeIcMMIN4pw4wg3iXDTCDeLcPMIt4hwywi3inDrCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICI+K8OgIj4nw2AiPi/D4CE+I8MQIjfCkCE+O8JQIT43wtAhPj/CMCM+M8KwIz47wnAhHRHhuhOdFeH6EF0R4YYQXRXhxhJdEeGmEl0V4eYRXRHhlhFdFeHWE10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0Q4iDCIMIwwijCOMIkwjTCLMI+wiLCMsIqwjrCJsI2wi7CP8M4I74rw7gjvifDeCO+L8P4IH4hwZISjIhwd4ZgIx0b4YIQPRfhwhI9E+GiEj0X4eIRPRPhkhE9F+HSEz0T4bITPRfh8hC9E+GKEL0X4coSvRPhqhK9F+HqEb0T4ZoRvRfh2hO9E+G6E70X4foQfRPhhhB9F+HGEn0T4aYSfRfh5hF9E+GWEX0X4dYTfRPhthN9F+H2EP0T4Y4Q/RfhzhL9E+GuEv0X4e4R/RPhnhH9F+HeE/0T4b4T/RTgkxnFiHBrjuDGOF+P4MU4Q47AYJ4xxohgnjnGSGCeNcbIYJ49xihinjHGqGKeOcZoYp41xuhinj3GGGGeMcaYYZ45xlhhnjXG2GGePcY4Y54xxrhjnjnGeGOeNcb4Y549xgRgXjHGhGBeOcZEYF41xsRgXj3GJGJeMkRiXinHpGJeJcdkYl4tx+RhXiHHFGFeKceUYV4lx1RhXi3H1GNeIcc0Y14pxeIxrx7hOjOvGuF6M68e4QYwbxrhRjBvHuMnQIUP+99tmMW4e4xYxbhnjVjFuHeM2MW4b43Yxbh/jDjHuGONOMe4c4y4x7hrjbjHuHuMeMe4Z414x7h3jPjHuG+N+Me4f4wExHhjjQTEeHOMhMR4a42ExHh7jETEeGeNRMR4d4zExHhvjcTEeH+MJMZ4YozGeFOPJMZ4S46kxnhbj6TGeEeOZMZ4V49kxnhPjiBjPjfG8GM+P8YIYL4zxohgvjvGSGC+N8bIYL4/xihivjPGqGK+O8ZoYr43xuhivj/GGGG+M8aYYb47xlhhvjfG2GG+P8Y4YBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2Md4Z410x3h3jPTHeG+N9Md4f4wMxjoxxVIyjYxwT49gYH4zxoRgfjvGRGB+N8bEYH4/xiRifjPGpGJ+O8ZkYn43xuRifj/GFGF+M8aUYX47xlRhfjfG1GF+P8Y0Y34zxrRjfjvGdGN+N8b0Y34/xgxg/jPGjGD+O8ZMYP43xsxg/j/GLGL+M8asYv47xmxi/jfG7GL+P8YcYf4zxpxh/jvGXGH+N8bcYf4/xjxj/jPGvGP+O8Z8Y/43xvxiHJDhOgkMTHDfB8RIcP8EJEhyW4IQJTpTgxAlOkuCkCU6W4OQJTpHglAlOleDUCU6T4LQJTpfg9AnOkOCMCc6U4MwJzpLgrAnOluDsCc6R4JwJzpXg3AnOk+C8Cc6X4PwJLpDgggkulODCCS6S4KIJLpbg4gkukeCSCZLgUgkuneAyCS6b4HIJLp/gCgmumOBKCa6c4CoJrprgagmunuAaCa6Z4FoJDk9w7QTXSXDdBNdLcP0EN0hwwwQ3SnDjBDdJcNMEN0tw8wS3SHDLBLdKcOsEt0lw2wS3S3D7BHdIcMcEd0pw5wR3SXDXBHdLcPcE90hwzwT3SnDvBPdJcN8E90tw/wQPSPDABA9K8OAED0nw0AQPS/DwBI9I8MgEj0rw6ASPSfDYBI9L8PgET0jwxARN8KQETx4xsackeGqCpyV4eoJnJHhmgmcleHaC5yQ4IsFzEzwvwfMTvCDBCxO8KMGLE7wkwUsTvCzByxO8IsErE7wqwasTvCbBaxO8LsHrE7whwRsTvCnBmxO8JcFbE7wtwdsTvCPBQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gncmeFeCdyd4T4L3Jnhfgvcn+ECCIxMcleDoBMckODbBBxN8KMGHE3wkwUcTfCzBxxN8IsEnE3wqwacTfCbBZxN8LsHnE3whwRcTfCnBlxN8JcFXE3wtwdcTfCPBNxN8K8G3E3wnwXcTfC/B9xP8IMEPE/wowY8T/CTBTxP8LMHPE/wiwS8T/CrBrxP8JsFvE/xuOH6f4A8J/pjgTwn+nOAvCf6a4G8J/p7gHwn+meBfCf6d4D8J/pvgfwkOSXGcFIemOG6K46U4fooTpDgsxQlTnCjFiVOcJMVJU5wsxclTnCLFKVOcKsWpU5wmxWlTnC7F6VOcIcUZU5wpxZlTnCXFWVOcLcXZU5wjxTlTnCvFuVOcJ8V5U5wvxflTXCDFBVNcKMWFU1wkxUVTXCzFxVNcIsUlUyTFpVJcOsVlUlw2xeVSXD7FFVJcMcWVUlw5xVVSXDXF1VJcPcU1UlwzxbVSHJ7i2imuk+K6Ka6X4vopbpDihilulOLGKW6S4qYpbpbi5ilukeKWKW6V4tYpbpPitilul+L2Ke6Q4o4p7pTizinukuKuKe6W4u4p7pHininuleLeKe6T4r4p7pfi/ikekOKBKR6U4sEpHpLioSkeluLh/+M2ZMiQI1M8KsWjUzwmxWNTPC7F41M8IcUTUzTFk1I8OcVTUjw1xdNSPD3FM1I8M8WzUjw7xXNSHJHiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsU7U7wrxbtTvCfFe1O8L8X7U3wgxZEpjkpxdIpjUhyb4oMpPpTiwyk+kuKjKT6W4uMpPpHikyk+leLTKT6T4rMpPpfi8ym+kOKLKb6U4sspvpLiqym+luLrKb6R4pspvpXi2ym+k+K7Kb6X4vspfpDihyl+lOLHKX6S4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4r8p/pfikAzHyXBohuNmOF6G42c4QYbDMpwww4kynDjDSTKcNMPJMpw8wykynDLDqTKcOsNpMpw2w+kynD7DGTKcMcOZMpw5w1kynDXD2TKcPcM5Mpwzw7kynDvDeTKcN8P5Mpw/wwUyXDDDhTJcOMNFMlw0w8UyXDzDJTJcMkMyXCrDpTNcJsNlM1wuw+UzXCHDFTNcKcOVM1wlw1UzXC3D1TNcI8M1M1wrw+EZrp3hOhmum+F6Ga6f4QYZbpjhRhlunOEmGW6a4WYZbp7hFhlumeFWGW6d4TYZbpvhdhlun+EOGe6Y4U4Z7pzhLhnumuFuGe6e4R4Z7pnhXhnuneE+Ge6b4X4Z7p/hARkemOFBGR6c4SEZHprhYRkenuERGR6Z4VEZHp3hMRkem+FxGR6f4QkZnpihGZ6U4ckZnpLhqRmeluHpGZ6R4ZkZnpXh2Rmek+GIDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KoMr87wmgyvzfC6DK/P8IYMb8zwpgxvzvCWDG/N8LYMb8/wjgwHGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZ3pnhXRneneE9Gd6b4X0Z3p/hAxmOzHBUhqMzHJPh2AwfzPChDB/O8JEMH83wsQwfz/CJDJ/M8KkMn87wmQyfzfC5DJ/P8IUMX8zwpQxfzvCVDF/N8LUMX8/wjQzfzPCtDN/O8J0M383wvQzfz/CDDD/M8KMMP87wkww/zfCzDD/P8IsMv8zwqwy/zvCbDL/N8LsMv8/whwx/zPCnDH/O8JcMf83wtwx/z/CPDP/M8K8M/87wnwz/zfC/DIfkOE6OQ3McN8fxchw/xwlyHJbjhDlOlOPEOU6S46Q5Tpbj5DlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpLjojkuluPiOS6R45I5kuNSOS6d4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjkOz3HtHNfJcd0c18tx/Rw3yHHDHDfKceMcN8lx0xw3y3HzHLfIccsct8px6xy3yXHbHLfLcfscd8hxxxx3ynHnHHfJcdccd8tx9xz3yHHPHPfKce8c98lx3xz3y3H/HA/I8cAcD8rx4BwPyfHQHA/L8fAcj8jxyByPyvHoHI/J8dgcj8vx+BxPyPHEHM3xpBxPzvGUHE/N8bQcT8/xjBzPzPGsHM/O8ZwcR+R4bo7n5Xh+jhfkeGGOF+V4cY6X5HhpjpfleHmOV+R4ZY5X5Xh1jtfkeG2O1+V4fY435HhjjjfleHOOt+R4a4635Xh7jnfkOMgxyDHMMcoxzjHJMc0xyzHPscixzLHKsc6xybHNscuxz/HOHO/K8e4c78nx3hzvy/H+HB/IcWSOo3IcneOYHMfm+GCOD+X4cI6P5Phojo/l+HiOT+T4ZI5P5fh0js/k+GyOz+X4fI4v5Phiji/l+HKOr+T4ao6v5fh6jm/k+GaOb+X4do7v5Phuju/l+H6OH+T4YY4f5fhxjp/k+GmOn+X4eY5f5Phljl/l+HWO3+T4bY7f5fh9jj/k+GOOP+X4c46/5Phrjr/l+HuOf+T4Z45/5fh3jv/k+G+O/+U4pMBxChxa4LgFjlfg+AVOUOCwAicscKICJy5wkgInLXCyAicvcIoCpyxwqgKnLnCaAqctcLoCpy9whgJnLHCmAmcucJYCZy1wtgJnL3COAucscK4C5y5wngLnLXC+AucvcIECFyxwoQIXLnCRAhctcLECFy9wiQKXLJAClypw6QKXKXDZApcrcPkCVyhwxQJXKnDlAlcpcNUCVytw9QLXKHDNAtcqcHiBaxe4ToHrFrhegesXuEGBGxa4UYEbF7hJgZsWuFmBmxe4RYFbFrhVgVsXuE2B2xa4XYHbF7hDgTsWuFOBOxe4S4G7FrhbgbsXuEeBexa4V4F7F7hPgfsWuF+B+xd4QIEHFnhQgQcXeEiBhxZ4WIGHF3hEgUcWeFSBRxd4TIHHFnhcgccXeEKBJxZogScVeHKBpxR4aoGnFXh6gWcUeGaBZxV4doHnFDiiwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8BBgUGBYYFRgXGBSYFpgVmBeYFFgWXBsCFDhlgX2BTYFtgV2Bd4Z4F3FXh3gfcUeG+B9xV4f4EPFDiywFEFji5wTIFjC3ywwIcKfLjARwp8tMDHCny8wCcKfLLApwp8usBnCny2wOcKfL7AFwp8scCXCny5wFcKfLXA1wp8vcA3CnyzwLcKfLvAdwp8t8D3Cny/wA8K/LDAjwr8uMBPCvy0wM8K/LzALwr8ssCvCvy6wG8K/LbA7wr8vsAfCvyxwJ8K/LnAXwr8tcDfCvy9wD8K/LPAvwr8u8B/Cvy3wP8KHFLiOCUOLXHcEscrcfwSJyhxWIkTljhRiROXOEmJk5Y4WYmTlzhFiVOWOFWJU5c4TYnTljhdidOXOEOJM5Y4U4kzlzhLibOWOFuJs5c4R4lzljhXiXOXOE+J85Y4X4nzl7hAiQuWuFCJC5e4SImLlrhYiYuXuESJS5ZIiUuVuHSJy5S4bInLlbh8iSuUuGKJK5W4comrlLhqiauVuHqJa5S4ZolrlTi8xLVLXKfEdUtcr8T1S9ygxA1L3KjEjUvcpMRNS9ysxM1L3KLELUvcqsStS9ymxG1L3K7E7UvcocQdS9ypxJ1L3KXEXUvcrcTdS9yjxD1L3KvEvUvcp8R9S9yvxP1LPKDEA0s8qMSDSzykxENLPKzEw0s8osQjSzyqxKNLPKbEY0s8rsTjSzyhxBNLtMSTSjy5xFNKPLXE00o8vcQzSjyzxLNKPLvEc0ocUeK5JZ5X4vklXlDihSVeVOLFJV5S4qUlXlbi5SVeUeKVJV5V4tUlXlPitSVeV+L1Jd5Q4o0l3lTizSXeUuKtJd5W4u0l3lHioMSgxLDEqMS4xKTEtMSsxLzEosSyxKrEusSmxLbErsS+xDtLvKvEu0u8p8R7S7yvxPtLfKDEkSWOKnF0iWNKHFvigyU+VOLDJT5S4qMlPlbi4yU+UeKTJT5V4tMlPlPisyU+V+LzJb5Q4oslvlTiyyW+UuKrJb5W4usTDfn/K/GtEt8u8Z0S3y3xvRLfL/GDEj8s8aMSPy7xkxI/LfGzEj8v8YsSvyzxqxK/LvGbEr8t8bsSvy/xhxJ/LPGnEn8u8ZcSfy3xtxJ/L/GPEv8s8a8S/y7xnxL/LfG/EodUOE6FQysct8LxKhy/wgkqHFbhhBVOVOHEFU5S4aQVTlbh5BVOUeGUFU5V4dQVTlPhtBVOV+H0Fc5Q4YwVzlThzBXOUuGsFc5W4ewVzlHhnBXOVeHcFc5T4bwVzlfh/BUuUOGCFS5U4cIVLlLhohUuVuHiFS5R4ZIVUuFSFS5d4TIVLlvhchUuX+EKFa5Y4UoVrlzhKhWuWuFqFa5e4RoVrlnhWhUOr3DtCtepcN0K16tw/Qo3qHDDCjeqcOMKN6lw0wo3q3DzCreocMsKt6pw6wq3qXDbCrercPsKd6hwxwp3qnDnCnepcNcKd6tw9wr3qHDPCveqcO8K96lw3wr3q3D/Cg+o8MAKD6rw4AoPqfDQCg+r8PAKj6jwyAqPqvDoCo+p8NgKj6vw+ApPqPDECq3wpApPrvCUCk+t8LQKT6/wjArPrPCsCs+u8JwKR1R4boXnVXh+hRdUeGGFF1V4cYWXVHhphZdVeHmFV1R4ZYVXVXh1hddUeG2F11V4fYU3VHhjhTdVeHOFt1R4a4W3VXh7hXdUOKgwqDCsMKowrjCpMK0wqzCvsKiwrLCqsK6wqbCtsKuwr/DOCu+q8O4K76nw3grvq/D+Ch+ocGSFoyocXeGYCsdW+GCFD1X4cIWPVPhohY9V+HiFT1T4ZIVPVfh0hc9U+GyFz1X4fIUvVPhihS9V+HKFr1T4aoWvVfh6hW9U+GaFb1X4doXvVPhuhe9V+H6FH1T4YYUfVfhxhZ9U+GmFn1X4eYVfVPhlhV9V+HWF31T4bYXfVfh9hT9U+GOFP1X4c4W/VPhrhb9V+HuFf1T4Z4V/Vfh3hf9U+G+F/1U4pMZxahxa47g1jlfj+DVOUOOwGiescaIaJ65xkhonrXGyGievcYoap6xxqhqnrnGaGqetcboap69xhhpnrHGmGmeucZYaZ61xthpnr3GOGuesca4a565xnhrnrXG+GuevcYEaF6xxoRoXrnGRGhetcbEaF69xiRqXrJEal6px6RqXqXHZGpercfkaV6hxxRpXqnHlGlepcdUaV6tx9RrXqHHNGteqcXiNa9e4To3r1rhejevXuEGNG9a4UY0b17hJjZvWuFmNm9e4RY1b1rhVjVvXuE2N29a4XY3b17hDjTvWuFONO9e4S4271rhbjbvXuEeNe9a4V41717hPjfvWuF+N+9d4QI0H1nhQjQfXeEiNh9Z4WI2H13hEjUfWeFSNR9d4TI3H1nhcjcfXeEKNJ9ZojSfVeHKNp9R4ao2n1Xh6jWfUeGaNZ9V4do3n1DiixnNrPK/G82u8oMYLa7yoxotrvKTGS2u8rMbLa7yixitrvKrGq2u8psZra7yuxutrvKHGG2u8qcaba7ylxltrvK3G22u8o8ZBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2Nd9Z4V41313hPjffWeF+N99f4QI0jaxxV4+gax9Q4tsYHa3yoxodrfKTGR2t8rMbHa3yixidrfKrGp2t8psZna3yuxudrfKHGF2t8qcaXa3ylxldrfK3G12t8o8Y3a3yrxrdrfKfGd2t8r8b3a/ygxg9r/KjGj2v8pMZPa/ysxs9r/KLGL2v8qsava/ymxm9r/K7G72v8ocYfa/ypxp9r/KXGX2v8rcbfa/yjxj9r/KvGv2v8p8Z/a/yvxiENjtPg0AbHbXC8BsdvcIIGhzU4YYMTNThxg5M0OGmDkzU4eYNTNDhlg1M1OHWD0zQ4bYPTNTh9gzM0OGODMzU4c4OzNDhrg7M1OHuDczQ4Z4NzNTh3g/M0OG+D8zU4f4MLNLhggws1uHCDizS4aIOLNbh4g0s0uGSDNLhUg0s3uEyDyza4XIPLN7hCgys2uFKDKze4SoOrNrhag6s3uEaDaza4VoPDG1y7wXUaXLfB9Rpcv8ENGtywwY0a3LjBTRrctMHNGty8wS0a3LLBrRrcusFtGty2we0a3L7BHRrcscGdGty5wV0a3LXB3RrcvcE9Gtyzwb0a3LvBfRrct8H9Gty/wQMaPLDBgxo8uMFDGjy0wcMaPLzBIxo8ssGjGjy6wWMaPLbB4xo8vsETGjyxQRs8qcGTGzylwVMbPK3B0xs8o8EzGzyrwbMbPKfBEQ2e2+B5DZ7f4AUNXtjgRQ1e3OAlDV7a4GUNXt7gFQ1e2eBVDV7d4DUNXtvgdQ1e3+ANDd7Y4E0N3tzgLQ3e2uBtDd7e4B0NDhoMGgwbjBqMG0waTBvMGswbLBosG6warBtsGmwb7BrsG7yzwbsavLvBexq8t8H7Gry/wQcaHNngqAZHNzimwbENPtjgQw0+3OAjDT7a4GMNPt7gEw0+2eBTDT7d4DMNPtvgcw0+3+ALDb7Y4EsNvtzgKw2+2uBrDb7e4BsNvtngWw2+3eA7Db7b4HsNvt/gBw1+2OBHDUOHDBniJw1+2uBnDX7e4BcNftngV82wIV83+E2D3zb4XYPfN/hDgz82+FODPzf4S4O/Nvhbg783+EeDfzb4V4N/N/hPg/82+F+DQ1ocp8WhLY7b4ngtjt/iBC0Oa3HCFidqceIWJ2lx0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2hxyRZpcakWl25xmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFoe3uHaL67S4bovrtbh+ixu0uGGLG7W4cYubtLhpi5u1uHmLW7S4ZYtbtbh1i9u0uG2L27W4fYs7tLhjizu1uHOLu7S4a4u7tbh7i3u0uGeLe7W4d4v7tLhvi/u1uH+LB7R4YIsHtXhwi4e0eGiLh7V4eItHtHhki0e1eHSLx7R4bIvHtXh8iye0eGKLtnhSiye3eEqLp7Z4Wount3hGi2e2eFaLZ7d4TosjWjy3xfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxatavLrFa1q8tsXrWry+xRtavLHFm1q8ucVbWry1xdtavL3FO1octBi0GLYYtRi3mLSYtpi1mLdYtFi2WLVYt9i02LbYtdi3eGeLd7V4d4v3tHhvi/e1eH+LD7Q4ssVRLY5ucUyLY1t8sMWHWny4xUdafLTFx1p8vMUnWnyyxadafLrFZ1p8tsXnWny+xRdafLHFl1p8ucVXWny1xddafL3FN1p8s8W3Wny7xXdafLfF91p8v8UPWvywxY9a/LjFT1r8tMXPWvy8xS9a/LLFr1r8usVvWvy2xe9a/L7FH1r8scWfWvy5xV9a/LXF31r8vcU/Wvyzxb9a/LvFf1r8t8X/WhzS4TgdDu1w3A7H63D8DifocFiHE3Y4UYcTdzhJh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHM3c4S4ezdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh0t2SIdLdbh0h8t0uGyHy3W4fIcrdLhihyt1uHKHq3S4aoerdbh6h2t0uGaHa3U4vMO1O1ynw3U7XK/D9TvcoMMNO9yow4073KTDTTvcrMPNO9yiwy073KrDrTvcpsNtO9yuw+073KHDHTvcqcOdO9ylw1073K3D3Tvco8M9O9yrw7073KfDfTvcr8P9OzygwwM7PKjDgzs8pMNDOzysw8M7PKLDIzs8qsOjOzymw2M7PK7D4zs8ocMTO7TDkzo8ucNTOjy1w9M6PL3DMzo8s8OzOjy7w3M6HNHhuR2e1+H5HV7Q4YUdXtThxR1e0uGlHV7W4eUdXtHhlR1e1eHVHV7T4bUdXtfh9R3e0OGNHd7U4c0d3tLhrR3e1uHtHd7R4aDDoMOww6jDuMOkw7TDrMO8w6LDssOqw7rDpsO2w67DvsM7O7yrw7s7vKfDezu8r8P7O3ygw5EdjupwdIdjOhzb4YMdPtThwx0+0uGjHT7W4eMdPtHhkx0+1eHTHT7T4bMdPtfh8x2+0OGLHb7U4csdvtLhqx2+1uHrHb7R4ZsdvtXh2x2+0+G7Hb7X4fsdftDhhx1+1OHHHX7S4acdftbh5x1+0eGXHX7V4dcdftPhtx1+1+H3Hf7Q4Y8d/tThzx3+0uGvHf7W4e8d/tHhnx3+1eHfHf7T4b8d/tfhkB7H6XFoj+P2OF6P4/c4QY/Depywx4l6nLjHSXqctMfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1l6nLXH2Xqcvcc5epyzx7l6nLvHeXqct8f5epy/xwV6XLDHhXpcuMdFely0x8V6XLzHJXpcskd6XKrHpXtcpsdle1yux+V7XKHHFXtcqceVe1ylx1V7XK3H1Xtco8c1e1yrx+E9rt3jOj2u2+N6Pa7f4wY9btjjRj1u3OMmPW7a42Y9bt7jFj1u2eNWPW7d4zY9btvjdj1u3+MOPe7Y40497tzjLj3u2uNuPe7e4x497tnjXj3u3eM+Pe7b43497t/jAT0e2ONBPR7c4yE9HtrjYT0e3uMRPR7Z41E9Ht3jMT0e2+NxPR7f4wk9ntijPZ7U48k9ntLjqT2e1uPpPZ7R45k9ntXj2T2e0+OIHs/t8bwez+/xgh4v7PGiHi/u8ZIeL+3xsh4v7/GKHq/s8aoer+7xmh6v7fG6Hq/v8YYeb+zxph5v7vGWHm/t8bYeb+/xjh4HPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12PfY93tnjXT3e3eM9/3P7/xL8/T0+0OPIHkf1OLrHMT2O7fH/sVgPTHgeDAJFU6Rtatt2e2vbtm3bt7Zt28772KhtI7XtaGdnvh9xZk47wG6A/QCfGuDTA3xmgM8O8LkBPj/AFwb44gBfGuDLA3xlgK8O8LUBvj7ANwb45gDfGuDbA3xngO8O8L0Bvj/ADwb44QA/GuDHA/xkgJ8OcMQAPxvg5wP8YoBfDvCrAX49wG8G+O0Avxvg9wP8YYA/DvCnAf48wF8G+OsAfxvg7wP8Y4B/DvCvAf49wH8G+O8A/xvgyAGOGuDoAY4Z4NgBDglwnADHDXC8AMcPcGiAEwQ4YYATBTgswIkDnCTASQOcLMDJA5wiwCkDnCrAqQOcJsBpA5wuwOkDnCHAGQOcKcCZA5wlwFkDnC3A2QOcI8A5A5wrwLkDnCfAeQOcL8D5A1wgwAUDXCjAhQNcJMBFA1wswMUDXCLAJQMkwKUCXDrAZQJcNsDlAlw+wBUCXDHAlQJcOcBVAlw1wNUCXD3ANQJcM8C1Alw7wHUCXDfA9QJcP8ANAtwwwI0C3DjATQLcNMDNAtw8wC0C3DLArQLcOsBtAtw2wO0C3D7AHQLcMcCdAtw5wF0C3DXA3QLcPcA9AtwzwL0C3DvAfQLcN8D9Atw/wAMCPDDAgwI8OMBDAjw0wMMCPDzAIwI8MsCjAjw6wGMCPDbA4wI8PsATAjwxwJMCNMCTAzwlwFMDPC3A0wM8I8AzAzwrwLMDPCfAcwM8L8DzA7wgwAsDvCjAiwO8JMBLA7wswMsDvCLAKwO8KsCrA7wmwGsDvC7A6wO8IcAbA7wpwJsDvCXAWwO8LcDbA7wjwDsDvCvAuwO8J8B7A7wvwPsDfCDABwN8KMCHA3wkwEcDfCzAxwN8IsAnAxwe4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsCnAnw6wGcCfDbA5wJ8PsAXAnwxwJcCfDnAVwJ8NcDXAnw9wDcCfDPAtwJ8O8B3Anw3wPcCfD/ADwL8MMCPAvw4wE8C/DTAEQF+FuDnAX4R4JcBfhXg1wF+E+C3AX4X4PcB/hDgjwH+FODPAf4S4K8B/hbg7wH+EeCfAf4V4N8B/hPgvwH+F+DIAEcFODrAMQGODXBIiOOEOG6I44U4fohDQ5wgxAlDnCjEYSFOHOIkIU4a4mQhTh7iFCFOGeJUIU4d4jQhThvidCFOH+IMIc4Y4kwhzhziLCHOGuJsIc4e4hwhzhniXCHOHeI8Ic4b4nwhzh/iAiEuGOJCIS4c4iIhLhriYiEuHuISIS4ZIiEuFeLSIS4T4rIhLhfi8iGuEOKKIa4U4sohrhLiqiGuFuLqIa4R4pohrhXi2iGuE+K6Ia4X4vohbhDihiFuFOLGIW4S4qYhbhbi5iFuEeKWIW4V4tYhbhPitiFuF+L2Ie4Q4o4h7hTiziHuEuKuIe4W4u4h7hHiniHuFeLeIe4T4r4h7hfi/iEeEOKBIR4U4sEhHhLioSEeFuLhIR4R4pEhHhXi0SEeE+KxIR4X4vEhnhDiiSGeFKIhnhziKSGeGuJpIZ4e4hkhnhniWSGeHeI5IZ4b4nkhnh/iBSFeGOJFIV4c4iUhXhriZSFeHuIVIV4Z4lUhXh3iNSFeG+J1IV4f4g0h3hjiTSHeHOItId4a4m0h3h7iHSHeGeJdId4d4j0h3hvifSHeH+IDIT4Y4kMhPhziIyE+GuJjIT4e4hMhPhni8BAHIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhXi0yE+E+KzIT4X4vMhvhDiiyG+FOLLIb4S4qshvhbi6yG+EeKbIb4V4tshvhPiuyG+F+L7IX4Q4ochfhTixyF+EuKnIY4I8bMQPw/xixC/DPGrEL8O8ZsQvw3xuxC/D/GHEH8M8acQfw7xlxB/DfG3EH8P8Y8Q/wzxrxD/DvGfEP8N8b8QR4Y4KsTRIY4JcWyIQyIcJ8JxIxwvwvEjHBrhBBFOGOFEEQ6LcOIIJ4lw0ggni3DyCKeIcMoIp4pw6giniXDaCKeLcPoIZ4hwxghninDmCGeJcNYIZ4tw9gjniHDOCOeKcO4I54lw3gjni3D+CBeIcMEIF4pw4QgXiXDRCBeLcPEIl4hwyQiJcKkIl45wmQiXjXC5CJePcIUIV4xwpQhXjnCVCFeNcLUIV49wjQjXjHCtCNeOcJ0I1x36vzBGuEGEG0a4UYQbR7hJhJtGuFmEm0e4RYRbRrhVhFtHuE2E20a4XYTbR7hDhDtGuFOEO0e4S4S7RrhbhLtHuEeEe0a4V4R7R7hPhPtGuF+E+0d4QIQHRnhQhAdHeEiEh0Z4WISHR3hEhEdGeFSER0d4TITHRnhchMdHeEKEJ0Z4UoRGeHKEp0R4aoSnRXh6hGdEeGaEZ0V4doTnRHhuhOdFeH6EF0R4YYQXRXhxhJdEeGmEl0V4eYRXRHhlhFdFeHWE10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4R3RXh3hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRfh4hE9E+GSEwyMcRBhEGEYYRRhHmESYRphFmEdYRFhGWEVYR9hE2EbYRdhH+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRjgiws8i/DzCLyL8MsKvIvw6wm8i/DbC7yL8PsIfIvwxwp8i/DnCXyL8NcLfIvw9wj8i/DPCvyL8O8J/Ivw3wv8iHBnhqAhHRzgmwrERDolxnBjHjXG8GMePcWiME8Q4YYwTxTgsxoljnCTGSWOcLMbJY5wixiljnCrGqWOcJsZpY5wuxuljnCHGGWOcKcaZY5wlxlljnC3G2WOcI8Y5Y5wrxrljnCfGeWOcL8b5Y1wgxgVjXCjGhWNcJMZFY1wsxsVjXCLGJWMkxqViXDrGZWJcNsblYlw+xhViXDHGlWJcOcZVYlw1xtViXD3GNWJcM8a1Ylw7xnViXDfG9WJcP8YNYtwwxo1i3DjGTWLcNMbNYtw8xi1i3DLGrWLcOsZtYtw2xu1i3D7GHWLcMcadYtw5xl1i3DXG3WLcPcY9Ytwzxr1i3DvGfWLcN8b9Ytw/xgNiPDDGg2I8OMZDYjw0xsNiPDzGI2I8MsajYjw6xmNiPDbG42I8PsYTYjwxxpNiNMaTYzwlxlNjPC3G02M8I8YzYzwrxrNjPCfGc2M8L8bzY7wgxgtjvCjGi2O8JMZLY7wsxstjvCLGK2O8KsarY7wmxmtjvC7G62O8IcYbY7wpxptjvCXGW2O8LcbbY7wjxjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2N8KMaHY3wkxkdjfCzGx2N8IsYnYxwe4yDGIMYwxijGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsanYnw6xmdifDbG52J8PsYXYnwxxpdifDnGV2J8NcbXYnw9xjdifDPGt2J8O8Z3Ynw3xvdifD/GD2L8MMaPYvw4xk9i/DTGETF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+PIGEfFODrGMTGOjXFIguMkOG6C4yU4foJDE5wgwQkTnCjBYQlOnOAkCU6a4GQJTp7gFAlOmeBUCU6d4DQJTpvgdAlOn+AMCc6Y4EwJzpzgLAnOmuBsCc6e4BwJzpngXAnOneA8Cc6b4HwJzp/gAgkumOBCCS6c4CIJLprgYgkunuASCS6ZIAkuleDSCS6T4LIJLpfg8gmukOCKCa6U4MoJrpLgqgmuluDqCa6R4JoJrpXg2gmuk+C6Ca6X4PoJbpDghglulODGCW6S4KYJbpbg5glukeCWCW6V4NYJbpPgtglul+D2Ce6Q4I4J7pTgzgnukuCuCe6W4O4J7pHgngnuleDeCe6T4L4J7pfg/gkekOCBCR6U4MEJHpLgoQkeluDhCR6R4JEJHpXg0Qkek+CxCR6X4PEJnpDgiQmelKAJnpzgKQmemuBpCZ6e4BkJnpngWQmeneA5CZ6b4HkJnp/gBQlemOBFCV6c4CUJXprgZQlenuAVCV6Z4FUJXp3gNQlem+B1CV6f4A0J3pjgTQnenOAtCd6a4G0J3p7gHQnemeBdCd6d4D0J3pvgfQnen+ADCT6Y4EMJPpzgIwk+muBjCT6e4BMJPpng8AQHCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYJPpXg0wk+k+CzCT6X4PMJvpDgiwm+lODLCb6S4KsJvpbg6wm+keCbCb6V4NsJvpPguwm+l+D7CX6Q4IcJfpTgxwl+kuCnCY5I8LMEP0/wiwS/TPCrBL9O8JsEv03wuwS/T/CHBH9M8KcEf07wlwR/TfC3BH9P8I8E/0zwrwT/TvCfBP9N8L8ERyY4KsHRCY5JcGyCQ1IcJ8VxUxwvxfFTHJriBClOmOJEKQ5LceIUJ0lx0hQnS3HyFKdIccoUp0px6hSnSXHaFKdLcfoUZ0hxxhRnSnHmFGdJcdYUZ0tx9hTnSHHOFOdKce4U50lx3hTnS3H+FBdIccEUF0px4RQXSXHRFBdLcfEUl0hxyRRJcakUl05xmRSXTXG5FJdPcYUUV0xxpRRXTnGVFFdNcbUUV09xjRTXTHGtFNdOcZ0U101xvRTXT3GDFDdMcaMUN05xkxQ3TXGzFDdPcYsUt0xxqxS3TnGbFLdNcbsUt09xhxR3THGnFHdOcZcUd01xtxR3T3GPFPdMca8U905xnxT3TXG/FPdP8YAUD0zxoBQPTvGQFA9N8bAUD0/xiBSPTPGoFI9O8ZgUj03xuBSPT/GEFE9M8aQUTfHkFE9J8dQUT0vx9BTPSPHMFM9K8ewUz0nx3BTPS/H8FC9I8cIUL0rx4hQvSfHSFC9L8fIUr0jxyhSvSvHqFK9J8doUr0vx+hRvSPHGFG9K8eYUb0nx1hRvS/H2FO9I8c4U70rx7hTvSfHeFO9L8f4UH0jxwRQfSvHhFB9J8dEUH0vx8RSfSPHJFIenOEgxSDFMMUoxTjFJMU0xSzFPsUixTLFKsU6xSbFNsUuxT/GpFJ9O8ZkUn03xuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP01xRIqfpfh5il+k+GWKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4p/pPhnin+l+HeK/6T4b4r/pTgyxVEpjk5xTIpjUxyS4TgZjpvheBmOn+HQDCfIcMIMJ8pwWIYTZzhJhpNmOFmGk2c4RYZTZjhVhlNnOE2G02Y4XYbTZzhDhjNmOFOGM2c4S4azZjhbhrNnOEeGc2Y4V4ZzZzhPhvNmOF+G82e4QIYLZrhQhgtnuEiGi2a4WIaLZ7hEhktmSIZLZbh0hstkuGyGy2W4fIYrZLhihitluHKGq2S4aoarZbh6hmtkuGaGa2W4dobrZLhuhutluH6GG2S4YYYbZbhxhptkuGmGm2W4eYZbZLhlhltluHWG22S4bYbbZbh9hjtkuGOGO2W4c4a7ZLhrhrtluHuGe2S4Z4Z7Zbh3hvtkuG+G+2W4f4YHZHhghgdleHCGh2R4aIaHZXh4hkdkeGSGR2V4dIbHZHhshsdleHyGJ2R4YoYnZWiGJ2d4SoanZnhahqdneEaGZ2Z4VoZnZ3hOhudmeF6G52d4QYYXZnhRhhdneEmGl2Z4WYaXZ3hFhldmeFWGV2d4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4Z3ZnhXhndneE+G92Z4X4b3Z/hAhg9m+FCGD2f4SIaPZvhYho9n+ESGT2Y4PMNBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn2GT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobvZfh+hh9k+GGGH2X4cYafZPhphiMy/CzDzzP8IsMvM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98z/CPDPzP8K8O/M/wnw38z/C/DkRmOynB0hmMyHJvhkBzHyXHcHMfLcfwch+Y4QY4T5jhRjsNynDjHSXKcNMfJcpw8xylynDLHqXKcOsdpcpw2x+lynD7HGXKcMceZcpw5x1lynDXH2XKcPcc5cpwzx7lynDvHeXKcN8f5cpw/xwVyXDDHhXJcOMdFclw0x8VyXDzHJXJcMkdyXCrHpXNcJsdlc1wux+VzXCHHFXNcKceVc1wlx1VzXC3H1XNcI8c1c1wrx7VzXCfHdXNcL8f1c9wgxw1z3CjHjXPcJMdNc9wsx81z3CLHLXPcKsetc9wmx21z3C7H7XPcIccdc9wpx51z3CXHXXPcLcfdc9wjxz1z3CvHvXPcJ8d9c9wvx/1zPCDHA3M8KMeDczwkx0NzPCzHw3M8Iscjczwqx6NzPCbHY3M8LsfjczwhxxNzPClHczw5x1NyPDXH03I8Pcczcjwzx7NyPDvHc3I8N8fzcjw/xwtyvDDHi3K8OMdLcrw0x8tyvDzHK3K8Msercrw6x2tyvDbH63K8Pscbcrwxx5tyvDnHW3K8Ncfbcrw9xztyvDPHu3K8O8d7crw3x/tyvD/HB3J8MMeHcnw4x0dyfDTHx3J8PMcncnwyx+E5DnIMcgxzjHKMc0xyTHPMcsxzLHIsc6xyrHNscmxz7HLshw0Z8v8mns7xmRyfzfG5HJ/P8YUcX8zxpRxfzvGVHF/N8bUcX8/xjRzfzPGtHN/O8Z0c383xvRzfz/GDHD/M8aMcP87xkxw/zXFEjp/l+HmOX+T4ZY5f5fh1jt/k+G2O3+X4fY4/5Phjjj/l+HOOv+T4a46/5fh7jn/k+GeOf+X4d47/5Phvjv/lODLHUTmOznFMjmNzHFLgOAWOW+B4BY5f4NACJyhwwgInKnBYgRMXOEmBkxY4WYGTFzhFgVMWOFWBUxc4TYHTFjhdgdMXOEOBMxY4U4EzFzhLgbMWOFuBsxc4R4FzFjhXgXMXOE+B8xY4X4HzF7hAgQsWuFCBCxe4SIGLFrhYgYsXuESBSxZIgUsVuHSByxS4bIHLFbh8gSsUuGKBKxW4coGrFLhqgasVuHqBaxS4ZoFrFbh2gesUuG6B6xW4foEbFLhhgRsVuHGBmxS4aYGbFbh5gVsUuGWBWxW4dYHbFLhtgdsVuH2BOxS4Y4E7FbhzgbsUuGuBuxW4e4F7FLhngXsVuHeB+xS4b4H7Fbh/gQcUeGCBBxV4cIGHFHhogYcVeHiBRxR4ZIFHFXh0gccUeGyBxxV4fIEnFHhigScVaIEnF3hKgacWeFqBpxd4RoFnFnhWgWcXeE6B5xZ4XoHnF3hBgRcWeFGBFxd4SYGXFnhZgZcXeEWBVxZ4VYFXF3hNgdcWeF2B1xd4Q4E3FnhTgTcXeEuBtxZ4W4G3F3hHgXcWeFeBdxd4T4H3FnhfgfcX+ECBDxb4UIEPF/hIgY8W+FiBjxf4RIFPFji8wEGBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYFPFfh0gc8U+GyBzxX4fIEvFPhigS8V+HKBrxT4aoGvFfh6gW8U+GaBbxX4doHvFPhuge8V+H6BHxT4YYEfFfhxgZ8U+GmBIwr8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwL8L/KfAfwv8r8CRBY4qcHSBYwocW+CQEscpcdwSxytx/BKHljhBiROWOFGJw0qcuMRJSpy0xMlKnLzEKUqcssSpSpy6xGlKnLbE6UqcvsQZSpyxxJlKnLnEWUqctcTZSpy9xDlKnLPEuUqcu8R5Spy3xPlKnL/EBUpcsMSFSly4xEVKXLTExUpcvMQlSlyyREpcqsSlS1ymxGVLXK7E5UtcocQVS1ypxJVLXKXEVUtcrcTVS1yjxDVLXKvEtUtcp8R1S1yvxPVL3KDEDUvcqMSNS9ykxE1L3KzEzUvcosQtS9yqxK1L3KbEbUvcrsTtS9yhxB1L3KnEnUvcpcRdS9ytxN1L3KPEPUvcq8S9S9ynxH1L3K/E/Us8oMQDSzyoxINLPKTEQ0s8rMTDSzyixCNLPKrEo0s8psRjSzyuxONLPKHEE0s8qURLPLnEU0o8tcTTSjy9xDNKPLPEs0o8u8RzSjy3xPNKPL/EC0q8sMSLSry4xEtKvLTEy0q8vMQrSryyxKtKvLrEa0q8tsTrSry+xBtKvLHEm0q8ucRbSry1xNtKvL3EO0q8s8S7Sry7xHtKvLfE+0q8v8QHSnywxIdKfLjER0p8tMTHSny8xCdKfLLE4SUOSgxKDEuMSoxLTEpMS8xKzEssSixLrEqsS2xKbEvsSuxLfKrEp0t8psRnS3yuxOdLfKHEF0t8qcSXS3ylxFdLfK3E10t8o8Q3S3yrxLdLfKfEd0t8r8T3S/ygxA9L/KjEj0v8pMRPSxxR4mclfl7iFyV+WeJXJX5d4jclflvidyV+X+IPJf5Y4k8l/lziLyX+WuJvJf5e4h8l/lniXyX+XeI/Jf5b4n8ljixxVImjSxxT4tgSh1Q4ToXjVjheheNXOLTCCSqcsMKJKhxW4cQVTlLhpBVOVuHkFU5R4ZQVTlXh1BVOU+G0FU5X4fQVzlDhjBXOVOHMFc5S4awVzlbh7BXOUeGcFc5V4dwVzlPhvBXOV+H8FS5Q4YIVLlThwhUuUuGiFS5W4eIVLlHhkhVS4VIVLl3hMhUuW+FyFS5f4QoVrljhShWuXOEqFa5a4WoVrl7hGhWuWeFaFa5d4ToVrlvhehWuX+EGFW5Y4UYVblzhJhVuWuFmFW5e4RYVblnhVhVuXeE2FW5b4XYVbl/hDhXuWOFOFe5c4S4V7lrhbhXuXuEeFe5Z4V4V7l3hPhXuW+F+Fe5f4QEVHljhQRUeXOEhFR5a4WEVHl7hERUeWeFRFR5dMWL4kCEeW+FxFR5f4QkVnljhSRVa4ckVnlLhqRWeVuHpFZ5R4ZkVnlXh2RWeU+G5FZ5X4fkVXlDhhRVeVOHFFV5S4aUVXlbh5RVeUeGVFV5V4dUVXlPhtRVeV+H1Fd5Q4Y0V3lThzRXeUuGtFd5W4e0V3lHhnRXeVeHdFd5T4b0V3lfh/RU+UOGDFT5U4cMVPlLhoxU+VuHjFT5R4ZMVDq9wUGFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2Ff4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuGICj+r8PMKv6jwywq/qvDrCr+p8NsKv6vw+wp/qPDHCn+q8OcKf6nw1wp/q/D3Cv+o8M8K/6rw7wr/qfDfCv+rcGSFoyocXeGYCsdWOKTGcWoct8bxahy/xqE1TlDjhDVOVOOwGieucZIaJ61xshonr3GKGqescaoap65xmhqnrXG6GqevcYYaZ6xxphpnrnGWGmetcbYaZ69xjhrnrHGuGueucZ4a561xvhrnr3GBGhescaEaF65xkRoXrXGxGhevcYkal6yRGpeqcekal6lx2RqXq3H5GleoccUaV6px5RpXqXHVGlercfUa16hxzRrXqnHtGtepcd0a16tx/Ro3qHHDGjeqceMaN6lx0xo3q3HzGreoccsat6px6xq3qXHbGrercfsad6hxxxp3qnHnGnepcdcad6tx9xr3qHHPGveqce8a96lx3xr3q3H/Gg+o8cAaD6rx4BoPqfHQGg+r8fAaj6jxyBqPqvHoGo+p8dgaj6vx+BpPqPHEGk+q0RpPrvGUGk+t8bQaT6/xjBrPrPGsGs+u8Zwaz63xvBrPr/GCGi+s8aIaL67xkhovrfGyGi+v8Yoar6zxqhqvrvGaGq+t8boar6/xhhpvrPGmGm+u8ZYab63xthpvr/GOGu+s8a4a767xnhrvrfG+Gu+v8YEaH6zxoRofrvGRGh+t8bEaH6/xiRqfrHF4jYMagxrDGqMa4xqTGtMasxrzGosayxqrGusamxrbGrsa+xqfqvHpGp+p8dkan6vx+RpfqPHFGl+q8eUaX6nx1Rpfq/H1Gt+o8c0a36rx7RrfqfHdGt+r8f0aP6jxwxo/qvHjGj+p8dMaR9T4WY2f1/hFjV/W+FWNX9f4TY3f1vhdjd/X+EONP9b4U40/1/hLjb/W+FuNv9f4R41/1vhXjX/X+E+N/9b4X40jaxxV4+gax9Q4tsYhDY7T4LgNjtfg+A0ObXCCBidscKIGhzU4cYOTNDhpg5M1OHmDUzQ4ZYNTNTh1g9M0OG2D0zU4fYMzNDhjgzM1OHODszQ4a4OzNTh7g3M0OGeDczU4d4PzNDhvg/M1OH+DCzS4YIMLNbhwg4s0uGiDizW4eINLNLhkgzS4VINLN7hMg8s2uFyDyze4QoMrNrhSgys3uEqDqza4WoOrN7hGg2s2uFaDaze4ToPrNrheg+s3uEGDGza4UYMbN7hJg5s2uFmDmze4RYNbNrhVg1s3uE2D2za4XYPbN7hDgzs2uFODOze4S4O7Nrhbg7s3uEeDeza4V4N7N7hPg/s2uF+D+zd4QIMHNnhQgwc3eEiDhzZ4WIOHN3hEg0c2eFSDRzd4TIPHNnhcg8c3eEKDJzZ4UoM2eHKDpzR4aoOnNXh6g2c0eGaDZzV4doPnNHhug+c1eH6DFzR4YYMXNXhxg5c0eGmDlzV4eYNXNHhlg1c1eHWD1zR4bYPXNXh9gzc0eGODNzV4c4O3NHhrg7c1eHuDdzR4Z4N3NXh3g/c0eG+D9zV4f4MPNPhggw81+HCDjzT4aIOPNfh4g080+GSDwxscNBg0GDYYNRg3mDSYNpg1mDdYNFg2WDVYN9g02DbYNdg3+FSDTzf4TIPPNvhcg883+EKDLzb4UoMvN/hKg682+FqDrzf4RoNvNvhWg283+E6D7zb4XoPvN/hBgx82+FGDHzf4SYOfNjiiwc8a/LzBLxr8ssGvGvy6wW8a/LbB7xr8vsEfGvyxwZ8a/LnBXxr8tcHfGvy9wT8a/LPBvxr8u8F/Gvy3wf8aHNngqAZHNzimwbENDmlxnBbHbXG8FsdvcWiLE7Q4YYsTtTisxYlbnKTFSVucrMXJW5yixSlbnKrFqVucpsVpW5yuxelbnKHFGVucqcWZW5ylxVlbnK3F2Vuco8U5W5yrxblbnKfFeVucr8X5W1ygxQVbXKjFhVtcpMVFW1ysxcVbXKLFJVukxaVaXLrFZVpctsXlWly+xRVaXLHFlVpcucVVWly1xdVaXL3FNVpcs8W1Wly7xXVaXLfF9Vpcv8UNWtywxY1a3LjFTVrctMXNWty8xS1a3LLFrVrcusVtWty2xe1a3L7FHVrcscWdWty5xV1a3LXF3VrcvcU9Wtyzxb1a3LvFfVrct8X9Wty/xQNaPLDFg1o8uMVDWjy0xcNaPLzFI1o8ssWjWjy6xWNaPLbF41o8vsUTWjyxxZNatMWTWzylxVNbPK3F01s8o8UzWzyrxbNbPKfFc1s8r8XzW7ygxQtbvKjFi1u8pMVLW7ysxctbvKLFK1u8qsWrW7ymxWtbvK7F61u8ocUbW7ypxZtbvKXFW1u8rcXbW7yjxTtbvKvFu1u8p8V7W7yvxftbfKDFB1t8qMWHW3ykxUdbfKzFx1t8osUnWxze4qDFoMWwxajFuMWkxbTFrMW8xaLFssWqxbrFpsW2xa7FvsWnWny6xWdafLbF51p8vsUXWnyxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFES1+1uLnLX7R4pctftXi1y1+0+K3LX7X4vct/tDijy3+1OLPLf7S4q8t/tbi7y3+0eKfLf7V4t8t/tPivy3+1+LIFke1OLrFMS2ObXFIh+N0OG6H43U4fodDO5ygwwk7nKjDYR1O3OEkHU7a4WQdTt7hFB1O2eFUHU7d4TQdTtvhdB1O3+EMHc7Y4UwdztzhLB3O2uFsHc7e4RwdztnhXB3O3eE8Hc7b4Xwdzt/hAh0u2OFCHS7c4SIdLtrhYh0u3uESHS7ZIR0u1eHSHS7T4bIdLtfh8h2u0OGKHa7U4codrtLhqh2u1uHqHa7R4ZodrtXh2h2u0+G6Ha7X4fodbtDhhh1u1OHGHW7S4aYdbtbh5h1u0eGWHW7V4dYdbtPhth1u1+H2He7Q4Y4d7tThzh3u0uGuHe7W4e4d7tHhnh3u1eHeHe7T4b4d7tfh/h0e0OGBHR7U4cEdHtLhoR0e1uHhHR7R4ZEdHtXh0R0e0+GxHR7X4fEdntDhiR2e1KEdntzhKR2e2uFpHZ7e4RkdntnhWR2e3eE5HZ7b4Xkdnt/hBR1e2OFFHV7c4SUdXtrhZR1e3uEVHV7Z4VUdXt3hNR1e2+F1HV7f4Q0d3tjhTR3e3OEtHd7a4W0d3t7hHR3e2eFdHd7d4T0d3tvhfR3e3+EDHT7Y4UMdPtzhIx0+2uFjHT7e4RMdPtnh8A4HHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYdPtXh0x0+0+GzHT7X4fMdvtDhix2+1OHLHb7S4asdvtbh6x2+0eGbHb7V4dsdvtPhux2+1+H7HX7Q4YcdftThxx1+0uGnHY7o8LMOP+/wiw6/7PCrDr/u8JsOv+3wuw6/7/CHDn/s8KcOf+7wlw5/7fC3Dn/v8I8O/+zwrw7/7vCfDv/t8L8OR3Y4qsPRHY7pcGyHQ3ocp8dxexyvx/F7HNrjBD1O2ONEPQ7rceIeJ+lx0h4n63HyHqfoccoep+px6h6n6XHaHqfrcfoeZ+hxxh5n6nHmHmfpcdYeZ+tx9h7n6HHOHufqce4e5+lx3h7n63H+HhfoccEeF+px4R4X6XHRHhfrcfEel+hxyR7pcakel+5xmR6X7XG5HpfvcYUeV+xxpR5X7nGVHlftcbUeV+9xjR7X7HGtHtfucZ0e1+1xvR7X73GDHjfscaMeN+5xkx437XGzHjfvcYset+xxqx637nGbHrftcbset+9xhx537HGnHnfucZced+1xtx5373GPHvfsca8e9+5xnx737XG/Hvfv8YAeD+zxoB4P7vGQHg/t8bAeD+/xiB6P7PGoHo/u8Zgej+3xuB6P7/GEHk/s8aQe7fHkHk/p8dQeT+vx9B7P6PHMHs/q8ewez+nx3B7P6/H8Hi/o8cIeL+rx4h4v6fHSHi/r8fIer+jxyh6v6vHqHq/p8doer+vx+h5v6PHGHm/q8eYeb+nx1h5v6/H2Hu/o8c4e7+rx7h7v6fHeHu/r8f4eH+jxwR4f6vHhHh/p8dEeH+vx8R6f6PHJHof3OOjx/wIAAP//QT/THg==")
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x80, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7fe, 0x2)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r4], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}})
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0)
syz_emit_vhci(0x0, 0x5)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000000)={0x80, 0xd, 0xf00})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x2, 0x4, 0x8, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2b7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0xb, 0xfea, &(0x7f0000001e00)=""/4074}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x818000, &(0x7f0000000080)={[{@inlinecrypt}]}, 0x1, 0x72a, &(0x7f00000008c0)="$eJzs3c9rHOUbAPBnptluvm34poKKP0AqihVLN01sKT1ZD6KXYqDgNQ3JJsRMOjG7W5vQQwqCVxFFwYv+D148KZ79A/wXFERLPNRTZCabtGl227QmWc1+PjC7zzsz7fO+s+F9IO+SN4C+dbJ4SSOejYjxJGK4fT6JiEoZDURc2rhv7fbNqeJIYn39yu9JeU/Rjnv+TeF4RKxGxDMR8WMl4nS6M29jeWV+MsvqS+32SHNhcaSxvHJmbmFytj5bv3bx3LmxcxfOX7y4d2N97d33nq6df2vou/GZiVOjv3ybxKUYal+7dxx7aeOZVIpHuM3b+5Gsh5Jed4DHMhARR9rvT8VwHCkjAOAwW69GrAMAfSZR/wGgz2z+HmBzbW+/1sG6+e3NiBjslH+gvWY2WK5DHltLtq1MWG9iL6zeioirJ07u/PlLdqzZPqqze9FB9tUPxfxzqdP8k27NP9Fh/hnc/O7EP9R9/rub/0iX+W98lzneeb6Vd81/K+K5gU75k638SZf8V3eZ//s70391u7b+TcQrHetPsi1X9++HjMzMZfWzG6+dc5xs3Xz/QeM/1iX/6o7xf7StT4u7HP/Qpy/+tPqA/K++9ODPv9PzL2riJ7vM/3Hljc+7XSvyT3cZ/8M+/693mf/CCx+s7PJWAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBTSiBiKJK1txWlaq23s4f1kHEuzvNE8PZO3rk1HuVf2iaikm39qeXijnRTt0TK+2x4r47Wt9usR8UREfFb9X9muTeXZdK8HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtx+/b///P6sb+/wDAITfY6w4AAAdO/QeA/qP+A0D/Uf8BoP+o/wDQf9R/AOg/j1H/q/vRDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6xvjly8Wxvnb75lTRnr6+3JrPr5+ZrjfmawutqdpUvrRYm83z2axem8oXHvb/ZXm+ODYWrRsjzXqjOdJYXplYyFvXmhNzC5Oz9Yl65UBGBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPZqg8krQWEWkZp2mtdrS8diIqycxcVj8bEf+PiJ+rlWrRHu11pwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgjzWWV+Yns6y+JBAcvqASEf+CbvwXg17PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDw7m763eueAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAvpb8mEVEcp4ZfHrr/6tHkTrV8j4gPv7ryxY3JZnNptDj/x9b55pft82O96D8A8DCbdXqzjgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAJ43llfnJLKsv7WPQ6zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB3/g4AAP//gkXOfQ==")
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c910"], 0x15)
r8 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
ioctl$sock_netdev_private(r8, 0x89ff, &(0x7f0000000200)="aba692ccb1d763a4440348739d67918585f9a591af737141d0b7cb884b57e5a18c99c7fb70d7100ee917189aaf9b2e5555b05cddae6d0f8f5e283d74d7e4d6298c9050c8522d6da784738cd3d891cdb5d1df21a81a31843463bc3cd744712ada57550a04b98736446715e2215dfae2fd4dfbe8301ea4d55ff1c7643217738d9b8d1ee0805aaa16906d3957f4542b054ec8d7ccc1093d93")

8.997543198s ago: executing program 6 (id=552):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x20000000)

8.951563653s ago: executing program 0 (id=553):
r0 = socket(0x10, 0x3, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x4}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0xf7bd6878717d19af}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xc}}}, 0x9c}, 0x1, 0x0, 0x0, 0x2}, 0x20000000)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req={0x40000000, 0x100, 0x40, 0x40}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000980)={r4, 0x401}, &(0x7f00000009c0)=0x8)
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f0000001500)={[{@nodelalloc}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000080)={0x2a, 0x3, 0x0, {0x6, 0x9, 0x0, 'bsdgroups'}}, 0x2a)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r4, 0x9, 0x6, 0x1}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}}, 0x1c}}, 0x4000800)

8.848107419s ago: executing program 2 (id=554):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001"], 0x44}}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r1], 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd000})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x2, 0x2}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="67d8902400aa303e973a0e90231bdbdaf6a4bd866200c4e4fd703be2f51ed6ddc4a47116ec2db75cbe8e5a8955d96553a4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d00c99ec75855d2f8c43544ad29e6ec00000000008f9bbd5ccd352c6442bc94aa9015b71af7f44223f522114d9b8f17bd39d4666e6fd108649aecff3ffec7525dc854f0a23ef8fa51dc95ae69c704a8a9d5eb53b43f2f603a002915f61537db151790e933a1d1f309d288b741cfa793178a7c49b3e602c3927142b67c0b1ecf", 0xd3}, {&(0x7f0000000900)="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", 0x3ae}], 0x2, 0x0, 0x0, 0x4004000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40)
ppoll(&(0x7f00000003c0)=[{r2, 0x388}], 0x1, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40}, 0x94)

8.079102062s ago: executing program 4 (id=555):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_drop_inode\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_drop_inode\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000240)={[{}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@block_validity}, {@errors_continue}, {@nombcache}, {@usrjquota}]}, 0x3, 0x446, &(0x7f0000000ec0)="$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")

7.876138775s ago: executing program 6 (id=557):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@dax_inode}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x808069, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/67, 0x43}, {&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000200)=""/204, 0xcc}, {&(0x7f0000000300)=""/126, 0x7e}], 0x4, 0x6, 0x2)

6.90040319s ago: executing program 4 (id=558):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

6.794088227s ago: executing program 6 (id=559):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="636f6465706167653d6d61636761656c69632c756d61736b3d30303030303030303030303030303030303030373737372c696f636861727365743d6370313235302c0015b3173cf5af78f5660b705690e1652a0eac8ecc0360a2d112496d0290605f395ef8b23f7a89b206de572de6231d5e1f723eff1720dcf8e49108007ea4ed75f77bd650e6557ec856e6c3fcc1af89319809f04a0b02c90106edc98620c7aa33bf01ab3ebd503309e3ce78f16f4e7cb3866817b2fabdb235756e770c710274"], 0x4, 0x349, &(0x7f0000000640)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00')
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x3d8, 0x6)
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', <r5=>0x0, 0x0, 0x1, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}})
socketpair(0x22, 0x80803, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'tunl0\x00', r5, 0x20, 0x20, 0xffffffff, 0xa7b, {{0x5, 0x4, 0x2, 0xa, 0x14, 0x68, 0x0, 0x2c, 0x2f, 0x0, @multicast1, @loopback}}}})
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0700000004070000000000000000e2"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="c4e3fffffffffffff20000000000000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000b000014000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090500000000019400000000070000b7020000000000006b9af0ff000000007609000000000000dbaaf0fff1000000bf86000000000000070800000d000000bfa400000000000007040000f0ffffff560000000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000089000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, r0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d66a28cfe642c7266646eec3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00'])

6.507673079s ago: executing program 3 (id=560):
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x2, 0x0, 0x301e, 0x4, 0x8, 0xa67, 0x0, 0x1})
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b20ad011cb0f0cedb0cef9f6ec5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e5d97759017ace0c3f5"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=")
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x7d, &(0x7f0000000040)={r2, @in={{0xa, 0x4e21, @empty}}, 0xffff, 0x40}, 0x88)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r2, 0x9}, 0x8)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r3 = getpid()
r4 = gettid()
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r5, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
openat(r5, &(0x7f00000000c0)='.\x00', 0x515401, 0x408)
rt_tgsigqueueinfo(r3, r4, 0xf, &(0x7f0000000080)={0xfffffffc, 0x0, 0x3})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r6)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
readv(r7, &(0x7f0000001880)=[{&(0x7f0000000440)=""/164, 0xa4}], 0x1)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fbdbdfabf500000008000100ffffffff2c000480050003000100000005000300020000000500030005000000050003000500000005000300030000000800020002"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00q'], 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x9, 0x86, 0xac, 0x10, 0x5ac, 0x21d, 0x1891, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xb, 0x9, 0x130, 0x8, [{{0x9, 0x4, 0xa5, 0x0, 0x1, 0xff, 0x1, 0x1, 0xb2, [], [{{0x9, 0x5, 0xf, 0x3, 0x3f7, 0xa, 0x66, 0xf7}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})

6.428249982s ago: executing program 0 (id=561):
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000f11fac5b600346a3cf2dc67c5bf96eefd90802c528f84db5e3fc53e166dfc62a0d50ae803645e5d16182a2681f3849384200268bfa5c4991d8ef3c2679ce26a969c0d9046f3f64ca6999c39077bd2c8cd6cab448c9c880591bb4e20c350915203da8e126912d9df6847dee13e1c99fe1999a7b66331fd2447fc60d6e06e2ce393943ae07f22346d6901708f493c5ec64ff21318445692e7c4cbd1c3360a1c9c69c3c57c988c1be650748e46bebd0763aa5cfb62ae68c6f908897d422d607cb65e839037ce40e454621c4890a7c30e256743482503efa45da94b89b1d2e078021f4a898561f56659c12ed92ada36baa5f86f44d5546688f6b9e5fc5"], 0x9, 0x1a2, &(0x7f0000000000)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf)

4.843460213s ago: executing program 0 (id=562):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0)

4.544353002s ago: executing program 2 (id=563):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000300)=""/56, 0x38}, {&(0x7f0000000340)=""/35, 0x23}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000700)=""/139, 0x8b}, {&(0x7f00000007c0)=""/91, 0x5b}], 0x66, 0x9, 0x7)

4.388326071s ago: executing program 6 (id=564):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$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")
creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r4}, @NHA_ID={0x8, 0x6, 0xef}]}, 0x28}}, 0x0)
fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r1, 0x61, 0x40001002, r5, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000000000))
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1042, &(0x7f0000000140)=ANY=[], 0xd, 0x1a4, &(0x7f0000000380)="$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")
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
ftruncate(r6, 0xc17a)
openat$misdntimer(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0)
fsync(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r8, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
write$binfmt_format(r7, &(0x7f0000000000)='1\x00', 0x2400)

4.003697271s ago: executing program 3 (id=565):
r0 = msgget(0x2, 0x0)
msgsnd(r0, &(0x7f0000000180)=ANY=[], 0xd9, 0x0)

3.517859253s ago: executing program 2 (id=566):
syz_usb_connect(0x5, 0x24, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0xa, 0xd7, 0x25, 0x8, 0xbb4, 0xa12, 0x2b2b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0x10, 0x2, [{{0x9, 0x4, 0x37, 0x0, 0x0, 0x7c, 0x34, 0x6b, 0x40}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x13c, &(0x7f0000000800)={0x5, 0xf, 0x13c, 0x5, [@generic={0xf4, 0x10, 0x4, "a8c11730c297db66f05eb4e073396e307a79ae59e4a84c05966279190a0a4a70c4e9ec7173f066c15f338b2efe598f21d844f56b566b5c9a340f6622caf8a9a0baa81213fde15684c9fb15cd27dc3538a43fb3e167ba14c756a63aa9061f329d9acfc3c5bb1777e5de6eabd61d577bda52caf921d216b985f3739daa6d575dcddeae738e9f0092f0c971116d3fd9c1771d898fbc08bb0caf973831747b596e68e444f489ab8bb6260457f94779e6184d7a9a45f9021613a4cc4a3d773c2f680e3cbd9626dc48e9fcd522bd4ee10c5670a84bbd2c15390f61283ce6aa4af28af1c522a28b5102b45587a69307b71993fee1"}, @ssp_cap={0x20, 0x10, 0xa, 0xf7, 0x5, 0x7, 0xf0f, 0x0, [0x3f00, 0xff000f, 0xc170, 0x0, 0x3f30]}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x7, 0xf, 0xfffa}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "3ff6060cd003a34dc18095556f313acf"}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x430}}, {0x8b, &(0x7f0000000140)=@string={0x8b, 0x3, "fff79b10ff58d2834ccf235da7c51c25b0cc20ab502d4a09b28c91a25f7c59b31d49fec95c022f8f6f88c074a56b6434cf1d721b20fa065a9a66add317d4bd611289e45bb8a57d509ddb357ed155fa668bc663efca0ed95f386c71883dacebdc287998ffc59b5cf43973fcd8c3175c5727ed5b0f5c44cfceb5fa2bd8ea97b5799442ef0beb175497fe"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4c07}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41b}}]})

3.416191355s ago: executing program 3 (id=567):
syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000c40)=[{0xfff3, 0x0, 0xa3, &(0x7f0000000980)="0b8b85bca30360caaeb5183e3b78542776ab0966162a92ff0aae0dc35858b9e517032c62e85728273641398049161e5b2f734113ccb5be1555ca91e4231c167366ab1f256e34c7d577c59d094e7832efe50b67a44a9678d15f6501d3dd3a525ffcc0a3bdc7b67195f453ba1911545cfd538d44faebec311b30dee1752ab65092f4fd14df019a49bd10d128fb13fae6e7c7b52188f544a6b1327846d76a3bc05da1289f"}, {0x1000, 0x800, 0xe2, &(0x7f0000000b40)="1966194f4e239dda580f483e11a0fb48906c039c3a82e3790a1c8a082059321fd495ff43a6c5d27785bbf3214d7aab4e1e5d3307d8d290f8023c31a8f9ebb11b9f58d474ec8adaaaa11c80c7f1832ba6aa5a5dcfc4e4637b5168a6f2bb01fd70efe1f977657dfc8711e6f2dd86d3be6f4a07289019d0db480d56da5c9aca41b7358bb8a22f6770d02890904ac7183e2a5733ea193729300f06b992bfc71218052bb7077b4ebe616571c86b85c462a877d209d1ef26d82420ae24780427f8507a8f2861eddf3f2acfce52fd516a90390000000000"}, {0xac18, 0x16011, 0x8, &(0x7f0000000500)="514aff5ae7872724"}, {0xe00, 0xac11, 0x1a, &(0x7f0000000cc0)="c71bf6b1cc4534d96379fa693d3c5a0e073d0ba3df885f2dec6f"}, {0x5, 0x0, 0x2c, &(0x7f0000000a80)="bbd526720dfb1366ae286e12586bd1f8d988c509dbb8b6b472f0c2faeb44b45c9c9fee8b02b358e923cc782b"}, {0x0, 0x7600, 0xfdcf, &(0x7f0000003140)="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"/4098}], 0x6})

3.352889822s ago: executing program 0 (id=568):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./bus\x00', 0x12, &(0x7f0000000000)=ANY=[], 0xff, 0x5a53, &(0x7f0000007f00)="$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")
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB="00eab6d322df776a5de9392543da7d297b3dea0ff577e1203306177c9de953097835ff41d2e4698bec21b4bba9331159f72c0d6e028d39851e7533b6426f954ced0d22f0ab121ab5c4a036a56fc2b75a6255938c8cf81ae78573e8080e94fbcfff88ff858563e7072c5c2363794af71fe629400a290166e6f519cec6babd72f40e91fd740c3a1be4991241cac691f456de8d"], 0xf, 0xa21, &(0x7f00000014c0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
ftruncate(r2, 0xc17a)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000080)={0x6, 0x5, @name="9c53319dd8129f1c3eed6199de9bcd205e52eca47ffc41cbea334b0602858dfa"})
ptrace(0x10, 0x0)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
fdatasync(r2)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300), 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1b2826603062cf072e0000001110040000020000a10bb3fa8e64354bf53c1fd0a95173bc917554b1f72ac31e2b8c87e7ce1d62077fb3de825e01e3a30761741a79f3ae276e95dc6a7c2bf4bfe6dc14e119d2bd2eec265774f64640d0a5b545e807", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0x2a, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x1f, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000), 0x15)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000980)}, 0x20)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffff, '\x00', r4, r7, 0x5, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0x11, &(0x7f0000000e40)=ANY=[@ANYBLOB="181000060000000000000000ff0000001811000089c99ef8795fdd37b5214032c3f40b1bb3f44e2192501529d876226f53891842daf4c292f45290135f56a7c50dcb399b75a92d842293d4b780b4a5c26ec958ed940ef2b6a3bd78474c88334b0b318657af9a27", @ANYRESOCT=r4, @ANYBLOB="000000007b75418dd9e495e214000000bf090000000000005509010000000000950000000000000018600000fbffffff0000000006000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8a, 0x33, &(0x7f00000008c0)=""/51, 0x40f00, 0x4d, '\x00', r4, @flow_dissector=0x11, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r2, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff, r8, r8, r3, r9], &(0x7f0000000b40), 0x10, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000080ffff9500000000000000071a000000000000b5a3fcffffffffff181b0000", @ANYRES32=r2, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="000000000ea89d82b7028500000086000000950000400000000995000000000000550000009083b3b6000000"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, &(0x7f0000000640), 0x40f00, 0x8, '\x00', 0x0, @fallback=0xa, r2, 0x8, &(0x7f00000006c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x10, 0x1}, 0x10, r5, r2, 0x5, &(0x7f0000000740), &(0x7f0000000780)=[{0x5, 0x5, 0xb, 0x8}, {0x3, 0x1, 0xa, 0x3}, {0x4, 0x3, 0xc, 0x7}, {0x3, 0x1, 0x7, 0x4}, {0x2, 0x3, 0x4, 0x3}], 0x10, 0x4}, 0x94)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file3\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYBLOB="5333c923ead7d62a1aa7e1ad6926618430329b0ea6e6e24d7310d2249d89707d2a2ee55d187812e2a0109f36ed3b24151208962f1353f76d5dc207c8b61a67695d2e4632e520"], 0x1, 0x199, &(0x7f0000000440)="$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")
execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0)
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000040))

3.215757109s ago: executing program 4 (id=569):
socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b8192300400000fe8000000000000000000000000000aafe8000000000000000000000000000aa89070000000000003136b04faa6f243a113a3fbf8e044fb9f8335c53a9f6bf5970cb6ec8ce2900ffba087c7de1a271084cad038ef0720635b93832241def"], 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
socket(0x2c, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d80ff0008000200", @ANYRES16=r1, @ANYRES32=r2], 0x44}}, 0x0)

2.705058763s ago: executing program 3 (id=570):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socketpair(0x21, 0x800, 0xc9, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$tipc(r2, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x2}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r3=>0x0, 0x2f, 0x0, 0x4, 0xfff, 0x51, @mcast2, @mcast2, 0x40, 0x7800, 0x6, 0x80000000}})
bind$packet(r2, &(0x7f00000001c0)={0x11, 0x6, r3, 0x1, 0x8, 0x6, @remote}, 0x14)
recvmmsg(r1, &(0x7f000000acc0)=[{{&(0x7f0000000200)=@caif=@dgm, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/195, 0xc3}, {&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000640)=""/106, 0x6a}], 0x6, &(0x7f0000000740)=""/105, 0x69}, 0x4}, {{&(0x7f00000007c0)=@l2, 0x80, &(0x7f0000002900)=[{&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x3, &(0x7f0000002940)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f0000003940)=""/168, 0xa8}, {&(0x7f0000003a00)=""/64, 0x40}, {&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000004a40)=""/117, 0x75}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/44, 0x2c}, {&(0x7f0000005b00)=""/216, 0xd8}], 0x7}, 0xfffffff8}, {{&(0x7f0000005c80)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000007140)=[{&(0x7f0000005d00)=""/34, 0x22}, {&(0x7f0000005d40)=""/113, 0x71}, {&(0x7f0000005dc0)=""/89, 0x59}, {&(0x7f0000005e40)=""/41, 0x29}, {&(0x7f0000005e80)=""/124, 0x7c}, {&(0x7f0000005f00)=""/4096, 0x1000}, {&(0x7f0000006f00)=""/241, 0xf1}, {&(0x7f0000007000)}, {&(0x7f0000007040)=""/217, 0xd9}], 0x9, &(0x7f0000007200)=""/168, 0xa8}, 0xc9a}, {{&(0x7f00000072c0)=@in6, 0x80, &(0x7f0000007a00)=[{&(0x7f0000007340)=""/70, 0x46}, {&(0x7f00000073c0)=""/128, 0x80}, {&(0x7f0000007440)=""/241, 0xf1}, {&(0x7f0000007540)=""/219, 0xdb}, {&(0x7f0000007640)=""/255, 0xff}, {&(0x7f0000007740)}, {&(0x7f0000007780)=""/4, 0x4}, {&(0x7f00000077c0)=""/197, 0xc5}, {&(0x7f00000078c0)=""/84, 0x54}, {&(0x7f0000007940)=""/133, 0x85}], 0xa, &(0x7f0000007ac0)=""/16, 0x10}, 0xf}, {{&(0x7f0000007b00)=@xdp={0x2c, 0x0, <r4=>0x0}, 0x80, &(0x7f0000008d80)=[{&(0x7f0000007b80)=""/87, 0x57}, {&(0x7f0000007c00)=""/4096, 0x1000}, {&(0x7f0000008c00)=""/151, 0x97}, {&(0x7f0000008cc0)=""/150, 0x96}], 0x4, &(0x7f0000008dc0)=""/56, 0x38}, 0x2}, {{&(0x7f0000008e00)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000009180)=[{&(0x7f0000008e80)=""/38, 0x26}, {&(0x7f0000008ec0)=""/208, 0xd0}, {&(0x7f0000008fc0)=""/233, 0xe9}, {&(0x7f00000090c0)=""/138, 0x8a}], 0x4, &(0x7f00000091c0)=""/21, 0x15}, 0x5}, {{&(0x7f0000009200)=@alg, 0x80, &(0x7f0000009480)=[{&(0x7f0000009280)=""/188, 0xbc}, {&(0x7f0000009340)=""/65, 0x41}, {&(0x7f00000093c0)=""/147, 0x93}], 0x3, &(0x7f00000094c0)=""/65, 0x41}, 0x257a}, {{&(0x7f0000009540)=@un=@abs, 0x80, &(0x7f0000009700)=[{&(0x7f00000095c0)=""/224, 0xe0}, {&(0x7f00000096c0)=""/12, 0xc}], 0x2, &(0x7f0000009740)=""/218, 0xda}, 0x7}, {{0x0, 0x0, &(0x7f000000abc0)=[{&(0x7f0000009840)=""/211, 0xd3}, {&(0x7f0000009940)=""/85, 0x55}, {&(0x7f00000099c0)=""/4096, 0x1000}, {&(0x7f000000a9c0)}, {&(0x7f000000aa00)=""/89, 0x59}, {&(0x7f000000aa80)=""/169, 0xa9}, {&(0x7f000000ab40)=""/117, 0x75}], 0x7, &(0x7f000000ac40)=""/122, 0x7a}, 0x2}], 0xa, 0x20, &(0x7f000000af40))
fcntl$getownex(r0, 0x10, &(0x7f000000af80)={0x0, <r5=>0x0})
capset(&(0x7f000000afc0)={0x19980330, r5}, &(0x7f000000b000)={0xce82, 0x1ff, 0x2, 0x0, 0x2, 0xa28})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f000000b040)={{0x1, 0x1, 0x18, <r6=>r1}, './file0\x00'})
r7 = openat$cgroup_ro(r6, &(0x7f000000b080)='cpuset.effective_cpus\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f000000b0c0)={{0x1, 0x1, 0x18, <r8=>r6, {<r9=>0xee01, <r10=>0xffffffffffffffff}}, './file0\x00'})
fchown(r2, r9, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f000000b100)=@assoc_value={<r11=>0x0}, &(0x7f000000b140)=0x8)
statx(r8, &(0x7f000000b1c0)='./file0\x00', 0x4000, 0x1, &(0x7f000000b200)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
fsetxattr$system_posix_acl(r7, &(0x7f000000b180)='system.posix_acl_access\x00', &(0x7f000000b300)={{}, {0x1, 0x4}, [{0x2, 0x7, r9}, {0x2, 0x2, r9}, {0x2, 0x0, r9}, {0x2, 0x5, r9}], {0x4, 0x2}, [{0x8, 0x1, r10}, {0x8, 0x0, r10}, {0x8, 0x1, r12}, {0x8, 0x0, r10}, {0x8, 0x5, r10}, {0x8, 0x7, r10}], {0x10, 0x6}}, 0x74, 0x4)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b540)={0x11, 0x5, &(0x7f000000b380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, [@map_fd={0x18, 0x3, 0x1, 0x0, r7}]}, &(0x7f000000b3c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f000000b400)={0x3, 0x6, 0x6, 0xbc2e}, 0x10, 0x0, 0x0, 0x9, &(0x7f000000b440)=[r7, r7, r8], &(0x7f000000b480)=[{0x4, 0x3, 0x1, 0xc}, {0x7, 0x4, 0x10, 0x1}, {0x2, 0x5, 0x2, 0x9}, {0x2, 0x4, 0xe, 0xb}, {0x4, 0x4, 0xd, 0xb}, {0x1, 0x2, 0x9, 0xd}, {0x5, 0x3, 0xf, 0xc}, {0x5, 0x5}, {0x1, 0x3, 0xb, 0xc}], 0x10, 0x1}, 0x94)
ioctl$F2FS_IOC_GET_FEATURES(r13, 0x8004f50c, &(0x7f000000b600))
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f000000b640)={0x4a}, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f000000b680)='\x00', &(0x7f000000b6c0)='./file0\x00', 0xffffffffffffff9c)
ioctl$KDADDIO(r6, 0x4b34, 0x6)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f000000b700)=<r14=>0x0)
connect$nfc_raw(r6, &(0x7f000000b740)={0x27, r14, 0x0, 0x3}, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f000000b780), r7)
recvmsg$inet_nvme(r8, &(0x7f000000ce40)={&(0x7f000000b7c0)=@nfc_llcp, 0x80, &(0x7f000000cd40)=[{&(0x7f000000b840)=""/188, 0xbc}, {&(0x7f000000b900)=""/33, 0x21}, {&(0x7f000000b940)=""/4096, 0x1000}, {&(0x7f000000c940)=""/186, 0xba}, {&(0x7f000000ca00)=""/60, 0x3c}, {&(0x7f000000ca40)=""/240, 0xf0}, {&(0x7f000000cb40)=""/82, 0x52}, {&(0x7f000000cbc0)=""/22, 0x16}, {&(0x7f000000cc00)=""/203, 0xcb}, {&(0x7f000000cd00)}], 0xa, &(0x7f000000ce00)}, 0x20)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f000000ce80)=@sack_info={r11, 0xe, 0x8000}, &(0x7f000000cec0)=0xc)
r15 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x81f8943c, &(0x7f000000cf00)={0x0, ""/256, <r16=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r15, 0xd0009411, &(0x7f000000d100)={{r16, 0x1, 0xfc19, 0xff, 0xe, 0x6, 0x7, 0x0, 0x7, 0x13, 0x3ff, 0x9102, 0xc5a, 0xfffffffffffffffc, 0x7ff}})
sendmsg$can_j1939(r7, &(0x7f000000e1c0)={&(0x7f000000e100)={0x1d, r4, 0x3, {0x2, 0x0, 0x1}, 0x3b84026f2c6b252b}, 0x18, &(0x7f000000e180)={&(0x7f000000e140)="5d68f16e36a705e2fc50ff8c0af5dd89aed8b331f4ee147039f61c0b206be2b2f359d2f2023b2d459bf40aa53d19efa833ac531f2dcba0a3a241ef91c0675366", 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x40d4)

2.019022191s ago: executing program 4 (id=571):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x0)
rename(0x0, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/240, 0xf0}], 0x1}, 0x1ff}], 0x1, 0x20022, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYRES16], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @cgroup_skb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r4, 0x2000000, 0x3, 0x0, &(0x7f00000000c0)="13435c", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
close(r3)
bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2)
r7 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\x0f\xd4\xe1i\xfe\x16Y\xa1L\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3)
ftruncate(r7, 0xffff)
fcntl$addseals(r7, 0x409, 0x7)
r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000})
ppoll(&(0x7f0000000000)=[{r8, 0x306}], 0x1, 0x0, 0x0, 0x0)
accept4(r5, 0x0, 0x0, 0x0)
r9 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
ioctl$HIDIOCGDEVINFO(r9, 0x801c4803, &(0x7f0000000280)=""/72)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="a7b93a6e43168a9c44d59d327174b2370a294b9f7cbe794c35c9029f519a497bc3cf19df486473b1a9390a4dfa6632d41564ea957196625b1818b9d69af8c4caace4d356f2ba12cfae8e11eb"])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
syz_clone(0xc300000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)

1.555544411s ago: executing program 6 (id=572):
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x9, 0x1a2, &(0x7f0000000000)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf)

675.986783ms ago: executing program 3 (id=573):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
get_mempolicy(0x0, 0x0, 0x7, &(0x7f0000000000/0x3000)=nil, 0x6)

176.949002ms ago: executing program 3 (id=574):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x2, 0x0, 0x0, 0x0, {[@generic={0x8, 0x11, "6729f5317f7225bd837a5c20aaf03a"}, @exp_fastopen={0xfe, 0x6, 0xf989, "db36"}, @mptcp=@generic={0x84, 0x3, "cf"}, @exp_fastopen={0xfe, 0x11, 0xf989, "629221b6ab557e443d10505c46"}, @generic={0x3, 0xc, "32b9961fe19292f199d0"}, @timestamp={0x8, 0xa, 0x3, 0x1}]}}}}}}}, 0x0)

0s ago: executing program 6 (id=575):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x200101, 0x0)
read(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x84, 0x2, 0x2, 0x1, 0x0, [@local]}}}], 0x28}, 0x24004800)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100af6e7bb3ae19af695441a138a9fe820000000000000000010000003880060001000200000008000200000000000c00070000000000000000000800090000000000080008"], 0x4c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3)

kernel console output (not intermixed with test programs):

 1-1: config 16 interface 0 has no altsetting 0
[  394.190125][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.221669][ T1568] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=1a.35
[  394.231293][ T1568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.245268][ T1568] usb 1-1: Product: syz
[  394.252228][ T1568] usb 1-1: Manufacturer: syz
[  394.257123][ T1568] usb 1-1: SerialNumber: syz
[  394.263988][ T5872] usb 5-1: Using ep0 maxpacket: 32
[  394.453845][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  394.465996][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  394.476487][ T5872] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  394.486074][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.608997][ T1568] usb 1-1: ucan: probing device on interface #0
[  394.615632][ T1568] usb 1-1: ucan: invalid endpoint configuration
[  394.622385][ T1568] usb 1-1: ucan: probe failed; try to update the device firmware
[  394.737341][ T5872] usb 5-1: config 0 descriptor??
[  394.810147][ T1568] usb 1-1: USB disconnect, device number 14
[  394.845511][ T5872] hub 5-1:0.0: USB hub found
[  395.097573][ T5872] hub 5-1:0.0: 1 port detected
[  395.912988][ T1568] usb 5-1: USB disconnect, device number 12
[  396.210150][ T6717] loop0: detected capacity change from 0 to 65
[  396.258256][ T6717] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  396.265597][ T6717] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  396.790230][ T6721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.890033][ T6722] syzkaller0: entered promiscuous mode
[  396.895852][ T6722] syzkaller0: entered allmulticast mode
[  397.021678][ T6721] tipc: Resetting bearer <eth:syzkaller0>
[  397.109792][ T6719] tipc: Resetting bearer <eth:syzkaller0>
[  397.201359][ T6719] tipc: Disabling bearer <eth:syzkaller0>
[  397.846968][ T6720] loop3: detected capacity change from 0 to 4096
[  398.081160][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  398.105800][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  398.136027][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  398.157515][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  398.170390][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  398.281431][ T6720] NILFS (loop3): invalid segment: Checksum error in segment payload
[  398.290143][ T6720] NILFS (loop3): trying rollback from an earlier position
[  398.388395][ T6730] loop2: detected capacity change from 0 to 512
[  398.572445][ T6730] EXT4-fs: Invalid want_extra_isize 95
[  399.094101][ T6726] loop4: detected capacity change from 0 to 32768
[  399.104600][ T6726] btrfs: Deprecated parameter 'usebackuproot'
[  399.111204][ T6726] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  399.123546][ T6726] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.224 (6726)
[  399.199123][ T6720] NILFS (loop3): recovery complete
[  399.211144][ T6726] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  399.222050][ T6726] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  399.234190][ T6726] BTRFS info (device loop4): using free-space-tree
[  399.445571][ T6736] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  400.081894][ T6726] BTRFS info (device loop4): rebuilding free space tree
[  400.326941][ T6752] loop2: detected capacity change from 0 to 128
[  400.458571][   T30] audit: type=1800 audit(1752019245.019:7): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.224" name="file1" dev="loop4" ino=260 res=0 errno=0
[  400.503251][ T6752] udf: Unknown parameter ''
[  401.248697][ T5830] Bluetooth: hci5: command tx timeout
[  401.489547][ T6727] chnl_net:caif_netlink_parms(): no params data found
[  401.747101][ T5818] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  402.739587][ T5872] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  402.913251][ T5872] usb 3-1: device descriptor read/64, error -71
[  403.224068][ T5872] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  403.329553][ T5830] Bluetooth: hci5: command tx timeout
[  403.388574][ T5872] usb 3-1: device descriptor read/64, error -71
[  403.528451][ T5872] usb usb3-port1: attempt power cycle
[  403.718188][ T6774] loop3: detected capacity change from 0 to 64
[  403.889207][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.896876][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.905799][ T6727] bridge_slave_0: entered allmulticast mode
[  403.908335][ T5872] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  403.915701][ T6727] bridge_slave_0: entered promiscuous mode
[  404.026068][ T5872] usb 3-1: device descriptor read/8, error -71
[  404.160727][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.176127][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.184492][ T6727] bridge_slave_1: entered allmulticast mode
[  404.194742][ T6727] bridge_slave_1: entered promiscuous mode
[  404.308468][ T5872] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  404.378585][ T5872] usb 3-1: device descriptor read/8, error -71
[  404.489504][ T5872] usb usb3-port1: unable to enumerate USB device
[  404.637212][ T6727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  404.733785][ T6727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.264662][ T6727] team0: Port device team_slave_0 added
[  405.375053][ T6727] team0: Port device team_slave_1 added
[  405.419634][ T5830] Bluetooth: hci5: command tx timeout
[  405.478194][ T5872] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  405.639602][ T5872] usb 5-1: Using ep0 maxpacket: 32
[  405.655275][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.666767][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  405.678378][ T5872] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  405.688013][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.926236][ T5872] usb 5-1: config 0 descriptor??
[  405.991114][ T5872] hub 5-1:0.0: USB hub found
[  406.023951][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.031787][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.059067][ T6727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.092971][ T6781] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  406.174200][ T5872] hub 5-1:0.0: 1 port detected
[  406.383652][ T6784] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  406.393417][ T6784] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  406.402767][ T6784] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  406.412053][ T6784] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  406.585222][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.592582][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.619747][ T6727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.656541][ T6784] overlayfs: failed to resolve './file2': -2
[  406.940791][ T5872] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  406.949269][   T37] usb 5-1: USB disconnect, device number 13
[  407.488756][ T5830] Bluetooth: hci5: command tx timeout
[  407.757462][ T6727] hsr_slave_0: entered promiscuous mode
[  407.770473][ T6727] hsr_slave_1: entered promiscuous mode
[  407.781568][ T6727] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  407.789526][ T6727] Cannot create hsr debugfs directory
[  408.065871][ T6796] loop2: detected capacity change from 0 to 1024
[  408.492548][   T30] audit: type=1800 audit(1752019253.029:8): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.237" name="file2" dev="loop2" ino=22 res=0 errno=0
[  409.863294][ T6799] loop0: detected capacity change from 0 to 4096
[  410.129222][ T6799] NILFS (loop0): invalid segment: Checksum error in segment payload
[  410.137560][ T6799] NILFS (loop0): trying rollback from an earlier position
[  410.157442][ T6727] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  410.279928][ T6727] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  410.374779][ T6727] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  410.405624][ T6799] NILFS (loop0): recovery complete
[  410.469598][ T6727] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  410.548679][ T6810] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  411.813738][ T6727] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.981407][ T6819] loop3: detected capacity change from 0 to 256
[  412.041443][ T6819] exfat: Unknown parameter 'emount-ro'
[  412.065048][ T6727] 8021q: adding VLAN 0 to HW filter on device team0
[  412.179751][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.187412][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state
[  412.330366][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.338131][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state
[  412.541849][ T6819] loop3: detected capacity change from 0 to 64
[  412.800651][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'.
[  412.986376][ T6825] loop4: detected capacity change from 0 to 8
[  414.020675][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  414.027578][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  414.692425][ T6835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.754091][ T6838] syzkaller0: entered promiscuous mode
[  414.760075][ T6838] syzkaller0: entered allmulticast mode
[  414.889299][ T6835] tipc: Resetting bearer <eth:syzkaller0>
[  414.949171][   T11] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  415.086696][ T6727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  415.138265][   T11] usb 5-1: Using ep0 maxpacket: 32
[  415.189093][ T6833] tipc: Resetting bearer <eth:syzkaller0>
[  415.209584][   T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  415.221517][   T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  415.236294][   T11] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  415.247383][   T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.292548][ T6833] tipc: Disabling bearer <eth:syzkaller0>
[  415.428305][   T11] usb 5-1: config 0 descriptor??
[  415.501623][   T11] hub 5-1:0.0: USB hub found
[  415.744398][   T11] hub 5-1:0.0: 1 port detected
[  416.472885][   T37] usb 5-1: USB disconnect, device number 14
[  417.475860][ T6852] loop0: detected capacity change from 0 to 512
[  417.763500][ T6852] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  418.129859][ T6852] EXT4-fs (loop0): 1 truncate cleaned up
[  418.139193][ T6852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  418.451828][ T6727] veth0_vlan: entered promiscuous mode
[  418.627449][ T6727] veth1_vlan: entered promiscuous mode
[  419.063358][ T6727] veth0_macvtap: entered promiscuous mode
[  419.139075][ T6727] veth1_macvtap: entered promiscuous mode
[  419.247162][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.286246][ T6867] loop2: detected capacity change from 0 to 2048
[  419.320860][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.385938][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.506865][ T6727] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.516532][ T6727] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.525854][ T6727] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.541944][ T6727] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.591732][ T6867] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  419.758105][ T6864] loop4: detected capacity change from 0 to 4096
[  419.915646][ T6864] NILFS (loop4): invalid segment: Checksum error in segment payload
[  419.924989][ T6864] NILFS (loop4): trying rollback from an earlier position
[  419.966697][ T6874] FAULT_INJECTION: forcing a failure.
[  419.966697][ T6874] name failslab, interval 1, probability 0, space 0, times 0
[  419.980272][ T6874] CPU: 1 UID: 0 PID: 6874 Comm: syz.2.255 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(none) 
[  419.980443][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  419.980532][ T6874] Call Trace:
[  419.980588][ T6874]  <TASK>
[  419.980643][ T6874]  __dump_stack+0x26/0x30
[  419.980836][ T6874]  dump_stack_lvl+0x1df/0x270
[  419.981037][ T6874]  dump_stack+0x1e/0x25
[  419.981217][ T6874]  should_fail_ex+0x7dc/0x8a0
[  419.981420][ T6874]  should_failslab+0x15b/0x200
[  419.981638][ T6874]  __kmalloc_noprof+0x182/0x1310
[  419.981791][ T6874]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  419.982008][ T6874]  ? tomoyo_realpath_from_path+0xeb/0x9f0
[  419.982204][ T6874]  ? tomoyo_path_perm+0x91/0x9a0
[  419.982351][ T6874]  ? filter_irq_stacks+0x49/0x190
[  419.982498][ T6874]  ? kmsan_get_metadata+0xfb/0x160
[  419.982722][ T6874]  tomoyo_realpath_from_path+0xeb/0x9f0
[  419.982931][ T6874]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  419.983156][ T6874]  ? __srcu_read_lock+0x5e/0xd0
[  419.983356][ T6874]  tomoyo_path_perm+0x249/0x9a0
[  419.983606][ T6874]  tomoyo_path_truncate+0x35/0x40
[  419.983809][ T6874]  security_path_truncate+0x1dc/0x5c0
[  419.984015][ T6874]  vfs_truncate+0x862/0x9d0
[  419.984250][ T6874]  do_sys_truncate+0x103/0x240
[  419.984470][ T6874]  __x64_sys_truncate+0x74/0xb0
[  419.984688][ T6874]  x64_sys_call+0x321f/0x3db0
[  419.984901][ T6874]  do_syscall_64+0xd9/0x210
[  419.985110][ T6874]  ? irqentry_exit+0x16/0x60
[  419.985294][ T6874]  ? clear_bhb_loop+0x40/0x90
[  419.985461][ T6874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.985626][ T6874] RIP: 0033:0x7f6ab438e929
[  419.985743][ T6874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.985883][ T6874] RSP: 002b:00007f6ab5180038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  419.986029][ T6874] RAX: ffffffffffffffda RBX: 00007f6ab45b6080 RCX: 00007f6ab438e929
[  419.986141][ T6874] RDX: 0000000000000000 RSI: 000000400000f030 RDI: 0000200000000080
[  419.986244][ T6874] RBP: 00007f6ab5180090 R08: 0000000000000000 R09: 0000000000000000
[  419.986341][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.986433][ T6874] R13: 0000000000000001 R14: 00007f6ab45b6080 R15: 00007ffd0a815498
[  419.986576][ T6874]  </TASK>
[  419.986635][ T6874] ERROR: Out of memory at tomoyo_realpath_from_path.
[  420.415908][ T6864] NILFS (loop4): recovery complete
[  420.473056][ T6878] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  421.873203][ T6885] loop2: detected capacity change from 0 to 8
[  422.011542][ T6882] loop0: detected capacity change from 0 to 2048
[  422.348364][ T6882] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  422.697325][ T6882] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[  422.781638][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.259'.
[  423.125247][   T37] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  423.346072][   T37] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  423.354949][   T37] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  423.364288][   T37] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  423.375058][   T37] usb 5-1: config 220 has no interface number 2
[  423.381779][   T37] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  423.395655][   T37] usb 5-1: config 220 interface 0 has no altsetting 0
[  423.403355][   T37] usb 5-1: config 220 interface 76 has no altsetting 0
[  423.411513][   T37] usb 5-1: config 220 interface 1 has no altsetting 0
[  423.596612][ T6894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  423.647210][   T37] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  423.657101][   T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.665594][   T37] usb 5-1: Product: syz
[  423.670179][   T37] usb 5-1: Manufacturer: syz
[  423.675064][   T37] usb 5-1: SerialNumber: syz
[  423.679968][ T6896] syzkaller0: entered promiscuous mode
[  423.680075][ T6896] syzkaller0: entered allmulticast mode
[  423.787026][ T6894] tipc: Resetting bearer <eth:syzkaller0>
[  423.963067][ T6893] tipc: Resetting bearer <eth:syzkaller0>
[  424.062039][ T6893] tipc: Disabling bearer <eth:syzkaller0>
[  424.112754][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'.
[  424.344882][ T5877] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  424.403252][   T37] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  424.410184][   T37] usb 5-1: No valid video chain found.
[  424.416192][   T37] usb 5-1: selecting invalid altsetting 0
[  424.551900][   T37] usb 5-1: selecting invalid altsetting 0
[  424.561473][   T37] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  424.588501][ T5877] usb 4-1: Using ep0 maxpacket: 8
[  424.666751][   T37] usb 5-1: USB disconnect, device number 15
[  424.681919][ T5877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  424.693064][ T5877] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  424.702622][ T5877] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  424.712139][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.901116][ T5877] usb 4-1: config 0 descriptor??
[  425.010011][   T11] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  425.208663][   T11] usb 1-1: Using ep0 maxpacket: 32
[  425.321263][   T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  425.332929][   T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  425.343309][   T11] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  425.353008][   T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.521643][   T11] usb 1-1: config 0 descriptor??
[  425.580080][   T11] hub 1-1:0.0: USB hub found
[  425.859526][   T11] hub 1-1:0.0: 1 port detected
[  426.811694][   T11] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  426.820192][ T5877] usb 1-1: USB disconnect, device number 15
[  427.055092][ T6912] loop4: detected capacity change from 0 to 512
[  427.180054][   T37] usb 4-1: USB disconnect, device number 8
[  427.298557][ T6912] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  427.479254][ T6916] loop2: detected capacity change from 0 to 1024
[  427.671759][ T6912] EXT4-fs (loop4): 1 truncate cleaned up
[  427.680463][ T6912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  427.967615][ T6916] hfsplus: extend alloc file! (8192,512,16777719)
[  428.561081][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.928871][ T5102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.928982][ T5102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.015961][   T37] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  429.189769][   T37] usb 1-1: Using ep0 maxpacket: 8
[  429.202558][   T37] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  429.202745][   T37] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  429.203028][   T37] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  429.203195][   T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.209177][   T37] usb 1-1: config 0 descriptor??
[  429.223401][ T5102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.281334][ T5102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.296590][ T6926] hfsplus: extend alloc file! (8192,512,16777719)
[  429.646343][ T6932] loop3: detected capacity change from 0 to 8
[  430.252124][ T6930] loop4: detected capacity change from 0 to 4096
[  430.428763][ T6930] NILFS (loop4): invalid segment: Checksum error in segment payload
[  430.428902][ T6930] NILFS (loop4): trying rollback from an earlier position
[  430.637286][ T6930] NILFS (loop4): recovery complete
[  430.718244][ T6937] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  431.711999][   T37] usb 1-1: USB disconnect, device number 16
[  431.845664][ T3630] hfsplus: b-tree write err: -5, ino 8
[  432.111175][ T6945] tipc: Started in network mode
[  432.116710][ T6945] tipc: Node identity 1aff1b056935, cluster identity 4711
[  432.134465][ T6945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.274331][ T6947] syzkaller0: entered promiscuous mode
[  432.280383][ T6947] syzkaller0: entered allmulticast mode
[  432.370354][ T6945] tipc: Resetting bearer <eth:syzkaller0>
[  432.527132][ T6942] tipc: Resetting bearer <eth:syzkaller0>
[  432.621237][ T6942] tipc: Disabling bearer <eth:syzkaller0>
[  432.728430][ T6950] loop0: detected capacity change from 0 to 65
[  432.791390][ T6950] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  434.425927][ T6958] loop5: detected capacity change from 0 to 32768
[  434.659950][ T6958] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  434.660115][ T6958]   allowing incompatible features above 0.0: (unknown version)
[  434.660199][ T6958]   features: lz4
[  434.702284][ T6958] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  434.711007][ T6958] bcachefs (loop5): initializing new filesystem
[  434.734128][ T6958] bcachefs (loop5): going read-write
[  434.810613][ T6958] bcachefs (loop5): marking superblocks
[  434.927043][ T6958] bcachefs (loop5): initializing freespace
[  434.967256][ T6958] bcachefs (loop5): done initializing freespace
[  435.011416][ T6958] bcachefs (loop5): reading snapshots table
[  435.018063][ T6958] bcachefs (loop5): reading snapshots done
[  435.204193][   T37] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  435.335073][ T6958] bcachefs (loop5): done starting filesystem
[  435.424759][ T6963] loop4: detected capacity change from 0 to 512
[  435.448176][   T37] usb 3-1: Using ep0 maxpacket: 16
[  435.731880][ T6958] syz.5.277 (6958) used greatest stack depth: 1216 bytes left
[  435.758491][ T6963] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  435.789795][   T37] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  435.801476][   T37] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  435.840147][ T6727] bcachefs (loop5): shutting down
[  435.845702][ T6727] bcachefs (loop5): going read-only
[  435.851740][ T6727] bcachefs (loop5): finished waiting for writes to stop
[  435.941284][ T6727] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[  436.139629][ T6963] EXT4-fs (loop4): 1 truncate cleaned up
[  436.149334][ T6963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  436.168884][   T37] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  436.178496][   T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.186839][   T37] usb 3-1: Product: syz
[  436.191391][   T37] usb 3-1: Manufacturer: syz
[  436.196281][   T37] usb 3-1: SerialNumber: syz
[  436.341336][ T6727] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  436.404692][ T6727] bcachefs (loop5): clean shutdown complete, journal seq 4
[  436.455620][ T6727] bcachefs (loop5): marking filesystem clean
[  436.493442][ T6980] loop3: detected capacity change from 0 to 8
[  436.644152][   T37] usb 3-1: 0:2 : does not exist
[  436.649580][   T37] usb 3-1: unit 9 not found!
[  436.691823][ T6727] bcachefs (loop5): shutdown complete
[  436.879758][   T37] usb 3-1: USB disconnect, device number 13
[  437.326275][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.628782][   T37] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  437.849405][   T37] usb 1-1: Using ep0 maxpacket: 8
[  437.901085][   T37] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  437.911881][   T37] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  437.921359][   T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.012157][   T37] usb 1-1: config 0 descriptor??
[  438.049326][   T37] gspca_main: vc032x-2.14.0 probing 046d:0892
[  438.314950][   T37] gspca_vc032x: reg_r err -32
[  438.320485][   T37] vc032x 1-1:0.0: probe with driver vc032x failed with error -32
[  438.738739][ T6985] loop3: detected capacity change from 0 to 4096
[  439.046297][ T6985] NILFS (loop3): invalid segment: Checksum error in segment payload
[  439.054935][ T6985] NILFS (loop3): trying rollback from an earlier position
[  439.483430][ T6985] NILFS (loop3): recovery complete
[  439.513529][ T6993] loop4: detected capacity change from 0 to 128
[  439.561804][ T6995] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  439.918120][ T6993] nbd: must specify at least one socket
[  440.298562][   T11] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  440.491011][   T11] usb 5-1: Using ep0 maxpacket: 8
[  440.651441][   T11] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15
[  440.661138][   T11] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  440.673188][   T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  440.684646][   T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  440.805713][   T37] usb 1-1: USB disconnect, device number 17
[  440.925859][   T11] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  440.941283][   T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.951436][   T11] usb 5-1: Product: syz
[  440.956236][   T11] usb 5-1: Manufacturer: syz
[  440.961287][   T11] usb 5-1: SerialNumber: syz
[  440.972392][   T11] usb 5-1: config 0 descriptor??
[  441.010787][ T6993] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  441.363177][   T11] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  441.379487][   T11] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11
[  441.572596][    C0] powermate: config urb returned -71
[  441.579788][    C0] powermate: config urb returned -71
[  441.588013][    C0] powermate: config urb returned -71
[  441.596049][    C0] powermate: config urb returned -71
[  441.602077][   T11] usb 5-1: USB disconnect, device number 16
[  441.608495][    C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  442.748092][ T7005] loop0: detected capacity change from 0 to 32768
[  442.759596][ T7005] XFS: ikeep mount option is deprecated.
[  442.914941][ T7005] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  444.075327][ T7005] XFS (loop0): Ending clean mount
[  444.457009][ T7028] loop4: detected capacity change from 0 to 512
[  444.563945][ T7028] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  444.649356][   T37] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  444.696601][ T7028] EXT4-fs (loop4): 1 truncate cleaned up
[  444.705477][ T7028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.709631][ T7034] loop2: detected capacity change from 0 to 16
[  444.910473][ T5831] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  444.933558][   T37] usb 4-1: not running at top speed; connect to a high speed hub
[  444.971905][   T37] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  444.983788][   T37] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  444.997176][   T37] usb 4-1: config 1 interface 0 has no altsetting 0
[  445.098384][   T11] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  445.451779][   T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.467524][   T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  445.478233][   T11] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  445.487891][   T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.674448][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.800417][   T11] usb 3-1: config 0 descriptor??
[  445.915999][ T7036] loop5: detected capacity change from 0 to 32768
[  445.936312][   T37] usb 4-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.40
[  445.946412][   T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.961250][   T37] usb 4-1: Product: syz
[  445.965715][   T37] usb 4-1: Manufacturer: syz
[  445.973879][   T37] usb 4-1: SerialNumber: syz
[  446.497145][ T7030] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  446.512762][   T11] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  446.522144][   T11] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x2
[  446.621469][ T7036] loop5: detected capacity change from 0 to 256
[  446.631174][ T7036] exfat: Deprecated parameter 'utf8'
[  446.637998][ T7036] exfat: Deprecated parameter 'namecase'
[  446.639859][   T11] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  446.643931][ T7036] exfat: Deprecated parameter 'namecase'
[  446.738692][ T7036] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x53ff951d, utbl_chksum : 0xe619d30d)
[  446.771522][ T5825] Bluetooth: hci4: command 0x0406 tx timeout
[  447.008370][ T5877] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  447.119627][   T11] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00
[  447.313314][ T5877] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  447.322288][ T5877] usb 5-1: config 0 has no interface number 0
[  447.329040][ T5877] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.341001][ T5877] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.351688][ T5877] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  447.361453][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.526802][   T37] usbhid 4-1:1.0: can't add hid device: -71
[  447.533928][   T37] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  447.605290][   T37] usb 4-1: USB disconnect, device number 9
[  447.628337][ T5877] usb 5-1: config 0 descriptor??
[  448.242145][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.251948][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.473856][ T7041] loop5: detected capacity change from 0 to 4096
[  448.690041][ T7041] NILFS (loop5): invalid segment: Checksum error in segment payload
[  448.698657][ T7041] NILFS (loop5): trying rollback from an earlier position
[  448.978647][ T7041] NILFS (loop5): recovery complete
[  449.045787][ T7045] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  449.272322][ T5872] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  449.510622][ T5872] usb 4-1: Using ep0 maxpacket: 8
[  449.551405][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  449.563472][ T5872] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  449.573552][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.698307][ T5872] usb 4-1: config 0 descriptor??
[  449.756245][ T5872] gspca_main: vc032x-2.14.0 probing 046d:0892
[  449.965198][ T5872] gspca_vc032x: reg_r err -32
[  449.972169][ T5872] vc032x 4-1:0.0: probe with driver vc032x failed with error -32
[  449.985560][   T11] cp2112 0003:10C4:EA90.0002: error setting SMBus config
[  450.001490][   T11] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71
[  450.111185][   T11] usb 3-1: USB disconnect, device number 14
[  450.689783][ T5877] usbhid 5-1:0.1: can't add hid device: -71
[  450.696925][ T5877] usbhid 5-1:0.1: probe with driver usbhid failed with error -71
[  450.805547][ T5877] usb 5-1: USB disconnect, device number 17
[  451.018392][   T11] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  452.288753][ T5877] usb 4-1: USB disconnect, device number 10
[  452.288851][ T7068] loop2: detected capacity change from 0 to 512
[  452.350987][ T7068] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  452.725449][ T7063] sctp: failed to load transform for md5: -2
[  452.828344][ T7068] EXT4-fs error (device loop2): ext4_quota_enable:7120: comm syz.2.306: Bad quota inum: 29696, type: 1
[  452.898377][ T7077] loop3: detected capacity change from 0 to 512
[  452.928534][ T7068] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix.
[  452.979351][ T7077] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  453.056211][ T7068] EXT4-fs (loop2): mount failed
[  453.164379][ T7077] EXT4-fs (loop3): 1 truncate cleaned up
[  453.173704][ T7077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.824454][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.642779][ T7084] loop5: detected capacity change from 0 to 32768
[  454.743143][ T7084] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  454.751756][ T7084] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  454.814354][ T7084] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 19 (type: exp=4, found=2), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499
[  454.830726][ T7084] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  454.879142][ T7084] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  454.888567][ T7084] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  454.895622][ T7084] gfs2: fsid=syz:syz.0: File system withdrawn
[  454.902108][ T7084] CPU: 1 UID: 0 PID: 7084 Comm: syz.5.311 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(none) 
[  454.902284][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  454.902378][ T7084] Call Trace:
[  454.902440][ T7084]  <TASK>
[  454.902497][ T7084]  __dump_stack+0x26/0x30
[  454.902699][ T7084]  dump_stack_lvl+0x1df/0x270
[  454.902908][ T7084]  dump_stack+0x1e/0x25
[  454.903087][ T7084]  gfs2_withdraw+0x1d26/0x22e0
[  454.903379][ T7084]  gfs2_metatype_check_ii+0x11e/0x160
[  454.903624][ T7084]  gfs2_meta_buffer+0x4c7/0x600
[  454.903850][ T7084]  inode_go_instantiate+0xda/0x1cf0
[  454.904073][ T7084]  ? queue_delayed_work_on+0x21d/0x350
[  454.904256][ T7084]  ? kmsan_get_metadata+0xfb/0x160
[  454.904465][ T7084]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  454.904671][ T7084]  ? kmsan_get_metadata+0xfb/0x160
[  454.904880][ T7084]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  454.905102][ T7084]  ? __pfx_inode_go_instantiate+0x10/0x10
[  454.905323][ T7084]  gfs2_instantiate+0x24c/0x4b0
[  454.905500][ T7084]  gfs2_glock_wait+0x26a/0x3b0
[  454.905705][ T7084]  gfs2_glock_nq+0x28cf/0x34a0
[  454.905932][ T7084]  init_journal+0x13e8/0x3a30
[  454.906125][ T7084]  ? init_inodes+0x124/0x510
[  454.906279][ T7084]  ? init_inodes+0x124/0x510
[  454.906416][ T7084]  ? kmsan_get_metadata+0xfb/0x160
[  454.906632][ T7084]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  454.906860][ T7084]  init_inodes+0x124/0x510
[  454.907019][ T7084]  gfs2_fill_super+0x384a/0x3f50
[  454.907178][ T7084]  ? init_locking+0xed/0x500
[  454.907371][ T7084]  get_tree_bdev_flags+0x6e3/0x920
[  454.907594][ T7084]  ? __pfx_gfs2_fill_super+0x10/0x10
[  454.907751][ T7084]  ? __pfx_gfs2_fill_super+0x10/0x10
[  454.907900][ T7084]  ? __pfx_gfs2_get_tree+0x10/0x10
[  454.908127][ T7084]  get_tree_bdev+0x38/0x50
[  454.908330][ T7084]  gfs2_get_tree+0x57/0x350
[  454.908480][ T7084]  ? __pfx_gfs2_get_tree+0x10/0x10
[  454.908704][ T7084]  vfs_get_tree+0xb0/0x5c0
[  454.908913][ T7084]  ? mount_capable+0x99/0x100
[  454.909100][ T7084]  do_new_mount+0x738/0x1610
[  454.909317][ T7084]  ? kmsan_get_metadata+0xfb/0x160
[  454.909530][ T7084]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  454.909790][ T7084]  path_mount+0x6db/0x1e90
[  454.910007][ T7084]  ? user_path_at+0x32d/0x3d0
[  454.910204][ T7084]  __se_sys_mount+0x6eb/0x7d0
[  454.910438][ T7084]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  454.910682][ T7084]  __x64_sys_mount+0xe4/0x150
[  454.910920][ T7084]  x64_sys_call+0xfa7/0x3db0
[  454.911132][ T7084]  do_syscall_64+0xd9/0x210
[  454.911347][ T7084]  ? irqentry_exit+0x16/0x60
[  454.911534][ T7084]  ? clear_bhb_loop+0x40/0x90
[  454.911720][ T7084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.911892][ T7084] RIP: 0033:0x7f32411900ca
[  454.912013][ T7084] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  454.912158][ T7084] RSP: 002b:00007f32420bde68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  454.912310][ T7084] RAX: ffffffffffffffda RBX: 00007f32420bdef0 RCX: 00007f32411900ca
[  454.912427][ T7084] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 00007f32420bdeb0
[  454.912545][ T7084] RBP: 0000200000000180 R08: 00007f32420bdef0 R09: 0000000000000000
[  454.912660][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0
[  454.912763][ T7084] R13: 00007f32420bdeb0 R14: 00000000000125b0 R15: 0000200000000080
[  454.912914][ T7084]  </TASK>
[  455.262048][ T7084] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5
[  455.483692][   T11] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  455.831953][ T7091] loop3: detected capacity change from 0 to 4096
[  455.889806][   T11] usb 3-1: Using ep0 maxpacket: 8
[  455.976979][ T7091] NILFS (loop3): invalid segment: Checksum error in segment payload
[  455.992657][ T7091] NILFS (loop3): trying rollback from an earlier position
[  456.162700][   T11] usb 3-1: config 1 has an invalid interface number: 55 but max is 0
[  456.171355][   T11] usb 3-1: config 1 has no interface number 0
[  456.262726][ T7091] NILFS (loop3): recovery complete
[  456.323354][ T7095] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  456.531348][   T11] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a12, bcdDevice=2b.2b
[  456.541783][   T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.550299][   T11] usb 3-1: Product: 䰇
[  456.554756][   T11] usb 3-1: Manufacturer: ႛ壿菒콌崣얧├첰ꬠⵐॊ貲ꊑ籟덙䤝짾ɜ輯衯瓀殥㑤᷏᭲蘒娆暚펭퐗憽褒寤ꖸ偽縵嗑曺욋໊忙永衱갽礨ﾘ鯅猹ៃ坜ཛ䑜컏蝹韪禵䊔௯៫靔
[  456.576959][   T11] usb 3-1: SerialNumber: Ⰺ
[  457.000022][   T11] usb 3-1: USB disconnect, device number 16
[  457.553737][ T7105] loop4: detected capacity change from 0 to 256
[  458.249127][   T37] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  458.468080][   T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.479680][   T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  458.490506][   T37] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  458.500100][   T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.570567][   T37] usb 4-1: config 0 descriptor??
[  458.995693][   T37] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  459.047363][   T37] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  459.066359][ T7118] loop4: detected capacity change from 0 to 2048
[  459.120406][ T7116] loop0: detected capacity change from 0 to 512
[  459.217248][   T37] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE
[  459.223957][ T7116] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  459.267483][ T7118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.379708][ T7124] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  459.418568][ T7116] EXT4-fs (loop0): 1 truncate cleaned up
[  459.426915][ T7116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.524825][   T30] audit: type=1804 audit(1752019304.089:9): pid=7118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.325" name=2F6E6577726F6F742F36332F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop4" ino=15 res=1 errno=0
[  459.560859][    C1] vkms_vblank_simulate: vblank timer overrun
[  459.595432][ T5830] Bluetooth: hci1: unknown advertising packet type: 0x82
[  459.595616][ T5830] Bluetooth: hci1: unknown advertising packet type: 0x05
[  459.603309][ T5830] Bluetooth: hci1: unknown advertising packet type: 0x20
[  459.611059][ T5830] Bluetooth: hci1: unknown advertising packet type: 0x40
[  459.618486][ T5830] Bluetooth: hci1: unknown advertising packet type: 0x09
[  459.625899][ T5830] Bluetooth: hci1: Malformed LE Event: 0x02
[  459.833909][ T7111] cp2112 0003:10C4:EA90.0003: Multi-message I2C transactions not supported
[  459.928994][   T37] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71
[  459.945466][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.953856][   T37] usb 4-1: USB disconnect, device number 11
[  460.448869][ T1568] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  460.536546][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.680848][ T1568] usb 6-1: Using ep0 maxpacket: 8
[  460.740290][ T1568] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  460.752008][ T1568] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  460.762766][ T1568] usb 6-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  460.772221][ T1568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.887119][ T1568] usb 6-1: config 0 descriptor??
[  461.466743][ T1568] wacom 0003:056A:0000.0004: unbalanced delimiter at end of report description
[  461.550648][ T1568] wacom 0003:056A:0000.0004: parse failed
[  461.557146][ T1568] wacom 0003:056A:0000.0004: probe with driver wacom failed with error -22
[  461.653800][ T1568] usb 6-1: USB disconnect, device number 2
[  461.793267][ T7135] loop4: detected capacity change from 0 to 4096
[  461.889871][ T7135] NILFS (loop4): invalid segment: Checksum error in segment payload
[  461.898710][ T7135] NILFS (loop4): trying rollback from an earlier position
[  461.953519][   T11] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  461.976145][ T7135] NILFS (loop4): recovery complete
[  462.019811][ T7140] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  462.123562][   T11] usb 4-1: Using ep0 maxpacket: 8
[  462.204769][   T11] usb 4-1: config 1 has an invalid interface number: 55 but max is 0
[  462.213745][   T11] usb 4-1: config 1 has no interface number 0
[  462.302267][   T11] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a12, bcdDevice=2b.2b
[  462.311903][   T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.320432][   T11] usb 4-1: Product: 䰇
[  462.324879][   T11] usb 4-1: Manufacturer: ႛ壿菒콌崣얧├첰ꬠⵐॊ貲ꊑ籟덙䤝짾ɜ輯衯瓀殥㑤᷏᭲蘒娆暚펭퐗憽褒寤ꖸ偽縵嗑曺욋໊忙永衱갽礨ﾘ鯅猹ៃ坜ཛ䑜컏蝹韪禵䊔௯៫靔
[  462.351076][   T11] usb 4-1: SerialNumber: Ⰺ
[  462.744999][ T5877] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  462.792628][   T11] usb 4-1: USB disconnect, device number 12
[  462.958334][ T5877] usb 1-1: Using ep0 maxpacket: 8
[  462.988306][ T5877] usb 1-1: config 1 has an invalid interface number: 55 but max is 0
[  462.996781][ T5877] usb 1-1: config 1 has no interface number 0
[  463.096188][ T5877] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a12, bcdDevice=2b.2b
[  463.106133][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.114723][ T5877] usb 1-1: Product: 䰇
[  463.119315][ T5877] usb 1-1: Manufacturer: ႛ壿菒콌崣얧├첰ꬠⵐॊ貲ꊑ籟덙䤝짾ɜ輯衯瓀殥㑤᷏᭲蘒娆暚펭퐗憽褒寤ꖸ偽縵嗑曺욋໊忙永衱갽礨ﾘ鯅猹ៃ坜ཛ䑜컏蝹韪禵䊔௯៫靔
[  463.141159][ T5877] usb 1-1: SerialNumber: Ⰺ
[  463.228486][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  463.339112][ T7146] loop4: detected capacity change from 0 to 512
[  463.368332][    T9] usb 6-1: device descriptor read/64, error -71
[  463.448855][ T7146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  463.608830][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  463.650656][ T7146] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  463.734593][ T5877] usb 1-1: USB disconnect, device number 18
[  463.786888][ T7146] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.334: Unimplemented hash flags: 0x0001
[  463.796677][    T9] usb 6-1: device descriptor read/64, error -71
[  463.799257][ T7146] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.334: Corrupt directory, running e2fsck is recommended
[  463.915439][    T9] usb usb6-port1: attempt power cycle
[  464.147403][ T7150] loop3: detected capacity change from 0 to 512
[  464.192158][ T7150] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  464.233836][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.288377][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  464.318521][    T9] usb 6-1: device descriptor read/8, error -71
[  464.324748][ T7150] EXT4-fs (loop3): 1 truncate cleaned up
[  464.333690][ T7150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.568717][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  464.647433][    T9] usb 6-1: device descriptor read/8, error -71
[  464.761734][    T9] usb usb6-port1: unable to enumerate USB device
[  464.778215][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.862060][ T7154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.886377][ T7154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.942275][ T7154] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  467.070270][ T7169] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  467.955358][ T7161] loop0: detected capacity change from 0 to 4096
[  468.913471][ T7176] loop4: detected capacity change from 0 to 4096
[  469.049511][ T7176] NILFS (loop4): invalid segment: Checksum error in segment payload
[  469.058055][ T7176] NILFS (loop4): trying rollback from an earlier position
[  469.152678][ T7182] netlink: 'syz.3.347': attribute type 12 has an invalid length.
[  469.161389][ T7182] netlink: 'syz.3.347': attribute type 29 has an invalid length.
[  469.169749][ T7182] netlink: 148 bytes leftover after parsing attributes in process `syz.3.347'.
[  469.180262][ T7176] NILFS (loop4): recovery complete
[  469.215328][ T7183] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  469.224767][ T7180] syz_tun: entered allmulticast mode
[  469.331159][ T7177] syz_tun: left allmulticast mode
[  470.068058][ T1568] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  470.098436][   T37] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  470.269061][ T1568] usb 4-1: Using ep0 maxpacket: 8
[  470.275119][   T37] usb 6-1: Using ep0 maxpacket: 8
[  470.341577][   T37] usb 6-1: unable to read config index 0 descriptor/start: -61
[  470.349864][   T37] usb 6-1: can't read configurations, error -61
[  470.357295][ T1568] usb 4-1: config 1 has an invalid interface number: 55 but max is 0
[  470.366137][ T1568] usb 4-1: config 1 has no interface number 0
[  470.428852][ T1568] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a12, bcdDevice=2b.2b
[  470.438382][ T1568] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.446786][ T1568] usb 4-1: Product: 䰇
[  470.451460][ T1568] usb 4-1: Manufacturer: ႛ壿菒콌崣얧├첰ꬠⵐॊ貲ꊑ籟덙䤝짾ɜ輯衯瓀殥㑤᷏᭲蘒娆暚펭퐗憽褒寤ꖸ偽縵嗑曺욋໊忙永衱갽礨ﾘ鯅猹ៃ坜ཛ䑜컏蝹韪禵䊔௯៫靔
[  470.472981][ T1568] usb 4-1: SerialNumber: Ⰺ
[  470.550957][   T37] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  470.588316][    T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  470.818336][    T9] usb 5-1: Using ep0 maxpacket: 32
[  470.876482][    T9] usb 5-1: config 0 has an invalid interface number: 108 but max is 0
[  470.885327][    T9] usb 5-1: config 0 has no interface number 0
[  470.892011][    T9] usb 5-1: config 0 interface 108 altsetting 180 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  470.903626][    T9] usb 5-1: config 0 interface 108 has no altsetting 0
[  470.976763][    T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=97.c3
[  470.986530][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.995048][    T9] usb 5-1: Product: syz
[  471.000068][    T9] usb 5-1: Manufacturer: syz
[  471.004945][    T9] usb 5-1: SerialNumber: syz
[  471.076097][    T9] usb 5-1: config 0 descriptor??
[  471.117103][    T9] ttusbir 5-1:0.108: cannot find expected altsetting
[  471.292851][   T37] usb 6-1: Using ep0 maxpacket: 8
[  471.314153][ T7192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  471.323854][ T7192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.395871][   T37] usb 6-1: unable to read config index 0 descriptor/start: -61
[  471.404365][   T37] usb 6-1: can't read configurations, error -61
[  471.436481][   T37] usb usb6-port1: attempt power cycle
[  471.482850][ T1568] usb 4-1: USB disconnect, device number 13
[  472.494627][   T37] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  472.535687][   T37] usb 6-1: Using ep0 maxpacket: 8
[  472.591469][   T37] usb 6-1: unable to read config index 0 descriptor/start: -61
[  472.599804][   T37] usb 6-1: can't read configurations, error -61
[  472.640102][    T9] usb 5-1: USB disconnect, device number 18
[  472.741329][   T37] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  473.274360][   T37] usb 6-1: device descriptor read/8, error -71
[  473.422605][   T37] usb usb6-port1: unable to enumerate USB device
[  474.175744][ T7213] loop4: detected capacity change from 0 to 256
[  474.251829][ T7213] vfat: Deprecated parameter 'posix'
[  474.257905][ T7213] FAT-fs: "posix" option is obsolete, not supported now
[  474.453162][ T7213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.359'.
[  474.545771][ T7215] netlink: 'syz.5.360': attribute type 12 has an invalid length.
[  474.554164][ T7215] netlink: 'syz.5.360': attribute type 29 has an invalid length.
[  474.562600][ T7215] netlink: 148 bytes leftover after parsing attributes in process `syz.5.360'.
[  475.185702][ T7217] loop0: detected capacity change from 0 to 4096
[  475.280334][ T7217] NILFS (loop0): invalid segment: Checksum error in segment payload
[  475.289143][ T7217] NILFS (loop0): trying rollback from an earlier position
[  475.321585][ T7224] loop2: detected capacity change from 0 to 512
[  475.384352][ T7217] NILFS (loop0): recovery complete
[  475.391025][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  475.454974][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  475.462082][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  475.490119][ T7227] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  475.599301][    T9] usb 5-1: Using ep0 maxpacket: 8
[  475.675698][    T9] usb 5-1: config 1 has an invalid interface number: 55 but max is 0
[  475.684427][    T9] usb 5-1: config 1 has no interface number 0
[  475.711610][ T7224] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.362: corrupted in-inode xattr: invalid ea_ino
[  475.789604][ T7224] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.362: couldn't read orphan inode 15 (err -117)
[  475.818801][    T9] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a12, bcdDevice=2b.2b
[  475.828629][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.836957][    T9] usb 5-1: Product: 䰇
[  475.841639][    T9] usb 5-1: Manufacturer: ႛ壿菒콌崣얧├첰ꬠⵐॊ貲ꊑ籟덙䤝짾ɜ輯衯瓀殥㑤᷏᭲蘒娆暚펭퐗憽褒寤ꖸ偽縵嗑曺욋໊忙永衱갽礨ﾘ鯅猹ៃ坜ཛ䑜컏蝹韪禵䊔௯៫靔
[  475.868196][    T9] usb 5-1: SerialNumber: Ⰺ
[  475.916146][ T7224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  475.965837][ T7233] futex_wake_op: syz.3.367 tries to shift op by 144; fix this program
[  476.125911][   T30] audit: type=1800 audit(1752019320.679:10): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.362" name="bus" dev="loop2" ino=18 res=0 errno=0
[  476.332052][   T30] audit: type=1800 audit(1752019320.889:11): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.362" name="file2" dev="loop2" ino=19 res=0 errno=0
[  476.367060][    T9] usb 5-1: USB disconnect, device number 19
[  476.934989][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.732997][ T7239] loop5: detected capacity change from 0 to 4096
[  477.873839][ T7241] loop0: detected capacity change from 0 to 32768
[  477.922788][ T7241] (syz.0.369,7241,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0x2f17314b. Applying ECC.
[  477.938592][ T7241] (syz.0.369,7241,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xa7538fce. Applying ECC.
[  477.953463][ T7241] (syz.0.369,7241,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  477.992271][ T7241] (syz.0.369,7241,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  478.039362][ T7241] (syz.0.369,7241,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xeeb6ef59. Applying ECC.
[  478.054922][ T7241] (syz.0.369,7241,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x656d756e, computed 0x1ba59dbc
[  478.068364][ T7241] (syz.0.369,7241,1):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 288
[  478.078566][ T7241] (syz.0.369,7241,1):ocfs2_read_virt_blocks:1029 ERROR: status = -5
[  478.087055][ T7241] (syz.0.369,7241,1):ocfs2_read_dir_block:511 ERROR: status = -5
[  478.095253][ T7241] (syz.0.369,7241,1):ocfs2_find_entry_el:728 ERROR: reading directory 18, offset 0
[  478.113343][ T7241] (syz.0.369,7241,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  478.124923][ T7241] (syz.0.369,7241,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  478.125134][ T7241] (syz.0.369,7241,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  478.147011][ T7241] (syz.0.369,7241,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  478.156001][ T7241] (syz.0.369,7241,1):ocfs2_fill_super:1177 ERROR: status = -22
[  478.780116][ T7243] loop3: detected capacity change from 0 to 32768
[  478.791137][ T7243] XFS: ikeep mount option is deprecated.
[  478.975893][ T7243] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  479.529115][ T7239] ntfs3(loop5): Failed to read $UpCase (-4).
[  479.800624][ T7266] loop0: detected capacity change from 0 to 256
[  480.031140][ T7266] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  480.072892][ T7243] XFS (loop3): Ending clean mount
[  480.143027][ T7266] exFAT-fs (loop0): error, data size is invalid(10)
[  480.156795][ T7266] exFAT-fs (loop0): Filesystem has been set read-only
[  480.738507][ T5827] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  482.140006][ T7285] netlink: 592 bytes leftover after parsing attributes in process `syz.0.380'.
[  482.167174][ T7281] loop5: detected capacity change from 0 to 4096
[  482.290329][ T7281] NILFS (loop5): invalid segment: Checksum error in segment payload
[  482.305679][ T7281] NILFS (loop5): trying rollback from an earlier position
[  482.474944][ T7281] NILFS (loop5): recovery complete
[  482.525109][ T7290] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  483.145200][   T37] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  483.390333][   T37] usb 1-1: Using ep0 maxpacket: 8
[  483.450459][    T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  483.458133][   T37] usb 1-1: config 1 has an invalid interface number: 55 but max is 0
[  483.458276][   T37] usb 1-1: config 1 has no interface number 0
[  483.474370][   T37] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a12, bcdDevice=2b.2b
[  483.484143][   T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.492624][   T37] usb 1-1: Product: 䰇
[  483.497128][   T37] usb 1-1: Manufacturer: ႛ壿菒콌崣얧├첰ꬠⵐॊ貲ꊑ籟덙䤝짾ɜ輯衯瓀殥㑤᷏᭲蘒娆暚펭퐗憽褒寤ꖸ偽縵嗑曺욋໊忙永衱갽礨ﾘ鯅猹ៃ坜ཛ䑜컏蝹韪禵䊔௯៫靔
[  483.519152][   T37] usb 1-1: SerialNumber: Ⰺ
[  483.933802][    T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  483.948385][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.956702][    T9] usb 5-1: Product: syz
[  483.963022][    T9] usb 5-1: Manufacturer: syz
[  483.968702][    T9] usb 5-1: SerialNumber: syz
[  484.070169][   T37] usb 1-1: USB disconnect, device number 19
[  484.140899][    T9] usb 5-1: config 0 descriptor??
[  484.192029][    T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  484.200446][    T9] pctv452e: pctv452e_power_ctrl: 1
[  484.200446][    T9] 
[  484.208356][    T9] usb 5-1: selecting invalid altsetting 3
[  484.214355][    T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  484.214355][    T9] 
[  484.225170][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  484.331706][ T7308] loop3: detected capacity change from 0 to 256
[  484.489117][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  484.537472][    T9] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  484.635728][ T7296] loop4: detected capacity change from 0 to 4096
[  485.762964][ T7310] loop5: detected capacity change from 0 to 32768
[  485.792846][ T7310] XFS: ikeep mount option is deprecated.
[  485.849553][ T7310] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  486.306707][   T37] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  486.437528][ T7323] loop3: detected capacity change from 0 to 22
[  486.505523][   T37] usb 3-1: Using ep0 maxpacket: 16
[  486.522172][ T7323] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  486.658243][ T1568] usb 5-1: USB disconnect, device number 20
[  486.750928][   T37] usb 3-1: config 1 interface 0 altsetting 224 endpoint 0x81 has invalid wMaxPacketSize 0
[  486.762597][   T37] usb 3-1: config 1 interface 0 altsetting 224 endpoint 0x2 has an invalid bInterval 116, changing to 10
[  486.774621][   T37] usb 3-1: config 1 interface 0 has no altsetting 0
[  486.836574][ T7310] XFS (loop5): Ending clean mount
[  487.165321][   T37] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40
[  487.174981][   T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.184134][   T37] usb 3-1: Product: syz
[  487.188697][   T37] usb 3-1: Manufacturer: syz
[  487.193582][   T37] usb 3-1: SerialNumber: syz
[  487.232397][ T6727] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  487.609809][ T7312] loop2: detected capacity change from 0 to 8
[  487.739774][ T7312] SQUASHFS error: Failed to read block 0x6e6: -5
[  487.746430][ T7312] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  487.754312][ T7312] SQUASHFS error: Unable to read directory block [631:26]
[  488.439617][ T7330] loop0: detected capacity change from 0 to 4096
[  488.603383][ T7330] NILFS (loop0): invalid segment: Checksum error in segment payload
[  488.612271][ T7330] NILFS (loop0): trying rollback from an earlier position
[  488.772845][ T7330] NILFS (loop0): recovery complete
[  488.840399][ T7338] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  489.621314][   T37] usbhid 3-1:1.0: can't add hid device: -71
[  489.628198][   T37] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  489.703915][   T37] usb 3-1: USB disconnect, device number 17
[  490.221309][   T37] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  490.431492][   T37] usb 3-1: Using ep0 maxpacket: 8
[  490.519844][   T37] usb 3-1: config 1 has an invalid interface number: 55 but max is 0
[  490.528716][   T37] usb 3-1: config 1 has no interface number 0
[  490.576572][   T37] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a12, bcdDevice=2b.2b
[  490.586294][   T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.601300][   T37] usb 3-1: Product: 䰇
[  490.605754][   T37] usb 3-1: Manufacturer: ႛ壿菒콌崣얧├첰ꬠⵐॊ貲ꊑ籟덙䤝짾ɜ輯衯瓀殥㑤᷏᭲蘒娆暚펭퐗憽褒寤ꖸ偽縵嗑曺욋໊忙永衱갽礨ﾘ鯅猹ៃ坜ཛ䑜컏蝹韪禵䊔௯៫靔
[  490.629754][   T37] usb 3-1: SerialNumber: Ⰺ
[  490.683153][ T7353] loop0: detected capacity change from 0 to 16
[  490.707219][ T7340] loop3: detected capacity change from 0 to 4096
[  490.719842][ T7340] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  490.732761][ T7353] erofs (device loop0): invalid checksum 0x46c868e6, 0xf8c4b9bf expected
[  490.841051][ T7353] tipc: Cannot configure node identity twice
[  490.949190][ T1568] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  491.025161][   T37] usb 3-1: USB disconnect, device number 18
[  491.198216][ T1568] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  491.215593][ T1568] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  491.268345][ T1568] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  491.278085][ T1568] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  491.286428][ T1568] usb 6-1: SerialNumber: syz
[  491.364065][ T7340] ntfs3(loop3): Failed to initialize $Secure::$SII (-22).
[  491.372019][ T7340] ntfs3(loop3): Failed to initialize $Secure (-22).
[  491.584020][ T1568] usb 6-1: 0:2 : does not exist
[  491.760706][ T1568] usb 6-1: USB disconnect, device number 11
[  491.910658][ T7361] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  491.950204][ T7361] syzkaller0: entered promiscuous mode
[  491.956001][ T7361] syzkaller0: entered allmulticast mode
[  492.068613][ T7360] tipc: Resetting bearer <eth:syzkaller0>
[  492.125332][ T7360] tipc: Disabling bearer <eth:syzkaller0>
[  492.797928][ T7370] capability: warning: `syz.5.406' uses 32-bit capabilities (legacy support in use)
[  492.888280][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  493.010019][ T7375] wlan0 speed is unknown, defaulting to 1000
[  493.016846][ T7375] wlan0 speed is unknown, defaulting to 1000
[  493.024583][ T7375] wlan0 speed is unknown, defaulting to 1000
[  493.044478][ T7375] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  493.080646][    T9] usb 4-1: Using ep0 maxpacket: 8
[  493.100908][ T7375] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  493.114402][    T9] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config
[  493.125365][    T9] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[  493.135097][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.263381][    T9] usb 4-1: probing VID:PID(2201:012C)   
[  493.274139][    T9] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[  493.321270][    T9] vub300 4-1:64.0: probe with driver vub300 failed with error -22
[  493.404016][ T7375] wlan0 speed is unknown, defaulting to 1000
[  493.413636][ T7375] wlan0 speed is unknown, defaulting to 1000
[  493.423233][ T7375] wlan0 speed is unknown, defaulting to 1000
[  493.433057][ T7375] wlan0 speed is unknown, defaulting to 1000
[  493.442565][ T7375] wlan0 speed is unknown, defaulting to 1000
[  493.452321][ T7375] wlan0 speed is unknown, defaulting to 1000
[  493.618052][ T1568] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  493.843397][ T1568] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  493.855365][ T1568] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  493.865753][ T1568] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00
[  493.881506][ T1568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.940472][ T1568] usb 5-1: config 0 descriptor??
[  494.234033][    T9] usb 4-1: USB disconnect, device number 14
[  494.492776][ T1568] hid-generic 0003:04F3:0754.0005: unknown main item tag 0x0
[  494.503889][ T1568] hid-generic 0003:04F3:0754.0005: item fetching failed at offset 2/5
[  494.545350][ T1568] hid-generic 0003:04F3:0754.0005: probe with driver hid-generic failed with error -22
[  494.659513][ T5900] usb 5-1: USB disconnect, device number 21
[  494.772524][   T37] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  494.799469][    T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  494.951990][ T7396] netlink: 36 bytes leftover after parsing attributes in process `syz.5.416'.
[  494.968275][    T9] usb 1-1: Using ep0 maxpacket: 8
[  494.968460][ T1568] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  495.016222][   T37] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  495.018450][    T9] usb 1-1: config 1 has an invalid interface number: 55 but max is 0
[  495.026858][   T37] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  495.035446][    T9] usb 1-1: config 1 has no interface number 0
[  495.044532][   T37] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  495.151976][    T9] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a12, bcdDevice=2b.2b
[  495.161778][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.170616][    T9] usb 1-1: Product: 䰇
[  495.175025][    T9] usb 1-1: Manufacturer: ႛ壿菒콌崣얧├첰ꬠⵐॊ貲ꊑ籟덙䤝짾ɜ輯衯瓀殥㑤᷏᭲蘒娆暚펭퐗憽褒寤ꖸ偽縵嗑曺욋໊忙永衱갽礨ﾘ鯅猹ៃ坜ཛ䑜컏蝹韪禵䊔௯៫靔
[  495.196683][    T9] usb 1-1: SerialNumber: Ⰺ
[  495.259110][   T37] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  495.269089][   T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.277424][   T37] usb 3-1: Product: syz
[  495.282287][   T37] usb 3-1: Manufacturer: syz
[  495.298132][   T37] usb 3-1: SerialNumber: syz
[  495.356474][   T37] usb 3-1: config 0 descriptor??
[  495.369385][ T1568] usb 4-1: config index 0 descriptor too short (expected 62993, got 18)
[  495.378355][ T1568] usb 4-1: too many endpoints for config 0 interface 0 altsetting 82: 202, using maximum allowed: 30
[  495.390258][ T1568] usb 4-1: config 0 interface 0 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 202
[  495.403865][ T1568] usb 4-1: config 0 interface 0 has no altsetting 0
[  495.556695][ T1568] usb 4-1: New USB device found, idVendor=1a86, idProduct=0088, bcdDevice=35.36
[  495.566455][ T1568] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.575296][ T1568] usb 4-1: Product: syz
[  495.580125][ T1568] usb 4-1: Manufacturer: syz
[  495.585222][ T1568] usb 4-1: SerialNumber: syz
[  495.678413][   T37] usb 3-1: Found UVC 34.00 device syz (8086:0b5b)
[  495.685238][   T37] usb 3-1: No valid video chain found.
[  495.700333][ T1568] usb 4-1: config 0 descriptor??
[  495.967028][ T7391] (syz.2.413,7391,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  495.976712][ T7391] (syz.2.413,7391,1):ocfs2_fill_super:1177 ERROR: status = -22
[  496.212877][ T7394] loop3: detected capacity change from 0 to 1024
[  496.290958][ T7394] EXT4-fs: Ignoring removed mblk_io_submit option
[  496.507000][ T7394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  496.665602][    T9] usb 1-1: USB disconnect, device number 20
[  496.685535][ T7398] loop5: detected capacity change from 0 to 32768
[  496.695532][ T7398] XFS: ikeep mount option is deprecated.
[  496.700206][ T7394] EXT4-fs error (device loop3): __ext4_iget:5379: inode #12: block 13: comm syz.3.415: invalid block
[  496.767238][ T7394] EXT4-fs (loop3): Remounting filesystem read-only
[  496.789029][ T7398] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  496.822705][ T7404] loop4: detected capacity change from 0 to 512
[  496.887210][    T9] usb 4-1: USB disconnect, device number 15
[  496.921958][ T7404] EXT4-fs: Invalid want_extra_isize 95
[  497.343989][ T1568] usb 3-1: USB disconnect, device number 19
[  497.450700][ T7398] XFS (loop5): Ending clean mount
[  497.719370][ T6727] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  497.908663][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.105733][ T7422] loop0: detected capacity change from 0 to 64
[  498.354411][ T7419] netlink: 420 bytes leftover after parsing attributes in process `syz.0.420'.
[  499.051339][ T7427] loop2: detected capacity change from 0 to 512
[  499.150661][ T7424] loop3: detected capacity change from 0 to 32768
[  499.225512][ T7427] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  499.459859][ T7427] EXT4-fs (loop2): 1 truncate cleaned up
[  499.468362][ T7427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  500.021875][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.031676][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.188323][    T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  500.278941][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.396383][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.460230][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  500.470111][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.478727][    T9] usb 5-1: Product: syz
[  500.483277][    T9] usb 5-1: Manufacturer: syz
[  500.488429][    T9] usb 5-1: SerialNumber: syz
[  500.941497][ T5877] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  501.088699][    T9] cdc_ncm 5-1:1.0: bind() failure
[  501.107228][    T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  501.114725][    T9] cdc_ncm 5-1:1.1: bind() failure
[  501.160978][ T5877] usb 6-1: Using ep0 maxpacket: 16
[  501.185149][ T5877] usb 6-1: config 251 has an invalid interface number: 2 but max is 1
[  501.194144][ T5877] usb 6-1: config 251 has an invalid interface number: 209 but max is 1
[  501.203124][ T5877] usb 6-1: config 251 has no interface number 0
[  501.209904][ T5877] usb 6-1: config 251 has no interface number 1
[  501.216501][ T5877] usb 6-1: config 251 interface 2 has no altsetting 0
[  501.223760][ T5877] usb 6-1: config 251 interface 209 has no altsetting 0
[  501.280784][    T9] usb 5-1: USB disconnect, device number 22
[  501.362505][ T5877] usb 6-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=6d.9c
[  501.372610][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.381092][ T5877] usb 6-1: Product: syz
[  501.385542][ T5877] usb 6-1: Manufacturer: syz
[  501.390644][ T5877] usb 6-1: SerialNumber: syz
[  501.500281][ T5877] r8152-cfgselector 6-1: Unknown version 0x0000
[  501.718176][ T7441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.728688][ T7441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.743680][ T7441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.759480][ T7441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.776078][ T7441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.786766][ T7441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.812452][ T7441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.822901][ T7441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.904030][ T7441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.914313][ T7441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.975204][ T7452] loop3: detected capacity change from 0 to 8
[  502.024846][ T7452] squashfs: Unknown parameter '+'
[  502.440732][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  502.640789][ T5877] r8152 6-1:251.209: Expected endpoints are not found
[  502.708914][    T9] usb 4-1: Using ep0 maxpacket: 32
[  502.784182][    T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  502.797372][    T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  502.843729][ T5877] r8152-cfgselector 6-1: USB disconnect, device number 12
[  502.977355][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  502.992083][    T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  503.002609][    T9] usb 4-1: Product: syz
[  503.007157][    T9] usb 4-1: Manufacturer: syz
[  503.154844][ T7454] loop0: detected capacity change from 0 to 32768
[  503.164412][ T7454] XFS: ikeep mount option is deprecated.
[  503.245625][ T7456] loop2: detected capacity change from 0 to 2048
[  503.254253][    T9] hub 4-1:4.0: USB hub found
[  503.284922][ T7456] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  503.319367][ T7454] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  503.352065][ T7463] loop4: detected capacity change from 0 to 16
[  503.382672][ T7463] erofs (device loop4): rootino(nid 36) is not a directory(i_mode 125300)
[  503.468421][    T9] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  503.517011][ T7456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  504.153033][ T7454] XFS (loop0): Ending clean mount
[  504.476841][ T7471] loop4: detected capacity change from 0 to 2048
[  504.633718][ T7471] nilfs2: Unknown parameter ''
[  504.702896][ T7477] loop2: detected capacity change from 0 to 512
[  504.832896][ T1568] usb 4-1: USB disconnect, device number 16
[  504.878510][ T7477] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  504.969523][ T5831] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  505.051821][ T7477] EXT4-fs (loop2): 1 truncate cleaned up
[  505.060588][ T7477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  505.173467][ T7473] loop5: detected capacity change from 0 to 32768
[  505.518172][    T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  505.712626][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.755672][    T9] usb 6-1: config 0 has an invalid interface number: 237 but max is 0
[  505.765220][    T9] usb 6-1: config 0 has no interface number 0
[  505.772875][    T9] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  505.785360][    T9] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  505.796869][    T9] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  505.809489][    T9] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  505.906587][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[  505.916804][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.925367][    T9] usb 6-1: Product: syz
[  505.930028][    T9] usb 6-1: Manufacturer: syz
[  505.934908][    T9] usb 6-1: SerialNumber: syz
[  506.031860][    T9] usb 6-1: config 0 descriptor??
[  506.072302][    T9] xpad 6-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  506.086327][    T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.237/input/input13
[  506.322107][ T1568] usb 6-1: USB disconnect, device number 13
[  506.588273][ T7486] loop2: detected capacity change from 0 to 2048
[  506.641507][ T7486] udf: Unknown parameter 'dmode[00000000000000000000000'
[  507.037337][ T7486] wlan0 speed is unknown, defaulting to 1000
[  507.418179][ T7493] loop2: detected capacity change from 0 to 512
[  507.586923][ T7493] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[  507.703557][ T7493] System zones: 1-12
[  507.710225][ T7493] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.442: Directory hole found for htree index block 0
[  507.787572][ T7493] EXT4-fs (loop2): Remounting filesystem read-only
[  507.816050][ T7493] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[  507.863665][ T7493] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  507.875240][ T7493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  507.889315][ T1568] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  508.088175][ T1568] usb 4-1: Using ep0 maxpacket: 8
[  508.128634][ T1568] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  508.139380][ T1568] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  508.148939][ T1568] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.214464][ T7486] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  508.279878][ T1568] usb 4-1: config 0 descriptor??
[  508.321655][ T1568] gspca_main: vc032x-2.14.0 probing 046d:0892
[  509.068634][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.148843][ T1568] gspca_vc032x: reg_w err -71
[  509.154090][ T1568] vc032x 4-1:0.0: probe with driver vc032x failed with error -71
[  509.204404][ T1568] usb 4-1: USB disconnect, device number 17
[  509.928262][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  510.129805][    T9] usb 3-1: Using ep0 maxpacket: 32
[  510.261149][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  510.307225][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[  510.340867][    T9] usb 3-1: string descriptor 0 read error: -22
[  510.348093][    T9] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40
[  510.362720][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.618466][ T1568] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  510.726926][ T7515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.736526][ T7515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.859820][ T1568] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  510.875133][ T1568] usb 4-1: config 0 has no interface number 0
[  510.883630][ T1568] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  510.895035][ T1568] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  510.905408][ T1568] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  510.915056][ T1568] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.085338][    T9] usbhid 3-1:1.0: can't add hid device: -71
[  511.092544][    T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  511.153806][    T9] usb 3-1: USB disconnect, device number 20
[  511.157994][ T1568] usb 4-1: config 0 descriptor??
[  511.168897][   T37] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  511.415184][   T37] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  511.424629][   T37] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  511.435382][   T37] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  511.569613][   T37] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  511.579506][   T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.594812][   T37] usb 1-1: Product: syz
[  511.601637][   T37] usb 1-1: Manufacturer: syz
[  511.606754][   T37] usb 1-1: SerialNumber: syz
[  511.636657][ T7520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  511.646908][ T7520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  512.150674][ T7524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  512.161718][ T7524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  512.729647][   T37] usb 1-1: 0:2 : does not exist
[  512.860517][   T37] usb 1-1: USB disconnect, device number 21
[  514.333912][ T1568] usbhid 4-1:0.1: can't add hid device: -71
[  514.340980][ T1568] usbhid 4-1:0.1: probe with driver usbhid failed with error -71
[  514.429567][ T1568] usb 4-1: USB disconnect, device number 18
[  515.881465][ T7542] loop2: detected capacity change from 0 to 32768
[  515.908683][ T1568] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  515.936940][ T7542] XFS: ikeep mount option is deprecated.
[  516.012741][ T7542] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  516.157984][ T1568] usb 6-1: unable to get BOS descriptor or descriptor too short
[  516.230252][ T1568] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  516.239937][ T1568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.248409][ T1568] usb 6-1: Product: syz
[  516.253016][ T1568] usb 6-1: Manufacturer: syz
[  516.258114][ T1568] usb 6-1: SerialNumber: syz
[  516.816350][   T37] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  516.998480][   T37] usb 5-1: Using ep0 maxpacket: 8
[  517.166743][ T7564] wlan0 speed is unknown, defaulting to 1000
[  517.415750][ T7542] XFS (loop2): Ending clean mount
[  517.493713][   T37] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  517.505896][   T37] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  517.515615][   T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.634216][   T37] usb 5-1: config 0 descriptor??
[  517.685225][   T37] gspca_main: vc032x-2.14.0 probing 046d:0892
[  518.182891][ T5820] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  518.401475][ T7572] loop3: detected capacity change from 0 to 16
[  518.570283][ T7572] erofs: Unknown parameter 'ext4_sync_fs'
[  518.647986][   T37] gspca_vc032x: reg_r err -32
[  518.663954][   T37] vc032x 5-1:0.0: probe with driver vc032x failed with error -32
[  518.765372][   T37] usb 5-1: USB disconnect, device number 23
[  519.704902][ T1568] ati_remote2 6-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint
[  519.748775][ T1568] usb 6-1: USB disconnect, device number 14
[  520.092132][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  520.328913][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  520.338283][    T9] usb 4-1: config 0 has no interface number 0
[  520.344767][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.356350][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  520.366681][    T9] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  520.376298][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.479520][    T9] usb 4-1: config 0 descriptor??
[  520.863561][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.873298][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  521.596713][ T7589] loop5: detected capacity change from 0 to 8
[  522.254210][ T7593] netlink: 40 bytes leftover after parsing attributes in process `syz.4.473'.
[  523.008214][ T7598] loop5: detected capacity change from 0 to 512
[  523.040335][ T7598] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  523.266041][ T7598] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.474: bad orphan inode 131083
[  523.330792][ T7598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  523.538688][ T7598] overlayfs: upper fs needs to support d_type.
[  523.934101][    T9] usbhid 4-1:0.1: can't add hid device: -71
[  523.942477][    T9] usbhid 4-1:0.1: probe with driver usbhid failed with error -71
[  524.040602][    T9] usb 4-1: USB disconnect, device number 19
[  524.042592][ T6727] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /43/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  524.658412][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  524.758349][   T11] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  524.806469][ T5102] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.850895][ T6727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.863467][    T9] usb 4-1: Using ep0 maxpacket: 8
[  524.969729][    T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  524.979563][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.988111][    T9] usb 4-1: Product: syz
[  524.992565][    T9] usb 4-1: Manufacturer: syz
[  524.997445][    T9] usb 4-1: SerialNumber: syz
[  525.011546][   T11] usb 1-1: Using ep0 maxpacket: 8
[  525.034193][ T5102] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.068279][   T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  525.079480][   T11] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  525.089052][   T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.183810][    T9] usb 4-1: config 0 descriptor??
[  525.200532][   T11] usb 1-1: config 0 descriptor??
[  525.294368][   T11] gspca_main: vc032x-2.14.0 probing 046d:0892
[  525.324509][ T5102] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.448751][ T7611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.458452][ T7611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.584391][ T5102] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.898108][    T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  526.078503][   T11] gspca_vc032x: reg_r err -32
[  526.084237][   T11] vc032x 1-1:0.0: probe with driver vc032x failed with error -32
[  526.192089][   T11] usb 1-1: USB disconnect, device number 22
[  526.318912][    T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  526.528757][ T5102] bridge_slave_1: left allmulticast mode
[  526.544389][ T5102] bridge_slave_1: left promiscuous mode
[  526.552906][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.694993][ T5102] bridge_slave_0: left allmulticast mode
[  526.701190][ T5102] bridge_slave_0: left promiscuous mode
[  526.708859][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.448308][ T1568] usb 4-1: USB disconnect, device number 20
[  527.630539][ T5102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  527.701742][ T5102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  527.738170][ T5102] bond0 (unregistering): Released all slaves
[  527.985903][ T5102] tipc: Left network mode
[  528.580945][ T5102] hsr_slave_0: left promiscuous mode
[  528.598360][ T5102] hsr_slave_1: left promiscuous mode
[  528.606962][ T5102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  528.614990][ T5102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  528.628665][ T5102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  528.636411][ T5102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  528.693143][ T5102] veth1_macvtap: left promiscuous mode
[  528.700272][ T5102] veth0_macvtap: left promiscuous mode
[  528.706345][ T5102] veth1_vlan: left promiscuous mode
[  528.712103][ T5102] veth0_vlan: left promiscuous mode
[  529.805473][ T5102] team0 (unregistering): Port device team_slave_1 removed
[  529.887405][ T5102] team0 (unregistering): Port device team_slave_0 removed
[  530.343125][ T7624] loop0: detected capacity change from 0 to 8
[  531.418439][   T11] usb 4-1: new low-speed USB device number 21 using dummy_hcd
[  531.578071][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  531.596965][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  531.607323][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  531.635645][   T11] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  531.644496][   T11] usb 4-1: config 179 has no interface number 0
[  531.650460][ T7637] input: syz0 as /devices/virtual/input/input14
[  531.651161][   T11] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  531.675024][   T11] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  531.685441][   T11] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  531.697292][   T11] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[  531.708974][   T11] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  531.722750][   T11] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  531.728857][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  531.744026][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.866509][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  531.892587][ T7631] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  531.951701][   T11] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  532.074299][ T7634] wlan0 speed is unknown, defaulting to 1000
[  532.220445][   T11] xpad 4-1:179.65: probe with driver xpad failed with error -90
[  532.390506][ T7647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.404103][ T7647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.698039][ T7642] loop4: detected capacity change from 0 to 2048
[  532.715916][   T37] usb 4-1: USB disconnect, device number 21
[  532.855394][ T7642] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  533.104114][ T7642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  533.210718][ T7650] loop2: detected capacity change from 0 to 64
[  533.572193][ T7642] fuse: Unknown parameter '00000000000000000000'
[  533.675160][ T7634] chnl_net:caif_netlink_parms(): no params data found
[  533.688071][   T37] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  533.937878][   T37] usb 1-1: Using ep0 maxpacket: 8
[  533.968366][ T5830] Bluetooth: hci0: command tx timeout
[  533.970348][   T37] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  533.985502][   T37] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  533.995052][   T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.191234][   T37] usb 1-1: config 0 descriptor??
[  534.259479][   T37] gspca_main: vc032x-2.14.0 probing 046d:0892
[  535.048596][   T37] gspca_vc032x: reg_r err -32
[  535.053849][   T37] vc032x 1-1:0.0: probe with driver vc032x failed with error -32
[  535.120547][   T37] usb 1-1: USB disconnect, device number 23
[  535.248910][ T7664] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13)
[  535.255893][ T7664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  535.264291][ T7664] vhci_hcd vhci_hcd.0: Device attached
[  535.468768][ T7668] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15)
[  535.475752][ T7668] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  535.484462][ T7668] vhci_hcd vhci_hcd.0: Device attached
[  535.501382][ T1568] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  535.577928][    T9] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  535.666694][ T7664] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(18)
[  535.673687][ T7664] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  535.682324][ T7664] vhci_hcd vhci_hcd.0: Device attached
[  535.705774][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.713834][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.721983][ T7634] bridge_slave_0: entered allmulticast mode
[  535.732393][ T7634] bridge_slave_0: entered promiscuous mode
[  535.742400][ T1568] usb 3-1: unable to get BOS descriptor or descriptor too short
[  535.797937][ T1568] usb 3-1: not running at top speed; connect to a high speed hub
[  535.813482][ T7668] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17)
[  535.820438][ T7668] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  535.825137][ T1568] usb 3-1: config 3 has an invalid interface number: 42 but max is 1
[  535.828726][ T7668] vhci_hcd vhci_hcd.0: Device attached
[  535.836912][ T1568] usb 3-1: config 3 has an invalid interface number: 138 but max is 1
[  535.851437][ T1568] usb 3-1: config 3 has no interface number 0
[  535.862419][ T1568] usb 3-1: config 3 has no interface number 1
[  535.870517][ T1568] usb 3-1: config 3 interface 42 altsetting 42 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  535.882749][ T1568] usb 3-1: config 3 interface 42 altsetting 42 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  535.894390][ T1568] usb 3-1: config 3 interface 138 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64
[  535.901872][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.905759][ T1568] usb 3-1: config 3 interface 42 has no altsetting 0
[  535.913191][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.919642][ T1568] usb 3-1: config 3 interface 138 has no altsetting 0
[  535.927323][ T7634] bridge_slave_1: entered allmulticast mode
[  535.945162][ T7634] bridge_slave_1: entered promiscuous mode
[  536.033144][ T1568] usb 3-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice=a5.ce
[  536.042770][ T1568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.052260][ T1568] usb 3-1: Product: 壮饿஍✺흳쎷Ꮋ銏䔳㔑綟䉘㖃붽窂늦ɷé浽宽ᗦᩰ㕊ჭ顭❩イܼ奭阖礟ǔ運ḇ鬭
[  536.071228][ T1568] usb 3-1: Manufacturer: 㐉
[  536.076133][ T1568] usb 3-1: SerialNumber: с
[  536.088257][ T5830] Bluetooth: hci0: command tx timeout
[  536.169346][ T7675] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(23)
[  536.176323][ T7675] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  536.184741][ T7675] vhci_hcd vhci_hcd.0: Device attached
[  536.288579][ T7664] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20)
[  536.295531][ T7664] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  536.304074][ T7664] vhci_hcd vhci_hcd.0: Device attached
[  536.477376][ T7664] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  536.578712][ T1568] appletouch 3-1:3.42: Could not find int-in endpoint
[  536.585832][ T1568] appletouch 3-1:3.42: probe with driver appletouch failed with error -5
[  536.599346][ T1568] usbhid 3-1:3.42: couldn't find an input interrupt endpoint
[  536.620221][ T7664] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(27)
[  536.627184][ T7664] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  536.635287][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.635830][ T7664] vhci_hcd vhci_hcd.0: Device attached
[  536.720705][ T7668] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(30)
[  536.728099][ T7668] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  536.736845][ T7668] vhci_hcd vhci_hcd.0: Device attached
[  536.760283][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.868823][ T1568] appletouch 3-1:3.138: Failed to read mode from device.
[  536.884788][ T1568] appletouch 3-1:3.138: probe with driver appletouch failed with error -5
[  536.952663][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  536.960029][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  537.036027][ T1568] usb 3-1: USB disconnect, device number 21
[  537.173862][ T7668] vhci_hcd vhci_hcd.0: port 0 already used
[  537.272976][ T7634] team0: Port device team_slave_0 added
[  537.340049][ T7671] vhci_hcd: connection closed
[  537.340872][ T7666] vhci_hcd: connection reset by peer
[  537.340888][ T7669] vhci_hcd: connection closed
[  537.341392][ T7673] vhci_hcd: connection closed
[  537.346196][ T7680] vhci_hcd: connection closed
[  537.362609][ T7634] team0: Port device team_slave_1 added
[  537.363134][ T7678] vhci_hcd: connection closed
[  537.374396][ T7676] vhci_hcd: connection closed
[  537.423817][ T5102] vhci_hcd: stop threads
[  537.434251][ T5102] vhci_hcd: release socket
[  537.439262][ T5102] vhci_hcd: disconnect device
[  537.488401][ T5102] vhci_hcd: stop threads
[  537.499392][ T5102] vhci_hcd: release socket
[  537.504084][ T5102] vhci_hcd: disconnect device
[  537.560082][ T5102] vhci_hcd: stop threads
[  537.564649][ T5102] vhci_hcd: release socket
[  537.569905][ T5102] vhci_hcd: disconnect device
[  537.576129][ T5102] vhci_hcd: stop threads
[  537.580936][ T5102] vhci_hcd: release socket
[  537.585680][ T5102] vhci_hcd: disconnect device
[  537.600258][ T5102] vhci_hcd: stop threads
[  537.604942][ T5102] vhci_hcd: release socket
[  537.610932][ T5102] vhci_hcd: disconnect device
[  537.625196][ T5102] vhci_hcd: stop threads
[  537.631036][ T5102] vhci_hcd: release socket
[  537.635767][ T5102] vhci_hcd: disconnect device
[  537.642483][ T5102] vhci_hcd: stop threads
[  537.646955][ T5102] vhci_hcd: release socket
[  537.652326][ T5102] vhci_hcd: disconnect device
[  537.889129][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  537.896441][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  537.930089][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.070831][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.078352][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.105066][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  538.136083][ T5830] Bluetooth: hci0: command tx timeout
[  538.565666][ T7692] loop2: detected capacity change from 0 to 8
[  538.593587][ T7634] hsr_slave_0: entered promiscuous mode
[  538.604810][ T7634] hsr_slave_1: entered promiscuous mode
[  538.614041][ T7634] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  538.629445][ T7634] Cannot create hsr debugfs directory
[  538.666839][ T7682] vhci_hcd: connection closed
[  538.688825][ T1096] vhci_hcd: stop threads
[  538.699290][ T1096] vhci_hcd: release socket
[  538.704033][ T1096] vhci_hcd: disconnect device
[  540.225829][ T5825] Bluetooth: hci0: command tx timeout
[  540.245080][ T7634] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  540.285600][ T7634] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  540.319863][ T7634] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  540.364913][ T7634] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  540.678616][    T9] vhci_hcd: vhci_device speed not set
[  541.148100][   T11] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  541.356785][   T11] usb 1-1: Using ep0 maxpacket: 8
[  541.443322][   T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  541.454266][   T11] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  541.464451][   T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.546329][   T11] usb 1-1: config 0 descriptor??
[  541.624594][   T11] gspca_main: vc032x-2.14.0 probing 046d:0892
[  541.777055][ T7634] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.069783][   T37] usb usb42-port1: attempt power cycle
[  542.190182][ T7634] 8021q: adding VLAN 0 to HW filter on device team0
[  542.296336][   T11] gspca_vc032x: reg_r err -32
[  542.301851][   T11] vc032x 1-1:0.0: probe with driver vc032x failed with error -32
[  542.345659][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.353398][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  542.416467][   T11] usb 1-1: USB disconnect, device number 24
[  542.475312][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.483072][ T5102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  542.741066][ T7715] QAT: failed to copy from user cfg_data.
[  542.743995][   T37] usb usb42-port1: unable to enumerate USB device
[  544.180515][   T30] audit: type=1326 audit(1752019388.729:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a798e929 code=0x7ffc0000
[  544.204675][   T30] audit: type=1326 audit(1752019388.739:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68a798e929 code=0x7ffc0000
[  544.228368][   T30] audit: type=1326 audit(1752019388.739:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a798e929 code=0x7ffc0000
[  544.257060][   T30] audit: type=1326 audit(1752019388.749:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f68a798e929 code=0x7ffc0000
[  544.281165][   T30] audit: type=1326 audit(1752019388.749:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a798e929 code=0x7ffc0000
[  544.303983][   T30] audit: type=1326 audit(1752019388.749:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68a798e929 code=0x7ffc0000
[  544.326838][   T30] audit: type=1326 audit(1752019388.749:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a798e929 code=0x7ffc0000
[  544.349609][   T30] audit: type=1326 audit(1752019388.829:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68a798e929 code=0x7ffc0000
[  544.974548][   T30] audit: type=1326 audit(1752019389.099:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a798e929 code=0x7ffc0000
[  544.997572][   T30] audit: type=1326 audit(1752019389.099:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a798e929 code=0x7ffc0000
[  545.427533][ T7732] loop3: detected capacity change from 0 to 512
[  545.805906][ T7732] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.511: casefold flag without casefold feature
[  545.950862][ T7634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.113477][ T7732] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.511: couldn't read orphan inode 15 (err -117)
[  546.182767][ T7732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  546.470276][ T7729] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #2: comm syz.3.511: directory missing '.'
[  547.008354][ T7752] loop4: detected capacity change from 0 to 8
[  547.145779][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  548.008074][   T11] usb 4-1: new low-speed USB device number 22 using dummy_hcd
[  548.239227][   T11] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  548.253759][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.351139][   T11] usb 4-1: config 0 descriptor??
[  548.868342][   T11] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  548.878043][ T1568] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  548.878932][   T11] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  548.898103][   T11] asix 4-1:0.0: probe with driver asix failed with error -71
[  549.009767][   T11] usb 4-1: USB disconnect, device number 22
[  549.098766][ T1568] usb 3-1: Using ep0 maxpacket: 8
[  549.182600][ T1568] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  549.192457][ T1568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.200987][ T1568] usb 3-1: Product: syz
[  549.205490][ T1568] usb 3-1: Manufacturer: syz
[  549.210685][ T1568] usb 3-1: SerialNumber: syz
[  549.341208][ T1568] usb 3-1: config 0 descriptor??
[  549.438522][   T11] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  549.658233][   T11] usb 4-1: Using ep0 maxpacket: 8
[  549.712838][   T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  549.724569][   T11] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  549.734609][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.754023][ T1568] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  549.871224][   T11] usb 4-1: config 0 descriptor??
[  549.958774][   T11] gspca_main: vc032x-2.14.0 probing 046d:0892
[  550.053630][ T7634] veth0_vlan: entered promiscuous mode
[  550.242243][ T7634] veth1_vlan: entered promiscuous mode
[  550.591199][   T11] gspca_vc032x: reg_r err -32
[  550.596469][   T11] vc032x 4-1:0.0: probe with driver vc032x failed with error -32
[  550.697178][   T11] usb 4-1: USB disconnect, device number 23
[  550.932724][ T7634] veth0_macvtap: entered promiscuous mode
[  550.986203][ T7634] veth1_macvtap: entered promiscuous mode
[  551.261923][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  551.400189][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  551.532629][ T7634] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.542462][ T7634] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.551710][ T7634] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.560951][ T7634] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  551.704545][ T1568] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  551.749922][ T1568] usb 3-1: USB disconnect, device number 22
[  551.901774][ T7782] syzkaller0: entered promiscuous mode
[  551.908297][ T7782] syzkaller0: entered allmulticast mode
[  551.925249][ T7784] loop0: detected capacity change from 0 to 128
[  552.040958][ T7784] udf: Unknown parameter ''
[  553.069591][ T7794] loop4: detected capacity change from 0 to 8
[  553.479461][ T7797] program syz.3.528 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  553.650091][ T7797] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  554.398921][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.408580][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.489295][   T11] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  555.490007][ T7814] loop4: detected capacity change from 0 to 32768
[  555.538093][ T1568] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  555.560701][ T7814] XFS: ikeep mount option is deprecated.
[  555.597897][ T7814] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  555.708343][   T11] usb 3-1: Using ep0 maxpacket: 8
[  555.827314][   T11] usb 3-1: config 1 has an invalid interface number: 55 but max is 0
[  555.836017][   T11] usb 3-1: config 1 has no interface number 0
[  555.914108][   T11] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a12, bcdDevice=2b.2b
[  555.928838][   T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.937175][   T11] usb 3-1: Product: 䰇
[  555.943206][   T11] usb 3-1: Manufacturer: ႛ壿菒콌崣얧├첰ꬠⵐॊ貲ꊑ籟덙䤝짾ɜ輯衯瓀殥㑤᷏᭲蘒娆暚펭퐗憽褒寤ꖸ偽縵嗑曺욋໊忙永衱갽礨ﾘ鯅猹ៃ坜ཛ䑜컏蝹韪禵䊔௯៫靔
[  555.964866][   T11] usb 3-1: SerialNumber: Ⰺ
[  556.429534][   T11] usb 3-1: USB disconnect, device number 23
[  556.589760][ T7814] XFS (loop4): Ending clean mount
[  556.774629][ T5818] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  557.438498][   T11] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  557.684262][   T11] usb 1-1: Using ep0 maxpacket: 8
[  557.828824][   T11] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  557.839344][   T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.847951][   T11] usb 1-1: Product: syz
[  557.852413][   T11] usb 1-1: Manufacturer: syz
[  557.857312][   T11] usb 1-1: SerialNumber: syz
[  557.966744][   T11] usb 1-1: config 0 descriptor??
[  558.151095][ T7841] loop2: detected capacity change from 0 to 8
[  558.290135][ T7843] dlm: non-version read from control device 51
[  558.369294][   T11] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  559.156492][ T7848] loop4: detected capacity change from 0 to 128
[  559.243019][ T7848] udf: Unknown parameter ''
[  560.171271][   T11] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  560.200890][   T11] usb 1-1: USB disconnect, device number 25
[  560.232840][ T7853] loop2: detected capacity change from 0 to 512
[  560.302360][ T7853] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  560.470241][ T7853] EXT4-fs (loop2): 1 truncate cleaned up
[  560.478964][ T7853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  561.005662][   T30] kauditd_printk_skb: 29 callbacks suppressed
[  561.005753][   T30] audit: type=1800 audit(1752019405.569:51): pid=7866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.545" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=14412 res=0 errno=0
[  561.182964][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  561.470562][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.478978][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.696736][ T4207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.705161][ T4207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.169659][ T1568] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  562.318760][ T7874] dlm: non-version read from control device 51
[  562.361908][ T7877] loop4: detected capacity change from 0 to 8
[  562.388462][ T1568] usb 4-1: Using ep0 maxpacket: 8
[  562.488604][ T1568] usb 4-1: config 1 has an invalid interface number: 55 but max is 0
[  562.497139][ T1568] usb 4-1: config 1 has no interface number 0
[  562.558210][ T1568] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a12, bcdDevice=2b.2b
[  562.567852][ T1568] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.576174][ T1568] usb 4-1: Product: 䰇
[  562.586490][ T1568] usb 4-1: Manufacturer: ႛ壿菒콌崣얧├첰ꬠⵐॊ貲ꊑ籟덙䤝짾ɜ輯衯瓀殥㑤᷏᭲蘒娆暚펭퐗憽褒寤ꖸ偽縵嗑曺욋໊忙永衱갽礨ﾘ鯅猹ៃ坜ཛ䑜컏蝹韪禵䊔௯៫靔
[  562.610529][ T1568] usb 4-1: SerialNumber: Ⰺ
[  563.021685][ T1568] usb 4-1: USB disconnect, device number 25
[  563.373003][ T7884] loop4: detected capacity change from 0 to 128
[  563.386043][ T7884] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  563.409981][ T7884] hpfs: hpfs_map_sector(): read error
[  563.458991][ T7884] 9pnet: p9_errstr2errno: server reported unknown error o#
[  563.568354][ T7884] loop4: detected capacity change from 0 to 2048
[  563.576914][ T7884] EXT4-fs: inline encryption not supported
[  563.645199][ T7884] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.551: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  563.681090][ T7884] EXT4-fs (loop4): get root inode failed
[  563.687237][ T7884] EXT4-fs (loop4): mount failed
[  563.774430][ T5825] Bluetooth: Unexpected continuation frame (len 16)
[  564.037767][    T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  564.098465][ T7885] loop0: detected capacity change from 0 to 1024
[  564.269469][    T9] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  564.278492][    T9] usb 3-1: config 0 has no interface number 0
[  564.284872][    T9] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  564.296719][    T9] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  564.310729][    T9] usb 3-1: config 0 interface 255 has no altsetting 0
[  564.318055][    T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  564.333215][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.350849][    T9] usb 3-1: config 0 descriptor??
[  564.391127][    T9] ums-realtek 3-1:0.255: USB Mass Storage device detected
[  564.398938][ T7885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  564.412044][ T7885] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  564.463685][ T7896] loop4: detected capacity change from 0 to 512
[  564.506754][ T7896] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  564.585043][ T7896] EXT4-fs (loop4): 1 truncate cleaned up
[  564.593891][ T7896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  564.724587][ T7903] loop6: detected capacity change from 0 to 512
[  564.906761][ T7903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  564.920402][ T7903] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  565.185068][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.293993][ T7634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.605509][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.805284][ T7914] loop6: detected capacity change from 0 to 64
[  565.892768][ T7916] loop3: detected capacity change from 0 to 256
[  565.905145][    T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  566.112928][    T9] usb 5-1: Using ep0 maxpacket: 8
[  566.238812][    T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  566.248747][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.254046][ T7919] loop0: detected capacity change from 0 to 8
[  566.256963][    T9] usb 5-1: Product: syz
[  566.257081][    T9] usb 5-1: Manufacturer: syz
[  566.280769][    T9] usb 5-1: SerialNumber: syz
[  566.358075][    T9] usb 5-1: config 0 descriptor??
[  566.398837][ T1568] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  566.545982][ T7914] 9pnet: Could not find request transport: f���d
[  566.620869][ T1568] usb 4-1: Using ep0 maxpacket: 16
[  566.627978][    T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  566.659694][ T1568] usb 4-1: unable to get BOS descriptor or descriptor too short
[  566.711419][ T1568] usb 4-1: config 11 has an invalid interface number: 165 but max is 0
[  566.720343][ T1568] usb 4-1: config 11 has no interface number 0
[  566.793299][ T1568] usb 4-1: New USB device found, idVendor=05ac, idProduct=021d, bcdDevice=18.91
[  566.803102][ T1568] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.811662][ T1568] usb 4-1: Product: syz
[  566.816107][ T1568] usb 4-1: Manufacturer: syz
[  566.821367][ T1568] usb 4-1: SerialNumber: syz
[  567.234311][ T1568] hub 4-1:11.165: bad descriptor, ignoring hub
[  567.241042][ T1568] hub 4-1:11.165: probe with driver hub failed with error -5
[  567.379685][ T1568] usb 4-1: USB disconnect, device number 26
[  567.413001][   T11] usb 3-1: USB disconnect, device number 24
[  567.987551][    T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  568.029258][    T9] usb 5-1: USB disconnect, device number 24
[  568.088197][ T7923] dlm: non-version read from control device 51
[  568.188585][ T7925] loop6: detected capacity change from 0 to 1024
[  568.581060][ T7925] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  568.635822][ T7925] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  568.756875][ T7925] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  568.872617][ T7925] hfsplus: request for non-existent node 33554434 in B*Tree
[  568.880581][ T7925] hfsplus: request for non-existent node 33554434 in B*Tree
[  568.935480][ T7928] hfsplus: request for non-existent node 33554434 in B*Tree
[  568.943296][ T7928] hfsplus: request for non-existent node 33554434 in B*Tree
[  569.026963][ T7925] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  569.048206][   T30] audit: type=1800 audit(1752019413.609:52): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.564" name="file2" dev="loop6" ino=20 res=0 errno=0
[  569.101446][ T7928] hfsplus: request for non-existent node 33554434 in B*Tree
[  569.109600][ T7928] hfsplus: request for non-existent node 33554434 in B*Tree
[  569.234189][ T1568] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  569.251560][ T7925] hfsplus: request for non-existent node 33554434 in B*Tree
[  569.261749][ T7925] hfsplus: request for non-existent node 33554434 in B*Tree
[  569.368414][ T7922] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  569.504301][ T1568] usb 3-1: Using ep0 maxpacket: 8
[  569.869748][ T1568] usb 3-1: config 1 has an invalid interface number: 55 but max is 0
[  569.878942][ T1568] usb 3-1: config 1 has no interface number 0
[  570.248810][ T1568] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a12, bcdDevice=2b.2b
[  570.258709][ T1568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.272793][ T1568] usb 3-1: Product: 䰇
[  570.277280][ T1568] usb 3-1: Manufacturer: ႛ壿菒콌崣얧├첰ꬠⵐॊ貲ꊑ籟덙䤝짾ɜ輯衯瓀殥㑤᷏᭲蘒娆暚펭퐗憽褒寤ꖸ偽縵嗑曺욋໊忙永衱갽礨ﾘ鯅猹ៃ坜ཛ䑜컏蝹韪禵䊔௯៫靔
[  570.300539][ T1568] usb 3-1: SerialNumber: Ⰺ
[  570.303690][ T7937] loop0: detected capacity change from 0 to 32768
[  570.446222][ T7634] hfsplus: request for non-existent node 33554434 in B*Tree
[  570.454316][ T7634] hfsplus: request for non-existent node 33554434 in B*Tree
[  570.561447][ T7937] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid device 255,noinodes_use_key_cache,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  570.561664][ T7937]   allowing incompatible features above 0.0: (unknown version)
[  570.561756][ T7937]   features: lz4
[  570.561829][ T7937]   with devices loop0
[  570.591340][    C0] vkms_vblank_simulate: vblank timer overrun
[  570.621651][ T7937] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  570.633109][ T7937] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  570.659301][ T7937] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  570.734147][ T7937] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  570.810631][ T7937] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  570.847232][ T7937] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  570.896997][ T7937] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  570.906342][ T7937] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  571.029578][ T7937] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  571.234377][ T7952] 9pnet_fd: Insufficient options for proto=fd
[  571.280434][ T1568] usb 3-1: USB disconnect, device number 25
[  571.944502][ T4207] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.117397][ T4207] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.270447][ T4207] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.497991][ T4207] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.005805][ T4207] bridge_slave_1: left allmulticast mode
[  573.012534][ T4207] bridge_slave_1: left promiscuous mode
[  573.019617][ T4207] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.053294][ T4207] bridge_slave_0: left allmulticast mode
[  573.060437][ T4207] bridge_slave_0: left promiscuous mode
[  573.067280][ T4207] bridge0: port 1(bridge_slave_0) entered disabled state
[  574.245980][ T4207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  574.278640][ T1096] =====================================================
[  574.285966][ T1096] BUG: KMSAN: uninit-value in bch2_alloc_sectors_start_trans+0x750/0x3560
[  574.295855][ T1096]  bch2_alloc_sectors_start_trans+0x750/0x3560
[  574.302525][ T1096]  __bch2_write+0x7ff/0x6bc0
[  574.307370][ T1096]  bch2_write+0xcc5/0x1860
[  574.312268][ T1096]  bch2_writepages+0x26b/0x570
[  574.317323][ T1096]  do_writepages+0x3f2/0x860
[  574.322333][ T1096]  __writeback_single_inode+0x101/0x1190
[  574.328438][ T1096]  writeback_sb_inodes+0xaa9/0x1c90
[  574.333888][ T1096]  wb_writeback+0x4ce/0xc00
[  574.338908][ T1096]  wb_workfn+0x397/0x1910
[  574.343481][ T1096]  process_scheduled_works+0xb91/0x1d80
[  574.349464][ T1096]  worker_thread+0xedf/0x1590
[  574.354422][ T1096]  kthread+0xd59/0xf00
[  574.365577][ T1096]  ret_from_fork+0x1e0/0x310
[  574.372436][ T1096]  ret_from_fork_asm+0x1a/0x30
[  574.377484][ T1096] 
[  574.380080][ T1096] Uninit was stored to memory at:
[  574.385449][ T1096]  __bch2_writepage+0x2b40/0x3c90
[  574.391362][ T1096]  write_cache_pages+0xc5/0x270
[  574.396475][ T1096]  bch2_writepages+0x153/0x570
[  574.401718][ T1096]  do_writepages+0x3f2/0x860
[  574.406661][ T1096]  __writeback_single_inode+0x101/0x1190
[  574.412748][ T1096]  writeback_sb_inodes+0xaa9/0x1c90
[  574.418525][ T1096]  wb_writeback+0x4ce/0xc00
[  574.423264][ T1096]  wb_workfn+0x397/0x1910
[  574.427926][ T1096]  process_scheduled_works+0xb91/0x1d80
[  574.433757][ T1096]  worker_thread+0xedf/0x1590
[  574.438846][ T1096]  kthread+0xd59/0xf00
[  574.443133][ T1096]  ret_from_fork+0x1e0/0x310
[  574.448213][ T1096]  ret_from_fork_asm+0x1a/0x30
[  574.453250][ T1096] 
[  574.455715][ T1096] Uninit was created at:
[  574.467131][ T1096]  kmem_cache_alloc_lru_noprof+0x822/0xed0
[  574.475313][ T1096]  __bch2_new_inode+0x9b/0x4b0
[  574.480646][ T1096]  __bch2_create+0x286/0x1650
[  574.485577][ T1096]  bch2_create+0xba/0x1c0
[  574.490291][ T1096]  path_openat+0x2d47/0x6760
[  574.495133][ T1096]  do_filp_open+0x280/0x660
[  574.500047][ T1096]  do_sys_openat2+0x1bb/0x2f0
[  574.505050][ T1096]  __x64_sys_openat+0x240/0x300
[  574.510272][ T1096]  x64_sys_call+0x213/0x3db0
[  574.515132][ T1096]  do_syscall_64+0xd9/0x210
[  574.520056][ T1096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.526188][ T1096] 
[  574.528827][ T1096] CPU: 0 UID: 0 PID: 1096 Comm: kworker/u8:6 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(none) 
[  574.541711][ T1096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  574.552124][ T1096] Workqueue: writeback wb_workfn (flush-bcachefs-8)
[  574.559134][ T1096] =====================================================
[  574.572870][ T1096] Disabling lock debugging due to kernel taint
[  574.581450][ T1096] Kernel panic - not syncing: kmsan.panic set ...
[  574.588074][ T1096] CPU: 0 UID: 0 PID: 1096 Comm: kworker/u8:6 Tainted: G    B               6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(none) 
[  574.602092][ T1096] Tainted: [B]=BAD_PAGE
[  574.606402][ T1096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  574.616680][ T1096] Workqueue: writeback wb_workfn (flush-bcachefs-8)
[  574.623593][ T1096] Call Trace:
[  574.627023][ T1096]  <TASK>
[  574.630133][ T1096]  __dump_stack+0x26/0x30
[  574.634721][ T1096]  dump_stack_lvl+0x53/0x270
[  574.639589][ T1096]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  574.645717][ T1096]  dump_stack+0x1e/0x25
[  574.650134][ T1096]  panic+0x4bd/0xd50
[  574.654445][ T1096]  kmsan_report+0x31c/0x320
[  574.659236][ T1096]  ? __msan_warning+0x1b/0x30
[  574.664175][ T1096]  ? bch2_alloc_sectors_start_trans+0x750/0x3560
[  574.670806][ T1096]  ? __bch2_write+0x7ff/0x6bc0
[  574.675848][ T1096]  ? bch2_write+0xcc5/0x1860
[  574.680685][ T1096]  ? bch2_writepages+0x26b/0x570
[  574.685926][ T1096]  ? do_writepages+0x3f2/0x860
[  574.690951][ T1096]  ? __writeback_single_inode+0x101/0x1190
[  574.697029][ T1096]  ? writeback_sb_inodes+0xaa9/0x1c90
[  574.702654][ T1096]  ? wb_writeback+0x4ce/0xc00
[  574.707581][ T1096]  ? wb_workfn+0x397/0x1910
[  574.712311][ T1096]  ? process_scheduled_works+0xb91/0x1d80
[  574.718328][ T1096]  ? worker_thread+0xedf/0x1590
[  574.723471][ T1096]  ? kthread+0xd59/0xf00
[  574.727941][ T1096]  ? ret_from_fork+0x1e0/0x310
[  574.732942][ T1096]  ? ret_from_fork_asm+0x1a/0x30
[  574.738161][ T1096]  ? kmsan_slab_alloc+0xde/0x160
[  574.743365][ T1096]  ? kmsan_get_metadata+0xfb/0x160
[  574.748762][ T1096]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  574.754895][ T1096]  ? kmsan_get_metadata+0xfb/0x160
[  574.760383][ T1096]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  574.766496][ T1096]  ? kmsan_get_metadata+0xfb/0x160
[  574.771905][ T1096]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  574.778018][ T1096]  ? kmsan_get_metadata+0xfb/0x160
[  574.783418][ T1096]  ? kmsan_get_metadata+0xfb/0x160
[  574.788840][ T1096]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  574.794974][ T1096]  __msan_warning+0x1b/0x30
[  574.799741][ T1096]  bch2_alloc_sectors_start_trans+0x750/0x3560
[  574.806243][ T1096]  ? bch2_alloc_sectors_start_trans+0x82/0x3560
[  574.812866][ T1096]  __bch2_write+0x7ff/0x6bc0
[  574.817736][ T1096]  ? stack_depot_save_flags+0x35/0x7b0
[  574.823475][ T1096]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  574.829645][ T1096]  ? kmsan_get_metadata+0xfb/0x160
[  574.835057][ T1096]  ? kmsan_get_metadata+0xfb/0x160
[  574.840480][ T1096]  ? kmsan_get_metadata+0xfb/0x160
[  574.845885][ T1096]  ? kmsan_save_stack_with_flags+0x1/0x60
[  574.852318][ T1096]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  574.858691][ T1096]  bch2_write+0xcc5/0x1860
[  574.863372][ T1096]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  574.869516][ T1096]  bch2_writepages+0x26b/0x570
[  574.874599][ T1096]  ? __pfx_bch2_writepages+0x10/0x10
[  574.880187][ T1096]  do_writepages+0x3f2/0x860
[  574.885030][ T1096]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  574.891141][ T1096]  ? queue_io+0x771/0x790
[  574.895721][ T1096]  ? kmsan_get_metadata+0xfb/0x160
[  574.901186][ T1096]  __writeback_single_inode+0x101/0x1190
[  574.907098][ T1096]  ? kmsan_get_metadata+0xfb/0x160
[  574.912598][ T1096]  writeback_sb_inodes+0xaa9/0x1c90
[  574.918174][ T1096]  ? kmsan_get_metadata+0xfb/0x160
[  574.923621][ T1096]  wb_writeback+0x4ce/0xc00
[  574.928405][ T1096]  ? queue_io+0x471/0x790
[  574.932999][ T1096]  wb_workfn+0x397/0x1910
[  574.937558][ T1096]  ? kmsan_get_metadata+0xfb/0x160
[  574.943066][ T1096]  ? __pfx_wb_workfn+0x10/0x10
[  574.948057][ T1096]  process_scheduled_works+0xb91/0x1d80
[  574.953975][ T1096]  worker_thread+0xedf/0x1590
[  574.958991][ T1096]  kthread+0xd59/0xf00
[  574.963283][ T1096]  ? __pfx_worker_thread+0x10/0x10
[  574.968713][ T1096]  ? __pfx_kthread+0x10/0x10
[  574.973561][ T1096]  ret_from_fork+0x1e0/0x310
[  574.978395][ T1096]  ? __pfx_kthread+0x10/0x10
[  574.983668][ T1096]  ret_from_fork_asm+0x1a/0x30
[  574.988753][ T1096]  </TASK>
[  574.992232][ T1096] Kernel Offset: disabled
[  574.997110][ T1096] Rebooting in 86400 seconds..