last executing test programs: 21.473992154s ago: executing program 3 (id=1072): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a01faff5b6b4408070a64006e40010203030902240001a82300000904000002ca014d00090503034d00ff99090805848f"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="0100020000000207"], &(0x7f0000000240)={0x0, 0x3, 0xb8, @string={0xb8, 0x3, "760c5b673b18bf5c7fe424fcfd24dcda1b7f364c53ed5b93c88f5dc32be0daf166eb55aee700ec91844ae4621bb1d6e2588b88bcbd66463615c373e087b3dc6c70e7b10e3fbef615d66db0557187d078c1975c4b30f2249a8c9c7802f213bba9914869da0ab05d1fb72abebe32774f5365084b0e708f36ae582b971523d33d7d875d108303f32e0dab9343f3e5f56bb541057de06d105b46fa0e755510efff734c8559954d32bf171f397889d2a5bc58cb4d2ba3e286"}}, &(0x7f0000000680)=ANY=[@ANYBLOB="06220e00000077c6e0ee52265648b60ef4a68d77305ff010ebc06980cd582edcf653f598b7ffb4d9b4116e68ab02f186357f85ac1a446d8219fd4157f46dc4c6b5a24c050203e822f4eef685ae85dd3d14431afb8b1d"], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xfe8}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x60, 0x14, 0xa9, "53bf39c1759f6dab0ba90f81b3491f24899a1f27eae52e9dadfcf59598dc91c057f72a621616c30f5912bcdf142a3e70b243d666c5a0f94ab2f3b2f657b1d17dd369d750a74cbc5a7bd33caebbc06e8ea077d90d2ada64bb19614b64ab103944a59dcdb565318e4d212dea3733f5018b0bedf55a5ebd4f9ab519317fe8779249fe8005dfb83106929fb33ede38c842a9809220aea817bf78d3e77a63a93df3bcfd2264f9c0dd799abb"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x1, 0x58, "b39b38bcd60ff70a086b56f1a96c01acbed1a43b409f25e22add87e4b3d537a145469963e845525db474ca1282b8644f878c98aceeb14f53788d11f00f4f14ed3292c0744329bce319d144b17c6df40574caceba19449389"}, &(0x7f0000000480)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000640)={0x14, &(0x7f0000000600)={0x20, 0x24, 0x2, {0x2, 0xc}}, &(0x7f0000000780)={0x0, 0x3, 0x72, @string={0x72, 0x3, "c46a31cdc2e587b3ebf66e405c51ecf59083b1d6dc789891a3490c4294d48b033eda2a9265e48913da85f36f1b22c1cf6fb6e6500f9b7ef1ea974358fdf4cfb9ce3f7c69cf1f12ef0eb3a76995d95bb5b1c458fd69c7c1c895e29b89ee2670534463a261924f4fb898f19d6f7757db53"}}}, &(0x7f00000009c0)={0x34, &(0x7f0000000bc0)={0x20, 0x6, 0xe9, "e20502058664d35aefefd1134858db492879e0de4313ba690514582fa259cf315c827d017a02dbd369a26d8a5499d8c6aaffa854d483591331b8b01c819e877f791a8f4c3769ced4504ad780157960bd8eac7370eec71e029aa1cea0a8034e953e6e27280ebd4d82f2afb7f9e017d68d1674850b5abbd55b00ab2fffc5bd30f806854a9245a4f4b6f7858a43a95b44efce32ea3c2fdb6c05cca22482dd233a8621a620e21da954e31bcfd708c1ec478ddc5957116504e52e3705e324703fa8e9800bbfc6272ff93db84e1f42dc68b2b7dd06791d11f496d283931101295a719d3c0505e1fcce973e71"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000cc0)={0x20, 0x0, 0x8c, {0x8a, "b7d3c24bef1cf9c5b75232deea65b54de8f0948d1352b02369417b5f170a46f98628b7bdb75b0e7c10bcc335f4241d184367678df6cea4432a1cd0291ae8dbd2d4fac5cb176593f5a646e4ca15f24dc06f0579f805aee7b240dbdc2643a649bfa2ecfe0ad3ecfc19799c7c3cfaeb650bde187306e4cd769cd386f8736a7ad4b38829e550d6bc7d23c4e8"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0xfb}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000900)={0x24, &(0x7f00000000c0)={0x0, 0x9, 0x2e, {0x2e, 0x22, "42660cf20a8f536497779a1f2b3c40f166172b368eac48c9ef4947bc13c832252920b8960f098432c4000999"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000740)={0x0, 0x22, 0x17, {[@global=@item_012={0x0, 0x1, 0x4}, @local=@item_4={0x3, 0x2, 0x4, "bcd17a98"}, @local=@item_4={0x3, 0x2, 0xb, "95e48993"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_4={0x3, 0x0, 0x0, "6bf4f5a6"}, @global=@item_4={0x3, 0x1, 0x8, "42fc9339"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x2ff}}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000940)={0x0, 0x18, 0x74, "df463f6f4602f2cda9c0ebd31c604a7629c5a19997d54193c00caeebfd16884d1f93c2ae5d94befdbf37f7c76870c856515541645429d89b9809cbd54664c09b35efa1d67653c1de54777fb75859d5793692f3035e2de189db6018de5ca334057c7e3de00803d189f624ae00cbe59af8d4da3bbf"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000a80)={0x20, 0x1, 0x9c, "28c8c262d050ab1396d86f08d239494f84f1800294352dd20fb7205f68931b1439d6faf719794375fa296aa857b3c244748d04f3118e517a38159a34a0307948ae2f1b116b68fa93674550715e8585c5c913e9e70d754c70ea0b5ee199c736bad5f60e710111e9400c71c039af6eb45c6d8aa3b5aaf9a6f23581cda512c5c494cabc19020d898bf58066252475ad4fe58d3f7d77656e647286a05565"}, &(0x7f0000000b40)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$hiddev(0x0, 0x7ff, 0x200) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f00000000c0)={0x1, 0xffffffff, 0x7fffffff, 0x6, 0x0, 0x25a7}) syz_usb_connect(0x1, 0x63, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6a, 0xc1, 0x99, 0x8, 0x6f8, 0xb000, 0x2ad1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfa, 0x0, 0x1, 0xff, 0xc9, 0xbc, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x40, 0xc, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x4, 0x66, 0x7, "", 'T)'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x8, 0x9, "689a385c2ccc7036"}, @as_header={0x7, 0x24, 0x1, 0x2, 0xff, 0x4}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7ff, 0x0, 0x7, "d2c18606"}]}], [{{0x9, 0x5, 0x0, 0x3, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000921000000012208000905810300"/54], 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="f39561fc17b7f981"}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x68, 0x2}, @cond}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r6 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000005c0), 0x1, 0x0) ioctl$HIDIOCGRDESC(r6, 0x5452, &(0x7f00000000c0)={0x1, '\n'}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xb3, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000406b1d01014000010203010902"], &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="010f"], 0x1, [{0x0, 0x0}]}) write$char_usb(r1, &(0x7f0000000000)='8', 0x1) 15.424211189s ago: executing program 2 (id=1092): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400), 0xfffffffffffffdbc, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f00000000c0)="3f043608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c64064a1b788061", 0x24, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x800, 0x1000, 0x8, 0x3500, r2, 0xc, '\x00', r4, r2, 0x0, 0x4, 0x2}, 0x48) io_setup(0x3, &(0x7f0000000340)) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004500005800000000000400000000000000000001248081000000000010000800000086"], 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13.615670215s ago: executing program 3 (id=1095): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) write(r2, &(0x7f0000000100)="1100000052004f7fb3", 0x9) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@nodiscard}, {}, {}, {@alloc_mode_reuse}, {@nobarrier}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@background_gc_off}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) write$FUSE_GETXATTR(r5, &(0x7f0000000040)={0x18}, 0x18) pwritev2(r5, &(0x7f0000000240), 0x1, 0x0, 0x0, 0x0) 11.394226115s ago: executing program 2 (id=1100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000080000000950000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f00000003c0)=ANY=[@ANYBLOB="007a82172a555a40aab70dbafd964fb9397462479d049a7f42f01c6e0b9381e3d310cb4727681c641464ab77a498e6ec737f2789b012fceb4eaee0a34ca77a718c725e863b0b028b81cd8789124fb58818d4637c74f1d91a8e331bf8b3ee5bc3c233fcbbb79ed04c26b18a5787deff22c9631497662d"], 0x2, 0x2f0, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000000), 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0xa, 0x1ff}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x18000, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x303) close_range(r0, 0xffffffffffffffff, 0x0) 9.337704873s ago: executing program 4 (id=1105): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_io_uring_setup(0x690b, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), 0x0, &(0x7f0000000280)) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 9.272691339s ago: executing program 1 (id=1106): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 9.19995704s ago: executing program 2 (id=1107): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a01faff5b6b4408070a64006e40010203030902240001a82300000904000002ca014d00090503034d00ff99090805848f"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="0100020000000207"], &(0x7f0000000240)={0x0, 0x3, 0xb8, @string={0xb8, 0x3, "760c5b673b18bf5c7fe424fcfd24dcda1b7f364c53ed5b93c88f5dc32be0daf166eb55aee700ec91844ae4621bb1d6e2588b88bcbd66463615c373e087b3dc6c70e7b10e3fbef615d66db0557187d078c1975c4b30f2249a8c9c7802f213bba9914869da0ab05d1fb72abebe32774f5365084b0e708f36ae582b971523d33d7d875d108303f32e0dab9343f3e5f56bb541057de06d105b46fa0e755510efff734c8559954d32bf171f397889d2a5bc58cb4d2ba3e286"}}, &(0x7f0000000680)=ANY=[@ANYBLOB="06220e00000077c6e0ee52265648b60ef4a68d77305ff010ebc06980cd582edcf653f598b7ffb4d9b4116e68ab02f186357f85ac1a446d8219fd4157f46dc4c6b5a24c050203e822f4eef685ae85dd3d14431afb8b1d"], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xfe8}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x60, 0x14, 0xa9, "53bf39c1759f6dab0ba90f81b3491f24899a1f27eae52e9dadfcf59598dc91c057f72a621616c30f5912bcdf142a3e70b243d666c5a0f94ab2f3b2f657b1d17dd369d750a74cbc5a7bd33caebbc06e8ea077d90d2ada64bb19614b64ab103944a59dcdb565318e4d212dea3733f5018b0bedf55a5ebd4f9ab519317fe8779249fe8005dfb83106929fb33ede38c842a9809220aea817bf78d3e77a63a93df3bcfd2264f9c0dd799abb"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x1, 0x58, "b39b38bcd60ff70a086b56f1a96c01acbed1a43b409f25e22add87e4b3d537a145469963e845525db474ca1282b8644f878c98aceeb14f53788d11f00f4f14ed3292c0744329bce319d144b17c6df40574caceba19449389"}, &(0x7f0000000480)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000640)={0x14, &(0x7f0000000600)={0x20, 0x24, 0x2, {0x2, 0xc}}, &(0x7f0000000780)={0x0, 0x3, 0x72, @string={0x72, 0x3, "c46a31cdc2e587b3ebf66e405c51ecf59083b1d6dc789891a3490c4294d48b033eda2a9265e48913da85f36f1b22c1cf6fb6e6500f9b7ef1ea974358fdf4cfb9ce3f7c69cf1f12ef0eb3a76995d95bb5b1c458fd69c7c1c895e29b89ee2670534463a261924f4fb898f19d6f7757db53"}}}, &(0x7f00000009c0)={0x34, &(0x7f0000000bc0)={0x20, 0x6, 0xe9, "e20502058664d35aefefd1134858db492879e0de4313ba690514582fa259cf315c827d017a02dbd369a26d8a5499d8c6aaffa854d483591331b8b01c819e877f791a8f4c3769ced4504ad780157960bd8eac7370eec71e029aa1cea0a8034e953e6e27280ebd4d82f2afb7f9e017d68d1674850b5abbd55b00ab2fffc5bd30f806854a9245a4f4b6f7858a43a95b44efce32ea3c2fdb6c05cca22482dd233a8621a620e21da954e31bcfd708c1ec478ddc5957116504e52e3705e324703fa8e9800bbfc6272ff93db84e1f42dc68b2b7dd06791d11f496d283931101295a719d3c0505e1fcce973e71"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000cc0)={0x20, 0x0, 0x8c, {0x8a, "b7d3c24bef1cf9c5b75232deea65b54de8f0948d1352b02369417b5f170a46f98628b7bdb75b0e7c10bcc335f4241d184367678df6cea4432a1cd0291ae8dbd2d4fac5cb176593f5a646e4ca15f24dc06f0579f805aee7b240dbdc2643a649bfa2ecfe0ad3ecfc19799c7c3cfaeb650bde187306e4cd769cd386f8736a7ad4b38829e550d6bc7d23c4e8"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0xfb}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000900)={0x24, &(0x7f00000000c0)={0x0, 0x9, 0x2e, {0x2e, 0x22, "42660cf20a8f536497779a1f2b3c40f166172b368eac48c9ef4947bc13c832252920b8960f098432c4000999"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000740)={0x0, 0x22, 0x17, {[@global=@item_012={0x0, 0x1, 0x4}, @local=@item_4={0x3, 0x2, 0x4, "bcd17a98"}, @local=@item_4={0x3, 0x2, 0xb, "95e48993"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_4={0x3, 0x0, 0x0, "6bf4f5a6"}, @global=@item_4={0x3, 0x1, 0x8, "42fc9339"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x2ff}}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000940)={0x0, 0x18, 0x74, "df463f6f4602f2cda9c0ebd31c604a7629c5a19997d54193c00caeebfd16884d1f93c2ae5d94befdbf37f7c76870c856515541645429d89b9809cbd54664c09b35efa1d67653c1de54777fb75859d5793692f3035e2de189db6018de5ca334057c7e3de00803d189f624ae00cbe59af8d4da3bbf"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000a80)={0x20, 0x1, 0x9c, "28c8c262d050ab1396d86f08d239494f84f1800294352dd20fb7205f68931b1439d6faf719794375fa296aa857b3c244748d04f3118e517a38159a34a0307948ae2f1b116b68fa93674550715e8585c5c913e9e70d754c70ea0b5ee199c736bad5f60e710111e9400c71c039af6eb45c6d8aa3b5aaf9a6f23581cda512c5c494cabc19020d898bf58066252475ad4fe58d3f7d77656e647286a05565"}, &(0x7f0000000b40)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$hiddev(0x0, 0x7ff, 0x200) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f00000000c0)={0x1, 0xffffffff, 0x7fffffff, 0x6, 0x0, 0x25a7}) syz_usb_connect(0x1, 0x63, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6a, 0xc1, 0x99, 0x8, 0x6f8, 0xb000, 0x2ad1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfa, 0x0, 0x1, 0xff, 0xc9, 0xbc, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x40, 0xc, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x4, 0x66, 0x7, "", 'T)'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x8, 0x9, "689a385c2ccc7036"}, @as_header={0x7, 0x24, 0x1, 0x2, 0xff, 0x4}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7ff, 0x0, 0x7, "d2c18606"}]}], [{{0x9, 0x5, 0x0, 0x3, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000921000000012208000905810300"/54], 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="f39561fc17b7f981"}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x68, 0x2}, @cond}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r6 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000005c0), 0x1, 0x0) ioctl$HIDIOCGRDESC(r6, 0x5452, &(0x7f00000000c0)={0x1, '\n'}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xb3, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000406b1d01014000010203010902"], &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="010f"], 0x1, [{0x0, 0x0}]}) write$char_usb(r1, &(0x7f0000000000)='8', 0x1) 9.073324239s ago: executing program 1 (id=1108): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './bus'}, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)=0x7fffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 8.661352262s ago: executing program 3 (id=1109): r0 = socket(0x80000000000000a, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000200)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0xc4}, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="050f15000100"]}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x8e, &(0x7f0000001140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x2, 0x1, 0xfc, 0x90, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "4890"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xfd, 0x3b, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x7}, [@acm={0x4, 0x24, 0x2, 0x6}, @obex={0x5, 0x24, 0x15, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x5b, 0x9, 0x1, 0xf1}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x0, 0x2, 0x1}, @dmm={0x7, 0x24, 0x14, 0x1, 0xf800}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0xe5, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xc, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0xf, 0x7}}}}}}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x200, 0x4, 0x7, 0x3, 0x10, 0x6}, 0x30, &(0x7f0000001240)={0x5, 0xf, 0x30, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1d, 0x6, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "302a11ca169363ebb109042a6c5b827b"}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x401, 0xf007, 0xba, [0x3f30]}]}, 0x3, [{0x39, &(0x7f0000001280)=@string={0x39, 0x3, "1c1ae46b046ce44809685957891b09e24474c92edc96adb6dcd61b1d5c8e5b60fc289a463c0b77c75b65f550efe3f4812006c5c6a5d89e"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x4799d51d39bf1e28}}, {0x2, &(0x7f0000001340)=@string={0x2}}]}) socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x0, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) newfstatat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, r7, &(0x7f0000001100)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) 8.660696681s ago: executing program 4 (id=1110): ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) flock(0xffffffffffffffff, 0x0) 8.144710088s ago: executing program 4 (id=1112): socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000), 0x4) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioperm(0x0, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/171, 0xab}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000002d80)=""/226, 0xe2}, {&(0x7f0000002e80)=""/155, 0x9b}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000006080)={0x0, 0x989680}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000060c0)={0x1f, 0xb9, @fixed, 0x0, 0x2}, 0xe) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f0000001580), &(0x7f00000015c0)={'syz', 0x3}, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000000000006162636465666768696a6b6c6d6e6f707172737475767778797a3031323334353611b9bf5fe53f6ad26c4c80e94d74a92eb43bceb1bfabb451d132fbd991bd48188b38c16ab8fec12f8ba84ecfb7b770c0487a819f57b01d21de69c2117f323fc0296d0a780d3311f7474d1d885aa869a06e2207b3a516bfc0f530882bf403ab2bbffc28caab3b8543d62b34a1931d001c22c74c9012a7fef082da790ba468dd8f22e95a58ed98280abb6a6ffe20e4374e000000000000"], 0x29, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, 0xfffffffffffffffb, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000340)="b2", 0x1}], 0x1}}], 0x1, 0x0) 6.93956666s ago: executing program 1 (id=1114): socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) listen(r1, 0xfffffffc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000200), 0x4) 6.790215788s ago: executing program 4 (id=1115): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x3c}}, 0x0) 6.64068807s ago: executing program 0 (id=1116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15852323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) mkdir(0x0, 0x0) r5 = syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)}}) io_uring_enter(r5, 0x46f3, 0x0, 0x0, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, 0x0, &(0x7f0000000540)) 6.611137229s ago: executing program 4 (id=1117): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000200002505a1a440000102030109023b000101000000090400000002060000052406000005240000000d240f01"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905"], 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xdee) r2 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) ioctl$HIDIOCGRDESC(r2, 0x40305829, &(0x7f00000001c0)={0xffffff89, "cec51040566c6003420000eebed192a009936f7c1300de16e7ef9cfb49968ce44e1b5e04f037c483bd33181a677845d61a442ada548e"}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_disconnect(r3) syz_open_dev$evdev(&(0x7f00000014c0), 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="8cefcd772632f8740de4dbe3666d93d2ed455607f4d0ecc123827222675e0671d2aa2cdc91bce0ffae31fb9d0b328e2f7d0ab33f297d52e2f47939e5cd2e6e7f67a94e4b5e1a94b75a3391b27cca311d2c04e9973ff8aaca36da450ae1ae1ba6f696e754cd96a1697c25294608fd0dc5e97a14bbb87194c7c850152341b64e76a9821d8c49b997f3c4b6b5351f57549c4d6bca2c0c700ac6ffd84ee996ef1debe2", 0xa1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090206007c"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xa5bd550bd30393cf, &(0x7f0000000200)=ANY=[@ANYBLOB="00008c00000088481c9520c21285bb3a5bc75c1c123606c031bc110c2e79eee71a41e01da6f987c36842f6e4abac880e3c971bbce16ef832fc930e72c5b076447e6e5693b34d5570d72ae55b1b8834d42385ca079639aae4b3a9cd3f567062a2217f45ee00d6100cde64a27cbae192809c6eb5ea9af4e9210c6dfdc710e2f9f9ca5d92ca4a2ce5a12185ee8feade85903cb6dff73f3ba2ca5b221f00590a203a009d3a6de668eb00682da5a7304959493c543ed537538ff81f67ee6914a6acf780a6b3cdf84acd22ed48d494590d6c7d75643a8c74833ae40ff6a2f7236d4d1af01f83fd3e5d368683f9a37448c7306a25c9e616758b3ccb0d3f9ab9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x6, 0x174, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x162, 0x2, 0x1, 0x6, 0x8d07c3a11ce1916a, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "39d465"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x5991, 0xd}, {0x6, 0x24, 0x1a, 0x400, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x800}, @mdlm_detail={0xe0, 0x24, 0x13, 0xc8, "ec6b0ee6e43fc7c9bfb5c5a182c469852117dc438cfa0abb9a881d7325939db3a64a5fea8f781cdf04a7dbe6bec9da29915059fe1478b4718514a17718dd89e69d5c747ce5199f4dd27ce6bd4d61eadfaec8da25ad8e5415ad4241bc4b0a49483991013833418f1ad5b9798359b301b88f1ea7c466d2e097c5652d789cd3f79cbf794bb03617d39bb43c0727536d3669f511c898c686b3a66cf4987ec64cbd3ca74875ddc35ca3843eb7d2b5911770abc9fa6eda4eeec59783a3c2b53a9573bb8fc53c16a540a32679db6a5c3bc35538f37f86a4edb96308552ae3fa"}, @dmm={0x7, 0x24, 0x14, 0x3, 0x557}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xe, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x80, 0x13, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2a, 0x90, 0x7}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x41, 0x3, 0x2, 0xff, 0x8}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x410}}, {0x56, &(0x7f00000004c0)=@string={0x56, 0x3, "e4f8a50ff8bde79e5dce82110a7af5a28c6e82638f74e0dab483f6ed6e9ff70aa82d937887c80fbf77b5f011cdd3120944cf9e053daf5ae8fea8fa2004623fdfeb860f5b4700796116f42b8749b12a8259edb9fe"}}]}) 5.518204802s ago: executing program 0 (id=1118): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x7}, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c92076bd0c0005f89b9dab448898021200000000"], 0x15) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="00080402c80002"], 0x7) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x60, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x1c) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB], 0x58) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1}}}, 0x4) r4 = syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000b5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = timerfd_create(0x9, 0x800) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r9, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='erspan0\x00'}) r10 = socket$inet(0x2, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x10, r4, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=0x0, @ANYRES16=r4, @ANYRES8=r10, @ANYRESHEX=r8, @ANYRESHEX=r2, @ANYRESOCT], 0xf) 5.235873629s ago: executing program 5 (id=1119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xffc1) 5.11063425s ago: executing program 1 (id=1120): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5.01130161s ago: executing program 2 (id=1121): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) write(r2, &(0x7f0000000100)="1100000052004f7fb3", 0x9) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@nodiscard}, {}, {}, {@alloc_mode_reuse}, {@nobarrier}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@background_gc_off}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) write$FUSE_GETXATTR(r5, &(0x7f0000000040)={0x18}, 0x18) pwritev2(r5, &(0x7f0000000240), 0x1, 0x0, 0x0, 0x0) 4.872913052s ago: executing program 1 (id=1122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x11) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in=@multicast2, @in=@initdev}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28044040}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe4e}}, 0x4040001) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "20f97783e0562618", "b86276618c28b4d8281dcb50d10935a8", "0600", "4c9561cf64252858"}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000170000000095000000000000003bf0ce67c192445f983abdf209cf460b6919e13d1cee8416f86b076f4973abfe1f7280db31b0cf56"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="3a00030007"], 0xd) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.179939848s ago: executing program 3 (id=1123): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) fanotify_init(0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) io_setup(0x0, &(0x7f00000001c0)) io_uring_setup(0x30d5, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{0x0}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@remote, @in=@local}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x27, 0x33, @probe_request={{{}, {}, @broadcast}, @val={0x0, 0x1, @random='\''}, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x44}}, 0x0) chdir(&(0x7f0000000000)='./file0\x00') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0xac5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) unshare(0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000000)={'security\x00'}, 0x28) readv(r5, &(0x7f0000001900)=[{0x0}, {&(0x7f0000000040)=""/65, 0x41}], 0x2) 4.149902294s ago: executing program 0 (id=1124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) 3.927204078s ago: executing program 5 (id=1125): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d0000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@private1}, 0x0, @in6=@loopback}}, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 3.92593743s ago: executing program 0 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6", @ANYRES64], 0x398}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) unshare(0x62040200) socket$inet6(0xa, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x100, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x68, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x5, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4084}, 0x44800) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="2a003300d0d4fe00ffffffffffff080211000000505050505050"], 0x48}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x26}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000000) syz_emit_vhci(&(0x7f0000004180)=ANY=[@ANYBLOB="040e04006d0c"], 0x7) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES16=r9, @ANYBLOB="f3270000000000000000070000000c0002"], 0x20}}, 0x0) 3.469970629s ago: executing program 5 (id=1127): socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000), 0x4) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioperm(0x0, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/171, 0xab}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000002d80)=""/226, 0xe2}, {&(0x7f0000002e80)=""/155, 0x9b}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000006080)={0x0, 0x989680}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000060c0)={0x1f, 0xb9, @fixed, 0x0, 0x2}, 0xe) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) 2.100512882s ago: executing program 3 (id=1128): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) pipe2(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8, 0x2}, [@l2cap_conf_req={{0x4, 0x0, 0x4}}]}}, 0x11) dup(0xffffffffffffffff) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xfffff000}], 0x2) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = fcntl$dupfd(r0, 0x0, r4) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000d, 0x10, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000000380)={0x0, 0xb, 0x58, {0x58, 0x30, "da2c26b034eb01477ff43ec5c9c331eba9a4224d0b884dfb278595c0e4b117f7e2f0c854cdb0fefdaffbaf3e4acc60dcc88aa2c84006a042e71dbc985f479a5d9e375c40f2a016e8adf28539be1e9482a4445d6a4e75"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000500)={0x20, 0xe, 0xed, "77104f62a1c9ab3fc6ac42c576cd3a28437ed4b94ec5973939b5b1abc7f3c1e08123bd74401486ccbbe32628e4d0eb803355a95aa492759ed76ddc46a0e6709f464a27ca5981d4b65e89414f405a6a0fc5e11fee1214a33c8b94e4c82954490d963931bf4bc9d81299fdc93494f2c84266c54c4a0e070394b0240b223edbec6a7a488feb81f41689a19a852a15fff1993a40bb3981513a4ea1cbb70298cdf832aa0e0fb9bb47cd51516bb6424de84e4fae59423582a188bc4dc679addfa04f4b5bc5fa383b025700c00f53e66717fc13117cc5dd22c1730eef5e7da0c58793dbd6a2fea6d8ef584318df6d8a9a"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}}) r7 = eventfd2(0x8001, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f0000000140)={0x281}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000000c0)={0x0, r7}) waitid$P_PIDFD(0x3, r6, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) 2.003288518s ago: executing program 5 (id=1129): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x3c}}, 0x0) 1.676659702s ago: executing program 1 (id=1130): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x218000, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES16, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES64=r0], 0x8, 0x2b1, &(0x7f0000000840)="$eJzs3c9qY1UYAPDvJmkadZEibhTBC7pwVWbcummUEcSulAjqxuB0QJIykIGAI9iZ1TyBS/E1fATXvoHgVnDXLipX7r/8aZMa26YF+/tB28M55zvnu+e06Spfvn7zcPjwcRLPj3+PTieJxl7sxUkSO9GI2rNoBQDw/3GSZfFXVraT6ms9rcbmsgIANqn8/1+67VwAgJvx2RdfftLb33/waZp24vXui0k/iYjDF5N+Od57FN/GKA7iXnTjNCKbKtsffbz/IFppbifeOTya9CcL6/f+jCji41nZsST+flqq4vsR+c+teDnS6D3aqpfqxmvL939vSXz02/Hu23P570Y3fvsmHscoHhZpzOJ/uJ+mH2Y/Hn//Vb5NHp80or9dzJvJmvn39uavBAAAAAAAAAAAAAAAAAAAAACAO2A3TZOyfE9RvyfvqurvNE+L8d20trNYn6eMn9YLLusDZXWFn6Msfqrr69xL0zSrJs7iW/FGywcLAAAAAAAAAAAAAAAAAAAAQO7Jd0+Hg9HoYHzlRnM4GNXVAOq39V92wb25nrfi6XDQXL3g9vp7zVcbyHO9cHK0WnENx7JO46U8nxVzfq7y/e8rb88u9/MqvL6Ya32KVz+YZphWQ/UhDwfJv+3VqS/ul/mhdlw2n+JuRwfjrPiVOM0W77Sz4jDb13Qa7VeWDv2dZdl667z/R3lHVU9SlNhYb/etqnH2Aad/O53zd/Hr6gVXvmQ0r/J6AwAAAAAAAAAAAAAAAAAArLb4xukznl8Y2thYUgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABww2af/183OhGx2HOucVQFXzRnnFSTxk9u8fEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4I/4JAAD//5+RQjQ=") socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f00000000c0)={0xe977, 0x0, 0x7f}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg$sock(r3, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1, 0x9fb, &(0x7f0000002540)="$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") bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004f80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x60}], 0x1, 0x0) futimesat(r1, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000500)={{0x77359400}, {0x77359400}}) syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2010000, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="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", @ANYRES64, @ANYRES32], 0x1, 0x9ebf, &(0x7f000000b4c0)="$eJxEunPwJ1e0vf2dZJJMbNvGE9u2bdt+4nzaRmzbtm3bto15a3659777n67uOr1q773Wrupe59wywFsHeNsAbx/gHQO8c4B3DfDuAd4zwHsHeN8A7x/gAwN8cIAPDfDhAT4ywEcH+NgAHx/gEwN8coBPDfDpAT4zwGcH+NwAnx/gCwN8cYAvDfDlAb4ywFcH+NoAXx/gGwN8c4BvDfDtAb4zwHcH+N4A3x/gBwP8cIAfDfDjAX4ywE8H+NkAPx/gFwP8coBfDfDrAX4zwG8H+N0Avx/gDwP8cYA/DfDnAf4ywF8H+NsAfx/gHwP8c4B/DfDvAf4zwH8HOHKAQwEOC3C0AEcPcHiAYwQ4ZoBjBTgiwLEDHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKEACXDjARQJcNMDFAlw8wCUCXDLApQJcOsBlAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4GNNDAjw0wMMCPDzAIwI8MsCjAjw6QAM8JsBjAzwuYPRR3J8Q4IkBnhTgyQEOAgwCDAOMAowDTAJMA8wCzAMsAiwDrAKsA2wCbAPsAoZGYZ4S4KkBnhbg6QGeEeCZAZ4V4NkBnhPguQGeF+D5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBXhfg9QHeEOCNAd4U4M0B3hLgrcGIoaEhvD3AO0bpeOi/uDvAewK8N8D7Arw/wAcCfDDAhwJ8eNQchENDj47i9ov/3nkiwCeD4f8P7+kAnxnVu//C5wN8IcAXA3wpwJcDfCXAVwN8LcDXA3wjwDcDfCvAtwN8J8B3A3wvwPcD/CDADwP8KMCPA/wkwE8D/CzAzwP8IsAvA/wqwK8D/CbAbwP8LsDvA/whwB8D/CnAnwP8JcBfA/wtwN8D/CPAPwP8K8C/A/wnwH8DHBngUIjDQhwtHFU3Dg9xjBDHDHGsEEeEOHaI44Q4bojjhcw+fogThDhhiBOFOHGIk4Q4aYiThTh5iFOEOGWIU4U4dYjThDhtiNOFOP3/4M4Y4kwhzhziLCHOGuJsIc4e4hwhzhniXCHOHeI8Ic4b4nwhzh/iAiEuGOJCIRLiwiEuEuKiIS4W4uIhLhHikiEuFeLSIS4T4rIhLhfi8iGuEOKKIa4U4srhWP9DKa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuNNrQ0Cgedglx1xB3C3H3EPcIcc8Q9wpx7xD3CRlt1Lr9Qtw/xANCPDDEg0I8OMRDQjw0xMNCPDzEI0I8MsSjQjw6REM8JsRjQzwuxONDPCHEE0M8KcSTQxyEGIQYhhiF/7/O0xCzEPMQixDLEKsQ6xCbENsQuxD7EE8J8dQQTwvx9BDPCPHMEM8K8ewQzwnx3BDPC/H8EC8I8cIQLwrx4hAvCfHSEC8L8fIQrwjxyhCvCvHqEK8J8doQrwvx+hBvCPHGEFfdbN6hYUNDQ7eEeGuIt4V4e4h3hHhniHeFeHeI94R4b4j3hXh/iA+E+GCID4X48Ci9D+GjIT4W4uMhPhHikyE+FeLTIT4T4rMhPhfi8yG+EOKLIb4U4sshvhLiqyG+FuLrIb4R4pshvhXi2yG+E+K7Ib4X4vshfhDihyF+FOLHIX4S4qchfhbi5yF+EeKXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIf4W4u8h/hHinyH+FeLfIf4T4r8hjgxxKMJhEY4W4egRDo9wjAjHjHCsCEdEOHaE40Q4boTjRTh+hBNEOGGEE0U4cYSTRDhphJNFOHmEU0Q4ZYRTRTh1hNNEOG2E00U4fYQzRDhjhDNFOHOEs0Q4a4SzRTh7hHNEOGeEc0U4d4TzRDhvhPNFOH+EC0S4YIQLRUiEC0e4SISLRrhYhItHuESES0a4VIRLR7hMhMtGuFyEy0e4QoQrRrhShCtHuEqEq0a4WoSrR7hGhGtGuFaEa0e4ToTrRrhehOtHuEGEG0a4UYQbR7hJhJtGuFmEm0e4RYRbRrhVhFtHuE2E20a4XYTbR7hDhDtGuFOEO0e4S4S7RrhbhLtHuEeEe0a4V4R7R7hPhPtGuF+E+0d4QIQHRnhQhAdHeEiEh0Z4WISHR3hEhEdGeFSER0dohMdEeGyEx0V4fIQnRHhihCdFeHKEgwiDCMMIowjjCJMI0wizCPMIiwjLCKsI6wibCNsIuwj7CE+J8NQIT4vw9AjPiPDMCM+K8OwIz4nw3AjPi/D8CC+I8MIIL4rw4ggvifDSCC+L8PIIr4jwygivivDqCK+J8NoIr4vw+ghviPDGCG+K8OYIb4nG8tYIb4vw9gjviPDOCO+K8O4I74nw3gjvi/D+CB+I8MEIH4rw4QgfifDRCB+L8PEIn4jwyQifivDpCJ+J8NkIn4vw+QhfiPDFCF+K8OUIX4nw1Qhfi/D1CN+I8M0I34rw7QjfifDdCN+L8P0IP4jwwwg/ivDjCD+J8NMIP4vw8wi/iPDLCL+K8OsIv4nw2wi/i/D7CH+I8McIf4rw5wh/ifDXCH+L8PcI/4jwzwj/ivDvCP+J8N8IR0Y4FOOwGEeLcfQYh8c4RoxjxjhWjCNiHDvGcWIcN8bxYhw/xglinDDGiWKcOMZJYpw0xslinDzGKWKcMsapYpw6xmlinDbG6WKcPsYZYpwxxplinDnGWWKcNcbZYpw9xjlinDPGuWKcO8Z5Ypw3xvniTyacP8YFYlwwxoViJMaFY1wkxkVjXCzGxWNcIsYlY1xqzCGXjnGZGJeNcbkYl49xhRhXjHGlGFeOcZUYV41xtRhXj3GNGNeMca0Y145xnRjXjXG9GNePcYMYN4xxoxg3jnGTGDeNcbMYN49xixi3jHGrGLeOcZuYGbeNcbsYt49xhxh3jHGnGHeOcZcYd41xtxh3j3GPGPeMca8Y945xnxj3jXG/GPeP8YAYD4zxoBgPjvGQGA+N8bAYD4/xiBiPjPGoGI+O0RiPifHYGI+L8fgYT4jxxBhPivHkGAcxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jGeEuOpMZ4W4+kxnhHjmTGeFePZMZ4T47kxnhfj+TFeEOOFMV4U48UxXhLjpTFeFuPlMV4R45UxXhXj1TFeE+O1MV4X4/Ux3hDjjTHeFOPNMd4S460x3hbj7THeEeOdMd4V490x3hPjvTHeF+P9MT4Q44MxPhTjwzE+EuOjMT4W4+MxPhHjkzE+FePTMT4T47MxPhfj8zG+EOOLMb4U48sxvhLjqzG+FuPrMb4R45uj+j2Eb8f4TozvxvhejO/H+EGMH8b4UYwfx/hJjJ/G+FmMn8f4RYxfxvhVjF/H+E2M38b4XYzfx/hDjD/G+FOMP8f4S4y/xvhbjL/H+EeMf8b4V4x/x/hPjP/GODLGoQSHJThagqMnODzBMRIcM8GxEhyR4NgJjpPguAmOl+D4CU6Q4IQJTpTgxAlOkuCkCU6W4OQJTpHglAlOleDUCU6T4LQJTpfg9AnOkOCMCc6U4MwJzpLgrAnOluDsCc6R4JwJzpXg3AnOk+C8Cc6X4PwJLpDgggkulCAJLpzgIgkumuBiCS6e4BIJLpngUgkuneAyCS6b4HIJLp/gCgmumOBKCa6c4CoJrprgagmunuAaCa6Z4FoJrp3gOgmum+B6Ca6f4AYJbpjgRglunOAmCW6a4GYJbp7gFglumeBWCW6d4DYJbpvgdglun+AOCe6Y4E4J7pzgLgnumuBuCe6e4B4J7pngXgnuneA+Ce6b4H4J7p/gAQkemOBBCR6c4CEJHprgYQkenuARCR6Z4FEJHp2gCR6T4LEJHpfg8QmekOCJCZ6U4MkJDhIMEgwTjBKME0wSTBPMEswTLBIsE6wSrBNsEmwT7BLsEzwlwVMTPC3B0xM8I8EzEzwrwbMTPCfBcxM8L8HzE7wgwQsTvCjBixO8ZJQOh4aGLkvw8gSvSPDKBK9K8OoEr0nw2gSvS/D6BG9I8MYEb0rw5gRvSfDWBG9L8PYE70jwzgTvSvDuBO9J8N4E70vw/gQfSPDBBB9K8OEEH0nw0QQfS/DxBJ9I8MkEn0rw6QSfSfDZBJ9L8PkEX0jwxQRfSvDlBF9J8NUEX0vw9QTfSPDNBN9K8O0E30nw3QTfS/D9BD9I8MMEP0rw4wQ/SfDTBD9L8PMEv0jwywS/SvDrBL9J8NsEv0vw+wR/SPDHBH9K8OcEf0nw1wR/S/D3BP9I8M8E/0rw7wT/SfDfBEcmOJTisBRHS3H0FIenOEaKY6Y4VoojUhw7xXFSHDfF8VIcP8UJUpwwxYlSnDjFSVKcNMXJUpw8xSlSnDLFqVKcOsVpUpw2xelSnD7FGVKcMcWZUpw5xVlSnDXF2VKcPcU5UpwzxblSnDvFeVKcN8X5Upw/xQVSXDDFhVIkxYVTXCTFRVNcLMXFU1wixSVTXCrFpVNcJsVlU1wuxeVTXCHFFVNcKcWVU1wlxVVTXC3F1VNcI8U1U1wrxbVTXCfFdVNcL8X1U9wgxQ1T3CjFjVPcJMVNU9wsxc1T3CLFLVPcKsWtU9wmxW1TTFLcPsUdUtwxxZ1S3DnFXVLcNcXdUtw9xT1S3DPFvVLcO8V9Utw3xf1S3D/FA1I8MMWDUjw4xUNSPDTFw1I8PMUjUjwyxaNSPDpFUzwmxWNTPC7F41M8IcUTUzwpxZNTHKQYpBimGKUY/0++aYpZinmKRYplilWKdYpNim2KXYp9iqekeGqKp6V4eopnpHhmimeleHaK56R4bornpXh+ihekeGGKF6V4cYqXpHhpipeleHmKV6R4ZYpXpXh1itekeG2K16V4fYo3pHhjijeleHOKt6R4a4q3pXh7inekeGeKd6V4d4r3pHhviveleH86coz/9X0eSvHhFB9J8dEUH0vx8RSfSPHJFJ9K8ekUn0nx2RRHjhw58vkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cMUP0rx4xQ/SfHTFD9L8fMUv0jxyxS/SvHrFL9J8dsUv0vx+xR/SPHHFH9K8ecUf0nx1xR/S/H3FP9I8c8U/0rx7xT/SfHfUfmnOJThsAxHy3D0DIdnOEaGY2Y4VoYjMhw7w3EyHDfD8TIcP8MJMpwww4kynDjDSTKcNMPJMpw8wykynDLDqTKcOsNpMpw2w+kynD7DGTKcMcOZMpw5w1lGx1kznC3D2TOcI8M586GhUfnNneE8Gc6b4XwZzp/hAhkumOFCGZLhwhkukuGiGS6W4eIZLpHhkhkuleHSGS6T4bIZLpfh8hmukOGKGa6U4coZrpLhqhmuluHqGa6R4ZoZrpXh2hmuk+G6Ga6X4foZbpDhhhlulOHGGW6S4aYZbjbq+XFDQ1tkuGWGW2W4dYbbZLhthttluH2GO2S4Y4Y7ZbhzhrtkuGuGu2W4e4Z7ZLhnhntluHeG+2S4b4b7Zbh/hgdkeGCGB2V4cIaHZHhohodleHiGR2R4ZIZHZXh0hmZ4TIbHZnhchsdneEKGJ2Z4UoYnZzjIMMgwzDDKMM4wyTDNMMswz7DIsMywyrDOsMmwzbDLsM/wlAxPzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCijKH/9RsvzfCyDC/P8IoMr8zwqoyRV2d4TYbXZnhdhtdnDB+lkRszvCnDmzO8JcNbM7wtw9szvCPDOzO8K8O7M7wnw3szvC/D+zN8IMMHM3wow4czfCTDRzN8LMPHM3wiwyczfCrDpzN8JsNnM3wuw+czfCHDFzN8KcOXM3wlw1czfC3D1zN8I8M3M3wrw7czfCfDdzN8L8P3M/wgww8z/CjDjzP8JMM/R/4Xn2f4RYZfZvhVhl9n+E32317Edxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R+j8DL8K8O/M/wnw38zHJnhUI7Dchwtx9FzHJ7jGDmOmeNYOY7Icewcx8lx3BzHy3H8HCfIccIcJ8px4hwnyXHSHCfLcfIcp8hxyhynynHqHKfJcdocp8tx+hxnyHHGHGfKceYcZ8lx1hxny3H2HOfIR80/zpXj3DnOk+O8Oc6X4/w5LpDjgjkulCM5LpzjIjkumuNiOS6e4xI5LpnjUjkuneMyOS6b43I5Lp/jCjmumONKOa6c4yo5rprjajmunuMaOa6Z41o5rp3jOjmum+N6Oa6f4wY5bpjjRjlunOMmOW6a42Y5bp7jFjlumeNWOW6d4zY5bpvjdjlun+MOOe6Y40457pzjLjnumuNuOe6e4x457pnjXjnuneM+Oe6b43457p/jATkemONBOR6c4yE5HprjYTkenuMROR6Z41E5Hp2jOR6T47E5Hpfj8TmekOOJOZ6U48k5DnIMcgxzjHKMc0xyTHPMcsxzLHIsc6xyrHNscmxz7HLsczwlx1NzPC3H03M8I8czczwrx7NzPCfHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjxztzvCvHu3O8J8d7c7wvx/tzfCDHB3N8KMeHc3wkx0dzfCzHx3N8Iscnc3wqx6dzfCbHZ3N8Lsfnc3whxxdzfCnHl3N8JcdXc3wtx9dzfCMf8X97S2/n+E6O7+b4Xo7v5/hBjh/+MdKPcvw4x09y/DTHz3L8PMcvcvwyx69y/DrHb3L8Nsfvcvw+xx9y/DHHn3Icmmho6Jccf83xtxx/z/GPHP/M8a8c/87xnxz/zXHkqPUFDitwtAJHL3B4gWMUOGaBYxU4osCxCxynwHELHK/A8QucoMAJC5yowIkLnKTASQucrMDJC5yiwCkLnKrAqQucpsBpC5yuwOkLnKHAGQucqcCZC5ylwFkLnK3A2Quco8A5C5yrwLkLnKfAeQucr8D5C1ygwAULXKhACly4wEUKXLTAxQpcvMAlClyywKUKXLrAZQqGRtW7XIHLF7hCgSsWuFKBKxe4SoGrFrhagasXuEaBaxa4VoFrF7hOgesWuF6B6xe4QYEbFrhRgRsXuEmBmxa4WYGbF7hFgVsWuFWBWxe4TYHbFrhdgdsXuEOBOxa4U4E7F7hLgbsWuFuBuxe4R4F7FrhXgXsXuE+B+xa4X4H7F3hAgQcWeFCBBxd4SIGHFnhYgYcXeETx3zfqyJEjjz+6QAs8psBjCzyuwOMLPKHAEws8qcCTCxwUGBQYFhgVGBeYFJgWmBWYF1gUWBZYFVgX2BTYFtgV2Bd4SoGnFnhagacXeEaBZxZ4VoFnF3hOgecWeF6B5xd4QYEXFnhRgRcXeEmBlxZ4WYGXF3hFgVcWeFWBVxd4TYHXFnhdgdcXeEOBNxZ4U4E3F3hLgbcWeFuBtxd4R4F3FnhXgXcXeE+B9xZ4X4H3F/hAgQ8W+FCBDxf4SIGPFvhYgY8X+ESBTxb4VIFPF/hMgc8W+FyBzxf4QoEvFvhSgS8X+EqBrxb4WoGvF/hGgW8W+FaBbxf4ToHvFvhege8X+EGBHxb4UYEfF/hJgZ8W+FmBnxf4RYFfFvhVgV8X+E2B3xb4XYHfF/hDgT8W+FOBPxf4S4G/Fvhbgb8X+EeBfxb4V4F/F/hPgf+O0kaBQyUOK3G0EkcvcXiJY5Q4ZoljlTiixLFLHKfEcUscr8TxS5ygxAlLnKjEiUucpMRJS5ysxMlLnKLEKUucqsSpS5ymxGlLnK7E6UucocQZS5ypxJlLnKXEWUucrcTZS5yjxDlLnKvEuUucp8R5S5yvxPlLXKDEBUtcqERKXLjERUpctMTFSly8xCVKXLLEpUpcusRlSly2xOVKXL7EFUpcscSVSly5xFVKXLXE1UpcvcQ1SlyzxLVKXLvEdUpct8T1Sly/xA1K3LDEjUrcuMRNSty0xM1K3LzELUrcssStSty6xG1K3LbE7UrcvsQdymHuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5doiUeU+KxJR5X4vElnlDiiSWeVOLJJQ5KDEoMS4xKjEtMSkxLzErMSyxKLEusSqxLbEpsS+xK7Es8pcRTSzytxNNLPKPEM0s8q8SzSzynxHNLPK/E80u8oMQLS7yoxItLvKTES0u8rMTLS7yixCtLvKrEq0u8psRrS7yuxOtLvKHEG0u8qcSbS7ylxFtLvK3E20u8o8Q7S7yrxLtLvKfEe0u8r8T7S3ygxAdLfKjEh0t8pMRHS3ysxMdLfKLEJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxE9L/KzEz0v8osQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEP0v8q8S/S/ynxH9LHFniUIXDKhytwtErHF7hGBWOWeFYFY6ocOwKx6lw3ArHq3D8CieocMIKJ6pw4gonqXDSCiercPIKp6hwygqnqnDqCqepcNoKp6tw+gpnqHDGasTQTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVUuHCFS5S4aIVLlbh4hUuUeGSFS41NHxoVJ3LVLhshctVuHyFK1S4YoUrVbhyhatUuGqFq1W4eoVrVLhmhWtVuHaF61S4boXrVbh+hRtUuGGFG1W4cYWbVLhphZtVuHmFW1S4ZYVbVbh1hdtUuG2F21W4fYU7VLhjhTtVuHOFu1S4a4W7Vbh7hXtUuGeFe1W4d4X7VLhvhftVuH+FB1R4YIUHVXhwhYdUeGiFh1V4eIVHVHhkhUdVeHSFVnhMhcdWeFyFx1d4QoUnVnhShSdXOKgwqDCsMKowrjCpMK0wqzCvsKiwrLCqsB6lkyFsK+wq7Cs8pcJTKzytwtMrPKPCMys8q8KzKzynwnMrPK/C8yu8oMILK7yowosrvKTCSyu8rMLLK7yiwisrvKrCqyu8psJrK7yuwusrvKHCGyu8qcKbK7ylwlsrvK3C2yu8o8I7K7yrwrsrvKfCeyu8r8L7K3ygwgcrfKjChyt8pMJHK3yswscrfKLCJyt8qsKnK3ymwmcrHDnW0NDzFb5Q4YsVvlThyxW+UuGrFb5W4esVvlHhmxW+VeHbFb5T4bsVvlfh+xV+UOGHFX5U4ccVflLhpxV+VuHnFX5R4ZcVflXh1xV+U+G3FX5X4fcV/lDhjxX+VOHPFf5S4a8V/lbh7xX+UeGfFf5V4d8V/lPhv6Pyr3CoxmE1jlbj6DUOr3GMGsescawaR9Q4do3j1DhujePVOH6NE9Q4YY0T1ThxjZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOGONM9U4c42z1DhrjbPVOHuNc9Q4Z41z1Th3jfPUOG+N89U4f40L1LhgjQvVyKgahoaGFqlx0RoXq3HxGpcYdoJL1rhUjUvXuEyNy9a4XI3L17hCjSvWuFKNK9e4So2r1rhajavXuEaNa9a4Vo1r17hOjevWuF6N69e4QY0b1rhRjRvXuEmNm9a4WY2b17hFjVvWuFWNW9e4TY3b1rhdjdvXuEONO9a4U40717hLjbvWuFuNuw8bdsKo/8U9a9yrxr1r3KfGfWvcr8b9azygxgNrPKjGg2s8pMZDazysxsNrPKLGI2s8qsaja7TGY2o8tsbjajy+xhNqPLHGk2o8ucZBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2Np9R4ao2n1Xh6jWfUeGaNZ9V4do3n1HhujefVeH6NF9R4YY0X1XhxjZfUeGmNl9V4eY1X1HhljVfVeHWN19R4bY3X1Xh9jTfUeGONN9V4c4231HhrzUxDQ0PeXuMdNd5Z41013l3jPTXeW+N9Nd5f4wM1PljjQzU+XOMjNT5a42M1Pl7jEzU+WeNTNT5d4zM1PlvjczU+X+MLNb5Y40s1vlzjKzW+WuNrNb5e4xs1vlnjWzW+XeM7Nb5b43s1vl/jBzV+WONHNX5c4yc1flrjZzV+XuMXNX75P7P5dY3f1Phtjd/V+H2NP9T4Y40/1fhzjb/U+GuNv9X4e41/1PhnjX/V+HeN/9T4b40jaxxqcFiDozU4eoPDGxyjwTEbHKvBEQ2O3eA4DY7b4HgNjt/gBA1O2OBEDU7c4CQNTtrgZA1O3uAUDU7Z4FTNyv/nfUzb4HQNTt/gDA3O2OBMDc7c4CwNztrgbA3O3uAcDc7Z4FwNzt3gPA3O2+B8Dc7f4AINLtjgQg3S4MINLtLgog0u1uDiDS7R4JINLtXg0g0u0+CyDS7X4PKjMB/AFRtcqcGVG1ylwVUbXK3B1Rtco8E1G1yrwbUbXKfBdRtcr8H1G9ygwQ0b3KjBjRvcpMFNG9yswc0b3KLBLRvcqsGtG9ymwW0b3K7B7RvcocEdG9ypwZ0b3KXBXRvcrcHdG9yjwT0b3KvBvRvcp8F9G9yvwf0bPKDBAxs8qMGDGzykwUMbPKzBwxs8osEjGzyqwaMbtMFjGjy2weMaPL7BExo8scGTGjy5wUGDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtgyP/+s9sOKXBUxs8rcHTGzyjwf819s9u8JwGz23wvAbPb/CCBi9s8KIGLx6OlzR4aYOXNXh5w8j/OYTsVQ1e3eA1DV7b4HUNXt/gDQ3/e3jbmxu8pcFbG7ytwdsbvKPBOxu8q8G7G7ynwXsbvK/B+xt8oMEHG3yowYcbfKTBRxt8rMHHG3yiwScbfKrBpxt8psFnG3yuwecbfKHBFxt8qcGXG3ylwVcbfK3B1xt8o8E3G3yrwbcbfKfBdxt8r8H3G/ygwQ8b/KjBjxv8pMFPG/yswc8b/KLBLxv8qsGvG/ymwW8b/K7B7xv8ocEfG/ypwZ8b/KXBXxv8rcHfG/yjwT8b/KvBvxv8p8F/hw85chQvLQ5rcbQWR29xeItjtDhmi2O1OGLUdeSE/3W3xfFaHL/FCUaO/H/3E7U4cYuTtDhpi5O1OHmLU7Q4ZYtTtTh1i9O0OG2L07U4fYsztDhjizO1OHOLs7Q4a8toozicvcU5WpyzxblanLvFeVqct8X5Wpy/xQVaXLDFhVqkxYVbXKTFRVtcrMXFW1yixSVbXKrFpVtcpsVlW1yuxeVbXKHFFVtcqcWVW1ylxVVbXK3F1Vtco8U1W1yrxbVbXKfFdVtcr8X1W9ygxQ1b3KjFjVvcpMVNW9ysxc1b3KLFLVvcqsWtW9ymxW1b3K7F7VvcocUdW9ypxZ1b3KXFXVvcrcXdW9yjxT1b3KvFvVvcp8V9W9yvxf1bPKDFA1s8qMWDWzykxUNbPKzFw1s8osUjWzyqxaNbtMVjWjy2xeNaPL7FE1o8scWTWjy5xUGLQYthi1GLcYtJi2mLWYt5i0WLZYtVi3WLTYtti12LfYuntHhqi6e1eHqLZ7R4ZotntXh2i+e0eG6L57V4fosXtHhhixe1eHGLl7R4aYuXtXh5i1e0eGWLV7V4dYvXtHhti9e1eH2LN7R4Y4s3tXhzi7e0eGuLt7V4e4t3tHhni3e1eHeL97R4b4v3tXh/iw+0+GCLD7X4cIuPtPhoi4+1+HiLT7T4ZItPtfh0i8+0+GyLz7X4fIsvtPhiiy+1+HKLr7T4aouvtfh6i2+0+GaLb7X4dovvtPhui++1+H6LH7T4YYsftfhxi5+0+GmLn7X4eYtftPhli1+1+HWL37T4bYvftfh9iz+0+GOLP7X4c4u/tPhri7+1+HuLf7T4Z4t/tfh3i/+0+G+LI1sc6nBYh6N1OHqHwzsco8MxOxyrwxEdjt3hOB2O2+F4HY7f4QQdTtjhRB1O3OEkHU7a4WQdTt7hFB1O2eFUHU7d4TQdTtvhdB1O3+EMHc7Y4UwdztzhLB3O2uFsHc7e4RwdztnhXB3O3eE8Hc7b4Xwdzt/hAh0u2OFCHdLhwh0u0uGiHS7W4eIdLtHhkh0u1eHSHS7T4bIdLtfh8h2u0OGKHa7U4codrtLhqh2u1uHqHa7R4ZodrtXh2h2u0+G6Ha7X4fodbtDhhh1u1OHGHW7S4aYdbtbh5h1u0eGWHW7V4dYdbtPhtsOG3K7D7TvcocMdO9ypw5073KXDXTvcrcPdO9yjwz073KvDvTvcp8N9O9yvw/07PKDDAzs8qMODOzykw0M7PKzDwzs8osMjOzyqw6M7tMNjOjy2w+M6PL7DEzo8scOTOjy5w0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYendHhqh6d1eHqHZ3R4ZodndXh2h+d0eG6H53V4focXdHhhhxd1eHGHl3R4aYeXdXh5h1d0eGWHV3V4dYfXdHhth9d1eH2HN3R4Y4c3dXhzh7d0eGuHt3V4e4d3dHhnh3d1eHeH93R4b4f3dXh/hw90+GCHD3X4cIePdPhoh491+HiHT3T4ZIdPdfh0h890+GyHz3X4fIcvdPhihy91+HKHr3T4aoevdfh6h290+GaHb3X4dofvdPhuh+91+H6HH3T4YYcfdfhxh590+GmHn3X4eYdfdPhlh191+HWH33T4bYffdfh9hz90+GOHP3X4c4e/dPhrh791+HuHf3T4Z4d/dfh3h/90+G+HIzsc6nFYj6P1OHqPw3sco8cxexyrxxE9jt3jOD2O2+N4PY7f4wQ9TtjjRD1O3OMkPU7a42Q9Tt7jFD1O2eNUPU7d4zQ9TtvjdD1O3+MMPc7Y40w9ztzjLD3O2uNsPc7e4xw9ztnjXD3O3eM8Pc7b43w9zt/jAj0u2ONCPdLjwj0u0uOiPS7W4+I9LtHjkj0u1ePSPS7T47I9Ltfj8j2u0OOKPa7U48o9rtLjqj2u1uPqPa7R45o9rtXj2j2u0+O6Pa7X4/o9btDjhj1u1OPGPW7S46Y9btbj5j1u0eOWPW7V49Y9btPjtjPhdj1u3+MOPe7Y40497tzjLj3u2uNuPX+O7HGPHvfsca8e9+5xnx737XG/Hvfv8YAeDxxzaGgUhwf3eEiPh/Z4WI+H93hEj0f2eFSPR/doj8f0eGyPx/V4fI8n9Hhijyf1eHKPgx6DHsMeox7jHpMe0x6zHvMeix7LHqse6x6bHtseux77Hk/p8dQeT+vx9B7P6PHMHs/q8ewez+nx3B7P6/H8Hi/o8cIeL+rx4h4v6fHSHi/r8fIer+jxyh6v6vHqHq/p8doer+vx+h5v6PHGHm/q8eYeb+nx1h5v6/H2Hu/o8c4e7+rx7h7v6fHeHu/r8f4eH+jxwR4f6vHhHh/p8dEeH+vx8R6f6PHJHp/q8eken+nx2R6f6/H5Hl/o8cWh/3h4ucdXeny1x9d6fL3HN3p8s8e3eny7x3d6fLfH93p8v8cPevywx496/LjHT3r8tMfPevy8xy96/LLHr3r8usdvevz2/yPqnKPHurqtnaRpmtS27fap3dS2bdt4itR2jo1fbdu2bdtG8o2+9733+/+MM/bac4691pxrj71G43ej8fvR+MNo/HE0/jQafx6Nv4zGX0fjb6Px99H4x2j8czT+NRr/Ho3/jMYxo/Ffjg0KcHCAQwIcJ8ChAY4b4LAAxwtweIAjAhw/wAkCnDDAiQKcOMBJApw0wMkCnDzAKQKcMsCpApw6wGkCnDbA6QKcPsAZApwxwJkCnDnAWQKcNWD4v2uYPcA5ApwzwLkCnDvAeQKcN8D5Apw/wAUCXDDAhQJcOMBFAlw0QAJcLMDFA1wiwCUDXCrApQNcJsBlA1wuwOUDXCHAFQNcKcCVAxwZ4CoBrhrgagGuHuAaAa4Z4FoBrh3gOgGuG+B6Aa4f4AYBbhjgRgFuHOAmAW4a4GYBbh7gFgFuGeBWAW4d4DYBbhvgdgFuH+AOAe4Y4E4B7hzgLgHuGuBuAe4e4B4B7hngXgHuHeA+Ae4b4H4B7h/gAQEeGOBBAR4c4CEBHhrgYQEeHuARAR4Z4FHBqEFHB3hMgMcGaIDHBXh8gCcEeGKAowI8KcCTAzwlwFMDPC3A0wM8I8AzAzwrwLMDPCfAc0/8r9IO8IIALwzwogAvDvCSAEcHGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ac4EOClAV4W4OUBXhHglQFeFeDVAeP+r9a/LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwHsDvC/A+wN8IMAHA3wowIcDfCTARwN8LMDHA3wiwCcDfCrApwN8JsBnA3wuwOcDfCHAFwN8KcCXA3wlwFcDfC3A1wN8I8A3A3wrwLcDfCfAdwN8L8D3A/wgwA8D/CjAjwP8JMBPA/wswM8D/CLALwP8KsCvA/wmwG8D/C7A7wP8IcAfA/wpwJ8D/CXAXwP8LcDfA/wjwD8D/CvAvwP8J8AxAY4NcFCIg0McEuI4IQ4NcdwQh4U4XojDQxwR4vghThDihCFOFOLEIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhLhLioiES4mIhLh7iEiEuGeJSIS4d4jIhLhviciEuH+IK4Yj/8yNXDnFkiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLhpiJuFuHmIW4S4ZYhbhbh1iNuEuG2I24W4fYg7hLhjiDuFuHOIu4S4a4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4R4bIiGeFyIx4d4QognhjgqxJNCPDnEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xPNCPD/EC0K8MMSLQrw4xEtCHB1iEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH+JAiJeGeFmIl4d4RYhXhnhViFeHeE2I14Z4XYjXh3hDiDeGeFOIN4d4S4i3hnhbiIOed5w7QrwzxLtCvDvEe0K8N8T7Qrw/xAdCfDDEh0J8OMRHQnw0xMdCfDzEJ0J8MsSnQnw6xGdCfDbE50J8PsQXQnwxxJdCfDnEV0J8NcTXQnw9xDdCfDPEt0J8O8R3Qnw3xPfC/5xlfhDihyF+FOLHIX4S4qchfhbi5+FgvwjxyxC/CvHrEL8J8dsQvwvx+xB/CPHHEH8K8ecQfwnx1xB/C/H3EP8I8c8Q/wrx7xD/CXFMiGP/3Z8IB0c4JMJxIhwa4bgRDotwvAiHRzgiwvEjnCDCCSOcKMKJI5wkwkkjnCzCySOcIsIpI5wqwqkjnCbCaSOcLsLpI5whwhkjnCnCmSOcJcJZI5wtwtkjnCPCOSOcK8K5I5wnwnkjnC/C+SNcIMIFI1wowoUjXCTCRSMkwsUiXDzCJSJcMsKlIlw6wmUiXDbC5SJcPsIVIlwxwpUiXDnCkRGuEuGqEa4W4eoRrhHhmhGuFeHaEa4T4boRrhfh+hFuEOGGEW4U4cYRbhLhphFuFuHmEW4R4ZYRbhXh1hFuE+G2EW4X4fYR7hDhjhHuFOHOEe4S4a4R7hbh7hHuEeGeEe4V4d4R7hPhvhHuF+H+ER4Q4YERHhThwREeEuGhER4W4eERHhHhkREeFeHRER4T4bERGuFxER4f4QkRnhjhqAhPivDkCE+J8NQIT4vw9AjPiPDMCM+K8OwIz4nwrwjPi/D8CC+I8MIIL4rw4ggviXB0hEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2EAxFeGuFlEV4e4RURXhnhVRFeHeE1EV4b4XURXh/hDRHeGOFNEd4c4S0R3hrhbRHeHuEdEd4Z4V0R3h3hPRHeG+F9Ed4f4QMRPhjhQxE+HOEjET4a4WPRsP/kiScifDLCpyJ8OsJnInw2wucifD4a8p9vXozwpQhfjvCVCF+N8LUIX4/wjQjfjPCtCN+O8J0I343wvQjfj/CDCD+M8KMIP47wkwg/jfCzCD+P8IsIv4zwqwi/jvCbCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCP/8L3Z/R/hPhGMiHBvhoBgHxzgkxnFiHBrjuDEOi3G8GIfHOCLG8WOcIMYJY5woxoljnCTGSWOcLP5g0OQxThHjlDFOFePUMU4T47QxThfj9DHOEOOMMc4U48wxzhLjrDHOFuPsMc4R45wxzhXj3DHOE+O8Mc4X4/wxLhDjgjEuFOPCMS4S46IxEuNiMS4e4xIxLhnjUjEuHeMyMS4b43IxLh/jCjGuGONKMa4c48gYV4lx1RhXi3H1GNeIcc0Y14px7RjXiXHdGNeLcf0YN4hxwxg3inHjGDeJcdMYN4tx8xi3iHHLGLeKcesYt4lx2xi3i3H7GHeIcccYd4px5xh3iXHXGHeLcfcY94hxzxj3inHvGPeJcd8Y94tx/xgPiPHAGA+K8eAYD4nx0BgPi/HwGI+I8cgYj4rx6BiPifHYGI3xuBiPj/GEGE+McVSMJ8V4coynxHhqjKfFeHqMZ8R4ZoxnxXh2jOfEeG6M58V4fowXxHhhjBfFeHGMl8Q4OsYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xoEYL43xshgvj/GKGK+M8aoYr47xmhivjfG6GK+P8YYYb4zxphhvjvGWGG+N8bYYb4/xjhjvjPGuGO+O8Z4Y743xvhjvj/GBGB+M8aEYH47xkRgfjfGxGB+P8YkYn4zxqRifjvGZGJ+N8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxh/jfG3GH+P8Y8Y/4zxrxj/jvGfGMfEODbGQQkOTnBIguMkODTBcRMcluB4CQ5PcESC4yc4QTLZ/9XOEyc4SYKTJjhZgpMnOEWCUyY4VYJTJzhNgtMmOF2C0yc4Q4IzJjhTgjMnOEuCsyY4W4KzJzhHgnMmOFeCcyc4T4LzJjhfgvMnuECCCya4UIILJ7hIgosmSIKLJbh4gkskuGSCSyW4dILLJLhsgssluHyCKyS4YoIrJbhygiMTXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CzBzRPcIsEtE9wqwa0T3CbBbRPcLsHtE9whwR0T3CnBnRPcJcFdE9wtwd0T3CPBPRPcK8G9E9wnwX0T3C/B/RM8IMEDEzwowYMTPCTBQxM8LMHDEzwiwSMTPCrBoxM8JsFjEzTB4xI8PsETEjwxwVEJnpTgyQmekuCpCZ6W4OkJnpHgmQmeleDZCZ6T4LkJnpfg+QlekIz4DxcuSvDiBC9JcHSCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYIDCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgdQlen+ANCd6Y4E0J3pzgLQnemuBtCd6e4B0J3pngXQneneA9Cd6b4H0J3p/gAwk+mOBDCT6c4CMJPprgYwk+nuATCT6Z4FMJPp3gMwk+m+BzCT6f4AsJvpjgSwm+nOArCb6a4GsJvp7gGwm+meBbCb6d4DsJvpvgewm+n+AHCX6Y4EcJfpzgJwl+muBnCX6e4BcJfpngVwl+neA3CX6b4HcJfp/gDwn+mOBPCf6c4C8J/prgbwn+nuAfCf6Z4F8J/p3gPwmOSXBsgoNSHJzikBTHSXFoiuOmOCzF8VIcnuKIFMdPcYIUJ0xxohQnTnGSFCdNcd3hgwZNnuIUKU6Z4lQpTp3iNClOm+J0KU6f4gwpzpjiTCnOnOIsKc6a4mwpzp7iHMMGOWeKc6U4d4rzpDhvivOlOH+KCwzCBVNcKMWFU1wkxUVTJMXFUlw8xSVSXDLFpVJcOsVlUlw2xeVSXD7FFVJcMcWVUlw5xZEprpLiqimuluLqKa6R4poprpXi2imu82+MKa6X4vopbpDihilulOLGKW6S4qYpbpbi5ilukeKWKW6V4tYpbpPitilul+L2Ke6Q4o4p7pTizinukuKuKe6W4u4p7pHininuleLeKe6T4r4p7pfi/ikekOKBKR6U4sEpHpLioSkeluLhKR6R4pEpHpXi0Skek+KxKZricSken+IJKZ6Y4qgUT0rx5BRPSfHUFE9L8fQUz0jxzBTPSvHsFM9J8dwUz0vx/BQvSPHCFC9K8eIUL0lxdIpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9igMpXppe72UpXp7iFSlemeJVKV6d4jUpXpvidSlen+INKd6Y4k0p3pziLSnemuJtKd6e4h0p3pniXSneneI9Kd6b4n0p3p/iAyk+mOJDKT6c4iMpPpriYyk+nuITKT6Z4lMpPp3iMyk+m+JzKT6f4gspvpjiSym+nOIrKb6a4mspvp7iGym+meJbKb6d4jspvpvieym+n+IHKX6Y4kcpfpziJyl+muJnKX6e4hcpfpniVyl+neI3KX6b4ncpfp/iDyn+mOJPKf6c4i8p/pribyn+nuIfKf6Z4l8p/p3iPymOSXFsioMyHJzhkAzHyXBohuNmOCzD8TIcnuGIDMfPcIIMJ8xwogwnznCSDCfNcLIMJ89wigynzHCqDKfOcJoMp81wugynz3CGDGfMcKYMZ85wlgxnzXC2DGfPcI4M58xwrgznznCeDOfNcL4M589wgQwXzHChDBfOcJEMF82QDBfLcPEMl8hwyQyXynDpDJfJcNkMl8tw+QxXyHDFDFfKcOUMR2a4SoarZrhahqtnuEaGa2a4VoZrZ7hOhutmuF6G62e4QYYbZrhRhhtnuEmGm2a4WYabZ7hFhltmuFWGW2e4TYbbZrhdhttnuEOGO2a4U4Y7Z7hLhrtmuFuGu2cnukeGe2a4V4Z7Z7hPhvtmuF+G+2d4QIYHZnhQhgdneEiGh2Z4WIaHZ3hEhkdmeFSGR2d4TIbHZmiGx2V4fIYnZHhihqMyPCnDkzM8JcNTMzwtw9MzPCPDMzM8K8OzMzwnw3MzPC/D8zO8IMMLM7wow4szvCTD0RkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn2GQ5keGmGl2V4eYZXZHhlhldleHWG12R4bYbXZXh9hjdkeGOGN2V4c4a3ZHhrhrdleHuGd2R4Z4Z3ZXh3hvdkeG+G92V4f4YPZPhghg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobvZfh+hh9k+GGGH2X4cYafZPhphp9l+HmGX2T4ZYZfZfh1ht9k+G2G32X4fYY/ZPhjhj9l+HOGv2T4a4a/Zfh7hn9k+GeGf2X4d4b/ZDgmw7EZDspxcI5Dchwnx6E5jpvjsBzHy0c6PMcROY6f4wQ5TpjjRDlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ5TpvjdDlOn+MMOc6Y40w5zpzjLDnOmuNsOc6e4xw5zpnjXDnOneM8Oc6b43w5zp/jAjkumONCOS6c4yI5LpojOS6W4+I5LpHjkjkulePSOS6T47I5Lpfj8jmukOOKOa6U48o5jsxxlRxXzXG1HFfPcY0c18xxrRzXznGdHNfNcb0c189xgxw3zHGjHDfOcZMcN81xsxw3z3GLnMFD/9uj2jrHbXLcNsftctw+xx1y3DHHnXLcOcddctw1x91y3D3HPXLcM8e9ctw7x31y3DfH/XLcP8cDcjwwx4NyPDjHQ3I8NMfDcjw8xyNyPDLHo3I8Osdjcjw2R3M8LsfjczwhxxNzHJXjSTmenOMpOZ6a42k5np7jGTmemeNZOY4dO2bsOTmem+N5OZ6f4wU5XpjjRTlenOMlOY7OMcgxzDHKMc4xyTHNMcsxz7HIscyxyrHOscmxzbHLsc9xIMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjxztzvCvHu3O8J8d7c7wvx/tzfCDHB3N8KMeHc3wkx0dzfCzHx3N8Iscnc3wqx6dzfCbHZ3N8Lsfnc3whxxdzfCnHl3N8JcdXc3wtx9dzfCPHN3N8K8e3c3wnx3dzfC/H93P8IMcPc/wox49z/CTHT3P8LMfPc/wixy9z/CrHr3P8Jsdvc/wux+9z/CHHH3P8Kcefc/wlx19z/C3H33P8I8c/c/wrx79z/CfHMf9imuOgAgcXOKTAcQocWuC4BQ4rcLwChxc4osDxC5ygwAkLnKjAiQucpMBJC5yswMkLnKLAKQucqsCpC5ymwGkLnK7A6QucocAZC5ypwJkLnKXAWQucrcDZC5yjwDkLnKvAuQucp8B5C5yvwPkLXKDABQtcqMCFC1ykwEULpMDFCly8wCUKXLLApQpcusBlCly2wOUKXL7AFQpcscCVCly5wJEFrlLgqgWuVuDqBa5R4JoFrlXg2gWuU+C6Ba5X4PoFblDghgVuVODGBW5S4KYFblbg5gVuUeCWBW5V4NYFblPgtgVuV+D2Be5Q4I4F7lTgzgWD/7efvVuBuxe4R4F7FrhXgXsXuE+B+xa4X8HIf/E6oMADCzyowIMLPKTAQws8rMDDCzyiwCMLPKrAows8psBjC7TA4wo8vsATCjyxwFEFnlTgyQWeUuCpBZ5W4OkFnlHgmQWeVeDZBZ5T4LkFnlfg+QVeUOCFBV5U4MUFXlLg6AKDAsMCowLjApMC0wKzAvMCiwLLAqsC6wKbAtsCuwL7AgcKvLTAywq8vMArCryywKsKvLrAawq8tsDrCry+wBsKvLHAmwqG3FzgLQXeWuBtBd5e4B0F3lngXQXeXeA9Bd5b4H0F3l/gAwU+WOBDBT5c4CMFPlrgYwU+XuATBT5Z4FMFPl3gMwU+W+BzBT5f4AsFvljgSwW+XOArBb5a4GsFvl7gGwW+WeBbBb5d4DsFvlvgewW+X+AHBX5Y4EcFflzgJwV+WuBnBX5e4BcFflngVwV+XeA3BX5b4HcFfl/gDwX+WOBPBf5c4C8F/lrgbwX+XuAfBf5Z4F8F/l3gPwWOKXBsgYNKHFzikBLHKXFoieOWOKzE8UocXuKIEscvcYISJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnH4EzlDhjiTOVOHOJs5Q4a4mzlTh7iXOUOGeJc5U4d4nzlDhvifOVOH+JC5S4YIkLlbhwiYuUuGiJlLhYiYuXuESJS5a4VIlLl7hMicuWuFyJy5e4QokrlrhSiSuXOLLEVUpctcTVSly9xDVKXLPEtUpcu8R1Sly3xPVKXL/EDUrcsMSNSty4xE1K3LTEzUrcvMQtStyyxK1K3LrEbUrctsTtSty+xB1K3LHEnUrcucRdSty1xN1K3L3EPf7FYNCgQXuVuHeJ+5S4b4n7lbh/iQeUeGCJB5V4cImHlHhoiYeVeHiJR5R4ZIlHlXh0iceUeGyJlnhciceXeEKJJ5Y4qsSTSjy5xFNKPLXE00o8vcQzSjyzxLNKPLvEc0o8t8TzSjy/xAtKvLDEi0q8uMRLShxdYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl/iQImXlnhZiZeXeEWJV5Z4VYlXl3hNideWeF2J15d4Q4k3lnhT+f/nFdxa4m0l3l7iHSXeWeJdJd5d4j0l3lvifSXeX+IDJT5Y4kMlPlziIyU+WuJjJT5e4hMlPlniUyU+XeIzJT5b4nOj8PkSXyjxxRJfKvHlEl8p8dUSXyvx9RLfKPHNEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xI/KfHTEj8r8fMSvyjxyxK/KvHrEr8p8dsSvyvHjv1fP/7HEn8q8ecSfynx1xJ/K/H3Ev8o8c8S/yrx7xL/KXFMiWNLHFTh4AqHVDhOhUMrHLfCYRWOV+HwCkdUOH6FE1Q4YYUTVThxhZNUOGmFk1U4eYVTVDhlhVNVOHWF01Q4bYXTVTh9hTNU/zOHZaYKZ65wlgpnrXC2CmevcI4K56xwrgrnrnCeCuetcL4K569wgQoXrHChCheucJEKF62QChercPHqf96NXbLCpSpcusJlKly2wuUqXL7CFSpcscKVKly5wpEVrlLhqhWuVuHqFa5R4ZoVrlXh2hWuU+G6Fa5X4foVblDhhhVuVOHGFW5S4aYVblbh5hVuUeGWFW5V4dYVblPhthVuV+H2Fe5Q4Y4V7lThzhXuUuGuFe5W4e4V7lHhnhXuVeHeFe5T4b4V7lfh/hUeUOGBFR5U4cEVHlLhoRUeVuHhFR5R4ZEVHlXh0RUeU+GxFVrhcRUeX+EJFZ5Y4agKT6rw5ApPqfDUCk+r8PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6lwdIVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV9hQMVXlrhZRVeXuEVFV5Z4VUVXl3hNRVeW+F1FV5f4Q0V3ljhTRXeXOEtFd5a4W0V3l7hHRXeWeFdFd5d4T0V3lvhfRXeX+EDFT5Y4UMVPlzhIxU+WuFjFT5e4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeFXFX5d4TcVflvhdxV+X+EPFf5Y4U8V/lzhLxX+WuFvFf5e4R8V/lnhXxX+XeE/FY6pcGyFg2ocXOOQGsepcWiN49Y4rMbxahxe44gax69xghonrHGiGieucZIaJ61xshonr3GKGqescaoap65xmhqnrXG6GqevcYYaZ6xxphpnrnGWGmetcbYaZ69xjhrnrHGuGueucZ4a561xvhrnr3GBGhescaEaF65xkRoXrZEaF6tx8RqXqHHJGpeqcekal6lx2RqXq3H5GleoccUaV6px5RpH1rhKjavWuFqNq9e4Ro1r1rhWjWvXuE6N69a4Xo3r17hBjRvWuFGNG9e4SY2b1rhZjZvXuEWNW9a4VY1b17hNjdvWuF2N29e4Q4071rhTjTvXuEuNu9a4W42717hHjXvWuFeNe9e4T4371rhfjfvXeECNB9Z4UI0H13hIjYfWeFiNh9d4RI1H1nhUjUfXeEyNx9ZojcfVeHyNJ9R4Yo2jajypxpNrPKXGU2s8rcbTazyjxjNrPKvGs2s8p8ZzazyvxvNrvKDGC2u8qMaLa7ykxtE1BjWG9cj/5KW4xqTGtMasxrzGosayxqrGusamxrbGrsa+xoEaL63xshovr/GKGq+s8aoar67xmhqvrfG6Gq+v8YYab6zxphpvrvGWGm+t8bYab6/xjhrvrPGuGu+u8Z4a763xvhrvr/GBGh+s8aEaH67xkRofrfGxGh+v8Ykan6zxqRqfrvGZGp+t8bkan6/xhRpfrPGlGl+u8ZUaX63xtRpfr/GNGt+s8a0a367xnRrfrfG9Gt+v8YMaP6zxoxo/rvGTGj+t8bMaP6/xixq/rPGrGr+u8Zsav63xuxq/r/GHGn+s8acaf67xlxp/rfG3Gn+v8Y8a/6zxrxr/rvGfGsfUOLbGQQ0ObnBIg+M0OLTBcRsc1uB4DQ5vcESD4zc4QYMTNjhRgxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNkiDizW4eINLNLhkg0s1uHQz/mHZ5P9THy3X4PINrtDgig2u1ODKDY5scJUGV21wtQZXb3CNBtdscK0G124Yvk6D6za4XoPrN7hBgxs2uFGDGze4SYObNrhZg5s3uEWDWza4VYNbN7hNg9s2OGgobt/gDg3u2OBODe7c4C4N7trgbg3u3uAeDe7Z4F4N7t3gPg3u2+B+De7f4AENHtjgQQ0e3OAhDR7a4GENHt7gEQ0e2eBRDR7d4DENHtugDR7X4PENntDgiQ2OavCkBk9u8JQGT23wtAZPb/CMBs9s8KwGz27wnAbPbfC8Bs9v8IIGL2zwogYvbvCSBkc3GDQYNhg1GDeYNJjOnZg1mDdYNFg2WDVYN9g02DbYNdg3ONDgpQ1e1uDlDV7R4JUNXtXg1Q1e0+C1DV7X4PUN3tDgjQ3e1ODNDd7S4K0N3tbg7Q3e0eCdDd7V4N1DBg36l/P3Nnhfg/c3+ECDDzb4UIMPN/hIg482+FiDjzf4RINPNvhUg083+EyDzzb4XIPPN/hCgy82+FKDLzf4SoOvNvhag683+EaDbzb4VoNvN/hOg+82+F6D7zf4QYMfNvhRgx83+EmDnzb4WYOfN/hFg182+FWDXzf4TYPfNvhdg983+EODPzb4U4M/N/hLg782+FuDvzf4R4N/NvhXg383+E+DYxoc+y8nWxzc4pAWx2lxaIvjtjisxfFaHN7iiBbHb3GCFidscaIWJ25xkhYnbXGyFidvcYoWp2xxqhanHm+Q07Q4bYvTtTh9izO0OGOLM7U4c4uztDhri7O1OHuLc7Q4Z4tztTh3i/O0OG+L87U4f4sLtLhgiwu1uHCLi7S4aIu0uFiLi7e4RItLtrhUi0u3uEyLy7a4XIvLt7hCiyu2uFKLK7c4ssVVWly1xdVaXL3FNVpcs8W1Wly7xXVaXLfF9Vpcv8UNWtywxY1a3LjFTVrctMXNWty8xS1a3LLFrVrcusVtWty2xe1a3L7FHVrcscWdWty5xV1a3LXF3VrcvcU9Wtyzxb1a3LvFfVrct8X9Wty/xQNaPLDFg1o8uMVDWjy0xcNaPLzFI1o8ssWjWjy6xWNaPLZFWzyuxeNbPKHFE1sc1eJJLZ7c4iktntriaS2e3uIZLZ7Z4lktnt3iOS2e2+J5LZ7f4gUtXtjiRS1e3OIlLY5uMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW9xoMVLW7ysxctbvKLFK1u8qsWrW7ymxWtbvK7F61u8ocUbW7ypxZtbvKXFW1u8rcXbW7yjxTtbvKvFu1u8p8V7W7yvxftbfKDFB1t8qMWHW3ykxUdbfKzFx1t8osUnW3yqxadbfKbFZ1t8rsXnW3yhxRdbfKnFl1t8pcVXW3ytxddbfKPFN1t8q8W3W3ynxXdbfK/F91v8oOVfWexHLX7c4ictftriZy1+3uIX7VC/bPGrFr9u8ZsWv23xuxa/b/GHFn9s8acWf27xlxZ/bfG3Fn9v8Y8W/2zxrxb/bvGfFse0OLbFQR0O7nBIh+N0OLTDcTsc1uF4HQ7vcESH43c4QYcTdjhRhxN3OEmHk3Y4WYeTdzhFh1N2OFWHU3c4TYfTdjhdh9N3OEOHM3Y4U4czdzhLh7N2OFuHs3c4R4dzdjhXh3N3OE+H83Y4X4fzd7hAhwt2uFCHC3e4SIeLdkiHi3W4eIdLdLhk9/899WU6XLbD5ToG/RvrCh2u2OFKHa7c4cgOV+lw1Q5X63D1DtfocM0O1+pw7Q7X6XDdDtfrcP0ON+hwww436nDjDjfpcNMON+tw8w636HDLDrfqcOsOt+lw2w6363D7DnfocMcOd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOj+rw6A6P6fDYDu3wuA6P7/CEDk/scFSHJ3V4coendHhqh6d1eHqHZ3R4ZodndXh2h+d0eG6H53V4focXdHhhhxd1eHGHl3Q4usOgw7DDqMO4w6TDtMOsw7zDosOyw6rDusOmw7bDrsO+w4EOL+3wsg4v7/CKDq/s8KoOr+7wmg6v7fC6Dq/v8IYOb+zwpg5v7vCWDm/t8LYOb+/wjg7v7Ab/393Vezq8t8P7Ory/wwc6fLDDhzp8uMNHOny0w8c6fLzDJzp8ssOnOny6w2c6fLbD5zp8vsMXOnyxw5c6fLnDVzp8tcPXOny9wzc6fLPDtzp8u8N3Ony3w/c6fL/DDzr8sMOPOvy4w086/LTDzzr8vMMvOvyyw686/LrDbzr8tsPvOvy+wx86/LHDnzr8ucNfOvy1w986/L3DPzr8s8O/Ovy7w386HNPh2A4H9Ti4xyE9jtPj0B7H7XFYj+P1OLzHET2O3+MEPU7Y40Q9TtzjJD1O2uNkPU7e4xQ9TtnjVD1O3eM0PU7b43Q9Tt/jDD3O2ONMPc7c4yz//f9sPc7e4xw9ztnjXD3O3eM8Pc7b43w9zt/jAj0u2ONCPS7c4yI9LtojPS7W4+I9LtHjkj0u1ePSPS7T47I9Ltfj8j2u0OOKPa7U48o9juxxlR5X7XG1HlfvcY0e1+xxrR7X7nGdHtftcb0e1+9xgx437HGjHjfucZMeN+1xsx4373GLHrfscaset+5xmx637XG7HrfvcYced+xxpx537nGXHnftcbced+9xjx737HGvHvfucZ8e9+1xvx737/GAHg/s8aAeD+7xkB4P7fGwHg/v8Ygej+zxqB6P7vGYHo/t0R6P6/H4Hk/o8cQeR/V4Uo8n93hKj6f2eFqPp/d4Ro9n9nhWj2f3eE6P5/Z4Xo/n93hBjxf2eFGPF/d4SY+jewx6DHuMeox7THpMe8x6zHsseix7rHqse2x6bHvseux7HOjx0v/ic3mPV/R4ZY9X9Xh1j9f0eG2P1/V4fY839Hhjjzf1eHOPt/R4a4+39Xh7j3f0eGePd/V4d4/39Hhvj/f1eH+PD/T4YI8P9fhwj4/0+GiPj/X4eI9P9Phkj0/1+HSPz/T4bI/P9fh8jy/0+GKPL/X4co+v9Phqj6/1+HqPb/T4Zo9v9fh2j+/0+G6P7/X4fo8f9Phhjx/1+HGPn/T4aY+f9fh5j1/0+GWPX/X4dY/f9Phtj9/1+H2PP/T4Y48/9fhzj7/0+GuPv/X4e49/9Phnj3/1+HeP//Q4psexPQ4awMEDOGQAxxnAoQM47gAOG8DxBnD4AI4YwPEHcIIBnHAAJxrAiQdwkgGcdAAnG8DJB3CKAZxyAKcawKkH/h9R7xz8eRI06/5mMbO2betZ27Zt234WM2vb1sfGd23btm17bux533Nu/9/dURmZEd0VlVU4dYDTBDhtgNMFOH2AMwQ4Y4AzBThzgLMEOGvw//rUj54jwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkQAJcNMDFAlw8wCUCxvgvrqUCXDrAZQJcNsDlAlw+wBUCXDHAlQJcOcBVAlw1wNUCXD3ANQJcM8C1Alw7wHUCXDfA9QJcP8ANAtwwwI0C3DjATQLcNMDNAtw8wC0C3DLArQLcOsBtAtw2wO0C3D7AHQLcMcCdAtw5wF0C3DXA3QLcPcA9AtwzwL0C3DvAfQLcN8D9Atw/wAMCPDDAgwI8OMBDAjw0wMMCPDzAIwI8MsCjAjw6wGMCPDZAAzwuwOMDPCHAEwMcGeCoAE8K8OQATwnw1ABPC/D0AM8I8MwAzwrw7ADPCfDcAM8L8PwALwjwwgAvCvDiAC8J8NIALwvw8gCvCPDKAK8K8OoArwnw2gCvC/D6AG8I8MYAbwrw5gBvCTAIMAwwCjAOMAkwDTALMA+wCLAMsAqwDrAJsA2wC7APcBDgrQHeFuDtAd4R4J0B3hXg3QHeE+C9Ad4X4P0BPhDggwE+FODDAT4S4KMBPhbg4wE+EeCTAT4V4NMBPhPgswE+F+DzAb4Q4IsBvhTgywG+EuCrAb4W4OsBvhHgmwG+FeDbAb4T4LsBvhfg+wF+EOCHAX4U4McBfhLgp0NDfhbg5wF+EeCXAX4V4NcBfhPgtwF+F+D3Af4Q4I8B/hTgzwH+EuCvAf4W4O8B/hHgnwH+FeDfAf4T4L//aS7AoRCHhThGiGOGOFaIY4c4PMQRIY4T4rghjhfi+CFOEOKEIU4U4sQhThLipCFOFuLkIU4R4pQhThXi1CFOE+K0IU4X4vQhzhDijCHOFOLMIc4S4qwhzhbi7CHOEbLnf+/2uUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCJMRFQ1wsxMVDXCLEJUNcKsSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzTE40I8PsQTQjwxxJEhjgrxpBBPDvGUEE8N8bQQTw/xjBDPDPGsEM8O8ZwQzw3xvBDPD/GCEC8M8aIQLw7xkhAvDfGyEC8P8YoQrwzxqhCvDvGaEK8N8boQrw/xhhBvDPGmEG8O8ZYQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xAHId4a4m0h3h7iHSHeGeJdId4d4j0h3hvifSHeH+IDIT4Y4kMhPhziIyE+GuJjIT4e4hMhPhniU+GQT4f4TIjPhvhciM+H+EKIL4b4Uogvh/hKiK+G+FqIr4f4RohvhvhWiG+H+E6I74b4Xojvh/hBiB+G+FGIH4f4SYifhvhZiJ+H+EWIX4b4VYhfh/hNiN+G+F2I34f4Q4g/hvhTiD+H+EuIv4b4W4i/h/hHiH+G+FeIf4f4T4j/hjg6xKEIh0U4RoRjRjhWhGNHODzCERGOE+G4EY4X4fgRThDhhBFOFOHEEU4S4aQRThbh5BFOEeGUEU4V4dQRThPhtBFOF+H0Ec4Q4YwRzhThzBHOEuGsEc4W4ewRzhHhnBHOFeHcEc4T4bwRzhfh/BEuEOGCES4U4cIRLhIhES4a4WIRLh7hEhEuGeFSES4d4TIRLhvhchEuH+EKEa4Y4UoRrhzhKhGuGuFqEa4e4RoRrhnhWhGuHeE6Ea4b4XoRrh/hBhFuGOFGEW4c4SYRbhrhZhFuHuEWEW4Z4VYRbh3hNhFuG+F2EW4f4Q4R7hjhThHuHOEuEe4a4W4R7h7hHqNHu2eEe0W4d4T7RLhvhPtFuH+EB0R4YIQHRXhwhIdEeGiEh0V4eIRHRHhkhEdFeHSEx0R4bIRGeFyEx0d4QoQnRjgywlERnhThyRGeEuGpEZ4W4ekRnhHhmRGeFeHZEZ4T4bkRnhfh+RFeEOGFEV4U4cURXhLhpRFeFuHlEV4R4ZURXhXh1RFeE+G1EV4X4fUR3hDhjRHeFOHNEd4SYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR/hIMJbI7wtwtsjvCPCOyO8K8K7I7wnwnsjvC/C+yN8IMIHI3wowocjfCTCRyN8LMLHI3wiwicjfCrCpyN8JsJnI3wuwucjfCHCFyN8KcKXI3wlwlcjfC3C1yN8I8I3I3wrwrcjfCfCd/9XY+9H+EGEH0b4UYQfR/hJhJ9G+FmEn0f4RYRfRvhVhF9H+E2E30b4XYTfR/hDhD9G+FOEP0f4S4S/RvhbhL9H+EeEf0b4V4R/R/hPhP9GODrCoRiHxThGjGPGOFaMY8c4PMYRMY4T47gxjhfj+DFOEOOEQ0ND/+2bOMZJYpw0ZtRkMU4e4xQxThnjVDFOHeM0McOG/if14vQjhpwhxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjXCRGYlw0xsViXDzGJWJcMsalYlw6xmViXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjw2RmM8Lsbj4/+Zl/DfGhnjqBhPivHkGE+J8dQYT4vx9BjPiPHMGM+K8ex4uOfEeG6M58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8V4dYzXxHhtjNfFeH2MN8R4Y4w3xXhzjLfEGPzHv6GhoSjGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsZBjLfGeFuMt8d4R4x3xnhXjHfHeE+M98Z4X4z3x/hAjA/G+FCMD8f4SIyPxvhYjI/H+ESMT8b4VIxPx/hMjM/G+FyMz8f4QowvxvhSjC/H+EqMr8b4Woyvx/hGjG/G+FaMb8f4TozvxvhejO/H+EGMH8b4UYwfx/hJjJ/G+FmMn8f4RYxfxvhVjF/H+E2M38b4XYzfx/hDjD/G+FOMP8f4S4y/xvhbjL/H+EeMf8b4V4x/x/hPjP/GOHosHEpwWIJjJDhmgmMlOHaCwxMckeA4CY6b4HgJjp/gBAlOmOBECU6c4CQJTprgZAlOnuAUCU6Z4FQJTp3gNAlOm+B0CU6f4AwJzpjgTAnOnOAsCc6a4GwJzp7gHAnOmeBcCc6d4DwJzpvgfAnOn+ACCS6Y4EIJLpzgIgmS4KIJLpbg4gnHLZHgkgkuleDSCS6T4LIJLpfg8gmukOCKCa6U4MoJrpLgqgmuluDqCa6R4JrJsKG1Elw7wXUSXDfB9RJcP8ENEtwwwY0S3DjBTRLcNMHNEtw8wS0S3DLBrRLcOsFtEtw2we0S3D7BHRLcMcGdEtw5wV0S3DXB3RLcPcE9Etwzwb0S3DvBfRLcN8H9Etw/wQMSPDDBgxI8OMFDEjw0wcMSPDzBIxI8MsGjEjw6wWMSPDZBEzwuweMTPCHBExMcmeCoBE9K8OQET0nw1ARPS/D0BM9I8MwEz0rw7ATPSfDcBM9L8PwEL0jwwgQvSvDiBC9J8NIEL0vw8gSvSPDKBK9K8OoEr0nw2gSvS/D6BG9I8MYEb0rw5gRvSTBIMEwwSjBOMEkY/b9tB80TLBIsE6wSrBNsEmwT7BLsExwkeGuCtyV4e4J3JHhngncleHeC9yR4b4L3JXh/gg8k+GCCDyX4cIKPJPhogo8l+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp+MPtFPE/wswc8T/CLBLxP8KsGvE/wmwW8T/C7B7xP8IcEfE/wpwZ8T/CXBXxP8LcHfE/wjwT8T/CvBvxP8J8F/Exyd4FCKw1IcI8UxUxwrxbFTHJ7iiBTHSXHcFMdLcfwUJ0hxwhQnSnHiFCdJcdIUJ0tx8hSnSHHKFKdKceoUp0lx2hSnS3H6FGdIccYUZ0px5hRnSXHWFGdLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0mRFBdNcbEUF09xiRSXTHGpFJdOcZkUl01xuRSXT3GFFFdMcaUUV05xlZRhI1NcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCrFo1M8JsVjUzTF41I8PsUTUjwxxf/iHpXiSSmenOIpKZ6a4mkpnp7iGSmemeJZKZ6d4jkpnpvieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSleneI1KV6b4nUpXp/iDSnemOJNKd6c7jvBLSkGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2KQ5SvDXF21K8PcU7UrwzxbtSvDvFe1K8N8X7Urw/xQdSfDDFh1J8OMVHUnw0xcdSfDzFJ1J8MsWnUnw6xWdSfDbF51J8PsUXUnwxxZdSfDnFV1J8NcXXUnw9xTdSfDPFt1J8O8V3Unw3xfdSfD/FD1L8MMWPUvw4xU9S/DTFz9KVhz5P8YsUv0zxqxS/TvGbFL9N8bsUv0/xhxR/TPGnFH9O8ZcUf03xtxR/T/GPFP9M8a8U/07xnxT/TXF0ikMZDstwjAzHzHCsDMfOcHiGIzIcJ8NxMxwvw/EznCDDCTOcKMOJM5wkw0kznCzDyTOcIsMpM5wqw6kznCbDaTOcLsPpM5whwxkznCnDmTOcJcNZM5wtw9kznCPDOTOcK8O5M5wnw3kznC/D+TNcIMMFM0YtlOHCGS6SIRkumuFiGS6e4RIZLpnhUhkuneEyGS6b4XIZLp/hChmumOFKGa6c4SoZrprhahmunuEaGa6Z4VoZrp3hOhmum+F6Ga6f4QYZbpgxbKMMN85wkww3zXCzDDfPcIsMt8xwqwy3znCbDLfNcLsMt89whwx3zHCnDHfOcJcMd81wtwx3z3CPDPfMcK8M985wnwz3zXC/DPfP8IAMD8zwoAwPzvCQDA/N8LAMD8/wiAyPzPCoDI/O8JgMj83QDI/L8PgMT8jwxAxHZjgqw5MyPDnDUzI8NcPTMjw9wzMyPDPDszI8O8NzMjw3w/MyPD/DCzK8MMOLMrw4w0syvDTDyzK8PMMrMrwyw6syvDrDazK8NsPrMrw+wxsyvDHDmzK8OcNbMgwyDDOMMowzTDJMM8wyzDMsMiwzrDKsM2wybDPsMuwzHGR4a4a3ZXh7hndkeGeGd2V4d4b3ZHhvhvdleH+GD2T4YIYPZfhwho9k+GiGj2X4eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYafZfh5hl9k+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZPhnhn9l+HeG/2T4b4ajMxzKcViOY+Q4Zo5j5Th2jsNzHJHjODmOm+N4OY6f4wQ5TpjjRDlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ50807NOR0OU6f4ww5zpjjTDnOnOMsOc6a42w5zp7jHDnOmeNcOc6d4zw5zpvjfDnOn+MCOS6Y40I5LpzjIjmS46I5Lpbj4jkukeOSOS6V49I5LpPjsjkul+PyOa6Q44o5rpTjyjmukuOqOa6W4+o5rpHjmjmulePaOa6T47o5rpfj+jlukOOGOW6U48Y5bpLjpjluluPmOW6R45Y5bpXj1jluk+O2OW6X4/Y57pDjjjnulOPOOe6S46457pbj7jnukeOeOe6V49457pPjvjnul+P+OR6Q44E5HpTjwTkekuOhOR6W4+E5HpHjkTkelePROR6T47E5muNxOR6f4wk5npjjyBxH5XhSjifneEqOp+Z4Wo6n53hGjmfmeFaOZ+d4To7n5nhejufneEGOF+Z4UY4X53hJjpfmeFmOl+d4RY5X5nhVjlfneE2O1+Z4XY7X53hDjjfmeFOON+d4S45BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY59joMcb83xthxvz/GOHO/M8a4c787xnhzvzfG+HO/P8YEcH8zxoRwfzvGRHB/N8bEcH8/xiRyfzPGpHJ/O8Zkcn83xuRyfz/GFHF/M8aUcX87xlRxfzfG1HF/P8Y0c38zxrRzfzkf5To7v5vheju/n+EGOH+b4UY4f5/hJjp/m+FmOn+f4RY5f5vhVjl/n+E2O3+b4XY7f5/hDjj/m+FOOP+f4S46/5vhbjr/n+EeOf+b4V45/5/hPjv/mODrHoQKHFThGgWMWOFaBYxc4vMARBY5T4LgFjlfg+AVOUOCEBU5U4MQFTlLgpAVOVuDkBU5R4JQFTlXg1AVOU+C0BU5X4PQFzlDgjAXOVODMBc5S4KwFzlbg7AXOUeCcBc5V4NwFzlPgvAXOV+D8BS5Q4IIFLlTgwgUuUiAFLlrgYqNHjz6xwCUKXLLApQpcusBlCly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Chw1NDS0X4H7F3hAgQcWeFCBBxd4SIGHFnhYgYcXeESBRxZ4VIFHF3hMgccWaIHHFXh8gScU+B9WI/87u8CTCjy5wFMKPLXA0wo8vcAzCjyzwLMKPLvAcwo8t8DzCjy/wAsKvLDAiwq8uMBLCry0wMsKvLzAKwq8ssCrCry6wGsKvLbA6wq8vsAbCryxGPH/avNuGRpmUGBYYFRgXGBSYFpgVmBeYFFgWWBVYF1gU2BbYFdgX+CgwFsLvK3A2wu8o8A7C7yrwLsLvKfAewu8r8D7C3ygwAcLfKjAhwt8pMBHC3yswMcLfKLAJwt8qsCnC3ymwGcLfK7A5wt8ocAXC3ypwJcLfKXAVwt8rcDXC3yjwDcLfKvAtwt8p8B3C3yvwPcL/KDADwv8qMCPC/ykwE8L/KzAzwv8osAvC/yqwK8L/KbAbwv8rsDvC/yhwB8L/KnAnwv8pcBfC/ytwN8L/KPAPwv8q8C/C/ynwH8LHF3gUInDShyjxDFLHKvEsUscXuKIEscpcdwSxytx/BInKHHCEicqceISJylx0hInK3HyEqcoccoSpypx6hKnKXHaEqcrcfoSZyj/f4/2zCXOUuKsJc5W4uwlzlHinCXOVeLcJc5T4rwlzlfi/CUuUOKCJS5U4sIlLlIiJS5a4mIlLl7iEiUuWeJSJS5d4jIlLlviciUuX+IKJa5Y4kolrlziKiWuWuJqJa5e4holrlniWiWuXeI6Ja5b4nolrl/iBiVuWOJGJW5c4iYlblriZiVuXuIWJW5Z4lYlbl3iNiVuW+J2JW5f4g4l7ljiTiXuXOIuJe5a4m4l7l7iHiXuWeJeJe5d4j4l7lvifiXuX+IBJR5Y4kElHlziISUeWuJhJR5e4hElHlniUSUeXeIxJR5boiUeV+LxJZ5Q4okljixxVIknlXhyiaeUeGqJp5V4eolnlHhmiWeVeHaJ55R4bonnlXh+iReUeGGJF5V4cYmXlHhpiZeVeHmJV5R4ZYlXlXh1ideUeG2J15V4fYk3lHhjiTeVeHOJt5QYlBiWGJUYl5iUmJaYlZiXWJRYlv+3xnukTYltiV2JfYmjR+OtJd5W4u0l3lHinSXeVeLdJd5T4r0l3lfi/SU+UOKDJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4p8l/lXi3yX+U+K//+FU4lCFwyoco8IxKxyrwrErHF7hiArHqXDcCsercPxquBNUOGGFE1U4cYWTVDhphZNVOHmFU1Q4ZYVTVTh1hdNUOG2F01U4fYUzVDhjhTNVOHOFs1Q4a4WzVTh7hXP87/1zVTh3hfNUOG+F81U4f4ULVLhghQtVuHCFi1RIhYtWuFiFi1e4RIVLVrhUhUtXuEyFy1a4XIXLV7hChStWuFKFK1e4SoWrVrhahatXuEaFa1a4VoVrV7hOhetWuF6F61e4QYUbVrhRhRtXuEmFm1a4WYWbV7hFhVtWuFWFW1e4TYXbVrhdhdtXuEOFO1a4U4U7V7hLhbtWuFuFu1e4R4V7VrhXhXtXuE+F+1a4X4X7V3hAhQdWeFCFB1d4SIWHVnhYhYdXeESFR1Z4VIVHV3hMhcdWaIXHVXh8hSdUeGKFIyscVeFJFZ5c4SkVnlrhaRWeXuEZFZ5Z4VkVnl3hORWeW+F5FZ5f4QUVXljhRRVeXOElFV5a4WUVQ/9x64oKr6zwqgqvrvCaCq+t8LoKr6/whgpvrPCmCm+u8JYKgwrDCqMK4wqTCtMKswrzCosKywqrCusKmwrbCrsK+woHFd5a4W0V3l7hHRXeWeFdFd5d4T0V3lvhfRXeX+EDFT5Y4UMVPlzhIxU+WuFjFT5e4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeFXFX5d4TcVflvhdxV+X+EPFf5Y4U8V/lzhLxX+WuFvFf5e4R8V/lnhXxX+XeE/Ff77n96HcKjGYTWOUeOYNY5V49g1Dq9xRI3j1DhujePVOH6NE9Q4YY0T1ThxjZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOGONM9U4c42z1DhrjbPVOHuNc9Q4Z41z1Th3jfPUOG+N89U4f40L1LhgjQvVuHCNi9RIjYvWuFiNi9e4RI1L1rhUjUvXuEyNy9a4XI3L17hCjSvWuFKNK9e4So2r1rhajavXuEaNa9a4Vo1r17hOjevWuF6N69e4QY0b1rhRjRvXuEmNm9a4WY2b17hFjVvWuFWNW9e4TY3b1rhdjdvXuEONO9a4U40717hLjbvWuFu9trvXuEeNe9a4V41717hPjfvWuF+N+9d4QI0H1nhQjQfXeEiNh9Z4WI2H13hEjUfWeFSNR9d4TI3H1miNx9V4fI0n1HhijSNrHFXjSTWeXOMpNZ5a42k1nl7jGTWeWeNZNZ5d4zk1nlvjeTWeX+MFNV5Y40U1XlzjJTVeWuNlNV5e4xU1XlnjVTVeXeM1NV5b43U1Xl/jDTXeWONNNd5c4y01BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY19jUOary1xttqvL3GO2q8s8a7ary7xntqvLfG+2q8v8YHanywxodqfLjGR2p8tMbHany8xidqfLLGp2p8usZnanx22mFD/2nn+RpfqPHFGl+q8eUaX6nx1Rpfq/H1Gt+o8c0a36rx7RrfqfHdGt+r8f0aP6jxwxo/qvHjGj+p8dMaP6vx8xq/qPHLGr+q8esav6nx2xq/q/H7Gn+o8ccaf6rx5xp/qfHXGn+r8fca/6jxzxr/qvHvGv+p8d8aR9c41OCwBsdocMwGx2pw7AaHNziiwXEaHLfB8Rocv8EJGpywwYkanLjBSRqctMHJGpy8wSkanLLBqRqcusFpGpy2wekanL7BGRqcscGZGpy5wVkanLXB2RqcvcE5GpyzwbkanLvBeRqct8H5Gpy/wQUaXLDBhRpcuMFFGqTBRRtcrMHFG1yiwSUbXKrBpRtcpsFlG1yuweUbXKHBFRtcqcGVG1zlPwyGDQ2t1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDdrgcQ0e3+AJDZ7Y4MgGRzV4UoMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6D5zZ4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYNXN3hNg9c2eF2D1zd4Q4M3NnhTgzc3DI0cGjJoMGwwajBuMGkwbTBrMG+waLBssGqwbrBpsG2wa7BvcNDgrQ3e1uDtDd7R4J0N3tXg3Q3e0+C9Dd7X4P0NPtDggw0+1ODDDT7S4KMNPtbg4w0+0eCTDT7V4NMNPtPgsw0+1+DzDb7Q4IsNvtTgyw2+0uCrDb7W4OsNvtHgmw2+1eDbDb7T4LsNvtfg+w1+0OCHDX7U4McNftLgpw1+1uDnDX7R4JcNftXg1w1+0+C3DX7X4PcN/tDgjw3+1ODPDf7S4K8N/tbg7w3+0eCfDf7V4N8N/tPgvw2ObnCoxWEtjtHimC2O1eLYLQ5v/48n+f/808dtcbwWx29xnBYnbHGiFiducZIWJ21xshYnb3GKFqdscaoWp25xmhanbXG6FqdvcYYWZ2xxphZnbnGWFmdtcbYWZ29xjhbnbHGuFuf+v6P6WpyvxflbXKDFBVtcqMWFW1ykRVpctMXFWly8xSVaXLLFpVpcusVlWly2xeVaXL7FFVpcscWVWly5xVVaXLXF1VpcvcU1WlyzxbVaXLvFdVpct8X1Wly/xQ1a3LDFjVrcuMVNWty0xc1a3LzFLVrcssWtWty6xW1a3LbF7VrcvsUdWtyxxZ1a3LnFXVrctcXdWty9xT1a3LPFEUNDQ3u3uE+L+7a4X4v7t3hAiwe2eFCLB7d4SDts6NAWD2vx8BaPaPHIFo9q8egWj2nx2BZt8bgWj2/xhBZPbHFki6PacYdOavHkFk9p8dQWT2vx9BbPaPHMFs9q8ewWz2nx3BbPa/H8Fi9o8cIWL2rx4hYvafHSFi9r8fIWr2jxyhavavHqFq9p8doWr2vx+hZvaPHGFm9q8eYWb2kxaDFsMWoxbjFpMW0xazFvsWixbLFqsW6xabFtsWuxb3HQ4q0t3tbi7S3e0eKdLd7V4t0t3tPivS3e1+L9LT7Q4oMtPtTiwy0+0uKjLT7W4uMtPtHiky0+1eLTLT7T4rMtPtfi8y2+0OKLLb7U4sstvtLiqy2+1uLrLb7R4pstvtXi2y2+0+K7Lb7X4vstftDihy1+1OLHLX7S4qctftbi5y1+0eKXLX7V4tctftPity1+1+L3Lf7Q4o8t/tTizy3+0uKvLf7W4u8t/tHiny3+1eLfLf7T4r8tjm5xqMNhHY7R4ZgdjtXh2B0O73BEh+N0OG6H43U4focTdDhhhxN1OHGHk3Q4aYeTdTh5h1N0OGWHU3U4dYfTdDhth9N1OH2HM3Q4Y4czdTuNPzSEs3Q4a4ezdTh7h3N0OGeHc3U4d4fzdDhvh/N1OH+HC3S4YIcLdbhwh4t0SIeLdrhYh4t3uESHS3a4VIdLd7hMh8t2uFyHy3e4QocrdrhShyt3uEqHq3a4Woerd7hGh2t2uFaHa3e4Tofrdrheh+t3uEGHG3a4UYcbd7hJh5t2uFmHm3e4RYdbdrhVh1t3uE2H23a4XYfbd7hDhzt2uFOHO3e4S4e7drhbh7t3uEeHe3a4V4d7d7hPh/t2uF+H+3d4QIcHdnhQhwd3eEiHh3Z4WIeHd3hEh0d2eFSHR3d4TIfHdmiHx3V4fIcndHhihyM7HNXhSR2e3OEpHZ7a4Wkdnt7hGR2e2eFZHZ7d4TkdntvheR2e3+EFHV7Y4UUdXtzhJR1e2uFlHV7e4RUdXtkx7D9eXd3hNR1e2+F1HV7f4Q0d3tjhTR3e3OEtHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYdDjq8tcPbOry9wzs6vLPDuzq8u8N7Ory3w/s6vL/DBzp8sMOHOny4w0c6fLTDxzp8vMMnOnyyw6c6fLrDZzp8tsPnOny+wxc6fLHDlzp8ucNXOny1w9c6fL3DNzp8s8O3Ony7w3c6fLfD9zp8v8MPOvyww486/LjDTzr8tMPPOvy8wy86/LLDrzr8usNvOvy2w+86/L7DHzr8scOfOvy5w186/LXD3zr8vcM/Ovyzw786/LvDfzr8t8PRHQ71OKzHMXocs8exehy7x+E9juhxnB7H7XG8HsfvcYIeJ+xxoh4n7nGSHiftcbIeJ+9xih6n7HGqHqfucZoep+1xuh6n73GGHmfscaYeZ+5xlh5n7XG2HmfvcY4e5+xxrh7n7nGe9XHeHufrcf4eF+hxwR4X6nHhHhfpkR4X7XGxHhfvcYkel+xxqR6X7nGZHpftcbkel+9xhR5X7HGlHlfucZUeV+1xtR5X73GNHtfsca0e1+5xnR7X7XG9HtfvcYMeN+xxox437nGTHjftcbMeN+9xix637HGrHrfucZset+1xux6373GHHnfscaced+5xlx537XG3HnfvcY8e9+xxrx737nGfHvftcb8e9+/xgB4P7PGgHg/u8ZAeD+3xsB4P7/GIHo/s8agej+7xmB6P7dEej+vx+B5P6PHEHkf2OKrHk3o8ucdTejy1x9N6PL3HM3o8s8ezejy7x3N6PLfH83o8v8cLerywx4t6vLjHS3q8tMfLery8xyt6vLLHq3q8usdrery2x+t6vL7HG3q8scebery5x1t6DHoMe4x6jHtMekx7zHrMeyx6LHuseqzHHhr6j8Ntj12PfY+DHm/t8bYeb+/xjh7v7PGuHu/u/8dbcG+P9/V4f48P9Phgjw/1+HCPj/T4aI+P9fh4j0/0+GSPT/X4dI/P9Phsj8/1+HyPL/T4Yo8v9fhyj6/0+GqPr/X4eo9v9Phmj2/1+HaP7/T4bo/v9fh+jx/0+GGPH/X4cY+f9Phpj5/1+HmPX/T4ZY9f9fh1j9/0+G2P3/X4fY8/9Phjjz/1+HOPv/T4a4+/9fh7j3/0+GePf/X4d4//9Phvj6N7HBrgsAGOMcAxBzjWAMce4PABjhjgOAMcd4DjDXD8AU4wwAkHONEAJx7gJAOcdICTDXDyAU4xwCkHONUApx7gNAOcdoDTDXD6Ac4wwBkHONMAZx7gLAOcdYCzDXD2Ac4xwDkHONcA5x7gPAOcd4DzDXD+AS4wwAUHuNAAFx7gIgNkgIsOcLEBLj7AJQa45OD/o+mc4sc43rf9DdrUtm1dtW2bqW3zapuktu2mNtdGbdu2jbyf/N/+5myOdvbG7j67z96DywS4bIDLBbh8gCsEuGKAKwW4coCrBLhqgKsFuHqAawS4ZoBrBbh2gOsEuG6A6wW4foAbBLhhgBsFuHGAmwS4aYCbBbj5KgMDY7HcMsCtAtw6wG0C3DbA7QLcPsAdAhwe4I4B7hTgzgHuEuCuAe4W4O4B7hHgngHuFeDeAe4T4L4B7hfg/gEeEOCBAR4U4MEBHhLgoQEeFuDhAR4R4JEBHhXg0QEeE+CxAR4XoAEeH+AJAZ4Y4IgARwY4KsCTAjw5wFMCPDXA0wI8PcAzAjwzwLMCPDvAcwI8N8Dzgv+ftTx2XBjgRQFeHOAlAV4a4GUBXh7gFQFeGeBVAV4d4DUBXhvgdQFeH+ANAd4Y4OgAbwrw5gBvCfDWAG8L8PYA7wjwzgDvCvDuAO8J8N4A7wvw/oAxfwX4YIAPBfhwgEGA4Vh+/1tfEmAaYPaf3ooAywCrAOsAmwDbALsA+wAfCfDRAB8L8PEAnwjwyQCfCvDpAJ8J8NkAnwvw+QBfCPDFAF8K8OUAXwnw1QBfC/D1AN8I8M0A3wrw7QDfCfDdAN8L8P3g/75hzjB4AD8K8OMAPwnw0wA/C/DzAL8I8MsAvwrw6wC/CfDbAL8L8PsAfwjwxwB/CvDnAH8J8NcAfwvw9wD/CPDPAMfi9HeA/wT4b4BjAhwIcVCIg0McEuLQEMcJcdwQh4U4XojjhzhBiBOGOFGIE4c4SYiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Qzgw3owhQ8ceb+YQZwlx1hBnC3H2EOcIcc4Q5wpx7hDnCXHeEOcLcf4QFwhxwRAXCnHhEBcJcdEQFwuREBcPcYkQlwxxqRCXDnGZEJcNcbkQlw9xhRBXDHGlEFcOcZUQVw1xtRBXD3GNENcMca0Q1w5xnRDXDXG9ENcPcYMQNwxxoxA3DnGTEDcNcbMQNw9xixC3DHGrELcOcZsQtw1xuxC3D3GHEIeHuGOIO4W4c4i7hLhriLuFuHuIe4S4Z4h7hbh3iPuEuG+I+4W4f4gHhHhgiAeFeHCIh4R4aIiHhXh4iEeEeGSIR4V4dIjHhHhsiMeFaIjHh3hCiCeGOCLEkSGOCvGkEE8O8ZQQTw3xtBBPD/GMEM8M8awQzw7xnBDPDfG8EM8P8YIQLwzxohAvDvGSEC8N8bIQLw/xihCvDPGqEK8O8ZoQrw3xuhCvD/GGEG8McXSIN4V4c4i3hHhriLeFeHuId4R4Z4h3hXh3iPeEeG+I94V4f4gPhPhgiA+F+HCIQYhhOGbY2PoyDjEJMQ0xCzEPsQixDLEKsQ6xCbENsQuxD/GREB8N8bEQHw/xiRCfDPGpEJ8O8ZkQnw3xuRCfD/GFEF8M8aUQXw7xlRBfDfG1EF8P8Y0Q3wzxrfEHBsbq/50Q3w3xvRDfD/GDED8M8aMQPw7xkxA/DfGzED8P8YsQvwzxqxC/DvGbEL8N8bsQvw/xhxB/DPGnEH8O8ZcQfw3xtxB/D/GPEP8M8a8Q/w7xnxD/DXFMiAMRDopwcIRDIhwa4TgRjhvhsAjHi3D8CCeIcMIIJ4pw4ggniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4nwywhni3D2COeIcM1Jca4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNcLEIiXDxCJeIcMkIl4pw6QiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXGLuGCNeKcO0I14lw3QjXi3D9CDeIcMMIN4pw4wg3iXDTCDeLcPMIt4hwywi3inDrCLeJcNsIt4tw+wh3iHB4hDtGuFOEO0e4S4S7RrhbhLtHuEeEe0a4V4R7R7hPhPtGuF+E+0d4QIQHRnhQhAdHeEiEh0Z4WISHR3hEhEdGeFSER0d4TITHRnhchEZ4fIQnRHhihCMiHBnhqAhPivDkCE+J8NQIT4vw9AjPiPDMCM+K8OwIz4nw3AjPi/D8CC+I8MIILxqrlwG8JMJLI7wswssjvCLCKyO8KsKrI7wmwmsjvC7C6yO8IcIbIxwd4U0R3hzhLRHeGuFtEd4e4R0R3hnhXRHeHeE9Ed4b4X0R3h/hAxE+GOFDET4cYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR/hIxE+GuFjET4e4RMRPhnhUxE+HeEzET4b4XMRPh/hCxG+GOFLEb4c4SsRvhrhaxG+HuEbEb4Z4VsRvh3hOxG+G+F7Eb4f4QcRfhjhR2N9NjAw8EmEn0b4WYSfRwz+4j+vfBXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxGOiXAgxkExDo5xSIxDYxwnxnFjHBbjeDGOH+MEMU4Y40QxThzjJDFOGuNkMU4e4xQxThnjVDFOHeM0MU4b43QxTh/jDDHOGONMMc4c4ywxzhrjbDHOHuMcMc4Z41wxzh3jPDHOG+N8Mc4f4wIxLhjjQjEuHOMiMS4a42IxEuPiMS4R45IxLhXj0jEuE+OyMS4X4/IxrhDjijGuFOPKMa4S46oxrhbj6jGuEeOaMa4V49oxrhPjujGuF+P6MW4Q44YxbhTjxjFuEuOmMW4W4+YxbhHjljFuFePWMW4T47Yxbhfj9jHuEOPwGHeMcacYd45xlxh3jXG3GHePcY8Y94xxrxj3jnGfGPeNcb8Y94/xgBgPjPGgGA+O8ZAYD43xsBgPH1vYxnhkjEfFeHSMx8R4bIzHxWiMx8d4QownxjgixpExjorxpBhPjvGUGE+N8bQYT4/xjBjPjPGsGM+O8ZwYz43xvBjPj/GCGC+M8aIYL47xkhgvjfGyGC+P8YoYr4zxqhivjvGaGK+NGX5djNfHeEOMN8Y4OsabYrw5xltivDXG22K8PcY7YrwzxrtivDvGe2K8N8b7Yrw/ZmBg0IAPxvhQjA/HGMQYxhjFGMeYxJjGmMWYx1jEWMZYxVjH2MTYxtjF2Mf4SIyPxvhYjI/H+ESMT8b4VIxPx/hMjM/G+FyMz8f4QowvxvhSjC/H+EqMr8b4Woyvx/hGjG/G+FaMb8f4TozvxvhejO/H+EGMH8b4UYwfx/hJjJ/G+FmMn8f4RYxfxvhVjF/H+E2M38b4XYzfx/hDjD/G+FOMP8f4S4y/xvhbjL/H+EeMf8b4V4x/x/hPjP/GOCbGgQQHJTg4wSEJw8bOx0lw3ASHJTheguMnOEGCEyY4UYITJzhJgpMmOFmCkyc4RYJTJjhVglMnOE2C0yY4XYLTJzhDgjMmOFOCMyc4S4KzJjhbgrMnOEeCcyY4V4JzJzhPgvMmOF+C8ye4QIILJrhQggsnuEiCiya4WIIkuHiCSyS4ZIJLJbh0gsskuGyCyyW4fIIrJLhigisluHKCqyS4aoKrJbh6gmskuGaCayW4doLrJLhugusluH6CGyS4YYIbJbhxgpskuGmCmyW4eYJbJLhlglsluHWC2yS4bYLbJbh9gjskODzBHRPcKcGdE9wlwV0T3C3B3RPcI8E9E9wrwb0T3CfBfRPcL8H9EzwgwQMTPCjBgxM8JMFDEzwswcMTPCLBIxM8KsGjEzwmwWMTPC5BEzw+wRMSPDHBEQmOTHBUgiclePL/OrMTPC3B0xM8I8EzEzwrwbMTPCfBcxM8L8HzE7wgwQsTvCjBixO8JMFLE7wswcsTvCLBKxO8KsGrE7wmwWsTvC7B6xO8IcEbExyd4E0J3pzgLQnemuBtCd6e4B0J3pngXQneneA9Cd6b4H0J3p/gAwk+mOBDCT6cYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/gIwk+muBjCT6e4BMJPpngUwk+neAzCT6b4HMJPp/gCwm+mOBLCb6c4CsJvprgawm+nuAbCb6Z4FsJvp3gOwm+m+B7Cb6f4AcJfpjgRwl+nOAnCX6a4GcJfp7gFwl+meBXCX6d4DcJfpvgdwl+n+APCf6Y4E8J/pzgLwn+muBvCf6e4B8J/pngXwn+neA/Cf6b4JgEB1IclOLgFIekODTFcVIcN8VhKY6X4vgpTpDihClOlOLEKU6S4qQpTpbi5ClOkeKUKU6V4tQpTpPitClOl+L0Kc6Q4owpzpTizCnOkuKsKc6W4uwpY+9czpniXCnOneI8Kc6b4nwpzp/iAikumOJCKS6c4iIpLpriYimS4uIpLpHikikuleLSKS6T4rIpLpfi8imukOKKKa6U4soprpLiqimuluLqKa6R4poprpXi2imuk+K6Ka6X4vopbpDihilulOLGKW6S4qYpbpbi5ilukeKWKW6V4tYpbpPitilul+L2Ke6Q4vAUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOcZ90iPumuF+K+6d4QIoHpnhQigeneEiKh6Z4WIqHp3hEikemeFSKR6d4TIrHpnhciqZ4fIonpHhiiiNSHJniqBRPSvHkFE9J8dQUT0vx9BTPSPHMFM9K8ewUz0nx3BTPS/H8FC9I8cIUL0rx4hQvSfHSFC9L8fIUr0jxyhSvSvHqFK9J8doUr0vx+hRvSPHGFEeneFOKN6d4S4q3pnhbireneEeKd6Z4V4p3p3hPivemeF+K96f4QIoPpvhQig+nGKQYpuP/3/9EcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYqPpPhoio+l+HiKT6T4ZIpPpfh0is+k+GyKz6X4fIovpPhiii+l+HKKr6T4aoqvpfh6im+k+GaKb6X4dorvpPhuiu+l+H6KH6T4YYofpfhxip+k+GmKn6X4eYpfpPhlil+l+HWK36T4bYrfpfj9WJ/9d9n+KcWfU/wlxV9T/C3F31P8I8U/U/wrxb9T/CfFf1Mck+JAhoMyHJzhkAyHZjhOhuNmOCzD8TIcP8MJMpwww4kynDjDSTKcNMPJMpw8wykynDLDqTKcOsNpMpw2w+kynD7DGTKcMcOZMpw5w1kynDXD2TJ8LMM5Mpwzw7kynDvDeTKcN8P5Mpw/wwUyXDDDhTJcOMNFMlw0w8UyJMPFM1wiwyUzXCrDpTNcJsNlM1wuw+UzXCHDFTNcKcOVM1wlw1UzXC3D1TNcI5vs/zSzVoZrZ7hOhutmuF6G62e4QYYbZrhRhhtnuEmGm2a4WYabZ7hFhltmuFWGW2e4TYbbZrhdhttnuEOGwzPcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMND/nsJP5bDwzM8IsMjMzwqw6MzBh2T4bEZHpehGR6f4QkZnpjhiAxHZjgqw5MyPDnDUzI8NcPTMjw9wzMyPDPDszI8O8NzMjw3w/MyPD/DCzK8MMOLMrw4w0syvDTDyzK8PMMrMrwyw6uygZFXZ3hNhtdmeF2G12d4Q4Y3Zjg6w5syvDnDWzK8NcPbMrw9wzsyvDPDuzK8O8N7Mrw3w/vG4jYw4r/kaHwow4ezQUPHchhmGGUYZ5hkmGaYZZhnWGRYZlhlWGfYZNhm2GXYZ/hIho/+p8vHM3wiwyczfCrDpzN8JsNnM3wuw+czfCHDFzN8KcOXM3wlw1czfC3D1zN8I8M3M3wrw7czfCfDdzN8L8P3M/wgww8z/CjDjzP8JMNPM/wsw88z/CLDLzP8KsOvM/wmw28z/C7D7zP8IcMfM/wpw58z/CXDXzP8LcPfM/wjwz8z/CvDvzP8J8N/MxyT4UCOg3IcnOOQHIfmOE6O4+Y4LMfxchw/xwlynDDHiXKcOMdJcpw0Z8hkOU6e4xQ5TpnjVDlOneM0OU6b43Q5Tp/jDDnOmONMOc6c4yw5zprjbDnOnuMcOc6Z41w5zp3jPDnOm+N8Oc6f4wI5LpjjQjkunOMiOS6a42I5kuPiOS6R45I5LpXj0jkuk+OyOS6X4/I5rpDjijmulOPKOa6S46o5rpbj6jmukeOaOa6V49o5rpPjujmul+P6OW6Q44Y5bpTjxjlukuOmOW6W4+Y5bpHjljlulePWOW6T47Y5bpfj9jnukOPwHHfMcaccd85xlxx3zXG3HHfPcY8c98xxrxz3znGfHPfNcb8c98/xgBwPzPGgHA/O8ZAcD83xsBwPz/GIHI/M8agcj87xmByPzfG4HM3x+BxPyPHEHEfkODLHUTmelOPJOZ6S46k5npbj6TmekeOZOZ6V49k5npPjuTme959eLsjxwhwvyvHiHC/J8dIcL8vx8hyvyPHKHK/K8eocr8nx2hyvy/H6HG/I8cYcR+d4U443jzMwMFaTt+Z4W46353hHjnfmeFeOd+d4T4735nhfjvfn+ECOD+b4UI4P5xjkGOYY5RjnmOSY5pjlmOdY5FjmWOVY59jk2ObY5djn+EiOj+b4WI6P5/hEjk/m+FSOT+f4TI7P5vhcjs/n+EKOL+b4Uo4v5/hKjq/m+FqOr+f4Ro5v5vhWjm/n+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY6f5vhZjp/n+EWOX+b4VY5f5/hNjt/m+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjn/m+FeOf+f4T47/5jgmx4ECBxU4uMAhBQ4tcJwCxy1wWIHjFTj+f/MJC5yowIkLnKTASQucrMDJC5yiwCkLnKrAqQucpsBpC5yuwOkLnKHAGQucqcCZC5ylwFkLnK3A2Quco8A5C5yrwLkLnKfAeQucr8D5C1ygwAULXKjAhQtcpMBFC1ysQApcvMAlClyywKUKXLrAZQpctsDlCly+wBWK/6sz/q+neeUCVylw1QJXK3D1AtcocM0C1ypw7QLXKXDdAtcrcP0CNyhwwwI3KnDjAjcpcNMCNytw8wK3KHDLArcqcOsCtylw2wK3K3D7AncocHiBO240MDAW950L3KXAXQvcrcDdC9yjwD0L3KvAvQvcp8B9C9yvwP0LPKDAAws8qMCDCzykwEMLPKzAwws8osAjCzyqwKMLPKbAYws8rkALPL7AEwo8scARBY4scFSBJxV4coGnFHhqgacVeHqBZxR4ZoFnFXh2gecUeG6B5xV4foEXFHhhgRcVeHGBlxR4aYGXFXh5gVcUeGWBVxV4dYHXFHhtgdcVeH2BNxR4Y4GjC7ypwJsLvKXAWwu8rcDbC7yjwDsLvKvAuwu8p8B7C7yvwPsLfKDABwt8qMCHCwwKDP8jeizOSYFpgVmBeYFFgWWBVYF1gU2BbYFdgX2BjxT4aIGPFfh4gU8U+GSBTxX4dIHPFPhsgc8V+HyBLxT4YoEvFfhyga8UQ3y1wNcKfL3ANwp8s8C3Cny7wHcKfLfA9wp8v8APCvywwI8K/LjATwr8tMDPCvy8wC8K/LLArwr8usBvCvy2wO8K/L7AHwr8scCfCvy5wF8K/LXA3wr8vcA/CvyzwL8K/LvAfwr8t8AxBQ6UOKjEwSUOKXFoieOUOG6Jw0ocr8TxS5ygxAlLnKjEiUucpMRJS5ysxMlLnKLEKUucqsSpS5ymxGlLnK7E6UucocQZS5ypxJlLnKXEWUucrcRdSpyjxDlLnKvEuUucp8R5S5yvxPlLXKDEBUtcqMSFS1ykHPZ/z+qLlUiJi5e4RIlLlrhUiUuXuEyJy5a4XInLl7hCiSuWuFKJK5e4SomrlrhaiauXuEaJa5a4Volrl7hOieuWuF6J65e4QYkblrhRiRuXuEmJm5a4WYmbl7hFiVuWA4P/l2WxTYnblrhdiduXuEOJw0vcscSdStz5v3PftcTdSty9xD1K3LPEvUrcu8R9Sty3xP1K3L/EA0o8sMSDxgwZGMvdISUeWuJhJR5e4hElHlniUSUeXeIxJR5b4nElWuLxJZ5Q4okljihxZImjSjypxJNLPKXEU0s8rcTTSzyjxDNLPKvEs0s8p8RzSzyvxPNLvKDEC0u8qMSLS7ykxEtLvKzEy0u8osQrS7yqxKtLvKbEa0u8rsTrS7yhxBtLHF3iTSXeXOItJd5a4m0l3l7iHSXeWeJdJd5d4j0l/3O395f4QIkPlvhQiQ+XGJQYlhiVGJeYlJiWmJWYl1iUWJZYlViX2JTYltiV2Jf4SImPlvhYiY+X+ESJT5b4VIlPl/hMic+W+FyJz5f4QokvlvhSiS+X+EqJr5b4Womvl/hGiW+W+FaJb5f4Tonvlvheie+X+EGJH5b4UYkfl/hJiZ+W+FmJn5f4RYlflvhViV+X+E2J35b4XYnfl/hDiT+W+FOJP5f4S4m/lvhbib+X+EeJf5b4V4l/l/hPif+WOKbEgQoHVTi4wiEVDq1wnArHrXBYheNVOH6FE1Q4YYUTVThxhZNUOGmFk1U4eYVTVDhlhVNVOHWF01Q4bYXTVTh9hTNUOGOFM1U4c4WzVDhrhbNVOHuFc1Q4Z4VzVTh3hfNUOG+F81U4f4ULVLhghQtVuHCFi1S4aIWLVUiFi1e4RIVLVrhUhUtXuEyFy1a4XIXLV7hChStWuFKFK1e4SoWrVrhahatXuEaFa1a4VoVrV7hOhetWuF6F61e4QYUbVrhRhRtXuEmFm1a4WYWbV7hFhVtWuNVY/Mb6v8JtK9yuwu0r3KHC4RXuWOFOFe5c4S4V7lrhbhXuXuEeFe5Z4V4V7l3hPhXuW+F+Fe5f4QEVHljhQRUeXOEhFR5a4WEVHl7hERUeWeFRFR5d4TEVHlvhcRVa4fEVnlDhiRWOqHBkhaMqPKnCkys8pcJTKzytwtMrPKPCM//ntgrPqfDcCs+r8PwKL6jwwgovqvDiCi+p8NIKL6vw8gqvqPDKCq+q8OoKr6nw2gqvq/D6Cm+o8MYKR1d4U4U3V3hLhbdWeFuFt1d4R4V3VnhXhXdXeE+F91Z4X4X3V/hAhQ9W+FCFD1cYVBhWGFUYV5hUmFaYVZhXWFRYVlhVWFfYVNhW2FXYV/hIhY9W+FiFj1f4RIVPVvhUhU9X+EyFz1ZbPvBchc9X+EKFL1b4UoUvV/hKha9W+FqFr1f4RoVvVvhWhW9X+E6F71b4XoXvV/hBhR9W+FGFH1f4SYWfVvhZhZ9X+EWFX1b4VYVfV/hNhd9W+F2F31f4Q4U/VvhThT9X+EuFv1b4W4W/V/hHhX9W+FeFf1f4T4X/VjimwoEaB9U4uMYhNQ6tcZwax61xWI3j1Th+jRPUOGGNE9U4cY2T1DhpjZPVOHmNU9Q4ZY1T1Th1jdPUOG2N09U4fY0z1DhjjTPVOHONs9Q4a42z1Th7jXPUOGeNc9U4d43z1DhvjfPVOH+NC9S4YI0L1bhwjYvUuGiNi9VIjYvXuESNS9a4VI1L17hMjcvWuFyNy9e4Qo0r1rhSjSvXuEqNq9a4Wo2r17hGjWvWuFaNa9e4To3r1rhejevXuEGNG9a4UY0b17hJjZvWuFmNm9e4RY1b1rhVjVvXuE2N29a4XY3b17hDjcNr3LHGnWrcucZdaty1xt1q3L3GPWrcs8a9aty7xn1q3LfG/Wrcv8YDxsUDazyoxoNrPKTGQ2s8rMbDazyixiNrPKrGo2s8psZjazyuRms8vsYTajyxxhE1jqxxVI0n1XhyjafUeGqNp9V4eo1n1HhmjWfVeHaN59R4bo3n1Xh+jRfUeGGNF9V4cY2X1HhpjZfVeHmNV9R4ZY1X1Xh1jdfUeG2N19V4fY031HhjjaNrvKnGm2u8pcZba7ytxttrvKPGO2u8q8a7a7ynxntrvK/G+2t8oMYHa3yoxodrDGoMa4xqjGtMakxrzGrMayxqLGusaqxrbGpsa+xq7Gt8pMZHa3ysxsdrfKLGJ2t8qsana3ymxmdrfK7G52t8ocYXa3ypxpdrfKXGV2t8rcbXa3yjxjdrfKvGt2t8p8Z3a3yvxvdr/KDGD2v8qMaPa/ykxk9r/KzGz2v8osYva/yqxq9r/KbGb2v8rsbva/yhxh9r/KnGn2v8pcZfa/ytxt9r/KPGP2v8q8a/a/ynxn9rHFPjQIODGhzc4JAGhzY4ToPjNjiswfEaHL/BCRqcsMGJGpy4wUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLjBRRpctMHFGqTBxRtcosElG1yqwaUbXKZh6LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4PAGd2xwpwZ3bnCXBndtcLcGd29wjwb3bHCvBvducJ8G921wvwb3b/CABg9s8KAGD27wkAYPbfCwBg9v8IgGj2zwqAaPbvCYBo9t8LgGbfD4Bk9o8MQGRzQ4ssFRDZ7U4MkNntLgqQ2e1uDpDZ7R4JkNntXg2Q2e0+C5DZ7X4PkNXtDghQ1e1ODFDV7S4KUNXtbg5Q1e0eCVDV7V4NUNw65p8NoGr2vw+gZvaPDGBkc3eFODNzd4S4O3Nnhbg7c3eMdYrgZwbE11d4P3NHhvg/c1eH+DDzT4YIMPNfhwg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32DjzT4aIOPNfh4g080+GSDTzX4dIPPNPhsg881+HyDLzT4YoMvNfhyg680+GqDrzX4eoNvNPhmg281+HaD7zT4boPvNfh+gx80+GGDHzX4cYOfNPhpg581+HmDXzT4ZYNfNfh1g980+G2D3zX4fYM/NPhjgz81+HODvzT4a4O/Nfh7g380+GeDfzX4d4P/NPhvg2MaHGhxUIuDWxzS4tAWx2lx3BaHtThei+O3OEGLE7Y4UYsTtzhJi5O2OFmLk7c4RYtTtjhVi1O3OE2L07Y4XYvTtzhDizO2OFOLM7c4S4uztjhbi7O3OEeLc7Y4V4tztzhPi/O2OF+L87e4QIsLtrhQiwu3uEiLi7a4WIu0uHiLS7S4ZItLtbh0i8u0uGyLy7W4fIsrtLhiiyv9b0eiFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxaHt7hjizu1uHOLu7S4a4u7tbh7i3u0uGeLe7W4d4v7tLhvi/u1uH+LB7R4YIsHtXhwi4e0eGiLh7V4eItHtHhki0e1eHSLx7R4bIvHtWiLx7d4QosntjiixZEtjmrxpBZPbvGUFk9t8bQWT2/xjBbPbPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbhl1TYvXtnhdi9e3eEOLN7Y4usWbWry5xVtavLXF21q8vcU7WryzxbtavLvFe1q8t8X7Wry/xQdafLDFh1p8uMWgxbDFqMW4xaTFtMWsxbzFosWyxarFusWmxbbFrsW+xUdafLTFx1p8vMUnWnyyxadafLrFZ1p8tsXnWny+xRdafLHFl1p8ucVXWny1xddafL3FN1p8s8W3Wny7xXdafLfF91p8v8UPWvywxY9a/LjFT1r8tMXPWvy8xS9a/LLFr1r8usVvWvy2xe9a/L7FH1r8scWfWvy5xV9a/LXF31r8vcU/Wvyzxb9a/LvFf1r8t8UxLQ50OKjDwR0O6XBoh+N0OG6Hwzocr8PxO5ygwwk7nKjDiTucpMNJO5ysw8k7nKLDKTucqsOpO5ymw2k7nK7D6TucocMZO5ypw5k7nKXDWTucrcPZO5yjwzk7nKvDuTucp8N5O5yvw/k7XKDDBTtcqMOFO1ykw0U7XKxDOly8wyU6XLLDpTpcusNlOly2w+U6XL7DFbr/n6kxdqzcDQys0uGqHa7W4eodrtHhmh2u1eHaHa7T4bodrtfh+h1u0OGGHW7U4cYdbtLhph1u1uHmHW7R4ZYdbtXh1h1u0+G2HW7X4fYd7tDh8A537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA7t8PgOT+jwxA5HdDiyw1EdntThyR2e0uGpHZ7W4ekdntHhmR2e1eHZHZ7T4bkdntfh+R1e0OGFHV7U4cUdXtLhpR1e1uHlHV7R4ZUdXtXh1R1e0+G1HV7X4fUd3tDhjasMOLrjf2kv3tLhrR3e1uHtHd7R4Z0d3tXh3R3e0+G9Hd7X4f0dPtDhgx0+1OHDHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYdPtLhox0+1uHjHT7R4ZMdPtXh0x0+0+GzHT7X4fMdvtDhix2+1OHLHb7S4asdvtbh6x2+0eGbHb7V4dsdvtPhux2+1+H7HX7Q4YcdftThxx1+0uGnHX7W4ecdftHhlx1+1eHXHX7T4bcdftfh9x3+0OGPHf7U4c8d/tLhrx3+1uHvHf7R4Z8d/tXh3x3+0+G/HY6edGBgoMdBPQ7ucUiPQ3scp8dxexzW43g9jt/jBD1O2ONEPU7c4yQ9TtrjZD1O3uMUPU7Z41Q9Tt3jND1O2+N0PU7f4ww9ztjjTD3O3OMsPc7a42w9zt7jHD3O2eNcPc7d4zw9ztvjfD3O3+MCPS7Y40I9LtzjIj0u2uNiPdLj4j0u0eOSPS7V49I9LtPjsj0u1+PyPa7Q44o9rtTjyj2u0uOqPa7W4+o9rtHjmj2u1ePaPa7T47o9rtfj+j1u0OOGPW7U48Y9btLjpj1u1uPmPW7R45Y9btXj1j1u0+O2PW7X4/Y97tDj8B537HGnHnfucZced+1xtx5373GPHvfsca8e9+5xnx737XG/obh/jwf0eGCPB/V4cI+H9HjoeP+fx8N7PKLHI3s8qsejezymx2N7PK5Hezy+xxN6PLHHET2O7HFUjyf1eHKPp/R4ao+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPo3u8qcebe7ylx1t7vK3H23u8o8c7e7yrx7t7vKfHe3u8r8f7e3ygxwd7fKjHh3v8fwEAAP//PHDrHQ==") creat(&(0x7f0000002780)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_mount_image$udf(&(0x7f0000000380), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="005bdefa8134"], 0x1, 0x5bd, &(0x7f0000000680)="$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") r4 = open(&(0x7f0000000080)='./bus\x00', 0x62142, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r4, &(0x7f0000000300)='_', 0x1, 0x10000000005) r5 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) sendfile(r5, r5, 0x0, 0x100000000) 1.570753546s ago: executing program 5 (id=1131): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x20000000005) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) syz_emit_ethernet(0xa2, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaa10aaaaaaaaaaaa86dc6092c01f006c2f00fe8000000000000000000000000000bb00000000000000000000ffff000000002420880b000000000000002113565ccefe5d31f29e248840f7360be63033d565b8cfe3af99d096c6022c5d97cf495bfa81adb370bf61883a57f2000086dd080088be00000004100000000100000000000000080022eb10000000200000000200000000000000000000000800655800000000"], 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e06"], 0xa) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x80, &(0x7f0000000480)=0xfffffffc, 0x0, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) keyctl$join(0x1, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x6, 0x8b14c6a5df82cbe, 0x0, {0x0, r7}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04060401"], 0x7) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000380)={'#! ', '', [{0x20, '^sz\xd1=\xc1\xe4\xe6\xfcf\xbf\x00\xcf\x03\x84\xd7\xb6\x9d\xa0\x13\x1bc\x1e<\x89\xb665->\xdb\x8eh2%$>\xce#w= \xb0\x89\xfe\xb6\x1e%\xcf*\xfd\xff\x03w\x1d\x17\x83>WW\xeby\xee<\x9b\x1f\x1a\xfb>@h\xb7u\xcd\xae\xc9\x8c\x892\xffZ\xa2o\xf4\xc6\x97s4,\xd1\xab|5\xd1\xcb1\xc9\xf76,\xc1\xf8\xba\xbf\x8e;\xb5\x9e\x81\x94\xd7E\xf2\x00\xad<\xb0c\x8eL\x8b\x9e\xb7\xfbh?\xbf\x98\xc1\xb2(\xd8\xb4\xd8\xad\x03\xba\xe1\x9b\x8a1j\x87\xafL\xfb\xe3\xba=/\xc0\xa0 i\xf5\xa5\xce\x10+\xd6\x0e\x01\b\x9e8\x8cAH\xcf}\x19\xf8\xeeo2p\xa1\xb6]\x10\xd4\t.U\x9e\xf9\bO]\xc1\xbeF4\x0e6.\x88fQ\xf1\x80\x99P\xdd\t=\xe8MS\xcb\x1b\x90\x99l\xe9\x94\xa3<\xea\x92\xe3'}]}, 0xe2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x9, &(0x7f0000000040), 0x4) mmap(&(0x7f000048a000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x9, &(0x7f0000000040), 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000280)=0x2400, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) 644.72883ms ago: executing program 0 (id=1132): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 626.663298ms ago: executing program 5 (id=1133): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a01faff5b6b4408070a64006e40010203030902240001a82300000904000002ca014d00090503034d00ff99090805848f"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="0100020000000207"], &(0x7f0000000240)={0x0, 0x3, 0xb8, @string={0xb8, 0x3, "760c5b673b18bf5c7fe424fcfd24dcda1b7f364c53ed5b93c88f5dc32be0daf166eb55aee700ec91844ae4621bb1d6e2588b88bcbd66463615c373e087b3dc6c70e7b10e3fbef615d66db0557187d078c1975c4b30f2249a8c9c7802f213bba9914869da0ab05d1fb72abebe32774f5365084b0e708f36ae582b971523d33d7d875d108303f32e0dab9343f3e5f56bb541057de06d105b46fa0e755510efff734c8559954d32bf171f397889d2a5bc58cb4d2ba3e286"}}, &(0x7f0000000680)=ANY=[@ANYBLOB="06220e00000077c6e0ee52265648b60ef4a68d77305ff010ebc06980cd582edcf653f598b7ffb4d9b4116e68ab02f186357f85ac1a446d8219fd4157f46dc4c6b5a24c050203e822f4eef685ae85dd3d14431afb8b1d"], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xfe8}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x60, 0x14, 0xa9, "53bf39c1759f6dab0ba90f81b3491f24899a1f27eae52e9dadfcf59598dc91c057f72a621616c30f5912bcdf142a3e70b243d666c5a0f94ab2f3b2f657b1d17dd369d750a74cbc5a7bd33caebbc06e8ea077d90d2ada64bb19614b64ab103944a59dcdb565318e4d212dea3733f5018b0bedf55a5ebd4f9ab519317fe8779249fe8005dfb83106929fb33ede38c842a9809220aea817bf78d3e77a63a93df3bcfd2264f9c0dd799abb"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x1, 0x58, "b39b38bcd60ff70a086b56f1a96c01acbed1a43b409f25e22add87e4b3d537a145469963e845525db474ca1282b8644f878c98aceeb14f53788d11f00f4f14ed3292c0744329bce319d144b17c6df40574caceba19449389"}, &(0x7f0000000480)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000640)={0x14, &(0x7f0000000600)={0x20, 0x24, 0x2, {0x2, 0xc}}, &(0x7f0000000780)={0x0, 0x3, 0x72, @string={0x72, 0x3, "c46a31cdc2e587b3ebf66e405c51ecf59083b1d6dc789891a3490c4294d48b033eda2a9265e48913da85f36f1b22c1cf6fb6e6500f9b7ef1ea974358fdf4cfb9ce3f7c69cf1f12ef0eb3a76995d95bb5b1c458fd69c7c1c895e29b89ee2670534463a261924f4fb898f19d6f7757db53"}}}, &(0x7f00000009c0)={0x34, &(0x7f0000000bc0)={0x20, 0x6, 0xe9, "e20502058664d35aefefd1134858db492879e0de4313ba690514582fa259cf315c827d017a02dbd369a26d8a5499d8c6aaffa854d483591331b8b01c819e877f791a8f4c3769ced4504ad780157960bd8eac7370eec71e029aa1cea0a8034e953e6e27280ebd4d82f2afb7f9e017d68d1674850b5abbd55b00ab2fffc5bd30f806854a9245a4f4b6f7858a43a95b44efce32ea3c2fdb6c05cca22482dd233a8621a620e21da954e31bcfd708c1ec478ddc5957116504e52e3705e324703fa8e9800bbfc6272ff93db84e1f42dc68b2b7dd06791d11f496d283931101295a719d3c0505e1fcce973e71"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000cc0)={0x20, 0x0, 0x8c, {0x8a, "b7d3c24bef1cf9c5b75232deea65b54de8f0948d1352b02369417b5f170a46f98628b7bdb75b0e7c10bcc335f4241d184367678df6cea4432a1cd0291ae8dbd2d4fac5cb176593f5a646e4ca15f24dc06f0579f805aee7b240dbdc2643a649bfa2ecfe0ad3ecfc19799c7c3cfaeb650bde187306e4cd769cd386f8736a7ad4b38829e550d6bc7d23c4e8"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0xfb}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000900)={0x24, &(0x7f00000000c0)={0x0, 0x9, 0x2e, {0x2e, 0x22, "42660cf20a8f536497779a1f2b3c40f166172b368eac48c9ef4947bc13c832252920b8960f098432c4000999"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000740)={0x0, 0x22, 0x17, {[@global=@item_012={0x0, 0x1, 0x4}, @local=@item_4={0x3, 0x2, 0x4, "bcd17a98"}, @local=@item_4={0x3, 0x2, 0xb, "95e48993"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_4={0x3, 0x0, 0x0, "6bf4f5a6"}, @global=@item_4={0x3, 0x1, 0x8, "42fc9339"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x2ff}}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000940)={0x0, 0x18, 0x74, "df463f6f4602f2cda9c0ebd31c604a7629c5a19997d54193c00caeebfd16884d1f93c2ae5d94befdbf37f7c76870c856515541645429d89b9809cbd54664c09b35efa1d67653c1de54777fb75859d5793692f3035e2de189db6018de5ca334057c7e3de00803d189f624ae00cbe59af8d4da3bbf"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000a80)={0x20, 0x1, 0x9c, "28c8c262d050ab1396d86f08d239494f84f1800294352dd20fb7205f68931b1439d6faf719794375fa296aa857b3c244748d04f3118e517a38159a34a0307948ae2f1b116b68fa93674550715e8585c5c913e9e70d754c70ea0b5ee199c736bad5f60e710111e9400c71c039af6eb45c6d8aa3b5aaf9a6f23581cda512c5c494cabc19020d898bf58066252475ad4fe58d3f7d77656e647286a05565"}, &(0x7f0000000b40)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x200) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f00000000c0)={0x1, 0xffffffff, 0x7fffffff, 0x6, 0x0, 0x25a7}) syz_usb_connect(0x1, 0x63, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6a, 0xc1, 0x99, 0x8, 0x6f8, 0xb000, 0x2ad1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfa, 0x0, 0x1, 0xff, 0xc9, 0xbc, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x40, 0xc, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x4, 0x66, 0x7, "", 'T)'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x8, 0x9, "689a385c2ccc7036"}, @as_header={0x7, 0x24, 0x1, 0x2, 0xff, 0x4}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7ff, 0x0, 0x7, "d2c18606"}]}], [{{0x9, 0x5, 0x0, 0x3, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000921000000012208000905810300"/54], 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="f39561fc17b7f981"}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x68, 0x2}, @cond}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r6 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000005c0), 0x1, 0x0) ioctl$HIDIOCGRDESC(r6, 0x5452, &(0x7f00000000c0)={0x1, '\n'}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xb3, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000406b1d01014000010203010902"], &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="010f"], 0x1, [{0x0, 0x0}]}) write$char_usb(r1, &(0x7f0000000000)='8', 0x1) 434.845255ms ago: executing program 2 (id=1134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 96.419154ms ago: executing program 2 (id=1135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6", @ANYRES64], 0x398}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) unshare(0x62040200) socket$inet6(0xa, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x100, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x68, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x5, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4084}, 0x44800) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="2a003300d0d4fe00ffffffffffff080211000000505050505050"], 0x48}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x800, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x26}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000000) syz_emit_vhci(&(0x7f0000004180)=ANY=[@ANYBLOB="040e04006d"], 0x7) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="f3270000000000000000070000000c0002"], 0x20}}, 0x0) 65.955433ms ago: executing program 4 (id=1136): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x7}, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c92076bd0c0005f89b9dab448898021200000000"], 0x15) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="00080402c80002"], 0x7) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x60, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x1c) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB], 0x58) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1}}}, 0x4) r4 = syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000b5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = timerfd_create(0x9, 0x800) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r9, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='erspan0\x00'}) r10 = socket$inet(0x2, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x10, r4, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=0x0, @ANYRES16=r4, @ANYRES8=r10, @ANYRESHEX=r8, @ANYRESHEX=r2, @ANYRESOCT], 0xf) 10.892247ms ago: executing program 0 (id=1137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xffc1) 0s ago: executing program 3 (id=1138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) kernel console output (not intermixed with test programs): d pid=9223 comm="syz.2.831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff65dd75bd9 code=0x0 [ 448.906359][ T9224] netlink: 9 bytes leftover after parsing attributes in process `syz.2.831'. [ 448.926944][ T9224] gretap0: entered promiscuous mode [ 449.002589][ T9021] team0: Port device team_slave_1 added [ 449.025537][ T9228] netlink: 5 bytes leftover after parsing attributes in process `syz.2.831'. [ 449.044350][ T9228] 0XD: renamed from gretap0 [ 449.090349][ T9228] 0XD: left promiscuous mode [ 449.105222][ T9236] loop5: detected capacity change from 0 to 1024 [ 449.112203][ T9228] 0XD: entered allmulticast mode [ 449.140103][ T9228] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 449.158780][ T9239] loop4: detected capacity change from 0 to 256 [ 449.161180][ T9236] ext4: Unknown parameter 'obj_type' [ 449.227581][ T6074] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 449.276422][ T9239] FAT-fs (loop4): Directory bread(block 64) failed [ 449.313064][ T9239] FAT-fs (loop4): Directory bread(block 65) failed [ 449.340642][ T9239] FAT-fs (loop4): Directory bread(block 66) failed [ 449.370345][ T9239] FAT-fs (loop4): Directory bread(block 67) failed [ 449.386561][ T9239] FAT-fs (loop4): Directory bread(block 68) failed [ 449.394694][ T9239] FAT-fs (loop4): Directory bread(block 69) failed [ 449.407591][ T9239] FAT-fs (loop4): Directory bread(block 70) failed [ 449.438351][ T9239] FAT-fs (loop4): Directory bread(block 71) failed [ 449.469170][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.483938][ T9239] FAT-fs (loop4): Directory bread(block 72) failed [ 449.497339][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.537214][ T9239] FAT-fs (loop4): Directory bread(block 73) failed [ 449.637056][ T9021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.703157][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.724776][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.803112][ T29] audit: type=1800 audit(1720522269.732:562): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.834" name="file0" dev="loop4" ino=1048629 res=0 errno=0 [ 449.806281][ T9021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.905010][ T9255] Trying to write to read-only block-device loop4 [ 449.911486][ T9255] syz.4.834: attempt to access beyond end of device [ 449.911486][ T9255] loop4: rw=2049, sector=1160, nr_sectors = 8 limit=256 [ 450.141889][ T6513] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 450.156076][ T6513] FAT-fs (loop4): Filesystem has been set read-only [ 450.237035][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 450.305351][ T9021] hsr_slave_0: entered promiscuous mode [ 450.337785][ T9021] hsr_slave_1: entered promiscuous mode [ 451.166176][ T984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.606684][ T984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.775178][ T45] kernel write not supported for file /cpuinfo (pid: 45 comm: kworker/1:1) [ 451.978455][ T984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.064728][ T9295] netlink: 'syz.0.850': attribute type 2 has an invalid length. [ 452.327638][ T984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.573776][ T5163] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 452.584844][ T5108] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.598278][ T5108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.616157][ T5108] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.633492][ T5108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.645029][ T5108] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 452.652517][ T5108] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 452.753123][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.853'. [ 452.814632][ T5163] usb 1-1: unable to get BOS descriptor or descriptor too short [ 452.837074][ T5163] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 452.853978][ T5163] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 452.904064][ T5163] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 452.984214][ T5163] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 453.047800][ T5163] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 453.078114][ T5163] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 453.124861][ T5163] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 453.186535][ T5163] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 453.219351][ T5163] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 453.258288][ T5163] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 453.351361][ T5163] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 453.419544][ T5163] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 453.510204][ T5163] usb 1-1: string descriptor 0 read error: -22 [ 453.517072][ T5163] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 453.529826][ T5163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.601248][ T5163] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 453.854593][ T9304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.870287][ T9304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.096737][ T5096] kernel write not supported for file /cpuinfo (pid: 5096 comm: kworker/0:3) [ 454.144263][ T984] bridge_slave_1: left allmulticast mode [ 454.152352][ T984] bridge_slave_1: left promiscuous mode [ 454.162524][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.290979][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.330406][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.403076][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.419884][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.546460][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.567974][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.754356][ T5108] Bluetooth: hci5: command tx timeout [ 455.134620][ T5163] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 455.362003][ T5163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.398549][ T5163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.431432][ T5163] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 455.442743][ T5163] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.464629][ T5163] usb 6-1: config 0 descriptor?? [ 455.965326][ T5163] lenovo 0003:17EF:6067.000A: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.5-1/input0 [ 456.024585][ T984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.084696][ T984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.161460][ T984] bond0 (unregistering): Released all slaves [ 456.218247][ T9363] netlink: 'syz.2.871': attribute type 29 has an invalid length. [ 456.322937][ T5182] usb 6-1: USB disconnect, device number 8 [ 456.342912][ T9363] netlink: 'syz.2.871': attribute type 29 has an invalid length. [ 456.361997][ T9367] netlink: 'syz.2.871': attribute type 29 has an invalid length. [ 456.479294][ T9368] netlink: 'syz.2.871': attribute type 29 has an invalid length. [ 456.822640][ T9364] loop3: detected capacity change from 0 to 4096 [ 456.834977][ T5108] Bluetooth: hci5: command tx timeout [ 457.313979][ T9359] ntfs3: loop3: failed to convert "0000" to iso8859-3 [ 457.320889][ T9359] ntfs3: loop3: failed to convert name for inode 1e. [ 457.653273][ T984] hsr_slave_0: left promiscuous mode [ 457.710661][ T984] hsr_slave_1: left promiscuous mode [ 457.755279][ T9] usb 1-1: USB disconnect, device number 11 [ 457.786381][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.795847][ T984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.836349][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.854723][ T984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.975475][ T984] veth1_macvtap: left promiscuous mode [ 457.994416][ T984] veth0_macvtap: left promiscuous mode [ 458.000189][ T984] veth1_vlan: left promiscuous mode [ 458.024307][ T984] veth0_vlan: left promiscuous mode [ 458.031666][ T9373] loop5: detected capacity change from 0 to 40427 [ 458.063203][ T9373] F2FS-fs (loop5): invalid crc value [ 458.098232][ T9373] F2FS-fs (loop5): Found nat_bits in checkpoint [ 458.243740][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 458.304456][ T9373] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 458.447901][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.493876][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.513861][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.543810][ T9] usb 1-1: Product: syz [ 458.554193][ T9] usb 1-1: Manufacturer: syz [ 458.569848][ T9] usb 1-1: SerialNumber: syz [ 458.913912][ T5108] Bluetooth: hci5: command tx timeout [ 459.448100][ T6752] syz-executor: attempt to access beyond end of device [ 459.448100][ T6752] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 459.485040][ T6752] syz-executor: attempt to access beyond end of device [ 459.485040][ T6752] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 459.675651][ T984] team0 (unregistering): Port device team_slave_1 removed [ 459.685169][ T9] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 459.691626][ T9] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 459.727866][ T9] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 459.799521][ T984] team0 (unregistering): Port device team_slave_0 removed [ 459.813858][ T1102] kworker/u8:9: attempt to access beyond end of device [ 459.813858][ T1102] loop5: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 459.871888][ T1102] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 459.887192][ T9] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 459.920438][ T1102] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 459.927873][ T1102] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 460.748905][ T9021] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 460.786658][ T9021] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 460.830396][ T9308] chnl_net:caif_netlink_parms(): no params data found [ 460.921558][ T9] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 460.953974][ T9] usb 1-1: USB disconnect, device number 12 [ 460.965775][ T9] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 460.995158][ T5108] Bluetooth: hci5: command tx timeout [ 461.130658][ T9021] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 461.173146][ T9021] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 461.233109][ T9387] loop2: detected capacity change from 0 to 131072 [ 461.275171][ T9387] F2FS-fs (loop2): Wrong segment_count / block_count (65567 > 16384) [ 461.283527][ T9387] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 461.428170][ T9387] F2FS-fs (loop2): Found nat_bits in checkpoint [ 461.683363][ T9387] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 461.715868][ T9387] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 461.994470][ T9415] netlink: 'syz.0.883': attribute type 29 has an invalid length. [ 462.194059][ T9415] netlink: 'syz.0.883': attribute type 29 has an invalid length. [ 462.206487][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.237356][ T9308] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.258459][ T9308] bridge_slave_0: entered allmulticast mode [ 462.278434][ T9308] bridge_slave_0: entered promiscuous mode [ 462.284559][ T9] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 462.319675][ T9419] netlink: 'syz.0.883': attribute type 29 has an invalid length. [ 462.343149][ T9420] netlink: 'syz.0.883': attribute type 29 has an invalid length. [ 462.407996][ T9308] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.439269][ T9308] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.467312][ T9308] bridge_slave_1: entered allmulticast mode [ 462.499048][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 462.513927][ T9308] bridge_slave_1: entered promiscuous mode [ 462.551872][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 462.581210][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 462.612266][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 462.634859][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 462.705873][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 462.725701][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 462.773532][ T9308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.783123][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 462.812795][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 462.838486][ T9308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.862755][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 462.901834][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 462.940605][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 462.967761][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 462.980308][ T9021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.025634][ T9] usb 4-1: string descriptor 0 read error: -22 [ 463.031996][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 463.085095][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.144425][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 463.205128][ T9308] team0: Port device team_slave_0 added [ 463.318472][ T9308] team0: Port device team_slave_1 added [ 463.366246][ T4485] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 463.377773][ T4485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 463.386922][ T4485] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 463.400316][ T4485] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 463.408238][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.424871][ T4485] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 463.432941][ T4485] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 463.450003][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.632522][ T9440] loop0: detected capacity change from 0 to 1024 [ 463.685682][ T9440] ext4: Unknown parameter 'obj_type' [ 463.713533][ T984] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.749804][ T6074] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 463.816397][ T9021] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.825203][ T9308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.864732][ T9308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.916210][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.925363][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.951253][ T9308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.959728][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.974577][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.076555][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.119525][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.144945][ T984] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.183265][ T9308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.209288][ T9308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.250993][ T9308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.463390][ T984] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.520707][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.528080][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.698643][ T984] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.788732][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.796269][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.059177][ T9308] hsr_slave_0: entered promiscuous mode [ 465.087795][ T9308] hsr_slave_1: entered promiscuous mode [ 465.115816][ T9308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.132112][ T9308] Cannot create hsr debugfs directory [ 465.475057][ T4485] Bluetooth: hci4: command tx timeout [ 466.102347][ T984] bridge_slave_1: left allmulticast mode [ 466.130354][ T984] bridge_slave_1: left promiscuous mode [ 466.147478][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.297616][ T984] bridge_slave_0: left allmulticast mode [ 466.313557][ T984] bridge_slave_0: left promiscuous mode [ 466.319489][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.632365][ T9469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.345457][ T5096] usb 4-1: USB disconnect, device number 6 [ 467.545868][ T4485] Bluetooth: hci4: command tx timeout [ 468.324746][ T9476] loop0: detected capacity change from 0 to 32768 [ 468.355202][ T9476] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.891 (9476) [ 468.434255][ T9476] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 468.463276][ T9476] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 468.503957][ T9476] BTRFS info (device loop0): using free-space-tree [ 468.795306][ T984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.838499][ T9476] BTRFS info (device loop0): rebuilding free space tree [ 468.857043][ T984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.901794][ T984] bond0 (unregistering): Released all slaves [ 469.307532][ T9501] loop2: detected capacity change from 0 to 32768 [ 469.483923][ T9501] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.897 (9501) [ 469.614590][ T9501] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 469.626501][ T4485] Bluetooth: hci4: command tx timeout [ 469.714081][ T9501] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 469.773699][ T9501] BTRFS info (device loop2): using free-space-tree [ 469.981933][ T5640] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 470.540771][ T7450] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 471.017623][ T984] hsr_slave_0: left promiscuous mode [ 471.063283][ T984] hsr_slave_1: left promiscuous mode [ 471.113231][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.163992][ T984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.226995][ T984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.263776][ T984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.392403][ T984] veth1_macvtap: left promiscuous mode [ 471.413744][ T984] veth0_macvtap: left promiscuous mode [ 471.434057][ T984] veth1_vlan: left promiscuous mode [ 471.439513][ T984] veth0_vlan: left promiscuous mode [ 471.714738][ T4485] Bluetooth: hci4: command tx timeout [ 471.828353][ T9584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.563970][ T5199] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 472.765179][ T5199] usb 4-1: Using ep0 maxpacket: 8 [ 472.792989][ T5199] usb 4-1: config 7 has an invalid interface number: 150 but max is 1 [ 472.811608][ T5199] usb 4-1: config 7 has an invalid interface number: 31 but max is 1 [ 472.847673][ T5199] usb 4-1: config 7 has an invalid descriptor of length 121, skipping remainder of the config [ 472.863699][ T5199] usb 4-1: config 7 has no interface number 0 [ 472.883684][ T5199] usb 4-1: config 7 has no interface number 1 [ 472.889839][ T5199] usb 4-1: config 7 interface 150 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 472.913789][ T5199] usb 4-1: config 7 interface 150 altsetting 6 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 472.948187][ T5199] usb 4-1: config 7 interface 150 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 472.993690][ T5199] usb 4-1: config 7 interface 150 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 473.013682][ T5199] usb 4-1: config 7 interface 150 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 473.044003][ T5199] usb 4-1: config 7 interface 31 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.068612][ T5199] usb 4-1: config 7 interface 150 has no altsetting 0 [ 473.084369][ T5199] usb 4-1: config 7 interface 31 has no altsetting 0 [ 473.096001][ T5199] usb 4-1: New USB device found, idVendor=0403, idProduct=fc73, bcdDevice=5e.b5 [ 473.107910][ T5199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.123688][ T5199] usb 4-1: Product: ї [ 473.131157][ T5199] usb 4-1: SerialNumber: 쾅෵⬷筟쓰䙧꩗럥㻻䋃⑰ຒ㍿呢맺뿹㨩㲟䁰뜮䡫ൠ歬ꆋ䕜旅婯椕늻햯欺薋࿞走﮵㼍䚚坛麓脑榜尔㨐辑擌ﱆ흖惣쉍幎滨今ᒵல洝剪❜穓⬄豚瘢榔ᄂ㋳펴㶿뫀寕⎸髢ﬞ漿䝹䨤䍇鍜蓈 [ 473.577036][ T984] team0 (unregistering): Port device team_slave_1 removed [ 473.642099][ T984] team0 (unregistering): Port device team_slave_0 removed [ 474.416745][ T9431] chnl_net:caif_netlink_parms(): no params data found [ 474.525328][ T9021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.049413][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.105041][ T9596] xt_bpf: check failed: parse error [ 475.113789][ T9431] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.132522][ T9431] bridge_slave_0: entered allmulticast mode [ 475.156711][ T9431] bridge_slave_0: entered promiscuous mode [ 475.293971][ T9431] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.301248][ T9431] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.389752][ T9431] bridge_slave_1: entered allmulticast mode [ 475.441072][ T9431] bridge_slave_1: entered promiscuous mode [ 475.554797][ T5199] ftdi_sio 4-1:7.150: FTDI USB Serial Device converter detected [ 475.605985][ T5199] ftdi_sio ttyUSB0: unknown device type: 0x5eb5 [ 475.735710][ T5199] ftdi_sio 4-1:7.31: FTDI USB Serial Device converter detected [ 475.772190][ T5199] ftdi_sio ttyUSB1: unknown device type: 0x5eb5 [ 475.786134][ T9308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 475.826320][ T5199] usb 4-1: USB disconnect, device number 7 [ 475.842678][ T9308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 475.861178][ T5199] ftdi_sio 4-1:7.150: device disconnected [ 475.876169][ T5199] ftdi_sio 4-1:7.31: device disconnected [ 475.900823][ T9431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.946503][ T9431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.101887][ T9308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 476.266177][ T9308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 476.334496][ T9431] team0: Port device team_slave_0 added [ 476.376513][ T9431] team0: Port device team_slave_1 added [ 476.548001][ T9021] veth0_vlan: entered promiscuous mode [ 476.647678][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.663913][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.735156][ T9431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.936829][ T9021] veth1_vlan: entered promiscuous mode [ 476.984758][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.029025][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.440470][ T9431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.522957][ T9431] hsr_slave_0: entered promiscuous mode [ 478.610810][ T9431] hsr_slave_1: entered promiscuous mode [ 478.712486][ T9431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.793769][ T9431] Cannot create hsr debugfs directory [ 478.981103][ T9634] loop0: detected capacity change from 0 to 32768 [ 479.017299][ T9634] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.910 (9634) [ 479.025575][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'. [ 479.126051][ T9021] veth0_macvtap: entered promiscuous mode [ 479.134987][ T9634] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 479.167911][ T9634] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 479.190756][ T9634] BTRFS info (device loop0): using free-space-tree [ 479.348838][ T9021] veth1_macvtap: entered promiscuous mode [ 479.443953][ T5640] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 479.820865][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.833352][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.847133][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.868699][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.879277][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.890341][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.901011][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.912001][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.941222][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.999023][ T9308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.073002][ T29] audit: type=1326 audit(1720522300.002:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 480.113723][ T29] audit: type=1326 audit(1720522300.002:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 480.168729][ T29] audit: type=1326 audit(1720522300.002:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 480.222952][ T29] audit: type=1326 audit(1720522300.002:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 480.255398][ T29] audit: type=1326 audit(1720522300.002:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 480.283251][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.285970][ T29] audit: type=1326 audit(1720522300.002:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 480.303102][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.336923][ T29] audit: type=1326 audit(1720522300.002:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 480.373707][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.388448][ T29] audit: type=1326 audit(1720522300.002:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 480.393301][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.411513][ T29] audit: type=1326 audit(1720522300.002:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 480.420967][ T5096] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 480.449715][ T29] audit: type=1326 audit(1720522300.002:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 480.460745][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.491882][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.502721][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.522325][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.544737][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.590241][ T9021] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.616508][ T9021] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.627177][ T9021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.638991][ T9021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.702219][ T5096] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 480.719942][ T5096] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.741481][ T5096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.760259][ T5096] usb 4-1: Product: ࠝ [ 480.765411][ T5096] usb 4-1: Manufacturer: Ḩ [ 480.771176][ T9682] xt_bpf: check failed: parse error [ 480.893422][ T9308] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.095798][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.103040][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.124723][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.132030][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.224382][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 481.284372][ T5096] cdc_ncm 4-1:1.0: bind() failure [ 481.305914][ T5096] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 481.324527][ T5096] cdc_ncm 4-1:1.1: bind() failure [ 481.344078][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.351421][ T5096] usb 4-1: USB disconnect, device number 8 [ 481.370539][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.453097][ T9431] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 481.571120][ T9431] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 481.618585][ T9431] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 481.660100][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.686085][ T9431] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 481.693286][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.001929][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 482.194977][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'. [ 482.351780][ T4485] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 483.682057][ T9431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.802812][ T9308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.848674][ T9431] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.269189][ T9752] loop1: detected capacity change from 0 to 2048 [ 485.334082][ T9757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.363374][ T9752] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 485.492016][ T9757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.528835][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.536150][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.601166][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.608392][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.881213][ T9431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.942668][ T9021] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 485.990946][ T9021] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 486.036436][ T9753] loop0: detected capacity change from 0 to 4096 [ 486.066339][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 486.066358][ T29] audit: type=1326 audit(1720522306.002:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 486.158902][ T29] audit: type=1326 audit(1720522306.042:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 486.321574][ T29] audit: type=1326 audit(1720522306.062:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 486.389988][ T29] audit: type=1326 audit(1720522306.062:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 486.403861][ T5282] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 486.517414][ T29] audit: type=1326 audit(1720522306.062:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 486.610511][ T29] audit: type=1326 audit(1720522306.062:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 486.705167][ T29] audit: type=1326 audit(1720522306.062:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 486.737527][ T5282] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 486.813920][ T29] audit: type=1326 audit(1720522306.072:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 486.817379][ T5282] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.926952][ T29] audit: type=1326 audit(1720522306.072:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 487.002181][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.004626][ T29] audit: type=1326 audit(1720522306.072:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 487.268927][ T5282] usb 3-1: Product: ࠝ [ 487.273114][ T5282] usb 3-1: Manufacturer: Ḩ [ 488.041057][ T9747] ntfs3: loop0: failed to convert "0000" to iso8859-3 [ 488.059333][ T1038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.075295][ T9747] ntfs3: loop0: failed to convert name for inode 1e. [ 488.451922][ T1038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.601294][ T9308] veth0_vlan: entered promiscuous mode [ 488.631408][ T9772] netlink: 36 bytes leftover after parsing attributes in process `syz.2.931'. [ 488.689998][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 488.733049][ T5282] cdc_ncm 3-1:1.0: bind() failure [ 488.757416][ T9431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.772738][ T5282] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 488.812774][ T5282] cdc_ncm 3-1:1.1: bind() failure [ 488.853143][ T5282] usb 3-1: USB disconnect, device number 7 [ 488.952762][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 488.998918][ T1038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.106607][ T9308] veth1_vlan: entered promiscuous mode [ 489.117492][ T5108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.130920][ T5108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.142057][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.152302][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.161618][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 489.169403][ T5108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.315201][ T1038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.536204][ T9308] veth0_macvtap: entered promiscuous mode [ 489.621253][ T9308] veth1_macvtap: entered promiscuous mode [ 490.348279][ T9817] loop0: detected capacity change from 0 to 2048 [ 490.460547][ T9817] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 490.626144][ T9308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.667017][ T9308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.687223][ T9308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.733524][ T9308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.775524][ T9308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.801100][ T9308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.820093][ T9308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.842624][ T9308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.853024][ T9308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.872671][ T9308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.890978][ T5640] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 490.911611][ T9308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.914120][ T5640] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 491.235118][ T5108] Bluetooth: hci2: command tx timeout [ 491.525946][ T9308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.579126][ T9308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.600333][ T9308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.613075][ T9308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.635860][ T9308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.660277][ T9308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.674667][ T9308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.692683][ T9308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.706986][ T9308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.740614][ T9308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.824962][ T9308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.861163][ T1038] bridge_slave_1: left allmulticast mode [ 491.869684][ T1038] bridge_slave_1: left promiscuous mode [ 491.876267][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.893276][ T1038] bridge_slave_0: left allmulticast mode [ 491.902603][ T1038] bridge_slave_0: left promiscuous mode [ 491.922166][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.127851][ T9826] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 492.134426][ T9826] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 492.157666][ T9826] vhci_hcd vhci_hcd.0: Device attached [ 492.245788][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 492.245811][ T29] audit: type=1326 audit(1720522312.182:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9825 comm="syz.3.945" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x0 [ 492.341718][ T9830] xt_bpf: check failed: parse error [ 492.427519][ T9684] usb 15-1: new high-speed USB device number 2 using vhci_hcd [ 492.659115][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.695800][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.725574][ T1038] bond0 (unregistering): Released all slaves [ 492.859885][ T9308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.872015][ T9308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.881522][ T9308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.893172][ T9308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.951376][ T9827] vhci_hcd: connection reset by peer [ 492.975452][ T8003] vhci_hcd: stop threads [ 492.979767][ T8003] vhci_hcd: release socket [ 492.995829][ T9431] veth0_vlan: entered promiscuous mode [ 493.020310][ T8003] vhci_hcd: disconnect device [ 493.049903][ T9431] veth1_vlan: entered promiscuous mode [ 493.304691][ T5108] Bluetooth: hci2: command tx timeout [ 493.455446][ T29] audit: type=1326 audit(1720522313.392:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 493.593697][ T29] audit: type=1326 audit(1720522313.422:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 493.652903][ T9431] veth0_macvtap: entered promiscuous mode [ 493.667769][ T29] audit: type=1326 audit(1720522313.432:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 493.724808][ T1038] hsr_slave_0: left promiscuous mode [ 493.740609][ T1038] hsr_slave_1: left promiscuous mode [ 493.740619][ T29] audit: type=1326 audit(1720522313.432:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 493.740680][ T29] audit: type=1326 audit(1720522313.432:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 493.792277][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.800048][ T5199] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 493.823741][ T29] audit: type=1326 audit(1720522313.432:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 493.836987][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.872388][ T29] audit: type=1326 audit(1720522313.432:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 493.898321][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.920746][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.945580][ T4485] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 493.959173][ T29] audit: type=1326 audit(1720522313.432:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 493.985815][ T4485] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 494.004332][ T4485] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 494.017049][ T4485] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 494.017678][ T29] audit: type=1326 audit(1720522313.432:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9837 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff65dd75bd9 code=0x7ffc0000 [ 494.035837][ T5199] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 494.067173][ T1038] veth1_macvtap: left promiscuous mode [ 494.072502][ T5199] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 494.083341][ T4485] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 494.104002][ T4485] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 494.111140][ T5199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.112717][ T1038] veth0_macvtap: left promiscuous mode [ 494.126502][ T5199] usb 3-1: Product: ࠝ [ 494.130702][ T5199] usb 3-1: Manufacturer: Ḩ [ 494.135072][ T1038] veth1_vlan: left promiscuous mode [ 494.142199][ T1038] veth0_vlan: left promiscuous mode [ 495.002971][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 495.091385][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 495.400272][ T5108] Bluetooth: hci2: command tx timeout [ 495.811795][ T9838] netlink: 36 bytes leftover after parsing attributes in process `syz.2.948'. [ 495.857794][ T9431] veth1_macvtap: entered promiscuous mode [ 495.882405][ T8003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.914105][ T5199] cdc_ncm 3-1:1.0: bind() failure [ 495.923947][ T8003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.947993][ T5199] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 495.971985][ T5199] cdc_ncm 3-1:1.1: bind() failure [ 496.014422][ T5199] usb 3-1: USB disconnect, device number 8 [ 496.031483][ T9801] chnl_net:caif_netlink_parms(): no params data found [ 496.043890][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 496.100717][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.121880][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.131917][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.143341][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.154643][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.166195][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.176525][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.192625][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.193782][ T5108] Bluetooth: hci6: command tx timeout [ 496.214186][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.228577][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 496.240965][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.266038][ T9431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.334025][ T8003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.364740][ T8003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.458517][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.496252][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.530692][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.544883][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.566249][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.583284][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.608622][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.622182][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.638321][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.653503][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.691012][ T9431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.013105][ T9431] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.029159][ T9431] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.045707][ T9431] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.055320][ T9431] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.080435][ T9801] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.114111][ T9801] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.121556][ T9801] bridge_slave_0: entered allmulticast mode [ 497.151699][ T9801] bridge_slave_0: entered promiscuous mode [ 497.197130][ T9801] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.223548][ T9801] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.232444][ T9801] bridge_slave_1: entered allmulticast mode [ 497.241774][ T9801] bridge_slave_1: entered promiscuous mode [ 497.474568][ T5108] Bluetooth: hci2: command tx timeout [ 497.997008][ T9801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.263787][ T5108] Bluetooth: hci6: command tx timeout [ 498.280865][ T9801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.400724][ T9684] vhci_hcd: vhci_device speed not set [ 498.611173][ T9801] team0: Port device team_slave_0 added [ 499.794822][ T9905] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 499.801411][ T9905] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 499.814708][ T9905] vhci_hcd vhci_hcd.0: Device attached [ 499.826492][ T9801] team0: Port device team_slave_1 added [ 499.905893][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 499.905916][ T29] audit: type=1326 audit(1720522319.842:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9904 comm="syz.4.957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a3cd75bd9 code=0x0 [ 500.037084][ T9801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.044591][ T9801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.071057][ T9801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.098057][ T5099] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 500.176886][ T1038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.230495][ T9801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.242408][ T9801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.278852][ T9801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.353053][ T5108] Bluetooth: hci6: command tx timeout [ 500.378349][ T1038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.475571][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.483429][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.530494][ T9851] chnl_net:caif_netlink_parms(): no params data found [ 500.614925][ T9906] vhci_hcd: connection reset by peer [ 500.617521][ T1038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.631697][ T11] vhci_hcd: stop threads [ 500.641565][ T11] vhci_hcd: release socket [ 500.654147][ T11] vhci_hcd: disconnect device [ 501.081264][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.085489][ T1038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.090768][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.180668][ T29] audit: type=1326 audit(1720522321.102:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 501.304810][ T29] audit: type=1326 audit(1720522321.102:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 501.458392][ T29] audit: type=1326 audit(1720522321.132:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 501.503933][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 501.534321][ T29] audit: type=1326 audit(1720522321.132:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 501.541015][ T9801] hsr_slave_0: entered promiscuous mode [ 501.591754][ T9801] hsr_slave_1: entered promiscuous mode [ 501.619747][ T29] audit: type=1326 audit(1720522321.132:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 501.645355][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.692022][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.742083][ T29] audit: type=1326 audit(1720522321.132:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 501.775852][ T45] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 501.820282][ T29] audit: type=1326 audit(1720522321.132:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 501.845280][ T29] audit: type=1326 audit(1720522321.132:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 501.865667][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.906588][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.923729][ T45] usb 4-1: Product: ࠝ [ 501.927998][ T45] usb 4-1: Manufacturer: Ḩ [ 501.929848][ T29] audit: type=1326 audit(1720522321.132:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 502.423911][ T5108] Bluetooth: hci6: command tx timeout [ 502.506106][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.561171][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.605318][ T9851] bridge_slave_0: entered allmulticast mode [ 502.659625][ T9851] bridge_slave_0: entered promiscuous mode [ 502.782929][ T9925] netlink: 36 bytes leftover after parsing attributes in process `syz.3.960'. [ 502.870979][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.883144][ T45] cdc_ncm 4-1:1.0: bind() failure [ 502.902849][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.926931][ T45] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 502.933523][ T9851] bridge_slave_1: entered allmulticast mode [ 502.940027][ T45] cdc_ncm 4-1:1.1: bind() failure [ 502.943999][ T9851] bridge_slave_1: entered promiscuous mode [ 502.980813][ T45] usb 4-1: USB disconnect, device number 9 [ 503.391598][ T9851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.455479][ T9851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.620515][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.886'. [ 503.739314][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 503.941632][ T1038] bridge_slave_1: left allmulticast mode [ 504.006055][ T1038] bridge_slave_1: left promiscuous mode [ 504.024301][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.047346][ T1038] bridge_slave_0: left allmulticast mode [ 504.054320][ T1038] bridge_slave_0: left promiscuous mode [ 504.074216][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.093008][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 504.472735][ T9982] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 504.479311][ T9982] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 504.494732][ T9982] vhci_hcd vhci_hcd.0: Device attached [ 504.673341][ T9983] vhci_hcd: connection closed [ 504.674182][ T984] vhci_hcd: stop threads [ 504.719338][ T984] vhci_hcd: release socket [ 504.726559][ T984] vhci_hcd: disconnect device [ 504.733836][ T779] vhci_hcd: vhci_device speed not set [ 505.237878][ T5099] vhci_hcd: vhci_device speed not set [ 506.882789][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.941904][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.978240][ T1038] bond0 (unregistering): Released all slaves [ 507.126195][ T9851] team0: Port device team_slave_0 added [ 507.158177][ T9970] lo: entered allmulticast mode [ 507.581562][ T9851] team0: Port device team_slave_1 added [ 508.730913][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.755960][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.814075][ T9851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.963908][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'. [ 509.013170][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.020689][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.055485][ T9851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.152503][ T1038] hsr_slave_0: left promiscuous mode [ 509.162453][ T1038] hsr_slave_1: left promiscuous mode [ 509.177083][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.185990][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.194985][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.202947][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.239747][ T1038] veth1_macvtap: left promiscuous mode [ 509.249217][ T1038] veth0_macvtap: left promiscuous mode [ 509.264749][ T1038] veth1_vlan: left promiscuous mode [ 509.270852][ T1038] veth0_vlan: left promiscuous mode [ 509.493254][T10036] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 509.499837][T10036] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 509.529671][T10036] vhci_hcd vhci_hcd.0: Device attached [ 509.578235][T10037] vhci_hcd: connection closed [ 509.580320][ T1047] vhci_hcd: stop threads [ 509.594260][ T1047] vhci_hcd: release socket [ 509.598927][ T1047] vhci_hcd: disconnect device [ 511.669594][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 511.747173][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 512.620676][T10057] loop2: detected capacity change from 0 to 1537 [ 512.671469][T10057] ntfs3: loop2: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only. [ 512.717785][T10057] ntfs3: loop2: failed to read volume at offset 0x100c00 [ 512.741577][T10057] ntfs3: loop2: failed to read volume at offset 0x100c00 [ 512.749445][T10057] ntfs3: loop2: failed to read volume at offset 0x100c00 [ 512.768873][T10057] ntfs3: loop2: failed to read volume at offset 0x100c00 [ 512.776770][T10057] ntfs3: loop2: failed to read volume at offset 0x101c00 [ 512.788306][T10057] ntfs3: loop2: failed to read volume at offset 0x102c00 [ 512.801296][T10057] ntfs3: loop2: failed to read volume at offset 0x104c00 [ 512.809400][T10057] ntfs3: loop2: failed to read volume at offset 0x108c00 [ 512.817043][T10057] ntfs3: loop2: failed to read volume at offset 0x110c00 [ 513.076813][ T9851] hsr_slave_0: entered promiscuous mode [ 513.088921][ T9851] hsr_slave_1: entered promiscuous mode [ 513.100826][ T9851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.109179][ T9851] Cannot create hsr debugfs directory [ 514.023940][ T9801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 514.225841][ T9801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 514.320617][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 514.403683][ T9801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 514.995408][ T9801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 515.194330][ T4485] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 515.264569][ T4485] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 515.280809][ T4485] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 515.316706][ T4485] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 515.329369][ T4485] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 515.344964][ T4485] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 515.486659][T10086] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 515.493236][T10086] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 515.504520][T10086] vhci_hcd vhci_hcd.0: Device attached [ 515.663930][T10087] vhci_hcd: connection closed [ 515.667835][ T984] vhci_hcd: stop threads [ 515.688061][ T984] vhci_hcd: release socket [ 515.717932][ T984] vhci_hcd: disconnect device [ 516.698177][ T1038] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.890123][T10101] lo: entered allmulticast mode [ 517.120810][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 517.164493][ T1038] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.381099][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 517.398217][T10113] loop2: detected capacity change from 0 to 4096 [ 517.426770][ T1038] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.464505][ T5108] Bluetooth: hci7: command tx timeout [ 517.599660][ T9851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 517.660416][T10106] ntfs3: loop2: failed to convert "0000" to iso8859-3 [ 517.671614][ T9851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 517.683990][T10106] ntfs3: loop2: failed to convert name for inode 1e. [ 517.939673][ T1038] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.988998][ T9851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 518.280213][ T9851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 518.359872][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1003'. [ 518.891861][ T9801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.531008][ T1038] bridge_slave_1: left allmulticast mode [ 519.544906][ T5108] Bluetooth: hci7: command tx timeout [ 519.545562][ T1038] bridge_slave_1: left promiscuous mode [ 519.564673][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.578839][ T1038] bridge_slave_0: left allmulticast mode [ 519.618747][ T1038] bridge_slave_0: left promiscuous mode [ 519.641299][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.958633][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.082168][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.168172][ T1038] bond0 (unregistering): Released all slaves [ 521.270643][ T9801] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.557419][T10082] chnl_net:caif_netlink_parms(): no params data found [ 521.582568][T10163] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 521.615652][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.622939][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.634376][ T5108] Bluetooth: hci7: command tx timeout [ 522.539116][ T9684] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.546386][ T9684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.706719][T10176] loop3: detected capacity change from 0 to 64 [ 522.750568][T10176] hfs: get root inode failed [ 523.477855][ T9801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 523.490175][ T9801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.705649][ T5108] Bluetooth: hci7: command tx timeout [ 523.841210][ T1038] hsr_slave_0: left promiscuous mode [ 523.883975][ T1038] hsr_slave_1: left promiscuous mode [ 523.928223][T10198] loop5: detected capacity change from 0 to 512 [ 523.935867][T10198] EXT4-fs: Ignoring removed i_version option [ 523.941937][T10198] EXT4-fs: Ignoring removed nobh option [ 523.957353][T10198] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 523.973974][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.005714][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.026746][T10198] EXT4-fs (loop5): 1 truncate cleaned up [ 524.061032][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.069533][T10198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.112892][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.287168][ T1038] veth1_macvtap: left promiscuous mode [ 524.298795][T10184] loop2: detected capacity change from 0 to 40427 [ 524.310527][ T1038] veth0_macvtap: left promiscuous mode [ 524.317321][ T1038] veth1_vlan: left promiscuous mode [ 524.353360][ T1038] veth0_vlan: left promiscuous mode [ 524.374904][T10184] F2FS-fs (loop2): invalid crc value [ 524.396004][T10184] F2FS-fs (loop2): Found nat_bits in checkpoint [ 524.638832][T10184] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 525.011383][ T7450] syz-executor: attempt to access beyond end of device [ 525.011383][ T7450] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 525.083668][ T7450] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 525.135105][ T9431] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.547282][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1017'. [ 526.826147][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1017'. [ 526.941851][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 527.269617][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 528.580615][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 528.609912][T10277] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 528.662473][T10082] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.710400][T10082] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.744228][T10082] bridge_slave_0: entered allmulticast mode [ 528.751903][T10082] bridge_slave_0: entered promiscuous mode [ 528.781523][T10082] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.806074][T10082] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.813486][T10082] bridge_slave_1: entered allmulticast mode [ 528.837186][ T4485] Bluetooth: hci4: command 0x0406 tx timeout [ 528.837623][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 528.837640][ T29] audit: type=1326 audit(1720522348.772:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 528.845622][T10082] bridge_slave_1: entered promiscuous mode [ 528.910503][ T29] audit: type=1326 audit(1720522348.772:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 529.008833][ T29] audit: type=1326 audit(1720522348.812:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 529.063018][ T29] audit: type=1326 audit(1720522348.812:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 529.099157][T10082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.129465][ T29] audit: type=1326 audit(1720522348.812:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 529.181524][T10082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.209341][ T5164] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 529.215746][ T29] audit: type=1326 audit(1720522348.812:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 529.271675][ T9851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.298863][ T29] audit: type=1326 audit(1720522348.812:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 529.451004][ T5164] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 529.473045][ T29] audit: type=1326 audit(1720522348.812:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 529.556085][ T5164] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 529.584965][ T5164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.623994][ T29] audit: type=1326 audit(1720522348.812:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 529.649186][ T5164] usb 4-1: Product: ࠝ [ 529.653403][ T5164] usb 4-1: Manufacturer: Ḩ [ 529.662115][ T5164] usb 4-1: SerialNumber: syz [ 529.668941][ T29] audit: type=1326 audit(1720522348.812:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.3.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 529.752542][T10082] team0: Port device team_slave_0 added [ 529.898104][T10082] team0: Port device team_slave_1 added [ 530.012629][T10082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.020272][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.066984][T10082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.104333][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'. [ 530.161497][T10082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.166373][ T5164] cdc_ncm 4-1:1.0: bind() failure [ 530.182362][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.188424][ T5164] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 530.213624][T10082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.242580][ T9851] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.244405][ T5164] cdc_ncm 4-1:1.1: bind() failure [ 530.277003][ T5164] usb 4-1: USB disconnect, device number 10 [ 530.440291][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.447528][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.525767][T10082] hsr_slave_0: entered promiscuous mode [ 530.537665][T10082] hsr_slave_1: entered promiscuous mode [ 530.550246][T10082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.560580][T10082] Cannot create hsr debugfs directory [ 530.622167][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.629426][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.661693][ T9801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.179031][ T5108] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 531.181586][ T5108] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 531.370001][ T9801] veth0_vlan: entered promiscuous mode [ 531.494040][ T9801] veth1_vlan: entered promiscuous mode [ 531.698818][T10328] libceph: resolve '. [ 531.698818][T10328] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 531.698818][T10328] ' (ret=-3): failed [ 531.966126][ T5164] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 532.081080][T10328] dummy0: entered promiscuous mode [ 532.199893][ T5164] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 532.239500][ T5164] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.260042][T10328] dummy0: left promiscuous mode [ 532.268222][ T5164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.288590][ T5164] usb 3-1: Product: ࠝ [ 532.292964][ T5164] usb 3-1: Manufacturer: Ḩ [ 532.664669][T10339] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1025'. [ 532.993155][ T5164] cdc_ncm 3-1:1.0: bind() failure [ 533.021870][ T5164] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 533.041259][ T9801] veth0_macvtap: entered promiscuous mode [ 533.046269][T10336] loop3: detected capacity change from 0 to 40427 [ 533.062178][ T9851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.074030][ T5164] cdc_ncm 3-1:1.1: bind() failure [ 533.114601][ T5164] usb 3-1: USB disconnect, device number 9 [ 533.120642][T10336] F2FS-fs (loop3): invalid crc value [ 533.136984][ T9801] veth1_macvtap: entered promiscuous mode [ 533.183450][T10336] F2FS-fs (loop3): Found nat_bits in checkpoint [ 533.383788][T10336] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 533.449614][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.464163][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.475304][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.486284][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.496929][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.508180][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.520443][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.531370][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.556465][ T9801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.619545][ T6383] syz-executor: attempt to access beyond end of device [ 533.619545][ T6383] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 533.631279][T10082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 533.650317][ T6383] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 533.685946][T10082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 533.764197][T10082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 533.857091][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.908675][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.927741][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.123763][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.137524][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.149606][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.218289][ T9801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.266657][ T9801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.289085][ T9801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.318846][T10082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 534.457672][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1028'. [ 534.483526][ T9801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.492620][ T9801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.502515][ T9801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.512411][ T9801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.733527][ T9851] veth0_vlan: entered promiscuous mode [ 535.067562][ T9851] veth1_vlan: entered promiscuous mode [ 535.119185][ T5108] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 535.195976][T10376] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 535.288941][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.325797][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.541594][T10382] loop2: detected capacity change from 0 to 64 [ 535.578308][ T9851] veth0_macvtap: entered promiscuous mode [ 535.633526][T10382] hfs: get root inode failed [ 535.855375][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.863330][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.935113][ T9851] veth1_macvtap: entered promiscuous mode [ 537.425024][T10082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.451856][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 537.451879][ T29] audit: type=1326 audit(1720522357.382:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 537.538588][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.621904][ T29] audit: type=1326 audit(1720522357.432:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 537.645383][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.674458][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.701011][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.731992][ T29] audit: type=1326 audit(1720522357.462:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 537.754361][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.792737][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.827372][ T29] audit: type=1326 audit(1720522357.462:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 537.850117][ T29] audit: type=1326 audit(1720522357.462:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 537.863920][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.873367][ T29] audit: type=1326 audit(1720522357.462:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 537.910395][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.921995][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.940740][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.952298][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.953781][ T29] audit: type=1326 audit(1720522357.462:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 537.981971][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.996583][ T5199] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 538.010549][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.068164][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.082711][ T29] audit: type=1326 audit(1720522357.462:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 538.103784][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.144414][ T29] audit: type=1326 audit(1720522357.472:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 538.182286][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.193021][ T29] audit: type=1326 audit(1720522357.472:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 538.210320][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.250002][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.250087][ T5199] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 538.281704][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.296036][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.324211][ T5199] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.337421][ T5199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.351770][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.443352][T10417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1033'. [ 538.462795][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.486287][ T5199] usb 4-1: Product: ࠝ [ 538.490993][ T5199] usb 4-1: Manufacturer: Ḩ [ 538.507356][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.756648][ T9851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.792883][ T9851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.832872][ T9851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.864191][ T9851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.942580][T10082] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.977388][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1036'. [ 538.979445][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 539.060141][ T5199] cdc_ncm 4-1:1.0: bind() failure [ 539.090709][ T5199] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 539.103003][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.110259][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.113698][ T5199] cdc_ncm 4-1:1.1: bind() failure [ 539.184007][ T5199] usb 4-1: USB disconnect, device number 11 [ 539.266002][T10433] netlink: 763 bytes leftover after parsing attributes in process `syz.5.1034'. [ 539.330694][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.337958][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.666964][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.717163][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.861026][ T5164] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 540.053119][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.089851][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.121715][ T5164] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 540.226659][ T5164] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 540.251125][ T5164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.269608][ T5164] usb 3-1: Product: ࠝ [ 540.303987][ T5164] usb 3-1: Manufacturer: Ḩ [ 540.341074][T10423] loop1: detected capacity change from 0 to 40427 [ 540.377340][T10423] F2FS-fs (loop1): invalid crc value [ 540.399429][T10423] F2FS-fs (loop1): Found nat_bits in checkpoint [ 540.559136][T10082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.630781][T10440] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1037'. [ 540.735484][ T5164] cdc_ncm 3-1:1.0: bind() failure [ 540.885028][ T5164] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 540.895487][T10423] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 540.927652][ T5164] cdc_ncm 3-1:1.1: bind() failure [ 540.950075][T10454] input: syz0 as /devices/virtual/input/input23 [ 540.988619][ T5164] usb 3-1: USB disconnect, device number 10 [ 541.128411][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 541.143257][ T9801] syz-executor: attempt to access beyond end of device [ 541.143257][ T9801] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 541.181922][ T9801] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 543.274836][ T5108] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 543.476880][T10472] loop0: detected capacity change from 0 to 64 [ 543.853074][T10472] hfs: get root inode failed [ 543.998120][T10082] veth0_vlan: entered promiscuous mode [ 544.072052][T10082] veth1_vlan: entered promiscuous mode [ 544.433932][ T5160] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 544.637252][ T5160] usb 3-1: unable to get BOS descriptor or descriptor too short [ 544.695995][ T5160] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 544.704427][T10082] veth0_macvtap: entered promiscuous mode [ 544.736916][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 544.790456][T10082] veth1_macvtap: entered promiscuous mode [ 544.825656][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 544.928303][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 544.952514][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.001638][ T5160] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 545.018380][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 545.043624][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.049402][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 545.074032][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 545.087475][ T5160] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 545.095167][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 545.106127][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 545.117798][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 545.118304][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.141485][ T5160] usb 3-1: string descriptor 0 read error: -22 [ 545.162295][ T5160] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 545.183914][ T5160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.206571][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.250205][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.255856][ T5160] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 545.283656][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.322950][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 545.322973][ T29] audit: type=1326 audit(1720522365.252:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 545.363883][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.406245][ T29] audit: type=1326 audit(1720522365.282:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 545.407122][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.428728][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.463422][T10482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.467597][T10499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1047'. [ 545.483325][T10482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.486408][ T29] audit: type=1326 audit(1720522365.292:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 545.509105][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.531901][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.542215][ T29] audit: type=1326 audit(1720522365.292:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 545.546012][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.566018][ T29] audit: type=1326 audit(1720522365.292:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 545.586561][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.614191][ T29] audit: type=1326 audit(1720522365.292:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 545.622382][T10082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.652932][ T29] audit: type=1326 audit(1720522365.292:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 545.661525][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.683765][ T5164] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 545.688150][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.707664][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.718460][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.722009][ T29] audit: type=1326 audit(1720522365.292:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 545.738187][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.753460][ T29] audit: type=1326 audit(1720522365.292:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 545.785362][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.796738][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.808286][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.818494][ T29] audit: type=1326 audit(1720522365.292:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 545.844227][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.855773][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.873845][T10082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.884484][T10082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.896639][T10082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.899107][T10502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.917278][T10502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.930494][ T5164] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 545.943876][T10496] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 545.971041][T10502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.982936][T10502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.026996][T10502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.039630][ T5164] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 546.073780][ T5164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.092066][ T5164] usb 4-1: Product: ࠝ [ 546.096916][T10502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.107332][ T5164] usb 4-1: Manufacturer: Ḩ [ 546.247683][T10082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.287193][T10082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.305623][T10082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.327754][T10082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.552281][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1048'. [ 546.710590][ T5164] cdc_ncm 4-1:1.0: bind() failure [ 546.764744][ T5164] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 546.773414][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.789852][ T5164] cdc_ncm 4-1:1.1: bind() failure [ 546.815221][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.852596][ T5164] usb 4-1: USB disconnect, device number 12 [ 546.939679][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.966287][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.163701][ T779] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 547.366168][ T779] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 547.378964][ T779] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 547.391755][ T779] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 547.402275][ T779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.413418][T10519] input: syz0 as /devices/virtual/input/input24 [ 547.426436][T10512] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 547.487284][T10508] loop1: detected capacity change from 0 to 40427 [ 547.541190][T10508] F2FS-fs (loop1): invalid crc value [ 547.590824][T10508] F2FS-fs (loop1): Found nat_bits in checkpoint [ 547.691769][T10512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.778384][T10512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.958186][T10508] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 547.996987][T10508] syz.1.1051: attempt to access beyond end of device [ 547.996987][T10508] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 548.103505][T10508] syz.1.1051: attempt to access beyond end of device [ 548.103505][T10508] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 548.333173][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1056'. [ 548.393375][ T9801] syz-executor: attempt to access beyond end of device [ 548.393375][ T9801] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 548.462169][ T9801] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 549.568380][ T5182] usb 3-1: USB disconnect, device number 11 [ 550.089939][T10535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.130170][T10535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.156557][T10546] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 550.445019][T10551] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1063'. [ 550.470613][ T779] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 550.497803][ T779] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input25 [ 550.637307][ T779] usb 1-1: USB disconnect, device number 13 [ 550.637370][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 551.524598][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 551.524620][ T29] audit: type=1326 audit(1720522371.452:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03d75bd9 code=0x7ffc0000 [ 551.556489][ T5108] Bluetooth: hci6: command 0x0406 tx timeout [ 551.584155][ T29] audit: type=1326 audit(1720522371.492:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03d75bd9 code=0x7ffc0000 [ 551.613448][ T29] audit: type=1326 audit(1720522371.542:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f4e03d75bd9 code=0x7ffc0000 [ 551.719100][ T29] audit: type=1326 audit(1720522371.542:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03d75bd9 code=0x7ffc0000 [ 551.787301][ T29] audit: type=1326 audit(1720522371.542:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03d75bd9 code=0x7ffc0000 [ 551.847610][ T29] audit: type=1326 audit(1720522371.542:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e03d75bd9 code=0x7ffc0000 [ 551.963696][ T5164] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 551.991513][ T29] audit: type=1326 audit(1720522371.542:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03d75bd9 code=0x7ffc0000 [ 552.209978][ T5164] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 552.243178][ T29] audit: type=1326 audit(1720522371.542:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03d75bd9 code=0x7ffc0000 [ 552.272217][T10573] input: syz0 as /devices/virtual/input/input26 [ 552.297227][ T5164] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.326785][ T5164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.351415][ T5164] usb 5-1: Product: ࠝ [ 552.363871][ T5164] usb 5-1: Manufacturer: Ḩ [ 552.645806][ T29] audit: type=1326 audit(1720522371.542:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e03d75bd9 code=0x7ffc0000 [ 553.477621][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 553.493912][ T29] audit: type=1326 audit(1720522371.542:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.4.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e03d75bd9 code=0x7ffc0000 [ 553.565358][ T4485] Bluetooth: hci7: Unknown advertising packet type: 0x19 [ 553.565490][ T4485] Bluetooth: hci7: Unknown advertising packet type: 0x1f [ 553.777422][T10589] vxcan1: tx address claim with dest, not broadcast [ 553.803233][ T5164] cdc_ncm 5-1:1.0: bind() failure [ 553.832324][ T5164] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 553.883710][ T5182] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 553.884784][T10592] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 553.894519][ T5164] cdc_ncm 5-1:1.1: bind() failure [ 553.978066][ T5164] usb 5-1: USB disconnect, device number 10 [ 554.136375][ T5182] usb 4-1: unable to get BOS descriptor or descriptor too short [ 554.164529][ T5182] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 554.204647][ T5182] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 554.247811][ T5182] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 554.280263][ T5182] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 554.546264][ T5182] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 554.563806][ T5182] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 554.586928][ T5182] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 554.616935][ T5182] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 554.652494][ T5182] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 554.664543][ T5182] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 554.698187][ T5182] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 554.737638][ T5182] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 554.772314][ T5182] usb 4-1: string descriptor 0 read error: -22 [ 554.790556][ T5182] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 554.821943][ T5182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.858625][ T5182] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 554.922032][T10603] input: syz0 as /devices/virtual/input/input27 [ 555.085554][T10580] loop0: detected capacity change from 0 to 40427 [ 555.200203][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.210020][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.219378][T10580] F2FS-fs (loop0): invalid crc value [ 555.305857][T10580] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 556.323834][T10611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.332487][T10611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.346249][T10610] loop4: detected capacity change from 0 to 64 [ 556.430751][T10611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.494183][T10611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.654869][T10611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.741361][T10611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.646866][T10628] input: syz0 as /devices/virtual/input/input28 [ 557.916581][ T5160] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 557.997124][T10634] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 558.155942][ T5160] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 558.183841][ T5160] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 558.213747][ T5160] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 558.223293][ T5160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.256962][T10632] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 558.522205][T10632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.574791][T10632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.736220][T10640] loop1: detected capacity change from 0 to 512 [ 558.763198][T10640] EXT4-fs: Ignoring removed i_version option [ 558.797880][T10640] EXT4-fs: Ignoring removed nobh option [ 558.819457][T10642] binder: 10641:10642 ioctl c0306201 20000080 returned -14 [ 558.824774][T10640] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 558.888019][T10640] EXT4-fs (loop1): 1 truncate cleaned up [ 558.987399][T10640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.193787][ T5182] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 559.403830][ T5182] usb 3-1: Using ep0 maxpacket: 16 [ 559.414419][ T5182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 559.446817][ T5182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 559.473205][ T5182] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 559.503218][ T5182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.548219][ T5182] usb 3-1: config 0 descriptor?? [ 560.422005][ T5099] usb 4-1: USB disconnect, device number 13 [ 560.669775][T10632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.749426][T10632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.822593][ T5182] usbhid 3-1:0.0: can't add hid device: -71 [ 560.832541][ T5182] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 560.862388][ T5182] usb 3-1: USB disconnect, device number 12 [ 560.871864][ T9801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.905758][ T5160] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 560.975792][ T5160] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input29 [ 561.096450][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 561.130804][ T5160] usb 1-1: USB disconnect, device number 14 [ 561.903874][ T4485] Bluetooth: hci7: link tx timeout [ 562.263842][ T4485] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 562.507320][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.523747][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.581882][ T4485] Bluetooth: hci7: unexpected event 0x06 length: 4 > 3 [ 562.888017][T10676] loop2: detected capacity change from 0 to 64 [ 562.983853][T10676] hfs: get root inode failed [ 563.024301][T10680] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 563.062369][ T4485] Bluetooth: hci7: link tx timeout [ 563.067791][ T4485] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 563.435984][T10683] bond0: (slave erspan0): Opening slave failed [ 564.220474][ T4485] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 564.574229][ T4485] Bluetooth: hci7: command 0x0406 tx timeout [ 564.970640][T10690] input: syz0 as /devices/virtual/input/input30 [ 565.069692][ T5108] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 565.079227][T10700] loop1: detected capacity change from 0 to 512 [ 565.085914][T10697] input: syz0 as /devices/virtual/input/input31 [ 565.095599][T10700] EXT4-fs: Ignoring removed i_version option [ 565.101626][T10700] EXT4-fs: Ignoring removed nobh option [ 565.180617][T10700] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 565.298029][T10700] EXT4-fs (loop1): 1 truncate cleaned up [ 565.364157][ T5160] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 565.366344][T10700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.464171][ T5108] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 565.475065][ T5108] Bluetooth: hci7: Injecting HCI hardware error event [ 565.485076][ T4485] Bluetooth: hci7: hardware error 0x00 [ 565.610877][ T5160] usb 3-1: unable to get BOS descriptor or descriptor too short [ 565.634081][ T5160] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 565.641615][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 565.702429][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 565.716080][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 565.772079][ T5160] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 565.786380][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 565.786401][ T29] audit: type=1326 audit(1720522385.722:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10706 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 565.845516][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 565.897271][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 565.909503][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 565.922222][ T5160] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 565.929863][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 565.942711][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 565.954187][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 565.969350][ T5160] usb 3-1: string descriptor 0 read error: -22 [ 565.976903][ T5160] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 565.986326][ T5160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.995634][ T29] audit: type=1326 audit(1720522385.722:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10706 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 566.022328][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1111'. [ 566.062111][ T29] audit: type=1326 audit(1720522385.722:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10706 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 566.074904][ T5160] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 566.105806][ T5182] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 566.184957][ T29] audit: type=1326 audit(1720522385.722:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10706 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 566.208378][ T29] audit: type=1326 audit(1720522385.722:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10706 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 566.232663][ T29] audit: type=1326 audit(1720522385.722:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10706 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 566.256270][ T29] audit: type=1326 audit(1720522385.722:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10706 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 566.340207][ T5182] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 566.358765][ T29] audit: type=1326 audit(1720522385.722:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10706 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 566.395094][T10702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.418674][T10702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.434517][ T5182] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.448376][ T29] audit: type=1326 audit(1720522385.722:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10706 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 566.472459][ T5182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.502914][ T5182] usb 4-1: Manufacturer: Ḩ [ 566.514081][ T5182] usb 4-1: SerialNumber: syz [ 566.686950][ T29] audit: type=1326 audit(1720522385.722:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10706 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7f69975bd9 code=0x7ffc0000 [ 567.099057][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.157203][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.188810][ T9801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.367147][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.388614][T10729] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 567.404549][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.451011][ T5108] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 567.459651][ T5108] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 567.623232][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 567.643496][ T4485] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 567.689426][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.612636][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.804448][T10740] sctp: [Deprecated]: syz.1.1114 (pid 10740) Use of int in maxseg socket option. [ 568.804448][T10740] Use struct sctp_assoc_value instead [ 568.830231][ T5182] cdc_ncm 4-1:1.0: bind() failure [ 568.866138][ T5182] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 568.917710][ T5182] cdc_ncm 4-1:1.1: bind() failure [ 568.940999][ T5182] usb 4-1: USB disconnect, device number 14 [ 568.952643][ T5283] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 569.156349][ T5283] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 569.194665][ T5282] usb 3-1: USB disconnect, device number 13 [ 569.230015][ T5283] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 569.262475][T10748] bond0: (slave erspan0): Opening slave failed [ 569.332817][ T4485] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 569.429600][ T5283] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 569.558158][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.800894][T10738] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 570.130032][ T4485] Bluetooth: hci2: unexpected event 0x17 length: 14 > 6 [ 570.193299][T10738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.292593][T10763] input: syz0 as /devices/virtual/input/input33 [ 570.394078][T10738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.442517][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'. [ 570.497912][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1125'. [ 570.578246][ T4485] Bluetooth: hci6: unexpected event for opcode 0x0c6d [ 571.774596][ T5108] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 571.788658][ T5108] Bluetooth: hci4: Injecting HCI hardware error event [ 571.799956][ T5108] Bluetooth: hci4: hardware error 0x00 [ 572.299976][T10781] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 572.773521][T10790] loop1: detected capacity change from 0 to 256 [ 572.858875][ T6074] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 572.947047][ T4485] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 573.048981][ T4485] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 573.240699][T10793] loop1: detected capacity change from 0 to 1764 [ 573.964750][ T45] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 574.061831][ T5283] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 574.148849][ T5283] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input32 [ 574.222661][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 574.264562][ T5108] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 574.501660][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'. [ 574.501942][ T45] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 574.797502][ C1] ------------[ cut here ]------------ [ 574.804276][ C1] WARNING: CPU: 1 PID: 1038 at kernel/kcov.c:871 kcov_remote_start+0x5a2/0x7e0 [ 574.813246][ C1] Modules linked in: [ 574.817156][ C1] CPU: 1 PID: 1038 Comm: kworker/u8:6 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 574.827404][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 574.837469][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 574.843750][ C1] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 574.849495][ C1] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 66 cd ef 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 574.869119][ C1] RSP: 0018:ffffc90000a18250 EFLAGS: 00010002 [ 574.875208][ C1] RAX: 0000000000010101 RBX: ffff888021cada00 RCX: 0000000000000002 [ 574.883193][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe980 [ 574.891184][ C1] RBP: 0100000000000005 R08: ffffffff92fa75ef R09: 1ffffffff25f4ebd [ 574.899175][ C1] R10: dffffc0000000000 R11: fffffbfff25f4ebe R12: ffffffff8196315e [ 574.907264][ C1] R13: ffff88802a3eec00 R14: 0000000000000006 R15: ffff8880b952d4c8 [ 574.915255][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 574.924229][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.930832][ C1] CR2: 00007f4e037ddfa8 CR3: 000000007eb38000 CR4: 0000000000350ef0 [ 574.938819][ C1] Call Trace: [ 574.942107][ C1] [ 574.944960][ C1] ? __warn+0x163/0x4e0 [ 574.949160][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 574.954301][ C1] ? report_bug+0x2b3/0x500 [ 574.958830][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 574.963970][ C1] ? handle_bug+0x3e/0x70 [ 574.968335][ C1] ? exc_invalid_op+0x1a/0x50 [ 574.973043][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 574.978101][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 574.983332][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 574.988467][ C1] ? usb_unanchor_urb+0xa3/0xc0 [ 574.993352][ C1] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 574.999110][ C1] __usb_hcd_giveback_urb+0x405/0x6e0 [ 575.004516][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 575.010439][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 575.015672][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.021332][ C1] dummy_timer+0x830/0x45d0 [ 575.025872][ C1] ? __pfx_lock_release+0x10/0x10 [ 575.030940][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 575.037280][ C1] ? __hrtimer_run_queues+0x477/0xd50 [ 575.042665][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.048292][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 575.053507][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 575.058458][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 575.063406][ C1] __hrtimer_run_queues+0x59d/0xd50 [ 575.068644][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 575.074387][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.080027][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 575.086112][ C1] hrtimer_interrupt+0x396/0x990 [ 575.091096][ C1] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 575.097103][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 575.102753][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 575.108763][ C1] RIP: 0010:kcov_remote_start+0x2e/0x7e0 [ 575.114415][ C1] Code: 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 65 48 8b 1c 25 c0 d4 03 00 48 b8 00 00 00 00 ff ff ff 00 48 85 c7 74 17 90 0f 0b 90 <48> 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0a 10 1a 0a 48 89 fd [ 575.134038][ C1] RSP: 0018:ffffc90000a189f0 EFLAGS: 00000206 [ 575.140119][ C1] RAX: 57e4e011d8e92800 RBX: ffff888021cada00 RCX: ffffffff8172da6a [ 575.148098][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c1fe980 [ 575.156080][ C1] RBP: ffff8880b952d4c8 R08: ffffffff92fa75ef R09: 1ffffffff25f4ebd [ 575.164143][ C1] R10: dffffc0000000000 R11: fffffbfff25f4ebe R12: 0000000000040000 [ 575.172118][ C1] R13: ffff88801e83d140 R14: 0000000000000206 R15: ffff8880796bc300 [ 575.180105][ C1] ? mark_lock+0x9a/0x350 [ 575.184462][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 575.189507][ C1] ieee80211_rx_list+0x797/0x3780 [ 575.194568][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.200214][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 575.205259][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.210902][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 575.216378][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.222021][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.227664][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.233307][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 575.238341][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.243979][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 575.249976][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 575.256327][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 575.261371][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 575.266330][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 575.272697][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 575.278209][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.283937][ C1] ? skb_dequeue+0x113/0x150 [ 575.288549][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 575.294569][ C1] tasklet_action_common+0x323/0x4d0 [ 575.299876][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 575.305704][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 575.312063][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.317709][ C1] ? workqueue_softirq_action+0xca/0x140 [ 575.323359][ C1] handle_softirqs+0x2c6/0x970 [ 575.328133][ C1] ? do_softirq+0x11b/0x1e0 [ 575.332735][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 575.338056][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.343710][ C1] do_softirq+0x11b/0x1e0 [ 575.348049][ C1] [ 575.350977][ C1] [ 575.353909][ C1] ? __pfx_do_softirq+0x10/0x10 [ 575.358764][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 575.364409][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.370045][ C1] ? rcu_is_watching+0x15/0xb0 [ 575.374821][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 575.380030][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.385667][ C1] ? ieee80211_xmit+0x30f/0x3f0 [ 575.390520][ C1] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 575.396515][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 575.402242][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.407882][ C1] ? __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 575.413885][ C1] ieee80211_handle_roc_started+0x267/0x440 [ 575.419786][ C1] ? ieee80211_handle_roc_started+0x14f/0x440 [ 575.425884][ C1] _ieee80211_start_next_roc+0x7a1/0xb00 [ 575.431549][ C1] cfg80211_wiphy_work+0x223/0x260 [ 575.436687][ C1] ? process_scheduled_works+0x945/0x1830 [ 575.442411][ C1] process_scheduled_works+0xa2e/0x1830 [ 575.447994][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 575.453995][ C1] ? assign_work+0x364/0x3d0 [ 575.458601][ C1] worker_thread+0x86d/0xd50 [ 575.463216][ C1] ? __kthread_parkme+0x169/0x1d0 [ 575.468252][ C1] ? __pfx_worker_thread+0x10/0x10 [ 575.473372][ C1] kthread+0x2f2/0x390 [ 575.477454][ C1] ? __pfx_worker_thread+0x10/0x10 [ 575.482571][ C1] ? __pfx_kthread+0x10/0x10 [ 575.487177][ C1] ret_from_fork+0x4d/0x80 [ 575.491607][ C1] ? __pfx_kthread+0x10/0x10 [ 575.496208][ C1] ret_from_fork_asm+0x1a/0x30 [ 575.501008][ C1] [ 575.504040][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 575.511319][ C1] CPU: 1 PID: 1038 Comm: kworker/u8:6 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 575.521555][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 575.531610][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 575.537884][ C1] Call Trace: [ 575.541164][ C1] [ 575.544007][ C1] dump_stack_lvl+0x241/0x360 [ 575.548719][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.553943][ C1] ? __pfx__printk+0x10/0x10 [ 575.558549][ C1] ? _printk+0xd5/0x120 [ 575.562726][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.568363][ C1] ? vscnprintf+0x5d/0x90 [ 575.572701][ C1] panic+0x349/0x860 [ 575.576612][ C1] ? __warn+0x172/0x4e0 [ 575.580783][ C1] ? __pfx_panic+0x10/0x10 [ 575.585209][ C1] ? show_trace_log_lvl+0x4e6/0x520 [ 575.590436][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 575.595398][ C1] __warn+0x346/0x4e0 [ 575.599400][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 575.604530][ C1] report_bug+0x2b3/0x500 [ 575.608877][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 575.614005][ C1] handle_bug+0x3e/0x70 [ 575.618187][ C1] exc_invalid_op+0x1a/0x50 [ 575.622712][ C1] asm_exc_invalid_op+0x1a/0x20 [ 575.627584][ C1] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 575.633312][ C1] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 66 cd ef 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 575.652922][ C1] RSP: 0018:ffffc90000a18250 EFLAGS: 00010002 [ 575.659013][ C1] RAX: 0000000000010101 RBX: ffff888021cada00 RCX: 0000000000000002 [ 575.666996][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe980 [ 575.674974][ C1] RBP: 0100000000000005 R08: ffffffff92fa75ef R09: 1ffffffff25f4ebd [ 575.682949][ C1] R10: dffffc0000000000 R11: fffffbfff25f4ebe R12: ffffffff8196315e [ 575.690922][ C1] R13: ffff88802a3eec00 R14: 0000000000000006 R15: ffff8880b952d4c8 [ 575.698913][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 575.703976][ C1] ? usb_unanchor_urb+0xa3/0xc0 [ 575.708860][ C1] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 575.714605][ C1] __usb_hcd_giveback_urb+0x405/0x6e0 [ 575.719994][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 575.725905][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 575.731119][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.736765][ C1] dummy_timer+0x830/0x45d0 [ 575.741287][ C1] ? __pfx_lock_release+0x10/0x10 [ 575.746338][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 575.752672][ C1] ? __hrtimer_run_queues+0x477/0xd50 [ 575.758071][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.763707][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 575.769022][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 575.773975][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 575.778922][ C1] __hrtimer_run_queues+0x59d/0xd50 [ 575.784160][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 575.789897][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.795535][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 575.801615][ C1] hrtimer_interrupt+0x396/0x990 [ 575.806596][ C1] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 575.812601][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 575.818251][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 575.824252][ C1] RIP: 0010:kcov_remote_start+0x2e/0x7e0 [ 575.829892][ C1] Code: 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 65 48 8b 1c 25 c0 d4 03 00 48 b8 00 00 00 00 ff ff ff 00 48 85 c7 74 17 90 0f 0b 90 <48> 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0a 10 1a 0a 48 89 fd [ 575.849504][ C1] RSP: 0018:ffffc90000a189f0 EFLAGS: 00000206 [ 575.855582][ C1] RAX: 57e4e011d8e92800 RBX: ffff888021cada00 RCX: ffffffff8172da6a [ 575.863557][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c1fe980 [ 575.871543][ C1] RBP: ffff8880b952d4c8 R08: ffffffff92fa75ef R09: 1ffffffff25f4ebd [ 575.879518][ C1] R10: dffffc0000000000 R11: fffffbfff25f4ebe R12: 0000000000040000 [ 575.887589][ C1] R13: ffff88801e83d140 R14: 0000000000000206 R15: ffff8880796bc300 [ 575.895574][ C1] ? mark_lock+0x9a/0x350 [ 575.899928][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 575.904966][ C1] ieee80211_rx_list+0x797/0x3780 [ 575.910017][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.915746][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 575.920790][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.926432][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 575.931904][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.937543][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.943180][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.948820][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 575.953856][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.959494][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 575.965490][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 575.971836][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 575.976979][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 575.981958][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 575.988298][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 575.993778][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.999413][ C1] ? skb_dequeue+0x113/0x150 [ 576.004036][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 576.010063][ C1] tasklet_action_common+0x323/0x4d0 [ 576.015394][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 576.021215][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 576.027567][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.033208][ C1] ? workqueue_softirq_action+0xca/0x140 [ 576.038863][ C1] handle_softirqs+0x2c6/0x970 [ 576.043643][ C1] ? do_softirq+0x11b/0x1e0 [ 576.048161][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 576.053455][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.059101][ C1] do_softirq+0x11b/0x1e0 [ 576.063439][ C1] [ 576.066371][ C1] [ 576.069300][ C1] ? __pfx_do_softirq+0x10/0x10 [ 576.074157][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 576.079805][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.085441][ C1] ? rcu_is_watching+0x15/0xb0 [ 576.090215][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 576.095420][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.101057][ C1] ? ieee80211_xmit+0x30f/0x3f0 [ 576.105914][ C1] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 576.111908][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 576.117640][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.123281][ C1] ? __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 576.129283][ C1] ieee80211_handle_roc_started+0x267/0x440 [ 576.135184][ C1] ? ieee80211_handle_roc_started+0x14f/0x440 [ 576.141259][ C1] _ieee80211_start_next_roc+0x7a1/0xb00 [ 576.146924][ C1] cfg80211_wiphy_work+0x223/0x260 [ 576.152057][ C1] ? process_scheduled_works+0x945/0x1830 [ 576.157783][ C1] process_scheduled_works+0xa2e/0x1830 [ 576.163368][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 576.169363][ C1] ? assign_work+0x364/0x3d0 [ 576.173973][ C1] worker_thread+0x86d/0xd50 [ 576.178590][ C1] ? __kthread_parkme+0x169/0x1d0 [ 576.183627][ C1] ? __pfx_worker_thread+0x10/0x10 [ 576.188751][ C1] kthread+0x2f2/0x390 [ 576.192838][ C1] ? __pfx_worker_thread+0x10/0x10 [ 576.197958][ C1] ? __pfx_kthread+0x10/0x10 [ 576.202561][ C1] ret_from_fork+0x4d/0x80 [ 576.206992][ C1] ? __pfx_kthread+0x10/0x10 [ 576.211597][ C1] ret_from_fork_asm+0x1a/0x30 [ 576.216399][ C1] [ 576.219521][ C1] Kernel Offset: disabled [ 576.223962][ C1] Rebooting in 86400 seconds..