last executing test programs:

25m58.339228401s ago: executing program 32 (id=88):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4})

24m14.184208528s ago: executing program 33 (id=268):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4})
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1)

22m47.288494328s ago: executing program 34 (id=418):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
socket$kcm(0x11, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xb, 0x8, 0x6, 0x1, 0xffff8001}, 0x9, 0x2}, [{0x40, 0x7, 0x400, 0xf2, 0xe8f, 0x8}, {0xea00, 0xfffffc01, 0x2000004a, 0xfffff000, 0xd, 0x80007ff}, {0xffffa6a2, 0x29, 0x1ac, 0x0, 0x81, 0x7}, {0x2, 0xa, 0xf, 0x7, 0x9, 0x9}, {0x1, 0x3, 0x80000000, 0x2, 0x0, 0x7fffffff}, {0x0, 0xffffff01, 0x4, 0x4, 0xd, 0x9}, {0x2, 0x9, 0x5, 0x8, 0x5, 0x9}, {0x1e, 0x8000, 0x4, 0x10000, 0x10, 0x5a52}, {0x1, 0x4, 0x8, 0x4, 0x8, 0x1}, {0x6, 0x6, 0x800, 0x10000, 0x6, 0x300000}, {0x9, 0x1, 0x200, 0xf0, 0x3, 0xa00000}, {0x100, 0x2, 0x8, 0xc, 0x400, 0x2}, {0x800, 0x6, 0x6, 0xfffffff9, 0x8, 0x6428}, {0x8001, 0x8000, 0xf51, 0x400, 0x8000, 0xa}, {0x3, 0x5, 0x4, 0x1, 0xffffffff, 0x81}, {0x9, 0x0, 0x2, 0x90000, 0x6, 0xbeac}, {0x7f, 0x7, 0x10001, 0x7, 0x8000, 0xc6d0}, {0x7, 0x4, 0x200, 0xa, 0x1, 0x10000}, {0x0, 0x9, 0x7, 0x9, 0x7, 0x3}, {0x6, 0x800, 0x3, 0x401, 0xfffffbf5, 0x3}, {0x6, 0x3, 0x7f96, 0x8, 0x551, 0xbc}, {0x5, 0x7ff, 0x3ea, 0xe, 0xaf, 0xdec}, {0x6, 0xfffffff2, 0x7, 0x3}, {0x6, 0x1, 0x8, 0x2, 0x3, 0x80}, {0x116, 0x7, 0x101, 0x7fff, 0x401, 0x8}, {0x1, 0x7, 0x800, 0x3, 0x80000001, 0xffffffff}, {0x80, 0x2, 0x3, 0xffff, 0x79314002, 0xe}, {0x8, 0xffff7fff, 0x800, 0x32e, 0x3, 0x7}, {0xffff, 0xe, 0x7a, 0x4080000, 0x1, 0x7}, {0x3, 0x7, 0x80, 0x3, 0x1, 0x734b916e}, {0xfffffff8, 0x5, 0x5, 0xffffffff, 0xe, 0x50d}, {0x3, 0x400, 0x4, 0x1, 0x3316, 0x8}, {0x0, 0x140, 0x9, 0x7ff, 0x80000001, 0x1}, {0xffff0000, 0x1, 0x7fff, 0x7, 0xfff, 0xfff00000}, {0x81, 0x101, 0x2, 0x7, 0x2, 0x1acaa3e9}, {0x80, 0x5, 0xd0b, 0xd, 0x0, 0x3}, {0xc62, 0x80000001, 0x1, 0x8ae, 0xc, 0x100}, {0x3, 0xf9, 0x7, 0xec0, 0x200, 0xc80}, {0x2, 0x0, 0x7ff, 0x8c, 0x1000, 0xd}, {0x7, 0xb701, 0x10000, 0x6, 0x1, 0x8}, {0x6, 0x1, 0x8, 0x101, 0x8000, 0x1}, {0x40, 0x3c6b000, 0x7, 0x8, 0x1, 0x7}, {0x1, 0xffff, 0x9, 0x4, 0x10000, 0x8001}, {0x40, 0x4, 0x9, 0xfffffff7, 0x3, 0x1}, {0x8, 0x1, 0xffff, 0x9, 0x90001, 0x401}, {0x0, 0xfffffff7, 0x4, 0x2, 0x3be3}, {0x80000000, 0x6, 0x9, 0x0, 0x7, 0x8}, {0xfe000000, 0x7ff, 0x2, 0x0, 0x8, 0x9}, {0x8, 0x9, 0x8, 0x6, 0x10001, 0x1}, {0x4, 0x2, 0x1ff, 0x400, 0x1, 0x1}, {0x74f, 0x5, 0x1000, 0x2, 0x195a, 0x4}, {0x20, 0x9, 0x9, 0x1, 0x1, 0xaafe}, {0x3f, 0xfffffffa, 0xfff, 0x2, 0x8, 0x7ff}, {0x6c, 0xfffffffb, 0x6, 0x47, 0x4, 0xfffffffd}, {0x4, 0xb4ab, 0x8, 0x5, 0x3, 0x1}, {0x100, 0x0, 0x6, 0x5, 0x10002, 0x1000}, {0x1000, 0xc1db, 0x0, 0x6, 0x1, 0x5}, {0x4, 0x87c, 0x9df, 0x4, 0xbf55}, {0x3, 0x1000, 0x8001, 0x1, 0x6, 0x1000}, {0x14e5, 0x3f54, 0xfffffffb, 0x9, 0x7, 0xe482}, {0x3, 0xffff, 0x7, 0x800, 0x1d, 0x4}, {0xfff, 0x7fffffff, 0x9, 0x10000, 0x2, 0x8}, {0x9b, 0x6, 0x7fff, 0xfffffffb, 0x2, 0x3c}, {0x5, 0x7ff, 0x6, 0x40, 0xf, 0x6}, {0x4, 0x9, 0x2400000, 0x2, 0x6, 0x4}, {0x6, 0x0, 0x40, 0x201a861c, 0x8, 0x8}, {0x5fe, 0xfffffffa, 0x1000, 0x6, 0xfff}, {0x4, 0x1000, 0x8, 0xbc34, 0x5, 0xe6}, {0x8, 0xec54, 0x8000, 0x7, 0x8, 0x6}, {0xc4, 0x7, 0x7ff, 0x6, 0x4, 0x98}, {0x8, 0x8001, 0x5, 0x7fffffff, 0xcea8, 0xff}, {0x5, 0x400, 0x6, 0x1, 0xfffffff9, 0x2}, {0xffdf, 0xfffffffe, 0x80, 0x5, 0x57f, 0x8}, {0x6, 0x2, 0x1, 0x5, 0x4}, {0x1ff, 0x8000, 0x1, 0x80000001, 0x80, 0x7}, {0x3, 0x235, 0x0, 0x4, 0x100, 0x7}, {0x7, 0x8f9, 0x4, 0xb, 0xfbc, 0x3}, {0x2, 0x7, 0xd, 0x7, 0x9, 0x5}, {0x2, 0x9, 0x3, 0x3, 0x740, 0x3}, {0xfffff0ab, 0x8c6a, 0x2000, 0x0, 0x8, 0x4}, {0x6, 0x8, 0x1, 0x1000, 0x200, 0x8}, {0x800, 0x7, 0x800, 0x3ff, 0x800, 0x8000}, {0x7fff, 0x5, 0x5, 0x3, 0xa000, 0xe}, {0x6, 0x9, 0xb, 0x8, 0x8, 0x479}, {0x7fffffff, 0x0, 0x1, 0x6, 0x8001, 0x10000}, {0x1, 0x8, 0x6, 0x0, 0x8, 0x7}, {0x4, 0x4, 0x80000001, 0x3, 0x8001, 0xf7}, {0x3, 0x5, 0x3, 0x1, 0x4, 0x5}, {0xdd00, 0x7, 0xd, 0x1, 0x2, 0xa79f}, {0x5, 0xfffffffd, 0xb9, 0x3, 0x6, 0x2}, {0x9, 0x5, 0x34400000, 0x401, 0x1, 0xffffffb2}, {0x401, 0x3ff, 0x0, 0x5d, 0x9, 0x8}, {0x6, 0x6, 0x2, 0x5, 0x0, 0x3}, {0x10, 0x7, 0x5, 0x4f, 0x20000000, 0x80000000}, {0x6, 0x96c, 0x0, 0xfffffff6, 0x7, 0x3ff}, {0x0, 0x4, 0x6, 0x2, 0x1, 0x5}, {0x8, 0xfffff2ca, 0x2, 0x5, 0x4, 0xe43}, {0x9, 0x0, 0xe67, 0x7f, 0x101, 0xc}, {0x0, 0xfffffff7, 0xfffffffc, 0x28a, 0x2, 0x6dd1}, {0x1, 0x4, 0x0, 0xd7, 0x1, 0x5}, {0x4, 0x3, 0x4e82, 0x6, 0x7f, 0x35c}, {0x0, 0x5, 0x8, 0x2, 0x10000, 0x5}, {0x4, 0x3, 0x0, 0xd, 0x5, 0x7}, {0x800, 0xf7, 0x0, 0x8, 0x0, 0x8e38}, {0x2000005, 0x40, 0xfa, 0x5, 0x43e, 0x5}, {0x2, 0x6, 0x5, 0x9, 0x2, 0x6d4}, {0x6, 0x0, 0x10000, 0x5, 0x7, 0x5}, {0xd, 0x9, 0x9, 0xd19, 0x3, 0x400}, {0x1000, 0xfffffffa, 0x0, 0x8001, 0xf00, 0x10001}, {0x10000, 0x4, 0xa, 0x72b, 0x0, 0x80000000}, {0x2, 0xf, 0x77, 0x100, 0xfe, 0x7}, {0x6, 0x8, 0x80000001, 0x3, 0x8, 0x9}, {0x5, 0x101, 0x3, 0x2, 0xa}, {0x3, 0x4, 0x3, 0x6, 0x6, 0x5}, {0x5, 0x7, 0x3, 0x1, 0x0, 0x8}, {0x7fffffff, 0x1, 0x7, 0x40, 0xc37, 0x9e}, {0x10000, 0x8, 0x1, 0x8, 0xb536, 0x9}, {0x1, 0xffffffc0, 0x7, 0x2, 0x3, 0xbf}, {0xc0a, 0xffffff1e, 0x5, 0xe, 0x90, 0x6}, {0x4, 0x7, 0x0, 0x0, 0x10, 0x1}, {0x100, 0x5, 0x6, 0x6, 0x8, 0x17f}, {0x47af, 0x8, 0x4, 0x2, 0x1, 0x8}, {0xa, 0x3, 0xb, 0x4, 0x5, 0x3}, {0x4, 0x7, 0x5, 0xba1b, 0xffff, 0xc87e}, {0x374f, 0x9, 0x5, 0xa, 0x1c87, 0xa2}, {0x3, 0x0, 0x5, 0x8000, 0x1ff, 0x7fffffff}, {0x0, 0x5104, 0x2, 0x7fffffff, 0x6, 0x7}, {0x101, 0x5c, 0x800, 0x6, 0x40, 0x8000}], [{0x5, 0x1}, {}, {0x2}, {0x4}, {0x3}, {0x4}, {0x2}, {0x6, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0xc9b7e1d7f2ad2980, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x3}, {}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x3}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x5}, {0x4}, {0x2}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x9, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

22m44.015995895s ago: executing program 35 (id=426):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40047452, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x1f670554a68f2231, 0x0)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f0000000040)={0xc9, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
gettid()
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpeername$unix(r3, 0x0, 0x0)
r5 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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")
socket$can_j1939(0x1d, 0x2, 0x7)
unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0)
r6 = socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f00000000c0)={'veth1_vlan\x00', {0x2, 0x4e21, @loopback}})
socket$can_raw(0x1d, 0x3, 0x1)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0)

22m41.066275746s ago: executing program 36 (id=430):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$sock_SIOCGIFINDEX(r0, 0x40047452, 0x0)
r2 = open(0x0, 0x1f670554a68f2231, 0x0)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f0000000040)={0xc9, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
gettid()
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpeername$unix(r4, 0x0, 0x0)
r6 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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")
socket$can_j1939(0x1d, 0x2, 0x7)
unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0)
r7 = socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f00000000c0)={'veth1_vlan\x00', {0x2, 0x4e21, @loopback}})
socket$can_raw(0x1d, 0x3, 0x1)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0)

20m4.491483332s ago: executing program 37 (id=667):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4})
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1)

19m20.705578131s ago: executing program 8 (id=776):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$igmp(0x2, 0x3, 0x2)
r0 = getpgid(0x0)
syz_open_procfs(r0, &(0x7f0000000240)='net/route\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
dup(r1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

19m20.133130318s ago: executing program 8 (id=780):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00))
chdir(0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

19m19.438015439s ago: executing program 8 (id=783):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

19m17.356480634s ago: executing program 8 (id=787):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x4000)

19m15.148570297s ago: executing program 8 (id=790):
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000b40)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3b, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x44}}, 0x4000010)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r6, &(0x7f0000000880)={0x2ee, 0x7d, 0x1, {{0x500, 0x1ad, 0x0, 0x15000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{cvfox%\x02\x00\x00\x00\x00\x001\xff\xad\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\"\x00}\xfag>\xff\xeb\t\xb51\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00/\xa9Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x01\x00\x00\x00', 0x12, '\xcf\xb6\x00'/18, 0x115, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\xffkz\xcf\x16\xb4{R\xcb;\"\xb3\xcdX@\x00~7\xf2\x0f\xdf6\xe1?x\xda\xae`H\x01\xebh\xb1[\xe7\xf6\xf52\xbd\xf4G`\xa9\xd3\xcd\x9e\xdb\x8c\xee\x86z\xe3\x8a\x92i\x02\xe2\x93n\xc9EL\xe5\xc5\a\xb5\x86\f@I!m\x1f?\xb7A\xaf\x1e.\x1b\x00\xe9F\xb9E\xf9x\xec\xa3\x06\x00\xf8\xd5kn\xef:\x9f\xc7\xc3\xd0\x10\'%\n\xdd\xe8\xa2\xe3]\xea\x04\x01\xbe*Y\xfe\x98?\v\xf3N\xab\xf9*M}y\xfe\x81|\x01\x0fU\x7f\xc7;P\xcdD\xac\x021\x8a\x8d \x0fI\xe1\x8d;\x88\x86\xb8\xa6\xf5T\xfc)@#p\xc0\xfc[\xbe\xeb\xb0\xde8R\x80\x8e\x12\xdc\xa3\x1c\xee\x9d\xb2\xf3#\xed\x82o\xe4\xfa-\xf3\xb9\xce\xaa'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x2ee)

19m11.585686437s ago: executing program 8 (id=795):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x3, &(0x7f0000000080)={0x12, "b3d92cdddf96c2069064264ccfc6000000fa00008c00"}})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001c00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0x17, 0x44, @random="85b4def362c5"}, 0x0, 0x0, 0x0, 0x0, 0x0})

18m55.796780885s ago: executing program 38 (id=795):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x3, &(0x7f0000000080)={0x12, "b3d92cdddf96c2069064264ccfc6000000fa00008c00"}})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001c00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0x17, 0x44, @random="85b4def362c5"}, 0x0, 0x0, 0x0, 0x0, 0x0})

10m35.477061225s ago: executing program 1 (id=2170):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1})
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x20004080)
listen(r1, 0x5)
inotify_init()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80)
mknod$loop(0x0, 0x0, 0x1)
socket(0xa, 0x3, 0x3a)
sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "03"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10m33.434119277s ago: executing program 1 (id=2175):
syz_open_procfs$namespace(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0)
openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11}, 0xa)

10m32.187571653s ago: executing program 1 (id=2178):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x8001}}, 0x1, 0xc7}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffc, 0x2000000, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x2, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route_sched(r8, 0x0, 0x10000084)
sendmsg$nl_route(r5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)

10m29.885181654s ago: executing program 1 (id=2182):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/18, @ANYBLOB="1502000000001000140012800a00010069706f69620000000400028008000500", @ANYRESOCT], 0x3c}, 0x1, 0xba01}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x5, 0x0, 0x700, 0x25dfdbfc, [@sadb_address={0x3, 0xba9843f318e627b5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x28}, 0x1, 0x7}, 0x800)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

10m28.420493767s ago: executing program 1 (id=2189):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
socket(0x10, 0x80002, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

10m28.034654589s ago: executing program 1 (id=2191):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)

10m11.868683663s ago: executing program 39 (id=2191):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)

7m32.88035569s ago: executing program 9 (id=2666):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$sock_SIOCGIFINDEX(r0, 0x40047452, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
gettid()
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)
socket$can_j1939(0x1d, 0x2, 0x7)
unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0)
socket$kcm(0x29, 0x7, 0x0)

7m27.472174353s ago: executing program 9 (id=2686):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000006c0)={0x2c, @multicast2, 0x4e20, 0x1, 'sh\x00', 0x27, 0x9, 0x43}, 0x2c)
r1 = getpid()
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00000003060104aeaed2000200000105000100070000000000000000000000950000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_LINK_CREATE(0x8, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff, 0x17, 0x0, @val=@tracing={0x0, 0x4b61}}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000700)=0x20, 0x4)
r6 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
openat(r6, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x10010)

7m25.681176007s ago: executing program 9 (id=2690):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000002400)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x7, 0xc0, 0x9, 0x3], 0x1, 0x0, 0x0, [{}]}, 0x88)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7m21.256858512s ago: executing program 9 (id=2702):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000006c0)={0x2c, @multicast2, 0x4e20, 0x1, 'sh\x00', 0x27, 0x9, 0x43}, 0x2c)
r1 = getpid()
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00000003060104aeaed2000200000105000100070000000000000000000000950000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_LINK_CREATE(0x8, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff, 0x17, 0x0, @val=@tracing={0x0, 0x4b61}}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000700)=0x20, 0x4)
r6 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
openat(r6, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x10010)

7m20.081795866s ago: executing program 9 (id=2706):
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7})
io_setup(0x2, &(0x7f0000000000))
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x4008000)
recvmsg(r3, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
epoll_create(0x3)
write$P9_RSTATu(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e)
openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0)

7m17.400414291s ago: executing program 9 (id=2712):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xf)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x0)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)

7m0.049488518s ago: executing program 40 (id=2712):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xf)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x0)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)

6m43.381367557s ago: executing program 5 (id=2811):
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000070085"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108)
pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syslog(0x4, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0)
write(r4, &(0x7f00000003c0)='10', 0x2)
getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000080))
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c)
pipe2(&(0x7f0000000000), 0x80)

6m39.654232392s ago: executing program 5 (id=2818):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)={[{@creator={'creator', 0x3d, "91b6afda"}}, {@nls={'nls', 0x3d, 'cp866'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$eJzs3U1rXNcdB+DfHY9lywVbSezELQGLGNqmovaMxk3dbuqWUrQIJVDoKgSEPY6Ex0qQJkUJpVXft/0I6UJfoLvsAukiq3bdlbah0L12LvfOHWlsKYoUK5pR/Txw5pxzzz3nnvu/LzN3hJgAz6yFuTQ3UmRh7vX1sr612eltbXYeDstJziVpJM1BlmIlKT5J7mSQ8vVyYT1c8XnbefWzSx9de+vTNwe1Zp2q9RsH9TucjTplNsmZOj+u8e4+9XjFY3t4fRg4GLdHe2wcpftTXrfAJCgG75t7zCQXkpyvPwekvjs0TnZ2x+9IdzkAAAA4pS5tZzvruTjueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpUv/+f1GnxrA8m2L4+/9T9bLU5VPt43FPAAAAAAAAAACOwbXtbGc9F4f1R0X1N/9Xqsrl6vVreS9r6WY1N7KexfTTz2raSWZGBppaX+z3V9uH6Dm/b8/5k9lfAAAAAAAAAPg/9fss7P79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJkGRnBlkVbo8LM+k0UxyPslUud5G8q9h+TT7eNwTAAAAgBNwaTvbWc/FYf1RUT3zv1g995/Pe1lJP8vpp5du7lXfBQye+htbm53e1mbnYZn2jvvj/x5pGtWIGXz3sP+Wr1ZrTOd+lqslN3I376SXe2lUPUtXh/PZf16/K+dU/Kh2yJndq/Nyz/9a55NhporI2Z2ItOq5ldF47uBIHPHoPLmldho73/xc/gpifqHOy/3580THfH7k7Hvx4Egk3/vlv5eWeisPlu6vzU3OLn1JT0aiMxKJl56pSLSqSFzZqS/kZ/lF5jKbN7Ka5fwqi+mnm9n8tCot1udz+TpzcKTuPFZ744tmMlUfl8Fd9GhzeqXqezHL+Xneyb10czs/yK3czu3cynxaaY0c4SuHuOobR7vqr3+7Lkwn+UudT4Yyrs+NxHX0njtTtY0u2Y3S88d/b2x+oy6U2/hDnU+GJyPRHonECwdH4m+Pyte13sqD1aXFdw+5vW/VeXkd/Wmi3iXK8+X58mBVtcfPjrLthX3b2lXb5Z22xp62KzttX3SlTtWf4faONF+1vbRvW6dquzrStt/nLQAm3oXvXJia/s/0P6c/nP7j9NL06+d/cu72uZencvYfZ3/YbJ35ZuPl4u/5ML/Zff4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vLX3P3iw2Ot1VxUUFJ7Jwm/3bRr3nQn4qt3sP3z35tr7H3x3+eHi2923uyudW+3Oa7far3W+f/P+cq/bGrzudpga52yB47T7pj/umQAAAAAAAAAAAACHdRL/YDDufQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOt4W5NDdSpN260SrrW5udXpmG5d01m0kaSYpfJ8UnyZ0MUmZGhis+bzuvfnbpo2tvffrm7ljN4fqNg/odzkadMpvkTJ0f13h3n3q8YmcPy4BdHwYOxu1/AQAA//96kwu1")
socket$inet(0x2, 0x2, 0x1)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f00000000c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c756d61736b3d30303030303030303030303030303230303030303030372c636f6465706167653d3836302c73686f72746e616d653d6c6f77656b2c726f6469722c73686f72746e616d653d77696e6e742c6e66733d7374616c655f72772c696f638b61727365743d6b6f69382d722c666c7573682c6e6f6e756d7461696c3d302c00"], 0x81, 0x2ae, &(0x7f0000001980)="$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")
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000050, &(0x7f0000000300)={[{@barrier}, {@jqfmt_vfsv0}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nouser_xattr}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x1, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180))
file_getattr(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x18, 0x1000)

6m39.365229151s ago: executing program 5 (id=2819):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x25)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f00000012c0)=""/102376, 0x18fe8)
sched_setaffinity(r3, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f66, 0x0, 0x3, 0x20, 0x3}, 0x30, 0x1)
landlock_restrict_self(r5, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x7a)
syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
capset(&(0x7f00000010c0)={0x19980330}, &(0x7f0000001100)={0x2, 0x6, 0x0, 0x3, 0x200, 0x9})

6m37.853646821s ago: executing program 5 (id=2821):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10)
r3 = socket(0x2b, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x23, 0xb}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x6}, 0x50)
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000009c0)={0x3, 0x0, 0x4, 0x1b, 0x72, &(0x7f00000005c0)})
mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x100000d, 0x28011, 0xffffffffffffffff, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SET_IO_FLUSHER(0x41, 0x0)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)

6m25.121510081s ago: executing program 5 (id=2859):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x25)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f00000012c0)=""/102376, 0x18fe8)
sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
r5 = landlock_create_ruleset(0x0, 0x0, 0x1)
landlock_restrict_self(r5, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x7a)
syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
capset(&(0x7f00000010c0)={0x19980330}, &(0x7f0000001100)={0x2, 0x6, 0x0, 0x3, 0x200, 0x9})

6m23.554376548s ago: executing program 5 (id=2862):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$video4linux(0x0, 0x2a2, 0x101000)
syz_emit_ethernet(0x2a, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f00000003c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './sys/bus/platform/drivers/dummy_udc/bind\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

6m6.942406201s ago: executing program 41 (id=2862):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$video4linux(0x0, 0x2a2, 0x101000)
syz_emit_ethernet(0x2a, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f00000003c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './sys/bus/platform/drivers/dummy_udc/bind\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

15.001261586s ago: executing program 3 (id=3940):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f00000000c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c756d61736b3d30303030303030303030303030303230303030303030372c636f6465706167653d3836302c73686f72746e616d653d6c6f77656b2c726f6469722c73686f72746e616d653d77696e6e742c6e66733d7374616c655f72772c696f638b61727365743d6b6f69382d722c666c7573682c6e6f6e756d7461696c3d302c00"], 0x81, 0x2ae, &(0x7f0000001980)="$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")
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000050, &(0x7f0000000300)={[{@barrier}, {@jqfmt_vfsv0}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nouser_xattr}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000500)={{0xf6, 0xfe}, 'port0\x00', 0x57, 0x40800, 0x9, 0x10, 0x0, 0x801, 0x8, 0x0, 0x3, 0x7f})
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x1, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180))
file_getattr(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x18, 0x1000)

13.96500739s ago: executing program 3 (id=3942):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d40)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0x7, 0x5, 0x0, 0x5, 0x6, 0x5, 0x9, 0x800, 0x1, 0x8c8, 0x2, 0x6f8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

12.139745404s ago: executing program 4 (id=3949):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

11.834545869s ago: executing program 2 (id=3950):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d40)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0x7, 0x5, 0x0, 0x5, 0x6, 0x5, 0x9, 0x800, 0x1, 0x8c8, 0x2, 0x6f8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

11.832958906s ago: executing program 4 (id=3951):
epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8040480)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00})
socket(0x2b, 0x800, 0x7)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(r4, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r6, 0x0, 0x10, &(0x7f0000000080), 0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000002c0)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @broadcast, @initial, {0x9, 0xe}}, 0x0, 0x8c0, 0x2d, @val={0x10, 0x1, 0xed}, [{0xdd, 0xbe, "d0bc7b3992060bdc346ebe92ec482e3d6164666bc82390d0bc430d8078cb2dadb66c7a238e90e85fd076d6e02544d27f740177ed8675baaa04d2f8ba03656e5b0ac720a30fa256a8ab0a635fec1a92f6ed441972a3b1694eaf75755d6ef7e5b16e88ce6fd7bab3a9a6b2b5d970914e802812e7c6ca54b89c80230ee4d92d833ade417fe4557d3b0ac465b5709d89b9bdef0e151d96b79bf995349ea74b78d80c67a960d9cc76db366a815db17755c9e8fd7e84c92037747ff00c77778d09"}, {0xdd, 0x17, "61f2f1f99dd5c47f6530ebe14f5da01c21884a446c2ac0"}]}, 0xfa)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)

11.822096429s ago: executing program 0 (id=3952):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8044)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

10.84620342s ago: executing program 3 (id=3955):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000002400)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x7, 0xc0, 0x9, 0x3], 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000001280), 0x3)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4080, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x30}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="080000000208010200000000000000000a000001"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)

10.700029888s ago: executing program 6 (id=3956):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109})
mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)

9.761492928s ago: executing program 3 (id=3958):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e200"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r0}, 0x38)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
socket$netlink(0x10, 0x3, 0x13)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001"], 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20004845}, 0x90)

8.984219782s ago: executing program 0 (id=3960):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r0}, 0x38)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
socket$netlink(0x10, 0x3, 0x13)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001"], 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20004845}, 0x90)

8.524990606s ago: executing program 6 (id=3961):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000002400)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x7, 0xc0, 0x9, 0x3], 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000001280), 0x3)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4080, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x30}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="080000000208010200000000000000000a000001"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)

8.365485509s ago: executing program 2 (id=3962):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
prctl$PR_PAC_RESET_KEYS(0x36, 0xa)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38)

7.493492754s ago: executing program 6 (id=3963):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1c, 0x800000000004, @tid=r0}, &(0x7f0000000180)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = userfaultfd(0x1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

7.46858815s ago: executing program 2 (id=3964):
syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0x1a}], 0x1, 0x81)

7.114391922s ago: executing program 6 (id=3965):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)

6.877958343s ago: executing program 6 (id=3967):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680))
syslog(0x3, &(0x7f0000000240)=""/4096, 0x1000)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005})
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x6})
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40045b0a, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1})
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)

5.683503225s ago: executing program 7 (id=3968):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="27050200340f3c0006000b2fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fbcb8bf7256da82f600102c21880b00000000010040570000000600000000000000", 0x47}, {0x0}], 0x2}, 0x9cdc2384056f0939)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0})

5.523926977s ago: executing program 0 (id=3969):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000002400)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x7, 0xc0, 0x9, 0x3], 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000001280), 0x3)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4080, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x30}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="080000000208010200000000000000000a000001"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)

5.469644895s ago: executing program 4 (id=3970):
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001010080100000000000001090224"], 0x0)
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xc9d3, 0x0, 0x0, 0x2}, &(0x7f00000005c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000007c0)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=<r5=>0x0)
syz_ublk_setup_queues(r0, r5, &(0x7f0000000740)={0x0, 0x145f, 0x420, 0x2, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x4000, 0x80, 0x188, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd576, 0x20, 0x1009, 0x27f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x40000, 0xffffffff, 0xed}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a5a, 0x1001, 0x2000003, 0x2a6, 0x0, r0}}], 0x4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r4, '\x00', {0x0, 0x487, 0x0, 0x0}}, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)

5.411997769s ago: executing program 7 (id=3971):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1fd)
sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce0", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x1c000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=""/12, 0xeb, 0xc, 0x0, 0x1, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x7, 0x8, 0x1, 0x40000, 0xffffffffffffffff, 0xff, '\x00', r4, r5}, 0x50)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000240)=""/1, 0xfffffffffffffe67, 0xc9100120, 0x0, 0x0)

4.311101982s ago: executing program 2 (id=3972):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='0', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f00000002c0)={0x0, @ctrl={0x0, 0x0, @value64}})
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
r5 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[], 0x20)
setrlimit(0x7, &(0x7f0000000400))
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xa8)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz0\x00', {0xff, 0x2, 0x4, 0xd}, 0x4b, [0x0, 0x0, 0x6, 0x6, 0xa2d3, 0x9, 0x0, 0x1, 0xe, 0x3bb1254d, 0x7fffffff, 0x1, 0x3, 0xffffff92, 0x0, 0x9690, 0xfff, 0x80, 0x22, 0x3, 0x3, 0xa, 0xfffffffd, 0x3, 0x3, 0x3, 0x2, 0xfffff000, 0x1c0000, 0x2b95, 0x8, 0x401, 0x95b, 0x9, 0x4, 0x4, 0x2, 0x0, 0xb, 0x6, 0x1, 0xebb, 0x8, 0x8001, 0x9, 0x2, 0x1, 0x4, 0x4, 0xef83, 0xffffff46, 0x7f, 0x401, 0x7ffffffe, 0x0, 0x32, 0x3, 0xffffff4f, 0x3, 0x81, 0x1, 0x2, 0xfffffff5, 0x7d6b], [0x6, 0x81, 0x6, 0xc, 0x5, 0xf4e, 0x1, 0x1, 0x1, 0x4, 0x2, 0xff, 0xb4f, 0x4, 0x1, 0xffffffff, 0x1, 0xa, 0xa0c, 0x2, 0x5, 0xa17, 0x80000001, 0x7, 0x6, 0x380, 0x10000005, 0xd, 0x6, 0x80, 0x40, 0xa, 0x200, 0x7ff, 0xeec, 0x3, 0x5f44, 0x4, 0x0, 0x2, 0x200, 0x9, 0x2, 0x8, 0x0, 0x1e4b, 0x81, 0x1, 0x5, 0x1, 0x521c, 0x6, 0x2fd, 0x3, 0xb, 0x3, 0xfc7, 0x4, 0x7, 0x7fffffff, 0x8, 0x4, 0x4, 0x8], [0x10, 0x3f5a, 0x8b, 0x4, 0x4, 0x7ff, 0x1, 0x9, 0x0, 0x6, 0x0, 0x7db8, 0x46, 0x2, 0x401, 0xc8, 0x5, 0x0, 0xdf, 0x7fff, 0x6, 0x88, 0x6e5, 0x105, 0x1, 0x8000, 0x100000, 0x3, 0x0, 0x8a53, 0x7, 0x0, 0x0, 0x1, 0x401, 0x8, 0x2, 0x1, 0xff, 0x6, 0xab, 0x3, 0x2, 0x6, 0x9, 0x200020, 0x1, 0xff, 0x8000, 0x8, 0x8, 0x2, 0x9, 0x3, 0x7f80f4e6, 0x30c, 0x4, 0xa4, 0x41, 0x4, 0x777a, 0x8, 0x6, 0xa24c], [0x80000000, 0xca, 0xffffffff, 0x0, 0xcac1, 0xeffa, 0x3, 0x3, 0x1000, 0xa, 0xfffffff4, 0x101, 0x1, 0x7, 0x7, 0xf800, 0x2215, 0x4, 0x4, 0xb280, 0x7fff, 0x8, 0x9, 0x4000, 0x8001, 0x5, 0x7, 0xb015, 0xcf, 0xc, 0x2, 0x6, 0xc, 0x63, 0x8, 0x9, 0x1, 0xc8000000, 0x7fffffff, 0x4c, 0x6, 0x2, 0x4dbc, 0x8, 0x8, 0x4, 0x9, 0x5, 0xffffffff, 0xae0, 0x3, 0x8, 0x1, 0x4, 0x7fffffff, 0x3, 0xfffffffc, 0x7, 0x9, 0x82fc, 0xffff, 0x3, 0x6, 0xd]}, 0x45c)
modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=ANY=[@ANYBLOB="440000001000602b00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0)

4.264083869s ago: executing program 0 (id=3973):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000000c0)={{0xfffff582, 0x1}, 0x100, '\xe9\x1fq\x89Y\x1e\x923aK\x00'})
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)

3.749112636s ago: executing program 7 (id=3974):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
socket$unix(0x1, 0x5, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000640)={{0x77359400}, {0x77359400}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000080)=""/51, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0xc8)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)

3.718850759s ago: executing program 0 (id=3975):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
pipe(0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/kcm\x00')
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000011)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r3, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0x4000000002})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a00", @ANYRES64=r0], 0x38}}, 0x4)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioperm(0x0, 0x9, 0x20)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x400, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000380)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, 0x0, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x3, 0x86, 0x0, r4}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x1000, 0x1ffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed82, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f44, 0x20000, 0x1, 0x5d, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1d28, 0x8200, 0x0, 0x367}}], 0x1, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=ANY=[], 0x48)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

3.705927301s ago: executing program 3 (id=3976):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
prctl$PR_PAC_RESET_KEYS(0x36, 0xa)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38)

3.69105594s ago: executing program 2 (id=3977):
socket$inet_tcp(0x2, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x803, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x20)
r1 = fsmount(r0, 0x0, 0x88)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0x20)

2.954964087s ago: executing program 2 (id=3978):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffb]}, 0x0, 0x8)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000600), 0x161a02, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)

2.830359642s ago: executing program 6 (id=3979):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x20008094)
mmap(&(0x7f000060c000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x53a3d000)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x24044840}, 0x8000)
socket$inet(0xa, 0x801, 0x84)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/190, 0xbe}, {&(0x7f0000000600)=""/211, 0xd3}], 0x2, 0x47, 0x548)
syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f000022b000/0x3000)=nil, 0x0, 0x0, r2}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10)
r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000300)}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\''], 0x50)
io_uring_enter(r3, 0x2219, 0x1adf, 0x16, 0x0, 0x0)

2.698235788s ago: executing program 7 (id=3980):
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000080))
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c)

2.652921499s ago: executing program 3 (id=3981):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r0}, 0x38)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
socket$netlink(0x10, 0x3, 0x13)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001"], 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20004845}, 0x90)

2.602542531s ago: executing program 4 (id=3982):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000002400)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x7, 0xc0, 0x9, 0x3], 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000001280), 0x3)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4080, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x30}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="080000000208010200000000000000000a000001"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)

2.44684884s ago: executing program 0 (id=3983):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e200"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r0}, 0x38)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
socket$netlink(0x10, 0x3, 0x13)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001"], 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20004845}, 0x90)

708.429325ms ago: executing program 7 (id=3984):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

597.019377ms ago: executing program 4 (id=3985):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r1})
ioctl(r0, 0x3b8e, &(0x7f0000000580))
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]})
close_range(r2, 0xffffffffffffffff, 0x0)

386.939667ms ago: executing program 7 (id=3986):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$video4linux(0x0, 0x2a2, 0x101000)
syz_emit_ethernet(0x2a, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(r3, 0x1, &(0x7f00000003c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './sys/bus/platform/drivers/dummy_udc/bind\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

0s ago: executing program 4 (id=3987):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8044)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

kernel console output (not intermixed with test programs):

rom the interface descriptor's value: 9
[ 1513.328618][T16760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1513.379923][T16760] usb 1-1: config 0 descriptor??
[ 1514.073118][T16760] usbhid 1-1:0.0: can't add hid device: -71
[ 1514.095494][T16760] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1514.850756][ T5606] usb 3-1: Firmware version (0.0) predates our first public release.
[ 1514.884594][ T5606] usb 3-1: Please update to version 0.2 or newer
[ 1514.898368][T16760] usb 1-1: USB disconnect, device number 16
[ 1515.042525][ T5606] usb 3-1: USB disconnect, device number 14
[ 1515.078552][T22233] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3400'.
[ 1515.368193][T22236] tipc: Started in network mode
[ 1515.419088][T22236] tipc: Node identity d20b9f0bb786, cluster identity 4711
[ 1515.444311][T22236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1515.469827][T22237] syzkaller0: entered promiscuous mode
[ 1515.493826][T22237] syzkaller0: entered allmulticast mode
[ 1515.768200][T22240] loop0: detected capacity change from 0 to 40427
[ 1515.784269][T22240] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1515.785067][T22236] tipc: Resetting bearer <eth:syzkaller0>
[ 1515.792087][T22240] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1515.810837][T22240] F2FS-fs (loop0): invalid crc value
[ 1515.924544][T22240] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1515.937126][T16760] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1515.949676][T22240] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1515.956767][T22240] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1515.984039][T22234] tipc: Resetting bearer <eth:syzkaller0>
[ 1516.860603][T22234] tipc: Disabling bearer <eth:syzkaller0>
[ 1516.907178][T16760] usb 4-1: Using ep0 maxpacket: 16
[ 1516.923248][T22249] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1517.015297][ T5606] tipc: Node number set to 1703780107
[ 1517.754625][T22257] netlink: 'syz.2.3406': attribute type 10 has an invalid length.
[ 1518.535399][T16760] usb 4-1: device descriptor read/all, error -71
[ 1519.250033][T22278] overlayfs: overlapping lowerdir path
[ 1520.063840][ T5606] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1520.344148][ T5606] usb 5-1: Using ep0 maxpacket: 16
[ 1520.466206][ T5606] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1520.801224][ T5606] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1520.926921][ T5606] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1521.116124][T17612] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1521.687139][ T5606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1521.747114][ T5606] usb 5-1: Product: syz
[ 1521.776708][ T5606] usb 5-1: Manufacturer: syz
[ 1521.810175][ T5606] usb 5-1: SerialNumber: syz
[ 1521.844885][ T5606] usb 5-1: config 0 descriptor??
[ 1522.079222][T17612] usb 3-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00
[ 1522.089735][T17612] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1522.100030][T17612] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1522.124049][T17612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1522.946056][T17612] usb 3-1: config 0 descriptor??
[ 1523.947172][T22322] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3425'.
[ 1524.349818][T22325] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000
[ 1524.397949][T17612] usb 3-1: USB disconnect, device number 15
[ 1524.404781][T16760] usb 5-1: USB disconnect, device number 9
[ 1525.728529][T22337] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[ 1528.032361][T22350] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3433'.
[ 1531.471136][T22359] fuse: fd is not a fuse device
[ 1531.854356][T22367] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1531.882499][T22371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3441'.
[ 1532.418198][T22381] input: syz0 as /devices/virtual/input/input42
[ 1533.284472][T22394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3447'.
[ 1533.336320][T22394] loop2: detected capacity change from 0 to 164
[ 1534.195546][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1534.201949][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1534.558539][T22400] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3449'.
[ 1534.616277][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3449'.
[ 1534.957563][ T5606] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1535.167654][ T5606] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1535.201953][ T5606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1535.258552][ T5606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1535.310307][ T5606] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1535.345100][T22408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3454'.
[ 1535.369759][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1535.449479][ T5606] usb 4-1: config 0 descriptor??
[ 1535.482449][T16282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1535.496974][T16282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1535.509392][T16282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1535.517567][T16282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1535.525377][T16282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1535.953886][T22416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3456'.
[ 1536.154463][T22402] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1536.261810][T22422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3457'.
[ 1536.350704][T22422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3457'.
[ 1536.708114][T22432] loop2: detected capacity change from 0 to 1024
[ 1536.756254][T12321] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1537.278716][T12321] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1537.287010][T12321] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1537.301320][T12321] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1537.315384][T12321] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1537.336858][T12321] usb 7-1: Product: syz
[ 1537.348175][T12321] usb 7-1: Manufacturer: syz
[ 1537.360550][T12321] usb 7-1: SerialNumber: syz
[ 1537.475516][ T5606] usbhid 4-1:0.0: can't add hid device: -71
[ 1537.507548][ T5606] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1537.567791][ T5606] usb 4-1: USB disconnect, device number 18
[ 1537.688239][T12321] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1537.828587][T16282] Bluetooth: hci2: command tx timeout
[ 1537.873954][T12321] usb 7-1: 2:1 : no UAC_FORMAT_TYPE desc
[ 1539.576347][T22464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3470'.
[ 1539.652190][ T9163] bond0: (slave netdevsim1): Releasing backup interface
[ 1540.035177][ T5762] usb 7-1: USB disconnect, device number 15
[ 1540.071843][T16282] Bluetooth: hci2: command tx timeout
[ 1540.904946][T16760] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 1541.100257][T16760] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1541.139788][T16760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1541.363125][T16760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1542.194381][T16760] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1542.267199][T16760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1542.329940][T16760] usb 4-1: config 0 descriptor??
[ 1542.334145][T16282] Bluetooth: hci2: command tx timeout
[ 1543.187792][T22513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3482'.
[ 1543.670293][T22485] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1543.732830][ T9163] erspan0: left allmulticast mode
[ 1543.739963][ T9163] erspan0: left promiscuous mode
[ 1543.746726][ T9163] bridge0: port 3(erspan0) entered disabled state
[ 1543.846402][ T9163] bridge_slave_1: left allmulticast mode
[ 1543.875528][ T9163] bridge_slave_1: left promiscuous mode
[ 1544.000206][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1544.138791][T22527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3486'.
[ 1544.157024][T22527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3486'.
[ 1544.652970][T16282] Bluetooth: hci2: command tx timeout
[ 1544.849340][ T9163] bridge_slave_0: left allmulticast mode
[ 1544.905777][ T9163] bridge_slave_0: left promiscuous mode
[ 1544.964907][T16760] usbhid 4-1:0.0: can't add hid device: -71
[ 1544.984618][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1545.006022][T16760] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1545.039396][ T9163] dvmrp8: left allmulticast mode
[ 1545.118327][T16757] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[ 1545.161837][T16760] usb 4-1: USB disconnect, device number 19
[ 1545.555215][T22540] 9pnet_fd: Insufficient options for proto=fd
[ 1546.266475][T16757] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1546.280340][T16757] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[ 1546.295453][T16757] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 4
[ 1546.307145][T16757] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1023
[ 1546.318817][T16757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1546.385785][T16757] usb 7-1: config 0 descriptor??
[ 1546.653937][T16757] ath6kl: Failed to submit usb control message: -71
[ 1546.666848][T16757] ath6kl: unable to send the bmi data to the device: -71
[ 1546.694796][T16757] ath6kl: Unable to send get target info: -71
[ 1546.710413][T16757] ath6kl: Failed to init ath6kl core: -71
[ 1546.785531][T16757] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1546.877463][T16757] usb 7-1: USB disconnect, device number 16
[ 1547.184563][ T9163] bond0 (unregistering): (slave geneve0): Releasing backup interface
[ 1547.362665][ T9163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1547.466057][ T9163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1547.516104][ T9163] bond0 (unregistering): Released all slaves
[ 1547.581240][ T9163] bond1 (unregistering): Released all slaves
[ 1547.685562][ T9163] bond2 (unregistering): Released all slaves
[ 1547.716420][T22554] /dev/nullb0: Can't open blockdev
[ 1547.722777][T22554] /dev/nullb0: Can't open blockdev
[ 1547.806283][ T9163] bond3 (unregistering): Released all slaves
[ 1547.883339][ T9163] bond4 (unregistering): Released all slaves
[ 1547.996749][ T9163] bond5 (unregistering): Released all slaves
[ 1548.085812][ T9163] bond6 (unregistering): Released all slaves
[ 1548.180256][ T9163] bond7 (unregistering): Released all slaves
[ 1548.385522][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1549.020592][T22565] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3491'.
[ 1549.063258][T22565] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3491'.
[ 1549.287637][ T9163] IPVS: stopping backup sync thread 12326 ...
[ 1549.523592][T22409] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1549.580669][T22409] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1549.621988][T22409] bridge_slave_0: entered allmulticast mode
[ 1549.697803][T22409] bridge_slave_0: entered promiscuous mode
[ 1549.870075][T22409] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1550.079268][T22409] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1550.178040][T22581] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3493'.
[ 1550.219234][T22581] loop0: detected capacity change from 0 to 8
[ 1550.902604][T22409] bridge_slave_1: entered allmulticast mode
[ 1550.911844][T22409] bridge_slave_1: entered promiscuous mode
[ 1550.920306][T22581] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1550.928295][T22581] SQUASHFS error: Failed to read block 0x9b: -5
[ 1550.934670][T22581] SQUASHFS error: Unable to read metadata cache entry [99]
[ 1550.941853][T22581] SQUASHFS error: Unable to read inode 0x127
[ 1551.372160][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3495'.
[ 1551.574537][T22409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1551.649590][T16760] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1551.698018][ T9163] hsr_slave_0: left promiscuous mode
[ 1551.748354][ T9163] hsr_slave_1: left promiscuous mode
[ 1551.773374][ T9163] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1551.805886][ T9163] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1551.866892][T16760] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1551.923595][T16760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1551.993110][T16760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1552.950095][T16760] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1553.189578][T16760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1553.253395][T16760] usb 5-1: config 0 descriptor??
[ 1553.795547][T22606] 9pnet_fd: Insufficient options for proto=fd
[ 1554.551009][T22587] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1554.805313][ T5762] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1555.188222][ T9163] team0 (unregistering): Port device team_slave_1 removed
[ 1555.192055][ T5762] usb 1-1: Using ep0 maxpacket: 8
[ 1555.213841][ T5762] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1555.298169][T22631] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3506'.
[ 1555.357439][T22631] loop6: detected capacity change from 0 to 8
[ 1555.440224][T22631] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1555.448678][T22631] SQUASHFS error: Failed to read block 0x9b: -5
[ 1555.455120][T22631] SQUASHFS error: Unable to read metadata cache entry [99]
[ 1555.462481][T22631] SQUASHFS error: Unable to read inode 0x127
[ 1555.804044][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1555.840907][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1555.903212][ T5762] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1555.918675][ T9163] team0 (unregistering): Port device team_slave_0 removed
[ 1556.009132][T16760] usbhid 5-1:0.0: can't add hid device: -71
[ 1556.015127][ T5762] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173
[ 1556.024962][T16760] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1556.040846][T16760] usb 5-1: USB disconnect, device number 10
[ 1556.067443][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1556.089207][T22633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3508'.
[ 1556.144210][ T5762] usb 1-1: config 0 descriptor??
[ 1556.153171][T22637] loop4: detected capacity change from 0 to 512
[ 1556.249290][T22611] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1557.580334][T22637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1558.190756][T22637] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1558.528057][T16282] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[ 1558.546907][ T5762] usb 1-1: USB disconnect, device number 17
[ 1558.857972][T22409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1559.062852][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1559.271351][T22668] /dev/nullb0: Can't open blockdev
[ 1559.421911][T22667] gfs2: not a GFS2 filesystem
[ 1559.653757][T22409] team0: Port device team_slave_0 added
[ 1559.674047][T19960] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1559.767000][T22409] team0: Port device team_slave_1 added
[ 1559.860528][T22675] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size.
[ 1559.943920][T22409] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1559.975281][T22409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1560.061560][T22409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1560.181661][T22409] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1560.209286][T22409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1560.237756][T22680] loop4: detected capacity change from 0 to 1024
[ 1560.370221][T22409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1561.081716][T22409] hsr_slave_0: entered promiscuous mode
[ 1561.133007][T22409] hsr_slave_1: entered promiscuous mode
[ 1561.255312][ T9163] IPVS: stop unused estimator thread 0...
[ 1561.777734][T22701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3522'.
[ 1562.405765][ T5762] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1562.535742][T20213] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1562.568057][T17612] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1562.596317][ T5762] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1562.627517][ T5762] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1562.657759][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1562.693197][ T5762] usb 5-1: config 0 descriptor??
[ 1562.711709][T20213] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1562.729065][ T5762] pwc: Askey VC010 type 2 USB webcam detected.
[ 1562.745024][T20213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1562.771775][T20213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1562.792068][T17612] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1562.805099][T20213] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1562.828317][T17612] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1562.851150][T17612] usb 7-1: config 0 descriptor??
[ 1562.857482][T20213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1562.875486][T17612] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1562.961330][T20213] usb 4-1: config 0 descriptor??
[ 1563.172813][ T5762] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1563.193282][ T5762] pwc: recv_control_msg error -32 req 02 val 2700
[ 1563.211303][ T5762] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1563.232077][ T5762] pwc: recv_control_msg error -32 req 04 val 1000
[ 1563.256395][ T5762] pwc: recv_control_msg error -32 req 04 val 1300
[ 1563.273218][ T5762] pwc: recv_control_msg error -32 req 04 val 1400
[ 1563.307793][ T5762] pwc: recv_control_msg error -32 req 02 val 2000
[ 1563.336541][ T5762] pwc: recv_control_msg error -32 req 02 val 2100
[ 1563.577228][ T5762] pwc: recv_control_msg error -71 req 02 val 2500
[ 1563.608761][ T5762] pwc: recv_control_msg error -71 req 02 val 2400
[ 1563.661049][ T5762] pwc: recv_control_msg error -71 req 02 val 2600
[ 1563.669734][T22713] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1563.701713][ T5762] pwc: recv_control_msg error -71 req 02 val 2900
[ 1563.738903][ T5762] pwc: recv_control_msg error -71 req 02 val 2800
[ 1563.760258][ T5762] pwc: recv_control_msg error -71 req 04 val 1100
[ 1563.786995][ T5762] pwc: recv_control_msg error -71 req 04 val 1200
[ 1563.812612][ T5762] pwc: Registered as video103.
[ 1563.829324][ T5762] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43
[ 1563.923180][ T5762] usb 5-1: USB disconnect, device number 11
[ 1564.174243][T22740] gfs2: not a GFS2 filesystem
[ 1564.185282][T22740] hpfs: Bad magic ... probably not HPFS
[ 1564.520270][T22409] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1564.548431][T22409] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1564.556855][T22409] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1564.599620][T22409] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1564.619697][T22409] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1564.671330][T22409] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1564.696265][T17612] gspca_stv06xx: I2C: Read error writing address: -71
[ 1564.710926][T22409] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1564.772550][T22409] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1564.993404][T20213] usbhid 4-1:0.0: can't add hid device: -71
[ 1565.004644][T17612] usb 7-1: USB disconnect, device number 17
[ 1565.029713][T20213] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1565.103328][T22753] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3531'.
[ 1565.836093][T22753] loop4: detected capacity change from 0 to 8
[ 1565.863689][T22753] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1565.871738][T22753] SQUASHFS error: Failed to read block 0x9b: -5
[ 1565.877988][T22753] SQUASHFS error: Unable to read metadata cache entry [99]
[ 1565.885327][T22753] SQUASHFS error: Unable to read inode 0x127
[ 1565.955880][T20213] usb 4-1: USB disconnect, device number 20
[ 1566.256959][T22756] loop3: detected capacity change from 0 to 1024
[ 1566.309744][T22409] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1566.829536][T20213] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1566.931016][T22765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3535'.
[ 1566.961264][T22409] 8021q: adding VLAN 0 to HW filter on device team0
[ 1567.029061][T14741] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1567.036331][T14741] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1567.046250][T20213] usb 7-1: Using ep0 maxpacket: 16
[ 1567.072687][T20213] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1567.116434][T20213] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[ 1567.147914][T20213] usb 7-1: config 0 has no interface number 0
[ 1567.166634][T20213] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1567.196225][T14741] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1567.203469][T14741] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1567.231491][T20213] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1567.255888][T20213] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1567.273963][T20213] usb 7-1: Product: syz
[ 1567.291717][T20213] usb 7-1: Manufacturer: syz
[ 1567.307072][T20213] usb 7-1: SerialNumber: syz
[ 1567.332835][T20213] usb 7-1: config 0 descriptor??
[ 1567.373748][T22761] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1567.399825][T22761] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1567.735368][T22761] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1567.783685][T22761] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1568.052129][T20213] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1568.096321][ T5840] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[ 1568.299900][ T5840] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1568.359795][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[ 1568.417251][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 4
[ 1568.470408][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1023
[ 1568.526415][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1568.585447][ T5840] usb 1-1: config 0 descriptor??
[ 1568.869642][ T5840] ath6kl: Failed to submit usb control message: -71
[ 1568.904482][ T5840] ath6kl: unable to send the bmi data to the device: -71
[ 1568.929627][ T5840] ath6kl: Unable to send get target info: -71
[ 1568.944311][T22810] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1568.979254][ T5840] ath6kl: Failed to init ath6kl core: -71
[ 1568.995934][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1569.070714][ T5840] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1569.203109][ T5840] usb 1-1: USB disconnect, device number 18
[ 1569.468229][T22409] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1569.889280][T22830] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3546'.
[ 1570.240978][T20213] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[ 1570.300676][T20213] asix 7-1:0.34: probe with driver asix failed with error -71
[ 1570.318824][T22844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3549'.
[ 1570.358226][T20213] usb 7-1: USB disconnect, device number 18
[ 1570.379450][T20212] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1570.858600][T20212] usb 1-1: device descriptor read/64, error -71
[ 1571.147597][T20212] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 1571.214345][T22409] veth0_vlan: entered promiscuous mode
[ 1571.290723][T22409] veth1_vlan: entered promiscuous mode
[ 1571.309568][T20212] usb 1-1: device descriptor read/64, error -71
[ 1571.407451][T20213] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 1571.600375][T20212] usb usb1-port1: attempt power cycle
[ 1571.937738][T22409] veth0_macvtap: entered promiscuous mode
[ 1571.952563][T22409] veth1_macvtap: entered promiscuous mode
[ 1571.982958][T20213] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1572.074622][T22409] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1572.266305][T20213] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[ 1572.276055][T20213] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1572.285045][T20213] usb 4-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config
[ 1572.295599][T20213] usb 4-1: config 220 has no interface number 2
[ 1572.302034][T20213] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1572.315607][T20213] usb 4-1: config 220 interface 0 has no altsetting 0
[ 1572.322549][T20213] usb 4-1: config 220 interface 76 has no altsetting 0
[ 1572.329780][T20213] usb 4-1: config 220 interface 1 has no altsetting 0
[ 1572.339320][T20213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1572.347505][T20213] usb 4-1: Product: syz
[ 1572.347782][T22409] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1572.351971][T20213] usb 4-1: Manufacturer: syz
[ 1572.363744][T20213] usb 4-1: SerialNumber: syz
[ 1572.436038][T14741] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1572.444980][T14741] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1572.605115][T19837] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1572.667839][T19837] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1573.791677][ T5840] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1573.833199][T20212] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1574.147396][ T5840] usb 7-1: Using ep0 maxpacket: 16
[ 1574.154981][ T5840] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1574.172124][ T5840] usb 7-1: config 0 has no interfaces?
[ 1574.177762][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1574.222847][ T5840] usb 7-1: config 0 descriptor??
[ 1574.263622][T19835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1574.320581][T19835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1574.328849][T20213] usb 4-1: selecting invalid altsetting 0
[ 1574.346393][T20213] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1574.387484][T20213] uvcvideo 4-1:220.0: No valid video chain found.
[ 1574.427490][T20213] usb 4-1: selecting invalid altsetting 0
[ 1574.446943][T20213] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[ 1574.459666][T20213] usb 4-1: USB disconnect, device number 21
[ 1574.495694][T19837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1574.508434][T19837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1574.640709][ T5762] usb 7-1: USB disconnect, device number 19
[ 1574.778414][T20212] usb 1-1: device descriptor read/64, error -71
[ 1574.816307][T22886] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1575.049590][T20212] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1575.274065][ T5840] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1575.308620][T22896] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1575.318892][T22895] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3561'.
[ 1575.381777][T20212] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1575.406168][T20212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1575.438026][T20212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1575.582591][ T5840] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1575.583642][T20212] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1575.626945][T20212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1575.789667][ T5840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1575.832716][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1575.847543][T20212] usb 1-1: config 0 descriptor??
[ 1575.908453][ T5840] usb 4-1: config 0 descriptor??
[ 1575.960465][T22902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3562'.
[ 1576.005600][ T5840] pwc: Askey VC010 type 2 USB webcam detected.
[ 1576.296086][T20213] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1576.391682][T22909] vivid-004: =================  START STATUS  =================
[ 1576.625749][ T5840] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1576.642527][T22878] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1576.647852][ T5840] pwc: recv_control_msg error -32 req 02 val 2700
[ 1576.651171][T22909] vivid-004: Radio HW Seek Mode: Bounded
[ 1576.672464][T20213] usb 5-1: Using ep0 maxpacket: 16
[ 1576.694945][T20213] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[ 1576.842552][T22909] vivid-004: Radio Programmable HW Seek: false
[ 1576.888416][T20213] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1576.944758][T22909] vivid-004: RDS Rx I/O Mode: Block I/O
[ 1577.066124][T22909] vivid-004: Generate RBDS Instead of RDS: 
[ 1577.102782][T20213] usb 5-1: config 0 has no interfaces?
[ 1577.129338][T22909] false
[ 1577.183908][T22909] vivid-004: RDS Reception: true
[ 1577.369442][T20213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1577.393780][T20213] usb 5-1: config 0 descriptor??
[ 1577.407385][ T5840] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1577.426930][T22909] vivid-004: RDS Program Type: 0 inactive
[ 1577.461286][ T5840] pwc: recv_control_msg error -32 req 04 val 1000
[ 1577.476649][T20212] usbhid 1-1:0.0: can't add hid device: -71
[ 1577.482672][T20212] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1577.502637][T22909] vivid-004: RDS PS Name:  inactive
[ 1577.509596][T20212] usb 1-1: USB disconnect, device number 23
[ 1577.526340][T22909] vivid-004: RDS Radio Text:  inactive
[ 1577.537924][ T5840] pwc: recv_control_msg error -32 req 04 val 1300
[ 1577.564945][ T5840] pwc: recv_control_msg error -32 req 04 val 1400
[ 1577.573512][T22909] vivid-004: RDS Traffic Announcement: false inactive
[ 1577.605403][ T5840] pwc: recv_control_msg error -32 req 02 val 2000
[ 1577.615047][T22909] vivid-004: RDS Traffic Program: false inactive
[ 1577.644608][T22909] vivid-004: RDS Music: false inactive
[ 1577.644686][ T5840] pwc: recv_control_msg error -32 req 02 val 2100
[ 1577.699322][T22909] vivid-004: ==================  END STATUS  ==================
[ 1577.939898][ T5840] pwc: recv_control_msg error -71 req 02 val 2500
[ 1577.968272][ T5840] pwc: recv_control_msg error -71 req 02 val 2400
[ 1577.990981][ T5840] pwc: recv_control_msg error -71 req 02 val 2600
[ 1578.019521][ T5840] pwc: recv_control_msg error -71 req 02 val 2900
[ 1578.047642][ T5840] pwc: recv_control_msg error -71 req 02 val 2800
[ 1578.075176][ T5840] pwc: recv_control_msg error -71 req 04 val 1100
[ 1578.113955][ T5840] pwc: recv_control_msg error -71 req 04 val 1200
[ 1578.190649][ T5840] pwc: Registered as video103.
[ 1578.219214][ T5840] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44
[ 1578.271231][T22904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1578.315869][T22904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1578.370640][ T5840] usb 4-1: USB disconnect, device number 22
[ 1578.536935][T22932] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1578.924253][T20212] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1578.959667][ T5840] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1579.098975][T20212] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1579.114693][T20212] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1579.131616][ T5840] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1579.167604][ T5840] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[ 1579.170755][T20212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1579.218892][ T5840] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1579.237440][T20212] usb 1-1: config 0 descriptor??
[ 1579.266833][ T5840] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1579.272865][T20212] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1579.296592][T22944] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3575'.
[ 1579.328066][ T5840] usb 3-1: config 220 has no interface number 2
[ 1579.367965][ T5840] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1579.398564][ T5840] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1579.424371][ T5840] usb 3-1: config 220 interface 76 has no altsetting 0
[ 1579.443681][ T5840] usb 3-1: config 220 interface 1 has no altsetting 0
[ 1579.491718][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1579.512711][ T5840] usb 3-1: Product: syz
[ 1579.523616][ T5840] usb 3-1: Manufacturer: syz
[ 1579.544726][ T5840] usb 3-1: SerialNumber: syz
[ 1579.630007][T20212] usb 5-1: USB disconnect, device number 12
[ 1579.831712][ T5840] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1579.840697][ T5840] uvcvideo 3-1:220.0: No valid video chain found.
[ 1579.848006][ T5840] usb 3-1: selecting invalid altsetting 0
[ 1579.877639][T16757] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1580.145078][ T5840] usb 3-1: selecting invalid altsetting 0
[ 1580.151481][ T5840] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[ 1580.168588][ T5840] usb 3-1: USB disconnect, device number 16
[ 1580.349555][T22953] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1580.516451][T16757] usb 8-1: Using ep0 maxpacket: 16
[ 1580.522598][T16757] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1580.536633][T16757] usb 8-1: config 0 has no interfaces?
[ 1580.543400][T16757] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1580.555989][T16757] usb 8-1: config 0 descriptor??
[ 1580.733707][T20213] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1580.829457][ T5841] usb 8-1: USB disconnect, device number 3
[ 1580.909306][T20213] usb 4-1: Using ep0 maxpacket: 16
[ 1580.926081][T20213] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[ 1580.949755][ T5840] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[ 1580.959515][T20213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1580.987019][T20213] usb 4-1: config 0 has no interfaces?
[ 1581.001670][T20213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1581.204561][T20213] usb 4-1: config 0 descriptor??
[ 1581.262416][ T5840] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1581.278902][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1581.291343][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1581.309568][ T5840] usb 3-1: config 0 descriptor??
[ 1581.548606][ T5840] ath6kl: Failed to submit usb control message: -71
[ 1581.576550][ T5840] ath6kl: unable to send the bmi data to the device: -71
[ 1581.603198][ T5840] ath6kl: Unable to send get target info: -71
[ 1581.638219][ T5840] ath6kl: Failed to init ath6kl core: -71
[ 1581.679664][ T5840] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1581.762489][ T5840] usb 3-1: USB disconnect, device number 17
[ 1581.966569][T22975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1582.029562][T22975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1582.055287][T20212] usb 1-1: USB disconnect, device number 24
[ 1582.081516][T22978] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1582.703974][T22990] 9pnet_fd: Insufficient options for proto=fd
[ 1583.733792][T20212] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1583.752196][T22999] gfs2: not a GFS2 filesystem
[ 1583.786636][ T5762] usb 4-1: USB disconnect, device number 23
[ 1583.932280][T20212] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1583.962878][T20212] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1584.006776][T20212] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1584.056506][T20212] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1584.086356][T20212] usb 8-1: Product: syz
[ 1584.104210][T20212] usb 8-1: Manufacturer: syz
[ 1584.117453][T20212] usb 8-1: SerialNumber: syz
[ 1584.255377][T23006] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1584.847059][T20212] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1584.857507][T20212] usb 8-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1585.118171][T20212] usb 8-1: found format II with max.bitrate = 4, frame size=7372
[ 1585.127061][ T5606] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1585.148166][T20212] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[ 1585.438847][ T5606] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1585.460945][ T5606] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1585.513104][ T5606] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1585.559519][T20212] usb 8-1: USB disconnect, device number 4
[ 1585.565619][ T5606] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1585.625280][ T5606] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1585.689616][ T5606] usb 7-1: config 0 descriptor??
[ 1586.011918][T20538] udevd[20538]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1586.262041][T23030] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1586.390913][T23008] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1586.518765][ T5606] usbhid 7-1:0.0: can't add hid device: -71
[ 1586.536524][ T5606] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1586.598223][ T5606] usb 7-1: USB disconnect, device number 20
[ 1586.614780][T16757] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1586.809841][T16757] usb 3-1: Using ep0 maxpacket: 16
[ 1586.821536][T16757] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1586.847787][T16757] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1586.854157][T20212] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1586.878072][T16757] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1586.925292][T16757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1586.960866][T16757] usb 3-1: Product: syz
[ 1586.975743][T16757] usb 3-1: Manufacturer: syz
[ 1586.990507][T16757] usb 3-1: SerialNumber: syz
[ 1587.020201][T16757] usb 3-1: config 0 descriptor??
[ 1587.071702][T20212] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[ 1587.085752][T20212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1587.103534][T20212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1587.114797][T20212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1587.243119][ T5762] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1587.340956][ T5606] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1587.416045][T16757] usb 3-1: USB disconnect, device number 18
[ 1587.428022][ T5762] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1587.452248][ T5762] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1587.487849][ T5762] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1587.504378][ T5762] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1587.524907][ T5762] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1587.540148][ T5606] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1587.557144][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1587.569187][ T5606] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1587.583518][ T5606] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1587.622832][T20212] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[ 1587.635455][ T5606] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1587.644854][T20212] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[ 1587.653367][T20212] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[ 1587.664252][T20212] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[ 1587.674002][ T5606] usb 8-1: config 0 descriptor??
[ 1587.699122][ T5606] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1587.708833][ T5841] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[ 1587.711988][T20212] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[ 1587.739860][T20212] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[ 1587.748288][T20212] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[ 1587.755828][T20212] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[ 1587.764415][T20212] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[ 1587.771848][T20212] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0
[ 1587.780609][T20212] hid-picolcd 0003:04D8:C002.0005: unbalanced collection at end of report description
[ 1587.791572][T20212] hid-picolcd 0003:04D8:C002.0005: device report parse failed
[ 1587.799360][T20212] hid-picolcd 0003:04D8:C002.0005: probe with driver hid-picolcd failed with error -22
[ 1587.887769][ T5841] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1587.910088][ T5841] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[ 1587.924313][ T5841] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1587.933226][ T5841] usb 7-1: can't read configurations, error -71
[ 1588.045227][ T5762] gud 5-1:1.0: probe with driver gud failed with error -71
[ 1588.078493][ T5762] usb 5-1: USB disconnect, device number 13
[ 1588.424397][T16757] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1588.608898][T16757] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1588.621760][T16757] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1588.640358][T16757] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1588.654647][T16757] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1588.671763][T16757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1588.703270][T16757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1588.716970][T12321] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1588.744704][T16757] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1588.755531][T16757] usb 3-1: Product: syz
[ 1588.760168][T16757] usb 3-1: Manufacturer: syz
[ 1588.778053][T16757] cdc_wdm 3-1:1.0: skipping garbage
[ 1588.783565][T16757] cdc_wdm 3-1:1.0: skipping garbage
[ 1588.790274][T16757] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1588.796878][T16757] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1588.900421][T12321] usb 4-1: Using ep0 maxpacket: 16
[ 1588.906580][T12321] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1588.917562][T12321] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1588.923941][T20212] usb 1-1: USB disconnect, device number 25
[ 1588.929942][T12321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1588.955150][T12321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1588.964906][T12321] usb 4-1: Product: syz
[ 1588.969418][T12321] usb 4-1: Manufacturer: syz
[ 1588.974097][T12321] usb 4-1: SerialNumber: syz
[ 1588.982027][T12321] usb 4-1: config 0 descriptor??
[ 1588.992966][T12321] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1589.004613][T12321] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 1589.019884][ T5762] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1589.062902][ T5841] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1589.192858][ T5762] usb 5-1: Using ep0 maxpacket: 16
[ 1589.199500][ T5762] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[ 1589.210298][ T5762] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1589.222694][ T5762] usb 5-1: config 0 has no interfaces?
[ 1589.229385][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1589.232334][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 6 bytes
[ 1589.240724][ T5762] usb 5-1: config 0 descriptor??
[ 1589.250925][ T5841] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1589.277059][T16760] usb 3-1: USB disconnect, device number 19
[ 1589.285480][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1589.294315][ T5841] usb 7-1: Product: syz
[ 1589.299572][ T5841] usb 7-1: SerialNumber: syz
[ 1589.321758][ T5841] usb 7-1: config 0 descriptor??
[ 1589.585960][ T5841] hso 7-1:0.0: Failed to find BULK eps
[ 1589.823378][T12321] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 1589.830912][T12321] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[ 1590.012761][T23087] /dev/nullb0: Can't open blockdev
[ 1590.047898][T23075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1590.081629][T23075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1590.292040][T23086] gfs2: not a GFS2 filesystem
[ 1590.345712][T20212] usb 8-1: USB disconnect, device number 5
[ 1590.592521][T12321] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[ 1590.629431][T12321] em28xx 4-1:0.0: couldn't setup AC97 register 2
[ 1591.178620][T12321] em28xx 4-1:0.0: couldn't setup AC97 register 4
[ 1591.288811][T12321] em28xx 4-1:0.0: couldn't setup AC97 register 6
[ 1591.331281][T12321] em28xx 4-1:0.0: couldn't setup AC97 register 54
[ 1591.354169][T12321] em28xx 4-1:0.0: couldn't setup AC97 register 56
[ 1591.381364][T12321] usb 4-1: USB disconnect, device number 24
[ 1591.641156][T20212] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 1591.821478][T20213] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1591.847424][T20212] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1591.873850][T23109] loop2: detected capacity change from 0 to 512
[ 1591.884774][T20212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1591.904143][T20212] usb 1-1: Product: syz
[ 1591.917311][T12321] usb 7-1: USB disconnect, device number 22
[ 1591.920329][T20212] usb 1-1: Manufacturer: syz
[ 1591.945212][T23109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1591.963686][T20212] usb 1-1: SerialNumber: syz
[ 1591.982278][T23109] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1592.001696][T20212] usb 1-1: config 0 descriptor??
[ 1592.009111][T20213] usb 8-1: Using ep0 maxpacket: 8
[ 1592.042877][T20213] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1592.070409][T23114] vcan0: tx drop: invalid da for name 0x0000000000000001
[ 1592.094959][T20213] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1592.138476][T20213] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1592.168788][ T5762] usb 5-1: USB disconnect, device number 14
[ 1592.180365][T20213] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1592.210916][T20213] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173
[ 1592.233677][T20213] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1592.902174][T20213] usb 8-1: config 0 descriptor??
[ 1592.936800][T23098] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1593.297277][T16760] usb 8-1: USB disconnect, device number 6
[ 1593.303860][T16282] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[ 1593.387051][T20212] usb 1-1: Firmware version (0.0) predates our first public release.
[ 1593.417297][T20212] usb 1-1: Please update to version 0.2 or newer
[ 1593.599544][T17169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1593.640176][T20212] usb 1-1: USB disconnect, device number 26
[ 1594.187263][ T5841] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1594.460975][ T5841] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1594.539748][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1594.604717][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1594.777651][ T5841] usb 3-1: config 0 descriptor??
[ 1595.045802][ T5841] usbhid 3-1:0.0: can't add hid device: -71
[ 1595.075873][ T5841] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1595.123601][ T5841] usb 3-1: USB disconnect, device number 20
[ 1595.486185][ T5840] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1596.613496][ T5840] usb 7-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00
[ 1596.771429][ T5841] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1597.544382][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1597.711612][ T5840] usb 7-1: Product: syz
[ 1597.734382][ T5840] usb 7-1: Manufacturer: syz
[ 1597.759243][ T5840] usb 7-1: SerialNumber: syz
[ 1598.318166][ T5840] kalmia 7-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0
[ 1598.345154][T23195] binder: 23191:23195 ioctl c0306201 0 returned -14
[ 1598.524846][ T5840] kalmia 7-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0
[ 1598.577570][ T5840] kalmia 7-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0
[ 1598.687165][ T5840] kalmia 7-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.6-1, Samsung Kalmia LTE USB dongle, b6:7b:2a:ab:4e:0c
[ 1598.722358][T23205] loop0: detected capacity change from 0 to 1024
[ 1599.363008][ T5841] usb 7-1: USB disconnect, device number 23
[ 1599.411557][ T5841] kalmia 7-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.6-1, Samsung Kalmia LTE USB dongle
[ 1599.429182][T17612] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1599.618968][T17612] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1599.662818][T17612] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1599.734607][T17612] usb 4-1: Product: syz
[ 1599.748498][T17612] usb 4-1: SerialNumber: syz
[ 1599.917961][T17612] usb 4-1: config 0 descriptor??
[ 1600.512428][ T5841] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1600.551489][T17612] hso 4-1:0.0: Failed to find BULK eps
[ 1600.731880][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1600.738310][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1600.796334][ T5841] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1600.818221][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1600.829459][ T5841] usb 7-1: Product: syz
[ 1600.838771][ T5841] usb 7-1: SerialNumber: syz
[ 1600.969419][ T5841] usb 7-1: config 0 descriptor??
[ 1601.227546][ T5841] hso 7-1:0.0: Failed to find BULK eps
[ 1601.460100][T17612] usb 7-1: USB disconnect, device number 24
[ 1602.401405][T20213] usb 4-1: USB disconnect, device number 25
[ 1603.990032][T17612] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1604.164395][T17612] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1604.180422][T17612] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[ 1604.192674][T17612] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1604.212391][T17612] usb 7-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config
[ 1604.238416][T17612] usb 7-1: config 220 has no interface number 2
[ 1604.255833][T17612] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1604.285581][T17612] usb 7-1: config 220 interface 0 has no altsetting 0
[ 1604.300500][T17612] usb 7-1: config 220 interface 76 has no altsetting 0
[ 1604.314314][T17612] usb 7-1: config 220 interface 1 has no altsetting 0
[ 1604.323469][T17612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1604.335519][T17612] usb 7-1: Product: syz
[ 1604.340054][T17612] usb 7-1: Manufacturer: syz
[ 1604.345961][T17612] usb 7-1: SerialNumber: syz
[ 1604.646693][T17612] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1604.692452][T17612] uvcvideo 7-1:220.0: No valid video chain found.
[ 1604.982005][T17612] usb 7-1: USB disconnect, device number 25
[ 1604.990771][T23281] loop0: detected capacity change from 0 to 1024
[ 1605.054835][ T5840] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1605.247495][ T5840] usb 5-1: Using ep0 maxpacket: 16
[ 1605.267000][ T5840] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1605.529114][ T5840] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[ 1605.554501][ T5840] usb 5-1: config 0 has no interface number 0
[ 1605.565733][ T5840] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1605.585928][ T5840] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1605.907957][T23284] loop3: detected capacity change from 0 to 1024
[ 1605.920651][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1605.946247][ T5840] usb 5-1: Product: syz
[ 1605.994409][ T5840] usb 5-1: Manufacturer: syz
[ 1606.018412][ T5840] usb 5-1: SerialNumber: syz
[ 1606.052841][ T5840] usb 5-1: config 0 descriptor??
[ 1606.076129][T23278] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1606.089340][T23278] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1606.196418][T20213] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1606.363453][T20213] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1606.390556][T23278] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1606.410609][T23278] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1606.433663][T20213] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1606.463192][T20213] usb 3-1: Product: syz
[ 1606.482823][T20213] usb 3-1: SerialNumber: syz
[ 1606.518693][T20213] usb 3-1: config 0 descriptor??
[ 1606.677386][ T5840] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1606.773270][T20213] hso 3-1:0.0: Failed to find BULK eps
[ 1606.901360][ T5840] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1606.951742][T23299] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000
[ 1606.960641][ T5840] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[ 1607.018575][ T5840] asix 5-1:0.34: probe with driver asix failed with error -61
[ 1607.220626][ T5841] usb 3-1: USB disconnect, device number 22
[ 1608.347153][ T5840] usb 5-1: USB disconnect, device number 15
[ 1608.951157][T20213] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1608.966361][ T5840] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1609.124303][T20213] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1609.150325][ T5840] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1609.163577][T20213] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1609.166054][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1609.188835][T20213] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1609.194066][ T5840] usb 5-1: Product: syz
[ 1609.207314][T20213] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1609.224117][ T5840] usb 5-1: SerialNumber: syz
[ 1609.224556][T20213] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1609.251938][ T5840] usb 5-1: config 0 descriptor??
[ 1609.259815][T20213] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1609.282591][T20213] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1609.301710][T20213] usb 7-1: Product: syz
[ 1609.339078][T20213] usb 7-1: Manufacturer: syz
[ 1609.394447][T16757] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1609.412979][T20213] cdc_wdm 7-1:1.0: skipping garbage
[ 1609.447034][T20213] cdc_wdm 7-1:1.0: skipping garbage
[ 1609.472754][T20213] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1609.503211][ T5840] hso 5-1:0.0: Failed to find BULK eps
[ 1609.509983][T20213] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1609.573444][T16757] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1609.634380][T16757] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1609.662432][T16757] usb 3-1: Product: syz
[ 1609.767729][T16757] usb 3-1: SerialNumber: syz
[ 1609.801464][T16757] usb 3-1: config 0 descriptor??
[ 1609.891823][T17612] usb 5-1: USB disconnect, device number 16
[ 1610.034994][T16757] hso 3-1:0.0: Failed to find INT IN ep
[ 1610.051873][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 6 bytes
[ 1610.065813][T20213] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 1610.071322][T16757] usb 7-1: USB disconnect, device number 26
[ 1610.172641][T23340] loop7: detected capacity change from 0 to 1024
[ 1610.321299][T20213] usb 1-1: Using ep0 maxpacket: 16
[ 1610.369523][T17612] IPVS: starting estimator thread 0...
[ 1610.375644][T20213] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1610.396053][T16757] usb 3-1: USB disconnect, device number 23
[ 1610.444309][T20213] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1610.486016][T20213] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1610.495348][T23341] IPVS: using max 32 ests per chain, 76800 per kthread
[ 1610.547756][T20213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1610.574322][T20213] usb 1-1: Product: syz
[ 1610.594097][T20213] usb 1-1: Manufacturer: syz
[ 1610.607438][T20213] usb 1-1: SerialNumber: syz
[ 1610.644061][T20213] usb 1-1: config 0 descriptor??
[ 1610.871450][T20213] usb 1-1: USB disconnect, device number 27
[ 1611.214534][ T5762] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1611.514595][ T5762] usb 8-1: Using ep0 maxpacket: 16
[ 1611.608547][ T5762] usb 8-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[ 1611.806082][ T5762] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1611.975219][ T5762] usb 8-1: config 0 has no interfaces?
[ 1611.983356][T23359] loop0: detected capacity change from 0 to 512
[ 1612.000633][ T5762] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1612.046665][ T5762] usb 8-1: config 0 descriptor??
[ 1612.081476][T23359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1612.134102][T23359] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1612.216449][T23367] overlayfs: overlapping lowerdir path
[ 1613.278584][T19389] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1613.574010][T23380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1613.623184][T23382] loop3: detected capacity change from 0 to 1024
[ 1613.642138][T23380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1613.789092][T23388] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1614.676118][ T5762] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[ 1614.954293][ T5762] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1614.971592][ T5762] usb 3-1: not running at top speed; connect to a high speed hub
[ 1614.985085][ T5762] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=42.b4
[ 1614.995960][ T5762] usb 3-1: config 9 has an invalid interface number: 124 but max is 0
[ 1615.013487][ T5762] usb 3-1: config 9 has no interface number 0
[ 1615.033161][ T5762] usb 3-1: config 9 interface 124 altsetting 195 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[ 1615.051854][ T5762] usb 3-1: config 9 interface 124 altsetting 195 endpoint 0xB has an invalid bInterval 0, changing to 4
[ 1615.063289][ T5762] usb 3-1: config 9 interface 124 altsetting 195 endpoint 0xB has invalid wMaxPacketSize 0
[ 1615.076711][ T5762] usb 3-1: config 9 interface 124 has no altsetting 0
[ 1615.094851][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1615.109906][T20212] usb 8-1: USB disconnect, device number 7
[ 1615.147743][ T5762] usb 3-1: Product: syz
[ 1615.164526][ T5762] usb 3-1: Manufacturer: syz
[ 1615.169869][T17612] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 1615.202487][ T5762] usb 3-1: SerialNumber: syz
[ 1615.352939][T17612] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1615.374153][T17612] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1615.382611][T17612] usb 7-1: Product: syz
[ 1615.401887][T17612] usb 7-1: SerialNumber: syz
[ 1615.454615][T17612] usb 7-1: config 0 descriptor??
[ 1615.498736][ T5762] usbtest 3-1:9.124: couldn't get endpoints, -71
[ 1615.515363][ T5762] usbtest 3-1:9.124: probe with driver usbtest failed with error -71
[ 1615.554285][ T5762] usb 3-1: USB disconnect, device number 24
[ 1615.898175][T17612] hso 7-1:0.0: Failed to find INT IN ep
[ 1616.238023][T17612] usb 7-1: USB disconnect, device number 27
[ 1616.886990][ T5762] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 1617.216535][ T5762] usb 1-1: Using ep0 maxpacket: 16
[ 1617.244161][ T5762] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1617.359358][ T5762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1617.389703][ T5762] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1617.453374][ T5606] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1617.481352][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1617.508456][ T5762] usb 1-1: Product: syz
[ 1617.526660][ T5762] usb 1-1: Manufacturer: syz
[ 1617.542728][ T5762] usb 1-1: SerialNumber: syz
[ 1617.576537][ T5762] usb 1-1: config 0 descriptor??
[ 1617.648173][ T5606] usb 3-1: Using ep0 maxpacket: 16
[ 1617.682190][ T5606] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[ 1617.713698][ T5606] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1617.762372][ T5606] usb 3-1: config 0 has no interfaces?
[ 1617.787525][ T5606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1617.820409][ T5606] usb 3-1: config 0 descriptor??
[ 1617.833203][ T5762] usb 1-1: USB disconnect, device number 28
[ 1618.627647][T23428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1618.676457][T23427] loop6: detected capacity change from 0 to 512
[ 1618.746296][T23428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1618.812433][T23427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1618.842333][T23427] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1619.115139][T17612] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[ 1620.442740][T17612] usb 8-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[ 1620.476935][T17612] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1620.551103][T17612] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1620.660606][T17612] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1620.677319][T17612] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1620.691086][T10750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1620.708959][T17612] usb 8-1: config 0 descriptor??
[ 1620.930482][ T5762] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1621.024669][T17612] usbhid 8-1:0.0: can't add hid device: -71
[ 1621.050022][T17612] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1621.116249][T17612] usb 8-1: USB disconnect, device number 8
[ 1621.126202][ T5762] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1621.178430][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1621.207232][ T5762] usb 1-1: Product: syz
[ 1621.270893][ T5762] usb 1-1: SerialNumber: syz
[ 1621.294570][ T5762] usb 1-1: config 0 descriptor??
[ 1621.308950][T20214] usb 3-1: USB disconnect, device number 25
[ 1621.591621][ T5762] usb 1-1: USB disconnect, device number 29
[ 1621.765786][T20214] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1622.035779][T20214] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1622.060021][T20214] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1622.079027][T17612] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1622.090530][T20214] usb 3-1: config 1 descriptor has 1 excess byte, ignoring
[ 1622.109868][T20214] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1622.134224][T20214] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1622.170115][T20214] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1622.184974][T20214] usb 3-1: Product: syz
[ 1622.196985][T20214] usb 3-1: Manufacturer: syz
[ 1622.228597][T20214] cdc_wdm 3-1:1.0: skipping garbage
[ 1622.245360][T20214] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1622.263371][T17612] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[ 1622.316988][T17612] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1622.396702][T17612] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1622.427350][T17612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1622.442534][T17612] usb 4-1: SerialNumber: ఊ
[ 1622.459396][T20214] usb 3-1: USB disconnect, device number 26
[ 1622.514788][T17612] etas_es58x 4-1:1.0: Starting (null) (null) (Serial Number ఊ)
[ 1622.627236][T23454] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1623.282705][T17612] etas_es58x 4-1:1.0: could not retrieve the product info string
[ 1623.406099][T23463] netlink: 'syz.4.3716': attribute type 10 has an invalid length.
[ 1624.088288][T23463] bond0: (slave geneve0): Enslaving as an active interface with an up link
[ 1624.103986][T20214] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[ 1624.304833][T17612] usb 4-1: USB disconnect, device number 26
[ 1624.350733][T17612] etas_es58x 4-1:1.0: Disconnecting (null) (null)
[ 1624.397705][T20214] usb 8-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[ 1624.417033][T20214] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1624.430788][T23470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3719'.
[ 1624.440653][T20214] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1624.455360][T20214] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1624.476151][T20214] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1624.489358][T23470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3719'.
[ 1624.498551][T16757] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1624.505634][T23470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1624.531991][T20214] usb 8-1: config 0 descriptor??
[ 1624.732238][T16757] usb 3-1: Using ep0 maxpacket: 16
[ 1624.776666][T16757] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[ 1624.843244][T20214] usbhid 8-1:0.0: can't add hid device: -71
[ 1624.849386][T16757] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1624.849414][T16757] usb 3-1: config 0 has no interfaces?
[ 1624.849449][T16757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1624.895156][T20214] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1624.935044][T16757] usb 3-1: config 0 descriptor??
[ 1624.943488][T20214] usb 8-1: USB disconnect, device number 9
[ 1625.627806][T23495] loop6: detected capacity change from 0 to 1024
[ 1625.738330][T23500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1625.793310][T23500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1627.739979][T16757] usb 3-1: USB disconnect, device number 27
[ 1628.783575][T16757] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1628.993178][T16757] usb 8-1: Using ep0 maxpacket: 8
[ 1629.025212][T16757] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1629.086319][T16757] usb 8-1: config index 0 descriptor too short (expected 74, got 45)
[ 1629.120612][T16757] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1629.216562][T16757] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1629.275226][T16757] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1629.343350][T16757] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1629.436074][T16757] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1629.470198][T20214] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 1629.528501][T16757] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1629.697881][T20214] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1629.746457][T20214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1629.798030][T20214] usb 1-1: config 0 descriptor??
[ 1629.803420][ T5606] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 1629.859981][T20214] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1630.020632][T16757] usb 8-1: GET_CAPABILITIES returned 0
[ 1630.026784][ T5606] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1630.039870][T16757] usbtmc 8-1:16.0: can't read capabilities
[ 1630.092698][ T5606] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1630.133818][ T5606] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1630.161836][ T5606] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1630.240901][ T5606] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1630.293861][    C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1630.314252][ T5606] usb 7-1: config 0 descriptor??
[ 1630.315559][T23527] usbtmc 8-1:16.0: Unable to send data, error -71
[ 1630.451569][T16757] usb 8-1: USB disconnect, device number 10
[ 1631.018911][T23548] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1631.125845][T23565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1631.426015][T20214] usb 1-1: USB disconnect, device number 30
[ 1631.773993][ T5606] usbhid 7-1:0.0: can't add hid device: -71
[ 1631.818980][ T5606] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1631.876036][ T5606] usb 7-1: USB disconnect, device number 28
[ 1632.360623][ T5606] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[ 1632.477019][T16757] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1632.568775][ T5606] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1632.670711][ T5606] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1632.686281][T16757] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[ 1632.717154][T16757] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1632.739476][T16757] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1632.778806][T16757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1632.812800][T16757] usb 1-1: SerialNumber: ఊ
[ 1632.832763][ T5606] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1632.890744][T16757] etas_es58x 1-1:1.0: Starting (null) (null) (Serial Number ఊ)
[ 1632.979108][ T5606] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1632.997863][T23580] loop3: detected capacity change from 0 to 1024
[ 1633.004354][ T5606] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1633.022023][T20214] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1633.059893][ T5606] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1633.202974][T20214] usb 5-1: Using ep0 maxpacket: 16
[ 1633.227645][T20214] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1633.312163][T20214] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1633.391813][T20214] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1633.468913][T20214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1633.513527][T20214] usb 5-1: Product: syz
[ 1633.539176][T20214] usb 5-1: Manufacturer: syz
[ 1633.565438][T20214] usb 5-1: SerialNumber: syz
[ 1633.641432][T20214] usb 5-1: config 0 descriptor??
[ 1633.693585][ T5840] usb 7-1: USB disconnect, device number 29
[ 1633.719969][T16757] etas_es58x 1-1:1.0: could not retrieve the product info string
[ 1634.015526][T16757] usb 1-1: USB disconnect, device number 31
[ 1634.073076][T16757] etas_es58x 1-1:1.0: Disconnecting (null) (null)
[ 1634.452761][ T5606] usb 5-1: USB disconnect, device number 17
[ 1636.344210][T16757] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 1636.528324][T16757] usb 1-1: Using ep0 maxpacket: 16
[ 1636.635669][T16757] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[ 1636.728260][T16757] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1636.800116][T16757] usb 1-1: config 0 has no interfaces?
[ 1636.835552][T16757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1636.950441][T16757] usb 1-1: config 0 descriptor??
[ 1637.222126][T16760] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[ 1637.427395][T16760] usb 7-1: Using ep0 maxpacket: 16
[ 1637.451549][T16760] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1637.453396][T23656] overlayfs: overlapping lowerdir path
[ 1637.531320][T16760] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1637.577757][T16760] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1637.591092][T16757] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1637.637521][T16760] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1637.667021][T16760] usb 7-1: Product: syz
[ 1637.682884][T16760] usb 7-1: Manufacturer: syz
[ 1637.712573][T16760] usb 7-1: SerialNumber: syz
[ 1637.742258][T16760] usb 7-1: config 0 descriptor??
[ 1637.758149][T23662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1637.785712][T16757] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1637.839698][T16757] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1637.849162][T23662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1637.905688][T16757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1637.963474][T16757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1638.005287][T16757] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1638.061971][T16757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1638.125214][T20214] usb 7-1: USB disconnect, device number 30
[ 1638.138453][T16757] usb 4-1: config 0 descriptor??
[ 1638.644553][T16757] usbhid 4-1:0.0: can't add hid device: -71
[ 1638.673343][T16757] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1638.730356][T16757] usb 4-1: USB disconnect, device number 27
[ 1639.767648][T16757] usb 1-1: USB disconnect, device number 32
[ 1641.766130][T23699] loop3: detected capacity change from 0 to 1024
[ 1642.485835][T16757] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1642.501910][T23711] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3775'.
[ 1642.759498][T16757] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[ 1642.953424][T16757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1643.053164][T16757] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1643.564555][T16757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1643.584200][T16757] usb 3-1: SerialNumber: ఊ
[ 1643.621768][T16757] etas_es58x 3-1:1.0: Starting (null) (null) (Serial Number ఊ)
[ 1643.655595][T20214] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1643.678071][ T5840] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[ 1643.829166][ T5840] usb 5-1: device descriptor read/64, error -71
[ 1643.830498][T20214] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1643.889418][T20214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1644.121549][ T5840] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[ 1644.328073][ T5840] usb 5-1: device descriptor read/64, error -71
[ 1644.565862][ T5840] usb usb5-port1: attempt power cycle
[ 1644.910280][T20214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1644.922072][T20214] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1644.936255][T20214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1644.948385][T20214] usb 1-1: config 0 descriptor??
[ 1645.074965][ T5840] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[ 1645.133654][ T5840] usb 5-1: device descriptor read/8, error -71
[ 1645.203908][T16757] etas_es58x 3-1:1.0: could not retrieve the product info string
[ 1645.371511][T16757] usb 3-1: USB disconnect, device number 28
[ 1645.421304][ T5840] usb 5-1: new low-speed USB device number 21 using dummy_hcd
[ 1645.464264][T16757] etas_es58x 3-1:1.0: Disconnecting (null) (null)
[ 1645.479091][ T5840] usb 5-1: device descriptor read/8, error -71
[ 1645.628044][ T5840] usb usb5-port1: unable to enumerate USB device
[ 1645.647140][T23719] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1646.273039][T16757] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1647.081762][T16757] usb 4-1: device descriptor read/64, error -71
[ 1647.237881][T23742] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3785'.
[ 1647.349245][T16757] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1647.393417][T20214] usbhid 1-1:0.0: can't add hid device: -71
[ 1647.406701][T20214] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1647.450867][T20214] usb 1-1: USB disconnect, device number 33
[ 1647.515618][T16757] usb 4-1: device descriptor read/64, error -71
[ 1647.630853][T16760] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1647.674442][T16757] usb usb4-port1: attempt power cycle
[ 1647.804814][T16760] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1647.831431][T16760] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1647.841022][T16760] usb 3-1: Product: syz
[ 1647.847852][T16760] usb 3-1: SerialNumber: syz
[ 1647.857607][T16760] usb 3-1: config 0 descriptor??
[ 1647.956034][T20214] usb 1-1: new low-speed USB device number 34 using dummy_hcd
[ 1647.977577][ T5606] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 1648.064387][T16757] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1648.090595][T16760] hso 3-1:0.0: Can't find BULK endpoints
[ 1648.103358][T16757] usb 4-1: device descriptor read/8, error -71
[ 1648.132926][T20214] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1648.151533][ T5606] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[ 1648.173728][T20214] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1648.191321][ T5606] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1648.206817][T20214] usb 1-1: config 0 has no interfaces?
[ 1648.224864][T20214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1648.235304][ T5606] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1648.265263][ T5606] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1648.275516][T20214] usb 1-1: config 0 descriptor??
[ 1648.340768][T16760] usb 3-1: USB disconnect, device number 29
[ 1648.390066][T16757] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1648.423209][T16757] usb 4-1: device descriptor read/8, error -71
[ 1648.547979][T16757] usb usb4-port1: unable to enumerate USB device
[ 1648.561339][ T5762] usb 1-1: USB disconnect, device number 34
[ 1648.792603][ T5606] hid-picolcd 0003:04D8:C002.0006: unbalanced collection at end of report description
[ 1648.818641][ T5606] hid-picolcd 0003:04D8:C002.0006: device report parse failed
[ 1648.840140][ T5606] hid-picolcd 0003:04D8:C002.0006: probe with driver hid-picolcd failed with error -22
[ 1649.129635][T23771] loop7: detected capacity change from 0 to 1024
[ 1649.311919][ T5606] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1649.356203][ T5762] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1649.484026][ T5606] usb 3-1: Using ep0 maxpacket: 16
[ 1649.497242][ T5606] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1649.512875][ T5606] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1649.527884][ T5606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1649.546605][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1649.555845][ T5762] usb 5-1: Using ep0 maxpacket: 8
[ 1649.562573][ T5606] usb 3-1: Product: syz
[ 1649.567357][ T5762] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1649.576820][ T5606] usb 3-1: Manufacturer: syz
[ 1649.586666][ T5606] usb 3-1: SerialNumber: syz
[ 1649.592225][ T5762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1649.614724][ T5762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1649.632648][ T5606] usb 3-1: config 0 descriptor??
[ 1649.638351][ T5762] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1649.655899][ T5606] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1649.668386][ T5762] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173
[ 1649.680482][ T5606] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 1649.691124][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1649.929340][ T5762] usb 5-1: config 0 descriptor??
[ 1649.938769][T23768] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1650.560765][T16760] usb 7-1: USB disconnect, device number 31
[ 1650.848014][T16282] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[ 1650.902567][ T5762] usb 5-1: USB disconnect, device number 22
[ 1651.281828][T20214] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 1651.470572][T20214] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1651.497594][T20214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1651.507222][T20214] usb 1-1: Product: syz
[ 1651.512238][T20214] usb 1-1: Manufacturer: syz
[ 1651.520143][T20214] usb 1-1: SerialNumber: syz
[ 1651.535021][T20214] usb 1-1: config 0 descriptor??
[ 1651.757608][T23797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3802'.
[ 1651.780083][ T5606] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1651.806559][ T5606] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 1651.815460][T23797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1651.831788][ T5606] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[ 1651.844813][ T5606] em28xx 3-1:0.0: No AC97 audio processor
[ 1652.262594][T23802] 9pnet_fd: Insufficient options for proto=fd
[ 1653.183324][T16760] usb 3-1: USB disconnect, device number 30
[ 1653.208363][T16760] em28xx 3-1:0.0: Disconnecting em28xx
[ 1653.497231][T16760] em28xx 3-1:0.0: Freeing device
[ 1653.797364][T23810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1653.842571][T23819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3807'.
[ 1654.086655][T16760] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1654.272925][T16760] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1654.295993][T16760] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1654.312779][T16760] usb 5-1: Product: syz
[ 1654.319932][T16757] usb 1-1: USB disconnect, device number 35
[ 1654.334070][T16760] usb 5-1: SerialNumber: syz
[ 1654.555707][T16760] usb 5-1: config 0 descriptor??
[ 1655.464674][T16760] hso 5-1:0.0: Failed to find INT IN ep
[ 1655.721582][T23840] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000
[ 1655.914558][ T5840] usb 5-1: USB disconnect, device number 23
[ 1655.999559][T16760] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[ 1656.925311][T16760] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1656.952091][T16760] usb 8-1: config 0 has an invalid interface number: 163 but max is 0
[ 1656.981338][T16760] usb 8-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[ 1657.021650][T16760] usb 8-1: config 0 has no interface number 0
[ 1657.048687][T16760] usb 8-1: too many endpoints for config 0 interface 163 altsetting 97: 97, using maximum allowed: 30
[ 1657.079468][T16760] usb 8-1: config 0 interface 163 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97
[ 1657.152173][T16760] usb 8-1: config 0 interface 163 has no altsetting 0
[ 1657.191908][T16760] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1657.269402][T16760] usb 8-1: config 0 descriptor??
[ 1657.529965][T16760] usb 8-1: string descriptor 0 read error: -71
[ 1657.615871][T16760] ath6kl: Failed to submit usb control message: -71
[ 1657.643699][T16760] ath6kl: unable to send the bmi data to the device: -71
[ 1657.676863][T16760] ath6kl: Unable to send get target info: -71
[ 1657.724816][T16760] ath6kl: Failed to init ath6kl core: -71
[ 1657.750466][T16760] ath6kl_usb 8-1:0.163: probe with driver ath6kl_usb failed with error -71
[ 1657.797096][T16760] usb 8-1: USB disconnect, device number 11
[ 1658.885226][T16760] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[ 1659.071712][T16760] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[ 1659.092310][T16760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1659.109145][T16760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1659.134478][ T5841] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1659.142531][T16760] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1659.186792][T16760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1659.224848][T16760] usb 4-1: config 0 descriptor??
[ 1659.330188][ T5841] usb 8-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00
[ 1659.350395][ T5841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1659.366570][ T5841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1659.378743][ T5841] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1659.406904][ T5841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1659.448283][ T5841] usb 8-1: config 0 descriptor??
[ 1659.512432][T16760] usbhid 4-1:0.0: can't add hid device: -71
[ 1659.520183][T16760] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1659.532435][T23877] netlink: 'syz.6.3827': attribute type 10 has an invalid length.
[ 1659.584713][T16760] usb 4-1: USB disconnect, device number 32
[ 1659.728582][T23879] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000
[ 1659.961558][ T5841] hid_parser_main: 21 callbacks suppressed
[ 1659.961584][ T5841] hid-generic 0003:076D:C262.0007: unknown main item tag 0x0
[ 1659.999750][ T5841] hid-generic 0003:076D:C262.0007: unknown main item tag 0x0
[ 1660.791776][ T5841] hid-generic 0003:076D:C262.0007: unknown main item tag 0x0
[ 1660.828124][ T5841] hid-generic 0003:076D:C262.0007: unknown main item tag 0x0
[ 1660.857361][ T5841] hid-generic 0003:076D:C262.0007: unknown main item tag 0x0
[ 1660.892733][ T5841] hid-generic 0003:076D:C262.0007: unknown main item tag 0x0
[ 1660.916883][ T5841] hid-generic 0003:076D:C262.0007: unknown main item tag 0x0
[ 1660.940234][ T5841] hid-generic 0003:076D:C262.0007: unknown main item tag 0x0
[ 1660.953611][ T5841] hid-generic 0003:076D:C262.0007: unknown main item tag 0x0
[ 1660.962467][ T5841] hid-generic 0003:076D:C262.0007: unknown main item tag 0x0
[ 1660.972302][ T5841] hid-generic 0003:076D:C262.0007: unbalanced collection at end of report description
[ 1660.982817][ T5841] hid-generic 0003:076D:C262.0007: probe with driver hid-generic failed with error -22
[ 1661.017058][ T5841] usb 8-1: USB disconnect, device number 12
[ 1661.712282][ T5841] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1661.910366][ T5841] usb 3-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00
[ 1661.912045][T23903] loop7: detected capacity change from 0 to 1024
[ 1661.967131][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1662.001253][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1662.022462][ T5841] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1662.035834][T23901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3835'.
[ 1662.061541][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1662.118806][ T5841] usb 3-1: config 0 descriptor??
[ 1662.696114][ T5841] hid-generic 0003:076D:C262.0008: unbalanced collection at end of report description
[ 1662.799575][ T5841] hid-generic 0003:076D:C262.0008: probe with driver hid-generic failed with error -22
[ 1662.895887][ T5841] usb 3-1: USB disconnect, device number 31
[ 1663.612810][T23925] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000
[ 1666.500112][ T5762] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[ 1667.082530][ T5762] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1667.271738][ T5762] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[ 1667.286879][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1667.314177][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1667.472075][ T5762] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1667.515271][ T5762] usb 7-1: can't read configurations, error -71
[ 1667.727147][T16757] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1667.920269][T16757] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1667.932366][T23965] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000
[ 1668.101571][T16757] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1668.114041][T16757] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1668.127317][T16757] usb 8-1: config 0 descriptor??
[ 1669.050820][T16757] usbhid 8-1:0.0: can't add hid device: -71
[ 1669.074306][T16757] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1669.093112][T16757] usb 8-1: USB disconnect, device number 13
[ 1669.542289][T21081] Bluetooth: hci2: command 0x0406 tx timeout
[ 1669.787854][T23979] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3859'.
[ 1669.814648][ T5762] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1669.833713][T23977] loop4: detected capacity change from 0 to 1024
[ 1669.988875][ T5762] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 1670.040309][ T5762] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1670.061185][ T5762] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1670.097388][ T5762] usb 8-1: config 0 descriptor??
[ 1670.594568][ T5606] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1670.779265][ T5606] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1670.808883][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1670.829492][ T5606] usb 3-1: Product: syz
[ 1670.847180][ T5606] usb 3-1: Manufacturer: syz
[ 1670.864822][ T5606] usb 3-1: SerialNumber: syz
[ 1670.922126][ T5606] usb 3-1: config 0 descriptor??
[ 1671.142669][ T5762] aiptek 8-1:0.0: Aiptek using 400 ms programming speed
[ 1671.185145][ T5762] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input49
[ 1671.389507][T23986] syzkaller0: entered promiscuous mode
[ 1671.416899][T23986] syzkaller0: entered allmulticast mode
[ 1671.507269][ T5841] usb 8-1: USB disconnect, device number 14
[ 1671.507315][    C0] aiptek 8-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1673.763269][ T5841] usb 3-1: USB disconnect, device number 32
[ 1675.357131][ T5841] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 1675.550506][ T5841] usb 8-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[ 1675.577715][ T5841] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1675.587720][ T5841] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1675.795301][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1675.803550][ T5841] usb 8-1: SerialNumber: ఊ
[ 1675.838036][ T5841] etas_es58x 8-1:1.0: Starting (null) (null) (Serial Number ఊ)
[ 1676.312393][T24038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3877'.
[ 1676.354216][T24038] loop2: detected capacity change from 0 to 164
[ 1676.479220][T24038] isofs: Unable to find the ".." directory for NFS.
[ 1677.133027][T24040] loop2: detected capacity change from 0 to 1024
[ 1678.655816][ T5841] etas_es58x 8-1:1.0: could not retrieve the product info string
[ 1678.883501][ T5841] usb 8-1: USB disconnect, device number 15
[ 1678.942629][T24048] loop6: detected capacity change from 0 to 1024
[ 1678.944813][ T5841] etas_es58x 8-1:1.0: Disconnecting (null) (null)
[ 1679.987455][ T5762] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1680.028770][T24061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1680.253407][ T5762] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1680.264751][ T5762] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1680.273538][ T5762] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1680.287645][ T5762] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1680.312272][ T5762] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1680.396209][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1680.427776][ T5762] usb 1-1: Product: syz
[ 1680.441170][T16757] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1680.461814][ T5762] usb 1-1: Manufacturer: syz
[ 1680.515558][ T5762] cdc_wdm 1-1:1.0: skipping garbage
[ 1680.555363][ T5762] cdc_wdm 1-1:1.0: skipping garbage
[ 1680.594754][ T5762] cdc_wdm 1-1:1.0: skipping garbage
[ 1680.623601][ T5762] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1680.687242][T16757] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1680.748750][T16757] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1680.794485][T16757] usb 4-1: Product: syz
[ 1680.810655][ T5841] usb 1-1: USB disconnect, device number 36
[ 1680.825079][T16757] usb 4-1: SerialNumber: syz
[ 1680.898440][T16757] usb 4-1: config 0 descriptor??
[ 1681.066428][T16757] hso 4-1:0.0: Not our interface
[ 1684.418700][T24101] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1684.853828][T24114] loop0: detected capacity change from 0 to 1024
[ 1686.060123][T24124] netlink: 'syz.6.3900': attribute type 10 has an invalid length.
[ 1687.084647][T24132] binder: BINDER_SET_CONTEXT_MGR already set
[ 1687.124004][T24132] binder: 24126:24132 ioctl 4018620d 200000000100 returned -16
[ 1687.217749][T24132] binder: BINDER_SET_CONTEXT_MGR already set
[ 1687.312667][T24132] binder: 24126:24132 ioctl 4018620d 2000000002c0 returned -16
[ 1687.585614][ T5841] usb 4-1: USB disconnect, device number 33
[ 1688.027402][ T5606] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 1688.479336][ T5606] usb 7-1: Using ep0 maxpacket: 16
[ 1688.493974][ T5606] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1688.524875][ T5606] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1688.539378][ T5606] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1688.542934][ T5841] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1688.560701][ T5606] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1688.573080][ T5606] usb 7-1: Product: syz
[ 1688.577831][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[ 1688.581066][ T5606] usb 7-1: Manufacturer: syz
[ 1688.596157][ T5606] usb 7-1: SerialNumber: syz
[ 1688.628933][ T5606] usb 7-1: config 0 descriptor??
[ 1688.738550][ T5841] usb 5-1: device descriptor read/64, error -32
[ 1688.867938][T20214] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1689.074051][ T5841] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1689.393743][ T5841] usb 5-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00
[ 1689.458055][T24169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.529292][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1689.634599][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1689.649766][ T5606] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1689.660171][ T5606] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[ 1689.742235][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1689.810658][T20214] usb 3-1: Using ep0 maxpacket: 16
[ 1689.818222][T20214] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1689.839809][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1689.840482][T20214] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1689.950205][T20214] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1689.985324][ T5841] usb 5-1: config 0 descriptor??
[ 1690.033066][T24176] loop7: detected capacity change from 0 to 1024
[ 1690.050821][T20214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1690.103758][T20214] usb 3-1: Product: syz
[ 1690.116034][T20214] usb 3-1: Manufacturer: syz
[ 1690.380017][ T5606] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[ 1690.677968][T20214] usb 3-1: SerialNumber: syz
[ 1690.691449][ T5606] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[ 1690.739122][T20214] usb 3-1: config 0 descriptor??
[ 1690.955475][ T5841] hid_parser_main: 18 callbacks suppressed
[ 1690.955507][ T5841] hid-generic 0003:076D:C262.0009: unknown main item tag 0x0
[ 1691.020038][ T5841] hid-generic 0003:076D:C262.0009: unknown main item tag 0x0
[ 1691.051222][ T5841] hid-generic 0003:076D:C262.0009: unknown main item tag 0x0
[ 1691.082376][ T5841] hid-generic 0003:076D:C262.0009: unknown main item tag 0x0
[ 1691.106063][ T5841] hid-generic 0003:076D:C262.0009: unknown main item tag 0x0
[ 1691.129951][ T5841] hid-generic 0003:076D:C262.0009: unknown main item tag 0x0
[ 1691.148076][ T5841] hid-generic 0003:076D:C262.0009: unbalanced collection at end of report description
[ 1691.176041][T16760] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[ 1691.187076][ T5841] hid-generic 0003:076D:C262.0009: probe with driver hid-generic failed with error -22
[ 1691.238387][ T5841] usb 5-1: USB disconnect, device number 25
[ 1691.362072][T16760] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[ 1691.398858][T16760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1691.424398][T16760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1691.431643][ T5606] em28xx 7-1:0.0: Unknown AC97 audio processor detected!
[ 1691.460217][T16760] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1691.497233][T16760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1691.532090][T16760] usb 4-1: config 0 descriptor??
[ 1691.815420][T16760] usbhid 4-1:0.0: can't add hid device: -71
[ 1691.858103][T16760] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1691.905324][T16760] usb 4-1: USB disconnect, device number 34
[ 1692.151515][ T5606] em28xx 7-1:0.0: couldn't setup AC97 register 4
[ 1692.171119][ T5606] em28xx 7-1:0.0: couldn't setup AC97 register 6
[ 1692.212612][ T5606] em28xx 7-1:0.0: couldn't setup AC97 register 54
[ 1692.260092][ T5606] em28xx 7-1:0.0: couldn't setup AC97 register 56
[ 1692.285080][ T5606] usb 7-1: USB disconnect, device number 34
[ 1693.560082][T24191] binder: BINDER_SET_CONTEXT_MGR already set
[ 1693.581032][T24191] binder: 24190:24191 ioctl 4018620d 200000000100 returned -16
[ 1694.591011][T20214] usb 3-1: can't set config #0, error -71
[ 1694.597857][   T31] audit: type=1800 audit(1786323764.174:258): pid=24202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3923" name="zoned" dev="configfs" ino=67379 res=0 errno=0
[ 1694.645484][T20214] usb 3-1: USB disconnect, device number 33
[ 1694.672470][   T31] audit: type=1800 audit(1786323764.211:259): pid=24202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3923" name="zone_nr_conv" dev="configfs" ino=67380 res=0 errno=0
[ 1694.769276][   T31] audit: type=1800 audit(1786323764.211:260): pid=24202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3923" name="power" dev="configfs" ino=67381 res=0 errno=0
[ 1694.879962][T17612] usb 7-1: new full-speed USB device number 35 using dummy_hcd
[ 1695.055600][T17612] usb 7-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[ 1695.084156][T17612] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1695.110711][T17612] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1695.135520][T17612] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1695.189312][T17612] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1695.215495][T17612] usb 7-1: config 0 descriptor??
[ 1695.237521][T20214] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1695.302298][ T5840] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1695.421624][T20214] usb 3-1: Using ep0 maxpacket: 8
[ 1695.441469][T20214] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1695.476125][ T5840] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1695.479157][T20214] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[ 1695.516352][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1695.526775][T17612] usbhid 7-1:0.0: can't add hid device: -71
[ 1695.538383][ T5840] usb 5-1: Product: syz
[ 1695.538671][T20214] usb 3-1: config 0 has no interface number 0
[ 1695.554241][T17612] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1695.568742][ T5840] usb 5-1: SerialNumber: syz
[ 1695.580054][T20214] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1695.601388][T17612] usb 7-1: USB disconnect, device number 35
[ 1695.602421][ T5840] usb 5-1: config 0 descriptor??
[ 1695.618803][T20214] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1695.661828][T20214] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1695.680847][T20214] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1695.694772][T24214] loop3: detected capacity change from 0 to 256
[ 1695.701883][T24214] vfat: Bad value for 'shortname'
[ 1695.719940][T24214] loop3: detected capacity change from 0 to 1024
[ 1695.727348][T24214] ext4: Unknown parameter 'nouser_xattr'
[ 1696.183541][T20214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1696.200766][T20214] usb 3-1: config 0 descriptor??
[ 1696.204184][ T5840] hso 5-1:0.0: Can't find BULK endpoints
[ 1696.225590][T20214] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1696.494264][T20214] usb 3-1: USB disconnect, device number 34
[ 1696.496665][ T5840] usb 5-1: USB disconnect, device number 26
[ 1696.550455][T20214] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[ 1697.609560][T20214] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1697.839784][T20214] usb 3-1: Using ep0 maxpacket: 8
[ 1697.869329][T20214] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1697.916282][T20214] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[ 1697.949856][T20214] usb 3-1: config 0 has no interface number 0
[ 1697.969373][T20214] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1697.995857][T20214] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1698.058268][T20214] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1698.105196][T20214] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1698.186755][T20214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1698.240895][T20214] usb 3-1: config 0 descriptor??
[ 1698.304853][T20214] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1698.715626][T24248] loop3: detected capacity change from 0 to 256
[ 1698.722896][T24248] vfat: Bad value for 'shortname'
[ 1698.750549][T24248] loop3: detected capacity change from 0 to 1024
[ 1698.757978][T24248] ext4: Unknown parameter 'nouser_xattr'
[ 1698.790250][ T5841] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1699.437712][T16760] usb 3-1: USB disconnect, device number 35
[ 1699.512600][T16760] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[ 1699.569830][ T5840] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1699.591998][ T5841] usb 1-1: Using ep0 maxpacket: 16
[ 1699.620400][ T5841] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1699.666873][ T5841] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1699.697284][ T5841] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1699.746469][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1699.776910][ T5840] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1699.786031][ T5841] usb 1-1: Product: syz
[ 1699.810756][ T5841] usb 1-1: Manufacturer: syz
[ 1699.824561][ T5840] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[ 1699.840738][ T5841] usb 1-1: SerialNumber: syz
[ 1699.861908][ T5840] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1699.892563][ T5841] usb 1-1: config 0 descriptor??
[ 1699.908191][T20214] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1699.929765][ T5840] usb 7-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[ 1699.982979][ T5840] usb 7-1: config 220 has no interface number 1
[ 1700.002200][ T5840] usb 7-1: config 220 interface 0 has no altsetting 0
[ 1700.027805][ T5840] usb 7-1: config 220 interface 76 has no altsetting 0
[ 1700.062921][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1700.091546][ T5840] usb 7-1: Product: syz
[ 1700.109109][T20214] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1700.124445][ T5840] usb 7-1: Manufacturer: syz
[ 1700.134658][T17612] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1700.152892][T20214] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1700.176902][ T5840] usb 7-1: SerialNumber: syz
[ 1700.189517][T20214] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1700.236587][T20214] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1700.259529][T20214] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87
[ 1700.291167][T20214] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7
[ 1700.324975][T20214] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024
[ 1700.362474][T20214] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1700.373472][T17612] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1700.391459][T20214] usb 5-1: Product: syz
[ 1700.402375][T17612] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1700.414306][T20214] usb 5-1: Manufacturer: syz
[ 1700.429410][T17612] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1700.446063][T20214] cdc_wdm 5-1:1.0: skipping garbage
[ 1700.458510][T20214] cdc_wdm 5-1:1.0: skipping garbage
[ 1700.465409][T20214] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1700.483677][T17612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1700.499119][T17612] usb 4-1: Product: syz
[ 1700.503599][ T5840] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1700.516908][T17612] usb 4-1: Manufacturer: syz
[ 1700.518716][ T5840] uvcvideo 7-1:220.0: No valid video chain found.
[ 1700.528348][T17612] usb 4-1: SerialNumber: syz
[ 1700.597202][ T5840] usb 7-1: USB disconnect, device number 36
[ 1700.671459][ T5841] usb 5-1: USB disconnect, device number 27
[ 1701.195576][ T5841] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1701.368292][ T5841] usb 8-1: Using ep0 maxpacket: 8
[ 1701.385526][ T5841] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1701.424442][ T5841] usb 8-1: config index 0 descriptor too short (expected 74, got 45)
[ 1701.457657][ T5841] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1701.498293][ T5841] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1701.543500][ T5841] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1701.591255][ T5841] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1701.632977][ T5841] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1701.678549][T16757] usb 1-1: USB disconnect, device number 37
[ 1701.692378][ T5841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1701.696336][T17612] cdc_ncm 4-1:1.0: bind() failure
[ 1701.771512][T17612] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[ 1701.808992][T17612] cdc_ncm 4-1:1.1: bind() failure
[ 1702.015293][T17612] usb 4-1: USB disconnect, device number 35
[ 1702.087305][ T5841] usb 8-1: GET_CAPABILITIES returned 0
[ 1702.104448][T24183] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1702.112822][ T5841] usbtmc 8-1:16.0: can't read capabilities
[ 1702.255833][T24282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1702.300260][T24183] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1702.341153][T24183] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1702.358994][    C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1702.391199][T24183] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1702.408093][T24262] usbtmc 8-1:16.0: Unable to send data, error -71
[ 1702.428810][T24284] syzkaller0: entered promiscuous mode
[ 1702.456881][T24284] syzkaller0: entered allmulticast mode
[ 1702.458750][T24183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1702.484249][T17612] usb 8-1: USB disconnect, device number 16
[ 1702.523548][T24183] usb 3-1: Product: syz
[ 1702.552163][T24183] usb 3-1: Manufacturer: syz
[ 1702.573781][T24183] usb 3-1: SerialNumber: syz
[ 1704.230725][T24183] cdc_ncm 3-1:1.0: bind() failure
[ 1704.277192][T24183] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[ 1704.309580][T24183] cdc_ncm 3-1:1.1: bind() failure
[ 1704.526830][ T5762] usb 3-1: USB disconnect, device number 36
[ 1704.661319][T20214] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[ 1704.877380][T24183] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1704.879561][T20214] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1704.939628][T20214] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1704.984080][T20214] usb 8-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1705.028624][T20214] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1705.071169][T20214] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87
[ 1705.084319][T24183] usb 4-1: Using ep0 maxpacket: 16
[ 1705.112501][T24183] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1705.159748][T20214] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7
[ 1705.188704][T24183] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1705.218057][T20214] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024
[ 1705.298938][ T5762] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1705.694696][T24183] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1705.714814][T20214] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1705.750084][T20214] usb 8-1: Product: syz
[ 1705.767857][T20214] usb 8-1: Manufacturer: syz
[ 1705.778916][T24183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1705.789936][T20214] cdc_wdm 8-1:1.0: skipping garbage
[ 1705.796971][T20214] cdc_wdm 8-1:1.0: skipping garbage
[ 1705.804832][T20214] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1705.839704][T24183] usb 4-1: Product: syz
[ 1705.865315][T24183] usb 4-1: Manufacturer: syz
[ 1705.895769][ T5762] usb 1-1: Using ep0 maxpacket: 16
[ 1705.908806][T24183] usb 4-1: SerialNumber: syz
[ 1705.932219][ T5762] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1705.957660][T24183] usb 4-1: config 0 descriptor??
[ 1705.998027][ T5762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1706.043542][T20214] usb 8-1: USB disconnect, device number 17
[ 1706.057289][ T5762] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1706.118007][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1706.154602][ T5762] usb 1-1: Product: syz
[ 1706.170754][ T5762] usb 1-1: Manufacturer: syz
[ 1706.187962][ T5762] usb 1-1: SerialNumber: syz
[ 1706.227874][ T5762] usb 1-1: config 0 descriptor??
[ 1706.513096][T17612] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1706.539063][T20214] usb 1-1: USB disconnect, device number 38
[ 1706.708185][T17612] usb 3-1: Using ep0 maxpacket: 8
[ 1706.723458][T17612] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1706.756120][T17612] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[ 1706.785403][T17612] usb 3-1: config 0 has no interface number 0
[ 1706.809517][T17612] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1707.011669][T17612] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1707.023410][T17612] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1707.036563][T17612] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1707.054914][T17612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1707.077605][T17612] usb 3-1: config 0 descriptor??
[ 1707.853838][T24183] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 1707.859962][T17612] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1708.073913][T24183] usb 7-1: Using ep0 maxpacket: 8
[ 1708.092142][T24183] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1708.125973][T24183] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[ 1708.159254][T24183] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1708.208436][T24183] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1708.255875][T24183] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1708.303277][T24183] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1708.402168][T16757] usb 3-1: USB disconnect, device number 37
[ 1708.467086][T24183] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1708.512564][T16760] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1708.589629][T24183] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1708.820398][T16760] usb 5-1: Using ep0 maxpacket: 16
[ 1708.894846][T16760] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[ 1708.978362][T16760] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1708.998582][T16757] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[ 1709.019538][T16760] usb 5-1: config 0 has no interfaces?
[ 1709.041599][T16760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1709.111048][T16760] usb 5-1: config 0 descriptor??
[ 1709.295278][T24183] usb 7-1: GET_CAPABILITIES returned 0
[ 1709.307437][T24183] usbtmc 7-1:16.0: can't read capabilities
[ 1709.469087][T24346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1709.499139][T24346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1709.560691][T20214] usb 7-1: USB disconnect, device number 37
[ 1709.838530][T20214] usb 4-1: USB disconnect, device number 36
[ 1709.998642][T24350] loop7: detected capacity change from 0 to 512
[ 1710.035781][T24183] usb 5-1: USB disconnect, device number 28
[ 1710.325255][T24350] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1710.456612][T24360] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1710.569613][T24350] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1710.936581][T22409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1713.088050][T16757] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1713.182384][T24391] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1713.296008][T16757] usb 4-1: Using ep0 maxpacket: 16
[ 1713.321975][T16757] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1713.332294][T17612] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1713.568081][T16757] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1713.607938][T17612] usb 1-1: Using ep0 maxpacket: 16
[ 1713.619022][T17612] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1713.626277][T16757] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1713.665050][T24382] ==================================================================
[ 1713.673142][T24382] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0
[ 1713.680093][T24382] Read of size 1 at addr ffff888028f9dae0 by task syz.0.3983/24382
[ 1713.687976][T24382] 
[ 1713.690317][T24382] CPU: 0 UID: 0 PID: 24382 Comm: syz.0.3983 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1713.690344][T24382] Tainted: [L]=SOFTLOCKUP
[ 1713.690351][T24382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1713.690363][T24382] Call Trace:
[ 1713.690373][T24382]  <TASK>
[ 1713.690382][T24382]  dump_stack_lvl+0xe8/0x150
[ 1713.690412][T24382]  print_address_description+0x55/0x1e0
[ 1713.690438][T24382]  ? string+0x216/0x2d0
[ 1713.690457][T24382]  print_report+0x58/0x70
[ 1713.690479][T24382]  kasan_report+0x117/0x150
[ 1713.690505][T24382]  ? __lock_acquire+0x683/0x2cf0
[ 1713.690531][T24382]  ? string+0x216/0x2d0
[ 1713.690554][T24382]  string+0x216/0x2d0
[ 1713.690576][T24382]  vsnprintf+0x74a/0xef0
[ 1713.690602][T24382]  snprintf+0xe8/0x140
[ 1713.690621][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1713.690643][T24382]  ? clockevents_program_event+0x491/0x630
[ 1713.690674][T24382]  ? __pfx_snprintf+0x10/0x10
[ 1713.690693][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1713.690717][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1713.690742][T24382]  dev_vprintk_emit+0x30f/0x400
[ 1713.690772][T24382]  ? __pfx_dev_vprintk_emit+0x10/0x10
[ 1713.690802][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1713.690824][T24382]  ? __schedule+0x17ef/0x56c0
[ 1713.690849][T24382]  dev_printk_emit+0xee/0x140
[ 1713.690880][T24382]  ? __pfx_dev_printk_emit+0x10/0x10
[ 1713.690911][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1713.690932][T24382]  ? __dev_printk+0x131/0x190
[ 1713.690955][T24382]  _dev_err+0x11e/0x180
[ 1713.690994][T24382]  ? __pfx__dev_err+0x10/0x10
[ 1713.691021][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1713.691045][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1713.691066][T24382]  ? rcu_is_watching+0x15/0xb0
[ 1713.691094][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1713.691115][T24382]  ? usb_ep_queue+0x15f/0x3c0
[ 1713.691135][T24382]  raw_process_ep0_io+0x580/0x9f0
[ 1713.691159][T24382]  raw_ioctl+0x254f/0x41c0
[ 1713.691187][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1713.691210][T24382]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1713.691240][T24382]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1713.691266][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1713.691289][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1713.691310][T24382]  ? do_vfs_ioctl+0x116f/0x1530
[ 1713.691329][T24382]  ? __pfx_raw_ioctl+0x10/0x10
[ 1713.691364][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1713.691385][T24382]  ? hook_file_ioctl+0x1f0/0x5f0
[ 1713.691423][T24382]  ? __fget_files+0x2a/0x420
[ 1713.691448][T24382]  ? __fget_files+0x2a/0x420
[ 1713.691471][T24382]  ? __fget_files+0x3a2/0x420
[ 1713.691494][T24382]  ? __fget_files+0x2a/0x420
[ 1713.691519][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1713.691541][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1713.691563][T24382]  ? __pfx_raw_ioctl+0x10/0x10
[ 1713.691591][T24382]  __se_sys_ioctl+0xfc/0x170
[ 1713.691608][T24382]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1713.691628][T24382]  do_syscall_64+0x174/0x580
[ 1713.691653][T24382]  ? trace_irq_disable+0x3b/0x140
[ 1713.691678][T24382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1713.691698][T24382] RIP: 0033:0x7f0acc99dd6b
[ 1713.691716][T24382] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 1713.691732][T24382] RSP: 002b:00007f0acd845f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1713.691752][T24382] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f0acc99dd6b
[ 1713.691765][T24382] RDX: 00007f0acd845fc0 RSI: 0000000040085503 RDI: 0000000000000007
[ 1713.691778][T24382] RBP: 00007f0acd846fd0 R08: 0000000000000012 R09: 00007f0acd845fc8
[ 1713.691791][T24382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
[ 1713.691803][T24382] R13: 0000000800000000 R14: 0000000000000012 R15: 00007f0acca53882
[ 1713.691824][T24382]  </TASK>
[ 1713.691831][T24382] 
[ 1714.065527][T24382] Allocated by task 22864:
[ 1714.069920][T24382]  kasan_save_track+0x3e/0x80
[ 1714.074591][T24382]  __kasan_kmalloc+0x93/0xb0
[ 1714.079261][T24382]  __kmalloc_node_track_caller_noprof+0x4c3/0x730
[ 1714.085669][T24382]  kvasprintf+0xeb/0x1a0
[ 1714.089909][T24382]  kobject_set_name_vargs+0x61/0x110
[ 1714.095195][T24382]  dev_set_name+0xe2/0x140
[ 1714.099659][T24382]  usb_add_gadget+0x475/0x700
[ 1714.104337][T24382]  usb_add_gadget_udc_release+0x19c/0x1f0
[ 1714.110049][T24382]  dummy_udc_probe+0x6b1/0x7b0
[ 1714.114809][T24382]  platform_probe+0xf9/0x190
[ 1714.119384][T24382]  really_probe+0x254/0xae0
[ 1714.123876][T24382]  __driver_probe_device+0x1e8/0x360
[ 1714.129147][T24382]  device_driver_attach+0xe0/0x1d0
[ 1714.134246][T24382]  bind_store+0x1d0/0x220
[ 1714.138566][T24382]  kernfs_fop_write_iter+0x3a4/0x540
[ 1714.143854][T24382]  vfs_write+0x612/0xba0
[ 1714.148095][T24382]  ksys_write+0x150/0x270
[ 1714.152420][T24382]  do_syscall_64+0x174/0x580
[ 1714.157033][T24382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1714.162912][T24382] 
[ 1714.165215][T24382] Freed by task 24395:
[ 1714.169278][T24382]  kasan_save_track+0x3e/0x80
[ 1714.173950][T24382]  kasan_save_free_info+0x40/0x50
[ 1714.178975][T24382]  __kasan_slab_free+0x5c/0x80
[ 1714.183727][T24382]  kfree+0x1c5/0x640
[ 1714.187607][T24382]  kobject_put+0x267/0x550
[ 1714.192007][T24382]  device_release_driver_internal+0x48b/0x880
[ 1714.198074][T24382]  unbind_store+0x1a1/0x1d0
[ 1714.202685][T24382]  kernfs_fop_write_iter+0x3a4/0x540
[ 1714.207962][T24382]  vfs_write+0x612/0xba0
[ 1714.212205][T24382]  ksys_write+0x150/0x270
[ 1714.216533][T24382]  do_syscall_64+0x174/0x580
[ 1714.221120][T24382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1714.226999][T24382] 
[ 1714.229305][T24382] The buggy address belongs to the object at ffff888028f9dae0
[ 1714.229305][T24382]  which belongs to the cache kmalloc-16 of size 16
[ 1714.243189][T24382] The buggy address is located 0 bytes inside of
[ 1714.243189][T24382]  freed 16-byte region [ffff888028f9dae0, ffff888028f9daf0)
[ 1714.256723][T24382] 
[ 1714.259039][T24382] The buggy address belongs to the physical page:
[ 1714.265431][T24382] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28f9d
[ 1714.274209][T24382] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1714.281396][T24382] page_type: f5(slab)
[ 1714.285362][T24382] raw: 00fff00000000000 ffff88801b004640 dead000000000100 dead000000000122
[ 1714.293940][T24382] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000
[ 1714.302603][T24382] page dumped because: kasan: bad access detected
[ 1714.309005][T24382] page_owner tracks the page as allocated
[ 1714.315137][T24382] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7109114247, free_ts 0
[ 1714.334150][T24382]  register_dummy_stack+0x98/0x100
[ 1714.339266][T24382]  init_page_owner+0x2e/0x5f0
[ 1714.343959][T24382]  page_ext_init+0x509/0x550
[ 1714.348544][T24382]  mm_core_init+0x97/0xb0
[ 1714.352868][T24382] page_owner free stack trace missing
[ 1714.358216][T24382] 
[ 1714.360521][T24382] Memory state around the buggy address:
[ 1714.366133][T24382]  ffff888028f9d980: 00 00 fc fc 00 03 fc fc 00 00 fc fc 00 02 fc fc
[ 1714.374194][T24382]  ffff888028f9da00: 00 00 fc fc 00 03 fc fc 00 03 fc fc 00 06 fc fc
[ 1714.382273][T24382] >ffff888028f9da80: 00 03 fc fc 00 00 fc fc 00 00 fc fc fa fb fc fc
[ 1714.390321][T24382]                                                        ^
[ 1714.397499][T24382]  ffff888028f9db00: 00 03 fc fc 00 03 fc fc 00 03 fc fc 00 00 fc fc
[ 1714.405579][T24382]  ffff888028f9db80: 00 03 fc fc 00 03 fc fc 00 03 fc fc 00 03 fc fc
[ 1714.413737][T24382] ==================================================================
[ 1714.468319][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.475992][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.482053][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.488211][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.494300][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.500397][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.506505][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.512655][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.518758][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.524820][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.530912][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.536980][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.543174][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.549277][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.555432][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.561619][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.567706][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.573841][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.579915][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.587566][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.593686][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.599793][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.605879][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.611936][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.618034][    C0] dummy_hcd dummy_hcd.0: bogus device speed
[ 1714.632533][T17612] usb 1-1: unable to read config index 0 descriptor/all
[ 1714.639637][T17612] usb 1-1: can't read configurations, error -71
[ 1714.745669][T24382] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1714.753007][T24382] CPU: 1 UID: 0 PID: 24382 Comm: syz.0.3983 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1714.764019][T24382] Tainted: [L]=SOFTLOCKUP
[ 1714.768328][T24382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1714.778464][T24382] Call Trace:
[ 1714.781732][T24382]  <TASK>
[ 1714.784651][T24382]  vpanic+0x56c/0xa60
[ 1714.788643][T24382]  ? __pfx_vpanic+0x10/0x10
[ 1714.793151][T24382]  ? __pfx___schedule+0x10/0x10
[ 1714.798021][T24382]  panic+0xc5/0xd0
[ 1714.801739][T24382]  ? __pfx_panic+0x10/0x10
[ 1714.806150][T24382]  ? preempt_schedule_thunk+0x16/0x40
[ 1714.811524][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1714.817159][T24382]  ? string+0x216/0x2d0
[ 1714.821311][T24382]  check_panic_on_warn+0x89/0xb0
[ 1714.826312][T24382]  ? string+0x216/0x2d0
[ 1714.830653][T24382]  end_report+0x73/0x170
[ 1714.834901][T24382]  ? string+0x216/0x2d0
[ 1714.839050][T24382]  kasan_report+0x128/0x150
[ 1714.843556][T24382]  ? __lock_acquire+0x683/0x2cf0
[ 1714.848496][T24382]  ? string+0x216/0x2d0
[ 1714.852650][T24382]  string+0x216/0x2d0
[ 1714.856629][T24382]  vsnprintf+0x74a/0xef0
[ 1714.860870][T24382]  snprintf+0xe8/0x140
[ 1714.864932][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1714.870567][T24382]  ? clockevents_program_event+0x491/0x630
[ 1714.876380][T24382]  ? __pfx_snprintf+0x10/0x10
[ 1714.881048][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1714.886709][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1714.892341][T24382]  dev_vprintk_emit+0x30f/0x400
[ 1714.897198][T24382]  ? __pfx_dev_vprintk_emit+0x10/0x10
[ 1714.902575][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1714.908209][T24382]  ? __schedule+0x17ef/0x56c0
[ 1714.912885][T24382]  dev_printk_emit+0xee/0x140
[ 1714.917573][T24382]  ? __pfx_dev_printk_emit+0x10/0x10
[ 1714.922867][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1714.928494][T24382]  ? __dev_printk+0x131/0x190
[ 1714.933166][T24382]  _dev_err+0x11e/0x180
[ 1714.937326][T24382]  ? __pfx__dev_err+0x10/0x10
[ 1714.942003][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1714.947726][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1714.953351][T24382]  ? rcu_is_watching+0x15/0xb0
[ 1714.958135][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1714.963848][T24382]  ? usb_ep_queue+0x15f/0x3c0
[ 1714.968519][T24382]  raw_process_ep0_io+0x580/0x9f0
[ 1714.973545][T24382]  raw_ioctl+0x254f/0x41c0
[ 1714.977964][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1714.983595][T24382]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1714.989239][T24382]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1714.994870][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1715.000498][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1715.006125][T24382]  ? do_vfs_ioctl+0x116f/0x1530
[ 1715.010970][T24382]  ? __pfx_raw_ioctl+0x10/0x10
[ 1715.015746][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1715.021392][T24382]  ? hook_file_ioctl+0x1f0/0x5f0
[ 1715.026347][T24382]  ? __fget_files+0x2a/0x420
[ 1715.030939][T24382]  ? __fget_files+0x2a/0x420
[ 1715.035533][T24382]  ? __fget_files+0x3a2/0x420
[ 1715.040231][T24382]  ? __fget_files+0x2a/0x420
[ 1715.044846][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1715.050499][T24382]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1715.056154][T24382]  ? __pfx_raw_ioctl+0x10/0x10
[ 1715.060929][T24382]  __se_sys_ioctl+0xfc/0x170
[ 1715.065510][T24382]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1715.071584][T24382]  do_syscall_64+0x174/0x580
[ 1715.076175][T24382]  ? trace_irq_disable+0x3b/0x140
[ 1715.081206][T24382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1715.087135][T24382] RIP: 0033:0x7f0acc99dd6b
[ 1715.091562][T24382] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 1715.111195][T24382] RSP: 002b:00007f0acd845f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1715.119605][T24382] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f0acc99dd6b
[ 1715.127567][T24382] RDX: 00007f0acd845fc0 RSI: 0000000040085503 RDI: 0000000000000007
[ 1715.135534][T24382] RBP: 00007f0acd846fd0 R08: 0000000000000012 R09: 00007f0acd845fc8
[ 1715.143502][T24382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
[ 1715.151488][T24382] R13: 0000000800000000 R14: 0000000000000012 R15: 00007f0acca53882
[ 1715.159464][T24382]  </TASK>
[ 1715.162762][T24382] Kernel Offset: disabled
[ 1715.167073][T24382] Rebooting in 86400 seconds..