last executing test programs:

2m1.38237171s ago: executing program 4 (id=945):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x8205, &(0x7f00000027c0), 0x81, 0x63e, &(0x7f0000000c40)="$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")
fsmount(0xffffffffffffffff, 0x0, 0x74)
truncate(0x0, 0x1bf8)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x82)
fchdir(r1)
open(0x0, 0x12000, 0x95)
mknodat(0xffffffffffffff9c, 0x0, 0x40, 0x7)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x20fffe82)

1m59.900072976s ago: executing program 4 (id=955):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./file1\x00', 0xa00004, &(0x7f0000001500)={[{@rootdir={'rootdir', 0x3d, 0x2}}, {@gid_ignore}, {@partition={'partition', 0x3d, 0x6}}, {}, {@nostrict}, {@utf8}, {@uid_ignore}, {}, {@longad}, {@shortad}, {@undelete}, {@nostrict}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@uid_ignore}]}, 0x5, 0xc87, &(0x7f0000000780)="$eJzs3U1sHNd9APD/G5LiSm5jJk4VJ42DTVukMmO5+oopW4W7qmm2AWRZCMXcAnAlUurCFEmQVCMbbsv00kMPAYqih5yItkKBFA2Mpgh6ZFoXSC4+FDn1RLSwERQ9sEWAAC3SDWb2rbiiSOuDEkXJv59N/Xdn3pt5H6sZiuB/XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/96ukjR9MWO/oeQmMAgF1xdvwrR45tdf8HAB5b57f79z8AAAAAAAAAAAAAALBXpCjiqUgxf3Y9TVbvO2pnWgNXr02Mjm1dbX+qavZV5cuv2tFjx0986YWRk914pjX7IfXvt8/E6+PnT9dfmbsyvzC9uDg9VZ+YbV2cm5q+4yPstP5mw9UA1K+8cXXq0qXF+rHnj9+0+9rQB4NPHBw6NfLs4We6ZSdGx8bGN4rUesv333NDOrbL8NgXRRyOFM9958epGRFF7Hwsars795vtrzoxXHViYnSs6shMqzm7VO481x2IIqLeU6nRHaOt5yL6B3a1D9trRCyXzS8bPFx2b3y+udC8MDNdP9dcWGotteZmz6VOa8v+1KOIkyliJSLWBm893EAU0R8pvvXkerqQn/pRjcMXq8Tg7dtRPMA+3oGynfWBiJXiEZizPWwwingtUvzk3UNxMV9nqmvNFyJeK+P3Iq6X8eWIVH4wTkS8v8XniEdTfxTxp+X8n1pPU9X1oHtdOfPV+pdnL831lO1eV+7y/nDLlWIX7g9/ucW2/Zvi7tjj16ZaFNGsrvjr6d6/2QEAAAAAAAAAAAAAAADgftsfRXw6Urz6r79f5RVHlZf+5KmR3xn6xd6c8advc5yy7PMRsVzcWU7uvpwYeC6dS+kh5xJ/lNWiiD/I+X/feNiNAQAAAAAAAAAAAAAAAAAA+Egr4keR4qX3DqWV6F1TvDV7uX6+eWGmsypsd+3f7prp7Xa7XU+d2MhxMsflHFdyXM1xLccocv0cGzlO5ric40onfqx7vrW8Pfpy/RwbOU7muJzjSo6rOa7lGP25fo6NHCdzXM5xJcfVHNdyjD2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOOkiCJ+Fim++fX1FCkiGhGT0Ymrgw+7dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAaTAV8d1IUf/dxo1t/RGRqv87DpV/nIjGvjJ+IhojZXw5GqdzbFaxv/GNh9B+dmYgFfHDSDFYe+fGhOf5H+i8u/ExiOtvb7z7TH8n9nV3Dn0w+MTBJ0+NjH3u6e1ep60aMJxi9uq1+sTo2Nh4z+b+fPZP9Gwbyuct7k/XiYjFN996ozkzM71w7y/Kj8A9Vu/O5A7OvpsvUv9Dbur/74FBuLsXsdyZ4b3Snrt7Ef0P7+wP++/FzdeJ2m5fmNgV5f3//UjxG+/9W/eG37n/1+IXOu9u3OHjp3+4cf9/afOB7vD+37+53vCZVnn/L+8EW93/n+rZ9lL+bmSgP6K2dGV+4GBEbfHNtw63rjQvT1+enj1x5MiLIyMvHj8ysC+idqk1M93z6r4MFwAAAAAAAAAAAAAAAMDuSUX8VqRo/nA91SPiWpWvNXRq5NnDz/RFX5VvdVPe9uvj50/XX5m7Mr8wvbg4PVWfmG1dnJuavtPT1ap0r4nRsQfSmdva/4Dbv7/2ytz8mwuty7+3tOX+A7XTFxaXFpoXt94d+6OIaPRuGa4aPDE6VjV6ptWcraqe2zKZ/u4NpCL+PVJcPFFPn8/bcv7/5gz/uP72izc+C8ubD3TP+f+d/L/e/P/PHdjI//t4T9HynCkV8dNI8et/9nR8vmrngbhlzHK5v44Uwyc/m8vFvrJctw2d5wp0MgPLsv8dKf7+ZzeX7eZDPrVR9uhdDe4joJz/JyPFd//k2/EredvNz3/onf+N8Tuw+UD3cf6jJ//zkz3bDtz0vIIdd508/4cjxctPvRO/Wm353w99/kf3iQ2HOoU3ns/xgOb/l3q2DeXz/tr96jwAAAAAAAAAAMAjbCAV8TeR4vtj/emFvO1Ofv9vavOBHtDvf32qZ9vU/Vmv6LYvdjyoAAAAALBHDKQifhQpLi+9cyOH+ub87578z9/cyP8cTZv2Vj/n+1j13ID7+fO/XkP5vJM77zYAAAAAAAAAAAAAAAAAAADsKSkV8UJeT32yyuef2nY99dVI8ep/PpfLpYNlue468EPVn7Wzc7OHT8/MzNViqXlhZro+Pt+8OF3W/WSkWP+rz+a6RbW+ene9+c4a7xtrsS9EirG/7ZbtrMXeXZu8sx54rd2OOFqW/Xik+I+/u7lsXpo6rx1dHfdYWfYvIsXX/nHrsgc3yh4vy347Uvzga/Vu2QNl2e7zUT+1Ufb5i3PFA5gVAAAAAAAAAAAAAAAAAAAAPmoGUhF/HCn+68rKjVz+vP7/QM/byvW3e9b73+Ratc7/ULX+/3av72X9/+q5AsvbnRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4K1LMn11Pq4Pl+47amdbs1WsTo2NbV9ufqpp9Vfnyq3b02PETX3ph5GQ3fnj9++3T8fr4+dP1V+auzC9MLy5OT9UnZlsX56am7/gIO62/2XA1APUrb1ydunRpsX7s+eM37b429MHgEweHTo08e/iZbtmJ0bGx8Z4y/QP3fPZbpG2274si/jxSPPedH6fvD0YUsfOxuM1n50HbX3ViuOrExOhY1ZGZVnN2qdx5rjsQRUS9p1KjO0a3nYv/a7fbu9WVLTQilsvmlw0eLrs3Pt9caF6Yma6fay4stZZac7PnUqe1ZX/qUcTJFLESEWuDtx5uIIp4I1J868n19E+DEX3dcfji2fGvHDm2fTuKB9jHO1C2sz4QsVLcyZyxncEo4h8ixU/ePRT/PBjRH52v+ELEa2X8XsT16Mx3Kj8YJyLe3+JzxKOpP4r4n3L+T62ndwfL60H3unLmq/Uvz16a6ynbva7s8P7Qbrf/qIwP7/6wm/b4takWRfyguuKvp3/x9xoAAAAAAAAAAAAAAABgDynilyPFS+8dSlV+8I2c4tbs5fr55oWZTlpfN/evmzPdbrfb9dSJjRwnc1zOcSXH1RzXcowi18+xUcZauz2Z3y/nuJLjao5rOUZfrt9XpSu2G/n9ZI7LOa7kuJrjWo7Rn+vn2MhxMsflHFdyXM1xLcfYI7l7AAAAAAAAAAAAAAAAAADA46Wo/kvxza+vp/ZgZ33pyejEVeuBPvZ+HgAA//9+4PKL")

1m58.969983358s ago: executing program 4 (id=964):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000005c0)="09000000ffffffffb79e08da88a8", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1m58.627449677s ago: executing program 4 (id=968):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8)
syz_mount_image$fuse(0x0, 0x0, 0x900010, 0x0, 0x0, 0x0, 0x0)
getdents(r0, 0x0, 0xbb)

1m57.423248707s ago: executing program 4 (id=980):
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0)
syz_clone(0x40a02000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)

1m56.233317176s ago: executing program 4 (id=987):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000002c0)="0f20d835080000000f22d80f009239dd000026674b0fc71b66b852000f00d00f78ff430f1e1f65430f0664440f22400f32c482b5be9800000000", 0x3a}], 0x1, 0x31, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m41.122715087s ago: executing program 32 (id=987):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000002c0)="0f20d835080000000f22d80f009239dd000026674b0fc71b66b852000f00d00f78ff430f1e1f65430f0664440f22400f32c482b5be9800000000", 0x3a}], 0x1, 0x31, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8.009716948s ago: executing program 0 (id=1754):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3e, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

6.820334816s ago: executing program 0 (id=1756):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001", @ANYBLOB="000000000000000000000000000000000000000032000000ff01"], 0x1a4}}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)}, 0x800)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6.071536674s ago: executing program 1 (id=1763):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.722643543s ago: executing program 0 (id=1767):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x702, 0xe80, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.505907528s ago: executing program 0 (id=1769):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x1, 0xf3, "2a9d1bfc", "025074b2"}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

5.083759788s ago: executing program 1 (id=1774):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

4.804252044s ago: executing program 2 (id=1779):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001", @ANYBLOB="000000000000000000000000000000000000000032000000ff01"], 0x1a4}}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)}, 0x800)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.450805973s ago: executing program 1 (id=1785):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
write$hidraw(r1, &(0x7f0000001380)='\x00+', 0x2)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

4.393643625s ago: executing program 2 (id=1786):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.243848058s ago: executing program 3 (id=1788):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.065987633s ago: executing program 3 (id=1790):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x702, 0xe80, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.012081454s ago: executing program 3 (id=1791):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0xfffffe35, 0x0, 0x0, 0x34}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

3.918536586s ago: executing program 3 (id=1793):
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r0 = socket$kcm(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x31, 0x6000000000000000}, 0x50)

3.785010989s ago: executing program 5 (id=1794):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000002000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))

3.691517511s ago: executing program 3 (id=1795):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"})
write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd)

3.536315295s ago: executing program 5 (id=1796):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001", @ANYBLOB="000000000000000000000000000000000000000032000000ff01"], 0x1a4}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)}, 0x800)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.277571381s ago: executing program 2 (id=1797):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r0, 0x0, 0x987a3a9f32358a4c)

3.084785716s ago: executing program 2 (id=1798):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f00000000c0)})
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

2.544494569s ago: executing program 1 (id=1799):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32=0x0, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bf8e00000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)

2.477010821s ago: executing program 1 (id=1800):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f00000040c0)=""/4052, 0xfd4}, {&(0x7f0000000dc0)=""/152, 0x98}], 0x2}, 0x22)

2.265616385s ago: executing program 5 (id=1801):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x702, 0xe80, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.09759722s ago: executing program 5 (id=1802):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r0, 0x4068aea3, &(0x7f0000000080))

2.06274944s ago: executing program 5 (id=1803):
r0 = syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000002200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x80, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x4, 0x20, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x9, 0x9, 0x9a}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0xd, 0x8, {0x8, 0x25, 0x1, 0x83, 0x3, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x49, 0x1, 0x5, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x9}}}}}}}}]}}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x18, @string={0x18, 0x3, "af631519b8f9516cc1d78c56c0d0ad78370a65c8b8d7"}}, 0x0, 0x0, 0x0}, 0x0)

1.799699397s ago: executing program 0 (id=1804):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
write$hidraw(r1, &(0x7f0000001380)='\x00+', 0x2)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

487.434708ms ago: executing program 1 (id=1805):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a40100001000", @ANYBLOB="000000000000000000000000000000000000000032000000ff"], 0x1a4}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)}, 0x800)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

487.225258ms ago: executing program 3 (id=1806):
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
fsopen(0x0, 0x1)
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="12010000000000404c050010afd6000000010902240001000000000904000001030001000921010100012205000905810372041454bbf87670414b4117b7299fae3024a52d", @ANYRESHEX, @ANYRES16, @ANYBLOB="eb15d02e2a25c7b15ee9e2cff3b3106f704d6c764194777d439a28abcee5240e04f8707a3aef2b34c9c4142e7505142d135b67bc15260a0d83a576ddca102a53a565efc5f1681772a3cbc2168b92745d9cd569804052ee944671f6407ecac1f7be063129fe8d9829a6a9fa029c3dbc0c917ecf99bda8d1804b38c1c2d96de5b7a22e5cb00cc499e15015b002d088bfbf9ae8e6a09c719537856ee8868c6ae802c1ba333bf2d71b5d306c5aa7fc6bc2b76029cc173727ddb908bc69c25c1b41f602ca2106e877274e6cbe76422c91a75272d1cb1b0f1b259258f8528579e189639141656b0375aba2f18c3b4894352ad0a1264793584a812c30dfec239fe89fc10dab0901f908c41a9aa1578a78f76c95bd1b1d51d8635f7791d31faec5b5d40ad234eeaab76c9b03b7145c77e8b1c4f9726627839917323214d63477ae82cf0fa744a4d5be908a009ba6f4a3311ac7028febfe740987d79a75c02a0612b5fd5c5ccb50ac69221c53d91dc36c28f69afad4da04aab894f8a288d90f9d2eef733339641a5eae1486ef427f6e5422db17862e062b1dbc2dbf7732b27dad4ad7eb859cf4b0e536b29e90e7745709e06ed44458e9f26dc7c90875b5dc4856210bc8a761fb172ea1733658db052420090a2e623b6d40b7ddc334d825fa177221f104316a86ea7a94befff495be9f96401791a6213514dc0978275afa6436cd7ac567bc6cc3d45da9407a11d84616abedd7b2de6565ab8064b404a29055db912c341db1b300f031d37753c8f9f92536de5beb3bd779c89d95b93884b2c6d11e24ff30fb8caeb6ce138b29e22b297e6a2cb710cba8223b3f205f56cb8f7bbd62fc2549b3185f192999d1393684578f1dba23256daac9419141e19f5fee01c992524d059ff244553f99e4c8c2679d0885a3421d868ea1202f84b8220994b85d39654d2fbcec1dcc1c85d4a06342f4c90940be34875a0674f1382447e402ddb5d5d3a266924b8912f1fa60f2af1eb0dee493dd185a253094d4d673f482919dc7fe8eeec1d090971d4c7b76a485eed6fde7fae1b19e1a502786ec29f584627d452c00291a5360557107b425d557c6540c33383c7dc8e639db0b8586fa82cd420872c62fcdb5a8876c93f88b03706007970723d38690827f1b004df80aabc14c7f9e1768bf7d7c3ce4cc12405c2911ee0f66534fd0d121d4420f1994b859c1184c1e53cb791d77b1233447e579f06de705365a68ba06cf35b1f18cf949ca09a40655d38f2ef7a29974f9fedce557744a79b1441746770519c8ee56cc16dc989b14b6087251c4cb3276dfc00eb9bdaf895c8f542c50bea7eb92d6a45c6f15236dfadcbf3e1b9152abb3de1354782102c64adecc6d9c3b6d5034cb85f2027a892e4e0dd4071052be3f8f42e85d623601fff1eadaa574f0d7bbb5da7a3beed6376b8447bee6674e93ca365d398abaddf9b986269bd56e723d52c239d0bd9b8a340fab2d3f01e3dec3fd687c7fbcdfd688f263117df5910823e93e49562c64296b7779b8f92704f0166cfab0be4ded9f6a60e2c0b6a90ee1b29019ee453a9b578d48bb892cbb0c3d95f531eb4f93a6919fd8c43af606aade82223188e94b870a454979316a781a6d07bf678469e0c242c42edae4b1beca05716b3609b33660971d46689eb17412d326bce8db7a80ae42061706406e183efae60671963f16da49386dec59b49ee0681ec1142ba7dd93f36db38bb500e4abc55a943df4c0b3b46623cb589d2bd10d8e7fc28fcdaf4eb46a1791b3f14ff18e9ff3df6f13fb0b67f6ef5f3956380961600ea3d83aae1a9e30cb0174c506f36ec25407bb6e82816fbcbbaf8f5ac80168b9fc5043bd99c26cb93b13f43f0a575c090f58d13fef733e717350f0f1003fc522a04036b9c0fbb15200685f739aabc61f403df3e6d9b4d24f1cb08ce3e9d0fc6f362497ce131a9161ac997bf4c6aa84f2767001b7714a1674d3a84b8b6ac3bc5365eeb52914edbce811dc519c05f0089cec22bfb47d738c838e43cdf14d713c4642553749490f5f72862dadbced814534a768cb017032da6f5b5236590ce735b5ab0a3ab97cb80748303ea446c26fa5af9ed0b3a124f0a89c9773095e442edb4d5ece8e3bd1a50a29b19c7d9cb4724912a848b1e699c62b4d052b48bc64a1b559d169be3022b5c8177f4cef8d8388c8094ca0797c971d2fc19dc5dd33032284c16d07e6cfc3fba27182058d5cc8643dd50a301bc9af9c3cf6e88920c8461ba91a499e9aba9c51aa4071643acb96742f9dde561ab0f5aed2e9be85b01e5a01f959e9769b2d709391cb09a3d628b857433ac1f95e688baea5c67057c7bbf6aa8948efdfec807351209e6637bac880fbccdf3ca4380c56781727608a954ac40ae01f08e7d27e026a12f7e37103839a5c52eed75b447c83e566edba41b7d977f9beda2ad9531b9517c37a471f8d2c5fb6c6b7d8dd92240504c34c91aa700ebedcddac6f05551c81e7336ccb7257ba1d0e344cb995d74172313d2870193b2e11c7466fcf90242b66470831640c6cb6d4a29b9c5f4300fd46fdfe01846ca6a32b63f1e6cb60cb205a2a119c75287add18afe7df55abfca7837861c63ddba2b92dd5f2bc9799fecb17640653879b7a6fb9d5ba9cfab8b296c503489aa0aabb73d4f8d53d40b790c8ca93df9dea324ab712c8c34d61a5e51eaedf504c7b98fe9e2a21113f8a05b6f72af868e0d96496d21252b399a0c11edcf4b1c293ee5728ba07461e6d1f725ef80707cb178fbffe30f58a29215dfccdac33d4ba2fa77055ec5497cb89136f2a57971546128736367d84fceb354b2b90c565ab8b972293aaf7f01c0a2ca68e07a711c1ecd429e24675fec679cace2ebad28f0d6ac2af9863a52b595577a2f0de2151d1a3c3551dd528af56fbedd79a92945d40b763839b65789e0a5846a69afc7cb64d452f3f29b26913d0128fb77e01f01102c7a90f7e87bf0cf4fd46ade4e7cd4c8da11263ba77572b77e89a044880979142b20c7fcf57de106f2f8c06b8e8d54b8e1ac8e78f373ffb9c0221deba3427e6fa557c63c7664dd9968931554875a9195151d25208f5c60367f61b6fa5cf669366ee5069f92dddedbc6dfd383b7cbb2e9ff233f82922bf2f37e3fcc33a2253a7d9f1899d40dd5931efe41398f8293d40c4a0c3d37e990d4497d18d8371d7b5063cdbb76a4ef12c270d44db1438ac0317864af2cedc5b2af3bdfb46d0de9a5d1f28e84c5fbf2d0b7fdfe581b1a1adbc3da2044e34b31cfe017e482cd3e66d6206b8bf5e050cf74d226e3125c62ab527ac21baff8311c7c52f64c1302339be0180799ad7d9b0377046f07c81940c9a83d8456e921b6738a4cd4040b6dc852559ff8ab6112c9ee8891e72e6b72b2974e7df9a731718ec862c81ac0b8fcf06b62fd2498f9f348d3362a3ec83cd82aadb8e52f896caa5dea57ffdc076dfdc51eff8217b178eaef5c1239cf6248eb56d70e6cb9aba76ece469e6b3a85967b6ead141be763992ddb49cf7b8057523b45403ede68676dbbce7f7ef21f43d45b87e17d71d90111b5cd21cc32e55d65b92396901ae6f1db51c0121047fdba6e49c3214a0b5d91a3849f7976270112b1bb92ed6a165eb40780c5eef2395a901427d7e4de091f7d2acbf899f7095cd075b9cfd3e04774dca46943b8a7b490ea37d5057f01bd337b8dd922d08b8e13a9067be2be0d0c36d4ec3ba20253637bfba4bb04fdf2a9042071d2a7f0d64fd23b8e3a6bba7762ba34e0b2e02c698e01a5fbd51bdbdd12797fef7b27e642436d9f2b129cc836d7d1879cfc8e6f74633b57c3a4b849aec9019a1a6482c9db173fa0724c3c31f3c85c28e7a48254ced9a849129d7350502297da63a4644c37a55e2345f209ec01dcfd93e202115f39893ba2753dde87beae73b03d9a32335d086aa25938d2d2730296e6363235199202a2571460161a0fd689dc086af49de0fc0ecd8de2018ee4340a80d12626cb7c69a530eef55dc827d7b5674ddb8e9b7201379bc9a3ba7bc8ea532baa62a5896e307675a8acd74b34541530535958568b1888ee9b7b5fd5b07a11d2a87baed57fb75dd806145588800f9acb9ad83e82ba5161c416cec5e0c1ccd95913bd0477d0fe245508bca141dad2eea0153182650e906123f26e807e56af2e29681087a439489f80a16eae8ce03e717f0527f00573d36af371146e6077332feabbd0e81d06bf2b4b0e4a9e81d1ec63cd4ba1831af6b5f803cbc524b1de59c9d94bf26cd70442660710465d6ce93675f7973ae547797841688a9fdb876cde27e06a9b749a23291fd8902e47c2648ab40fc1159e57435164eb326b471486b972314ad6b183091b71a538fc9f15aacb9793aebc7fe636fcc0f77c24359c96904f23230c5b0d9d81550bf7418527ed91eb64d1778471cc539dec2edc4367661b55e082136b68ae78d2f7286eaca9e11e1bb56747e5150c80da1f93a8f1cfaedeb3925c50b720cc14e175fbeea3a3f9d13a04150c470b712dce9a1ec88091995fbf931958fa2a19af7aa8f907ed923b9a1abc029ae103225cf1a5fc941cbb9917135dbaa72a5378efcf1fbe860251197b5391cd63c1ce5ce8eaa97579f505f48c1144803bddfca8f85bf3e8e7a0f1d447d9b94463d8bf2a61e19129bd0e8444cabe02e4259a59aaa4d0050d42d98a507e784254fd655fa152d98214dc504b8ac0b39bb4437a6d20fbaa7778b5cba7471e93e5e5af12e938574ec79732e8a0f2a86f89a5c01bb96f72af36255aabf43b0a507cbd653fb8060833be34ca23f82a847821a7169116746ebaa25c34e6433dfff75e5b76b14c54ad3660e929fd90ddeb9efceb8e03618eb1b1b904e16129a75445f17ddafc3931f3b0bb29a66a6c8e4cfce466ca95b54bf7a36746e603c4f5be8002fc61bf8542a28e062448dd9e0c4d7cc327a17060ca8034f7ba522c9cbb23d2be35e939e4b4dab3d5de7476c42de2d4675ed1db92bc813de36626bbdfe8e33c26860290ec8d0a1c5e52795607a1027141c9dc081207b9e292ffd849eec2b649b33ad42b1e2d15a841197ba350bd706924134d0a7c0edc9dd7dca35e3227fe8dff4d376e6113190f663c9d679a0100e7dfd84276172bae6e5f0df4afc1d7689ff6b49b078521b0db29d5f0e218d252fabb1831ff52e115d0d3dc8c9c8872ee843947356dd477d959fd1d93597d0cb02132350d09ba67d6527f5d884f985c758f3da95b744a5e4fa93ddd3a8df7b9e687690dd8e899ba86ffa7fcaece580e79b1de6bfb3c5218e9e3c2338a5d79d04b9f022657ca5e0e2599b674d0f2ceac1802d40b1cc68ce1949fc890bc21cb7b6ec62f1efd19f5f99650afc4822860a557e6e973a5ed4cc07b2b4cbbe6b8553f9876458f803caa8bf7b30556300b8191bbbe83dcbadf3a7ef95fef271c83d305e613f46a553793fdfc3556d72bdcbcdc11123687e50b6754e9860341c1b952be39430e2b2b3407597f1ce84ddd9f4be1daba3c43a0f190891d3f981c1c88f48c857b841c5ee4b239f1c5e86cbf7b42974a954fa87d81a0a5baa7f5a02cc82749268a388cb1929ed01240c2a2e94a909b909606e147e63211a69df9a236294240cbff24fdb504e3bcfd85ce98892eb9020a6334de3d90eea1ee3524722096f8dc76ab58f4fd01a0b0d38c300729dd9b69d7a9fa78d7a42f0b348682e06261c0aa3b04ee621e7e553ea34d94ba01d5d92fc160440a0b264be9aa417a462efeb6ada24c4da4196b394463e26232cfabae03bfab62a73f058f4d1a0dd75e3"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)

460.376419ms ago: executing program 2 (id=1807):
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x20000000, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000002, 0x40000000009, 0x8000000000005, 0x800040068], 0x22271fff, 0x547d1})
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x1800, 0x7, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

55.165109ms ago: executing program 0 (id=1808):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}, 'C\x00'}, 0x28)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
statx(0xffffffffffffff9c, 0x0, 0x2000, 0x800, 0x0)
read$FUSE(r3, 0x0, 0x0)
read(r2, &(0x7f0000000080)=""/56, 0x38)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='h', 0x1}], 0x1, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x18}, 0x0)
recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/246, 0xf6}], 0x1}, 0x40)

54.546369ms ago: executing program 5 (id=1818):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000018c0), &(0x7f0000001900), 0x10000, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

0s ago: executing program 2 (id=1809):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

kernel console output (not intermixed with test programs):

OR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  200.102597][ T6541] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.695: invalid indirect mapped block 9 (level 0)
[  200.140130][ T6547] loop1: detected capacity change from 0 to 2048
[  200.171389][ T6541] EXT4-fs (loop4): 1 truncate cleaned up
[  200.177086][ T6541] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  200.206053][ T6547] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  200.221911][ T6529] (syz.2.690,6529,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  200.253252][ T6547] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  200.312236][ T6529] (syz.2.690,6529,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  200.335925][ T6547] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  200.358207][ T6529] JBD2: Ignoring recovery information on journal
[  200.359748][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  200.380607][ T6547] UDF-fs: Scanning with blocksize 512 failed
[  200.485127][ T6529] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  200.494951][ T6547] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  200.611540][ T6555] loop3: detected capacity change from 0 to 128
[  200.621618][ T6553] loop4: detected capacity change from 0 to 512
[  200.628812][ T6553] EXT4-fs: Ignoring removed mblk_io_submit option
[  200.632437][   T26] audit: type=1800 audit(1787739056.597:53): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.697" name="file1" dev="loop1" ino=838 res=0 errno=0
[  200.701997][ T6553] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.699: corrupted in-inode xattr
[  200.882416][ T6553] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.699: couldn't read orphan inode 15 (err -117)
[  200.931127][ T6553] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  201.034633][ T6553] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  201.172526][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  201.196490][ T6561] loop3: detected capacity change from 0 to 4096
[  201.223072][ T6561] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  201.366788][ T6564] loop4: detected capacity change from 0 to 2048
[  201.427307][ T6564] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  201.490604][ T6567] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  201.775616][ T6573] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d)
[  202.039662][ T4284] ocfs2: Unmounting device (7,2) on (node local)
[  203.773478][ T6572] XFS (loop4): Mounting V5 Filesystem
[  203.859145][ T6572] XFS (loop4): Ending clean mount
[  203.879813][ T6576] XFS (loop3): Mounting V5 Filesystem
[  203.989821][ T6576] XFS (loop3): Ending clean mount
[  204.040076][   T26] audit: type=1800 audit(1787739059.997:54): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.708" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  204.062533][ T4285] XFS (loop4): Unmounting Filesystem
[  204.170036][ T4277] XFS (loop3): Unmounting Filesystem
[  204.398939][ T6603] set_capacity_and_notify: 4 callbacks suppressed
[  204.398954][ T6603] loop1: detected capacity change from 0 to 512
[  204.443575][ T6603] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  204.516475][ T6603] EXT4-fs: error: could not find journal device path
[  204.559693][ T6605] loop4: detected capacity change from 0 to 512
[  204.619980][ T6605] EXT4-fs: Ignoring removed mblk_io_submit option
[  204.757152][ T6605] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.713: corrupted in-inode xattr
[  204.807372][ T6605] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.713: couldn't read orphan inode 15 (err -117)
[  204.887046][ T6605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  204.981895][ T6605] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  205.148763][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  205.661838][ T6603] loop1: detected capacity change from 0 to 32768
[  205.690638][ T6603] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  207.095534][ T4351] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  207.245718][ T6613] loop3: detected capacity change from 0 to 40427
[  207.322142][ T6613] F2FS-fs (loop3): invalid crc value
[  207.358137][ T6613] F2FS-fs (loop3): Found nat_bits in checkpoint
[  207.471516][ T6635] loop4: detected capacity change from 0 to 2048
[  207.529147][ T6613] F2FS-fs (loop3): Start checkpoint disabled!
[  207.550418][ T6635] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.605570][ T6613] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  207.908678][ T5525] kworker/u4:19: attempt to access beyond end of device
[  207.908678][ T5525] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  208.103872][ T6640] loop2: detected capacity change from 0 to 256
[  208.119365][ T6632] loop1: detected capacity change from 0 to 32768
[  208.150782][ T5157] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  208.268555][ T6632] XFS (loop1): Mounting V5 Filesystem
[  208.344687][ T6632] XFS (loop1): Ending clean mount
[  208.362215][ T5157] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.400498][ T5157] usb 5-1: config 0 has no interfaces?
[  208.406024][ T5157] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  208.415546][   T26] audit: type=1800 audit(1787739064.377:55): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.725" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  208.470551][ T5157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.510716][ T5157] usb 5-1: config 0 descriptor??
[  208.530146][ T4281] XFS (loop1): Unmounting Filesystem
[  208.607442][ T6656] loop3: detected capacity change from 0 to 2048
[  208.729251][ T6659] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  208.758109][ T5346] usb 5-1: USB disconnect, device number 3
[  208.853547][ T6661] loop2: detected capacity change from 0 to 2048
[  208.892794][ T6661] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  209.330563][ T5346] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  209.532222][ T5346] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.559907][ T5346] usb 5-1: config 0 has no interfaces?
[  209.575977][ T5346] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  209.596228][ T5346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.611989][ T5346] usb 5-1: config 0 descriptor??
[  210.065566][ T6675] loop1: detected capacity change from 0 to 32768
[  210.163741][ T6679] loop2: detected capacity change from 0 to 32768
[  210.293521][ T6679] XFS (loop2): Mounting V5 Filesystem
[  210.349494][ T6694] jffs2: notice: (6694) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  210.406558][ T6679] XFS (loop2): Ending clean mount
[  210.586832][ T4284] XFS (loop2): Unmounting Filesystem
[  210.718969][ T6683] loop3: detected capacity change from 0 to 32768
[  210.925212][ T5347] usb 5-1: USB disconnect, device number 4
[  210.986058][ T6683] XFS (loop3): Mounting V5 Filesystem
[  211.174055][ T6683] XFS (loop3): Ending clean mount
[  211.272754][ T6716] loop4: detected capacity change from 0 to 4096
[  211.310654][ T6716] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  211.322758][ T4277] XFS (loop3): Unmounting Filesystem
[  211.336666][ T6720] loop1: detected capacity change from 0 to 256
[  211.817643][ T6724] loop4: detected capacity change from 0 to 4096
[  211.861822][ T6724] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  211.990187][ T6724] ntfs3: loop4: ino=5, "/" directory corrupted
[  212.025964][ T6730] loop1: detected capacity change from 0 to 2048
[  212.195281][ T6719] loop2: detected capacity change from 0 to 32768
[  212.215754][ T6736] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  212.334546][ T6719] XFS (loop2): Mounting V5 Filesystem
[  212.380597][    T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  212.406644][ T6736] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  212.417599][ T6736] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  212.418493][ T6719] XFS (loop2): Ending clean mount
[  212.446369][ T6736] Remounting filesystem read-only
[  212.456252][ T4281] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  212.582962][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  212.610037][    T7] usb 1-1: config 0 has no interfaces?
[  212.624203][    T7] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  212.643958][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.680059][ T4284] XFS (loop2): Unmounting Filesystem
[  212.698489][    T7] usb 1-1: config 0 descriptor??
[  212.706929][ T6751] loop1: detected capacity change from 0 to 4096
[  212.750888][ T6751] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  212.846700][ T6753] loop4: detected capacity change from 0 to 4096
[  212.901471][ T6753] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  212.924763][    T7] usb 1-1: USB disconnect, device number 2
[  213.137171][ T6755] NILFS (loop3): invalid segment: Checksum error in segment payload
[  213.171825][ T6755] NILFS (loop3): trying rollback from an earlier position
[  213.220552][ T6755] NILFS (loop3): recovery complete
[  213.251524][ T6759] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  213.490758][    T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  213.562199][ T6768] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  213.617424][ T6768] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  213.701742][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.728979][    T7] usb 1-1: config 0 has no interfaces?
[  213.747282][    T7] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  213.784049][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.810025][    T7] usb 1-1: config 0 descriptor??
[  213.821530][ T4777] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  213.956624][ T6774] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.092771][ T6774] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  214.139138][ T6774] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  214.174726][ T6774] Remounting filesystem read-only
[  214.180363][ T4277] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  214.514540][ T6765] XFS (loop2): Mounting V5 Filesystem
[  214.624013][ T6765] XFS (loop2): Ending clean mount
[  214.701658][ T4284] XFS (loop2): Unmounting Filesystem
[  215.041417][ T6782] F2FS-fs (loop3): invalid crc value
[  215.067177][ T6782] F2FS-fs (loop3): Found nat_bits in checkpoint
[  215.194569][ T5347] usb 1-1: USB disconnect, device number 3
[  215.270568][ T6782] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  215.443015][ T6782] syz.3.772: attempt to access beyond end of device
[  215.443015][ T6782] loop3: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  215.450375][   T26] audit: type=1800 audit(1787739071.407:56): pid=6782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.772" name="file1" dev="loop3" ino=10 res=0 errno=0
[  215.508441][ T6782] syz.3.772: attempt to access beyond end of device
[  215.508441][ T6782] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  215.656636][ T4277] syz-executor: attempt to access beyond end of device
[  215.656636][ T4277] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  215.759119][ T6817] jffs2: notice: (6817) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  215.996385][ T6800] set_capacity_and_notify: 5 callbacks suppressed
[  215.996401][ T6800] loop4: detected capacity change from 0 to 32768
[  216.117302][ T6800] XFS (loop4): Mounting V5 Filesystem
[  216.245943][ T6800] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  216.297632][ T6837] loop3: detected capacity change from 0 to 512
[  216.341342][ T6800] XFS (loop4): Starting recovery (logdev: internal)
[  216.351772][ T6837] EXT4-fs: Ignoring removed mblk_io_submit option
[  216.431823][ T6837] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.785: corrupted in-inode xattr
[  216.438342][ T6843] loop1: detected capacity change from 0 to 128
[  216.459533][ T6800] XFS (loop4): Ending recovery (logdev: internal)
[  216.470669][ T6837] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.785: couldn't read orphan inode 15 (err -117)
[  216.484359][ T6843] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  216.497048][ T6837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  216.515059][ T6837] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[  216.604740][ T6843] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  216.707522][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  216.794765][ T5525] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  216.832796][ T4285] XFS (loop4): Unmounting Filesystem
[  217.321450][ T6826] loop2: detected capacity change from 0 to 32768
[  217.410060][ T6855] input: syz1 as /devices/virtual/input/input6
[  217.521266][ T6826] XFS (loop2): Mounting V5 Filesystem
[  217.649648][ T6826] XFS (loop2): Ending clean mount
[  217.741007][ T4284] XFS (loop2): Unmounting Filesystem
[  217.935237][ T6853] loop1: detected capacity change from 0 to 40427
[  217.987794][ T6853] F2FS-fs (loop1): invalid crc value
[  218.080321][ T6853] F2FS-fs (loop1): Found nat_bits in checkpoint
[  218.250609][ T6853] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  218.401872][ T4281] syz-executor: attempt to access beyond end of device
[  218.401872][ T4281] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  218.601849][    T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  218.777974][    T7] usb 4-1: device descriptor read/64, error -71
[  218.822364][ T6893] loop4: detected capacity change from 0 to 512
[  218.839766][ T6895] jffs2: notice: (6895) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  218.909442][ T6888] loop2: detected capacity change from 0 to 40427
[  218.923612][ T6888] F2FS-fs (loop2): invalid crc value
[  218.929680][ T6893] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  218.943420][ T6893] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.969135][ T6888] F2FS-fs (loop2): Found nat_bits in checkpoint
[  218.994574][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  219.080782][    T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  219.091378][ T6888] F2FS-fs (loop2): Start checkpoint disabled!
[  219.176139][ T6888] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  219.240666][    T7] usb 4-1: device descriptor read/64, error -71
[  219.385941][    T7] usb usb4-port1: attempt power cycle
[  219.458056][ T6908] loop4: detected capacity change from 0 to 64
[  219.468257][ T4777] kworker/u4:16: attempt to access beyond end of device
[  219.468257][ T4777] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  219.494503][ T6908] hfs: unable to locate alternate MDB
[  219.499914][ T6908] hfs: continuing without an alternate MDB
[  219.820667][    T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  219.867376][    T7] usb 4-1: device descriptor read/8, error -71
[  220.155581][    T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  220.187560][ T6926] jffs2: notice: (6926) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  220.214938][    T7] usb 4-1: device descriptor read/8, error -71
[  220.341540][    T7] usb usb4-port1: unable to enumerate USB device
[  220.397931][ T6933] device syzkaller1 entered promiscuous mode
[  220.588789][ T6936] loop1: detected capacity change from 0 to 512
[  220.608342][ T6936] EXT4-fs: Ignoring removed mblk_io_submit option
[  220.636488][ T6936] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.817: corrupted in-inode xattr
[  220.657220][ T6936] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.817: couldn't read orphan inode 15 (err -117)
[  220.669960][ T6936] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  220.715618][ T6936] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  220.839771][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  220.930379][ T6944] loop1: detected capacity change from 0 to 64
[  220.951792][ T6944] hfs: unable to locate alternate MDB
[  220.957203][ T6944] hfs: continuing without an alternate MDB
[  221.321373][ T6942] loop2: detected capacity change from 0 to 32768
[  221.491229][ T6942] XFS (loop2): Mounting V5 Filesystem
[  221.537805][ T6962] jffs2: notice: (6962) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  221.573637][ T6942] XFS (loop2): Ending clean mount
[  221.718612][ T4284] XFS (loop2): Unmounting Filesystem
[  221.805291][ T6969] random: crng reseeded on system resumption
[  221.860547][ T5347] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  222.098894][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 165, changing to 11
[  222.117911][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50882, setting to 1024
[  222.144133][ T5347] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  222.176348][ T5347] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  222.186765][ T6948] loop4: detected capacity change from 0 to 40427
[  222.203471][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.214676][ T6948] F2FS-fs (loop4): invalid crc value
[  222.238335][ T6948] F2FS-fs (loop4): Found nat_bits in checkpoint
[  222.259279][ T5347] usb 4-1: config 0 descriptor??
[  222.273021][ T6957] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  222.366867][ T6948] F2FS-fs (loop4): Start checkpoint disabled!
[  222.397009][ T6948] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  222.688362][ T4777] kworker/u4:16: attempt to access beyond end of device
[  222.688362][ T4777] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  222.713483][ T5347] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  222.746786][ T5347] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  222.758956][ T5347] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  222.782322][ T5347] plantronics 0003:047F:FFFF.0004: unknown global tag 0xc
[  222.817041][ T5347] plantronics 0003:047F:FFFF.0004: item 0 2 1 12 parsing failed
[  222.845788][ T5347] plantronics 0003:047F:FFFF.0004: parse failed
[  222.867731][ T5347] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22
[  222.913232][ T5347] usb 4-1: USB disconnect, device number 9
[  223.177665][ T7006] loop2: detected capacity change from 0 to 4096
[  223.185501][ T7006] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  223.220643][ T5157] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  223.384563][ T5157] usb 5-1: device descriptor read/64, error -71
[  223.660546][ T5157] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  223.799446][ T5524] Bluetooth: hci5: Frame reassembly failed (-84)
[  223.827046][ T5524] Bluetooth: hci5: Frame reassembly failed (-84)
[  223.830546][ T5157] usb 5-1: device descriptor read/64, error -71
[  223.970672][ T5157] usb usb5-port1: attempt power cycle
[  223.971299][ T7013] loop1: detected capacity change from 0 to 40427
[  223.982948][ T5347] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  224.007964][ T7013] F2FS-fs (loop1): invalid crc value
[  224.037942][ T7013] F2FS-fs (loop1): Found nat_bits in checkpoint
[  224.092613][ T7013] F2FS-fs (loop1): Start checkpoint disabled!
[  224.139497][ T7013] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  224.150627][ T5347] usb 3-1: device descriptor read/64, error -71
[  224.236706][   T76] kworker/u4:5: attempt to access beyond end of device
[  224.236706][   T76] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  224.345205][ T7027] loop3: detected capacity change from 0 to 32768
[  224.390554][ T5157] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  224.390677][   T26] audit: type=1800 audit(1787739080.357:57): pid=7027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.849" name="file1" dev="loop3" ino=4 res=0 errno=0
[  224.420634][ T5347] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  224.429799][ T7031] loop1: detected capacity change from 0 to 4096
[  224.437476][ T5157] usb 5-1: device descriptor read/8, error -71
[  224.459211][ T7031] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  224.580790][ T5347] usb 3-1: device descriptor read/64, error -71
[  224.706569][ T5347] usb usb3-port1: attempt power cycle
[  224.720789][ T5157] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  224.770097][ T5157] usb 5-1: device descriptor read/8, error -71
[  224.890725][ T5157] usb usb5-port1: unable to enumerate USB device
[  224.970905][ T5480] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  225.130597][ T5347] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  225.136617][ T7041] netlink: 112 bytes leftover after parsing attributes in process `syz.3.854'.
[  225.150162][ T7041] netlink: 112 bytes leftover after parsing attributes in process `syz.3.854'.
[  225.161752][ T5347] usb 3-1: device descriptor read/8, error -71
[  225.162544][ T5480] usb 2-1: unable to get BOS descriptor or descriptor too short
[  225.186756][ T5480] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.197473][ T5480] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  225.206790][ T5480] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  225.228143][ T5480] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  225.241709][ T5480] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  225.253482][ T5480] usb 2-1: config 1 interface 1 has no altsetting 0
[  225.270156][ T5480] usb 2-1: string descriptor 0 read error: -22
[  225.288297][ T5480] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  225.297576][ T5480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.440622][ T5347] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  225.472479][ T5347] usb 3-1: device descriptor read/8, error -71
[  225.524279][ T5480] usb 2-1: 2:0: failed to get current value for ch 0 (-32)
[  225.590790][ T5347] usb usb3-port1: unable to enumerate USB device
[  225.649778][ T7056] input: syz1 as /devices/virtual/input/input7
[  225.734746][ T5480] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  225.791237][ T5480] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  225.801611][ T5480] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  225.807170][ T4276] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  225.815675][   T49] Bluetooth: hci5: command 0x1003 tx timeout
[  225.859059][ T5480] usb 2-1: USB disconnect, device number 6
[  226.186482][ T7075] loop3: detected capacity change from 0 to 2048
[  226.212899][ T7075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  226.720704][ T5480] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  226.840816][ T4276] Bluetooth: hci4: command 0x0406 tx timeout
[  226.978244][ T5480] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.047734][ T5480] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  227.149476][ T5480] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  227.177716][ T5480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.201743][ T5480] usb 4-1: config 0 descriptor??
[  227.422679][ T4319] usb 4-1: USB disconnect, device number 10
[  227.645395][ T5347] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  227.653186][    T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  227.838111][    T7] usb 2-1: device descriptor read/64, error -71
[  227.875573][ T5347] usb 3-1: Using ep0 maxpacket: 32
[  227.896897][ T5347] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  227.914218][ T5347] usb 3-1: config 0 has no interface number 0
[  227.926029][ T5347] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  227.937391][ T5347] usb 3-1: config 0 interface 196 has no altsetting 0
[  227.966854][ T5347] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  227.988091][ T5347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.990528][ T4319] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  227.996283][ T5347] usb 3-1: Product: syz
[  228.008027][ T5347] usb 3-1: Manufacturer: syz
[  228.015618][ T5347] usb 3-1: SerialNumber: syz
[  228.028687][ T5347] usb 3-1: config 0 descriptor??
[  228.035222][ T7091] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  228.048527][ T7120] loop4: detected capacity change from 0 to 512
[  228.072341][ T7120] EXT4-fs: Ignoring removed oldalloc option
[  228.079165][ T7120] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  228.102018][ T7120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  228.116647][ T7120] EXT4-fs (loop4): orphan cleanup on readonly fs
[  228.126807][ T7120] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.886: bad orphan inode 267
[  228.140662][    T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  228.142419][ T7120] EXT4-fs (loop4): Remounting filesystem read-only
[  228.157590][ T7120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  228.208951][ T7120] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.886: dx entry: limit 0 != root limit 125
[  228.213175][ T4319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.221671][ T7120] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.886: Corrupt directory, running e2fsck is recommended
[  228.262305][ T4319] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  228.287087][ T4319] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  228.300136][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.310596][    T7] usb 2-1: device descriptor read/64, error -71
[  228.322716][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  228.323431][ T4319] usb 4-1: config 0 descriptor??
[  228.360714][ T4996] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  228.440704][    T7] usb usb2-port1: attempt power cycle
[  228.475766][ T5347] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached
[  228.574969][ T4996] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.600537][ T4996] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  228.609538][ T4996] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  228.631196][ T4996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.656903][ T4996] usb 1-1: config 0 descriptor??
[  228.850510][    T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  228.901285][    T7] usb 2-1: device descriptor read/8, error -71
[  229.190563][    T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  229.231247][    T7] usb 2-1: device descriptor read/8, error -71
[  229.284615][    C0] ipheth 3-1:0.196: ipheth_rcvbulk_callback: urb status: -75
[  229.386706][    T7] usb usb2-port1: unable to enumerate USB device
[  229.478421][ T7147] loop4: detected capacity change from 0 to 1024
[  229.492964][ T4319] usb 3-1: USB disconnect, device number 9
[  229.532461][ T7147] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5
[  229.579822][ T7147] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  229.598653][ T7147] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.889: Failed to acquire dquot type 0
[  229.615972][    T7] usb 4-1: USB disconnect, device number 11
[  229.635431][ T4319] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected
[  229.712661][ T7147] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  229.735269][ T7147] EXT4-fs (loop4): 1 truncate cleaned up
[  229.743186][ T7158] loop3: detected capacity change from 0 to 64
[  229.749466][ T7147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  229.800916][ T7158] hfs: unable to locate alternate MDB
[  229.806331][ T7158] hfs: continuing without an alternate MDB
[  229.914377][ T4285] EXT4-fs (loop4): unmounting filesystem.
[  230.199403][ T7174] loop3: detected capacity change from 0 to 2048
[  230.285589][ T7174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  230.581485][ T4319] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  230.791913][ T4319] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  230.814258][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.835531][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.855732][ T4319] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  231.054958][ T4319] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  231.093963][ T4319] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  231.152434][ T4319] usb 3-1: Manufacturer: syz
[  231.208244][ T4319] usb 3-1: config 0 descriptor??
[  231.247012][ T5480] usb 1-1: USB disconnect, device number 4
[  231.658690][ T4319] appleir 0003:05AC:8243.0005: item fetching failed at offset 0/1
[  231.687985][ T4319] appleir 0003:05AC:8243.0005: parse failed
[  231.710530][ T4319] appleir: probe of 0003:05AC:8243.0005 failed with error -22
[  231.861519][ T4319] usb 3-1: USB disconnect, device number 10
[  232.058277][ T7230] netlink: 112 bytes leftover after parsing attributes in process `syz.1.911'.
[  232.079449][ T7230] netlink: 112 bytes leftover after parsing attributes in process `syz.1.911'.
[  232.202859][ T7235] input: syz1 as /devices/virtual/input/input8
[  232.267880][ T5480] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  232.482056][ T5480] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.506237][ T5480] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  232.530586][ T5480] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  232.580487][ T5480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.595622][ T5480] usb 1-1: config 0 descriptor??
[  232.624562][ T7226] loop3: detected capacity change from 0 to 40427
[  232.638916][ T7226] F2FS-fs (loop3): invalid crc value
[  232.648735][ T7226] F2FS-fs (loop3): Found nat_bits in checkpoint
[  232.767983][ T7226] F2FS-fs (loop3): Start checkpoint disabled!
[  232.830954][ T7226] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  233.031950][ T5480] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  233.260379][ T5480] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  233.283260][ T5480] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  233.314974][ T5480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.374540][ T5480] usb 5-1: config 0 descriptor??
[  233.467423][ T5524] kworker/u4:18: attempt to access beyond end of device
[  233.467423][ T5524] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  233.578451][ T7275] loop2: detected capacity change from 0 to 1024
[  233.601110][ T5480] usb 5-1: USB disconnect, device number 9
[  233.637686][ T7275] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5
[  233.702193][ T7275] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  233.758650][ T7275] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.923: Failed to acquire dquot type 0
[  233.781009][ T7275] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  233.825534][ T7275] EXT4-fs (loop2): 1 truncate cleaned up
[  233.836076][ T7275] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  233.938768][ T4284] EXT4-fs (loop2): unmounting filesystem.
[  233.995591][ T7284] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer.
[  234.170555][ T5480] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  234.279175][ T7297] loop1: detected capacity change from 0 to 512
[  234.306946][ T7297] EXT4-fs: Ignoring removed oldalloc option
[  234.329485][ T7297] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  234.356474][ T7297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  234.367069][ T5480] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  234.389160][ T7297] EXT4-fs (loop1): orphan cleanup on readonly fs
[  234.400204][ T5480] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  234.429310][ T7297] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.930: bad orphan inode 267
[  234.452945][ T5480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.488932][ T7297] EXT4-fs (loop1): Remounting filesystem read-only
[  234.506588][ T5480] usb 5-1: config 0 descriptor??
[  234.520825][ T7297] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  234.624932][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  234.685621][ T7299] loop2: detected capacity change from 0 to 40427
[  234.716670][ T7299] F2FS-fs (loop2): invalid crc value
[  234.756176][ T7299] F2FS-fs (loop2): Found nat_bits in checkpoint
[  234.852515][ T7299] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  234.869197][ T7295] loop3: detected capacity change from 0 to 32768
[  234.946190][ T7295] XFS (loop3): Mounting V5 Filesystem
[  234.957638][   T26] audit: type=1800 audit(1787739090.917:58): pid=7299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.931" name="file1" dev="loop2" ino=10 res=0 errno=0
[  235.060605][ T7295] XFS (loop3): Ending clean mount
[  235.100913][ T4284] syz-executor: attempt to access beyond end of device
[  235.100913][ T4284] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  235.126130][ T5158] usb 1-1: USB disconnect, device number 5
[  235.288214][ T4277] XFS (loop3): Unmounting Filesystem
[  235.748581][ T7332] loop1: detected capacity change from 0 to 512
[  235.831447][ T7332] EXT4-fs: Ignoring removed oldalloc option
[  235.846493][    T7] usb 5-1: USB disconnect, device number 10
[  235.885895][ T7332] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  236.318147][ T7332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  236.355165][ T7332] EXT4-fs (loop1): orphan cleanup on readonly fs
[  236.374363][ T7332] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.942: bad orphan inode 267
[  236.430526][ T7332] EXT4-fs (loop1): Remounting filesystem read-only
[  236.437096][ T7332] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  236.556469][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  236.749562][ T7346] loop3: detected capacity change from 0 to 32768
[  236.796544][   T26] audit: type=1800 audit(1787739092.757:59): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.944" name="file1" dev="loop3" ino=4 res=0 errno=0
[  236.960568][ T5480] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  237.152879][ T5480] usb 2-1: unable to get BOS descriptor or descriptor too short
[  237.168227][ T5480] usb 2-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40
[  237.208274][ T5480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.240512][ T5480] usb 2-1: Product: syz
[  237.244732][ T5480] usb 2-1: Manufacturer: syz
[  237.270260][ T7348] loop4: detected capacity change from 0 to 40427
[  237.278219][ T5480] usb 2-1: SerialNumber: syz
[  237.349698][ T7348] F2FS-fs (loop4): invalid crc value
[  237.407664][ T7348] F2FS-fs (loop4): Found nat_bits in checkpoint
[  237.513470][ T5480] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  237.550894][ T5480] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  237.588205][ T7348] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  237.643694][ T5480] usb 2-1: USB disconnect, device number 11
[  237.729395][   T26] audit: type=1800 audit(1787739093.687:60): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.945" name="file1" dev="loop4" ino=10 res=0 errno=0
[  237.822726][ T4285] syz-executor: attempt to access beyond end of device
[  237.822726][ T4285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  237.839241][ T7357] loop2: detected capacity change from 0 to 32768
[  237.903812][ T6229] udevd[6229]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  237.938254][ T7357] XFS (loop2): Mounting V5 Filesystem
[  238.037151][ T7357] XFS (loop2): Ending clean mount
[  238.230743][ T4284] XFS (loop2): Unmounting Filesystem
[  238.447418][ T7369] loop3: detected capacity change from 0 to 32768
[  238.554582][ T7395] loop4: detected capacity change from 0 to 2048
[  238.608362][ T7369] XFS (loop3): Mounting V5 Filesystem
[  238.630046][ T7395] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  238.698814][ T7405] netlink: 104 bytes leftover after parsing attributes in process `syz.2.958'.
[  238.712923][ T7369] XFS (loop3): Ending clean mount
[  238.870269][ T4277] XFS (loop3): Unmounting Filesystem
[  239.952621][ T7417] loop4: detected capacity change from 0 to 32768
[  240.037041][    T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  240.040318][ T7419] loop3: detected capacity change from 0 to 40427
[  240.066254][ T7417] XFS (loop4): Mounting V5 Filesystem
[  240.120921][ T7419] F2FS-fs (loop3): invalid crc value
[  240.158298][ T7417] XFS (loop4): Ending clean mount
[  240.186713][ T7419] F2FS-fs (loop3): Found nat_bits in checkpoint
[  240.244745][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.271921][    T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  240.318680][    T7] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  240.320382][ T4285] XFS (loop4): Unmounting Filesystem
[  240.341251][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.351035][ T7419] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  240.391482][    T7] usb 1-1: config 0 descriptor??
[  240.503803][   T26] audit: type=1800 audit(1787739096.467:61): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.965" name="file1" dev="loop3" ino=10 res=0 errno=0
[  240.513507][ T7419] syz.3.965: attempt to access beyond end of device
[  240.513507][ T7419] loop3: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  240.636638][ T4277] syz-executor: attempt to access beyond end of device
[  240.636638][ T4277] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  240.794814][ T7440] loop1: detected capacity change from 0 to 32768
[  240.888204][ T7440] XFS (loop1): Mounting V5 Filesystem
[  240.934456][ T4319] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  240.998954][ T7440] XFS (loop1): Ending clean mount
[  241.128108][ T4319] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  241.142510][ T4281] XFS (loop1): Unmounting Filesystem
[  241.148030][ T4319] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  241.172837][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.204851][ T4319] usb 3-1: config 0 descriptor??
[  241.419838][ T4319] usb 3-1: USB disconnect, device number 11
[  242.265562][ T7494] loop3: detected capacity change from 0 to 40427
[  242.299738][ T7494] F2FS-fs (loop3): invalid crc value
[  242.318616][ T7494] F2FS-fs (loop3): Found nat_bits in checkpoint
[  242.427358][ T7494] F2FS-fs (loop3): Start checkpoint disabled!
[  242.496234][ T7494] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  242.842420][ T5157] usb 1-1: USB disconnect, device number 6
[  242.863710][   T66] kworker/u4:4: attempt to access beyond end of device
[  242.863710][   T66] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  242.997779][ T7498] loop2: detected capacity change from 0 to 32768
[  243.067221][   T26] audit: type=1800 audit(1787739099.027:62): pid=7498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.992" name="file1" dev="loop2" ino=4 res=0 errno=0
[  243.770694][ T7526] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1002'.
[  243.812130][ T7526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1002'.
[  245.117342][ T4319] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  245.304150][ T4319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  245.334701][ T4319] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  245.371132][ T4319] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  245.395900][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.424836][ T4319] usb 4-1: config 0 descriptor??
[  245.447743][ T4319] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  245.601494][ T7599] loop2: detected capacity change from 0 to 40427
[  245.640653][ T7599] F2FS-fs (loop2): invalid crc value
[  245.676477][ T7599] F2FS-fs (loop2): Found nat_bits in checkpoint
[  245.752462][ T5347] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  245.806849][ T7599] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  245.895867][   T26] audit: type=1800 audit(1787739101.857:63): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1007" name="file1" dev="loop2" ino=10 res=0 errno=0
[  245.897263][ T7599] syz.2.1007: attempt to access beyond end of device
[  245.897263][ T7599] loop2: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  245.940514][ T5347] usb 2-1: Using ep0 maxpacket: 32
[  245.947695][ T5347] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[  245.976532][ T5347] usb 2-1: config 2 has no interface number 0
[  245.993944][ T5347] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  246.025674][ T5347] usb 2-1: config 2 interface 88 has no altsetting 0
[  246.048507][ T5347] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  246.070828][ T5347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  246.093689][ T5347] usb 2-1: Product: syz
[  246.098240][ T5347] usb 2-1: Manufacturer: syz
[  246.120659][ T5347] usb 2-1: SerialNumber: syz
[  246.139773][ T4284] syz-executor: attempt to access beyond end of device
[  246.139773][ T4284] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  246.158794][ T7608] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  246.374362][ T7608] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  247.214691][ T5347] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  247.235310][ T5347] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  247.252012][ T5347] asix: probe of 2-1:2.88 failed with error -71
[  247.262581][ T5347] usb 2-1: USB disconnect, device number 12
[  247.878275][ T5157] usb 4-1: USB disconnect, device number 12
[  247.910816][ T7646] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1024'.
[  247.972504][ T7646] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1024'.
[  248.259926][ T7656] loop2: detected capacity change from 0 to 8
[  248.706636][ T7648] loop1: detected capacity change from 0 to 32768
[  248.767066][   T26] audit: type=1800 audit(1787739104.727:64): pid=7648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1025" name="file1" dev="loop1" ino=4 res=0 errno=0
[  248.893286][ T7652] loop3: detected capacity change from 0 to 40427
[  248.944120][ T7652] F2FS-fs (loop3): invalid crc value
[  248.975864][ T7652] F2FS-fs (loop3): Found nat_bits in checkpoint
[  249.180746][ T7652] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  249.295108][   T26] audit: type=1800 audit(1787739105.257:65): pid=7652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1026" name="file1" dev="loop3" ino=10 res=0 errno=0
[  249.321976][ T7652] syz.3.1026: attempt to access beyond end of device
[  249.321976][ T7652] loop3: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  249.482325][ T7676] input: syz1 as /devices/virtual/input/input11
[  249.502392][ T4277] syz-executor: attempt to access beyond end of device
[  249.502392][ T4277] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  250.366203][ T7686] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1038'.
[  250.419186][ T7686] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1038'.
[  251.423642][ T5347] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  251.626771][ T5347] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  251.653318][ T5347] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  251.688806][ T5347] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  251.688818][ T7734] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1051'.
[  251.690336][ T7734] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1051'.
[  251.711297][ T5347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.754974][ T5347] usb 1-1: Product: syz
[  251.764847][ T5347] usb 1-1: Manufacturer: syz
[  251.779998][ T5347] usb 1-1: SerialNumber: syz
[  252.030212][ T5347] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  252.218955][ T7748] loop2: detected capacity change from 0 to 16
[  252.266637][ T7748] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  252.319770][   T14] usb 1-1: USB disconnect, device number 7
[  252.346742][   T14] usblp0: removed
[  253.068039][ T7777] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1063'.
[  253.128949][ T7777] device ip6erspan0 entered promiscuous mode
[  253.170597][ T7782] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1063'.
[  253.605165][   T14] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  253.625067][ T7799] loop3: detected capacity change from 0 to 16
[  253.643243][ T7799] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  253.802374][   T14] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  253.822243][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.871432][   T14] usb 1-1: config 0 descriptor??
[  253.880241][   T14] pwc: Samsung MPC-C10 USB webcam detected.
[  254.082893][   T14] pwc: send_video_command error -71
[  254.088173][   T14] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  254.116381][   T14] Philips webcam: probe of 1-1:0.0 failed with error -71
[  254.155804][   T14] usb 1-1: USB disconnect, device number 8
[  254.506005][ T7801] loop2: detected capacity change from 0 to 32768
[  254.573896][   T26] audit: type=1800 audit(1787739110.537:66): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1071" name="file1" dev="loop2" ino=4 res=0 errno=0
[  254.683415][ T7825] device bridge_slave_0 entered promiscuous mode
[  254.705491][ T7824] device bridge_slave_0 left promiscuous mode
[  255.228440][ T7841] loop3: detected capacity change from 0 to 16
[  255.288853][ T7841] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  255.425152][ T7846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1080'.
[  255.482970][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.489347][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  255.503451][ T7846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1080'.
[  256.804805][ T7893] block device autoloading is deprecated and will be removed.
[  257.103504][ T7903] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1096'.
[  257.141989][ T7903] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1096'.
[  257.440309][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'.
[  257.519923][ T7889] loop3: detected capacity change from 0 to 32768
[  257.596227][   T26] audit: type=1800 audit(1787739113.557:67): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1090" name="file1" dev="loop3" ino=4 res=0 errno=0
[  257.638589][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  257.649202][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  257.657161][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  257.666169][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  257.674414][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  257.683166][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  257.805870][ T7585] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.916055][ T7585] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.091591][ T7585] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.219975][ T7585] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.286798][ T7915] chnl_net:caif_netlink_parms(): no params data found
[  258.499319][ T7915] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.530828][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.566374][ T7915] device bridge_slave_0 entered promiscuous mode
[  258.624764][ T7915] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.644910][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.661122][ T7915] device bridge_slave_1 entered promiscuous mode
[  258.690783][ T7945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1108'.
[  258.741014][ T7945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1108'.
[  258.780311][ T7927] loop1: detected capacity change from 0 to 32768
[  258.810929][ T7915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.872264][ T7915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.946410][ T7927] XFS (loop1): Mounting V5 Filesystem
[  258.999698][ T7958] overlayfs: invalid origin (0000)
[  259.106222][ T7927] XFS (loop1): Ending clean mount
[  259.110867][ T7915] team0: Port device team_slave_0 added
[  259.119040][ T7915] team0: Port device team_slave_1 added
[  259.141990][ T7915] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.148972][ T7915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.185481][ T7915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.297524][ T7915] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.313807][ T4281] XFS (loop1): Unmounting Filesystem
[  259.329363][ T7915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.429556][ T7915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.720710][ T4276] Bluetooth: hci3: command 0x0409 tx timeout
[  259.879085][ T7915] device hsr_slave_0 entered promiscuous mode
[  259.963232][ T7915] device hsr_slave_1 entered promiscuous mode
[  259.995055][ T7915] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  260.018150][ T7915] Cannot create hsr debugfs directory
[  260.222465][ T5158] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  260.416568][ T5158] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  260.482322][ T7985] loop1: detected capacity change from 0 to 32768
[  260.514429][ T5158] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  260.536790][ T5158] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  260.563821][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.594241][ T5158] usb 1-1: config 0 descriptor??
[  260.601781][ T7985] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  260.615651][ T5158] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  260.850333][ T4281] ocfs2: Unmounting device (7,1) on (node local)
[  261.012119][ T7915] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  261.090302][ T7915] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  261.276242][ T7915] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  261.312506][ T7915] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  261.341233][ T7585] device hsr_slave_0 left promiscuous mode
[  261.361241][ T7585] device hsr_slave_1 left promiscuous mode
[  261.380888][ T7585] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  261.388391][ T7585] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.451676][ T7585] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.459126][ T7585] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.491291][ T7585] device bridge_slave_1 left promiscuous mode
[  261.500719][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.532389][ T7585] device bridge_slave_0 left promiscuous mode
[  261.538663][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.617575][ T7585] device veth1_macvtap left promiscuous mode
[  261.633223][ T7585] device veth0_macvtap left promiscuous mode
[  261.650392][ T7585] device veth1_vlan left promiscuous mode
[  261.668717][ T7585] device veth0_vlan left promiscuous mode
[  261.801067][ T4276] Bluetooth: hci3: command 0x041b tx timeout
[  261.859326][ T8010] loop1: detected capacity change from 0 to 40427
[  261.882981][ T8010] F2FS-fs (loop1): invalid crc value
[  261.928040][ T8010] F2FS-fs (loop1): Found nat_bits in checkpoint
[  262.086677][ T8010] F2FS-fs (loop1): Start checkpoint disabled!
[  262.175191][ T8010] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  262.474255][ T7572] kworker/u4:21: attempt to access beyond end of device
[  262.474255][ T7572] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  263.011704][ T4319] usb 1-1: USB disconnect, device number 9
[  263.056830][ T7585] team0 (unregistering): Port device team_slave_1 removed
[  263.131523][ T7585] team0 (unregistering): Port device team_slave_0 removed
[  263.214309][ T8038] loop3: detected capacity change from 0 to 32768
[  263.228282][ T7585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.301984][ T8038] XFS (loop3): Mounting V5 Filesystem
[  263.357467][ T7585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  263.369319][ T8038] XFS (loop3): Ending clean mount
[  263.469927][ T4277] XFS (loop3): Unmounting Filesystem
[  263.880683][ T4276] Bluetooth: hci3: command 0x040f tx timeout
[  264.370937][ T8056] loop3: detected capacity change from 0 to 40427
[  264.393015][ T8064] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1129'.
[  264.419409][ T8056] F2FS-fs (loop3): invalid crc value
[  264.467629][ T8056] F2FS-fs (loop3): Found nat_bits in checkpoint
[  264.512306][ T7585] bond0 (unregistering): Released all slaves
[  264.582342][ T8056] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  264.666493][ T8014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1120'.
[  264.687422][ T8016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1120'.
[  264.699291][ T4277] syz-executor: attempt to access beyond end of device
[  264.699291][ T4277] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  264.997938][ T7915] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.093907][ T7915] 8021q: adding VLAN 0 to HW filter on device team0
[  265.121712][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  265.133291][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  265.168614][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  265.195071][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  265.217397][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.225970][ T7572] bridge0: port 1(bridge_slave_0) entered forwarding state
[  265.267494][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  265.289846][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  265.308588][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.315767][ T7572] bridge0: port 2(bridge_slave_1) entered forwarding state
[  265.355577][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  265.384476][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  265.409125][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  265.452391][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  265.489899][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  265.506587][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  265.530345][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  265.557252][ T7915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  265.579946][ T7915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  265.606485][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  265.634450][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  265.655906][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  265.679094][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  265.695064][   T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  265.718710][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  265.797594][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  265.888973][   T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.939353][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  265.960545][ T4276] Bluetooth: hci3: command 0x0419 tx timeout
[  265.983089][   T14] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  266.040850][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.083367][   T14] usb 1-1: config 0 descriptor??
[  266.122982][   T14] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  266.557262][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  266.586961][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  266.606054][ T7915] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.959687][ T8121] tipc: Can't bind to reserved service type 1
[  266.993718][ T8104] loop3: detected capacity change from 0 to 32768
[  267.266000][ T8129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1141'.
[  267.327377][ T8131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1141'.
[  267.781886][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  267.824220][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  267.902606][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  267.917841][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  267.960643][ T7915] device veth0_vlan entered promiscuous mode
[  267.967900][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  267.999044][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  268.035620][ T7915] device veth1_vlan entered promiscuous mode
[  268.118416][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  268.144228][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  268.170083][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  268.171774][ T8126] loop2: detected capacity change from 0 to 40427
[  268.198268][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  268.225640][ T7915] device veth0_macvtap entered promiscuous mode
[  268.253326][ T7915] device veth1_macvtap entered promiscuous mode
[  268.293289][ T8126] F2FS-fs (loop2): invalid crc value
[  268.301406][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.312952][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.323671][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.341273][ T8126] F2FS-fs (loop2): Found nat_bits in checkpoint
[  268.359346][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.379795][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.404963][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.436680][ T7915] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.446431][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  268.454016][ T8126] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  268.472101][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  268.491536][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  268.519926][ T5157] usb 1-1: USB disconnect, device number 10
[  268.531566][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  268.564881][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.606979][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.632840][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.666602][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.694672][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.716459][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.732545][ T4284] syz-executor: attempt to access beyond end of device
[  268.732545][ T4284] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  268.755447][ T7915] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.778413][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  268.799101][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  268.811482][ T7915] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.826159][ T7915] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.835827][ T7915] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.851797][ T7915] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.999360][ T5524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.018055][ T5524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.058974][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  269.107332][ T5524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.125633][ T5524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.158902][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  269.534923][ T8183] loop2: detected capacity change from 0 to 2048
[  269.590369][ T8191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1152'.
[  269.602695][ T8183] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  269.671038][ T8191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1152'.
[  271.035846][ T8231] loop1: detected capacity change from 0 to 8
[  271.260161][ T8215] loop5: detected capacity change from 0 to 40427
[  271.297276][ T8215] F2FS-fs (loop5): invalid crc value
[  271.315948][ T8215] F2FS-fs (loop5): Found nat_bits in checkpoint
[  271.423389][ T8215] F2FS-fs (loop5): Start checkpoint disabled!
[  271.468263][ T8215] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  271.802899][ T5524] kworker/u4:18: attempt to access beyond end of device
[  271.802899][ T5524] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  272.737333][ T8284] loop2: detected capacity change from 0 to 8
[  273.946325][ T8288] loop2: detected capacity change from 0 to 40427
[  274.006483][ T8288] F2FS-fs (loop2): invalid crc value
[  274.062172][ T8288] F2FS-fs (loop2): Found nat_bits in checkpoint
[  274.111926][ T8326] loop5: detected capacity change from 0 to 8
[  274.237205][ T8288] F2FS-fs (loop2): Start checkpoint disabled!
[  274.330475][ T8288] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  274.583615][ T8342] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1191'.
[  274.686244][ T8342] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1191'.
[  274.928694][ T7572] kworker/u4:21: attempt to access beyond end of device
[  274.928694][ T7572] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  275.848231][ T8349] loop5: detected capacity change from 0 to 32768
[  275.916747][   T26] audit: type=1800 audit(1787739131.877:68): pid=8349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1195" name="file1" dev="loop5" ino=4 res=0 errno=0
[  276.208901][   T26] audit: type=1800 audit(1787739132.167:69): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1204" name="idVendor" dev="configfs" ino=51077 res=0 errno=0
[  276.467143][ T8393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1205'.
[  276.534745][ T8393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1205'.
[  276.758905][ T8403] device syzkaller1 entered promiscuous mode
[  277.432511][ T8421] loop3: detected capacity change from 0 to 8
[  277.627674][ T8424] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1215'.
[  277.702510][ T8396] loop2: detected capacity change from 0 to 40427
[  277.753004][ T8396] F2FS-fs (loop2): invalid crc value
[  277.769937][ T8396] F2FS-fs (loop2): Found nat_bits in checkpoint
[  277.899452][ T8396] F2FS-fs (loop2): Start checkpoint disabled!
[  277.947800][ T8396] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  278.277668][ T4444] kworker/u4:12: attempt to access beyond end of device
[  278.277668][ T4444] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  278.856295][ T8458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1220'.
[  278.885607][ T8458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1220'.
[  278.923666][ T8439] loop5: detected capacity change from 0 to 32768
[  278.987555][   T26] audit: type=1800 audit(1787739134.947:70): pid=8439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1218" name="file1" dev="loop5" ino=4 res=0 errno=0
[  279.069030][ T8445] loop1: detected capacity change from 0 to 32768
[  279.097125][ T8466] device syzkaller1 entered promiscuous mode
[  279.235992][ T8445] XFS (loop1): Mounting V5 Filesystem
[  279.333554][ T8445] XFS (loop1): Ending clean mount
[  279.444197][ T4281] XFS (loop1): Unmounting Filesystem
[  280.590797][ T4996] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  280.653703][ T8501] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1229'.
[  280.666853][ T8503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1236'.
[  280.693982][ T8503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1236'.
[  280.778132][ T8507] device syzkaller1 entered promiscuous mode
[  280.796893][ T4996] usb 4-1: Using ep0 maxpacket: 16
[  280.814247][ T4996] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  280.831279][ T4996] usb 4-1: config 0 has no interface number 0
[  280.837526][ T4996] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  280.851239][ T4996] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  280.874026][ T4996] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  280.883341][ T4996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.891742][ T4996] usb 4-1: Product: syz
[  280.896025][ T4996] usb 4-1: Manufacturer: syz
[  280.901048][ T4996] usb 4-1: SerialNumber: syz
[  280.924191][ T4996] usb 4-1: config 0 descriptor??
[  280.931064][ T8488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  280.945820][ T8488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  281.232296][ T8488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  281.322190][ T8488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  281.796241][ T4996] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  282.100112][ T8534] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1248'.
[  282.166196][ T8539] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1250'.
[  282.212234][ T8539] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1250'.
[  282.452001][ T8552] device syzkaller1 entered promiscuous mode
[  282.747904][ T4996] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  282.779580][ T4996] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  282.800746][ T4996] asix: probe of 4-1:0.34 failed with error -71
[  282.822736][ T4996] usb 4-1: USB disconnect, device number 13
[  284.087254][ T8590] loop3: detected capacity change from 0 to 8
[  284.291689][ T8597] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1264'.
[  284.840109][ T8605] loop3: detected capacity change from 0 to 32768
[  284.869080][ T8605] XFS (loop3): Mounting V5 Filesystem
[  284.913689][ T8605] XFS (loop3): Ending clean mount
[  285.074710][ T4277] XFS (loop3): Unmounting Filesystem
[  285.779716][ T8648] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1282'.
[  286.630578][ T8652] loop1: detected capacity change from 0 to 32768
[  286.756503][ T8652] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  286.879959][ T8660] loop2: detected capacity change from 0 to 32768
[  286.984412][ T4281] ocfs2: Unmounting device (7,1) on (node local)
[  287.068221][ T8660] XFS (loop2): Mounting V5 Filesystem
[  287.136459][ T8660] XFS (loop2): Ending clean mount
[  287.318133][ T4284] XFS (loop2): Unmounting Filesystem
[  287.687864][ T8700] loop3: detected capacity change from 0 to 8
[  287.784468][ T8702] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1295'.
[  288.955789][ T8719] loop5: detected capacity change from 0 to 32768
[  289.043060][ T8719] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  289.188641][ T7915] ocfs2: Unmounting device (7,5) on (node local)
[  289.236782][ T8716] loop2: detected capacity change from 0 to 40427
[  289.316498][ T8716] F2FS-fs (loop2): invalid crc value
[  289.402392][ T8716] F2FS-fs (loop2): Found nat_bits in checkpoint
[  289.495381][ T8741] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1308'.
[  289.592834][ T8716] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  289.791289][   T26] audit: type=1800 audit(1787739145.757:71): pid=8716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1300" name="file1" dev="loop2" ino=10 res=0 errno=0
[  289.792592][ T8716] syz.2.1300: attempt to access beyond end of device
[  289.792592][ T8716] loop2: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  290.114481][ T4284] syz-executor: attempt to access beyond end of device
[  290.114481][ T4284] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  290.220647][ T4319] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  290.412452][ T4319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023
[  290.450629][ T4319] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  290.490659][ T4319] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 17
[  290.539323][ T4319] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  290.567374][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  290.606246][ T4319] usb 6-1: SerialNumber: syz
[  290.626481][ T8756] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  290.647984][ T8756] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  290.890822][ T8756] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  290.928208][ T8756] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  291.042037][ T8758] loop3: detected capacity change from 0 to 32768
[  291.114903][   T26] audit: type=1800 audit(1787739147.077:72): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1313" name="file1" dev="loop3" ino=4 res=0 errno=0
[  291.356589][ T4319] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42
[  291.483032][ T8783] using random self ethernet address
[  291.488775][ T8783] using random host ethernet address
[  291.785368][ T4319] usb 6-1: USB disconnect, device number 2
[  291.801792][ T4319] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device
[  292.401651][   T14] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  292.608845][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  292.689360][   T14] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  292.730603][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.763537][   T14] usb 1-1: config 0 descriptor??
[  292.794959][   T14] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  293.011425][ T8840] loop2: detected capacity change from 0 to 8
[  293.877961][ T8841] loop5: detected capacity change from 0 to 32768
[  293.938295][ T8841] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  294.101611][ T7915] ocfs2: Unmounting device (7,5) on (node local)
[  294.528745][ T8886] loop2: detected capacity change from 0 to 8
[  294.750618][ T5158] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  294.952538][ T5158] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  294.979438][ T5158] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  295.007382][ T5158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.028188][ T5158] usb 2-1: config 0 descriptor??
[  295.053955][ T5158] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  295.207396][ T5158] usb 1-1: USB disconnect, device number 11
[  295.454801][ T8913] futex_wake_op: syz.5.1351 tries to shift op by 144; fix this program
[  296.520685][ T5157] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  296.712455][ T5157] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  296.753339][ T5157] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  296.775940][ T5157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.799940][ T5157] usb 4-1: config 0 descriptor??
[  296.837634][ T5157] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  297.230606][   T14] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  297.319894][ T8994] loop5: detected capacity change from 0 to 8
[  297.422817][   T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.450788][   T14] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[  297.466902][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.470657][ T5157] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  297.507019][   T14] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  297.517465][   T14] cdc_wdm 3-1:1.0: Unknown control protocol
[  297.521021][ T4319] usb 2-1: USB disconnect, device number 13
[  297.682265][ T5157] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  297.689285][ T8999] kvm: apic: phys broadcast and lowest prio
[  297.705994][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.711787][   T14] usb 3-1: USB disconnect, device number 12
[  297.738726][ T5157] usb 1-1: config 0 descriptor??
[  297.767936][ T5157] pwc: Samsung MPC-C10 USB webcam detected.
[  297.962877][ T5157] pwc: send_video_command error -71
[  297.968159][ T5157] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  297.996354][ T5157] Philips webcam: probe of 1-1:0.0 failed with error -71
[  298.027826][ T5157] usb 1-1: USB disconnect, device number 12
[  298.540528][ T5157] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  298.734927][ T5157] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  298.744904][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.756528][ T5157] usb 1-1: config 0 descriptor??
[  298.772240][ T5157] pwc: Samsung MPC-C10 USB webcam detected.
[  298.950853][ T4996] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  299.037239][ T9030] loop5: detected capacity change from 0 to 2048
[  299.061107][ T9030] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  299.074333][ T9030] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  299.086430][ T9030] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  299.094501][ T9030] UDF-fs: Scanning with blocksize 512 failed
[  299.105982][ T9030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  299.153002][ T4996] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  299.168387][ T5157] pwc: recv_control_msg error -32 req 02 val 2b00
[  299.168512][ T4996] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.178476][ T5157] pwc: recv_control_msg error -32 req 02 val 2700
[  299.207217][ T4996] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  299.214312][ T5157] pwc: recv_control_msg error -32 req 04 val 1700
[  299.235450][ T4996] usb 3-1: config 0 interface 0 has no altsetting 0
[  299.254887][ T4996] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  299.259855][ T5157] pwc: recv_control_msg error -32 req 02 val 2c00
[  299.278814][ T4996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.294248][ T5157] pwc: recv_control_msg error -32 req 04 val 1000
[  299.300198][ T4996] usb 3-1: config 0 descriptor??
[  299.313969][ T5480] usb 4-1: USB disconnect, device number 14
[  299.321148][ T5157] pwc: recv_control_msg error -32 req 04 val 1300
[  299.338833][ T5157] pwc: recv_control_msg error -32 req 04 val 1400
[  299.360958][ T5157] pwc: recv_control_msg error -32 req 02 val 2000
[  299.379466][ T5157] pwc: recv_control_msg error -32 req 02 val 2100
[  299.397568][ T5157] pwc: recv_control_msg error -32 req 02 val 2200
[  299.404675][ T5157] pwc: recv_control_msg error -71 req 06 val 0600
[  299.417164][ T5157] pwc: recv_control_msg error -71 req 04 val 1500
[  299.424028][ T5157] pwc: recv_control_msg error -71 req 02 val 2500
[  299.435677][ T5157] pwc: recv_control_msg error -71 req 02 val 2400
[  299.443167][ T5157] pwc: recv_control_msg error -71 req 02 val 2600
[  299.449910][ T5157] pwc: recv_control_msg error -71 req 02 val 2900
[  299.462268][ T5157] pwc: recv_control_msg error -71 req 02 val 2800
[  299.469276][ T5157] pwc: recv_control_msg error -71 req 04 val 1100
[  299.479499][ T5157] pwc: recv_control_msg error -71 req 04 val 1200
[  299.492789][ T5157] pwc: Registered as video103.
[  299.498560][ T5157] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22
[  299.537057][ T5157] usb 1-1: USB disconnect, device number 13
[  299.560890][   T14] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  299.717915][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.749455][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.759375][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.770359][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.782664][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.790298][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.799278][   T14] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  299.808622][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.817665][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.831353][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.835938][ T9042] loop1: detected capacity change from 0 to 4096
[  299.840180][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.851887][ T9042] ntfs3: Unknown parameter 'u•¿&?äÍ¥P¡Rkmask'
[  299.852699][   T14] usb 6-1: config 0 descriptor??
[  299.871956][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.879055][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.888877][   T14] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  299.908287][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.915573][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.938668][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.946980][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.954343][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.961455][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.968511][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.975597][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.982808][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.989924][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  299.998374][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  300.006161][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  300.013402][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  300.020525][ T4996] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0
[  300.031970][ T4351] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  300.050729][ T4996] hid-rmi 0003:1532:011D.0006: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.2-1/input0
[  300.108233][ T4996] usb 3-1: USB disconnect, device number 13
[  300.180724][   T14] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  300.267705][ T9045] fido_id[9045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  300.642227][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.661112][   T14] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  300.680667][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.699086][   T14] usb 4-1: config 0 descriptor??
[  300.909448][   T14] usbhid 4-1:0.0: can't add hid device: -71
[  300.915671][   T14] usbhid: probe of 4-1:0.0 failed with error -71
[  300.925250][   T14] usb 4-1: USB disconnect, device number 15
[  301.057465][ T5157] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  301.089577][ T9060] loop1: detected capacity change from 0 to 2048
[  301.112722][ T9060] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  301.129982][ T9060] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  301.142831][ T9060] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  301.158306][ T9060] UDF-fs: Scanning with blocksize 512 failed
[  301.169562][ T9060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  301.250657][ T5157] usb 1-1: Using ep0 maxpacket: 8
[  301.257718][ T5157] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.277587][ T9063] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1394'.
[  301.286802][ T5157] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  301.313175][ T5157] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  301.340732][ T5157] usb 1-1: config 0 interface 0 has no altsetting 0
[  301.347623][ T5157] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  301.358153][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.375839][ T5157] usb 1-1: config 0 descriptor??
[  301.381829][ T9056] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  301.510553][   T14] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  301.692030][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.703983][   T14] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  301.713461][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.746750][   T14] usb 4-1: config 0 descriptor??
[  301.760750][ T5480] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  301.806757][ T5157] ntrig 0003:1B96:000A.0007: unknown main item tag 0x3
[  301.814043][ T5157] ntrig 0003:1B96:000A.0007: item fetching failed at offset 23/24
[  301.822654][ T5157] ntrig 0003:1B96:000A.0007: parse failed
[  301.828513][ T5157] ntrig: probe of 0003:1B96:000A.0007 failed with error -22
[  301.940528][ T5480] usb 2-1: Using ep0 maxpacket: 16
[  301.948174][ T5480] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.960650][ T5480] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  301.970606][ T5480] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  301.980283][ T5480] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  301.995851][ T5480] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  302.004960][ T5480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  302.013032][ T5480] usb 2-1: SerialNumber: syz
[  302.020373][ T9067] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  302.027766][ T9067] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  302.032245][ T5347] usb 1-1: USB disconnect, device number 14
[  302.035758][ T5480] hub 2-1:1.0: bad descriptor, ignoring hub
[  302.048057][ T5480] hub: probe of 2-1:1.0 failed with error -5
[  302.254360][ T9067] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  302.270658][ T9067] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  302.287915][ T4319] usb 6-1: USB disconnect, device number 3
[  302.345424][ T9072] fuse: Invalid rootmode
[  302.581008][   T14] aiptek 4-1:0.0: Aiptek using 400 ms programming speed
[  302.600764][   T14] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24
[  302.729736][ T5480] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42
[  302.773775][ T4319] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  302.925251][    C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  302.925252][ T5480] usb 4-1: USB disconnect, device number 16
[  302.996819][ T9076] loop2: detected capacity change from 0 to 32768
[  303.052803][ T4319] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  303.066552][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.077865][ T4319] usb 6-1: config 0 descriptor??
[  303.122117][ T4319] pwc: Samsung MPC-C10 USB webcam detected.
[  303.242631][   T26] audit: type=1800 audit(1787739159.067:73): pid=9076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1400" name="file1" dev="loop2" ino=4 res=0 errno=0
[  303.315528][ T4319] pwc: send_video_command error -71
[  303.326434][ T4319] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  303.362436][ T4319] Philips webcam: probe of 6-1:0.0 failed with error -71
[  303.414712][ T4319] usb 6-1: USB disconnect, device number 4
[  303.890664][ T4319] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  304.082291][ T4319] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  304.120606][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.152907][ T4319] usb 6-1: config 0 descriptor??
[  304.178663][ T4319] pwc: Samsung MPC-C10 USB webcam detected.
[  304.455827][    C0] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 68!
[  304.466326][    C0] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 03!
[  304.555148][ T9095] loop3: detected capacity change from 0 to 40427
[  304.576418][ T4319] pwc: recv_control_msg error -32 req 02 val 2b00
[  304.586847][ T4319] pwc: recv_control_msg error -32 req 02 val 2700
[  304.594760][ T4319] pwc: recv_control_msg error -32 req 04 val 1700
[  304.631959][ T5480] usb 2-1: USB disconnect, device number 14
[  304.643376][ T4319] pwc: recv_control_msg error -32 req 02 val 2c00
[  304.647662][ T9095] F2FS-fs (loop3): invalid crc value
[  304.653015][ T5480] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device
[  304.695486][ T4319] pwc: recv_control_msg error -32 req 04 val 1000
[  304.725441][ T4319] pwc: recv_control_msg error -32 req 04 val 1300
[  304.735325][ T9095] F2FS-fs (loop3): Found nat_bits in checkpoint
[  304.756879][ T4319] pwc: recv_control_msg error -32 req 04 val 1400
[  304.783050][ T4319] pwc: recv_control_msg error -32 req 02 val 2000
[  304.790910][ T4319] pwc: recv_control_msg error -32 req 02 val 2100
[  304.817552][ T4319] pwc: recv_control_msg error -32 req 02 val 2200
[  304.844153][ T4319] pwc: recv_control_msg error -71 req 06 val 0600
[  304.851652][ T4319] pwc: recv_control_msg error -71 req 04 val 1500
[  304.858537][ T4319] pwc: recv_control_msg error -71 req 02 val 2500
[  304.869457][ T4319] pwc: recv_control_msg error -71 req 02 val 2400
[  304.876890][ T4319] pwc: recv_control_msg error -71 req 02 val 2600
[  304.896200][ T4319] pwc: recv_control_msg error -71 req 02 val 2900
[  304.904179][ T9095] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  304.912147][ T4319] pwc: recv_control_msg error -71 req 02 val 2800
[  304.940008][ T4319] pwc: recv_control_msg error -71 req 04 val 1100
[  304.950295][   T26] audit: type=1800 audit(1787739160.907:74): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1404" name="file1" dev="loop3" ino=10 res=0 errno=0
[  304.953037][ T9095] syz.3.1404: attempt to access beyond end of device
[  304.953037][ T9095] loop3: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  304.991540][ T4319] pwc: recv_control_msg error -71 req 04 val 1200
[  305.000142][ T4319] pwc: Registered as video103.
[  305.018279][ T4319] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input25
[  305.032298][ T4319] usb 6-1: USB disconnect, device number 5
[  305.123242][ T4277] syz-executor: attempt to access beyond end of device
[  305.123242][ T4277] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  305.300690][ T5480] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  305.542070][ T5480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 20, changing to 8
[  305.553299][ T5480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1138, setting to 1024
[  305.564806][ T5480] usb 2-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice=d6.af
[  305.574096][ T5480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.584075][ T5480] usb 2-1: config 0 descriptor??
[  305.589730][ T9127] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  305.715738][ T9146] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1417'.
[  306.009093][ T5480] sony 0003:054C:1000.0008: unknown main item tag 0x0
[  306.022628][ T5480] sony 0003:054C:1000.0008: unknown main item tag 0x0
[  306.046428][ T5480] sony 0003:054C:1000.0008: unknown main item tag 0x0
[  306.062870][ T5480] sony 0003:054C:1000.0008: unknown main item tag 0x0
[  306.078148][ T5480] sony 0003:054C:1000.0008: unknown main item tag 0x0
[  306.115251][ T9158] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1419'.
[  306.126310][ T5480] sony 0003:054C:1000.0008: hidraw0: USB HID v1.01 Device [HID 054c:1000] on usb-dummy_hcd.1-1/input0
[  306.161160][ T5480] sony 0003:054C:1000.0008: failed to claim input
[  306.180184][ T9158] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1419'.
[  306.221719][ T5480] usb 2-1: USB disconnect, device number 15
[  306.306882][ T9166] fido_id[9166]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  306.562342][ T5157] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  306.762989][ T5157] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  306.793305][ T5157] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[  306.833000][ T5157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.871687][ T5157] usb 6-1: Product: syz
[  306.875900][ T5157] usb 6-1: Manufacturer: syz
[  306.900542][ T5157] usb 6-1: SerialNumber: syz
[  306.957003][ T5157] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  306.967904][ T5157] cdc_wdm 6-1:1.0: Unknown control protocol
[  307.146410][ T5157] usb 6-1: USB disconnect, device number 6
[  307.157915][ T9181] loop3: detected capacity change from 0 to 40427
[  307.181067][   T14] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  307.189535][ T9181] F2FS-fs (loop3): invalid crc value
[  307.216433][ T9181] F2FS-fs (loop3): Found nat_bits in checkpoint
[  307.283799][ T9181] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  307.327578][   T26] audit: type=1800 audit(1787739163.287:75): pid=9181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1425" name="file1" dev="loop3" ino=10 res=0 errno=0
[  307.328839][ T9181] syz.3.1425: attempt to access beyond end of device
[  307.328839][ T9181] loop3: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  307.392903][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.414062][   T14] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  307.438440][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.456927][ T4277] syz-executor: attempt to access beyond end of device
[  307.456927][ T4277] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  307.457780][   T14] usb 2-1: config 0 descriptor??
[  307.501737][   T14] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  308.018255][ T9219] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1433'.
[  308.586754][ T9225] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1433'.
[  308.920976][ T4262] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  309.122813][ T4262] usb 4-1: unable to get BOS descriptor or descriptor too short
[  309.142681][ T4262] usb 4-1: not running at top speed; connect to a high speed hub
[  309.156685][ T4262] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  309.180776][ T4262] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  309.212132][ T4262] usb 4-1: string descriptor 0 read error: -22
[  309.226414][ T4262] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  309.244617][ T4262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.269415][ T4262] usb 4-1: 0:2 : does not exist
[  309.516633][ T9262] loop5: detected capacity change from 0 to 8
[  309.746892][ T9257] loop2: detected capacity change from 0 to 40427
[  309.774671][ T9257] F2FS-fs (loop2): invalid crc value
[  309.805622][ T9257] F2FS-fs (loop2): Found nat_bits in checkpoint
[  309.851917][ T9257] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  309.881292][   T26] audit: type=1800 audit(1787739165.837:76): pid=9257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1441" name="file1" dev="loop2" ino=10 res=0 errno=0
[  309.909003][ T9257] syz.2.1441: attempt to access beyond end of device
[  309.909003][ T9257] loop2: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  309.972745][   T14] usb 2-1: USB disconnect, device number 16
[  310.065063][ T4284] syz-executor: attempt to access beyond end of device
[  310.065063][ T4284] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  310.120000][ T4262] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  310.146372][ T4262] usb 4-1: Warning! Unlikely big volume range (=24679), cval->res is probably wrong.
[  310.264244][ T4262] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = -5387/19292/1
[  310.480933][ T4262] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  310.735639][ T4262] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[  310.876588][ T4262] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  310.951929][ T4262] usb 4-1: USB disconnect, device number 17
[  311.420574][ T9289] loop1: detected capacity change from 0 to 8
[  311.894415][ T5480] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  311.980642][ T5158] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  312.102566][ T5480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.139982][ T5480] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  312.220758][ T5158] usb 2-1: Using ep0 maxpacket: 16
[  312.235705][ T5158] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.281803][ T5480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.350715][ T5158] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.471554][ T5480] usb 6-1: config 0 descriptor??
[  312.539449][ T5158] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  312.554116][ T5480] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  312.564851][ T5158] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  312.574296][ T5158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.595241][ T5158] usb 2-1: config 0 descriptor??
[  313.982391][ T5158] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max
[  314.024874][ T5158] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max
[  314.198048][ T5158] microsoft 0003:045E:07DA.0009: No inputs registered, leaving
[  314.229572][ T5158] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  314.250551][ T5158] microsoft 0003:045E:07DA.0009: no inputs found
[  314.266110][ T5158] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway
[  314.289336][ T5158] usb 2-1: USB disconnect, device number 17
[  314.464458][ T9338] fido_id[9338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  314.572473][ T9333] loop2: detected capacity change from 0 to 32768
[  314.609507][   T26] audit: type=1800 audit(1787739170.567:77): pid=9333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1466" name="file1" dev="loop2" ino=4 res=0 errno=0
[  315.009095][ T9352] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1472'.
[  315.039891][ T9352] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1472'.
[  315.469862][ T5480] usb 6-1: USB disconnect, device number 7
[  316.935357][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  316.941753][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.421643][ T9387] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1479'.
[  317.579385][ T9396] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1484'.
[  317.595348][ T9396] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1484'.
[  318.890666][ T4996] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  319.089985][ T4996] usb 2-1: Using ep0 maxpacket: 32
[  319.097266][ T4996] usb 2-1: unable to get BOS descriptor or descriptor too short
[  319.122124][ T4996] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 7
[  319.153515][ T4996] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  319.177278][ T4996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.203444][ T4996] usb 2-1: Product: syz
[  319.217900][ T4996] usb 2-1: Manufacturer: syz
[  319.228017][ T4996] usb 2-1: SerialNumber: syz
[  319.605936][ T9429] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1498'.
[  319.616810][ T9429] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1498'.
[  319.656618][ T4996] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  320.821367][ T4996] usb 2-1: USB disconnect, device number 18
[  320.885171][ T9437] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1501'.
[  321.083204][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  321.330676][ T9447] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1506'.
[  321.461551][ T9454] binder: Binderfs stats mode cannot be changed during a remount
[  322.998590][ T9473] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1516'.
[  323.019398][ T9473] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1516'.
[  323.560003][ T9486] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1519'.
[  324.150611][ T4996] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  324.346873][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.371539][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.401283][ T4996] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  324.420319][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.446711][ T4996] usb 2-1: config 0 descriptor??
[  324.448995][ T9531] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1538'.
[  324.868910][ T4996] usbhid 2-1:0.0: can't add hid device: -71
[  324.877317][ T4996] usbhid: probe of 2-1:0.0 failed with error -71
[  324.900809][ T4996] usb 2-1: USB disconnect, device number 19
[  324.976426][ T9529] loop3: detected capacity change from 0 to 32768
[  326.526512][ T5157] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  326.756633][ T5157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  326.850310][ T5157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  326.923497][ T5157] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  326.955413][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.990639][ T5157] usb 3-1: config 0 descriptor??
[  327.065577][ T9567] loop3: detected capacity change from 0 to 32768
[  327.144522][   T26] audit: type=1800 audit(1787739183.107:78): pid=9567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1554" name="file1" dev="loop3" ino=4 res=0 errno=0
[  327.425228][ T5157] usbhid 3-1:0.0: can't add hid device: -71
[  327.436924][ T5157] usbhid: probe of 3-1:0.0 failed with error -71
[  327.466484][ T5157] usb 3-1: USB disconnect, device number 14
[  329.521529][ T9640] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1585'.
[  330.819052][ T9660] syz.3.1594[9660] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  330.819289][ T9660] syz.3.1594[9660] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  331.048320][ T9668] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1597'.
[  331.808471][ T9701] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1613'.
[  331.830500][ T4262] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  332.044165][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  332.075389][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.100888][ T4262] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  332.120306][ T4262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.148766][ T4262] usb 1-1: config 0 descriptor??
[  332.216161][ T9693] loop5: detected capacity change from 0 to 32768
[  332.276575][   T26] audit: type=1800 audit(1787739188.237:79): pid=9693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1610" name="file1" dev="loop5" ino=4 res=0 errno=0
[  332.583380][ T4262] usbhid 1-1:0.0: can't add hid device: -71
[  332.591105][ T4262] usbhid: probe of 1-1:0.0 failed with error -71
[  332.610647][ T4262] usb 1-1: USB disconnect, device number 15
[  332.839309][ T9729] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1625'.
[  333.152074][ T9738] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1629'.
[  333.163444][ T9738] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1629'.
[  333.783957][ T9759] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1639'.
[  334.015802][ T9770] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1644'.
[  334.190771][ T5347] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  334.402240][ T5347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.430854][ T5347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.450661][ T5347] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  334.469942][ T5347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.790672][ T4262] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  335.030810][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.067906][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.114043][ T4262] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  335.119520][ T5347] usb 3-1: config 0 descriptor??
[  335.129820][ T4262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.142017][ T4262] usb 6-1: config 0 descriptor??
[  335.309463][ T9797] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1654'.
[  335.561246][ T4262] usbhid 6-1:0.0: can't add hid device: -71
[  335.567410][ T4262] usbhid: probe of 6-1:0.0 failed with error -71
[  335.576106][ T4262] usb 6-1: USB disconnect, device number 8
[  335.739815][ T5347] usbhid 3-1:0.0: can't add hid device: -71
[  335.749428][ T5347] usbhid: probe of 3-1:0.0 failed with error -71
[  335.771178][ T5347] usb 3-1: USB disconnect, device number 15
[  335.815195][ T9810] input: syz1 as /devices/virtual/input/input29
[  336.529718][ T9821] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1665'.
[  337.412825][ T5347] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  337.506114][ T9849] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1677'.
[  337.603034][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.615580][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.625851][ T5347] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  337.635499][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.652126][ T5347] usb 1-1: config 0 descriptor??
[  338.293640][ T5347] usbhid 1-1:0.0: can't add hid device: -71
[  338.300144][ T5347] usbhid: probe of 1-1:0.0 failed with error -71
[  338.322905][ T5347] usb 1-1: USB disconnect, device number 16
[  338.499914][ T9805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1657'.
[  338.965157][ T9878] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1690'.
[  339.310577][ T5347] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  339.510566][ T5347] usb 1-1: Using ep0 maxpacket: 32
[  339.522709][ T5347] usb 1-1: config 2 has an invalid interface number: 88 but max is 0
[  339.557785][ T5347] usb 1-1: config 2 has no interface number 0
[  339.568979][ T5347] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  339.587212][ T5347] usb 1-1: config 2 interface 88 has no altsetting 0
[  339.612292][ T5347] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  339.648082][ T5347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  339.665161][ T5347] usb 1-1: Product: syz
[  339.669438][ T5347] usb 1-1: Manufacturer: syz
[  339.676439][ T5347] usb 1-1: SerialNumber: syz
[  339.698681][ T9880] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  339.909716][ T9914] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1703'.
[  339.935550][ T9880] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  339.970621][   T14] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  340.168248][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.180406][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.198402][   T14] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  340.219562][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.236113][   T14] usb 6-1: config 0 descriptor??
[  340.763549][ T5347] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  340.783740][ T5347] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  340.795780][ T5347] asix: probe of 1-1:2.88 failed with error -71
[  340.806347][ T5347] usb 1-1: USB disconnect, device number 17
[  340.871409][   T14] usbhid 6-1:0.0: can't add hid device: -71
[  340.877431][   T14] usbhid: probe of 6-1:0.0 failed with error -71
[  340.890589][   T14] usb 6-1: USB disconnect, device number 9
[  341.439756][ T9931] netlink: 'syz.5.1711': attribute type 29 has an invalid length.
[  342.199937][ T9923] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1707'.
[  342.212945][ T9925] netlink: 'syz.3.1708': attribute type 25 has an invalid length.
[  342.223240][ T9925] netlink: 'syz.3.1708': attribute type 29 has an invalid length.
[  342.240070][ T9931] netlink: 'syz.5.1711': attribute type 29 has an invalid length.
[  342.638847][ T9949] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1718'.
[  344.470612][ T9980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1728'.
[  344.669130][ T9986] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1730'.
[  346.040563][   T14] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  346.262211][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.279330][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.300135][   T14] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  346.341185][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.368076][   T14] usb 1-1: config 0 descriptor??
[  346.768863][T10014] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1740'.
[  346.818384][T10014] device ip6erspan0 entered promiscuous mode
[  346.990167][   T14] usbhid 1-1:0.0: can't add hid device: -71
[  348.085007][   T14] usbhid: probe of 1-1:0.0 failed with error -71
[  348.093070][   T14] usb 1-1: USB disconnect, device number 18
[  348.150610][ T5347] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  348.342223][ T5347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.360530][ T5347] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  348.385972][ T5347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.413896][ T5347] usb 2-1: config 0 descriptor??
[  348.631766][ T5347] usbhid 2-1:0.0: can't add hid device: -71
[  348.638557][ T5347] usbhid: probe of 2-1:0.0 failed with error -71
[  348.655224][ T5347] usb 2-1: USB disconnect, device number 20
[  348.864549][T10041] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1744'.
[  348.970350][T10044] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1758'.
[  349.160731][ T5347] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  349.240888][   T14] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  349.352255][ T5347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.369255][ T5347] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  349.379201][ T5347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.392676][ T5347] usb 2-1: config 0 descriptor??
[  349.430748][   T14] usb 6-1: Using ep0 maxpacket: 16
[  349.438767][   T14] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  349.447512][   T14] usb 6-1: config 0 has no interface number 0
[  349.453969][   T14] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  349.465395][   T14] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  349.478710][   T14] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  349.488091][   T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.496285][   T14] usb 6-1: Product: syz
[  349.504624][   T14] usb 6-1: Manufacturer: syz
[  349.509237][   T14] usb 6-1: SerialNumber: syz
[  349.516498][   T14] usb 6-1: config 0 descriptor??
[  349.522423][T10045] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  349.529682][T10045] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  349.614367][T10055] syz.0.1751[10055] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  349.614607][T10055] syz.0.1751[10055] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  349.683943][T10057] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1753'.
[  350.885201][T10045] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  350.911718][T10045] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  350.946536][ T5347] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[  350.965294][ T5347] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input30
[  351.043881][ T5347] usb 2-1: USB disconnect, device number 21
[  351.043931][    C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  351.142815][   T14] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  351.163617][T10067] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1759'.
[  351.200661][ T5158] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  351.298420][T10069] netlink: 'syz.1.1760': attribute type 29 has an invalid length.
[  351.308748][T10069] netlink: 'syz.1.1760': attribute type 29 has an invalid length.
[  351.319957][T10069] netlink: 'syz.1.1760': attribute type 29 has an invalid length.
[  351.413431][ T5158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  351.447331][ T5158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  351.467151][ T5158] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  351.489780][ T5158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.513318][ T5158] usb 4-1: config 0 descriptor??
[  352.073828][T10091] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1766'.
[  352.139366][ T5158] usbhid 4-1:0.0: can't add hid device: -71
[  352.147911][ T5158] usbhid: probe of 4-1:0.0 failed with error -71
[  352.154929][   T14] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  352.177093][ T5158] usb 4-1: USB disconnect, device number 18
[  352.197439][   T14] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  352.226983][   T14] asix: probe of 6-1:0.34 failed with error -71
[  352.245437][   T14] usb 6-1: USB disconnect, device number 10
[  352.565411][T10101] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1772'.
[  352.574922][ T5347] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  352.772145][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.787666][ T5347] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  352.797532][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.819923][ T5347] usb 1-1: config 0 descriptor??
[  352.967941][T10113] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1778'.
[  353.041708][ T5347] usbhid 1-1:0.0: can't add hid device: -71
[  353.060786][ T5347] usbhid: probe of 1-1:0.0 failed with error -71
[  353.075288][ T5347] usb 1-1: USB disconnect, device number 19
[  353.625069][   T14] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  353.640746][ T5347] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  353.781549][T10146] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1792'.
[  353.815420][T10146] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1792'.
[  353.832914][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.845013][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.862832][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  353.872773][ T5347] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  353.889547][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.899985][   T14] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  353.911366][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.922310][ T5347] usb 1-1: config 0 descriptor??
[  353.949438][   T14] usb 2-1: config 0 descriptor??
[  354.103252][T10152] device syzkaller0 entered promiscuous mode
[  354.597113][   T14] usbhid 2-1:0.0: can't add hid device: -71
[  354.606782][   T14] usbhid: probe of 2-1:0.0 failed with error -71
[  354.623652][   T14] usb 2-1: USB disconnect, device number 22
[  354.759514][ T5347] aiptek 1-1:0.0: Aiptek using 400 ms programming speed
[  354.775907][ T5347] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input31
[  355.310811][T10166] netlink: 'syz.1.1800': attribute type 29 has an invalid length.
[  355.311831][ T5158] usb 1-1: USB disconnect, device number 20
[  355.318894][    C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  355.960819][   T14] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  356.150621][   T14] usb 6-1: Using ep0 maxpacket: 32
[  356.158094][   T14] usb 6-1: unable to get BOS descriptor or descriptor too short
[  356.173734][   T14] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 7
[  356.193138][   T14] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  356.207987][   T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.216546][ T5347] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  356.224516][   T14] usb 6-1: Product: syz
[  356.228702][   T14] usb 6-1: Manufacturer: syz
[  356.233471][   T14] usb 6-1: SerialNumber: syz
[  356.423575][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.434943][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.445412][ T5347] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  356.461622][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.486914][ T5347] usb 1-1: config 0 descriptor??
[  356.682135][   T14] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  356.793825][   T14] usb 6-1: USB disconnect, device number 11
[  357.112007][T10166] netlink: 'syz.1.1800': attribute type 29 has an invalid length.
[  357.124760][ T5347] usbhid 1-1:0.0: can't add hid device: -71
[  357.132982][ T5347] usbhid: probe of 1-1:0.0 failed with error -71
[  357.170924][ T5347] usb 1-1: USB disconnect, device number 21
[  357.590594][   T14] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  357.792143][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 20, changing to 8
[  357.807500][T10192] ------------[ cut here ]------------
[  357.813901][T10192] WARNING: CPU: 1 PID: 10192 at net/tls/tls_strp.c:493 tls_strp_msg_load+0x6ff/0xa00
[  357.817591][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1138, setting to 1024
[  357.823526][T10192] Modules linked in:
[  357.838708][T10192] CPU: 1 PID: 10192 Comm: syz.0.1808 Not tainted syzkaller #0
[  357.846292][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  357.857017][T10192] RIP: 0010:tls_strp_msg_load+0x6ff/0xa00
[  357.862969][T10192] Code: 00 00 00 00 00 fc ff df e9 5f fc ff ff e8 49 e0 9e f8 0f 0b e9 ca f9 ff ff e8 3d e0 9e f8 0f 0b e9 f9 f9 ff ff e8 31 e0 9e f8 <0f> 0b e9 49 ff ff ff e8 25 e0 9e f8 0f 0b e9 5e fe ff ff 44 89 e9
[  357.875069][   T14] usb 4-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice=d6.af
[  357.882632][T10192] RSP: 0018:ffffc9000d2f74e0 EFLAGS: 00010283
[  357.882658][T10192] RAX: ffffffff88e3515f RBX: ffff888055ef08dc RCX: 0000000000080000
[  357.882675][T10192] RDX: ffffc9000f5b2000 RSI: 0000000000000061 RDI: 0000000000000062
[  357.882689][T10192] RBP: ffffc9000d2f75b0 R08: ffff8880292ed627 R09: 1ffff1100525dac4
[  357.882704][T10192] R10: dffffc0000000000 R11: ffffed100525dac5 R12: ffff888055ef08d0
[  357.882719][T10192] R13: 0000000000000000 R14: dffffc0000000000 R15: 000000000000001e
[  357.882732][T10192] FS:  00007f9ae11b76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  357.882750][T10192] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  357.882766][T10192] CR2: 0000001b2fe1aff8 CR3: 0000000058086000 CR4: 00000000003526e0
[  357.882784][T10192] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  357.882795][T10192] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  357.882811][T10192] Call Trace:
[  357.882817][T10192]  <TASK>
[  357.882832][T10192]  ? tls_strp_msg_hold+0x5d0/0x5d0
[  357.882873][T10192]  tls_rx_rec_wait+0x918/0xa60
[  357.882908][T10192]  ? sk_psock_get+0x77/0x440
[  357.882930][T10192]  ? sk_psock_get+0x77/0x440
[  357.882963][T10192]  ? process_rx_list+0xea0/0xea0
[  357.882987][T10192]  ? sk_psock_get+0x38f/0x440
[  357.883011][T10192]  ? wait_woken+0x1c0/0x1c0
[  357.883041][T10192]  ? __lock_acquire+0x1465/0x7c40
[  357.883072][T10192]  tls_sw_recvmsg+0x761/0x1d30
[  357.883117][T10192]  ? tls_decrypt_sg+0x2dd0/0x2dd0
[  357.883146][T10192]  ? sock_rps_record_flow+0x19/0x3f0
[  357.883170][T10192]  inet_recvmsg+0x13c/0x1f0
[  357.883194][T10192]  ? inet_sendpage+0x2e0/0x2e0
[  357.883217][T10192]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  357.883238][T10192]  ? security_socket_recvmsg+0x85/0xb0
[  357.883265][T10192]  ? inet_sendpage+0x2e0/0x2e0
[  357.883286][T10192]  ____sys_recvmsg+0x2c8/0x5b0
[  357.883325][T10192]  ? __sys_recvmsg_sock+0x40/0x40
[  357.883370][T10192]  ? import_iovec+0x6f/0xa0
[  357.883404][T10192]  ___sys_recvmsg+0x210/0x590
[  357.883430][T10192]  ? __sys_recvmsg+0x2a0/0x2a0
[  357.883465][T10192]  ? __fget_files+0x3fc/0x460
[  357.883505][T10192]  __x64_sys_recvmsg+0x20d/0x2e0
[  357.883529][T10192]  ? ___sys_recvmsg+0x590/0x590
[  357.883563][T10192]  ? lockdep_hardirqs_on+0x94/0x140
[  357.883590][T10192]  do_syscall_64+0x4c/0xa0
[  357.883618][T10192]  ? clear_bhb_loop+0x60/0xb0
[  357.883645][T10192]  ? clear_bhb_loop+0x60/0xb0
[  357.883676][T10192]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  357.883702][T10192] RIP: 0033:0x7f9ae039e0d9
[  357.883731][T10192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  357.883750][T10192] RSP: 002b:00007f9ae11b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  357.883773][T10192] RAX: ffffffffffffffda RBX: 00007f9ae0626090 RCX: 00007f9ae039e0d9
[  357.883789][T10192] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000005
[  357.883803][T10192] RBP: 00007f9ae0435024 R08: 0000000000000000 R09: 0000000000000000
[  357.883816][T10192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  357.883830][T10192] R13: 00007f9ae0626128 R14: 00007f9ae0626090 R15: 00007fff6f57a298
[  357.883859][T10192]  </TASK>
[  357.883873][T10192] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  357.883883][T10192] CPU: 1 PID: 10192 Comm: syz.0.1808 Not tainted syzkaller #0
[  357.883903][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  357.883913][T10192] Call Trace:
[  357.883918][T10192]  <TASK>
[  357.883924][T10192]  dump_stack_lvl+0x188/0x24e
[  357.883961][T10192]  ? memcpy+0x3c/0x60
[  357.883981][T10192]  ? show_regs_print_info+0x12/0x12
[  357.884009][T10192]  ? load_image+0x410/0x410
[  357.884042][T10192]  panic+0x2d3/0x710
[  357.884067][T10192]  ? bpf_jit_dump+0xd0/0xd0
[  357.884102][T10192]  __warn+0x2f8/0x4f0
[  357.884120][T10192]  ? tls_strp_msg_load+0x6ff/0xa00
[  357.884149][T10192]  ? tls_strp_msg_load+0x6ff/0xa00
[  357.884176][T10192]  report_bug+0x2ba/0x4f0
[  357.884205][T10192]  ? tls_strp_msg_load+0x6ff/0xa00
[  357.884235][T10192]  handle_bug+0x3a/0x70
[  357.884263][T10192]  exc_invalid_op+0x16/0x40
[  357.884291][T10192]  asm_exc_invalid_op+0x16/0x20
[  357.884316][T10192] RIP: 0010:tls_strp_msg_load+0x6ff/0xa00
[  357.884344][T10192] Code: 00 00 00 00 00 fc ff df e9 5f fc ff ff e8 49 e0 9e f8 0f 0b e9 ca f9 ff ff e8 3d e0 9e f8 0f 0b e9 f9 f9 ff ff e8 31 e0 9e f8 <0f> 0b e9 49 ff ff ff e8 25 e0 9e f8 0f 0b e9 5e fe ff ff 44 89 e9
[  357.884361][T10192] RSP: 0018:ffffc9000d2f74e0 EFLAGS: 00010283
[  357.884378][T10192] RAX: ffffffff88e3515f RBX: ffff888055ef08dc RCX: 0000000000080000
[  357.884393][T10192] RDX: ffffc9000f5b2000 RSI: 0000000000000061 RDI: 0000000000000062
[  357.884406][T10192] RBP: ffffc9000d2f75b0 R08: ffff8880292ed627 R09: 1ffff1100525dac4
[  357.884421][T10192] R10: dffffc0000000000 R11: ffffed100525dac5 R12: ffff888055ef08d0
[  357.884436][T10192] R13: 0000000000000000 R14: dffffc0000000000 R15: 000000000000001e
[  357.884455][T10192]  ? tls_strp_msg_load+0x6ff/0xa00
[  357.884494][T10192]  ? tls_strp_msg_hold+0x5d0/0x5d0
[  357.884529][T10192]  tls_rx_rec_wait+0x918/0xa60
[  357.884563][T10192]  ? sk_psock_get+0x77/0x440
[  357.884586][T10192]  ? sk_psock_get+0x77/0x440
[  357.884609][T10192]  ? process_rx_list+0xea0/0xea0
[  357.884631][T10192]  ? sk_psock_get+0x38f/0x440
[  357.884654][T10192]  ? wait_woken+0x1c0/0x1c0
[  357.884682][T10192]  ? __lock_acquire+0x1465/0x7c40
[  357.884717][T10192]  tls_sw_recvmsg+0x761/0x1d30
[  357.884768][T10192]  ? tls_decrypt_sg+0x2dd0/0x2dd0
[  357.884799][T10192]  ? sock_rps_record_flow+0x19/0x3f0
[  357.884821][T10192]  inet_recvmsg+0x13c/0x1f0
[  357.884842][T10192]  ? inet_sendpage+0x2e0/0x2e0
[  357.884865][T10192]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  357.884885][T10192]  ? security_socket_recvmsg+0x85/0xb0
[  357.884913][T10192]  ? inet_sendpage+0x2e0/0x2e0
[  357.884932][T10192]  ____sys_recvmsg+0x2c8/0x5b0
[  357.884977][T10192]  ? __sys_recvmsg_sock+0x40/0x40
[  357.885020][T10192]  ? import_iovec+0x6f/0xa0
[  357.885049][T10192]  ___sys_recvmsg+0x210/0x590
[  357.885073][T10192]  ? __sys_recvmsg+0x2a0/0x2a0
[  357.885107][T10192]  ? __fget_files+0x3fc/0x460
[  357.885146][T10192]  __x64_sys_recvmsg+0x20d/0x2e0
[  357.885167][T10192]  ? ___sys_recvmsg+0x590/0x590
[  357.885199][T10192]  ? lockdep_hardirqs_on+0x94/0x140
[  357.885223][T10192]  do_syscall_64+0x4c/0xa0
[  357.885249][T10192]  ? clear_bhb_loop+0x60/0xb0
[  357.885275][T10192]  ? clear_bhb_loop+0x60/0xb0
[  357.885304][T10192]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  357.885330][T10192] RIP: 0033:0x7f9ae039e0d9
[  357.885345][T10192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  357.885362][T10192] RSP: 002b:00007f9ae11b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  357.885382][T10192] RAX: ffffffffffffffda RBX: 00007f9ae0626090 RCX: 00007f9ae039e0d9
[  357.885397][T10192] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000005
[  357.885410][T10192] RBP: 00007f9ae0435024 R08: 0000000000000000 R09: 0000000000000000
[  357.885423][T10192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  357.885435][T10192] R13: 00007f9ae0626128 R14: 00007f9ae0626090 R15: 00007fff6f57a298
[  357.885462][T10192]  </TASK>
[  357.893195][T10192] Kernel Offset: disabled
[  358.589388][T10192] Rebooting in 86400 seconds..