last executing test programs: 2m52.998823792s ago: executing program 3 (id=243): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000080), 0xfffffe13) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) splice(r1, 0x0, r4, 0x0, 0x1e8640, 0x0) 2m52.61902759s ago: executing program 3 (id=247): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)='3', 0x1}], 0x1}, 0x20000000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) 2m52.337804067s ago: executing program 3 (id=249): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x4008af14, &(0x7f00000001c0)) r2 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000100)='./file0\x00', 0x200c00, &(0x7f0000000040)={[{@lazytime}, {@uqnoenforce}, {}, {@prjquota}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x32, 0x6d]}}, {@noquota}]}, 0x0, 0x968e, &(0x7f000001c300)="$eJzs2gm8pnPhuP/nDGOXMVRSaiqiRdYsUc0MZigkS7QjS8pSUqGNSgoVEe3Zt2xlCVlbSfYWSgiVLJEW2zD/1zFnGOOi+vb9/3zruq7X65znee7nvu/zeT7vezmH2WTSBhMHgzkG0xo3mLlzr5k8ZcxV695+xObzH73MyXfv9+gVFx0/8jhh5HHiYDAYNfL20LRlYwennDpqMOtDyx9p7jnnGpp3MFh25OXIfgYrTnuY9/Lp602dqZkHOvTIt72mfT3UfMM/YvjJofvtcdhgMBgzw/ZDg8HQbo/5oNI2mTB50iNWD7sNW40eeT7j12zTvua9aDCY9/QBHx8zrjv0JHyk4Z+524vOGb3uk/Cz/+PaZMLktWbyHz4XZxlZtuLwOT7zOWhs5uP81sU2XXlkCh863gaD4Uvco86V/4g2mTBp7cHjX+cHR6xywV5Tp103Zx9Mu1HMORgM5hq5vs7zZLvUv9eEics9dM+e/nqEffqxvBsdF8e99cQHh2/Sg8FggcFg7JrT7wVVVVX1n9GEicutBvf/OZ7o/n/SSQuf3v2/qqrqP7e1JkxcbvheP9P9f54nuv/vuPCFH5v23/7Hrzhtqwef3A9RVVVV/1KT1sL7/5gnuv+vuNqla3f/r6qq+s9t/XUeuv/PM9P9f8Enuv+/6cRVFhlZb/rvDQ/MsMuhGf5/wv0zLJ9lhuX3zbB89Az7mXH92WZYfs8My2cffg/WHzcYjJ3+7wWnPLJ47Ljh90aW3zvD8vGP/DudRVefYfmEGZZPmmH5xJGxDi+fPMPyyTOsv+YTTHVVVdX/mdZfbtJqgxn+nf3I4oWmv0/3//PPuHbJJ2u8VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV9Z/Zg7efec5gMBgaDAajBoMpg5HnMz4Opk6dOnX49UnnXXbZkzbQ/xsNnXvN5Cljrlr39iM2n//oZU6+e79HZuk/tv/8T1D/TsP+cxw7bjDYfqMneyj1JNT57y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXv7h/77/7/ZBz15NT57y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vw9jPPGTkGRg0GUwYjz3eb/njGvm9888iqK2988p0HPrLlouO3GXl27jWTp2zzJIz9SWho+LOOuWrd24/YfP6jlzn57v3+C86e//xPUP9OD/lvMzQYjJzfY4bP5XUnrL/hEoPB4MA7T954hcHD7600/N4qY2cZzPLQpks89H2NRXnHu6057XH88LcFH97HSQ/tf62ph8wyNNMgZugV595wxDs2uXv5mR8Xf/zPMWr6k8OuO+2uqVOnTn3UwpHmeJyNp+9/+meZ+TwfGfsSw2Nfaqft3r3Ue3fZdcltttts6y233nL7ZZZbafkVll1mhZVfttRW22y75dLTvj/OnI176Ptq/8yczTPznN0+YcY5m/mzPd6cjXviOXtoj1N2Hdpw+pzN+i/O2WpPPGfjthn5QYuOHz3Y9KGpGRoMFl199GDn4RfLzD4YLLrGyLoLDa+76thRg8G+j3zQ4WezP3wMDu02vM4mkzaY+MjIHvsJH3OdftSKi44feZww8jhx2hDHDR45FMcOTjl11PBcPGqa555zrqF5B4NlR16O7Gew8si7B09fb+pMzTzQoUe+7TXt66HmG97J8JN3Ln3m1cPn4kzb///R/+j6/xivlYYenqihka+RdaZ5TZi81iM/66FpGJ67WUaWrThsMvOc/W/2mPGOm3Uw5gnGO2mticsNL55p/qdvgsfXHYtd8MFpx9b4Fadt9eD/GIXGO88TjHetCTjeeZ5ovMd+6JJTp+3qf228M13r1n7o+/h/5lo3eOJr3Sy0gy0vXmTma91rHn+IjzqPp8/R7DOt9HjXup0PWna34f2Pf+Jr3drDYx/9qGvdqMFg0dWmX+uGL3yTRg/2HX6x7PCLyaMHRw+/WO6hF3MOzht+8dK377DtFsML1pw+J0sP73f82KGH3C9Y8ZbFp+4/derqI2MZP/bRYx05PsbNeD+fMHbaZE7fdvp+h1edvt+bnz7tvUkj+53wL+x3+rY03jvnm/be5JH9Tpxpv6OfYL/Tt33M+bDE0MMXrse53kya6Xoz8jfO9B/3qK/Zpn3Ne9FgMO/p5DvTuv/wmknn7xxPMN4JE5dbbXh8M52/Dx+OdP5eMvmq4XvFvIPBYIHBYOya08f+Lzb0eOOd9YnHOxHGO+sTjfeKY7Zb539hvIMZxvuo42yT9acdK2uOHGeT/4Xjd/q2M1/HRj/07rTL/pr/zHVs3GOuY7vPMmqmyZ6hx/udbQtYf9rzhR75PfeaE46aPvejZ9rvP/qdbYbPMgTXsTEz/T0/as3rB0M057sdu+qlQwc88ZyPHjz6b4vpcz592yea88n/zJw/64nn/J/9PXmJ5097f/RM459xztfb55l7T5/z2Wba7z+a88lPfO947JyPH4ymOV/6vmnz9kTX08eb8+nbTp/z4Y+4ythZB2sM37NG5nzSPzPnC/3vHOdzwfrTnm/58KKzjzj59dPnfOY5/kdzPulfnfNxDx/niz703vNGDWabbbDzZjvttOMy075Pf7nstO98Lbrnmmnz/ET30sczmr7tE50Xq/8zRmP+KaOhf2S08KyPZ/TIqXX4Djs+7X96LVr9XzUa8LXoqqOmzdsT/V70eHM+fVu6Dy44w/Yz/x26/joP/d49z0z3wemb4H3w7DPW3nP6Lkc2e2CmYU6/r94/w/JZZlh+3wzLR8+wnxnXn22G5ffMsHz4I8w2w/rTWccN/807snzKI6uPHf7ladzI8ntnWD7+kW0XXX2G5RNmWD5phuUTHzk0Fp08w/LJM6y/5uBfbPp/k95m5ot8/bP133/d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe/D2M88ZOQZGDQZTBtOeD408DnYbWu+2Vw0/DgaD0SseP3W9J3u8T3JD514zecqYq9a9/YjN5z96mZPv3u+/4Oz5z/8E9e/0kP82Q4PByPk9ZpvBYLDuhPU3XGIwGKw39fgVRw0efm+h4fdWHTtqMNh36FE7mP3hdYZ2G15nk0kbTBwM5hhZY9xjfuhjzqNHrbjo+JHHCSOPE6ddn8YNHjlexw5OOXXUYNaHlj/S3HPONTTvYLDsyMuR/QxWnPYw7+XT15s6UzMPdOiRb3tN+3qo+YZ/xPCTnbee/OzhuZpp+/8zTb9WbzPqH67a+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ396/5d7T8t5Wou/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9yDt595zsgxMGowmDKY9nxot5HHwdCJp7xw5BAZvcuVRx7yZI/3SW7o3GsmTxlz1bq3H7H5/Ecvc/Ld+/0XnD3/+Z+g/p0e8t9maDAYOb/HbDMYDNadsP6GSwwGg0OOvHKXUYOH31to+L1Vx44aDPYdetQOZn94naHdhtfZZNIGEweDOUbWGPeYH/qY8+hRKy46fuRxwsjjxGnXp3GDR47XsYNTTh01mPWh5Y8095xzDc07GCw78nJkP4MVpz3Me/n09abO1MwDHXrk217Tvh5qvuEfMfxkj3muOXF4rmba/v9M06/V24z6h6t2/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4B28/85yRY2DUYDBlMO35qJHHod1uuvEjGw4/Dr+ef809r3myx/skN3TuNZOnjLlq3duP2Hz+o5c5+e79/gvOnv/8T1D/TsP+cxw7bjDYfqMneyj1JNT57y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL393/1P+Cuf+XB1JPSp3/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/cg7efec7I01GPLB21W8cFNnTuNZOnjLlq3duP2Hz+o5c5+e79nuwB/bs9jv/u+WMW/4/lj1n8P54/ZvH/RP6YxX+P/DGL/yfzxyz+e+aPWfw/lT9m8f90/pjFf6/8MYv/3vljFv998scs/p/JH7P4fzZ/zOL/ufwxi/+++WMW//3yxyz+n88fs/jvnz9m8T8gf8zi/4X8MYv/gfljFv+D8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bx/2b+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+H8rf8zi/+38MYv/yfljFv9T8scs/qfmj1n8T8sfs/h/J3/M4n96/pjF/4z8MYv/mfljFv/v5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv/v5Y9Z/L+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bxvyB/zOJ/Yf6Yxf8n+WMW/4vyxyz+P80fs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfx/lj9m8f95/pjF/xf5Yxb/X+aPWfyvyh+z+F+dP2bx/1X+mMX/1/ljFv9r8scs/r/JH7P4X5s/ZvG/Ln/M4n99/pjF/7f5Yxb/G/LHLP435o9Z/G/KH7P4/y5/zOL/+/wxi/8f8scs/jfnj1n8/5g/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv8/5Y9Z/O/IH7P435k/ZvH/c/6Yxf+u/DGL/1/yxyz+f80fs/j/LX/M4v/3/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvGfkj9m8X8gf8zi/2D+mMV/av6YxH+WQf6YxX8of8ziPyp/zOI/S/6YxX/W/DGL/+j8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/9T8scs/vPlj1n8x+SPWfznzx+z+I/NH7P4L5A/ZvFfMH/M4v/U/DGL/9Pyxyz+T88fs/gvlD9m8X9G/pjFf+H8MYv/M/PHLP7Pyh+z+C+SP2bxf3b+mMX/OfljFv9x+WMW/+fmj1n8n5f/Y5p15NHg//z8Mcv5v2j+mMV/sfwxi/8L8scs/ovnj1n8l8gfs/i/MH/M4v+i/DGL/4vzxyz+L8kfs/gvmT9m8X9p/pjFf6n8MYv/0vljFv9l8scs/svmj1n8l8sfs/gvnz9m8X9Z/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8X54/ZvFfJX/M4r9q/pjF/xX5Yxb/V+aPWfxflT9m8R+fP2bxn5A/ZvGfmD9m8V8tf8ziv3r+mMV/jfwxi/+k/DGL/2SV/yz/9JoW/zVV/v98Fv+18scs/q/OH7P4vyZ/zOK/dv6YxX+d/DGL/7r5Yxb/1+aPWfzXyx+z+L8uf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+r88fs/hvnD9m8d8kf8zi/4b8MYv/G/PHLP5vyh+z+L85f8zi/5b8MYv/W/PHLP5vyx+z+G+aP2bx3yx/zOK/ef6Yxf/t+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bxf0f+mMV/m/wxi/8788cs/u/KH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/u/PHLP7vyR+z+O+YP2bxf2/+mMV/p/wxi//78scs/u/PH7P4fyB/zOK/c/6YxX+X/DGL/675Yxb/D+aPWfw/lD9m8f9w/pjF/yP5Yxb/j+aPWfx3yx+z+O+eP2bx/1j+mMX/4/ljFv9P5I9Z/PfIH7P4fzJ/zOK/Z/6Yxf9T+WMW/0/nj1n898ofs/jvnT9m8d8nf8zi/5n8MYv/Z/PHLP6fyx+z+O+bP2bx3y9/zOL/+fwxi//++WMW/wPyxyz+X8gfs/gfmD9m8T8of8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/b+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/7fyxyz+384fs/ifnD9m8T8lf8zif2r+mMX/tPwxi/938scs/qfnj1n8z8gfs/ifmT9m8f9u/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8f9e/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/C/LHLP4X5o9Z/H+SP2bxvyh/zOL/0/wxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf9n+WMW/5/nj1n8f5E/ZvH/Zf6Yxf+q/DGL/9X5Yxb/X+WPWfx/nT9m8b8mf8zi/5v8MYv/tfljFv/r8scs/tfnj1n8f5s/ZvG/IX/M4n9j/pjF/6b8MYv/7/LHLP6/zx+z+P8hf8zif3P+mMX/j/ljFv9b8scs/rfmj1n8b8sfs/jfnj9m8f9T/pjF/478MYv/nfljFv8/549Z/O/KH7P4/yV/zOL/1/wxi//f8scs/n/PH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8p+WMW/wfyxyz+D+aPWfyn5o9J/Gcd5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+D8lf8ziP1/+mMV/TP6YxX/+/DGL/9j8MYv/AvljFv8F88cs/k/NH7P4Py1/zOL/9Pwxi/9C+WMW/2fkj1n8F84fs/g/M3/M4v+s/DGL/yL5Yxb/Z+ePWfyfkz9m8R+XP2bxf27+mMX/efljFv/n549Z/BfNH7P4L5Y/ZvF/Qf6YxX/x/DGL/xL5Yxb/F+aPWfxflD9m8X9x/pjF/yX5Yxb/JfPHLP4vzR+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4vyx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/8vzxyz+q+SPWfxXzR+z+L8if8zi/8r8MYv/q/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FfPH7P4r5E/ZvGflD9m8Z+cP2bxXzN/zOK/Vv6Yxf/V+WMW/9fkj1n8184fs/ivkz9m8V83f8zi/9r8MYv/evljFv/XDS7LH7L4r9/5j1n8N8gfs/hvmD9m8d8of8zi//r8MYv/xvljFv9N8scs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi/+m+WMW/83yxyz+m+ePWfzfnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/3fkj1n8t8kfs/i/M3/M4v+u/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P4vzt/zOL/nvwxi/+O+WMW//fmj1n8d8ofs/i/L3/M4v/+/DGL/wfyxyz+O+ePWfx3yR+z+O+aP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMV/t/wxi//u+WMW/4/lj1n8P54/ZvH/RP6YxX+P/DGL/yfzxyz+e+aPWfw/lT9m8f90/pjFf6/8MYv/3vljFv998scs/p/JH7P4fzZ/zOL/ufwxi/+++WMW//3yxyz+n88fs/jvnz9m8T8gf8zi/4X8MYv/gfljFv+D8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bx/2b+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+H8rf8zi/+38MYv/yfljFv9T8scs/qfmj1n8T8sfs/h/J3/M4n96/pjF/4z8MYv/mfljFv/v5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv/v5Y9Z/L+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bxvyB/zOJ/Yf6Yxf8n+WMW/4vyxyz+P80fs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfx/lj9m8f95/pjF/xf5Yxb/X+aPWfyvyh+z+F+dP2bx/1X+mMX/1/ljFv9r8scs/r/JH7P4X5s/ZvG/Ln9M4j/79fljEv9Zf5s/ZvG/IX/M4n9j/pjF/6b8MYv/7/LHLP6/zx+z+P8hf8zif3P+mMX/j/ljFv9b8scs/rfmj1n8b8sfs/jfnj9m8f9T/pjF/478MYv/nfljFv8/549Z/O/KH7P4/yV/zOL/1/wxi//f8scs/n/PH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8p+WMW/wfyxyz+D+aPWfyn5o9J/EcP8scs/kP5Yxb/UfljFv9Z8scs/rPmj1n8R+ePWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/J+SP2bxny9/zOI/Jn/M4j9//pjFf2z+mMV/gfwxi/+C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+h/DGL/zPyxyz+C+ePWfyfmT9m8X9W/pjFf5H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovmj1n8F8sfs/i/IH/M4r94/pjFf4n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/kvljFv+X5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv+X5Y9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjF/+X5Yxb/VfLHLP6r5o9Z/F+RP2bxf2X+mMX/VfljFv/x+WMW/wn5Yxb/ifljFv/V8scs/qvnj1n818gfs/hPyh+z+E/OH7P4r5k/ZvFfK3/M4v/q/DGL/2vyxyz+a+ePWfzXyR+z+K+bP2bxf23+mMV/vfwxi//r8scs/uvnj1n8N8gfs/hvmD9m8d8of8zi//r8MYv/xvljFv9N8scs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi/+m+WMW/83yxyz+m+ePWfzfnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/3fkj1n8t8kfs/i/M3/M4v+u/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P4vzt/zOL/nvwxi/+O+WMW//fmj1n8d8ofs/i/L3/M4v/+/DGL/wfyxyz+O+ePWfx3yR+z+O+aP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMV/t/wxi//u+WMW/4/lj1n8P54/ZvH/RP6YxX+P/DGL/yfzxyz+e+aPWfw/lT9m8f90/pjFf6/8MYv/3vljFv998scs/p/JH7P4fzZ/zOL/ufwxi/+++WMW//3yxyz+n88fs/jvnz9m8T8gf8zi/4X8MYv/gfljFv+D8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bx/2b+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+H8rf8zi/+38MYv/yfljFv9T8scs/qfmj1n8T8sfs/h/J3/M4n96/pjF/4z8MYv/mfljFv/v5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv/v5Y9Z/L+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bxvyB/zOJ/Yf6Yxf8n+WMW/4vyxyz+P80fs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfx/lj9m8f95/pjF/xf5Yxb/X+aPWfyvyh+z+F+dP2bx/1X+mMX/1/ljFv9r8scs/r/JH7P4X5s/ZvG/Ln/M4n99/pjF/7f5Yxb/G/LHLP435o9Z/G/KH7P4/y5/zOL/+/wxi/8f8scs/jfnj1n8/5g/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv8/5Y9Z/O/IH7P435k/ZvH/c/6Yxf+u/DGL/1/yxyz+f80fs/j/LX/M4v/3/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvGfkj9m8X8gf8zi/2D+mMV/av6YxH+2Qf6YxX8of8ziPyp/zOI/S/6YxX/W/DGL/+j8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/9T8scs/vPlj1n8x+SPWfznzx+z+I/NH7P4L5A/ZvFfMH/M4v/U/DGL/9Pyxyz+T88fs/gvlD9m8X9G/pjFf+H8MYv/M/PHLP7Pyh+z+C+SP2bxf3b+mMX/OfljFv9x+WMW/+fmj1n8n5c/ZvF/fv6YxX/R/DGL/2L5Yxb/F+SPWfwXzx+z+C+RP2bxf2H+mMX/RfljFv8X549Z/F+SP2bxXzJ/zOL/0vwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOL/svwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+L88f8ziv0r+mMV/1fwxi/8r8scs/q/MH7P4vyp/zOI/Pn/M4j8hf8ziPzF/zOK/Wv6YxX/1/DGL/xr5Yxb/SfljFv/J+WMW/zXzxyz+a+WPWfxfnT9m8X9N/pjFf+38MYv/OvljFv9188cs/q/NH7P4r5c/ZvF/Xf6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/F+fP2bx3zh/zOK/Sf6Yxf8N+WMW/zfmj1n835Q/ZvF/c/6Yxf8t+WMW/7fmj1n835Y/ZvHfNH/M4r9Z/pjFf/P8MYv/2/PHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4v+O/DGL/zb5Yxb/d+aPWfzflT9m8d82f8ziv13+mMV/+/wxi/8O+WMW/3fnj1n835M/ZvHfMX/M4v/e/DGL/075Yxb/9+WPWfzfnz9m8f9A/pjFf+f8MYv/LvljFv9d88cs/h/MH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P475Y/ZvHfPX/M4v+x/DGL/8fzxyz+n8gfs/jvkT9m8f9k/pjFf8/8MYv/p/LHLP6fzh+z+O+VP2bx3zt/zOK/T/6Yxf8z+WMW/8/mj1n8P5c/ZvHfN3/M4r9f/pjF//P5Yxb//fPHLP4H5I9Z/L+QP2bxPzB/zOJ/UP6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvH/Rv6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/t/MH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv9v5Y9Z/L+dP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/7+SPWfxPzx+z+J+RP2bxPzN/zOL/3fwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOL/vfwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/hfkj1n8L8wfs/j/JH/M4n9R/pjF/6f5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/z/LHLP4/zx+z+P8if8zi/8v8MYv/VfljFv+r88cs/r/KH7P4/zp/zOJ/Tf6Yxf83+WMW/2vzxyz+1+WPWfyvzx+z+P82f8zif0P+mMX/xvwxi/9N+WMW/9/lj1n8f58/ZvH/Q/6Yxf/m/DGL/x/zxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOL/p/wxi/8d+WMW/zvzxyz+f84fs/jflT9m8f9L/pjF/6/5Yxb/v+WPWfz/nj9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+U/LHLP4P5I9Z/B/MH7P4T80fk/jPPsgfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Sv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfmj9m8X9a/pjF/+n5Yxb/hfLHLP7PyB+z+C+cP2bxf2b+mMX/WfljFv9F8scs/s/OH7P4Pyd/zOI/Ln/M4v/c/DGL//Pyxyz+z88fs/gvmj9m8V8sf8zi/4L8MYv/4vljFv8l8scs/i/MH7P4vyh/zOL/4vwxi/9L8scs/kvmj1n8X5o/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5Y/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv+X549Z/FfJH7P4r5o/ZvF/Rf6Yxf+V+WMW/1flj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/q/PHLP6vyR+z+K+dP2bxXyd/zOK/bv6Yxf+1+WMW//Xyxyz+r8sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//r88cs/hvnj1n8N8kfs/i/IX/M4v/G/DGL/5vyxyz+b84fs/i/JX/M4v/W/DGL/9vyxyz+m+aPWfw3yx+z+G+eP2bxf3v+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzfkT9m8d8mf8zi/878MYv/u/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/u/DGL/3vyxyz+O+aPWfzfmz9m8d8pf8zi/778MYv/+/PHLP4fyB+z+O+cP2bx3yV/zOK/a/6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/93yxyz+u+ePWfw/lj9m8f94/pjF/xP5Yxb/PfLHLP6fzB+z+O+ZP2bx/1T+mMX/0/ljFv+98scs/nvnj1n898kfs/h/Jn/M4v/Z/DGL/+fyxyz+++aPWfz3yx+z+H8+f8ziv3/+mMX/gPwxi/8X8scs/gfmj1n8D8ofs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+b+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOL/rfwxi/+388cs/ifnj1n8T8kfs/ifmj9m8T8tf8zi/538MYv/6fljFv8z8scs/mfmj1n8v5s/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8v5c/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf+C/DGL/4X5Yxb/n+SPWfwvyh+z+P80f8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bxvyp/zOJ/df6Yxf9X+WMW/1/nj1n8r8kfs/j/Jn/M4n9t/pjF/7r8MYv/9fljFv/f5o9Z/G/IH7P435g/ZvG/KX/M4v+7/DGL/+/zxyz+f8gfs/jfnD9m8f9j/pjF/5b8sUf8z/qv9r81f8xy/t+WP2bxvz1/zOL/p/wxi/8d+WMW/zvzxyz+f84fs/jflT9m8f9L/pjF/6/5Yxb/v+WPWfz/nj9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+U/LHLP4P5I9Z/B/MH7P4T80fk/jPMcgfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/7Yf6v/LDP5z5E/9t/qP5jJf878MYv/XPljFv+588cs/vPkj1n8580fs/g/JX/M4j9f/pjFf0z+mMV//vwxi//Y/DGL/wL5Yxb/BfPHLP5PzR+z+D8tf8zi//T8MYv/QvljFv9n5I9Z/BfOH7P4PzN/zOL/rPwxi/8i+WMW/2fnj1n8n5M/ZvEflz9m8X9u/pjF/3n5Yxb/5+ePWfwXzR+z+C+WP2bxf0H+mMV/8fwxi/8S+WMW/xfmj1n8X5Q/ZvF/cf6Yxf8l+WMW/yXzxyz+L80fs/gvlT9m8V86f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+L8sfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi//L88cs/qvkj1n8V80fs/i/In/M4v/K/DGL/6vyxyz+4/PHLP4T8scs/hPzxyz+q+WPWfxXzx+z+K+RP2bxn5Q/ZvGfnD9m8V8zf8ziv1b+mMX/1fljFv/X5I9Z/NfOH7P4r5M/ZvFfN3/M4v/a/DGL/3r5Yxb/1+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6Yxf/1+WMW/43zxyz+m+SPWfzfkD9m8X9j/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/TfPHLP6b5Y9Z/DfPH7P4vz1/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7vyB+z+G+TP2bxf2f+mMX/XfljFv9t88cs/tvlj1n8t88fs/jvkD9m8X93/pjF/z35Yxb/HfPHLP7vzR+z+O+UP2bxf1/+mMX//fljFv8P5I9Z/HfOH7P475I/ZvHfNX/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/275Yxb/3fPHLP4fyx+z+H88f8zi/4n8MYv/HvljFv9P5o9Z/PfMH7P4fyp/zOL/6fwxi/9e+WMW/73zxyz+++SPWfw/kz9m8f9s/pjF/3P5Yxb/ffPHLP775Y9Z/D+fP2bx3z9/zOJ/QP6Yxf8L+WMW/wPzxyz+B+WPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4v/N/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvH/Vv6Yxf/b+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bx/07+mMX/9Pwxi/8Z+WMW/zPzxyz+380fs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+38sfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4n9B/pjF/8L8MYv/T/LHLP4X5Y9Z/H+aP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yx/zOL/8/wxi/8v8scs/r/MH7P4X5U/ZvG/On/M4v+r/DGL/6/zxyz+1+SPWfx/kz9m8b82f8zif13+mMX/+vwxi/9v88cs/jfkj1n8b8wfs/jflD9m8f9d/pjF//f5Yxb/P+SPWfxvzh+z+P8xf8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8ofs/jfkT9m8b8zf8zi/+f8MYv/XfljFv+/5I9Z/P+aP2bx/1v+mMX/7/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/nIP8MYv/UP6YxX9U/pjFf5b8MYv/rPljFv/R+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/p+SPWfznyx+z+I/JH7P4z58/ZvEfmz9m8V8gf8ziv2D+mMX/qfljFv+n5Y9Z/J+eP2bxXyh/zOL/jPwxi//C+WMW/2fmj1n8n5U/ZvFfJH/M4v/s/DGL/3Pyxyz+4/LHLP7PzR+z+D8vf8zi//z8MYv/ovljFv/F8scs/i/IH7P4L54/ZvFfIn/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4r9k/pjF/6X5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvFfLn/M4r98/pjF/2X5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvF/ef6YxX+V/DGL/6r5Yxb/V+SPWfxfmT9m8X9V/pjFf3z+mMV/Qv6YxX9i/pjFf7X8MYv/6vljFv818scs/pPyxyz+k/PHLP5r5o9Z/NfKH7P4vzp/zOL/mvwxi//a+WMW/3Xyxyz+6+aPWfxfmz9m8V8vf8zi/7r8MYv/+vljFv8N8scs/hvmj1n8N8ofs/i/Pn/M4r9x/pjFf5P8MYv/G/LHLP5vzB+z+L8pf8zi/+b8MYv/W/LHLP5vzR+z+L8tf8ziv2n+mMV/s/wxi//m+WMW/7fnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMX/HfljFv9t8scs/u/MH7P4vyt/zOK/bf6YxX+7/DGL//b5Yxb/HfLHLP7vzh+z+L8nf8ziv2P+mMX/vfljFv+d8scs/u/LH7P4vz9/zOL/gfwxi//O+WMW/13yxyz+u+aPWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfw/mj9m8d8tf8ziv3v+mMX/Y/ljFv+P549Z/D+RP2bx3yN/zOL/yfwxi/+e+WMW/0/lj1n8P50/ZvHfK3/M4r93/pjFf5/8MYv/Z/LHLP6fzR+z+H8uf8ziv2/+mMV/v/wxi//n88cs/vvnj1n8D8gfs/h/IX/M4n9g/pjF/6D8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfy/mT9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+38ofs/h/O3/M4n9y/pjF/5T8MYv/qfljFv/T8scs/t/JH7P4n54/ZvE/I3/M4n9m/pjF/7v5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/3v5Yxb/7+ePWfx/kD9m8f9h/pjF/0f5Yxb/H+ePWfwvyB+z+F+YP2bx/0n+mMX/ovwxi/9P88cs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/6vyxyz+V+ePWfx/lT9m8f91/pjF/5r8MYv/b/LHHu0/+skezr/f4/hfmz9mOf+vyx+z+F+fP2bx/23+mMX/hvwxi/+N+WMW/5vyxyz+v8sfs/j/Pn/M4v+H/DGL/835Yxb/P+aPWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf9P+WMW/zvyxyz+d+aPWfz/nD9m8b8rf8zi/5f8MYv/X/PHLP5/yx+z+P89f8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfyn5I9Z/B/IH7P4P5g/ZvGfmj8m8Z9rkD9m8R/KH7P4j8ofs/jPkj9m8Z81f8ziPzp/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y/99/vP8fBb+T+2/37/h5prnvwxi/+8+WMW/6fkj1n858sfs/iPyR+z+M+fP2bxH5s/ZvFfIH/M4r9g/pjF/6n5Yxb/p+WPWfyfnj9m8V8of8zi/4z8MYv/wvljFv9n5o9Z/J+VP2bxXyR/zOL/7Pwxi/9z8scs/uPyxyz+z80fs/g/L3/M4v/8/DGL/6L5Yxb/xfLHLP4vyB+z+C+eP2bxXyJ/zOL/wvwxi/+L8scs/i/OH7P4vyR/zOK/ZP6Yxf+l+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf9l+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxf3n+mMV/lfwxi/+q+WMW/1fkj1n8X5k/ZvF/Vf6YxX98/pjFf0L+mMV/Yv6YxX+1/DGL/+r5Yxb/NfLHLP6T8scs/pPzxyz+a+aPWfzXyh+z+L86f8zi/5r8MYv/2vljFv918scs/uvmj1n8X5s/ZvFfL3/M4v+6/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4vz5/zOK/cf6YxX+T/DGL/xvyxyz+b8wfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4r9p/pjFf7P8MYv/5vljFv+3549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/x35Yxb/bfLHLP7vzB+z+L8rf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+784fs/i/J3/M4r9j/pjF/735Yxb/nfLHLP7vyx+z+L8/f8zi/4H8MYv/zvljFv9d8scs/rvmj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4r97/pjF/2P5Yxb/j+ePWfw/kT9m8d8jf8zi/8n8MYv/nvljFv9P5Y9Z/D+dP2bx3yt/zOK/d/6YxX+f/DGL/2fyxyz+n80fs/h/Ln/M4r9v/pjFf7/8MYv/5/PHLP77549Z/A/IH7P4fyF/zOJ/YP6Yxf+g/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/8H5Yxb/Q/LHLP6H5v/Y1lhnMJD4H5Y/Zjn/D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+38wfs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/2/lj1n8v50/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/v5I9Z/E/PH7P4n5E/ZvE/M3/M4v/d/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4v+9/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+F+SPWfwvzB+z+P8kf8zif1H+mMX/p/ljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi//P8scs/j/PH7P4/yJ/zOL/y/wxi/9V+WMW/6vzxyz+v8ofs/j/On/M4n9N/pjF/zf5Yxb/a/PHLP7X5Y9Z/K/PH7P4/zZ/zOJ/Q/6Yxf/G/DGL/035Yxb/3+WPWfx/nz9m8f9D/pjF/+b8MYv/H/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4v+n/DGL/x35Yxb/O/PHLP5/zh+z+N+VP2bx/0v+mMX/r/ljFv+/5Y9Z/P+eP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP5T8scs/g/kj1n8H8wfs/hPzR+T+M89yB+z+A/lj1n8R+WPWfxnyR+z+M+aP2bxH50/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8X9K/pjFf778MYv/mPwxi//8+WMW/7H/0N95dFj8F9AKP3EW/wXzxyz+T80fs/g/LX/M4v/0/DGL/0L5Yxb/Z+SPWfwXzh+z+D8zf8zi/6z8MYv/IvljFv9n549Z/J+TP2bxH5c/ZvF/bv6Yxf95+WMW/+fnj1n8F80fs/gvlj9m8X9B/pjFf/H8MYv/EvljFv8X5o9Z/F+UP2bxf3H+mMX/JfljFv8l88cs/i/NH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/i/LH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/y/PHLP6r5I9Z/FfNH7P4vyJ/zOL/yvwxi/+r8scs/uPzxyz+E/LHLP4T88cs/qvlj1n8V88fs/ivkT9m8Z+UP2bxn5w/ZvFfM3/M4r9W/pjF/9X5Yxb/1+SPWfzXzh+z+K+TP2bxXzd/zOL/2vwxi/96+WMW/9flj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/9fljFv+N88cs/pvkj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6Yxf9t+WMW/03zxyz+m+WPWfw3zx+z+L89f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+78gfs/hvkz9m8X9n/pjF/135Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvF/d/6Yxf89+WMW/x3zxyz+780fs/jvlD9m8X9f/pjF//35Yxb/D+SPWfx3zh+z+O+SP2bx3zV/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOL/0fwxi/9u+WMW/93zxyz+H8sfs/h/PH/M4v+J/DGL/x75Yxb/T+aPWfz3zB+z+H8qf8zi/+n8MYv/XvljFv+988cs/vvkj1n8P5M/ZvH/bP6Yxf9z+WMW/33zxyz+++WPWfw/nz9m8d8/f8zif0D+mMX/C/ljFv8D88cs/gflj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOL/zfwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bx/1b+mMX/2/ljFv+T88cs/qfkj1n8T80fs/iflj9m8f9O/pjF//T8MYv/GfljFv8z88cs/t/NH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/t/LH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOJ/Qf6Yxf/C/DGL/0/yxyz+F+WPWfx/mj9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+P8sf8zi//P8MYv/L/LHLP6/zB+z+F+VP2bxvzp/zOL/q/wxi/+v88cs/tfkj1n8f5M/ZvG/Nn/M4n9d/pjF//r8MYv/b/PHLP435I9Z/G/MH7P435Q/ZvH/Xf6Yxf/3+WMW/z/kj1n8b84fs/j/MX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/n/KH7P435E/ZvG/M3/M4v/n/DGL/135Yxb/v+SPWfz/mj9m8f9b/pjF/+/5Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4j8lf8zi/0D+mMX/wfwxi//U/DGJ/zyD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW/6fkj1n858sfs/iPyR+z+M+fP2bxH5s/ZvFfIH/M4r9g/pjF/6n5Yxb/p+WPWfyfnj9m8V8of8zi/4z8MYv/wvljFv9n5o9Z/J+VP2bxXyR/zOL/7Pwxi/9z8scs/uPyxyz+z80fs/g/L3/M4v/8/DGL/6L5Yxb/xfLHLP4vyB+z+C+eP2bxXyJ/zOL/wvwxi/+L8scs/i/OH7P4vyR/zOK/ZP6Yxf+l+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf9l+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxf3n+mMV/lfwxi/+q+WMW/1fkj1n8X5k/ZvF/Vf6YxX98/pjFf0L+mMV/Yv6YxX+1/DGL/+r5Yxb/NfLHLP6T8scs/pPzxyz+a+aPWfzXyh+z+L86f8zi/5r8MYv/2vljFv918scs/uvmj1n8X5s/ZvFfL3/M4v+6/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4vz5/zOK/cf6YxX+T/DGL/xvyxyz+b8wfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4r9p/pjFf7P8MYv/5vljFv+3549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/x35Yxb/bfLHLP7vzB+z+L8rf8ziv23+mMV/u/wxi//2+WMW/x3yxx723+rE/2r/d+ePWc7/9+SPWfx3zB+z+L83f8ziv1P+mMX/ffljFv/3549Z/D+QP2bx3zl/zOK/S/6YxX/X/DGL/wfzxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfx3zx+z+H8sf8zi//H8MYv/J/LHLP575I9Z/D+ZP2bx3zN/zOL/qfwxi/+n88cs/nvlj1n8984fs/jvkz9m8f9M/pjF/7P5Yxb/z+WPWfz3zR+z+O+XP2bx/3z+mMV///wxi/8B+WMW/y/kj1n8D8wfs/gflD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/zfzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf9b+WMW/2/nj1n8T84fs/ifkj9m8T81f8zif1r+mMX/O/ljFv/T88cs/mfkj1n8z8wfs/h/N3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/h/L3/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/wX5Yxb/C/PHLP4/yR+z+F+UP2bx/2n+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOL/s/wxi//P88cs/r/IH7P4/zJ/zOJ/Vf6Yxf/q/DGL/6/yxyz+v84fs/hfkz9m8f9N/pjF/9r8MYv/dfljFv/r88cs/r/NH7P435A/ZvG/MX/M4n9T/pjF/3f5Yxb/3+ePWfz/kD9m8b85f8zi/8f8MYv/LfljFv9b88cs/rflj1n8b88fs/j/KX/M4n9H/pjF/878MYv/n/PHLP535Y9Z/P+SP2bx/2v+mMX/b/ljFv+/S/0/+g/et/jfLfX/R1n878kfs/jfmz9m8b8vf8zif3/+mMV/Sv6Yxf+B/DGL/4P5Yxb/qfljEv95B/ljFv+h/DGL/6j8MYv/LPljFv9Z88cs/qPzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP5PyR+z+M+XP2bxH5M/ZvGfP3/M4j82f8ziv0D+mMV/wfwxi/9T88cs/k/LH7P4Pz1/zOK/UP6Yxf8Z+WMW/4Xzxyz+z8wfs/g/K3/M4r9I/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv9F88cs/ovlj1n8X5A/ZvFfPH/M4r9E/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf8n8MYv/S/PHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/y/LHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4v/y/DGL/yr5Yxb/VfPHLP6vyB+z+L8yf8zi/6r8MYv/+Pwxi/+E/DGL/8T8MYv/avljFv/V88cs/mvkj1n8J+WPWfwn549Z/NfMH7P4r5U/ZvF/df6Yxf81+WMW/7Xzxyz+6+SPWfzXzR+z+L82f8ziv17+mMX/dfljFv/188cs/hvkj1n8N8wfs/hvlD9m8X99/pjFf+P8MYv/JvljFv835I9Z/N+YP2bxf1P+mMX/zfljFv+35I9Z/N+aP2bxf1v+mMV/0/wxi/9m+WMW/83zxyz+b88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/878scs/tvkj1n835k/ZvF/V/6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/N+dP2bxf0/+mMV/x/wxi/9788cs/jvlj1n835c/ZvF/f/6Yxf8D+WMW/53zxyz+u+SPWfx3zR+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+H80f8ziv1v+mMV/9/wxi//H8scs/h/PH7P4fyJ/zOK/R/6Yxf+T+WMW/z3zxyz+n8ofs/h/On/M4r9X/pjFf+/8MYv/PvljFv/P5I9Z/D+bP2bx/1z+mMV/3/wxi/9++WMW/8/nj1n8988fs/gfkD9m8f9C/pjF/8D8MYv/QfljFv8v5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+H8zf8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfy/lT9m8f92/pjF/+T8MYv/KfljFv9T88cs/qflj1n8v5M/ZvE/PX/M4n9G/pjF/8z8MYv/d/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/9/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+F+QP2bxvzB/zOL/k/wxi/9F+WMW/5/mj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+V+WPWfyvzh+z+P8qf8zi/+v8MYv/NfljFv/f5I9Z/K/NH7P4X5c/ZvG/Pn/M4v/b/DGL/w35Yxb/G/PHLP435Y9Z/H+XP2bx/33+mMX/D/ljFv+b88cs/n/MH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/n/LHLP535I9Z/O/MH7P4/zl/zOJ/V/6Yxf8v+WMW/7/mj1n8/5Y/ZvH/e/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4T8kfs/g/kD9m8X8wf8ziPzV/TOL/lEH+mMV/KH/M4j8qf8ziP0v+mMV/1vwxi//o/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/U/LHLP7z5Y9Z/Mfkj1n8588fs/iPzR+z+C+QP2bxXzB/zOL/1Pwxi//T8scs/k/PH7P4L5Q/ZvF/Rv6YxX/h/DGL/zPzxyz+z8ofs/gvkj9m8X92/pjF/zn5Yxb/cfljFv/n5o9Z/J+XP2bxf37+mMV/0fwxi/9i+WMW/xfkj1n8F88fs/gvkT9m8X9h/pjF/0X5Yxb/F+ePWfxfkj9m8V8yf8zi/9L8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8zi/7L8MYv/CvljFv8V88cs/ivlj1n8V84fs/i/PH/M4r9K/pjFf9X8MYv/K/LHLP6vzB+z+L8qf8ziPz5/zOI/IX/M4j8xf8ziv1r+mMV/dZH/HP/Cuhb/NUT+/0oW/0n5Yxb/yfljFv8188cs/mvlj1n8X50/ZvF/Tf6YxX/t/DGL/zr5Yxb/dfPHLP6vzR+z+K+XP2bxf13+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfxfnz9m8d84f8ziv0n+mMX/DfljFv835o9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/N+WP2bx3zR/zOK/Wf6YxX/z/DGL/9vzxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOL/jvwxi/82+WMW/3fmj1n835U/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv93549Z/N+TP2bx3zF/zOL/3vwxi/9O+WMW//flj1n8358/ZvH/QP6YxX/n/DGL/y75Yxb/XfPHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+O+WP2bx3z1/zOL/sfwxi//H88cs/p/IH7P475E/ZvH/ZP6YxX/P/DGL/6fyxyz+n84fs/jvlT9m8d87f8ziv0/+mMX/M/ljFv/P5o9Z/D+XP2bx3zd/zOK/X/6Yxf/z+WMW//3zxyz+B+SPWfy/kD9m8T8wf8zif1D+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7fzB+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/b+WPWfy/nT9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/+/kj1n8T88fs/ifkT9m8T8zf8zi/938MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zi/738MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4X5I9Z/C/MH7P4/yR/zOJ/Uf6Yxf+n+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/8/yxyz+P88fs/j/In/M4v/L/DGL/1X5Yxb/q/PHLP6/yh+z+P86f8zif03+mMX/N/ljFv9r88cs/tflj1n8r88fs/j/Nn/M4n9D/pjF/8b8MYv/TfljFv/f5Y9Z/H+fP2bx/0P+mMX/5vwxi/8f88cs/rfkj1n8b80fs/jflj9m8b89f8zi/6f8MYv/HfljFv8788cs/n/OH7P435U/ZvH/S/6Yxf+v+WMW/7/lj1n8/54/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/lPyxyz+D+SPWfwfzB+z+E/NH5P4zzfIH7P4D+WPWfxH5Y9Z/GfJH7P4z5r/o5pl5NHiPzp/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4v+U/DGL/3z5Yxb/MfljFv/588cs/mPzxyz+C+SPWfwXzB+z+D81f8zi/7T8MYv/0/PHLP4L5Y9Z/J+RP2bxXzh/zOL/zPwxi/+z8scs/ovkj1n8n50/ZvF/Tv6YxX9c/pjF/7n5Yxb/5+WPWfyfnz9m8V80f8ziv1j+mMX/BfljFv/F88cs/kvkj1n8X5g/ZvF/Uf6Yxf/F+WMW/5fkj1n8l8wfs/i/NH/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/i/LH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/i/PH7P4r5I/ZvFfNX/M4v+K/DGL/yvzxyz+r8ofs/iPzx+z+E/IH7P4T8wfs/ivlj9m8V89f8ziv0b+mMV/Uv6YxX9y/pjFf838MYv/WvljFv9X549Z/F+TP2bxXzt/zOK/Tv6YxX/d/DGL/2vzxyz+6+WPWfxflz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/9fnj1n8N84fs/hvkj9m8X9D/pjF/435Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfw3zR+z+G+WP2bx3zx/zOL/9vwxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+L8jf8ziv03+mMX/nfljFv935Y9Z/LfNH7P4b5c/ZvHfPn/M4r9D/pjF/935Yxb/9+SPWfx3zB+z+L83f8ziv1P+mMX/ffljFv/3549Z/D+QP2bx3zl/zOK/S/6YxX/X/DGL/wfzxyz+H8ofs/h/OH/M4v//sU9PP4AYCBCHz3d73FNt27Zt27bd3dq2bdu2bdu228e+TN+aNOl8318wyS8zSP+opf9g/aOW/jvoH7X031H/qKX/TvpHLf131j9q6b+L/lFL/131j1r676Z/1NJ/d/2jlv576B+19N9T/6il/176Ry3999Y/aum/j/5RS/999Y9a+u+nf9TSf3/9o5b+B+gftfQ/UP+opf9B+kct/Q/WP2rpf4j+UUv/Q/WPWvofpn/U0v9w/aOW/kfoH7X0P1L/qKX/UfpHLf2P1j9q6X+M/lFL/2P1j1r6H6d/1NL/eP2jlv4n6B+19D9R/6il/0n6Ry39T9Y/aul/iv5RS/9T9Y9a+p+mf9TS/3T9o5b+Z+gftfQ/U/+opf9Z+kct/c/WP2rpf47+UUv/c/WPWvqfp3/U0v98/aOW/hfoH7X0v1D/qKX/RfpHLf0v1j9q6X+J/lFL/0v1j1r6X6Z/1NL/cv2jlv5X6B+19L9S/6il/1X6Ry39r9Y/aul/jf5RS/9r9Y9a+l+nf9TS/3r9o5b+N+gftfS/Uf+opf9N+kct/W/WP2rpf4v+UUv/W/WPWvrfpn/U0v92/aOW/nfoH7X0v1P/qKX/XfpHLf3v1j9q6X+P/lFL/3v1j1r636d/1NL/fv2jlv4P6B+19H9Q/6il/0P6Ry39H9Y/aun/iP5RS/9H9Y9a+j+mf9TS/3H9o5b+T+gftfR/Uv+opf9T+kct/Z/WP2rp/4z+UUv/Z/WPWvo/p3/U0v95/aOW/i/oH7X0f1H/qKX/S/pHLf1f1j9q6f+K/lFL/1f1j1r6v6Z/1NL/df2jlv5v6B+19H9T/6il/1v6Ry3939Y/aun/jv5RS/939Y9a+r+nf9TS/339o5b+H+gftfT/UP+opf9H+kct/T/WP2rp/4n+UUv/T/WPWvp/pn/U0v9z/aOW/l/oH7X0/1L/qKX/V/pHLf2/1j9q6f+N/lFL/2/1j1r6f6d/1NL/e/2jkv4Df6N/1NL/t/pHLf1/p3/U0v/3+kct/f+gf9TS/4/6Ry39/6R/1NL/z/pHLf3/on/U0n+A/lFL/7/qH7X0/5v+UUv/v+sftfT/h/5RS/9/6h+19P+X/lFL/4H6Ry39/61/1NL/P/pHLf3/q3/U0v9/+kct/f+vf9TSfwj9o5b+Q+oftfQfSv+opf/Q+kct/YfRP2rpP6z+UUv/4fSPWvoPr3/U0n8E/aOW/iPqH7X0H0n/qKX/yPpHLf1H0T9q6T+q/lFL/9H0j1r6j65/1NJ/DP2jlv5j6h+19B9L/6il/9j6Ry39x9E/auk/rv5RS//x9I9a+o+vf9TSfwL9o5b+E+oftfSfSP+opf/E+kct/SfRP2rpP6n+UUv/yfSPWvpPrn/U0n8K/aOW/lPqH7X0n0r/qKX/1PpHLf2n0T9q6T+t/lFL/+n0j1r6T69/9GP/Ab/0lJ/HT/SfQf+o5f8z6h+19J9J/6il/8z6Ry39Z9E/auk/q/5RS//Z9I9a+s+uf9TSfw79o5b+c+oftfSfS/+opf/c+kct/efRP2rpP6/+UUv/+fSPWvrPr3/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/8X0j1r6L65/1NJ/Cf2jlv5L6h+19F9K/6il/9L6Ry39l9E/aum/rP5RS//l9I9a+i+vf9TSfwX9o5b+K+oftfRfSf+opf/K+kct/VfRP2rpv6r+UUv/1fSPWvqvrn/U0n8N/aOW/mvqH7X0X0v/qKX/2vpHLf3X0T9q6b+u/lFL//X0j1r6r69/1NJ/A/2jlv4b6h+19N9I/6il/8b6Ry39N9E/aum/qf5RS//N9I9a+m+uf9TSfwv9o5b+W+oftfTfSv+opf/W+kct/bfRP2rpv63+UUv/7fSPWvpvr3/U0n+Q/lFL/8H6R7+6/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwA/s221snWXhx/G72zrG/vyTERdchiabXCgkwmz3kPGCsMnYVgfdeB4DHN3ajY12m12HXQH38GISITxIMskSJcqWoYSZ0EgMBCuIaNBFTTT4AIhCFI0TIeiWuFhz2tPSHrvGc9XrWpTP50XPue+z372tyXf3vcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP57NTQuPDK+Ztip8UMPPni4pe91ztGVNx/4bc+FA6/lj5eNcMlxQw96e3t75zw3e0f58JSiKEo/287y8aTKcen6O+u/0Nl/FBb0vLTk+JSfNx45sOb0R+q6j95f23e2trhp3YbWlo+NK4pwcW3RWTqoqymKsLi2uK90UF86WFJbPFI6mN13cGrx7dLB+Ws3tzaXTiyN/p7B/4qGxp3F+GHFFsP+NBja/876b9058DrKJQeuNqEo939F1/ffqvhswAn6H7h+WFjZf9W/QeCEquv/hQUDr6Nc8l/u/5OfWvXKSJ+duP+B64eP6x/SGeH5f1ijlc/9Fc//M0a45OD+qpqu46X+L73t2ZnlUxP+nef/d68fLq7sf9yw5//Sc/yigef/U4oiXDLGbwe8pzQ07joy2v1/9P4nTK/Y1Azt/4z2zftL/T++5HtPlE/VVtn/olHu/+OWVvxageo0NH65t+L+X0X/xUdGuORg/28/8euHS/0/9vsHzhzyWTX9X1LZ/6yOti2ztm7vOm9DW9P6lvUtm+pmz58zr75u3gVzZ/U9EvR/HeN3Bd4bxnb/LyZXbGqKomVwf033gadL/c998ME55VOTqux/8aj3/xnu/zCiD40rJk4sOps6Otrr+r8OHNb3f+3/YSP0X8Xf/886p/zDasuvNUUxbXB/15l3ryj1/86hZ3eXT02ssv8lo/a/YPDnBSKM8f7fXLEZ1v/BQy/1Pf8vu/fgGeVT1f79f+mo/b/q/g9j0dBY8T/8/IeV+t9VXBbZaWjw3/8gnRz9P/bODT1x6/AJ/UM6Ofr/3eeOnhu3Dsv0D+nk6H/Cxgeej1uHS/UP6eTof/nU+Svi1uEy/UM6Ofpf++q5f45bh0b9Qzo5+j/nS7s749Zhuf4hnRz9P9Q+Z1vcOqzQP6STo/+fnvbQa3HrcLn+IZ0c/R87ds+Ncetwhf4hnRz9d+85+wdx63Cl/iGdHP1fvm5hiFuHq/QP6eTof/q0Pz4etw5X6x/SydH/vD/9/bS4dbhG/5BOjv7v+PyKfXHrcK3+IZ0c/Y+//pUX49Zhpf4hnRz9Lz1728K4dbhO/5BOjv6bf9LcG7cOq/QP6eTof9bXf7Qhbh2u1z+kk6P/w8sf3RO3DjfoH9LJ0f+eumJK3DrcqH9IJ0f/X/vu6Yfi1uGT+od0cvT/m6eenB+3Dqv1D+nk6P+5D9z+jbh1uEn/kE6O/u9d8+JZcevQpH9IJ0f/D+99/otx67BG/5BOjv7feKPt/+LWYa3+IZ0c/U+edOrrcevQrH9IJ0f/C2/9SnvcOrToH9LJ0X/b7u4fxq3DOv1DOjn6//Dxaavi1mG9/iGdHP2vnLv3/XHrcLP+IZ0c/b9v2YW74tZhg/4hnRz9X9Tz0Yvi1mGj/iGdHP13PPPZr8atwy36h3Ry9L935muL49ahVf+QTo7+X1699Mdx69Cmf0gnR/9vPXrdprh12KR/SCdH/0/+7O1jceuwWf+QTo7+//+CRX+NW4ct+od0cvS/eMmba+PW4VP6h3Ry9L+x+x8vx61Du/4hnRz9zzx89bK4ddiqf0gnR//fOa9uf9w6dOgf0snR/51X7quPW4dt+od0cvS//+Bdd8etw636h3Ry9P/mL2ZMj1uHT+sf0snR//1TDl0btw6d+od0cvT/y021z8Stw3b9Qzo5+v/bvqk74tahS/+QTo7+n3695w9x63Cb/iGdHP2vnvCriXHrcLv+IZ0c/U/t2nJf3DrcoX9IJ0f/8+9pOj9uHT6jf0gnR/9b//LCN+PWYYf+IZ2t27tuaWptbWn3xhtvvBl8c7L/ZAJSezf6k/0rAQAAAAAAAAAAAAAATiTHPyc62b9HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/skOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UQvRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVwAAAP//kezfjw==") r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782ed44b9040200080211000000040000a118000200010000000000000008000f0100810401a80016ea1f000840032e5f54c9", 0x3d}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x4048587b, &(0x7f00000000c0)={0x29, 0xffffdffffffffc01, 0x1, 0x3, 0x18, 0x11}) 2m51.360466738s ago: executing program 3 (id=251): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@barrier}, {@nogrpid}, {@quota}, {@nobh}]}, 0xff, 0x511, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) waitid(0x0, 0x0, 0x0, 0x2100000a, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x11d, 0x1, 0x0, 0x0) 2m49.905780561s ago: executing program 3 (id=263): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 2m48.940876052s ago: executing program 3 (id=268): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaef2, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m48.5823605s ago: executing program 32 (id=268): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaef2, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.404866636s ago: executing program 4 (id=1106): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000001d8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x402c582a, &(0x7f0000000040)={0x1, 0x1, 0xe, 0x6, 0x1000, 0x5}) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000080)={0x6, 0xfffffffffffffff8, 0xffffffffffffffff, 0x5, 0x6, 0x0, 0xe03243148e32fd49}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000021c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 12.180932701s ago: executing program 4 (id=1108): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004000000080000000500000000000000", @ANYBLOB, @ANYRES32=0x0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000bd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xfcbb, &(0x7f00000002c0)=ANY=[], 0x0) 11.857009628s ago: executing program 4 (id=1113): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0xb6a7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4001}, 0x1c) listen(r0, 0x0) listen(r2, 0x2) 11.687629052s ago: executing program 4 (id=1116): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) recvfrom(r2, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 10.780170492s ago: executing program 4 (id=1127): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r1, 0x6f6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x8) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 10.589182516s ago: executing program 4 (id=1130): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_usb_connect$rtl8150(0x1, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_disconnect(r2) 5.112739267s ago: executing program 5 (id=1145): socket$igmp(0x2, 0x3, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x40440c0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 4.917317301s ago: executing program 2 (id=1148): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x3200842, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 4.858762803s ago: executing program 5 (id=1149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x332a}], 0x1}}], 0x400000000000292, 0x0) 4.856276183s ago: executing program 0 (id=1150): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x8100011, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x4, 0x4, 0x360, 0xffffffff, 0x40000, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0x0, 0xffffff00], 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3, 0x3}, {0xffffffffffffffff, 0x3, 0x1}, 0x9, 0xfffeffff}}}, {{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x23}, [0x0, 0x0, 0x0, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x20, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x0, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) socket$inet6(0xa, 0x802, 0x0) 4.55300393s ago: executing program 1 (id=1151): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x20}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 4.55263897s ago: executing program 2 (id=1152): socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x13, @local, 0x10}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r3, 0x9dff7ffc}}, 0x4d) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 3.63343857s ago: executing program 5 (id=1153): socket$nl_netfilter(0x10, 0x3, 0xc) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@restrict={0x8, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x61, 0x5f, 0x61, 0x13c50bb225fe3c51, 0x61]}}, 0x0, 0x2b, 0x0, 0x1, 0x9, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58b58d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r2}, 0x38) 3.587313361s ago: executing program 0 (id=1154): r0 = socket$nl_generic(0x10, 0x3, 0x10) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0xfffffffe, 0x1500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000600), &(0x7f0000000480)=@tcp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f00000003c0)="01b4", &(0x7f0000000300)=@tcp=r2, 0x1}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f0000000140), &(0x7f0000000340)=@udp6=r4, 0x1}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xa0, 0x40, 0x200, 0x70bd28, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x8c, 0x156, 0x0, 0x1, [@typed={0x88, 0xc7, 0x0, 0x0, @binary="ad06ebd73e0495a30da8f5730728140718db908165ed22c69f8088b359bdda6a8c036d898e0ba8ac86dda42986ff9d81a4f0fe63266f2df768e56cd8d9e3f74d21b722a35d2943db61e3e4a2ff95475736c473a3b905809012d831c537f11a31a451b7c97f8b42fa7caf58c5adaad1fb89473e491b0b23b3f94029253e4e326881f11744"}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44094}, 0xc000) close(r2) 3.478631523s ago: executing program 0 (id=1155): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 3.366296076s ago: executing program 2 (id=1156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e26, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1007}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @empty, 0x3}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000280)={'wlan0\x00', @multicast}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a0102000000000000"], 0xc8}}, 0x0) 3.319680307s ago: executing program 5 (id=1157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x3, r0, 0x4000) 3.16365755s ago: executing program 1 (id=1158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2.103074154s ago: executing program 5 (id=1159): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.080528084s ago: executing program 2 (id=1160): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 1.889203679s ago: executing program 1 (id=1161): pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0) 1.80825873s ago: executing program 1 (id=1162): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1.248703423s ago: executing program 1 (id=1163): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160020200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(r1, 0xffffffffffffffff, 0x0, 0x9c) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b22, &(0x7f0000000040)) 894.793471ms ago: executing program 5 (id=1164): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 792.885983ms ago: executing program 2 (id=1165): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg$can_raw(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) 727.088904ms ago: executing program 1 (id=1166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 476.41939ms ago: executing program 2 (id=1167): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r2, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}], 0x3, 0x10122, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00'}) 363.102673ms ago: executing program 0 (id=1168): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 182.154946ms ago: executing program 0 (id=1169): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x238, &(0x7f0000000100)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r0, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4000) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 0s ago: executing program 0 (id=1170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x44, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) kernel console output (not intermixed with test programs): 0 [ 77.896580][ T4383] BTRFS info (device loop2): turning on flush-on-commit [ 77.903722][ T4383] BTRFS info (device loop2): enabling auto defrag [ 77.957789][ T4383] BTRFS info (device loop2): max_inline at 4096 [ 77.977015][ T4383] BTRFS info (device loop2): using free space tree [ 77.994907][ T4383] BTRFS info (device loop2): has skinny extents [ 78.223603][ T4415] loop1: detected capacity change from 0 to 1024 [ 78.292098][ T4415] EXT4-fs (loop1): Ignoring removed bh option [ 78.445377][ T4415] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 78.504738][ T4383] BTRFS info (device loop2): enabling ssd optimizations [ 78.603758][ T26] audit: type=1800 audit(1782796786.506:3): pid=4415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.45" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 78.757905][ T4438] sch_fq: defrate 0 ignored. [ 79.045529][ T4383] fs-verity: sha512 using implementation "sha512-avx2" [ 79.056723][ T1336] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.092646][ T4383] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4) [ 79.306686][ T1336] usb 1-1: Using ep0 maxpacket: 8 [ 79.351814][ T4408] loop3: detected capacity change from 0 to 40427 [ 79.403814][ T4408] F2FS-fs (loop3): invalid crc value [ 79.426715][ T1336] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 79.476350][ T1336] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 79.513868][ T4408] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.523458][ T1336] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.552025][ T1336] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.616597][ T1336] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.626035][ T1336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.651443][ T4408] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 79.713597][ T4408] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 79.957863][ T1336] usb 1-1: GET_CAPABILITIES returned 0 [ 79.963475][ T1336] usbtmc 1-1:16.0: can't read capabilities [ 80.089474][ T4408] attempt to access beyond end of device [ 80.089474][ T4408] loop3: rw=2049, want=45104, limit=40427 [ 80.196621][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.206844][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.216168][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.225632][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.234943][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.244236][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.253538][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.262833][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.272136][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.281433][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.290811][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.300119][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.309442][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.318748][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.328052][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.337352][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.365647][ T13] usb 1-1: USB disconnect, device number 2 [ 80.913613][ T4470] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.174809][ T26] audit: type=1800 audit(1782796789.076:4): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.59" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 82.178677][ T4489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.63'. [ 82.223641][ T4489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 82.348132][ T4489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.629247][ T4489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.908649][ T4511] netlink: 180 bytes leftover after parsing attributes in process `syz.0.72'. [ 83.028658][ T4515] capability: warning: `syz.0.76' uses deprecated v2 capabilities in a way that may be insecure [ 83.436485][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 83.456481][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 83.476480][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 83.496482][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 83.516481][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 83.546476][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 83.576484][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 83.596480][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 83.616486][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 83.626478][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 84.973174][ T4528] team0: Port device bridge1 added [ 85.003404][ T4529] loop4: detected capacity change from 0 to 1024 [ 85.020608][ T4528] bridge0: port 3(team0) entered blocking state [ 85.027325][ T4528] bridge0: port 3(team0) entered disabled state [ 85.035903][ T4528] device team0 entered promiscuous mode [ 85.041907][ T4528] device team_slave_0 entered promiscuous mode [ 85.048950][ T4528] device team_slave_1 entered promiscuous mode [ 85.055211][ T4528] device bridge1 entered promiscuous mode [ 85.062315][ T4528] bridge0: port 3(team0) entered blocking state [ 85.068662][ T4528] bridge0: port 3(team0) entered forwarding state [ 85.170061][ T4529] EXT4-fs (loop4): Ignoring removed oldalloc option [ 85.188372][ T4529] EXT4-fs (loop4): Ignoring removed oldalloc option [ 85.225948][ T4529] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.367943][ T4529] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,barrier=0x0000000000000007,min_batch_time=0x0000000000000003,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 85.442154][ T4529] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.801397][ T1108] cfg80211: failed to load regulatory.db [ 87.562051][ T4581] netlink: 'syz.4.97': attribute type 1 has an invalid length. [ 87.599403][ T4581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 87.785119][ T4581] bond0: (slave bond_slave_0): Releasing backup interface [ 88.173848][ T4575] loop2: detected capacity change from 0 to 40427 [ 88.232306][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 88.264171][ T4575] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 88.284901][ T4575] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 88.330102][ T4575] F2FS-fs (loop2): invalid crc value [ 88.354064][ T4606] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.390136][ T4575] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 88.495240][ T4611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 88.602730][ T4575] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 88.615274][ T4575] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.672058][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.684154][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.708716][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.720758][ T26] audit: type=1800 audit(1782796796.626:5): pid=4575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.94" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 88.760094][ T4575] attempt to access beyond end of device [ 88.760094][ T4575] loop2: rw=10241, want=53256, limit=40427 [ 88.767304][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.790048][ T4575] attempt to access beyond end of device [ 88.790048][ T4575] loop2: rw=34817, want=77952, limit=40427 [ 88.804384][ T4575] attempt to access beyond end of device [ 88.804384][ T4575] loop2: rw=0, want=77832, limit=40427 [ 88.839911][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 88.851577][ T4194] attempt to access beyond end of device [ 88.851577][ T4194] loop2: rw=2049, want=45104, limit=40427 [ 89.176937][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.206647][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.233722][ T1108] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 89.278923][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.325764][ T1108] usb 1-1: config 0 descriptor?? [ 89.615316][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 89.632012][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.641910][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.652581][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.664001][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.821173][ T1108] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 89.829268][ T1108] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 89.838607][ T1108] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 89.846054][ T1108] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 89.853656][ T1108] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 89.856725][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.861647][ T1108] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 89.875501][ T1108] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 89.892021][ T1108] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 90.046801][ T1108] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 90.064442][ T4647] netlink: 156 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.087988][ T4647] netlink: 156 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.103943][ T4647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.706895][ T4612] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 90.857194][ T1108] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 91.036991][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.055210][ T13] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 91.102362][ T1108] usb 1-1: USB disconnect, device number 3 [ 91.234891][ T4660] fido_id[4660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 91.337563][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.351704][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.370365][ T13] usb 2-1: Product: syz [ 91.374950][ T13] usb 2-1: Manufacturer: syz [ 91.388799][ T13] usb 2-1: SerialNumber: syz [ 91.654975][ T4633] udc-core: couldn't find an available UDC or it's busy [ 91.674901][ T4633] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 91.729552][ T13] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 91.749592][ T13] usb 2-1: USB disconnect, device number 2 [ 92.147179][ T4683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.296703][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.576761][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 92.696683][ T13] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 92.720704][ T13] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 92.741675][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.761719][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.792505][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 92.813878][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.836243][ T13] usb 2-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.859851][ T13] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.877283][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.923880][ T4674] syz.3.132 (4674): drop_caches: 3 [ 92.947103][ T13] usb 2-1: can't set config #16, error -71 [ 92.963975][ T13] usb 2-1: USB disconnect, device number 3 [ 93.043778][ T4696] netlink: 'syz.3.140': attribute type 2 has an invalid length. [ 93.056947][ T4276] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.336559][ T4276] usb 5-1: Using ep0 maxpacket: 32 [ 93.457057][ T4276] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 93.465206][ T4276] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.505905][ T4276] usb 5-1: config 0 has no interface number 0 [ 93.525866][ T4276] usb 5-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.756801][ T4276] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 93.779579][ T4276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.813172][ T4276] usb 5-1: Product: syz [ 93.837071][ T4276] usb 5-1: Manufacturer: syz [ 93.846793][ T4276] usb 5-1: SerialNumber: syz [ 93.877303][ T4276] usb 5-1: config 0 descriptor?? [ 93.917792][ T4276] smsc95xx v2.0.0 [ 93.921489][ T4276] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 93.956625][ T4276] smsc95xx: probe of 5-1:0.67 failed with error -22 [ 94.794818][ T4734] netlink: 'syz.2.147': attribute type 1 has an invalid length. [ 94.971387][ T4734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.130062][ T4742] bond1: (slave vlan2): making interface the new active one [ 95.244251][ T4742] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 95.414032][ T4744] bridge0: port 3(syz_tun) entered disabled state [ 95.525557][ T4744] device syz_tun left promiscuous mode [ 95.701086][ T4744] bridge0: port 3(syz_tun) entered disabled state [ 95.969424][ T4742] syz.2.147 (4742) used greatest stack depth: 20048 bytes left [ 96.521745][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 97.119215][ T4276] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 97.209460][ T4276] Bluetooth: hci0: Injecting HCI hardware error event [ 97.218571][ T4204] Bluetooth: hci0: hardware error 0x00 [ 97.349447][ T21] usb 5-1: USB disconnect, device number 3 [ 97.687894][ T4276] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 97.902995][ T4783] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.126871][ T4276] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 98.139455][ T4276] usb 2-1: config 0 has no interface number 0 [ 98.150327][ T4276] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 98.329533][ T4276] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 98.345458][ T4276] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 98.363724][ T4276] usb 2-1: Product: syz [ 98.376059][ T4276] usb 2-1: SerialNumber: syz [ 98.393547][ T4276] usb 2-1: config 0 descriptor?? [ 98.459311][ T4276] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 98.723877][ T21] usb 2-1: USB disconnect, device number 4 [ 99.214064][ T4800] loop4: detected capacity change from 0 to 1764 [ 100.150421][ T4800] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 100.609596][ T4813] loop4: detected capacity change from 0 to 128 [ 100.697783][ T4813] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.731024][ T4813] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.851105][ T4813] syz.4.168 (pid 4813) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 101.260687][ T4813] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 102.514798][ T4850] netlink: 'syz.3.182': attribute type 3 has an invalid length. [ 102.535844][ T4850] netlink: 'syz.3.182': attribute type 3 has an invalid length. [ 102.625027][ T4858] netlink: 104 bytes leftover after parsing attributes in process `syz.0.184'. [ 102.777312][ T4865] loop4: detected capacity change from 0 to 256 [ 103.071730][ T4874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.191'. [ 103.851953][ T4891] loop1: detected capacity change from 0 to 512 [ 103.933107][ T4892] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.040217][ T4891] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.112891][ T4891] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.183703][ T4891] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.272421][ T4891] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 104.448443][ T4891] EXT4-fs (loop1): 1 truncate cleaned up [ 104.454169][ T4891] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 105.088519][ T4897] loop2: detected capacity change from 0 to 32768 [ 105.146723][ T4897] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.199 (4897) [ 105.304186][ T4897] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 105.356550][ T4897] BTRFS info (device loop2): setting nodatasum [ 105.415151][ T4897] BTRFS info (device loop2): force zlib compression, level 3 [ 105.433000][ T4897] BTRFS info (device loop2): turning on flush-on-commit [ 105.446739][ T4897] BTRFS info (device loop2): max_inline at 4096 [ 105.476766][ T4897] BTRFS info (device loop2): using free space tree [ 105.483576][ T4897] BTRFS info (device loop2): has skinny extents [ 106.727769][ T4897] BTRFS info (device loop2): enabling ssd optimizations [ 107.156450][ C0] sched: RT throttling activated [ 107.368315][ T4897] ======================================================= [ 107.368315][ T4897] WARNING: The mand mount option has been deprecated and [ 107.368315][ T4897] and is ignored by this kernel. Remove the mand [ 107.368315][ T4897] option from the mount to silence this warning. [ 107.368315][ T4897] ======================================================= [ 107.825746][ T13] libceph: connect (1)[c::]:6789 error -101 [ 107.848311][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 107.959883][ T4977] ceph: No mds server is up or the cluster is laggy [ 108.005362][ T4984] loop4: detected capacity change from 0 to 1024 [ 108.056795][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.143289][ T4984] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 108.283241][ T4984] EXT4-fs (loop4): orphan cleanup on readonly fs [ 108.332800][ T4984] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 108.380891][ T4984] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 108.387083][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 108.446156][ T4984] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 108.475727][ T3479] libceph: connect (1)[c::]:6789 error -101 [ 108.482283][ T3479] libceph: mon0 (1)[c::]:6789 connect error [ 108.498693][ T4984] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.220: iget: bad extended attribute block 268369920 [ 108.536630][ T7] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 108.550503][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.560865][ T7] usb 4-1: config 0 has no interface number 0 [ 108.567056][ T7] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 108.578120][ T7] usb 4-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.622521][ T4984] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.220: couldn't read orphan inode 15 (err -117) [ 108.635007][ T4984] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.776824][ T7] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 108.796281][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.829418][ T7] usb 4-1: Product: syz [ 108.833644][ T7] usb 4-1: Manufacturer: syz [ 108.889859][ T7] usb 4-1: SerialNumber: syz [ 108.951578][ T7] usb 4-1: config 0 descriptor?? [ 109.020898][ T4972] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 109.387581][ T7] usb-storage 4-1:0.20: USB Mass Storage device detected [ 109.498618][ T7] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 109.558449][ T5007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.225'. [ 109.654901][ T7] usb 4-1: USB disconnect, device number 2 [ 109.998323][ T4984] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.220: iget: bad extended attribute block 268369920 [ 110.047711][ T4984] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.220: iget: bad extended attribute block 268369920 [ 110.507287][ T5026] loop0: detected capacity change from 0 to 512 [ 110.640422][ T5026] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.233: invalid indirect mapped block 4294967295 (level 1) [ 110.677283][ T5026] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.233: invalid indirect mapped block 4294967295 (level 1) [ 110.832977][ T5026] EXT4-fs (loop0): 2 truncates cleaned up [ 111.156079][ T5026] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 111.190969][ T5032] loop3: detected capacity change from 0 to 2048 [ 111.723683][ T5032] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.107095][ T4454] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.498560][ T5047] netlink: 52 bytes leftover after parsing attributes in process `syz.3.238'. [ 112.723698][ T4454] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.796064][ T4454] usb 1-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 112.805815][ T4454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.904631][ T4454] usb 1-1: config 0 descriptor?? [ 112.922777][ T5047] bridge0: port 3(team0) entered disabled state [ 112.929604][ T5047] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.936903][ T5047] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.995732][ T5051] netlink: 76 bytes leftover after parsing attributes in process `syz.3.238'. [ 113.009320][ T4454] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 113.116135][ T5051] bridge0: port 3(team0) entered blocking state [ 113.122596][ T5051] bridge0: port 3(team0) entered forwarding state [ 113.129213][ T5051] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.136316][ T5051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.143683][ T5051] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.150777][ T5051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.285021][ T4456] usb 1-1: USB disconnect, device number 4 [ 113.324814][ T5051] netlink: 52 bytes leftover after parsing attributes in process `syz.3.238'. [ 113.355005][ T5051] bridge0: port 3(team0) entered disabled state [ 113.361454][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.368624][ T5051] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.590245][ T5075] loop3: detected capacity change from 0 to 32768 [ 114.734992][ T5075] XFS (loop3): Mounting V5 Filesystem [ 114.953656][ T5075] XFS (loop3): Ending clean mount [ 115.073769][ T4197] XFS (loop3): Unmounting Filesystem [ 115.519107][ T5092] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 115.767296][ T5095] bond2: (slave geneve2): Error -99 calling set_mac_address [ 115.915288][ T5102] loop1: detected capacity change from 0 to 128 [ 115.940404][ T5104] loop3: detected capacity change from 0 to 512 [ 115.993948][ T5102] FAT-fs (loop1): Directory bread(block 524322) failed [ 116.006719][ T5104] EXT4-fs (loop3): Ignoring removed nobh option [ 116.031925][ T5102] FAT-fs (loop1): Directory bread(block 524323) failed [ 116.060373][ T5102] FAT-fs (loop1): Directory bread(block 524324) failed [ 116.087260][ T5102] FAT-fs (loop1): Directory bread(block 524325) failed [ 116.109514][ T5102] FAT-fs (loop1): Directory bread(block 524326) failed [ 116.109613][ T5104] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 116.159637][ T5102] FAT-fs (loop1): Directory bread(block 524327) failed [ 116.182472][ T5104] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.205990][ T5102] FAT-fs (loop1): Directory bread(block 524328) failed [ 116.229725][ T5102] FAT-fs (loop1): Directory bread(block 524329) failed [ 116.268398][ T5102] FAT-fs (loop1): Directory bread(block 524322) failed [ 116.275828][ T5102] FAT-fs (loop1): Directory bread(block 524323) failed [ 116.408724][ T5117] loop2: detected capacity change from 0 to 128 [ 116.487056][ T5117] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.522494][ T4197] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /70/bus: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 116.568919][ T5117] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.716986][ T4197] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 116.766239][ T5121] EXT4-fs (loop2): shut down requested (0) [ 116.791616][ T4197] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 117.572650][ T4484] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.752031][ T4484] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.878897][ T4484] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.069167][ T4484] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.208430][ T5137] loop2: detected capacity change from 0 to 40427 [ 118.254285][ T5137] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 118.262715][ T5137] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 118.275901][ T5137] F2FS-fs (loop2): invalid crc value [ 118.383026][ T5137] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.442156][ T5137] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 118.449872][ T5137] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.701566][ T5140] loop0: detected capacity change from 0 to 1024 [ 118.896165][ T4194] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 118.896242][ T4194] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 118.973960][ T5152] attempt to access beyond end of device [ 118.973960][ T5152] loop2: rw=10241, want=45104, limit=40427 [ 118.997938][ T5152] attempt to access beyond end of device [ 118.997938][ T5152] loop2: rw=2049, want=45112, limit=40427 [ 119.002690][ T4194] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 119.033398][ T4194] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 119.083660][ T4194] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 119.136715][ T4194] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 119.176752][ T4194] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 119.232579][ T5167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.277'. [ 119.257149][ T5140] EXT4-fs (loop0): Test dummy encryption mode enabled [ 119.334463][ T5140] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 119.445936][ T5140] EXT4-fs (loop0): Unrecognized mount option "smackfsdef=" or missing value [ 119.678833][ T5151] chnl_net:caif_netlink_parms(): no params data found [ 120.102952][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.135956][ T5151] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.146116][ T5151] device bridge_slave_0 entered promiscuous mode [ 120.164583][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.176712][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.237864][ T5151] device bridge_slave_1 entered promiscuous mode [ 120.467783][ T5151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.571797][ T5151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.667551][ T5201] "syz.1.280" (5201) uses obsolete ecb(arc4) skcipher [ 120.718004][ T4456] Bluetooth: hci4: command 0x0409 tx timeout [ 120.790150][ T5151] team0: Port device team_slave_0 added [ 120.825869][ T4484] device hsr_slave_0 left promiscuous mode [ 120.839467][ T4484] device hsr_slave_1 left promiscuous mode [ 120.858115][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.895677][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.919309][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.936144][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.954612][ T4484] device team0 left promiscuous mode [ 120.978681][ T4484] device team_slave_0 left promiscuous mode [ 120.985545][ T4484] device team_slave_1 left promiscuous mode [ 120.992135][ T4484] device bridge1 left promiscuous mode [ 121.000916][ T4484] bridge0: port 3(team0) entered disabled state [ 121.014839][ T4484] device bridge_slave_1 left promiscuous mode [ 121.024971][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.040978][ T4484] device bridge_slave_0 left promiscuous mode [ 121.050450][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.083763][ T4484] device veth1_macvtap left promiscuous mode [ 121.093452][ T4484] device veth0_macvtap left promiscuous mode [ 121.099829][ T4484] device veth1_vlan left promiscuous mode [ 121.106293][ T4484] device veth0_vlan left promiscuous mode [ 121.286825][ T4484] team0 (unregistering): Port device bridge1 removed [ 121.444607][ T4484] team0 (unregistering): Port device team_slave_1 removed [ 121.464059][ T4484] team0 (unregistering): Port device team_slave_0 removed [ 121.483512][ T4484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.523504][ T4484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.639218][ T4484] bond0 (unregistering): Released all slaves [ 121.719161][ T5151] team0: Port device team_slave_1 added [ 121.783011][ T5214] device team_slave_0 entered promiscuous mode [ 121.797263][ T4456] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 121.844322][ T5151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.919071][ T5151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.998977][ T5151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.037268][ T5214] device team_slave_0 left promiscuous mode [ 122.070110][ T4456] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 122.089107][ T5151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.097035][ T5151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.167337][ T5151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.328211][ T4231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 122.419993][ T5151] device hsr_slave_0 entered promiscuous mode [ 122.440496][ T5151] device hsr_slave_1 entered promiscuous mode [ 122.454875][ T5151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.479329][ T5151] Cannot create hsr debugfs directory [ 122.670119][ T5253] device wg1 entered promiscuous mode [ 122.758700][ T5259] device bridge0 entered promiscuous mode [ 122.806677][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 123.116934][ T4231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 123.136744][ T4231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 123.191368][ T5151] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.240261][ T5151] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.282757][ T5151] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.335558][ T5231] loop1: detected capacity change from 0 to 32768 [ 123.368273][ T5151] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.510268][ T5231] XFS (loop1): Mounting V5 Filesystem [ 123.612591][ T5231] XFS (loop1): Ending clean mount [ 123.685576][ T5151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.717632][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.747366][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.808237][ T5151] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.831945][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.871660][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.913531][ T4770] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.920718][ T4770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.960221][ T4189] XFS (loop1): Unmounting Filesystem [ 123.978565][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.004552][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.062121][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.076247][ T5296] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.086820][ T4454] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 124.105843][ T4770] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.113033][ T4770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.177148][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.330689][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.364386][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.389691][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.405369][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.417295][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.426280][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.466103][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.521594][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.552177][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.616411][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.645086][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.786596][ T5313] loop4: detected capacity change from 0 to 136 [ 124.896559][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 124.941959][ T5317] loop1: detected capacity change from 0 to 256 [ 125.017285][ T5317] exfat: Deprecated parameter 'namecase' [ 125.031065][ T5317] exfat: Deprecated parameter 'utf8' [ 125.124543][ T5317] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 125.227313][ T5151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.241400][ T26] audit: type=1800 audit(1782796833.146:6): pid=5317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.302" name="file1" dev="loop1" ino=1048591 res=0 errno=0 [ 125.254998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.362781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.758317][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.030335][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 126.150181][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.188812][ T13] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.240433][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.313099][ T13] usb 5-1: config 0 descriptor?? [ 126.325674][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.361164][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.413627][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.463019][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.509453][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.548180][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.597425][ T5151] device veth0_vlan entered promiscuous mode [ 126.612302][ T13] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 126.674856][ T5151] device veth1_vlan entered promiscuous mode [ 126.713288][ T5335] loop1: detected capacity change from 0 to 32768 [ 126.811519][ T5335] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.308 (5335) [ 126.870256][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.913294][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 126.956723][ T4454] Bluetooth: hci4: command 0x0419 tx timeout [ 126.963449][ T5335] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 126.978301][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.043733][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.046897][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.062188][ T4327] usb 5-1: USB disconnect, device number 4 [ 127.087562][ T5335] BTRFS info (device loop1): using free space tree [ 127.125130][ T5151] device veth0_macvtap entered promiscuous mode [ 127.136504][ T5335] BTRFS info (device loop1): has skinny extents [ 127.169109][ T5151] device veth1_macvtap entered promiscuous mode [ 127.250865][ T5151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.250890][ T5151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.250903][ T5151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.250916][ T5151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.274193][ T5151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.274376][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.275010][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.314321][ T5151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.314345][ T5151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.314358][ T5151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.314372][ T5151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.314392][ T5151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.314406][ T5151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.318714][ T5151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.330114][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.330937][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.348236][ T5151] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.348326][ T5151] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.348356][ T5151] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.348396][ T5151] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.806360][ T4758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.806466][ T4758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.836620][ T5335] BTRFS info (device loop1): enabling ssd optimizations [ 127.875214][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.972012][ T5421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.972032][ T5421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.972218][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.974522][ T26] audit: type=1800 audit(1782796835.876:7): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.308" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 128.769511][ T5335] BTRFS info (device loop1): balance: start -sconvert=raid0,soft [ 129.021407][ T5335] BTRFS info (device loop1): relocating block group 1048576 flags system [ 129.340781][ T5335] BTRFS info (device loop1): balance: ended with status: 0 [ 130.553501][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.613844][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.657244][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.670811][ T5465] libceph: connect (1)[c::]:6789 error -101 [ 130.678232][ T5465] libceph: mon0 (1)[c::]:6789 connect error [ 130.691639][ T5473] device bridge_slave_0 left promiscuous mode [ 130.700235][ T5478] ceph: No mds server is up or the cluster is laggy [ 130.715215][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.805481][ T5473] device bridge_slave_1 left promiscuous mode [ 130.812068][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.853575][ T5473] bond0: (slave bond_slave_0): Releasing backup interface [ 130.895237][ T5473] bond0: (slave bond_slave_1): Releasing backup interface [ 130.949748][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 130.964598][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 131.083142][ T5473] team0: Port device team_slave_0 removed [ 131.234116][ T5473] team0: Port device team_slave_1 removed [ 131.264250][ T5473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.286741][ T5473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.378432][ T5473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.444551][ T5473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.399127][ T5473] bond1: (slave vlan2): Releasing active interface [ 132.505675][ T5475] device bridge0 entered promiscuous mode [ 132.536233][ T4454] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 132.554899][ T5482] team0: Mode changed to "loadbalance" [ 132.754217][ T5510] netlink: 'syz.5.327': attribute type 1 has an invalid length. [ 132.762232][ T5510] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.327'. [ 132.884508][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.892597][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.687404][ T5465] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 134.051427][ T26] audit: type=1326 audit(1782796841.956:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.5.335" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6fd2e8be59 code=0x0 [ 134.065050][ T5539] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 134.656633][ T4454] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 134.796972][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 134.946565][ T4454] usb 5-1: Using ep0 maxpacket: 32 [ 135.086993][ T4454] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.124285][ T4454] usb 5-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.171379][ T4454] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.191613][ T4454] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 135.214706][ T4454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.266237][ T4454] usb 5-1: config 0 descriptor?? [ 135.297731][ T5569] tipc: Started in network mode [ 135.303131][ T5569] tipc: Node identity 1630b0f0a4bb, cluster identity 4711 [ 135.339549][ T5569] tipc: Enabled bearer , priority 0 [ 135.380941][ T5572] device vlan2 entered promiscuous mode [ 135.399977][ T5569] +: renamed from syzkaller0 [ 135.411542][ T5569] tipc: Disabling bearer [ 135.452287][ T5572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.345'. [ 135.669831][ T26] audit: type=1800 audit(1782796843.576:9): pid=5565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.343" name="file1" dev="fuse" ino=3 res=0 errno=0 [ 135.780406][ T4454] hid-generic 0003:0458:5014.0002: item fetching failed at offset 5/39 [ 135.821880][ T4454] hid-generic: probe of 0003:0458:5014.0002 failed with error -22 [ 135.962499][ T5587] netlink: 32 bytes leftover after parsing attributes in process `syz.2.348'. [ 135.977446][ T5587] netlink: 32 bytes leftover after parsing attributes in process `syz.2.348'. [ 136.560530][ T5550] udc-core: couldn't find an available UDC or it's busy [ 136.616563][ T5550] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.661717][ T4454] usb 5-1: USB disconnect, device number 5 [ 136.843504][ T5609] netlink: 'syz.2.352': attribute type 1 has an invalid length. [ 136.992466][ T5609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.085838][ T5610] bond2: (slave veth3): Enslaving as an active interface with a down link [ 138.617089][ T5644] loop5: detected capacity change from 0 to 512 [ 138.680399][ T5644] EXT4-fs (loop5): Ignoring removed bh option [ 138.800299][ T5644] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.359: corrupted in-inode xattr [ 138.927006][ T5644] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.359: couldn't read orphan inode 15 (err -117) [ 139.031469][ T5650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 139.040695][ T5644] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 139.478187][ T5657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.569830][ T5629] loop4: detected capacity change from 0 to 40427 [ 139.630506][ T5629] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 139.657949][ T5629] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 139.732309][ T5629] F2FS-fs (loop4): invalid crc value [ 139.814545][ T5629] F2FS-fs (loop4): Found nat_bits in checkpoint [ 140.053945][ T5629] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 140.072185][ T5681] tipc: Enabled bearer , priority 0 [ 140.086641][ T5629] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 140.116140][ T5681] device syzkaller0 entered promiscuous mode [ 140.117004][ T5683] tipc: Failed to remove unknown binding: 66,1,1/0:1144862873/1144862875 [ 140.166182][ T5681] tipc: Resetting bearer [ 140.200580][ T5683] tipc: Failed to remove unknown binding: 66,1,1/0:1144862873/1144862875 [ 140.237574][ T5679] tipc: Resetting bearer [ 140.251285][ T5683] tipc: Failed to remove unknown binding: 66,1,1/0:1144862873/1144862875 [ 140.289670][ T5679] tipc: Disabling bearer [ 140.333361][ T5629] attempt to access beyond end of device [ 140.333361][ T5629] loop4: rw=2049, want=45104, limit=40427 [ 141.663408][ T5629] ODEBUG: Out of memory. ODEBUG disabled [ 141.700830][ T5669] loop0: detected capacity change from 0 to 32768 [ 141.898270][ T5629] syz.4.355 (5629): drop_caches: 2 [ 142.022473][ T5421] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 142.069899][ T5669] JBD2: Ignoring recovery information on journal [ 142.077202][ T5421] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 142.291375][ T5669] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 143.203879][ T5711] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.211521][ T5711] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.265450][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 143.926634][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 144.008613][ T5711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.062265][ T5711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.296726][ T7] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.316136][ T7] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 144.331816][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.341750][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.377031][ T5744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 144.621045][ T5711] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.630253][ T5711] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.639986][ T5711] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.649286][ T5711] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.677118][ T7] usb 1-1: USB disconnect, device number 5 [ 144.902472][ T5711] syz.5.378 (5711) used greatest stack depth: 19472 bytes left [ 144.940126][ T5754] process 'syz.5.389' launched '/dev/fd/5' with NULL argv: empty string added [ 144.949910][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.957320][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.024698][ T5752] device bridge_slave_1 left promiscuous mode [ 145.061995][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.072594][ T5752] device bridge_slave_0 left promiscuous mode [ 145.079016][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.671533][ T5463] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 146.957026][ T5463] usb 5-1: Using ep0 maxpacket: 16 [ 147.147668][ T5463] usb 5-1: unable to get BOS descriptor or descriptor too short [ 147.279754][ T5463] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 147.719556][ T5463] usb 5-1: string descriptor 0 read error: -22 [ 147.736127][ T5463] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 147.765781][ T5463] usb 5-1: New USB device strings: Mfr=132, Product=132, SerialNumber=3 [ 147.854714][ T5463] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 147.944038][ T5463] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 148.210131][ T5154] udevd[5154]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.161775][ T4993] usb 5-1: USB disconnect, device number 6 [ 150.266944][ T5871] netlink: 24 bytes leftover after parsing attributes in process `syz.5.421'. [ 150.796654][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.498048][ T5882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.424'. [ 151.526712][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 152.028512][ T5914] IPVS: sh: FWM 3 0x00000003 - no destination available [ 153.268458][ T5932] sctp: [Deprecated]: syz.4.437 (pid 5932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.268458][ T5932] Use struct sctp_sack_info instead [ 153.287219][ T5936] netlink: 1320 bytes leftover after parsing attributes in process `syz.5.436'. [ 153.706570][ T4178] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.137497][ T4178] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.158994][ T4178] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.192803][ T5977] loop2: detected capacity change from 0 to 16 [ 154.215189][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'. [ 154.248372][ T5977] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 154.264870][ T5977] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 154.317785][ T5991] loop0: detected capacity change from 0 to 128 [ 154.334757][ T5977] erofs: (device loop2): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 154.358439][ T4178] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 154.371467][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.391133][ T4178] usb 2-1: Product: syz [ 154.395970][ T4178] usb 2-1: Manufacturer: syz [ 154.401324][ T4178] usb 2-1: SerialNumber: syz [ 154.409207][ T4178] usb 2-1: config 0 descriptor?? [ 154.414999][ T5991] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 154.692602][ T5941] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 154.692615][ T26] audit: type=1804 audit(1782796862.586:10): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.455" name="/newroot/82/file1/file1" dev="loop0" ino=94 res=1 errno=0 [ 154.751126][ T6000] binder: 5998:6000 ioctl c0306201 200000000080 returned -14 [ 154.785916][ T6000] binder: 5998:6000 ioctl c0306201 2000000003c0 returned -14 [ 154.801753][ T5996] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 154.862872][ T5996] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 155.028792][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 155.217463][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.464'. [ 155.333400][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 155.626163][ T26] audit: type=1800 audit(1782796863.526:11): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.456" name="bus" dev="ramfs" ino=39452 res=0 errno=0 [ 155.645754][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.415345][ T4456] usb 2-1: USB disconnect, device number 5 [ 156.891041][ T6039] loop2: detected capacity change from 0 to 32768 [ 157.085027][ T6039] XFS (loop2): Mounting V5 Filesystem [ 157.296383][ T6039] XFS (loop2): Ending clean mount [ 157.480508][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 157.684777][ T6118] binder: 6117:6118 ioctl c0306201 200000000080 returned -14 [ 157.742044][ T6118] binder: 6117:6118 ioctl c0306201 2000000003c0 returned -14 [ 157.908725][ T4194] XFS (loop2): Unmounting Filesystem [ 158.890566][ T26] audit: type=1804 audit(1782796866.796:12): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.486" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=39632 res=1 errno=0 [ 159.019342][ T26] audit: type=1804 audit(1782796866.796:13): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.486" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=39632 res=1 errno=0 [ 159.183760][ T6179] tipc: Failed to remove unknown binding: 66,0,0/0:4114125273/4114125274 [ 159.200496][ T6179] tipc: Failed to remove unknown binding: 66,0,0/0:4114125273/4114125274 [ 159.335386][ T6181] device bridge0 entered promiscuous mode [ 159.411051][ T6183] pit: kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 159.477975][ T6183] pit: kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 159.502499][ T6183] pit: kvm: requested 178514 ns i8254 timer period limited to 200000 ns [ 159.539112][ T6183] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 159.562497][ T6183] pit: kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 159.604690][ T6183] pit: kvm: requested 27657 ns i8254 timer period limited to 200000 ns [ 159.634786][ T6183] pit: kvm: requested 20114 ns i8254 timer period limited to 200000 ns [ 159.664778][ T6183] pit: kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 160.666818][ T4456] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 161.056813][ T4456] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.085181][ T4456] usb 3-1: config 0 has no interfaces? [ 161.288160][ T4456] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 161.305260][ T4456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.323910][ T4456] usb 3-1: Product: syz [ 161.337933][ T4456] usb 3-1: Manufacturer: syz [ 161.347313][ T4456] usb 3-1: SerialNumber: syz [ 161.375811][ T4456] usb 3-1: config 0 descriptor?? [ 161.697294][ T4456] usb 3-1: USB disconnect, device number 2 [ 162.827849][ T6259] loop2: detected capacity change from 0 to 8192 [ 162.965079][ T6242] loop1: detected capacity change from 0 to 131072 [ 163.049603][ T4935] loop2: p1 p2 p3 p4[DM] [ 163.056033][ T4935] loop2: p1 size 835329 extends beyond EOD, truncated [ 163.069100][ T6242] F2FS-fs (loop1): invalid crc value [ 163.126357][ T6242] F2FS-fs (loop1): Found nat_bits in checkpoint [ 163.164376][ T6242] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 163.196332][ T4935] loop2: p2 size 327680 extends beyond EOD, truncated [ 163.211922][ T6242] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 163.320004][ T4935] loop2: p3 start 1052673 is beyond EOD, truncated [ 163.338194][ T4935] loop2: p4 size 262144 extends beyond EOD, truncated [ 163.433044][ T6259] loop2: p1 p2 p3 p4[DM] [ 163.437705][ T6259] loop2: p1 size 835329 extends beyond EOD, truncated [ 163.446361][ T6259] loop2: p2 size 327680 extends beyond EOD, truncated [ 163.454112][ T6259] loop2: p3 start 1052673 is beyond EOD, truncated [ 163.460669][ T6259] loop2: p4 size 262144 extends beyond EOD, truncated [ 163.684825][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.537'. [ 163.767112][ T6279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.775168][ T6279] IPv6: NLM_F_CREATE should be set when creating new route [ 163.806236][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.537'. [ 163.954263][ T5153] udevd[5153]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 163.955983][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 163.980085][ T5154] udevd[5154]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 164.049281][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 164.062559][ T5153] udevd[5153]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 164.084389][ T5154] udevd[5154]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 164.163607][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 164.175382][ T5153] udevd[5153]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 164.193043][ T5154] udevd[5154]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 164.370143][ T6290] netlink: 64 bytes leftover after parsing attributes in process `syz.2.542'. [ 164.429779][ T6290] device syzkaller1 entered promiscuous mode [ 164.865045][ T6296] netlink: 180 bytes leftover after parsing attributes in process `syz.1.536'. [ 164.928360][ T6298] sctp: [Deprecated]: syz.5.546 (pid 6298) Use of int in max_burst socket option deprecated. [ 164.928360][ T6298] Use struct sctp_assoc_value instead [ 166.113229][ T6314] loop4: detected capacity change from 0 to 4096 [ 166.320430][ T6312] loop2: detected capacity change from 0 to 40427 [ 166.329429][ T6315] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.386646][ T6312] F2FS-fs (loop2): invalid crc value [ 166.456044][ T6312] F2FS-fs (loop2): Found nat_bits in checkpoint [ 166.673206][ T6312] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 166.861807][ T6321] device syzkaller0 entered promiscuous mode [ 167.253229][ T4194] attempt to access beyond end of device [ 167.253229][ T4194] loop2: rw=2049, want=45112, limit=40427 [ 168.539486][ T6367] loop4: detected capacity change from 0 to 1024 [ 169.106962][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 169.192289][ T6381] netlink: 168 bytes leftover after parsing attributes in process `syz.0.574'. [ 171.069395][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.112099][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.202629][ T26] audit: type=1800 audit(1782796879.106:14): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.575" name="bus" dev="ramfs" ino=42353 res=0 errno=0 [ 172.021967][ T6438] loop0: detected capacity change from 0 to 32768 [ 172.055457][ T6438] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.587 (6438) [ 172.120760][ T6438] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 172.144554][ T6438] BTRFS info (device loop0): using free space tree [ 172.175406][ T6438] BTRFS info (device loop0): has skinny extents [ 172.323758][ T6447] loop1: detected capacity change from 0 to 32768 [ 172.403292][ T6438] BTRFS info (device loop0): enabling ssd optimizations [ 172.410793][ T6447] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.590 (6447) [ 172.449865][ T6444] loop5: detected capacity change from 0 to 32768 [ 172.468111][ T6447] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 172.566987][ T6447] BTRFS info (device loop1): setting nodatasum [ 172.573253][ T6447] BTRFS info (device loop1): force zlib compression, level 3 [ 172.666849][ T6447] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 172.676155][ T6447] BTRFS info (device loop1): use lzo compression, level 0 [ 172.754959][ T26] audit: type=1800 audit(1782796880.656:15): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.589" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 172.801848][ T6447] BTRFS info (device loop1): turning on flush-on-commit [ 172.830698][ T6447] BTRFS info (device loop1): enabling auto defrag [ 172.881710][ T6447] BTRFS info (device loop1): max_inline at 4096 [ 172.896092][ T6447] BTRFS info (device loop1): force zlib compression, level 3 [ 172.919693][ T26] audit: type=1800 audit(1782796880.826:16): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.589" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 172.946569][ T6447] BTRFS info (device loop1): using free space tree [ 172.953152][ T6447] BTRFS info (device loop1): has skinny extents [ 173.136695][ T4456] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 173.202619][ T6483] ialloc: diAlloc returned -5! [ 173.279417][ T6502] tipc: Started in network mode [ 173.292840][ T6502] tipc: Node identity bbbbbb01, cluster identity 4711 [ 173.310158][ T6502] tipc: Enabled bearer , priority 10 [ 173.359990][ T6447] BTRFS info (device loop1): enabling ssd optimizations [ 173.566779][ T4456] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 173.597911][ T4456] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 173.643654][ T4456] usb 3-1: config 0 interface 0 has no altsetting 0 [ 173.689818][ T4456] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 173.719399][ T4456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.751753][ T4456] usb 3-1: config 0 descriptor?? [ 173.800605][ T6482] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 174.273507][ T6482] loop2: detected capacity change from 0 to 1024 [ 174.319859][ T6522] tipc: Node number set to 3149642497 [ 174.435211][ T6482] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.597: Invalid block bitmap block 0 in block_group 0 [ 174.472455][ T6482] Quota error (device loop2): write_blk: dquota write failed [ 174.483086][ T6482] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 174.493638][ T6482] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.597: Failed to acquire dquot type 0 [ 174.515519][ T6482] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.597: Freeing blocks not in datazone - block = 0, count = 4096 [ 174.515753][ T26] audit: type=1800 audit(1782796882.416:17): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.598" name="bus" dev="ramfs" ino=41305 res=0 errno=0 [ 174.550725][ T5463] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 174.567545][ T6482] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.597: Invalid inode bitmap blk 0 in block_group 0 [ 174.590757][ T4246] Quota error (device loop2): remove_tree: Getting block too big (0 >= 8) [ 174.602939][ T6482] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 174.611884][ T4246] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 174.632662][ T6482] EXT4-fs (loop2): 1 orphan inode deleted [ 174.639114][ T6482] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 174.760172][ T4456] usbhid 3-1:0.0: can't add hid device: -71 [ 174.766463][ T4456] usbhid: probe of 3-1:0.0 failed with error -71 [ 174.800453][ T4456] usb 3-1: USB disconnect, device number 3 [ 174.921394][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 175.010400][ T5463] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.021236][ T5463] usb 2-1: config 0 has no interface number 0 [ 175.043311][ T5463] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 175.075213][ T5463] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 175.099930][ T5463] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 175.124311][ T5463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.139057][ T5463] usb 2-1: config 0 descriptor?? [ 175.157239][ T6524] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 175.183245][ T5463] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 175.258316][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.314401][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.349263][ T6542] device bridge_slave_0 left promiscuous mode [ 175.355536][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.461317][ T6542] device bridge_slave_1 left promiscuous mode [ 175.473133][ T5463] usb 2-1: USB disconnect, device number 6 [ 175.524409][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.570009][ T6542] bond0: (slave bond_slave_0): Releasing backup interface [ 175.631585][ T6542] bond0: (slave bond_slave_1): Releasing backup interface [ 175.810926][ T6542] team0: Port device team_slave_0 removed [ 175.904683][ T6542] team0: Port device team_slave_1 removed [ 175.924885][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.951748][ T6542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.009272][ T6542] bond1: (slave ip6gretap1): Releasing active interface [ 176.154541][ T6545] team0: Port device xfrm0 added [ 176.174160][ T6546] tipc: Started in network mode [ 176.182882][ T6546] tipc: Node identity d2974efd7a7d, cluster identity 4711 [ 176.217118][ T6546] tipc: Enabled bearer , priority 0 [ 176.355255][ T6563] loop2: detected capacity change from 0 to 512 [ 176.391741][ T6563] EXT4-fs (loop2): Test dummy encryption mode enabled [ 176.440605][ T6563] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.612: inode has both inline data and extents flags [ 176.502431][ T6563] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.612: couldn't read orphan inode 15 (err -117) [ 176.551361][ T6563] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 176.822640][ T6563] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 176.901662][ T6496] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 176.919253][ T6582] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 176.919253][ T6582] The task syz.5.617 (6582) triggered the difference, watch for misbehavior. [ 176.955475][ T6584] overlayfs: failed to resolve './file0/file0': -2 [ 177.003856][ T6588] netlink: 'syz.0.618': attribute type 1 has an invalid length. [ 177.081964][ T6563] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 177.128568][ T6588] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.289130][ T6496] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 177.309287][ T6496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.321314][ T6596] bond3: (slave geneve2): making interface the new active one [ 177.332517][ T6496] usb 5-1: config 0 descriptor?? [ 177.356136][ T6596] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 177.378883][ T6496] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 177.388971][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 177.397887][ T6493] tipc: Node number set to 2833927933 [ 177.615538][ T26] audit: type=1804 audit(1782796885.516:18): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.625" name="bus" dev="ramfs" ino=42678 res=1 errno=0 [ 177.673309][ T26] audit: type=1804 audit(1782796885.546:19): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.625" name="bus" dev="ramfs" ino=42678 res=1 errno=0 [ 178.089806][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.628'. [ 178.677921][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'. [ 178.951432][ T6644] netlink: 'syz.0.638': attribute type 11 has an invalid length. [ 179.055803][ T6648] tipc: Resetting bearer [ 179.198270][ T6496] usb 5-1: USB disconnect, device number 7 [ 181.303250][ T6665] device syzkaller0 entered promiscuous mode [ 181.358162][ T6665] tipc: Started in network mode [ 181.373382][ T6665] tipc: Node identity 36a3b6d45b4e, cluster identity 4711 [ 181.399300][ T6665] tipc: Enabled bearer , priority 0 [ 181.431967][ T6667] MPTCP: addr_signal error, add_addr=1, echo=0 [ 181.436261][ T6667] MPTCP: addr_signal error, rm_addr=1 [ 181.447401][ T6667] MPTCP: addr_signal error, rm_addr=1 [ 181.469173][ T6664] tipc: Resetting bearer [ 181.611459][ T6664] tipc: Disabling bearer [ 182.013117][ T6679] loop4: detected capacity change from 0 to 2048 [ 182.156599][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 182.218593][ T6685] netlink: 'syz.4.651': attribute type 4 has an invalid length. [ 182.785539][ T6679] loop4: p2 p4 [ 182.785539][ T6679] p4: [ 182.793389][ T6679] loop4: p2 size 851968 extends beyond EOD, truncated [ 182.811853][ T6679] loop4: p4 size 722688 extends beyond EOD, truncated [ 182.899208][ T6689] loop1: detected capacity change from 0 to 512 [ 182.907730][ T6692] loop2: detected capacity change from 0 to 1024 [ 182.942076][ T6692] EXT4-fs (loop2): inline encryption not supported [ 183.013233][ T6689] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 183.032347][ T6692] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,journal_dev=0x0000000000000cd2,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 183.078072][ T6689] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.132888][ T6695] o2cb: This node has not been configured. [ 183.139264][ T6695] o2cb: Cluster check failed. Fix errors before retrying. [ 183.146391][ T6695] (syz.0.656,6695,1):user_dlm_register:675 ERROR: status = -22 [ 183.154064][ T6695] (syz.0.656,6695,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 183.225303][ T5154] udevd[5154]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 183.242861][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 183.329294][ T6704] tipc: Failed to remove unknown binding: 66,0,0/0:3343183289/3343183291 [ 183.373534][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 183.382100][ T6704] tipc: Failed to remove unknown binding: 66,0,0/0:3343183289/3343183290 [ 183.425394][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.659'. [ 183.453877][ T6704] tipc: Failed to remove unknown binding: 66,0,0/0:3343183289/3343183291 [ 183.471250][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.659'. [ 183.483061][ T6704] tipc: Failed to remove unknown binding: 66,0,0/0:3343183289/3343183290 [ 184.026680][ T6496] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.124534][ T6721] loop2: detected capacity change from 0 to 40427 [ 184.211837][ T6721] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 184.219760][ T6721] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 184.236890][ T6721] F2FS-fs (loop2): invalid crc value [ 184.266716][ T6496] usb 5-1: Using ep0 maxpacket: 32 [ 184.284648][ T6721] F2FS-fs (loop2): Found nat_bits in checkpoint [ 184.343109][ T6721] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 184.350268][ T6721] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.386804][ T6496] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 184.411067][ T6736] netlink: 'syz.1.668': attribute type 11 has an invalid length. [ 184.425743][ T6496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.490424][ T6496] usb 5-1: config 0 descriptor?? [ 184.548900][ T6496] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 184.556600][ T6520] Bluetooth: hci2: command 0x0406 tx timeout [ 184.760009][ T6496] gspca_vc032x: reg_r err -32 [ 184.764926][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.819470][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.824840][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.876619][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.892223][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.912509][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.944010][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.973450][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.993595][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.013862][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.031124][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.059995][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.083395][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.099943][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.126690][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.142266][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.162521][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.182746][ T6496] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.192871][ T6496] gspca_vc032x: Unknown sensor... [ 185.212047][ T6496] vc032x: probe of 5-1:0.0 failed with error -22 [ 186.269582][ T6773] netlink: 10 bytes leftover after parsing attributes in process `syz.5.676'. [ 186.473563][ T6781] loop5: detected capacity change from 0 to 1024 [ 186.536284][ T6781] EXT4-fs (loop5): inline encryption not supported [ 186.579634][ T6781] EXT4-fs (loop5): Ignoring removed oldalloc option [ 186.626694][ T6781] EXT4-fs (loop5): Ignoring removed oldalloc option [ 186.633376][ T6781] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.316231][ T6496] usb 5-1: USB disconnect, device number 8 [ 187.491742][ T6781] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000004,inlinecrypt,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 187.517325][ T6797] fuse: Bad value for 'fd' [ 187.577552][ T6806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.584831][ T6806] IPv6: NLM_F_CREATE should be set when creating new route [ 188.802905][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.686'. [ 188.836196][ T6781] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 18: block 400:freeing already freed block (bit 25); block bitmap corrupt. [ 189.011545][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'. [ 189.061056][ T6830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.865724][ T6860] netlink: 'syz.4.695': attribute type 4 has an invalid length. [ 190.377483][ T4991] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 190.394688][ T4991] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.450433][ T6878] loop4: detected capacity change from 0 to 4096 [ 190.468691][ T6878] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 190.539525][ T6878] EXT4-fs (loop4): Unrecognized mount option "smackfsdef=(:" or missing value [ 191.293191][ T6522] Bluetooth: hci2: command 0x0406 tx timeout [ 191.321120][ T6522] Bluetooth: hci3: command 0x0406 tx timeout [ 191.343312][ T6522] Bluetooth: hci1: command 0x0406 tx timeout [ 191.354213][ T26] audit: type=1326 audit(1782796899.256:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.1.704" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1cdd3e59 code=0x7fc00000 [ 191.445254][ T26] audit: type=1326 audit(1782796899.336:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.1.704" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9e1cdd3e59 code=0x7fc00000 [ 191.763732][ T6902] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 194.448653][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.472976][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.208903][ T6942] loop1: detected capacity change from 0 to 2048 [ 195.324865][ T6952] netlink: 'syz.1.724': attribute type 4 has an invalid length. [ 195.356826][ T6942] loop1: p2 p4 [ 195.356826][ T6942] p4: [ 195.416376][ T6942] loop1: p2 size 851968 extends beyond EOD, truncated [ 195.461182][ T6942] loop1: p4 size 722688 extends beyond EOD, truncated [ 195.840718][ T26] audit: type=1326 audit(1782796903.746:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337193be59 code=0x7ffc0000 [ 195.887063][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 195.923431][ T5154] udevd[5154]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 195.943376][ T26] audit: type=1326 audit(1782796903.776:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337193be59 code=0x7ffc0000 [ 195.999641][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 196.063085][ T5154] udevd[5154]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 196.162084][ T26] audit: type=1326 audit(1782796903.776:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337193be59 code=0x7ffc0000 [ 196.250965][ T26] audit: type=1326 audit(1782796903.776:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337193be59 code=0x7ffc0000 [ 196.321154][ T26] audit: type=1326 audit(1782796903.776:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f337193be59 code=0x7ffc0000 [ 196.401761][ T26] audit: type=1326 audit(1782796903.886:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337193be59 code=0x7ffc0000 [ 196.461072][ T26] audit: type=1326 audit(1782796903.886:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f337193bbc2 code=0x7ffc0000 [ 196.527526][ T26] audit: type=1326 audit(1782796903.886:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f337193bc57 code=0x7ffc0000 [ 196.601177][ T26] audit: type=1326 audit(1782796903.886:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f33718f8b51 code=0x7ffc0000 [ 196.660989][ T26] audit: type=1326 audit(1782796903.886:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f337193cc49 code=0x7ffc0000 [ 196.757513][ T26] audit: type=1326 audit(1782796903.886:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f33718f8bbb code=0x7ffc0000 [ 196.822393][ T6978] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3897524436 (7795048872 ns) > initial count (2759807172 ns). Using initial count to start timer. [ 196.832793][ T26] audit: type=1326 audit(1782796903.886:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337193be59 code=0x7ffc0000 [ 196.904441][ T6980] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3996681224 (15986724896 ns) > initial count (3709615788 ns). Using initial count to start timer. [ 196.911913][ T26] audit: type=1326 audit(1782796903.886:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337193be59 code=0x7ffc0000 [ 197.070016][ T26] audit: type=1326 audit(1782796903.956:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337193be59 code=0x7ffc0000 [ 197.165273][ T26] audit: type=1326 audit(1782796903.956:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.4.730" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f337193bbc2 code=0x7ffc0000 [ 198.389240][ T4178] Bluetooth: hci5: command 0x1003 tx timeout [ 198.395524][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 198.420042][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.741'. [ 198.718813][ T7000] HTB: quantum of class 800E0008 is small. Consider r2q change. [ 198.943399][ T7009] loop5: detected capacity change from 0 to 2048 [ 199.074935][ T7021] netlink: 'syz.5.743': attribute type 4 has an invalid length. [ 199.133410][ T7009] loop5: p2 p4 [ 199.133410][ T7009] p4: [ 199.187436][ T7009] loop5: p2 size 851968 extends beyond EOD, truncated [ 199.290838][ T7009] loop5: p4 size 722688 extends beyond EOD, truncated [ 199.622604][ T3561] loop5: p2 p4 [ 199.622604][ T3561] p4: [ 199.630074][ T3561] loop5: p2 size 851968 extends beyond EOD, truncated [ 199.653282][ T3561] loop5: p4 size 722688 extends beyond EOD, truncated [ 199.668667][ T7040] loop4: detected capacity change from 0 to 16 [ 199.686358][ T6989] loop2: detected capacity change from 0 to 32768 [ 199.744009][ T7040] erofs: (device loop4): mounted with root inode @ nid 36. [ 199.767131][ T6989] xfs: Unknown parameter 'smackfstransmute' [ 199.824665][ T7040] netlink: 3 bytes leftover after parsing attributes in process `syz.4.750'. [ 199.888017][ T7040] 0X: renamed from caif0 [ 199.977398][ T7040] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 200.086346][ T5154] udevd[5154]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 200.099542][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 200.194886][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 200.221256][ T5154] udevd[5154]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 200.502856][ T6522] Bluetooth: hci5: command 0x1001 tx timeout [ 200.519798][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 200.546050][ T7058] netlink: 44 bytes leftover after parsing attributes in process `syz.4.752'. [ 200.570361][ T7055] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 200.633377][ T7061] netlink: 'syz.4.755': attribute type 10 has an invalid length. [ 200.712886][ T7061] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.739835][ T7061] bond0: (slave team0): Enslaving as an active interface with an up link [ 200.824081][ T7065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.757'. [ 200.882486][ T7065] device ip6gre1 entered promiscuous mode [ 200.926934][ T7065] netlink: 'syz.2.757': attribute type 6 has an invalid length. [ 200.934655][ T7065] netlink: 72 bytes leftover after parsing attributes in process `syz.2.757'. [ 202.470061][ T26] kauditd_printk_skb: 96 callbacks suppressed [ 202.470076][ T26] audit: type=1326 audit(1782796910.376:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.2.764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ef38ae59 code=0x7ffc0000 [ 202.566663][ T4178] Bluetooth: hci5: command 0x1009 tx timeout [ 202.586484][ T26] audit: type=1326 audit(1782796910.376:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.2.764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ef38ae59 code=0x7ffc0000 [ 202.700911][ T26] audit: type=1326 audit(1782796910.376:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.2.764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ef38ae59 code=0x7ffc0000 [ 202.759146][ T26] audit: type=1326 audit(1782796910.426:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.2.764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ef38ae59 code=0x7ffc0000 [ 202.818921][ T7095] netlink: 'syz.2.768': attribute type 4 has an invalid length. [ 202.831226][ T26] audit: type=1326 audit(1782796910.436:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.2.764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ef38ae59 code=0x7ffc0000 [ 202.860493][ T26] audit: type=1326 audit(1782796910.436:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.2.764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ef38ae59 code=0x7ffc0000 [ 202.891872][ T26] audit: type=1326 audit(1782796910.436:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.2.764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f42ef38ae59 code=0x7ffc0000 [ 202.919790][ T26] audit: type=1326 audit(1782796910.436:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.2.764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ef38ae59 code=0x7ffc0000 [ 202.968063][ T26] audit: type=1326 audit(1782796910.436:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.2.764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ef38ae59 code=0x7ffc0000 [ 202.999473][ T26] audit: type=1326 audit(1782796910.436:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.2.764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ef38ae59 code=0x7ffc0000 [ 203.029576][ T7095] netlink: 'syz.2.768': attribute type 4 has an invalid length. [ 204.374107][ T7124] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 7124 comm: syz.2.774) [ 205.690285][ T7142] tipc: Failed to remove unknown binding: 66,0,0/2833927933:3054659536/3054659537 [ 205.700682][ T7142] tipc: Failed to remove unknown binding: 66,0,0/2833927933:3054659536/3054659537 [ 206.255078][ T7152] IPVS: sh: FWM 3 0x00000003 - no destination available [ 206.262995][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 206.603870][ T6522] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 206.624140][ T6522] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.757500][ T7119] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.796654][ T7119] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.805644][ T7119] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.820002][ T7119] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.591440][ T7174] netlink: 'syz.0.792': attribute type 1 has an invalid length. [ 208.293976][ T7177] bond4: (slave gretap1): making interface the new active one [ 208.307389][ T7182] netlink: 'syz.5.793': attribute type 11 has an invalid length. [ 208.316372][ T7177] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 208.339019][ T7179] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 208.572426][ T7193] netlink: 'syz.0.796': attribute type 1 has an invalid length. [ 208.601586][ T7193] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.796'. [ 212.085469][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.816'. [ 212.161917][ T7248] device macvlan2 entered promiscuous mode [ 212.173912][ T7248] device bond1 entered promiscuous mode [ 212.187270][ T7248] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.202464][ T7248] device bond1 left promiscuous mode [ 213.759286][ T7268] Set syz0 is full, maxelem 0 reached [ 214.069898][ T5465] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 215.247090][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880606ab400: rx timeout, send abort [ 215.258406][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880606ab400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 215.650403][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 215.650418][ T26] audit: type=1326 audit(1782796923.556:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.1.830" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e1cdd3e59 code=0x0 [ 216.460077][ T5465] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.647748][ T5465] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 217.329853][ T5465] usb 6-1: string descriptor 0 read error: -71 [ 217.339734][ T5465] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 217.370600][ T5465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.448342][ T7298] loop1: detected capacity change from 0 to 512 [ 217.467682][ T5465] usb 6-1: config 0 descriptor?? [ 217.496566][ T5465] usb 6-1: can't set config #0, error -71 [ 217.520099][ T5465] usb 6-1: USB disconnect, device number 2 [ 217.570860][ T7308] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 217.584737][ T7298] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 217.584737][ T7298] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 217.584737][ T7298] [ 217.671260][ T7298] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 217.720510][ T7298] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 217.760423][ T7298] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 217.771043][ T7298] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e042a02c, mo2=0000] [ 217.780965][ T7298] EXT4-fs (loop1): failed to initialize system zone (-117) [ 217.791868][ T7298] EXT4-fs (loop1): mount failed [ 218.000197][ T6490] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 218.251692][ T6490] usb 3-1: Using ep0 maxpacket: 32 [ 218.374071][ T7325] loop1: detected capacity change from 0 to 256 [ 218.381181][ T6490] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 218.402661][ T6490] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 218.576816][ T6490] usb 3-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 218.610250][ T6490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.641719][ T6490] usb 3-1: Product: syz [ 218.661163][ T6490] usb 3-1: Manufacturer: syz [ 218.666166][ T6490] usb 3-1: SerialNumber: syz [ 218.949209][ T7311] netlink: 'syz.2.839': attribute type 21 has an invalid length. [ 218.966511][ T7311] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.984663][ T7311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.992003][ T7311] IPv6: NLM_F_CREATE should be set when creating new route [ 218.999397][ T7311] IPv6: NLM_F_CREATE should be set when creating new route [ 219.006676][ T7311] IPv6: NLM_F_CREATE should be set when creating new route [ 219.146874][ T6490] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 219.186800][ T6490] usb 3-1: unit 4 not found! [ 219.227024][ T6490] usb 3-1: USB disconnect, device number 4 [ 219.641205][ T5154] udevd[5154]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.966939][ T26] audit: type=1326 audit(1782796927.816:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e1cdd3e59 code=0x0 [ 220.769429][ T7378] binder: 7377:7378 ioctl c0306201 200000000680 returned -14 [ 222.630774][ T7400] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 222.722749][ T7400] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.748898][ T7406] bond3: (slave vlan3): making interface the new active one [ 222.881402][ T7406] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 222.920975][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 223.286596][ T26] audit: type=1326 audit(1782796931.156:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.4.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337193be59 code=0x7fc00000 [ 226.155451][ T7415] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.162944][ T7415] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.699632][ T7415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.752256][ T7415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.234204][ T7415] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.243380][ T7415] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.252777][ T7415] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.261778][ T7415] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.391977][ T7415] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.401122][ T7415] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.410098][ T7415] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.419054][ T7415] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.509364][ T7434] device bridge_slave_0 left promiscuous mode [ 227.515641][ T7429] bond0 speed is unknown, defaulting to 1000 [ 227.525961][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.535301][ T7434] device bridge_slave_1 left promiscuous mode [ 227.545884][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.572046][ T7434] bond0: (slave bond_slave_0): Releasing backup interface [ 227.584193][ T7434] bond0: (slave bond_slave_1): Releasing backup interface [ 227.669152][ T7434] team0: Port device team_slave_0 removed [ 227.685861][ T7434] team0: Port device team_slave_1 removed [ 227.731758][ T7435] team0: Port device xfrm0 added [ 227.747199][ T7438] tipc: Enabled bearer , priority 0 [ 227.846778][ T7429] bond0 speed is unknown, defaulting to 1000 [ 227.855676][ T7429] bond0 speed is unknown, defaulting to 1000 [ 227.886268][ T7429] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 227.916326][ T7429] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 227.989563][ T7447] netlink: 'syz.0.894': attribute type 28 has an invalid length. [ 227.997521][ T7447] netlink: 'syz.0.894': attribute type 3 has an invalid length. [ 228.005159][ T7447] netlink: 132 bytes leftover after parsing attributes in process `syz.0.894'. [ 228.031101][ T7456] loop5: detected capacity change from 0 to 256 [ 228.065822][ T7429] bond0 speed is unknown, defaulting to 1000 [ 228.079338][ T7429] bond0 speed is unknown, defaulting to 1000 [ 228.096340][ T7429] bond0 speed is unknown, defaulting to 1000 [ 228.117448][ T7429] bond0 speed is unknown, defaulting to 1000 [ 228.137136][ T7429] bond0 speed is unknown, defaulting to 1000 [ 228.870073][ T6490] tipc: Node number set to 1844295380 [ 229.555553][ T7471] delete_channel: no stack [ 229.563203][ T7471] delete_channel: no stack [ 230.363922][ T7487] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 230.450958][ T7484] bond0 speed is unknown, defaulting to 1000 [ 230.677014][ T26] audit: type=1804 audit(1782796938.586:177): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.902" name="bus" dev="ramfs" ino=45021 res=1 errno=0 [ 230.727928][ T26] audit: type=1804 audit(1782796938.606:178): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.902" name="bus" dev="ramfs" ino=45021 res=1 errno=0 [ 231.381659][ T7516] netlink: 'syz.0.909': attribute type 1 has an invalid length. [ 231.511208][ T7519] delete_channel: no stack [ 231.516060][ T7519] delete_channel: no stack [ 231.797666][ T7516] 8021q: adding VLAN 0 to HW filter on device bond5 [ 232.233353][ T7518] bond5: (slave vlan3): Enslaving as an active interface with a down link [ 233.386854][ T7524] fuse: Bad value for 'fd' [ 233.916632][ T6520] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 234.326727][ T6520] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.368920][ T6520] usb 6-1: config 0 has no interface number 0 [ 234.806616][ T6520] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 234.815733][ T6520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.846468][ T6520] usb 6-1: Product: syz [ 234.850695][ T6520] usb 6-1: Manufacturer: syz [ 234.855323][ T6520] usb 6-1: SerialNumber: syz [ 235.049291][ T6520] usb 6-1: config 0 descriptor?? [ 235.926667][ T6520] dvb_usb_ec168: probe of 6-1:0.1 failed with error -71 [ 235.952299][ T6520] usb 6-1: USB disconnect, device number 3 [ 236.713650][ T7568] delete_channel: no stack [ 236.718271][ T7568] delete_channel: no stack [ 237.100522][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.922'. [ 239.098231][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 239.301543][ T7607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.933'. [ 239.530058][ T7611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.936'. [ 240.524723][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 240.922422][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.945'. [ 240.967757][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.945'. [ 241.041483][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.945'. [ 241.081344][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.945'. [ 241.100861][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.945'. [ 241.288985][ T7649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.399032][ T7657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.407268][ T7657] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 241.515683][ T7657] bond2: (slave gre1): Error -95 calling set_mac_address [ 241.766664][ T7649] device macvlan2 entered promiscuous mode [ 241.773687][ T7649] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 241.992450][ T7667] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.019563][ T7667] bond0: (slave bond6): Enslaving as an active interface with an up link [ 242.040486][ T7671] binder_alloc: 7669: binder_alloc_buf failed to map page at 200000ffd000 in userspace [ 242.478185][ T6520] Bluetooth: hci4: command 0x0406 tx timeout [ 242.545465][ T7678] __nla_validate_parse: 6 callbacks suppressed [ 242.545479][ T7678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.959'. [ 242.607743][ T7678] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.621278][ T7678] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.641788][ T7678] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.651642][ T7678] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.669796][ T7678] device geneve2 entered promiscuous mode [ 242.756736][ T7685] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.770813][ T7685] bond3: (slave macvlan2): Enslaving as a backup interface with a down link [ 243.544673][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.966'. [ 243.602822][ T7704] loop5: detected capacity change from 0 to 2048 [ 243.677247][ T7704] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 244.396857][ T7703] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.642032][ T7706] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.667059][ T7706] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 244.698032][ T7706] bond7: (slave gre1): Error -95 calling set_mac_address [ 245.516780][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.772694][ T7721] kernel profiling enabled (shift: 9) [ 245.805645][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 247.373710][ T7753] device syzkaller0 entered promiscuous mode [ 247.491410][ T7757] fuse: Bad value for 'fd' [ 247.540365][ T7762] netlink: 'syz.2.983': attribute type 10 has an invalid length. [ 247.683728][ T7774] loop4: detected capacity change from 0 to 128 [ 247.706306][ T7762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.725843][ T7762] team0: Device bond0 failed to register rx_handler [ 247.953739][ T7770] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 248.231333][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.737686][ T7766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.817372][ T7766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.841114][ T7790] fuse: Bad value for 'fd' [ 248.848255][ T26] audit: type=1326 audit(1782796956.756:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.1.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e1cdd3e59 code=0x0 [ 248.923685][ T26] audit: type=1326 audit(1782796956.806:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.1.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1cdd3e59 code=0x7ffc0000 [ 249.000449][ T26] audit: type=1326 audit(1782796956.806:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.1.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1cdd3e59 code=0x7ffc0000 [ 249.489718][ T26] audit: type=1326 audit(1782796956.806:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.1.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1cdd3e59 code=0x7ffc0000 [ 249.886449][ T26] audit: type=1326 audit(1782796956.806:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.1.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1cdd3e59 code=0x7ffc0000 [ 249.910919][ T26] audit: type=1326 audit(1782796956.806:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.1.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e1cd751d9 code=0x7ffc0000 [ 249.946487][ T26] audit: type=1326 audit(1782796956.816:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.1.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9e1cdd3e59 code=0x7ffc0000 [ 249.977986][ T26] audit: type=1326 audit(1782796956.816:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.1.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1cdd3e59 code=0x7ffc0000 [ 250.123504][ T26] audit: type=1326 audit(1782796956.816:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.1.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1cdd3e59 code=0x7ffc0000 [ 250.159922][ T26] audit: type=1326 audit(1782796956.816:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.1.995" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1cdd3e59 code=0x7ffc0000 [ 250.335845][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1006'. [ 250.592083][ T7829] overlayfs: upper fs does not support file handles, falling back to index=off. [ 251.547464][ T7845] netlink: 628 bytes leftover after parsing attributes in process `syz.2.1012'. [ 251.565233][ T7842] device syzkaller0 entered promiscuous mode [ 251.741059][ T7854] netlink: 'syz.4.1019': attribute type 10 has an invalid length. [ 251.761919][ T7854] team0: Device bond0 is already an upper device of the team interface [ 251.802926][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 251.903856][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.956879][ T7854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.979756][ T7854] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.144688][ T7854] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 252.188333][ T5465] bond0 speed is unknown, defaulting to 1000 [ 254.056609][ T4996] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 254.342796][ T7881] loop4: detected capacity change from 0 to 256 [ 254.386250][ T7883] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 254.409238][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 254.409263][ T26] audit: type=1326 audit(1782796962.316:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.2.1029" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42ef38ae59 code=0x0 [ 254.509907][ T7883] 8021q: adding VLAN 0 to HW filter on device bond8 [ 254.527388][ T7887] bond8: (slave geneve3): making interface the new active one [ 254.560811][ T4996] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.580829][ T4996] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 254.610628][ T7890] loop4: detected capacity change from 0 to 512 [ 254.640394][ T7887] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 254.650156][ T4996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.695476][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 254.706557][ T7890] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 254.714873][ T4996] usb 6-1: config 0 descriptor?? [ 254.721085][ T7890] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 254.773316][ T7890] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1030: invalid indirect mapped block 83886080 (level 1) [ 254.799449][ T4996] pwc: Askey VC010 type 2 USB webcam detected. [ 254.817577][ T7890] EXT4-fs (loop4): Remounting filesystem read-only [ 254.837681][ T7890] EXT4-fs (loop4): 1 orphan inode deleted [ 254.853461][ T7890] EXT4-fs (loop4): 1 truncate cleaned up [ 254.869703][ T7890] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,errors=remount-ro,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000040,block_validity,nodelalloc,quota,nolazytime,grpjquota=,mblk_io_submit,barrier=0x00000000000000ff,max_batch_time=0x00000. Quota mode: writeback. [ 254.921874][ T7887] syz.0.1027 (7887) used greatest stack depth: 16864 bytes left [ 254.933096][ T7890] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #2: block 13: comm syz.4.1030: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 254.975418][ T7890] EXT4-fs (loop4): Remounting filesystem read-only [ 254.993383][ T7890] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #2: comm syz.4.1030: directory missing '..' [ 255.228206][ T4996] pwc: recv_control_msg error -32 req 02 val 2b00 [ 255.290745][ T4996] pwc: recv_control_msg error -32 req 02 val 2700 [ 255.349782][ T4996] pwc: recv_control_msg error -32 req 02 val 2c00 [ 255.416806][ T4996] pwc: recv_control_msg error -32 req 04 val 1000 [ 255.476674][ T4996] pwc: recv_control_msg error -32 req 04 val 1300 [ 255.527821][ T4996] pwc: recv_control_msg error -32 req 04 val 1400 [ 255.566651][ T7927] bond0 speed is unknown, defaulting to 1000 [ 255.580279][ T4996] pwc: recv_control_msg error -32 req 02 val 2000 [ 255.759267][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.765793][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.787141][ T4996] pwc: recv_control_msg error -32 req 02 val 2100 [ 256.506593][ T4996] pwc: recv_control_msg error -71 req 02 val 2500 [ 256.778518][ T4996] pwc: recv_control_msg error -71 req 02 val 2400 [ 256.816690][ T4996] pwc: recv_control_msg error -71 req 02 val 2600 [ 256.890152][ T4996] pwc: recv_control_msg error -71 req 02 val 2900 [ 256.939999][ T4996] pwc: recv_control_msg error -71 req 02 val 2800 [ 256.969334][ T4996] pwc: recv_control_msg error -71 req 04 val 1100 [ 256.989348][ T4996] pwc: recv_control_msg error -71 req 04 val 1200 [ 257.013468][ T4996] pwc: Registered as video103. [ 257.020822][ T4996] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5 [ 257.053547][ T4996] usb 6-1: USB disconnect, device number 4 [ 257.093459][ T7952] overlayfs: failed to resolve './file0': -2 [ 257.285516][ T6490] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 257.700119][ T6490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.718061][ T6490] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 257.731727][ T6490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.742762][ T6490] usb 5-1: config 0 descriptor?? [ 257.902546][ T7982] loop5: detected capacity change from 0 to 8 [ 257.978360][ T7982] SQUASHFS error: lzo decompression failed, data probably corrupt [ 257.986283][ T7982] SQUASHFS error: Failed to read block 0x91: -5 [ 258.003251][ T7982] SQUASHFS error: Unable to read metadata cache entry [8f] [ 258.019496][ T7982] SQUASHFS error: Unable to read inode 0x11f [ 258.231427][ T6490] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 258.265905][ T6490] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input6 [ 258.425564][ T6490] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 258.574824][ T7995] loop5: detected capacity change from 0 to 2048 [ 258.642027][ T4181] Alternate GPT is invalid, using primary GPT. [ 258.661320][ T4181] loop5: p1 p2 p3 [ 258.710349][ T7995] Alternate GPT is invalid, using primary GPT. [ 258.740699][ T7995] loop5: p1 p2 p3 [ 258.948738][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 258.965480][ T5153] udevd[5153]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 258.979446][ T5154] udevd[5154]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 259.039503][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 259.054663][ T5153] udevd[5153]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 259.067817][ T5154] udevd[5154]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 259.176815][ C0] keytouch 0003:0926:3333.0005: Event data for report 0 was too short (8 vs 7) [ 259.205691][ T8016] overlayfs: failed to clone lowerpath [ 259.257422][ T8019] overlayfs: failed to clone upperpath [ 259.398359][ T5465] usb 5-1: USB disconnect, device number 9 [ 259.824653][ T8007] loop5: detected capacity change from 0 to 32768 [ 260.010860][ T8007] XFS (loop5): Mounting V5 Filesystem [ 260.105602][ T8046] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1082'. [ 260.238778][ T8007] XFS (loop5): Ending clean mount [ 260.724697][ T5151] XFS (loop5): Unmounting Filesystem Stopping sshd: stopped /usr/sbin/sshd (pid 3943) OK [ 272.001081][ T8089] netlink: 'syz.2.1095': attribute type 13 has an invalid length. [ 272.217692][ T8089] netlink: 'syz.2.1095': attribute type 17 has an invalid length. [ 272.915665][ T8100] mmap: syz.0.1097 (8100) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. Stopping crond: [ 273.122525][ T8100] cgroup: Setting release_agent not allowed stopped /usr/sbin/crond (pid 3928) [ 273.252476][ T8089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready OK [ 273.337033][ T8089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3853) Stopping network: [ 274.565390][ T8164] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1111'. [ 275.073228][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1118'. OK Stopping iptables: OK Stopping system message bus: [ 275.715927][ T8219] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1128'. [ 276.150061][ T5463] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 276.416474][ T5463] usb 5-1: Using ep0 maxpacket: 32 [ 276.692847][ T5463] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.704514][ T5463] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.714387][ T5463] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 276.723521][ T5463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.733453][ T5463] usb 5-1: config 0 descriptor?? [ 276.798167][ T5463] hub 5-1:0.0: USB hub found [ 277.316876][ T5463] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) done [ 277.729860][ T8227] loop5: detected capacity change from 0 to 32768 [ 277.991272][ T5463] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 279.624374][ T8224] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 279.871595][ T8278] netlink: 'syz.1.1141': attribute type 1 has an invalid length. [ 280.049404][ T8281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.101402][ T8281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.116513][ T8281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.145455][ T8281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.200954][ T8281] bond4: (slave geneve2): making interface the new active one [ 280.234640][ T8281] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 281.331322][ T26] audit: type=1326 audit(1782796989.236:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.1.1144" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f9e1cdcdbd7 code=0x0 [ 281.410736][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1145'. Stopping klogd: [ 282.787886][ T8314] netlink: 'syz.2.1152': attribute type 4 has an invalid length. [ 282.816720][ T8314] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1152'. [ 282.842812][ T8314] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. OK Stopping acpid: [ 283.377798][ T8331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1156'. [ 284.558279][ T8345] device batadv_slave_1 entered promiscuous mode [ 284.701207][ T8348] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks OK [ 285.614176][ T8224] usb 5-1: device descriptor read/all, error -110 [ 285.750390][ T8358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1166'. Stopping syslogd: [ 285.816606][ T8353] netlink: 'syz.5.1164': attribute type 16 has an invalid length. [ 285.841012][ T8353] netlink: 'syz.5.1164': attribute type 17 has an invalid length. [ 285.853986][ T8224] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 285.870454][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready stopped /sbin/syslogd (pid 3543)[ 285.911164][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready OK [ 285.942717][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 285.964807][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 285.993233][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 286.014480][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 286.045501][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 286.073385][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 286.096827][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 286.115117][ T8224] usb 5-1: device descriptor read/64, error -32 [ 286.126340][ T8368] syz.0.1168 sent an empty control message without MSG_MORE. [ 286.153161][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 286.177992][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 286.188262][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 286.211416][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 286.234912][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 286.248182][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 286.275985][ T8353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.293852][ T8353] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.311940][ T8353] tipc: Resetting bearer [ 286.324038][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 286.342959][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 286.364238][ T8353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.392336][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 286.416729][ T8224] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 286.468965][ C1] ================================================================== [ 286.477960][ C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 286.485565][ C1] Read of size 2 at addr ffff888055247a80 by task ksoftirqd/1/20 [ 286.493482][ C1] [ 286.495953][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 286.503273][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 286.513380][ C1] Call Trace: [ 286.516696][ C1] [ 286.519659][ C1] dump_stack_lvl+0x188/0x250 [ 286.524384][ C1] ? show_regs_print_info+0x20/0x20 [ 286.529629][ C1] ? _printk+0xda/0x130 [ 286.533840][ C1] ? __nft_trace_packet+0x135/0x150 [ 286.539087][ C1] ? load_image+0x410/0x410 [ 286.543641][ C1] print_address_description+0x60/0x2d0 [ 286.549232][ C1] ? __nft_trace_packet+0x135/0x150 [ 286.554470][ C1] kasan_report+0xdf/0x130 [ 286.558931][ C1] ? __nft_trace_packet+0x135/0x150 [ 286.564183][ C1] __nft_trace_packet+0x135/0x150 [ 286.569269][ C1] nft_do_chain+0x1299/0x14d0 [ 286.574005][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 286.577799][ T8224] usb 5-1: device descriptor read/8, error -32 [ 286.580029][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 286.592122][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 286.597479][ C1] ? ipv6_find_tlv+0x270/0x270 [ 286.602303][ C1] nft_do_chain_inet+0x25c/0x340 [ 286.607290][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 286.612195][ C1] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 286.617089][ C1] ? nf_nat_ipv6_local_fn+0x3a0/0x3a0 [ 286.622501][ C1] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 286.627398][ C1] ? lock_downgrade+0x830/0x830 [ 286.632298][ C1] ? nf_nat_ipv6_local_fn+0x3a0/0x3a0 [ 286.637808][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 286.642700][ C1] nf_hook_slow+0xb9/0x200 [ 286.647282][ C1] ? ip6_input+0xa0/0xa0 [ 286.651576][ C1] NF_HOOK+0x1f2/0x390 [ 286.655684][ C1] ? ip6_input+0xa0/0xa0 [ 286.659965][ C1] ? ip6_rcv_core+0x1600/0x1600 [ 286.664857][ C1] ? ip6_input+0xa0/0xa0 [ 286.669137][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 286.674476][ C1] ? ip6_rcv_finish+0x16b/0x240 [ 286.679363][ C1] ? refcount_add+0x80/0x80 [ 286.683897][ C1] NF_HOOK+0x303/0x390 [ 286.687998][ C1] ? refcount_add+0x80/0x80 [ 286.692541][ C1] ? ip6_rcv_core+0x1600/0x1600 [ 286.697439][ C1] ? refcount_add+0x80/0x80 [ 286.701996][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 286.707322][ C1] __netif_receive_skb+0xcc/0x290 [ 286.712398][ C1] process_backlog+0x366/0x770 [ 286.717209][ C1] ? rps_trigger_softirq+0x210/0x210 [ 286.722513][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 286.728540][ C1] ? lock_chain_count+0x20/0x20 [ 286.733433][ C1] __napi_poll+0xbb/0x430 [ 286.737839][ C1] net_rx_action+0x522/0xa80 [ 286.742449][ C1] ? net_tx_action+0x880/0x880 [ 286.747222][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 286.753216][ C1] ? lock_chain_count+0x20/0x20 [ 286.758108][ C1] handle_softirqs+0x336/0x830 [ 286.762894][ C1] ? run_ksoftirqd+0xa4/0x100 [ 286.767582][ C1] ? do_softirq+0x210/0x210 [ 286.772131][ C1] ? run_ksoftirqd+0x81/0x100 [ 286.776840][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 286.782056][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 286.787373][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 286.792578][ C1] run_ksoftirqd+0xa4/0x100 [ 286.797098][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 286.802327][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 286.807710][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 286.812842][ C1] smpboot_thread_fn+0x520/0x990 [ 286.817825][ C1] kthread+0x42e/0x520 [ 286.821897][ C1] ? cpu_report_death+0x180/0x180 [ 286.826948][ C1] ? kthread_blkcg+0xd0/0xd0 [ 286.831566][ C1] ret_from_fork+0x1f/0x30 [ 286.836002][ C1] [ 286.839046][ C1] [ 286.841369][ C1] Allocated by task 20: [ 286.845548][ C1] __kasan_slab_alloc+0x92/0xc0 [ 286.850412][ C1] slab_post_alloc_hook+0x4c/0x380 [ 286.855576][ C1] kmem_cache_alloc_node+0x184/0x2c0 [ 286.860894][ C1] __alloc_skb+0xf4/0x750 [ 286.865239][ C1] synproxy_send_client_synack_ipv6+0x169/0xc20 [ 286.871498][ C1] nft_synproxy_eval_v6+0x378/0x520 [ 286.876707][ C1] nft_synproxy_do_eval+0x3ca/0x550 [ 286.881933][ C1] nft_do_chain+0x491/0x14d0 [ 286.886540][ C1] nft_do_chain_inet+0x25c/0x340 [ 286.891480][ C1] nf_hook_slow+0xb9/0x200 [ 286.895988][ C1] NF_HOOK+0x1f2/0x390 [ 286.900056][ C1] NF_HOOK+0x303/0x390 [ 286.904140][ C1] __netif_receive_skb+0xcc/0x290 [ 286.909193][ C1] process_backlog+0x366/0x770 [ 286.914000][ C1] __napi_poll+0xbb/0x430 [ 286.918365][ C1] net_rx_action+0x522/0xa80 [ 286.922960][ C1] handle_softirqs+0x336/0x830 [ 286.926879][ T8224] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 286.927727][ C1] run_ksoftirqd+0xa4/0x100 [ 286.940289][ C1] smpboot_thread_fn+0x520/0x990 [ 286.945236][ C1] kthread+0x42e/0x520 [ 286.949309][ C1] ret_from_fork+0x1f/0x30 [ 286.953758][ C1] [ 286.956081][ C1] Freed by task 20: [ 286.959885][ C1] kasan_set_track+0x4b/0x70 [ 286.964484][ C1] kasan_set_free_info+0x1f/0x40 [ 286.969432][ C1] ____kasan_slab_free+0xd5/0x110 [ 286.974469][ C1] slab_free_freelist_hook+0xec/0x170 [ 286.979843][ C1] kmem_cache_free+0x8f/0x210 [ 286.984528][ C1] nft_synproxy_eval_v6+0x380/0x520 [ 286.989766][ C1] nft_synproxy_do_eval+0x3ca/0x550 [ 286.994969][ C1] nft_do_chain+0x491/0x14d0 [ 286.999562][ C1] nft_do_chain_inet+0x25c/0x340 [ 287.004549][ C1] nf_hook_slow+0xb9/0x200 [ 287.008969][ C1] NF_HOOK+0x1f2/0x390 [ 287.013045][ C1] NF_HOOK+0x303/0x390 [ 287.017135][ C1] __netif_receive_skb+0xcc/0x290 [ 287.022197][ C1] process_backlog+0x366/0x770 [ 287.026973][ C1] __napi_poll+0xbb/0x430 [ 287.031331][ C1] net_rx_action+0x522/0xa80 [ 287.035934][ C1] handle_softirqs+0x336/0x830 [ 287.040705][ C1] run_ksoftirqd+0xa4/0x100 [ 287.045214][ C1] smpboot_thread_fn+0x520/0x990 [ 287.050159][ C1] kthread+0x42e/0x520 [ 287.054230][ C1] ret_from_fork+0x1f/0x30 [ 287.058654][ C1] [ 287.060977][ C1] The buggy address belongs to the object at ffff888055247a00 [ 287.060977][ C1] which belongs to the cache skbuff_head_cache of size 232 [ 287.075551][ C1] The buggy address is located 128 bytes inside of [ 287.075551][ C1] 232-byte region [ffff888055247a00, ffff888055247ae8) [ 287.077156][ T8224] usb 5-1: device descriptor read/8, error -32 [ 287.088843][ C1] The buggy address belongs to the page: [ 287.088857][ C1] page:ffffea00015491c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55247 [ 287.088881][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 287.088910][ C1] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888144bf1140 [ 287.088930][ C1] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 287.135598][ C1] page dumped because: kasan: bad access detected [ 287.142017][ C1] page_owner tracks the page as allocated [ 287.147730][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 20, ts 286467649391, free_ts 257072023159 [ 287.165200][ C1] get_page_from_freelist+0x24f6/0x2670 [ 287.170769][ C1] __alloc_pages+0x1ee/0x480 [ 287.175372][ C1] new_slab+0xc0/0x4b0 [ 287.179482][ C1] ___slab_alloc+0x807/0xdd0 [ 287.184098][ C1] kmem_cache_alloc_node+0x118/0x2c0 [ 287.189413][ C1] __alloc_skb+0xf4/0x750 [ 287.193845][ C1] synproxy_send_client_synack_ipv6+0x169/0xc20 [ 287.200116][ C1] nft_synproxy_eval_v6+0x378/0x520 [ 287.205430][ C1] nft_synproxy_do_eval+0x3ca/0x550 [ 287.210724][ C1] nft_do_chain+0x491/0x14d0 [ 287.215323][ C1] nft_do_chain_inet+0x25c/0x340 [ 287.220298][ C1] nf_hook_slow+0xb9/0x200 [ 287.224731][ C1] NF_HOOK+0x1f2/0x390 [ 287.228829][ C1] NF_HOOK+0x303/0x390 [ 287.232933][ C1] __netif_receive_skb+0xcc/0x290 [ 287.237993][ C1] process_backlog+0x366/0x770 [ 287.242795][ C1] page last free stack trace: [ 287.247508][ C1] free_unref_page_prepare+0x637/0x6c0 [ 287.253011][ C1] free_unref_page_list+0x119/0x830 [ 287.258250][ C1] release_pages+0x185f/0x1bd0 [ 287.263047][ C1] __pagevec_release+0x6d/0xe0 [ 287.267847][ C1] truncate_inode_pages_range+0x335/0xf90 [ 287.273613][ C1] evict+0x4c9/0x8b0 [ 287.277549][ C1] do_unlinkat+0x3e7/0x710 [ 287.282010][ C1] do_coredump+0x1ba0/0x2a40 [ 287.286635][ C1] get_signal+0x531/0x12e0 [ 287.291097][ C1] arch_do_signal_or_restart+0xe6/0x12a0 [ 287.296788][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 287.302114][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 287.307694][ C1] irqentry_exit_to_user_mode+0x5/0x30 [ 287.313162][ C1] exc_page_fault+0x88/0x100 [ 287.317779][ C1] asm_exc_page_fault+0x22/0x30 [ 287.322639][ C1] [ 287.324966][ C1] Memory state around the buggy address: [ 287.330597][ C1] ffff888055247980: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 287.338661][ C1] ffff888055247a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.346726][ C1] >ffff888055247a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 287.354790][ C1] ^ [ 287.358868][ C1] ffff888055247b00: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 287.366935][ C1] ffff888055247b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 287.374999][ C1] ================================================================== [ 287.383072][ C1] Disabling lock debugging due to kernel taint [ 287.389418][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 287.396699][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G B syzkaller #0 [ 287.405491][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.415549][ C1] Call Trace: [ 287.418835][ C1] [ 287.421766][ C1] dump_stack_lvl+0x188/0x250 [ 287.426455][ C1] ? show_regs_print_info+0x20/0x20 [ 287.431667][ C1] ? load_image+0x410/0x410 [ 287.436177][ C1] panic+0x2f8/0x850 [ 287.440083][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 287.444629][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 287.450529][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 287.456433][ C1] ? _raw_spin_unlock+0x40/0x40 [ 287.461296][ C1] ? print_memory_metadata+0x314/0x400 [ 287.466908][ C1] ? __nft_trace_packet+0x135/0x150 [ 287.472118][ C1] check_panic_on_warn+0x80/0xa0 [ 287.477064][ C1] ? __nft_trace_packet+0x135/0x150 [ 287.482266][ C1] end_report+0x6d/0xf0 [ 287.486440][ C1] kasan_report+0x102/0x130 [ 287.490973][ C1] ? __nft_trace_packet+0x135/0x150 [ 287.496191][ C1] __nft_trace_packet+0x135/0x150 [ 287.501312][ C1] nft_do_chain+0x1299/0x14d0 [ 287.506003][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 287.511991][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 287.517917][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 287.523219][ C1] ? ipv6_find_tlv+0x270/0x270 [ 287.527995][ C1] nft_do_chain_inet+0x25c/0x340 [ 287.532939][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 287.537793][ C1] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 287.542650][ C1] ? nf_nat_ipv6_local_fn+0x3a0/0x3a0 [ 287.548029][ C1] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 287.552884][ C1] ? lock_downgrade+0x830/0x830 [ 287.557747][ C1] ? nf_nat_ipv6_local_fn+0x3a0/0x3a0 [ 287.563123][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 287.567981][ C1] nf_hook_slow+0xb9/0x200 [ 287.572422][ C1] ? ip6_input+0xa0/0xa0 [ 287.576692][ C1] NF_HOOK+0x1f2/0x390 [ 287.580777][ C1] ? ip6_input+0xa0/0xa0 [ 287.585051][ C1] ? ip6_rcv_core+0x1600/0x1600 [ 287.589903][ C1] ? ip6_input+0xa0/0xa0 [ 287.594147][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 287.599446][ C1] ? ip6_rcv_finish+0x16b/0x240 [ 287.604321][ C1] ? refcount_add+0x80/0x80 [ 287.608832][ C1] NF_HOOK+0x303/0x390 [ 287.612921][ C1] ? refcount_add+0x80/0x80 [ 287.617444][ C1] ? ip6_rcv_core+0x1600/0x1600 [ 287.622294][ C1] ? refcount_add+0x80/0x80 [ 287.626800][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 287.632118][ C1] __netif_receive_skb+0xcc/0x290 [ 287.637156][ C1] process_backlog+0x366/0x770 [ 287.641930][ C1] ? rps_trigger_softirq+0x210/0x210 [ 287.647217][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 287.653211][ C1] ? lock_chain_count+0x20/0x20 [ 287.658102][ C1] __napi_poll+0xbb/0x430 [ 287.662442][ C1] net_rx_action+0x522/0xa80 [ 287.667051][ C1] ? net_tx_action+0x880/0x880 [ 287.671818][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 287.677822][ C1] ? lock_chain_count+0x20/0x20 [ 287.682703][ C1] handle_softirqs+0x336/0x830 [ 287.687474][ C1] ? run_ksoftirqd+0xa4/0x100 [ 287.692154][ C1] ? do_softirq+0x210/0x210 [ 287.696666][ C1] ? run_ksoftirqd+0x81/0x100 [ 287.701370][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 287.706595][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 287.711904][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 287.717112][ C1] run_ksoftirqd+0xa4/0x100 [ 287.721626][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 287.726848][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 287.732259][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 287.737475][ C1] smpboot_thread_fn+0x520/0x990 [ 287.742435][ C1] kthread+0x42e/0x520 [ 287.746524][ C1] ? cpu_report_death+0x180/0x180 [ 287.751596][ C1] ? kthread_blkcg+0xd0/0xd0 [ 287.756204][ C1] ret_from_fork+0x1f/0x30 [ 287.760639][ C1] [ 287.764000][ C1] Kernel Offset: disabled [ 287.768342][ C1] Rebooting in 86400 seconds..