last executing test programs: 4m32.831625695s ago: executing program 1 (id=11): socket$inet6(0xa, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000280)) 4m32.575173459s ago: executing program 1 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x11e2e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m31.255253174s ago: executing program 1 (id=18): sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x7f, 0x3, 0x0, 0x2004c8, 0x8000000, 0x0, 0x3, 0x7, 0x0, 0x5, 0x30a, 0x5, 0x7], 0x0, 0x102280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m30.873955468s ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x0, 0x0) 4m30.656435465s ago: executing program 1 (id=23): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {0x0, 0xff}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 4m30.253963534s ago: executing program 1 (id=26): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000140)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 4m29.122373616s ago: executing program 32 (id=26): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000140)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 4m28.879709167s ago: executing program 3 (id=34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x6101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2901, 0x0) close(r2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local}) write$tun(r1, &(0x7f0000000600)=ANY=[], 0xc2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x16) 4m27.287138138s ago: executing program 3 (id=38): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0xc, 0x0, 0x5e, 0xfffffffffffffff9, 0x0, 0x4, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x3}) 4m25.328721611s ago: executing program 3 (id=41): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1000004}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x6) 4m24.973100041s ago: executing program 3 (id=45): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f00000000c0)={0x1, {0xf8000002, 0x8b8, 0xc4f, 0x870}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGABS20(r3, 0x80184560, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 4m23.283720928s ago: executing program 3 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x18, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x7, 0xae, 0x0, 0x0, @str='\'^\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x8810}, 0x4c054) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x10) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./mysys/bus/pci/devices/0000:00:05.0/resource0/file0\x00', 0x0, 0x102) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x25dfdbff, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}}, 0x0) syz_clone3(&(0x7f0000000c00)={0xae2a0080, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0x0], 0x1}, 0x58) 4m22.930617328s ago: executing program 3 (id=53): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a000, 0x0) close(0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x141, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x1a) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0x6, 0x8, 0x10000, 0x17, "9cbecf7e982e4b98c96ffb8248ebd8aa24425b"}) 4m7.473915975s ago: executing program 33 (id=53): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a000, 0x0) close(0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x141, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x1a) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0x6, 0x8, 0x10000, 0x17, "9cbecf7e982e4b98c96ffb8248ebd8aa24425b"}) 3m11.215195867s ago: executing program 6 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x5, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3m9.461639665s ago: executing program 6 (id=282): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) 3m7.712447812s ago: executing program 6 (id=290): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000002780)=@vmx={0x100, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {0x3}, 0x1, 0x8000000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000b95500"}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000880), 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 3m7.318553989s ago: executing program 6 (id=293): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x25, 0x1b, @val=@kprobe_multi=@addrs={0x1, 0x6, 0x0, &(0x7f0000000840)=[0x81, 0x0, 0x1, 0xffffffff80000000, 0x1b0, 0x5], 0x4}}, 0x30) fstatfs(r0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0xa2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x15, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3m3.571779026s ago: executing program 6 (id=302): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) read$FUSE(r2, &(0x7f0000000540)={0x2020}, 0x2020) setns(r1, 0x24020000) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) r4 = syz_clone(0x97068100, 0x0, 0x41, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x80000000, 0x0) 3m1.624873616s ago: executing program 6 (id=305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xaa, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3fb, 0x0, 0xfffffff7, 0x81}, {0x2, 0x9, 0x401, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 2m46.349395813s ago: executing program 34 (id=305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xaa, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3fb, 0x0, 0xfffffff7, 0x81}, {0x2, 0x9, 0x401, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 18.759464043s ago: executing program 2 (id=699): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x80, 0x800) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 17.393604871s ago: executing program 2 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/bluetooth/hci0/msft_opcode\x00', 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x3, 0x6, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xd, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@remote, 0x2000000, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0xe, 0x0, &(0x7f00000001c0)="f8ad1dcc02cb29dcc800320088a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.393935999s ago: executing program 7 (id=714): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48e02, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x8000) io_submit(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) poll(&(0x7f0000000780), 0x0, 0x4) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 11.381153513s ago: executing program 7 (id=716): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0xa0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x705, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004091}, 0x0) 10.088316338s ago: executing program 0 (id=717): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000002c0)={0x20}, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x1) 9.037479239s ago: executing program 2 (id=720): mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) semget(0x2, 0x3, 0x33a) r3 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000400)='127.0.0.1:6789:/tmp\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 9.035047489s ago: executing program 0 (id=721): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) close(0x4) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010000000"], 0x28}, 0xfc40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x4) 8.028475722s ago: executing program 2 (id=722): capset(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x26, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.990606559s ago: executing program 0 (id=723): r0 = open$dir(0x0, 0x121000, 0x14) mkdirat(r0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7a680000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_ublk_setup_io_uring(0x6188, &(0x7f0000000040)={0x0, 0x2616, 0x200, 0x0, 0x3a3}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 7.950431326s ago: executing program 7 (id=725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f40)={0x1c, r4, 0x1, 0x2070bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008145}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 7.948997676s ago: executing program 4 (id=726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x2c020400) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) unshare(0x2c020400) 5.735409158s ago: executing program 5 (id=727): socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000000), &(0x7f0000000600)=@udp=r1, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r4, 0x25, 0x4, @void}, 0x2a) syz_emit_ethernet(0xd81, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) 4.925827056s ago: executing program 0 (id=728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x246, &(0x7f0000002d40)="$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") openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000380)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004010}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.501643292s ago: executing program 4 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r3, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 4.2389849s ago: executing program 2 (id=730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4050000) r1 = socket$inet6(0xa, 0x80003, 0x6) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000008040), 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x4040) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.936795467s ago: executing program 5 (id=731): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000240)=0x6, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90412000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r1, 0xffffffffffffffff, 0x0) 2.936232177s ago: executing program 4 (id=732): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x28, 0x1, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) mknodat(0xffffffffffffffff, 0x0, 0x81c0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) flock(r4, 0xc) 2.935086627s ago: executing program 7 (id=733): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000240)=0x6, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90412000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.976474391s ago: executing program 5 (id=734): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) close(0x4) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010000000"], 0x28}, 0xfc40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x4) 1.975426731s ago: executing program 7 (id=735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0x9, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.969171282s ago: executing program 0 (id=744): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) open$dir(0x0, 0x10000, 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r2) tkill(r2, 0x7) wait4(r2, 0x0, 0x0, 0x0) tkill(r2, 0x27) ioprio_get$pid(0x1, r2) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x13c4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x84}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345\r', 0x36, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) 1.305846713s ago: executing program 4 (id=736): syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180"], 0x50) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000340)) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000400)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00bee5b9b80cb49c807c85709393a247066e0dbd1d4cc9b14919f9175b3d1ecfca63ba2dfbad53f056c689b3dd30d15dd68dc24fc6ff3f7447a2faf38d23e21b786f25f51f852073754deab2983e8ef71f0f41831db21390b85628876f9cd55cde11c878333a57d8a68ed062dbc69f88ec16a78580"], 0x11, 0x9e21, &(0x7f0000013e80)="$eJwkk2MU5wXXADe32bZdk23btm1P7v+zkW0bW9si27ax2dj4nue895z79X6YO3PPAO8d4LAB3jfA+wc4fIAPDHDEAEcOcNQARw/wwQE+NMCHB/jIAB8d4GMDfHyATwzwyQE+NcCnB/jMAJ8d4HMDfH6ALwzwxQG+NMCXB/jKAF8d4GsDfH2AbwzwzQG+NcC3B/jOAN8d4HsDfH+AHwzwwwF+NMCPB/jJAD8d4GcD/HyAXwxwzAC/HOBXA/x6gN8M8NsBfjfA7wf4wwB/HOBPA/x5gL8M8NcB/jbA3wf4xwDHDvDPAf41wL8H+M8A/x3gfwMcEuA4AY4b4HgBjh/gBAFOGOBEAU4c4NAAJwlw0gAnC3DyAKcIcMoApwpw6gCnCXDaAKcLcPoAZwhwxgBnCnDmAGcJcNYAZwtw9gDnCHDOAOcKcO4A5wlw3gDnC3D+ABcIcMEAFwpw4QAXCXDRABcLcPEAlwhwyQCXCpAAlw5wmQCXDXC5AJcPcIUAVwxwpQBXDnCVAFcNcLUAVw9wjQDXDHCtANcOcJ0A1w1wvQDXD3CDADcMcKMANw5wkwA3DXCzADcPcIsAtwxwqwC3DnCbALcNcLsAtw9whwB3DHCnAHcOcJcAdw1wtwB3D3CPAPcMcK8A9w5wnwD3DXC/APcP8IAADwzwoAAPDvCQAA8N8LAADw/wiACPDPCoAI8O8JgAjw3wuACPD/CEAE8M8KQATw7QAE8J8NQATwvw9ADPCPDMAM8K8OwABwEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH2AZ4T4LkBnhfg+QFeEOCFAV4U4MUBXhLgpQFeFuDlAV4R4JUBXhXg1QFeE+C1AV4X4PUB3hDgjQHeFODNAd4S4K0B3hbg7QHeEeCdAd4V4N0B3hPgvQEOC/C+AO8PcHiADwQ4IsCRAY4KcHSADwb4UIAPB/hIgI8G+FiAjwf4RIBPBvhUgE8H+EyAzwb4XIDPB/hCgC8G+FKALwf4SoCvBvhagK8H+EaAbwb4VoBvB/hOgO8G+F6A7wf4QYAfBvhRgB8H+EmAnwb4WYCfB/hFgGMC/DLArwL8OsBvAvw2wO8C/D7AHwL8McCfAvw5wF8C/DXA3wL8PcA/Ahwb4J8B/hXg3wH+E+C/Af4X4JAQxwlx3BDHC3H8ECcIccIQJwpx4hCHhjhJiJOGOFmIk4c4RYhThjhViFOHOE2I04Y4XYjThzhDiDOGOFOIM4c4S4izhjhbiLOHOEeIc4Y4V4hzhzhPiPOGOF+I84e4QIgLhrhQiAuHuEiIi4a4WIiLh7hEiEuGuFSIhLh0iMuEuGyIy4W4fIgrhLhiiCuFuHKIq4S4aoirhbh6iGuEuGaIa4W4dojrhLhuiOuFuH6IG4S4YYgbhbhxiJuEuGmIm4W4eYhbhLhliFuFuHWI24S4bYjbhbh9iDuEuGOIO4W4c4i7hLhriLuFuHuIe4S4Z4h7hbh3iPuEuG+I+4W4f4gHhHhgiAeFeHCIh4R4aIiHhXh4iEeEeGSIR4V4dIjHhHhsiMeFeHyIJ4R4YognhXhyiIZ4SoinhnhaiKeHeEaIZ4Z4VohnhzgIMQgxDDEKMQ4xCTENMQsxD7EIsQyxCrEOsQmxDbELsQ/xnBDPDfG8EM8P8YIQLwzxohAvDvGSEC8N8bIQLw/xihCvDPGqEK8O8ZoQrw3xuhCvD/GGEG8M8aYQbw7xlhBvDfG2EG8P8Y4Q7wzxrhDvDvGeEO8NcViI94V4f4jDQ3wgxBEhjgxxVIijQ3wwxIdCfDjER0J8NMTHQnw8xCdCfDLEp0J8OsRnQnw2xOdCfD7EF0J8McSXQnw5xFdCfDXE10J8PcQ3QnwzxLdCfDvEd0J8N8T3Qnw/xA9C/DDEj0L8OMRPQvw0xM9C/DzEL0IcE+KXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIf4W4u8h/hHi2BD/DPGvEP8O8Z8Q/w3xvxCHRDhOhONGOF6E40c4QYQTRjhRhBNHODTCSSKcNMLJIpw8wikinDLCqSKcOsJpIpw2wukinD7CGSKcMcKZIpw5wlkinDXC2SKcPcI5IpwzwrkinDvCeSKcN8L5Ipw/wgUiXDDChSJcOMJFIlw0wsUiXDzCJSJcMsKlIiTCpSNcJsJlI1wuwuUjXCHCFSNcKcKVI1wlwlUjXC3C1SNcI8I1I1wrwrUjXCfCdSNcL8L1I9wgwg0j3CjCjSPcJMJNI9wsws0j3CLCLSPcKsKtI9wmwm0j3C7C7SPcIcIdI9wpwp0j3CXCXSPcLcLdI9wjwj0j3CvCvSPcJ8J9I9wvwv0jPCDCAyM8KMKDIzwkwkMjPCzCwyM8IsIjIzwqwqMjPCbCYyM8LsLjIzwhwhMjPCnCkyM0wlMiPDXC0yI8PcIzIjwzwrMiPDvCQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hOdEeG6E50V4foQXRHhhhBdFeHGEl0R4aYSXRXh5hFdEeGWEV0V4dYTXRHhthNdFeH2EN0R4Y4Q3RXhzhLdEeGuEt0V4e4R3RHhnhHdFeHeE90R4b4TDIrwvwvsjHB7hAxGOiHBkhKMiHB3hgxE+FOHDET4S4aMRPhbh4xE+EeGTET4V4dMRPhPhsxE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZgIv4zwqwi/jvCbCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCMdG+GeEf0X4d4T/RPhvhP9FOCTGcWIcN8bxYhw/xglinDDGiWKcOMahMU4S46QxThbj5DFOEeOUMU4V49QxThPjtDFOF+P0Mc4Q44wxzhTjzDHOEuOsMc4W4+wxzhHjnDHOFePcMc4T47wxzhfj/DEuEOOCMS4U48IxLhLjojEuFuPiMS4R45IxLhUjMS4d4zIxLhvjcjEuH+MKMa4Y40oxrhzjKjGuGuNqMa4e4xoxrhnjWjGuHeM6Ma4b43oxrh/jBjFuGONGMW4c4yYxbhrjZjFuHuMWMW4Z41Yxbh3jNjFuG+N2MW4f4w7jDxnyP747xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxXh0jMfEeGyMx8V4fIwnxHhijCfFeHKMxnhKjKfGeFqMp8d4RoxnxnhWjGfHOIgxiDGMMYoxjjGJMY0xizGPsYixjLGKsY6xibGNsYuxj/GcGM+N8bwYz4/xghgvjPGiGC+O8ZIYL43xshgvj/GKGK+M8aoYr47xmhivjfG6GK+P8YYYb4zxphhvjvGWGG+N8bYYb4/xjhjvjPGuGO+O8Z4Y741xWIz3xXh/jMNjfCDGETGOjHFUjKNjfDDGh2J8OMZHYnw0xsdifDzGJ2J8MsanYnw6xmdifDbG52J8PsYXYnwxxpdifDnGV2J8NcbXYnw9xjdifDPGt2J8O8Z3Ynw3xvdifD/GD2L8MMaPYvw4xk9i/DTGz2L8PMYvYhwT45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EePYGP+M8a8Y/47xnxj/jfG/GIckOE6C4yY4XoLjJzhBghMmOFGCEyc4NMFJEpw0wckSnDzBKRKcMsGpEpw6wWkSnDbB6RKcPsEZEpwxwZkSnDnBWRKcNcHZEpw9wTkSnDPBuRKcO8F5Epw3wfkSnD/BBRJcMMGFElw4wUUSXDTBxRJcPMElElwywaUSJMGlE1wmwWUTXC7B5RNcIcEVE1wpwZUTXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CzBzRPcIsEtE9wqwa0T3CbBbRPcLsHtE9whwR0T3CnBnRPcJcFdE9wtwd0T3CPBPRPcK8G9E9wnwX0T3C/B/RM8IMEDEzwowYMTPCTBQxM8LMHDEzwiwSMTPCrBoxM8JsFjEzwuweMTPCHBExM8KcGTEzTBUxI8NcHTEjw9wTMSPDPBsxI8O8FBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn2C5yR4boLnJXh+ghckeGGCFyV4cYKXJHhpgpcleHmCVyR4ZYJXJXh1gtckeG2C1yV4fYI3JHhjgjcleHOCtyR4a4K3JXh7gnckeGeCdyV4d4L3JHhvgsMSvC/B+xMcnuADCY5IcGSCoxIcneCDCT6U4MMJPpLgowk+luDjCT6R4JMJPpXg0wk+k+CzCT6X4PMJvpDgiwm+lODLCb6S4KsJvpbg6wm+keCbCb6V4NsJvpPguwm+l+D7CX6Q4IcJfpTgxwl+kuCnCX6W4OcJfpHgmAS/TPCrBL9O8JsEv03wuwS/T/CHBH9M8KcEf07wlwR/TfC3BH9P8I8Exyb4Z4J/Jfh3gv8k+G+C/yU4JMVxUhw3xfFSHD/FCVKcMMWJUpw4xaEpTpLipClOluLkKU6R4pQpTpXi1ClOk+K0KU6X4vQpzpDijCnOlOLMKc6S4qwpzpbi7CnOkeKcKc6V4twpzpPivCnOl+L8KS6Q4oIpLpTiwikukuKiKS6W4uIpLpHikikulSIpLp3iMikum+JyKS6f4goprpjiSimunOIqKa6a4moprp7iGimumeJaKa6d4joprpvieimun+IGKW6Y4kYpbpziJilumuJmKW6e4hYpbpniViluneI2KW6b4nYpbp/iDinumOJOKe6c4i4p7pribinunuIeKe6Z4l4p7p3iPinum+J+Ke6f4gEpHpjiQSkenOIhKR6a4mEpHp7iESkemeJRKR6d4jEpHpvicSken+IJKZ6Y4kkpnpyiKZ6S4qkpnpbi6SmekeKZKZ6V4tkpDlIMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsUzwnxXNTPC/F81O8IMULU7woxYtTvCTFS1O8LMXLU7wixStTvCrFq1O8JsVrU7wuxetTvCHFG1O8KcWbU7wlxVtTvC3F21O8I8U7U7wrxbtTvCfFe1McluJ9Kd6f4vAUH0hxRIojUxyV4ugUH0zxoRQfTvGRFB9N8bEUH0/xiRSfTPGpFJ9O8ZmU5NkUn0vx+RRfSPHFFF9K8eUUX0nx1RRfS/H1FN9I8c0U30rx7RTfSfHdFN9L8f0UP0jxwxQ/SvHjFD9J8dMUP0vx8xS/SHFMil+m+FWKX6f4TYrfpvhdit+n+EOKP6b4U4o/p/hLir+m+FuKv6f4R4pjU/wzxb9S/DvFf1L8N8X/UhyS4TgZjpvheBmOn+EEGU6Y4UQZTpzh0AwnyXDSDCfLcPIMp8hwygynynDqDKfJcNoMp8tw+gxnyHDGDGfKcOYMZ8lw1gxny3D2DOfIcM4M58pw7gznyXDeDOfLcP4MF8hwwQwXynDhDBfJcNEMF8tw8QyXyHDJDJfKkAyXznCZDJfNcLkMl89whQxXzHClDFfOcJUMV81wtQxXz3CNDNfMcK0M185wnQzXzXC9DNfPcIMMN8xwoww3znCTDDfNcLMMN89wiwy3zHCrDLfOcJsMt81wuwy3z3CHDHfMcKcMd85wlwx3zXC3DHfPcI8M98xwrwz3znCfDPfNcL8M98/wgAwPzPCgDA/O8JAMD83wsAwPz/CIDI/M8KgMj87wmAyPzfC4DI/P8IQMT8zwpAxPztAMT8nw1AxPy/D0DM/I8MwMz8rw7AwHGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZnpPhuRmel+H5GV6Q4YUZXpThxRlekuGlGV6W4eUZXpHhlRleleHVGV6T4bUZXpfh9RnekOGNGd6U4c0Z3pLhrRneluHtGd6R4Z0Z3pXh3Rnek+G9GQ7L8L4M789weIYPZDgiw5EZjspwdIYPZvhQhg9n+EiGj2b4WIaPZ/hEhk9m+FSGT2f4TIbPZvhchs9n+EKGL2b4UoYvZ/hKhq9m+FqGr2f4RoZvZvhWhm9n+E6G72b4XobvZ/hBhh9m+FGGH2f4SYafZvhZhp9n+EWGYzL8MsOvMvw6w28y/DbD7zL8PsMfMvwxw58y/DnDXzL8NcPfMvw9wz8yHJvhnxn+leHfGf6T4b8Z/pfhkBzHyXHcHMfLcfwcJ8hxwhwnynHiHIfmOEmOk+Y4WY6T5zhFjlPmOFWOU+c4TY7T5jhdjtPnOEOOM+Y4U44z5zhLjrPmOFuOs+c4R45z5jhXjnPnOE+O8+Y4X47z57hAjgvmuFCOC+e4SI6L5rhYjovnuESOS+a4VI7kuHSOy+S4bI7L5bh8jivkuGKOK+W4co6r5LhqjqvluHqOa+S4Zo5r5bj2xEOG/I/Fujmul+P6OW6Q44Y5bpTjxjlukuOmOW6W4+Y5bpHjljlulePWOW6T47Y5bpfj9jnukOOOOe6U48457pLjrjnuluPuOe6R45457pXj3jnuk+O+Oe6X4/45HpDjgTkelOPBOR6S46E5Hpbj4TkekeOROR6V49E5HpPjsTkel+PxOZ6Q44k5npTjyTma4yk5nprjaTmenuMZOZ6Z41k5np3jIMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+x3NyPDfH83I8P8cLcrwwx4tyvDjHS3K8NMfLcrw8xytyvDLHq3K8Osdrcrw2x+tyvD7HG3K8Mcebcrw5x1tyvDXH23K8Pcc7crwzx7tyvPt//xpzzth7cxz2P5eHDBnyvx2e45AhQ4aMyHFkjqNyHJ3jg/9zf8iQIQ/n+EiOj+b4WI6P5/hEjk/m+FSOT+f4TI7P5vhcjs/n+EKOL+b4Uo4v5/hKjq/m+FqOr+f4Ro5v5vhWjm/n+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY6f5vhZjp/n+EWOY3L8Msevcvw6x29y/DbH73L8Pscfcvwxx59y/DnHX3L8Ncffcvw9xz9yHJvjnzn+lePfOf6T4785/vc/JgWOU+C4BY5X4PgFTlDghAVOVODEBQ4tcJICJy1wsgInL3CKAqcscKoCpy5wmgKnLXC6AqcvcIYCZyxwpgJnLnCWAmctcLYCZy9wjgLnLHCuAucucJ4C5y1wvgLnL3CBAhcscKECFy5wkQIXLXCxAhcvcIkClyxwqQIpcOkClylw2QI3mqkZu3yBKxS4YoErFbhygasU/+/A/2b1AtcocM0C1ypw7QLXKXDdAtcrcP0CNyhww//dK3DjAjcpcNMCNytw8wK3KHDLArcqcOsCtylw2wK3K3D7AncocMcCdypw5wJ3KXDXAncrcPcC9yhwzwL3KnDvAvcpcN8C9ytw/wIPKPDAAg8q8OACDynw0AIPK/DwAo8o8MgCjyrw6AKPKfDYAo8r8PgCTyjwxAJPKvDkAi3wlAJPLfC0Ak8v8IwCzyzwrALPLnBQYFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF/gOQWeW+B5BZ5f4AUFXljgRQVeXOAlBV5a4GUFXl7gFQVeWeBVBV5d4DUFXlvgdQVeX+ANBd5Y4E0F3lzgLQXeWuBtBd5e4B0F3lngXQXeXeA9Bd5b4LAC7yvw/gKHF/hAgSMKHFngqAJHF/hggQ8V+HCBjxT4aIGPFfh4gU8U+GSBTxX4dIHPFPhsgc8V+HyBLxT4YoEvFfhyga8U+GqBrxX4eoFvFPhmgW8V+HaB7xT4boHvFfh+gR8U+GGBHxX4cYGfFPhpgZ8V+HmBXxQ4psAvC/yqwK8L/KbAbwv8rsDvC/yhwB8L/KnAnwv8pcBfC/ytwN8L/KPAsQX+WeBfBf5d4D8F/lvgf//rocRxShy3xPFKHL/ECUqcsMSJSpy4xKElTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlTiwiUuUuKiJS5W4uIlLlHikiUuVSIlLl3iMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDiXuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5d4jElHlvicSUeX+IJJZ5Y4kklnlyiJZ5S4qklnlbi6SWeUeKZJZ5V4tklDkoMSgxLjEqMS0xKTEvMSsxLLEosS6xKrEtsSmxL7ErsSzynxHNLPK/E80u8oMQLS7yoxItLvKTES0u8rMTLS7yixCtLvKrEq0u8psRrS7yuxOtLvKHEG0u8qcSbS7ylxFtLvK3E20u8o8Q7S7yrxLtLvKfEe0scVuJ9Jd5f4vASHyhxRIkjSxxV4ugSHyzxoRIfLvGREh8t8bESHy/xiRKfLPGpEp8u8ZkSny3xuRKfL/GFEl8s8aUSXy7xlRJfLfG1El8v8Y0S3yzxrRLfLvGdEt8t8b0S3y/xgxI/LPGjEj8u8ZMSPy3xsxI/L/GLEseU+GWJX5X4dYnflPhtid+V+H2JP5T4Y4k/lfhzib+U+GuJv5X4e4l/lDi2xD9L/KvEv0v8p8R/S/yvxCEVjlPhuBWOV+H4FU5Q4YQVTlThxBUOrXCSCietcLIKJ69wigqnrHCqCqeucJoKp61wugqnr3CGCmescKYKZ65wlgpnrXC2CmevcI4K56xwrgrnrnCeCuetcL4K569wgQoXrHChCheucJEKF61wsQoXr3CJCpescKkKqXDpCpepcNkKl6tw+QpXqHDFCleqcOUKV6lw1QpXq3D1CteocM0K16pw7QrXqXDdCtercP0KN6hwwwo3qnDjCjepcNMKN6tw8wq3qHDLCreqcOsKt6lw2wq3q3D7CneocMcKd6pw5wp3qXDXCnercPcK96hwzwr3qnDvCvepcN8K96tw/woPqPDACg+q8OAKD6nw0AoPq/DwCo+o8MgKj6rw6AqPqfDYCo+r8PgKT6jwxApPqvDkCq3wlApPrfC0Ck+v8IwKz6zwrArPrnBQYVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV/hORWeW+F5FZ5f4QUVXljhRRVDL67wkgovrfCyCi+v8IoKr6zwqgqvrvCaCq+t8LoKr6/whgpvrPCmCm+u8JYKb63wtgpvr/COCu+s8K4K767wngrvrXBYhfdVeH+Fwyt8oMIRFY6scFSFoyt8sMKHKny4wkcqfLTCxyp8vMInKnyywqcqfLrCZyp8tsLnKny+whcqfLHClyp8ucJXKny1wtcqfL3CNyp8s8K3Kny7wncqfLfC9yp8v8IPKvywwo8q/LjCTyr8tMLPKvy8wi8qHFPhlxV+VeHXFX5T4bcVflfh9xX+UOGPFf5U4c8V/lLhrxX+VuHvFf5R4dgK/6zwrwr/rvCfCv+t8L8Kh9Q4To3j1jhejePXOEGNE9Y4UY0T1zi0xklqnLTGyWqcvMYpapyyxqlqnLrGaWqctsbpapy+xhlqnLHGmWqcucZZapy1xtlqnL3GOWqcs8a5apy7xnlqnLfG+Wqcv8YFalywxoVqXLjGRWpctMbFaly8xiVqXLLGpWqkxqVrXKbGZWtcrsbla1yhxhVrXKnGlWtcpcZVa1ytxtVrXKPGNWtcq8a1a1ynxnVrXK/G9WvcoMYNa9yoxo1r3KTGTWvcrMbNa9yixi1r3KrGrWvcpsZta9yuxu1r3KHGHWvcqcada9ylxl1r3K3G3Wvco8Y9a9yrxr1r3KfGfWvcr8b9azygxgNrPKjGg2s8pMZDazysxsNrPKLGI2s8qsajazymxmNrPK7G42s8ocYTazypxpNrtMZTajy1xtNqPL3GM2o8s8azajy7xkGNQY1hjVGNcY1JjWmNWY15jUWNZY1VjXWNTY1tjV2NfY3n1HhujefVeH6NF9R4YY0X1XhxjZfUeGmNl9V4eY1X1HhljVfVeHWN19R4bY3X1Xh9jTfUeGONN9V4c4231HhrjbfVeHuNd9R4Z4131Xh3jffUeG+Nw2q8r8b7axxe4wM1jqhxZI2jahxd44M1PlTjwzU+UuOjNT5W4+M1PlHjkzU+VePTNT5T47P/a2MIPl/jCzW+WONLNb5c4ys1vlrjazW+XuMbNb5Z41s1vl3jOzW+W+N7Nb5f4wc1fljjRzV+XOMnNX5a42c1fl7jFzWOqfHLGr+q8esav6nx2xq/q/H7Gn+o8ccaf6rx5xp/qfHXGn+r8fca/6hxbI1/1vhXjX/X+E+N/9b4X41DGhynwXEbHK/B8RucoMEJG5yowYkbHNrgJA1O2uBkDU7e4BQNTtngVA1O3eA0DU7b4HQNTt/gDA3O2OBMDc7c4CwNztrgbA3O3uAcDc7Z4FwNzt3gPA3O2+B8Dc7f4AINLtjgQg0u3OAiDS7a4GINLt7gEg0u2eBSDdLg0g0u0+CyDS7X4PINrtDgig2u1ODKDa7S4KoNrtbg6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ0e1+DxDZ7Q4IkNntTgyQ3a4CkNntrgaQ2e3uAZDZ7Z4FkNnt3goMGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7GryzwbsavLvBexq8t8FhDd7X4P0NDm/wgQZHNDiywVENjm7wwQYfavDhBh9p8NEGH2vw8QafaPDJBp9q8OkGn2nw2Qafa/D5Bl9o8MUGX2rw5QZfafDVBl9r8PUG32jwzQbfavDtBt9p8N0G32vw/QY/aPDDBj9q8OMGP2nw0wY/a/DzBr9ocEyDXzb4VYNfN/hNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg2Mb/LPBvxr8u8F/Gvy3wf8aHNLiOC2O2+J4LY7f4gQtTtjiRC1O3OLQFidpcdIWJ2tx8hanaHHKFqdqceoWp2lx2hana3H6FmdoccYWZ2px5hZnaXHWFmdrcfYW52hxzhbnanHuFudpcd4W52tx/hYXaHHBFhdqceEWF2lx0RYXa3HxFpdocckWl2qRFpducZkWl21xuRaXb3GFFldscaUWV25xlRZXbXG1FldvcY0W12xxrRbXbnGdFtdtcb0W129xgxY3bHGjFjducZMWN21xsxY3b3GLFrdscasWt25xmxa3bXG7FrdvcYcWd2xxpxZ3bnGXFndtcbcWd29xjxb3bHGvFvducZ8W921xvxb3b/GAFg9s8aAWD27xkBYPbfGwFg9v8YgWj2zxqBaPbvGYFo9t8bgWj2/xhBZPbPGkFk9u0RZPafHUFk9r8fQWz2jxzBbPavHsFgctBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0tDmvxvhbvb3F4iw+0OKLFkS2OanF0iw+2+FCLD7f4SIuPtvhYi4+3+ESLT7b4VItPt/hMi8+2+FzL0P9180KLL7b4Uosvt/hKi6+2+FqLr7f4RotvtvhWi2+3+E6L77b4Xovvt/hBix+2+FGLH7f4SYuftvhZi5+3+EWLY1r8ssWvWvy6xW9a/LbF71r8vsUfWvyxxZ9a/LnFX1r8tcXfWvy9xT9aHNviny3+1eLfLf7T4r8t/tfikA7H6XDcDsfrcPwOJ+hwwg4n6nDiDod2OEmHk3Y4WYeTdzhFh1N2OFWHU3c4TYfTdjhdh9N3OEOHM3Y4U4czdzhLh7N2OFuHs3c4R4dzdjhXh3N3OE+H83Y4X4fzd7hAhwt2uFCHC3e4SIeLdrhYh4t3uESHS3a4VId0uHSHy3S4bIfLdbh8hyt0uGLH0CFDhrhyh6t0uGqHq3W4eodrdLhmh2t1uHaH63S4bofrdbh+hxt0uGGHG3W4cYebdLhph5t1uHmHW3S4ZYdbdbh1h9t0uG2H23W4fYc7dLhjhzt1uHOHu3S4a4e7dbh7h3t0uGeHe3W4d4f7dLhvh/t1uH+HB3R4YIcHdXhwh4d0eGiHh3V4eIdHdHhkh0d1eHSHx3R4bIfHdXh8hyd0eGKHJ3V4cod2eEqHp3Z4Woend3hGh2d2eFaHZ3c46DDoMOww6jDuMOkw7TDrMO+w6LDssOqw7rDpsO2w67Dv8JwOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/s8K4O7+7wng7v7XBYh/d1eH+Hwzt8oMMRHY7scFSHozt8sMOHOny4w0c6fLTDxzp8vMMnOnyyw6c6fLrDZzp8tsPnOny+wxc6fLHDlzp8ucNXOny1w9c6fL3DNzp8s8O3Ony7w3c6fLfD9zp8v8MPOvyww486/LjDTzr8tMPPOvy8wy86HNPhlx1+1eHXHX7T4bcdftfh9x3+0OGPHf7U4c8d/tLhrx3+1uHvHf7R4dgO/+zwrw7/7vCfDv/t8L8Oh/Q4To/j9jhej+P3OEGPE/Y4UY8T9zi0x0l6nLTHyXqcvMcpepyyx6l6nLrHaXqctsfpepy+xxl6nLHHmXqcucdZepy1x9l6nL3HOXqcs8e5epy7x3l6nLfH+Xqcv8cFelywx4V6XLjHRXpctMfFely8xyV6XLLHpXqkx6V7XKbHZXtcrsfle1yhxxV7XKnHlXtcpcdVe1ytx9V7XKPHNXtcq8e1e1ynx3V7XK/H9XvcoMcNe9yox4173KTHTXvcrMfNe9yixy173KrHrXvcpsdte9yux+173KHHHXvcqcede9ylx1173K3H3Xvco8c9e9yrx7173KfHfXvcr8f9ezygxwN7PKjHg3s8pMdDezysx8N7PKLHI3s8qsejezymx2N7PK7H43s8occTezypx5N7tMdTejy1x9N6PL3HM3o8s8ezejy7x0GPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12PfY/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+Pw3q8r8f7exze4wM9juhxZI+jehz9fyzSAxOeB4NA0dRp2tS2rVvbtm3bvjVS+31s1LbbJLVt27aSnW9m/8KZM8CRAxw1wNEDfGSAjw7wsQE+PsAnBvjkAJ8a4NMDfGaAzw7wuQE+P8AXBvjiAF8a4MsDfGWArw7wtQG+PsA3BvjmAN8a4NsDfGeA7w7wvQG+P8APBvjhAD8a4McD/GSAnw7wswF+PsAvBvjlAL8a4NcD/GaA3w7wuwF+P8AfBvjjAH8a4M8D/GWAvw7wtwH+PsA/BvjnAP8a4N8D/GeA/w7wvwGOGeDYAQ4JcJwAxw1wvADHD3CCACcMcKIAhwY4cYDDApwkwEkDHB7gZAFOHuAUAU4Z4FQBTh3gNAFOG+B0AU4f4AwBzhjgTAHOHOAsAc4a4GwBzh7gHAHOGeBcAc4d4DwBzhvgfAHOH+ACAS4Y4EIBLhzgIgEuGuBiAS4e4BIBEuCSAS4V4NIBLhPgsgEuF+DyAa4Q4IoBrhTgygGuEuCqAa4W4OoBrhHgmgGuFeDaAa4T4LoBrhfg+gFuEOCGAW4U4MYBbhLgpgFuFuDmAW4R4JYBbhXg1gFuE+C2AW4X4PYB7hDgjgHuFODOAe4S4K4B7hbg7gHuEeCeAe4V4N4B7hPgvgHuF+D+AR4Q4IEBHhTgwQEeEuChAR4W4OEBHhHgkQEeFeDRAR4T4LEBHhfg8QGeEOCJARrgSQGeHOApAZ4a4GkBnh7gGQGeGeBZAZ4d4IgAzwnw3ADPC/D8AC8I8MIALwrw4gAvCfDSAC8L8PIArwhwEGAQYBhgFGAcYBJgGmAWYB5gEWAZYBVgHWATYBtgF2Af4JUBXhXg1QFeE+C1AV4X4PUB3hDgjQHeFODNAd4S4K0B3hbg7QHeEeCdAd4V4N0B3hPgvQHeF+D9AT4Q4IMBPhTgwwGODHBUgKMDfCTARwN8LMDHA3wiwCcDfCrApwN8JsBnA3wuwOcDfCHAFwN8KcCXA3wlwFcDfC3A1wN8I8A3A3wrwLcDfCfAdwN8L8D3A/wgwA8D/CjAjwP8JMBPA/wswM8D/CLALwP8KsCvA/wmwG8D/C7A7wP8IcAfA/wpwJ8D/CXAXwP8LcDfA/wjwD8D/CvAvwP8J8B/A/wvwDEBjg1wSIjjhDhuiOOFOH6IE4Q4YYgThTg0xIlDHBbiJCFOGuLwECcLcfIQpwhxyhCnCnHqEKcJcdoQpwtx+hBnCHHGEGcKceYQZwlx1hBnC3H2EOcIcc4Q5wpx7hDnCXHeEOcLcf4QFwhxwRAXCnHhEBcJcdEQFwtx8RCXCJEQlwxxqRCXDnGZEJcNcbkQlw9xhRBXDHGlEFcOcZUQVw1xtRBXD3GNENcMca0Q1w5xnRDXDXG9ENcPcYMQNwxxoxA3DnGTEDcNcbMQNw9xixC3DHGrELcOcZsQtw1xuxC3D3GHEHcMcacQdw5xlxB3DXG3EHcPcY8Q9wxxrxD3DnGfEPcNcb8Q9w/xgBAPDPGgEA8O8ZAQDw3xsBAPD/GIEI8M8agQjw7xmBCPDfG4EI8P8YQQTwzREE8K8eQQTwnx1BBPC/H0EM8I8cwQzwrx7BBHhHhOiOeGeF6I54d4QYgXhnhRiBeHeEmIl4Z4WYiXh3hFiIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xCvDPGqEK8O8ZoQrw3xuhCvD/GGEG8M8aYQbw7xlhBvDfG2EG8P8Y4Q7wzxrhDvDvGeEO8N8b4Q7w/xgRAfDPGhEB8OcWSIo0IcHeIjIT4a4mMhPh7iEyE+GeJTIT4d4jMhPhvicyE+H+ILIb4Y4kshvhziKyG+GuJrIb4e4hshvhniWyG+HeI7Ib4b4nshvh/iByF+GOJHIX4c4ichfhriZyF+HuIXIX4Z4lchfh3iNyF+G+J3IX4f4g8h/hjiTyH+HOIvIf4a4m8h/h7iHyH+GeJfIf4d4j8h/hvifyGOCXFsiEMiHCfCcSMcL8LxI5wgwgkjnCjCoRFOHOGwCCeJcNIIh0c4WYSTRzhFhFNGOFWEU0c4TYTTRjhdhNNHOEOEM0Y4U4QzRzhLhLNGOFuEs0c4R4RzRjhXhHNHOE+E80Y4X4TzR7hAhAtGuFCEC0e4SISLRrhYhItHuESERLhkhEtFuHSEy0S4bITLRbh8hCtEuGKEK0W4coSrRLhqhKtFuHqEa0S4ZoRrRbh2hOtEuG6E60W4foQbRLhhhBtFuHGEm0S4aYSbRbh5hFtEuGWEW0W4dYTbRLhthNtFuH2EO0S4Y4Q7RbhzhLtEuGuEu0W4e4R7RLhnhHtFuHeE+0S4b4T7Rbh/hAdEeGCEB0V4cISHRHhohIdFeHiER0R4ZIRHRXh0hMdEeGyEx0V4fIQnRHhihEZ4UoQnR3hKhKdGeFqEp0d4RoRnRnhWhGdHOCLCcyI8N8LzIjw/wgsivDDCiyK8OMJLIrw0wssivDzCKyIcRBhEGEYYRRhHmESYRphFmEdYRFhGWEVYR9hE2EbYRdhHeGWEV0V4dYTXRHhthNdFeH2EN0R4Y4Q3RXhzhLdEeGuEt0V4e4R3RHhnhHdFeHeE90R4b4T3RXh/hA9E+GCED0X4cIQjIxwV4egIH4nw0Qgfi/DxCJ+I8MkIn4rw6QififDZCJ+L8PkIX4jwxQhfivDlCF+J8NUIX4vw9QjfiPDNCN+K8O0I34nw3Qjfi/D9CD+I8MMIP4rw4wg/ifDTCD+L8PMIv4jwywi/ivDrCL+J8NsIv4vw+wh/iPDHCH+K8OcIf4nw1wh/i/D3CP+I8M8I/4rw7wj/ifDfCP+LcEyEYyMcEuM4MY4b43gxjh/jBDFOGONEMQ6NceIYh8U4SYyTxjg8xslinDzGKWKcMsapYpw6xmlinDbG6WKcPsYZYpwxxplinDnGWWKcNcbZYpw9xjlinDPGuWKcO8Z5Ypw3xvlinD/GBWJcMMaFYlw4xkViXDTGxWJcPMYlYiTGJWNcKsalY1wmxmVjXC7G5WNcIcYVY1wpxpVjXCXGVWNcLcbVY1wjxjVjXCvGtWNcJ8Z1Y1wvxvVj3CDGDWPcKMaNY9wkxk1j3CzGzWPcIsYtY9wqxq1j3CbGbWPcLsbtY9whxh1j3CnGnWPcJcZdY9wtxt1j3CPGPWPcK8a9Y9wnxn1j3C/G/WM8IMYDYzwoxoNjPCTGQ2M8LMbDYzwixiNjPCrGo2M8JsZjYzwuxuNjPCHGE2M0xpNiPDnGU2I8NcbTYjw9xjNiPDPGs2I8O8YRMZ4T47kxnhfj+TFeEOOFMV4U48UxXhLjpTFeFuPlMV4R4yDGIMYwxijGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsYrY7wqxqtjvCbGa2O8LsbrY7whxhtjvCnGm2O8JcZbY7wtxttjvCPGO2O8K8a7Y7wnxntjvC/G+2N8IMYHY3woxodjHBnjqBhHx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8b4XIzPx/hCjC/G+FKML8f4SoyvxvhajK/H+EaMb8b4Voxvx/hOjO/G+F6M78f4QYwfxvhRjB/H+EmMn8b4WYyfx/hFjF/G+FWMX8f4TYzfxvhdjN/H+EOMP8b4U4w/x/hLjL/G+FuMv8f4R4x/xvhXjH/H+E+M/8b4X4xjYhwb45AEx0lw3ATHS3D8BCdIcMIEJ0pwaIITJzgswUkSnDTB4QlOluDkCU6R4JQJTpXg1AlOk+C0CU6X4PQJzpDgjAnOlODMCc6S4KwJzpbg7AnOkeCcCc6V4NwJzpPgvAnOl+D8CS6Q4IIJLpTgwgkukuCiCS6W4OIJLpEgCS6Z4FIJLp3gMgkum+ByCS6f4AoJrpjgSgmunOAqCa6a4GoJrp7gGgmumeBaCa6d4DoJrpvgegmun+AGCW6Y4EYJbpzgJglumuBmCW6e4BYJbpngVgluneA2CW6b4HYJbp/gDgnumOBOCe6c4C4J7prgbgnunuAeCe6Z4F4J7p3gPgnum+B+Ce6f4AEJHpjgQQkenOAhCR6a4GEJHp7gEQkemeBRCR6d4DEJHpvgcQken+AJCZ6YoAmelODJCZ6S4KkJnpbg6QmekeCZCZ6V4NkJjkjwnATPTfC8BM9P8IIEL0zwogQvTvCSBC9N8LIEL0/wigQHCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYJXpngVQleneA1CV6b4HUJXp/gDQnemOBNCd6c4C0J3prgbQnenuAdCd6Z4F0J3p3gPQnem+B9Cd6f4AMJPpjgQwk+nODIBEclODrBRxJ8NMHHEnw8wScSfDLBpxJ8OsFnEnw2wecSfD7BFxJ8McGXEnw5wVcSfDXB1xJ8PcE3EnwzwbcSfDvBdxJ8N8H3Enw/wQ8S/DDBjxL8OMFPEvw0wc8S/DzBLxL8MsGvEvw6wW8S/DbB7xL8PsEfEvwxwZ8S/DnBXxL8NcHfEvw9wT8S/DPBvxL8O8F/Evw3wf8SHJPg2ASHpDhOiuOmOF6K46c4QYoTpjhRikNTnDjFYSlOkuKkKQ5PcbIUJ09xihSnTHGqFKdOcZoUp01xuhSnT3GGFGdMcaYUZ05xlhRnTXG2FGdPcY4U50xxrhTnTnGeFOdNcb4U509xgRQXTHGhFBdOcZEUF01xsRQXT3GJFElxyRSXSnHpFJdJcdkUl0tx+RRXSHHFFFdKceUUV0lx1RRXS3H1FNdIcc0U10px7RTXSXHdFNdLcf0UN0hxwxQ3SnHjFDdJcdMUN0tx8xS3SHHLFLdKcesUt0lx2xS3S3H7FHdIcccUd0px5xR3SXHXFHdLcfcU90hxzxT3SnHvFPdJcd8U90tx/xQPSPHAFA9K8eAUD0nx0BQPS/HwFI9I8cgUj0rx6BSPSfHYFI9L8fgUT0jxxBRN8aQUT07xlBRPTfG0FE9P8YwUz0zxrBTPTnFEiuekeG6K56V4fooXpHhhiheleHGKl6R4aYqXpXh5ilekOEgxSDFMMUoxTjFJMU0xSzFPsUixTLFKsU6xSbFNsUuxT/HKFK9K8eoUr0nx2hSvS/H6FG9I8cYUb0rx5hRvSfHWFG9L8fYU70jxzhTvSvHuFO9J8d4U70vx/hQfSPHBFB9K8eEUR6Y4KsXRKT6S4qMpPpbi4yk+keKTKT6V4tMpPpPisyk+l+LzKb6Q4ospvpTiyym+kuKrKb6W4uspvpHimym+leLbKb6T4rspvpfi+yl+kOKHKX6U4scpfpLipyl+luLnKX6R4pcpfpXi1yl+k+K3KX6X4vcp/pDijyn+lOLPKf6S4q8p/pbi7yn+keKfKf6V4t8p/pPivyn+l+KYFMemOCTDcTIcN8PxMhw/wwkynDDDiTIcmuHEGQ7LcJIMJ81weIaTZTh5hlNkOGWGU2U4dYbTZDhthtNlOH2GM2Q4Y4YzZThzhrNkOGuGs2U4e4ZzZDhnhnNlOHeG82Q4b4bzZTh/hgtkuGCG72S4cIaLZLhohotluHiGS2RIhktmuFSGS2e4TIbLZrhchstnuEKGK2a4UoYrZ7hKhqtmuFqGq2e4RoZrZrhWhmtnuE6G62a4XobrZ7hBhhtmuFGGG2e4SYabZrhZhptnuEWGW2a4VYZbZ7hNhttmuF2G22e4Q4Y7ZrhThjtnuEuGu2a4W4a7Z7hHhntmuFeGe2e4T4b7ZrhfhvtneECGB2Z4UIYHZ3hIhodmeFiGh2d4RIZHZnhUhkdneEyGx2Z4XIbHZ3hChidmaIYnZXhyhqdkeGqGp2V4eoZnZHhmhmdleHaGIzI8J8NzMzwvw/MzvCDDCzO8KMOLM7wkw0szvCzDyzO8IsNBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn2GV2Z4VYZXZ3hNhtdmeF2G12d4Q4Y3ZnhThjdneEuGt2Z4W4a3Z3hHhndmeFeGd2d4T4b3Znhfhvdn+ECGD2b4UIYPZzgyw1EZjs7wkQwfzfCxDB/P8IkMn8zwqQyfzvCZDJ/N8LkMn8/whQxfzPClDF/O8JUMX83wtQxfz/CNDN/M8K0M3/7/w+9m+F6G72f4QYYfZvhRhh9n+EmGn2b4WYafZ/hFhl9m+FWGX2f4TYbfZvhdht9n+EOGP2b4U4Y/Z/hLhr9m+FuGv2f4R4Z/ZvhXhn9n+E+G/2b4X4ZjMhyb4ZAcx8lx3BzHy3H8HCfIccIcJ8pxaI4T5zgsx0lynDTH4TlOluPkOU6R45Q5TpXj1DlOk+O0OU6X4/Q5zpDjjDnOlOPMOc6S46w5zpbj7DnOkeOcOc6V49w5zpPjvDnOl+P8OS6Q44I5LpTjwjkukuOiOS6W4+I5LpEjOS6Z41I5Lp3jMjkum+NyOS6f4wo5rpjjSjmunOMqOa6a42o5rp7jGjmumeNaOa6d4zo5rpvjejmun+MGOW6Y40Y5bpzjJjlumuNmOW6e4xY5bpnjVjluneM2OW6b43Y5bp/jDjnumONOOe6c4y457prjbjnunuMeOe6Z41457p3jPjnum+N+Oe6f4wE5HpjjQTkenOMhOR6a42E5Hp7jETkemeNROR6d4zE5HpvjcTken+MJOZ6YozmelOPJOZ6S46k5npbj6TmekeOZOZ6V49k5jsjxnBzPzfG8HM/P8YIcL8zxohwvzvGSHC/N8bIcL8/xihwHOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY5XpnjVTleneM1OV6b43U5Xp/jDTnemONNOd6c4y053prjbTnenuMdOd6Z41053p3jPTnem+N9Od6f4wM5PpjjQzk+nOPIHEflODrHR3J8NMfHcnw8xydyfDLHp3J8Osdncnw2x+dyfD7HF3J8MceXcnw5x1dyfDXH13J8Pcc3cnwzx7dyfDvHd3J8N8f3cnw/xw9y/DDHj3L8OMdPcvw0x89y/DzHL3L8Msevcvw6x29y/DbH73L8Pscfcvwxx59y/DnHX3L8Ncffcvw9xz9y/DPHv3L8O8d/cvw3x/9yHJPj2ByHFDhOgeMWOF6B4xc4QYETFjhRgUMLnLjAYQVOUuCkBQ4vcLICJy9wigKnLHCqAqcucJoCpy1wugKnL3CGAmcscKYCZy5wlgJnLXC2AmcvcI4C5yxwrgLnLnCeAuctcL4C5y9wgQIXLHChAhcucJECFy1wsQIXL3CJAilwyQKXKnDpApcpcNkClytw+QJXKHDFAlcqcOUCVylw1QJXK3D1AtcocM0C1ypw7QLXKXDdAtcrcP0CNyhwwwI3KnDjAjcpcNMCNytw8wK3KHDLArcqcOsCtylw2wK3K3D7AncocMcCdypw5wJ3KXDXAncrcPcC9yhwzwL3KnDvAvcpcN8C9ytw/wIPKPDAAg8q8OACDynw0AIPK/DwAo8o8MgCjyrw6AKPKfDYAo8r8PgCTyjwxAIt8KQCTy7wlAJPLfC0Ak8v8IwCzyzwrALPLnBEgecUeG6B5xV4foEXFHhhgRcVeHGBlxR4aYGXFXh5gVcUOCgwKDAsMCowLjApMC0wKzAvsCiwLLAqsC6wKbAtsCuwL/DKAq8q8OoCrynw2gKvK/D6Am8o8MYCbyrw5gJvKfDWAm8r8PYC7yjwzgLvKvDuAu8p8N4C7yvw/gIfKPDBAh8q8OECRxY4qsDRBT5S4KMFPlbg4wU+UeCTBT5V4NMFPlPgswU+V+DzBb5Q4IsFvlTgywW+UuCrBb5W4OsFvlHgmwW+VeDbBb5T4LsFvlfg+wV+UOCHBX5U4McFflLgpwV+VuDnBX5R4JcFflXg1wV+U+C3BX5X4PcF/lDgjwX+VODPBf5S4K//8xmGvxf4R4F/FvhXgX8X+E+B/xb4X4FjChxb4JASxylx3BLHK3H8EicoccISJypxaIkTlzisxElKnLTE4SVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlTiwiUuUuKiJS5W4uIlLlEiJS5Z4lIlLl3iMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDiXuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5d4jElHlvicSUeX+IJJZ5YoiWeVOLJJZ5S4qklnlbi6SWeUeKZJZ5V4tkljijxnBLPLfG8Es8v8YISLyzxohIvLvGSEi8t8bISLy/xihIHJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYlXlniVSVeXeI1JV5b4nUlXl/iDSXeWOJNJd5c4i0l3lribSXeXuIdJd5Z4l0l3l3iPSXeW+J9Jd5f4gMlPljiQyU+XOLIEkeVOLrER0p8tMTHSny8xCdKfLLEp0p8usRnSny2xOdKfL7EF0p8scSXSny5xFdKfLXE10p8vcQ3SnyzxLeGD/HtEt8p8d0S3yvx/RI/KPHDEj8q8eMSPynx0xI/K/HzEr8o8csSvyrx6xK/KfHbEr8r8fsSfyjxxxJ/KvHnEn8p8dcSfyvx9xL/KPHPEv8q8e8S/ynx3xL/K3FMiWNLHFLhOBWOW+F4FY5f4QQVTljhRBUOrXDiCodVOEmFk1Y4vMLJKpy8wikqnLLCqSqcusJpKpy2wukqnL7CGSqcscKZKpy5wlkqnLXC2SqcvcI5KpyzwrkqnLvCeSqct8L5Kpy/wgUqXLDChSpcuMJFKly0wsUqXLzCJSqkwiUrXKrCpStcpsJlK1yuwuUrXKHCFStcqcKVK/xjKK5a4WoVrl7hGhWuWeFaFa5d4ToVrlvhehWuX+EGFW5Y4UYVblzhJhVuWuFmFW5e4RYVblnhVhVuXeE2FW5b4XYVbl/hDhXuWOFOFe5c4S4V7lrhbhXuXuEeFe5Z4V4V7l3hPhXuW+F+Fe5f4QEVHljhQRUeXOEhFR5a4WEVHl7hERUeWeFRFR5d4TEVHlvhcRUeX+EJFZ5YoRWeVOHJFZ5S4akVnlbh6RWeUeGZFZ5V4dkVjqjwnArPrfC8Cs+v8IIKL6zwogovrvCSCi+t8LIKL6/wigoHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYVXlnhVRVeXeE1FV5b4XUVXl/hDRXeWOFNFd5c4S0V3lrhbRXeXuEdFd5Z4V0V3l3hPRXeW+F9Fd5f4QMVPljhQxU+XOHICkdVOLrCRyp8tMLHKny8wicqfLLCpyp8usJnKny2wucqfL7CFyp8scKXKny5wlcqfLXC1yp8vcI3KnyzwrcqfLvCdyp8t8L3Kny/wg8q/LDCjyr8uMJPKvy0ws8q/LzCLyr8ssKvKvy6wm8q/LbC7yr8vsIfKvyxwp8q/LnCXyr8tcLfKvz9f88r/LPCvyr8u8J/Kvy3wv8qHFPh2AqH1DhOjePWOF6N49c4QY0T1jhRjUNrnLjGYTVOUuOkNQ6vcbIaJ69xihqnrHGqGqeucZoap61xuhqnr3GGGmescaYaZ65xlhpnrXG2GmevcY4a56xxrhrnrnGeGuetcb4a569xgRoXrHGhGheucZEaF61xsRoXr3GJGqlxyRqXqnHpGpepcdkal6tx+RpXqHHFGleqceUaV6lx1RpXq3H1Gteocc0a16px7RrXqXHdGtercf0aN6hxwxo3qnHjGjepcdMaN6tx8xq3qHHLGreqcesat6lx2xq3q3H7Gneocccad6px5xp3qXHXGnercfca96hxzxr3qnHvGvepcd8a96tx/xoPqPHAGg+q8eAaD6nx0BoPq/HwGo+o8cgaj6rx6BqPqfHYGo+r8fgaT6jxxBqt8aQaT67xlBpPrfG0Gk+v8Ywaz6zxrBrPrnFEjefUeG6N59V4fo0X1HhhjRfVeHGNl9R4aY2X1Xh5jVfUOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/HKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqvHuGu+p8d4a76vx/hofqPHBGh+q8eEaR9Y4qsbRNT5S46M1Plbj4zU+UeOTNT5V49M1PlPjszU+V+PzNb5Q44s1vlTjyzW+UuOrNb5W4+s1vlHjmzW+VePbNb5T47s1vlfj+zV+UOOHNX5U48c1flLjpzV+VuPnNX5R45c1flXj1zV+U+O3NX5X4/c1/lDjjzX+VOPPNf5S4681/lbj7zX+UeOfNf5V4981/lPjvzX+V+OYGsfWOKTBcRoct8HxGhy/wQkanLDBiRoc2uDEDQ5rcJIGJ21weIOTNTh5g1M0OGWDUzU4dYPTNDhtg9M1OH2DMzQ4Y4MzNThzg7M0OGuDszU4e4NzNDhng3M1OHeD8zQ4b4PzNTh/gws0uGCDCzW4cIOLNLhog4s1uHiDSzRIg0s2uFSDSze4TIPLNrhcg8s3uEKDKza4UoMrN7hKg6s2uFqDqze4RoNrNrhWg2s3uE6D6za4XoPrN7hBgxs2uFGDGze4SYObNrhZg5s3uEWDWza4VYNbN7hNg9s2uF2D2ze4Q4M7NrhTgzs3uEuDuza4W4O7N7hHg3s2uFeDeze4T4P7Nrhfg/s3eECDBzZ4UIMHN3hIg4c2eFiDhzd4RINHNnhUg0c3eEyDxzZ4XIPHN3hCgyc2aIMnNXhyg6c0eGqDpzV4eoNnNHhmg2c1eHaDIxo8p8FzGzyvwfMbvKDBCxu8qMGLG7ykwUsbvKzByxu8osFBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32DVzZ4VYNXN3hNg9c2eF2D1zd4Q4M3NnhTgzc3eEuDtzZ4W4O3N3hHg3c2eFeDdzd4T4P3Nnhfg/c3+ECDDzb4UIMPNziywVENjm7wkQYfbfCxBh9v8IkGn2zwqQafbvCZBp9t8LkGn2/whQZfbPClBl9u8JUGX23wtQZfb/CNBt9s8K0G327wnQbfbfC9Bt9v8IMGP2zwowY/bvCTBj9t8LMGP2/wiwa/bPCrBr9u8JsGv23wuwa/b/CHBn9s8KcGf27wlwZ/bfC3Bn9v8I8G/2zwrwb/bvCfBv9t8L8GxzQ4tsEhLY7T4rgtjtfi+C1O0OKELU7U4tAWJ25xWIuTtDhpi8NbnKzFyVucosUpW5yqxalbnKbFaVucrsXpW5yhxRlbnKnFmVucpcVZW5ytxdlbnKPFOVucq8W5W5ynxXlbnK/F+VtcoMUFW1yoxYVbXKTFRVtcrMXFW1yiRVpcssWlWly6xWVaXLbF5VpcvsUVWlyxxZVaXLnFVVpctcXVWly9xTVaXLPFtVpcu8V1Wly3xfVaXL/FDVrcsMWNWty4xU1a3LTFzVrcvMUtWtyyxa1a3LrFbVrctsXtWty+xR1a3LHFnVrcucVdWty1xd1a3L3FPVrcs8W9Wty7xX1a3LfF/Vrcv8UDWjywxYNaPLjFQ1o8tMXDWjy8xSNaPLLFo1o8usVjWjy2xeNaPL7FE1o8sUVbPKnFk1s8pcVTWzytxdNbPKPFM1s8q8WzWxzR4jktntvieS2e3+IFLV7Y4kUtXtziJS1e2uJlLV7e4hUtDloMWgxbjFqMW0xaTFvMWsxbLFosW6xarFtsWmxb7FrsW7yyxatavLrFa1q8tsXrWry+xRtavLHFm1q8ucVbWry1xdtavL3FO1q8s8W7Wry7xXtavLfF+1q8v8UHWnywxYdafLjFkS2OanF0i4+0+GiLj7X4eItPtPhki0+1+HSLz7T4bIvPtfh8iy+0+GKLL7X4couvtPhqi6+1+HqLb7T4Zotvtfh2i++0+G6L77X4fosftPhhix+1+HGLn7T4aYuftfh5i1+0+GWLX7X4dYvftPhti9+1+H2LP7T4Y4s/tfhzi7+0+GuLv7X4e4t/tPhni3+1+HeL/7T4b4v/tTimxbEtDulwnA7H7XC8DsfvcIIOJ+xwog6Hdjhxh8M6nKTDSTsc3uFkHU7e4RQdTtnhVB1O3eE0HU7b4XQdTt/hDB3O2OFMHc7c4SwdztrhbB3O3uEcHc7Z4Vwdzt3hPB3O2+F8Hc7f4QIdLtjhQh0u3OEiHS7a4WIdLt7hEh3S4ZIdLtXh0h0u0+GyHS7X4fIdrtDhih2u1OHKHa7S4aodrtbh6h2u0eGaHa7V4dodrtPhuh2u1+H6HW7Q4YYdbtThxh1u0uGmHW7W4eYdbtHhlh1u1eHWHW7T4bYdbtfh9h3u0OGOHe7U4c4d7tLhrh3u1uHuHe7R4Z4d7tXh3h3u0+G+He7X4f4dHtDhgR0e1OHBHR7S4aEdHtbh4R0e0eGRHR7V4dEdHtPhsR0e1+HxHZ7Q4Ykd2uFJHZ7c4SkdntrhaR2e3uEZHZ7Z4Vkdnt3hiA7P6fDcDs/r8PwOL+jwwg4v6vDiDi/p8NIOL+vw8g6v6HDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd/hlR1e1eHVHV7T4bUdXtfh9R3e0OGNHd7U4c0d3tLhrR3e1uHtHd7R4Z0d3tXh3R3e0+G9Hd7X4f0dPtDhgx0+1OHDHY7scFSHozt8pMNHO3ysw8c7fKLDJzt8qsOnO3ymw2c7fK7D5zt8ocMXO3ypw5c7fKXDVzt8rcPXO3yjwzc7fKvDtzt8p8N3O3yvw/c7/KDDDzv8qMOPO/ykw087/KzDzzv8osMvO/yqw687/KbDbzv8rsPvO/yhwx87/KnDnzv8pcNfO/ytw99HDPGPDv/s8K8O/+7wnw7/7fC/Dsd0OLbDIT2O0+O4PY7X4/g9TtDjhD1O1OPQHifucViPk/Q4aY/De5ysx8l7nKLHKXucqsepe5ymx2l7nK7H6XucoccZe5ypx5l7nKXHWXucrcfZe5yjxzl7nKvHuXucp8d5e5yvx/l7XKDHBXtcqMeFe1ykx0V7XKzHxXtcokd6XLLHpXpcusdlely2x+V6XL7HFXpcsceVely5x1V6XLXH1Xpcvcc1elyzx7V6XLvHdXpct8f1ely/xw163LDHjXrcuMdNety0x8163LzHLXrcssetety6x2163LbH7Xrcvscdetyxx5163LnHXXrctcfdety9xz163LPHvXrcu8d9ety3x/163L/HA3o8sMeDejy4x0N6PLTHw3o8vMcjejyyx6N6PLrHY3o8tsfjejy+xxN6PLFHezypx5N7PKXHU3s8rcfTezyjxzN7PKvHs3sc0eM5PZ7b43k9nt/jBT1e2ONFPV7c4yU9XtrjZT1e3uMVPQ56DHoMe4x6jHtMekx7zHrMeyx6LHuseqx7bHpse+x67Hu8sserery6x2t6vLbH63q8vscberyxx5t6vLnHW3q8tcfbery9xzt6vLPHu3q8u8d7ery3x/t6vL/HB3p8sMeHeny4x5E9jupx9P+xYA5RmB6AspxMPLFtOxXbtm3brlgT28b/2YidYWzbtv3Offf2vhfd59SmBjhigCMHOGqAowc4ZoBjB/jEAJ8c4FMDfHqAzwzw2QE+N8DnB/jCAF8c4EsDfHmArwzw1QG+NsDXB/jGAN8c4FsDfHuA7wzw3QG+N8D3B/jBAD8c4EcD/HiAnwzw0wF+NsDPB/jFAL8c4FcD/HqA3wzw2wF+N8DvB/jDAH8c4E8D/HmAvwzw1wH+NsDfB/jHAP8c4F8D/HuA/wzw3wH+N8AhAY4T4NAAxw1wvADHD3CCACcMcKIAJw5wWICTBDhpgJMFOHmAUwQ4ZYBTBTh1gNMEOG2A0wU4fYAzBDhjgDMFOHOAswQ4a4CzBTh7gHMEOGeAcwU4d4DzBDhvgPMFOH+ACwS4YIALBbhwgIsEuGiAiwW4eIBLBLhkgAS4VIBLB7hMgMsGuFyAywe4QoArBrhSgCsHuEqAqwa4WoCrB7hGgGsGuFaAawe4ToDrBrhegOsHuEGAGwa4UYAbB7hJgJsGuFmAmwe4RYBbBrhVgFsHuE2A2wa4XYDbB7hDgDsGuFOAOwe4S4C7BrhbgLsHuEeAewa4V4B7B7hPgPsGuF+A+wd4QIAHBnhQgAcHeEiAhwZ4WICHB3hEgEcGeFSARwd4TIDHBnhcgMcHeEKAJwZ4UoAGeHKApwR4aoCnBXh6gGcEeGaAZwV4doDnBHhugMMDPC/A8wO8IMALA7wowIsDvCTASwO8LMDLA7wiwCsDvCrAqwO8JsBrA7wuwOsDvCHAGwO8KcCbA7wlwFsDvC3A2wO8I8A7AxwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4V4B3B3hPgPcGeF+A9wf4QIAPBvhQgA8H+EiAjwb4WICPBzgiwJEBjgpwdIBjAhwb4BMBPhngUwE+HeAzAT4b4HMBPh/gCwG+GOBLAb4c4CsBvhrgawG+HuAbAb4Z4FsBvh3gOwG+G+B7Ab4f4AcBfhjgRwF+HOAnAX4a4GcBfh7gFwF+GeBXAX4d4DcBfhvgdwF+H+APAf4Y4E8B/hzgLwH+GuBvAf4e4B8B/hngXwH+HeA/Af4b4H/BuA4JcZwQh4Y4bojjhTh+iBOEOGGIE4U4cYjDQpwkxElDnCzEyUOcIsQpQ5wqxKlDnCbEaUOcLsTpQ5whxBlDnCnEmUOcJcRZQ5wtxNlDnCPEOUOcK8S5Q5wnxHlDnC/E+UNcIMQFQ1woxIVDXCTERUNcLMTFQ1wixCVDJMSlQlw6xGVCXDbE5UJcPsQVQlwxxJVCXDnEVUJcNcTVQlw9xDVCXDPEtUJcO8R1Qlw3xPVCXD/EDULcMMSNQtw4xE1C3DTEzULcPMQtQtwyxK1C3DrEbULcNsTtQtw+xB1C3DHEnULcOcRdQtw1xN1C3D3EPULcM8S9Qtw7xH1C3DfE/ULcP8QDQjwwxINCPDjEQ0I8NMTDQjw8xCNCPDLEo0I8OsRjQjw2xONCPD7EE0I8McSTQjTEk0M8JcRTQzwtxNNDPCPEM0M8K8SzQzwnxHNDHB7ieSGeH+IFIV4Y4kUhXhziJSFe+n/9y8PxhwwZgleGeFWIV4d4TYjXhnhdiNeHeEOIN4Z4U4g3h3hLiLeGeFuIt4d4R4h3hjgIMQgxDDEKMQ4xCTENMQsxD7EIsQyxCrEOsQmxDbELsQ/xrhDvDvGeEO8N8b4Q7w/xgRAfDPGhEB8O8ZEQHw3xsRAfD3FEiCNDHBXi6BDHhDg2xCdCfDLEp0J8OsRnQnw2xOdCfD7EF0J8McSXQnw5xFdCfDXE10J8PcQ3QnwzxLdCfDvEd0J8N8T3Qnw/xA9C/DDEj0L8OMRPQvw0xM9C/DzEL0L8MsSvQvw6xG9C/DbE70L8PsQfQvwxxJ9C/DnEX0L8NcTfQvw9xD9C/DPEv0L8O8R/Qvw3xP9CHBLhOBEOjXDcCMeLcPwIJ4hwwggninDiCIdFOEmEk0Y4WYSTRzhFhFNGOFWEU0c4TYTTRjhdhNNHOEOEM0Y4U4QzRzhLhLNGOFuEs0c4R4RzRjhXhHNHOE+E80Y4X4TzR7hAhAtGuFCEC0e4SISLRrhYhItHuESES0ZIhEtFuHSEy0S4bITLRbh8hCtEuGKEK0W4coSrRLhqhKtFuHqEa0S4ZoRrRbh2hOtEuG6E60W4foQbRLhhhBtFuHGEm0S4aYSbRbh5hFtEuGWEW0W4dYTbRLhthNtFuH2EO0S4Y4Q7RbhzhLtEuGuEu0W4e4R7RLhnhHtFuHeE+0S4b4T7Rbh/hAdEeGCEB0V4cISHRHhohIdFeHiER0R4ZIRHRXh0hMdEeGyEx0V4fIQnRHhihCdFaIQnR3hKhKdGeFqEp0d4RoRnRnhWhGdHeE6E50Y4PMLzIjw/wgsivDDCiyK8OMJLIrw0wssivDzCKyK8MsKrIrw6wmsivDbC6yK8PsIbIrwxwpsivDnCWyK8NcLbIrw9wjsivDPCQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hHdFeHeE90R4b4T3RXh/hA9E+GCED0X4cISPRPhohI9F+HiEIyIcGeGoCEdHOCbCsRE+EeGTET4V4dMRPhPhsxE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZcRfhXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxH+F+GQGMeJcWiM48Y4XozjxzhBjBPGOFGME8c4LMZJYpw0xslinDzGKWKcMsapYpw6xmlinDbG6WKcPsYZYpwxxplinDnGWWKcNcbZYpw9xjlinDPGuWKcO8Z5Ypw3xvlinD/GBWJcMMaFYlw4xkViXDTGxWJcPMYlYlwyRmJcKsalY1wmxmVjXC7G5WNcIcYVY1wpxpVjXCXGVWNcLcbVY1wjxjVjXCvGtWNcJ8Z1Y1wvxvVj3CDGDWPcKMaNY9wkxk2HDhnyP79tHuMWMW4Z41Yxbh3jNjFuG+N2MW4f4w4x7hjjTjHuHOMuMe4a424x7h7jHjHuGeNeMe4d4z4x7hvjfjHuH+MBMR4Y40ExHhzjITEeGuNhMR4e4xExHhnjUTEeHeMxMR4b43ExHh/jCTGeGONJMRrjyTGeEuOpMZ4W4+kxnhHjmTGeFePZMZ4T47kxDo/xvBjPj/GCGC+M8aIYL47xkhgvjfGyGC+P8YoYr4zxqhivjvGaGK+N8boYr4/xhhhvjPGmGG+O8ZYYb43xthhvj/GOGO+McRBjEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH+NdMd4d4z0x3hvjfTHeH+MDMT4Y40MxPhzjIzE+GuNjMT4e44gYR8Y4KsbRMY6JcWyMT8T4ZIxPxfh0jM/E+GyMz8X4fIwvxPhijC/F+HKMr8T4aoyvxfh6jG/E+GaMb8X4dozvxPhujO/F+H6MH8T4YYwfxfhxjJ/E+GmMn8X4eYxfxPhljF/F+HWM38T4bYzfxfh9jD/E+GOMP8X4c4y/xPhrjL/F+HuMf8T4Z4x/xfh3jP/E+G+M/8U4JMFxEhya4LgJjpfg+AlOkOCECU6U4MQJDktwkgQnTXCyBCdPcIoEp0xwqgSnTnCaBKdNcLoEp09whgRnTHCmBGdOcJYEZ01wtgRnT3COBOdMcK4E505wngTnTXC+BOdPcIEEF0xwoQQXTnCRBBdNcLEEF09wiQSXTJAEl0pw6QSXSXDZBJdLcPkEV0hwxQRXSnDlBFdJcNUEV0tw9QTXSHDNBNdKcO0E10lw3QTXS3D9BDdIcMMEN0pw4wQ3SXDTBDdLcPMEt0hwywS3SnDrBLdJcNsEt0tw+wR3SHDHBHdKcOcEd0lw1wR3S3D3BPdIcM8E90pw7wT3SXDfBPdLcP8ED0jwwAQPSvDgBA9J8NAED0vw8ASPSPDIBI9K8OgEj0nw2ASPS/D4BE9I8MQET0rQBE9O8JThwzw1wdMSPD3BMxI8M8GzEjw7wXMSPDfB4Qmel+D5CV6Q4IUJXpTgxQlekuClCV6W4OUJXpHglQleleDVCV6T4LUJXpfg9QnekOCNCd6U4M0J3pLgrQneluDtCd6R4J0JDhIMEgwTjBKME0wSTBPMEswTLBIsE6wSrBNsEmwT7BLsE7wrwbsTvCfBexO8L8H7E3wgwQcTfCjBhxN8JMFHE3wswccTHJHgyARHJTg6wTEJjk3wiQSfTPCpBJ9O8JkEn03wuQSfT/CFBF9M8KUEX07wlQRfTfC1BF9P8I0E30zwrQTfTvCdBN9N8L0E30/wgwQ/TPCjBD9O8JMEP03wswQ/T/CLBL9M8KsEv07wmwS/TfC7BL9P8IcEf0zwpwR/TvCXBH9N8LcEf0/wjwT/TPCvBP9O8J8E/03wvwSHpDhOikNTHDfF8VIcP8UJUpwwxYlSnDjFYSlOkuKkKU6W4uQpTpHilClOleLUKU6T4rQpTpfi9CnOkOKMKc6U4swpzpLirCnOluLsKc6R4pwpzpXi3CnOk+K8Kc6X4vwpLpDigikulOLCKS6S4qIpLpbi4ikukeKSKZLiUikuneIyKS6b4nIpLp/iCimumOJKKa6c4ioprpriaimunuIaKa6Z4loprp3iOimum+J6Ka6f4gYpbpjiRilunOImKW6a4mYpbp7iFilumeJWKW6d4jYpbpvidilun+IOKe6Y4k4p7pziLinumuJuKe6e4h4p7pniXinuneI+Ke6b4n4p7p/iASkemOJBKR6c4iEpHpriYSkenuIRKR6Z4lEpHp3iMSkem+JxKR6f4gkpnpjiSSma4skpnpLiqSmeluLpKZ6R4pkpnpXi2Smek+K5KQ5P8bwUz0/xghQvTPGiFC9O8ZIUL03xshQvT/GKFK9M8aoUr07xmhSvTfG6FK9P8YYUb0zxphRvTvGWFG9N8bYUb0/xjhTvTHGQYpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp/iXSneneI9Kd6b4n0p3p/iAyk+mOJDKT6c4iMpPpriYyk+nuKIFEemOCrF0SmOSXFsik+k+GSKT6X4dIrPpPhsis+l+HyKL6T4Yoovpfhyiq+k+GqKr6X4eopvpPhmim+l+HaK76T4borvpfh+ih+k+GGKH6X4cYqfpPhpip+l+HmKX6T4ZYpfpfh1it+k+G2K36X4fYo/pPhjij+l+HOKv6T4a4q/pfh7in+k+GeKf6X4d4r/pPhviv+lOCTDcTIcmuG4GY6X4fgZTpDhhBlOlOHEGQ7LcJIMJ81wsgwnz3CKDKfMcKoMp85wmgynzXC6DKfPcIYMZ8xwpgxnznCWDGfNcLYMZ89wjgznzHCuDOfOcJ4M581wvgznz3CBDBfMcKEMF85wkQwXzXCxDBfPcIkMl8yQDJfKcOkMl8lw2QyXy3D5DFfIcMUMV8pw5QxXyXDVDFfLcPUM18hwzQzXynDtDNfJcN0M18tw/Qw3yHDDDDfKcOMMN8lw0ww3y3DzDLfIcMsMt8pw6wy3yXDbDLfLcPsMd8hwxwx3ynDnDHfJcNcMd8tw9wz3yHDPDPfKcO8M98lw32zo//dp+2d4QIYHZnhQhgdneEiGh2Z4WIaHZ3hEhkdmeFSGR2d4TIbHZnhchsdneEKGJ2Z4UoZmeHKGp2R4aoanZXh6hmdkeGaGZ2V4dobnZHhuhsMzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7MxxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gd4V4Z3Z3hPhvdmeF+G92f4QIYPZvhQhg9n+EiGj2b4WIaPZzgiw5EZjspwdIZjMhyb4RMZPpnhUxk+neEzGT6b4XMZPp/hCxm+mOFLGb6c4SsZvprhaxm+nuEbGb6Z4VsZvp3hOxm+m+F7Gb6f4QcZfpjhRxl+nOEnGX6a4WcZfp7hFxl+meFXGX6d4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/Gf6b4X8ZDslxnByH5jhujuPlOH6OE+Q4YY4T5ThxjsNynCTHSXOcLMfJc5wixylznCrHqXOcJsdpc5wux+lznCHHGXOcKceZc5wlx1lznC3H2XOcI8c5c5wrx7lznCfHeXOcL8f5c1wgxwVzXCjHhXNcJMdFc1wsx8VzXCLHJXMkx6VyXDrHZXJcNsflclw+xxVyXDHHlXJcOcdVclw1x9VyXD3HNXJcM8e1clw7x3VyXDfH9XJcP8cNctwwx41y3DjHTXLcNMfNctw8xy1y3DLHrXLcOsdtctw2x+1y3D7HHXLcMcedctw5x11y3DXH3XLcPcc9ctwzx71y3DvHfXLcN8f9ctw/xwNyPDDHg3I8OMdDcjw0x8NyPDzHI3I8Msejcjw6x2NyPDbH43I8PscTcjwxx5NyNMeTczwlx1NzPC3H03M8I8czczwrx7NzPCfHc3McnuN5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjIMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+x7tyvDvHe3K8N8f7crw/xwdyfDDHh3J8OMdHcnw0x8dyfDzHETmOzHFUjqNzHJPj2ByfyPHJHJ/K8ekcn8nx2Ryfy/H5HF/I8cUcX8rx5RxfyfHVHF/L8fUc38jxzRzfyvHtHN/J8d0c38vx/Rw/yPHDHD/K8eMcP8nx0xw/y/HzHL/I8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/yvHnHH/J8dccf8vx9xz/yPHPHP/K8e8c/8nx3xz/y3FIgeMUOLTAcQscr8DxC5ygwAkLnKjAiQscVuAkBU5a4GQFTl7gFAVOWeBUBU5d4DQFTlvgdAVOX+AMBc5Y4EwFzlzgLAXOWuBsBc5e4BwFzlngXAXOXeA8Bc5b4HwFzl/gAgUuWOBCBS5c4CIFLlrgYgUuXuASBS5ZIAUuVeDSBS5T4LIFLlfg8gWuUOCKBa5U4MoFrlLgqgWuVuDqBa5R4JoFrlXg2gWuU+C6Ba5X4PoFblDghgVuVODGBW5S4KYFblbg5gVuUeCWBW5V4NYFblPgtgVuV+D2Be5Q4I4F7lTgzgXuUuCuBe5W4O4F7lHgngXuVeDeBe5T4L4F7lfg/gUeUOCBBR5U4MEFHlLgoQUeVuDhBR5R4JEFHlXg0QUeU+CxBR5X4PEFnlDgiQWeVKAFnlzgKQWeWuBpBZ5e4BkFnlngWQWeXeA5BZ5b4PACzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAgcFBgWGBUYFxgUmBaYFZgXmBRYFlgUTDhkyxLrApsC2wK7AvsC7Cry7wHsKvLfA+wq8v8AHCnywwIcKfLjARwp8tMDHCny8wBEFjixwVIGjCxxT4NgCnyjwyQKfKvDpAp8p8NkCnyvw+QJfKPDFAl8q8OUCXynw1QJfK/D1At8o8M0C3yrw7QLfKfDdAt8r8P0CPyjwwwI/KvDjAj8p8NMCPyvw8wK/KPDLAr8q8OsCvynw2wK/K/D7An8o8McCfyrw5wJ/KfDXAn8r8PcC/yjwzwL/KvDvAv8p8N8C/ytwSInjlDi0xHFLHK/E8UucoMQJS5yoxIlLHFbiJCVOWuJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlLl7iEiUuWSIlLlXi0iUuU+KyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJZ5Q4oklnlSiJZ5c4iklnlriaSWeXuIZJZ5Z4lklnl3iOSWeW+LwEs8r8fwSLyjxwhIvKvHiEi8p8dISLyvx8hKvKPHKEq8q8eoSrynx2hKvK/H6Em8o8cYSbyrx5hJvKfHWEm8r8fYS7yjxzhIHJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYl3lXi3SXeU+K9Jd5X4v0lPlDigyU+VOLDJT5S4qMlPlbi4yWOKHFkiaNKHF3imBLHlvhEiU+W+FSJT5f4TInPlvhcic+X+EKJL5b4Uokvl/hKia+W+FqJr0885H9T4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iFyV+WeJXJX5d4jclflvidyV+X+IPJf5Y4k8l/lziLyX+WuJvJf5e4h8l/lniXyX+XeI/Jf5b4n8lDqlwnAqHVjhuheNVOH6FE1Q4YYUTVThxhcMqnKTCSSucrMLJK5yiwikrnKrCqSucpsJpK5yuwukrnKHCGSucqcKZK5ylwlkrnK3C2Suco8I5K5yrwrkrnKfCeSucr8L5K1ygwgUrXKjChStcpMJFK1yswsUrXKLCJSukwqUqXLrCZSpctsLlKly+whUqXLHClSpcucJVKly1wtUqXL3CNSpcs8K1Kly7wnUqXLfC9Spcv8INKtywwo0q3LjCTSrctMLNKty8wi0q3LLCrSrcusJtKty2wu0q3L7CHSrcscKdKty5wl0q3LXC3SrcvcI9Ktyzwr0q3LvCfSrct8L9Kty/wgMqPLDCgyo8uMJDKjy0wsMqPLzCIyo8ssKjKjy6wmMqPLbC4yo8vsITKjyxwpMqtMKTKzylwlMrPK3C0ys8o8IzKzyrwrMrPKfCcyscXuF5FZ5f4QUVXljhRRVeXOElFV5a4WUVXl7hFRVeWeFVFV5d4TUVXlvhdRVeX+ENFd5Y4U0V3lzhLRXeWuFtFd5e4R0V3lnhoMKgwrDCqMK4wqTCtMKswrzCosKywqrCusKmwrbCrsK+wrsqvLvCeyq8t8L7Kry/wgcqfLDChyp8uMJHKny0wscqfLzCERWOrHBUhaMrHFPh2AqfqPDJCp+q8OkKn6nw2Qqfq/D5Cl+o8MUKX6rw5QpfqfDVCl+r8PUK36jwzQrfqvDtCt+p8N0K36vw/Qo/qPDDCj+q8OMKP6nw0wo/q/DzCr+o8MsKv6rw6wq/qfDbCr+r8PsKf6jwxwp/qvDnCn+p8NcKf6vw9wr/qPDPCv+q8O8K/6nw3wr/q3BIjePUOLTGcWscr8bxa5ygxglrnKjGiWscVuMkNU5a42Q1Tl7jFDVOWeNUNU5d4zQ1TlvjdDVOX+MMNc5Y40w1zlzjLDXOWuNsNc5e4xw1zlnjXDXOXeM8Nc5b43w1zl/jAjUuWONCNS5c4yI1LlrjYjUuXuMSNS5ZIzUuVePSNS5T47I1Llfj8jWuUOOKNa5U48o1rlLjqjWuVuPqNa5R45o1rlXj2jWuU+O6Na5X4/o1blDjhjVuVOPGNW5S46Y1blbj5jVuUeOWNW5V49Y1blPjtjVuV+P2Ne5Q44417lTjzjXuUuOuNe5W4+417lHjnjXuVePeNe5T47417lfj/jUeUOOBNR5U48E1HlLjoTUeVuPhNR5R45E1HlXj0TUeU+OxNR5X4/E1nlDjiTWeVKM1nlzjKTWeWuNpNZ5e4xk1nlnjWTWeXeM5NZ5b4/Aaz6vx/BovqPHCGi+q8eIaL6nx0hovq/HyGq+o8coar6rx6hqvqfHaGq+r8foab6jxxhpvqvHmGm+p8dYab6vx9hrvqPHOGgc1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY19jXeVePdNd5T47013lfj/TU+UOODNT5U48M1PlLjozU+VuPjNY6ocWSNo2ocXeOYGsfW+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb/X+EeNf9b4V41/1/hPjf/W+F+NQxocp8GhDY7b4HgNjt/gBA1O2OBEDU7c4LAGJ2lw0gYna3DyBqdocMoGp2pw6ganaXDaBqdrcPoGZ2hwxgZnanDmBmdpcNYGZ2tw9gbnaHDOBudqcO4G52lw3gbna3D+BhdocMEGF2pw4QYXaXDRBhdrcPEGl2hwyQZpcKkGl25wmQaXbXC5BpdvcIUGV2xwpQZXbnCVBldtcLUGV29wjQbXbHCtBtducJ0G121wvQbXb3CDBjdscKMGN25wkwY3bXCzBjdvcIsGt2xwqwa3bnCbBrdtcLsGt29whwZ3bHCnBnducJcGd21wtwZ3b3CPBvdscK8G925wnwb3bXC/Bvdv8IAGD2zwoAYPbvCQBg9t8LAGD2/wiAaPbPCoBo9u8JgGj23wuAaPb/CEBk9s8KQGbfDkBk9p8NQGT2vw9AbPaPDMBs9q8OwGz2nw3AaHN3heg+c3eEGDFzZ4UYMXN3hJg5c2eFmDlzd4RYNXNnhVg1c3eE2D1zZ4XYPXN3hDgzc2eFODNzd4S4O3Nnhbg7c3eEeDdzY4aDBoMGwwajBuMGkwbTBrMG+waLBssGqwbrBpsG2wa7Bv8K4G727wngbvbfC+Bu9v8IEGH2zwoQYfbvCRBh9t8LEGH29wRIMjGxzV4OgGxzQ4tsEnGnyywacafLrBZxp8tsHnGny+wRcafLHBlxp8ucFXGny1wdcafL3BNxp8s8G3Gny7wXcafLfB9xp8v8EPGvywwY8a/LjBTxr8tMHPGvy8wS8a/LLBrxr8usFvGvy2we8a/L7BHxr8scGfGvy5wV8a/LXB3xr8vcE/Gvyzwb8a/LvBfxr8t8H/GhzS4jgtDm1x3BbHa3H8FidoccIWJ2px4haHtThJi5O2OFmLk7c4RYtTtjhVi1O3OE2L07Y4XYvTtzhDizO2OFOLM7c4S4uztjhbi7O3OEeLc7Y4V4tztzhPi/O2OF+L87e4QIsLtrhQiwu3uEiLi7a4WIuLt7hEi0u2SItLtbh0i8u0uGyLy7W4fIsrtLhiiyu1uHKLq7S4aourtbh6i2u0uGaLa7W4dovrtLhui+u1uH6LG7S4YYsbtbhxi5u0uGmLm7W4eYtbtLhli1u1uHWL27S4bYvbtbh9izu0uGOLO7W4c4u7tLhri7u1uHuLe7S4Z4t7tbh3i/u0uG+L+7W4f4sHtHhgiwe1eHCLh7R4aIuHtXh4i0e0eGSLR7V4dIvHtHhsi8e1eHyLJ7R4YosntWiLJ7d4Sountnhai6e3eEaLZ7Z4Votnt3hOi+e2OLzF81o8v8ULWrywxYtavLjFS1q8tMXLWry8xStavLLFq1q8usVrWry2xetavL7FG1q8scWbWry5xVtavLXF21q8vcU7WryzxUGLQYthi1GLcYtJi2mLWYt5i0WLZYtVi3WLTYtti12LfYt3tXh3i/e0eG+L97V4f4sPtPhgiw+1+HCLj7T4aIuPtfh4iyNaHNniqBZHtzimxbEtPtHiky0+1f4vL8+0+GyLz7X4fIsvtPhiiy+1+HKLr7T4aouvtfh6i2+0+GaLb7X4dovvtPhui++1+H6LH7T4YYsftfhxi5+0+GmLn7X4eYtftPhli1+1+HWL37T4bYvftfh9iz+0+GOLP7X4c4u/tPhri7+1+HuLf7T4Z4t/tfh3i/+0+G+L//3Png7H6XBoh+N2OF6H43c4QYcTdjhRhxN3OKzDSTqctMPJOpy8wyk6nLLDqTqcusNpOpy2w+k6nL7DGTqcscOZOpy5w1k6nLXD2TqcvcM5Opyzw7k6nLvDeTqct8P5Opy/wwU6XLDDhTpcuMNFOly0w8U6XLzDJTpcskM6XKrDpTtcpsNlO1yuw+U7XKHDFTtcqcOVO1ylw1U7XK3D1Ttco8M1O1yrw7U7XKfDdTtcr8P1O9ygww073KjDjTvcpMNNO9ysw8073KLDLTvcqsOtO9ymw2073K7D7TvcocMdO9ypw5073KXDXTvcrcPdO9yjwz073KvDvTvcp8N9O9yvw/07PKDDAzs8qMODOzykw0M7PKzDwzs8osMjOzyqw6M7PKbDYzs8rsPjOzyhwxM7PKlDOzy5w1M6PLXD0zo8vcMzOjyzw7M6PLvDczo8t8PhHZ7X4fkdXtDhhR1e1OHFHV7S4aUdXtbh5R1e0eGVHV7V4dUdXtPhtR1e1+H1Hd7Q4Y0d3tThzR3e0uGtHd7W4e0d3tHhnR0OOgw6DDuMOow7TDpMO8w6zDssOiw7rDqsO2w6bDvsOuw7vKvDuzu8p8N7O7yvw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzsc0eHIDkd1OLrDMR2O7fCJDp/s8KkOn+7wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/v8IsOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDv/s8K8O/+7wnw7/7fC/Dof0OE6PQ3sct8fxehy/xwl6nLDHiXqcuMdhPU7S46Q9Ttbj5D1O0eOUPU7V49Q9TtPjtD1O1+P0Pc7Q44w9ztTjzD3O0uOsPc7W4+w9ztHjnD3O1ePcPc7T47w9ztfj/D0u0OOCPS7U48I9LtLjoj0u1uPiPS7R45I90uNSPS7d4zI9Ltvjcj0u3+MKPa7Y40o9rtzjKj2u2uNqPa7e4xo9rtnjWj2u3eM6Pa7b43o9rt/jBj1u2ONGPW7c4yY9btrjZj1u3uMWPW7Z41Y9bt3jNj1u2+N2PW7f4w497tjjTj3u3OMuPe7a42497t7jHj3u2eNePe7d4z497tvjfj3u3+MBPR7Y40E9HtzjIT0e2uNhPR7e4xE9HtnjUT0e3eMxPR7b43E9Ht/jCT2e2ONJPdrjyT2e0uOpPZ7W4+k9ntHjmT2e1ePZPZ7T47k9Du/xvB7P7/GCHi/s8aIeL+7xkh4v7fGyHi/v8Yoer+zxqh6v7vGaHq/t8boer+/xhh5v7PGmHm/u8ZYeb+3xth5v7/GOHu/scdBj0GPYY9Rj3GPSY9pj1mPeY9Fj2WPVY91j02PbY9dj3+NdPd7d4z093tvjfT3e3+MDPT7Y40M9PtzjIz0+2uNjPT7e44geR/Y4qsfRPY7pcWzP/2PJnrs4Lxynje9WW222bdeVbdu2bV/Ztm27z9tGto3NNrZa3Od77t88hnmd+WN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwMcMcDPBvj5AL8Y4JcD/GqAXw/wmwF+O8DvBvj9AH8Y4I8D/GmAPw/wlwH+OsDfBvj7AP8Y4J8D/GuAfw9w5AD/GeC/A/xvgKMGOHqAYwY4doBDAhwa4DgBjhvgeAEOC3D8ACcIcMIAhwc4UYATBzhJgJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WICLB7hEgAS4ZIBLBbh0gMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyAJwR4YoAGeFKAJwd4SoCnBnhagKcHeEaAZwZ4VoBnB3hOgOcGeF6A5wd4QYAXBnhRgBcHeEmAlwZ4WYCXB3hFgFcGeFWAVwd4TYDXBnhdgNcHeEOANwZ4U4A3B3hLgLcGeFuAtwd4R4B3BnhXgHcHeE+A9wZ4X4D3B/hAgA8G+FCADwf4SICPBvhYgI//r6P/d7MNAgwCDAOMAowDTAJMA8wCzAMsAiwDrAKsA2wCbAPsAuwDfCrApwN8JsBnA3wuwOcDfCHAFwN8KcCXA3wlwFcDfC3A1wN8I8A3A3wrwLcDfCfAdwN8L8D3A/wgwA8D/CjAjwP8JMBPAxwR4GcBfh7gFwF+GeBXAX4d4DcBfhvgdwF+H+APAf4Y4E8B/hzgLwH+GuBvAf4e4B8B/hngXwH+HeDIAP8J8N8A/wtwVICjAxwT4NgAh4Q4NMRxQhw3xPFCHBbi+CFOEOKEIQ4PcaIQJw5xkhAnDXGyECcPcYoQpwxxqhCnDnGaEKcNcboQpw9xhhBnDHGmEGcOcZYQZw1xthBnD3GOEOcMca4Q5w5xnhDnDXG+EOcPcYEQFwxxoRAXDnGREBcNcbEQFw9xiRAJcckQlwpx6RCXCXHZEJcLcfkQVwhxxRBXCnHlEFcJcdUQVwtx9RDXCHHNENcKce0Q1wlx3RDXC3H9EDcIccMQNwpx4xA3CXHTEDcLcfMQtwhxyxC3CnHrELcJcdsQtwtx+xB3CHHHEHcKcecQdwlx1xB3C3H3EPcIcc8Q9wpx7xD3CXHfEPcLcf8QDwjxwBAPCvHgEA8J8dAQDwvx8BCPCPHIEI8K8egQjwnx2BCPC/H4EE8I8cQQDfGkEE8O8ZQQTw3xtBBPD/GMEM8M8awQzw7xnBDPDfG8EM8P8YIQLwzxohAvDvGSEC8N8bIQLw/xihCvDPGqEK8O8ZoQrw3xuhCvD/GGEG8M8aYQbw7xlhBvDfG2EG8P8Y4Q7wzxrhDvDvGeEO8N8b4Q7w/xgRAfDPGhEB8O8ZEQHw3xsRAfD/GJEJ8McRBiEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH+JTIT4d4jMhPhvicyE+H+ILIb4Y4kshvhziKyG+GuJrIb4e4hshvhniWyG+HeI7Ib4b4nshvh/iByF+GOJHIX4c4ichfhriiBA/C/HzEL8I8csQvwrx6xC/CfHbEL8L8fsQfwjxxxB/CvHnEH8J8dcQfwvx9xD/CPHPEP8K8e8QR4b4T4j/hvhfiKNCHB3imBDHhjgkwqERjhPhuBGOF+GwCMePcIIIJ4xweIQTRThxhJNEOGmEk0U4eYRTRDhlhFNFOHWE00Q4bYTTRTh9hDNEOGOEM0U4c4SzRDhrhLNFOHuEc0Q4Z4RzRTh3hPNEOG+E80U4f4QLRLhghAtFuHCEi0S4aISLRbh4hEtESIRLRrhUhEtHuEyEy0a4XITLR7hChCtGuFKEK0e4SoSrRrhahKtHuEaEa0a4VoRrR7jOsP8bkwjXj3CDCDeMcKMIN45wkwg3jXCzCDePcIsIt4xwqwi3jnCbCLeNcLsIt49whwh3jHCnCHeOcJcId41wtwh3j3CPCPeMcK8I945wnwj3jXC/CPeP8IAID4zwoAgPjvCQCA+N8LAID4/wiAiPjPCoCI+O8JgIj43wuAiPj/CECE+M0AhPivDkCE+J8NQIT4vw9AjPiPDMCM+K8OwIz4nw3AjPi/D8CC+I8MIIL4rw4ggvifDSCC+L8PIIr4jwygivivDqCK+J8NoIr4vw+ghviPDGCG+K8OYIb4nw1ghvi/D2CO+I8M4I74rw7gjvifDeCO+L8P4IH4jwwQgfivDhCB+J8NEIH4vw8QifiPDJCAcRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hE+FeHTET4T4bMRPhfh8xG+EOGLEb4U4csRvhLhqxG+FuHrEb4R4ZsRvhXh2xG+E+G7Eb4X4fsRfhDhhxF+FOHHEX4S4acRjojwswg/j/CLCL+M8KsIv47wmwi/jfC7CL+P8IcIf4zwpwh/jvCXCH+N8LcIf4/wjwj/jPCvCP+OcGSE/0T4b4T/RTgqwtERjolwbIRDYhwa4zgxjhvjeDEOi3H8mJFj/38cHuNEMU4c4yQxThrjZDFOHuMUMU4Z41QxTh3jNDFOG+N0MU4f4wwxzhjjTDHOHOMsMc4a42wxzh7jHDHOGeNcMc4d4zwxzhvjfDHOH+MCMS4Y40IxLhzjIjEuGuNiMS4e4xIxEuOSMS4V49IxLhPjsjEuF+PyMa4Q44oxrhTjyjGuEuOqMa4W4+oxrhHjmjGuFePaMa4T47oxrhfj+jFuEOOGMW4U48YxbhLjpjFuFuPmMW4R45YxbhXj1jFuE+O2MW4X4/Yx7hDjjjHuFOPOMe4S464x7hbj7jHuEeOeMe4V494x7hPjvjHuF+P+MR4Q44ExHhTjwTEeEuOhMR4W4+ExHhHjkTEeFePRMR4T47ExHhfj8TGeEOOJMRrjSTGeHOMpMZ4a42kxnh7jGTGeGeNZMZ4d4zkxnhvjeTGeH+MFMV4Y40UxXhzjJTFeGuNlMV4e4xUxXhnjVTFeHeM1MV4b43UxXh/jDTHeGONNMd4c4y0x3hrjbTHeHuMdMd4Z410x3h3jPTHeG+N9Md4f4wMxPhjjQzE+HOMjMT4a42MxPh7jEzE+GeMgxiDGMMYoxjjGJMY0xizGPMYixjLGKsY6xibGNsYuxj7Gp2J8OsZnYnw2xudifD7GF2J8McaXYnw5xldifDXG12J8PcY3YnwzxrdifDvGd2J8N8b3Ynw/xg9i/DDGj2L8OMZPYvw0xhExfhbj5zF+EeOXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzH+EuOvMf4W4+8x/hHjnzH+FePfMY6M8Z8Y/43xvxhHxTg6xjExjo1xSIJDExwnwXETHC/BYQmOn+AECU6Y4PAEJ0pw4gQnSXDSBCdLcPIEp0hwygSnSnDqBKdJcNoEp0tw+gRnSHDGBGdKcOYEZ0lw1gRnS3D2BOdIcM4E50pw7gTnSXDeBOdLcP4EF0hwwQQXSnDhBBdJcNEEF0tw8QSXSJAEl0xwqQSXTnCZBJdNcLkEl09whQRXTHClBFdOcJUEV01wtQRXT3CNBNdMcK0E105wnQTXTXC9BNdPcIMEN0xwowQ3TnCTBDdNcLMEN09wiwS3THCrBLdOcJsEt01wuwS3T3CHBHdMcKcEd05wlwR3TXC3BHdPcI8E90xwrwT3TnCfBPdNcL8E90/wgAQPTPCgBA9O8JAED03wsAQPT/CIBI9M8KgEj07wmASPTfC4BI9P8IQET0zQBE9K8OQET0nw1ARPS/D0BM9I8MwEz0rw7ATPSfDcBM9L8PwEL0jwwgQvSvDiBC9J8NIEL0vw8gSvSPDKBK9K8OoEr0nw2gSvS/D6BG9I8MYEb0rw5gRvSfDWBG9L8PYE70jwzgTvSvDuBO9J8N4E70vw/gQfSPDBBB9K8OEEH0nw0QQfS/DxBJ9I8MkEBwkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn2CT6V4NMJPpPgswk+l+DzCb6Q4IsJvpTgywm+kuCrCb6W4OsJvpHgmwm+leDbCb6T4LsJvpfg+wl+kOCHCX6U4McJfpLgpwmOSPCzBD9P8IsEv0zwqwS/TvCbBL9N8LsEv0/whwR/TPCnBH9O8JcEf03wtwR/T/CPBP9M8K8E/05wZIL/JPhvgv8lOCrB0QmOSXBsgkNSHJriOCmOm+J4KQ5LcfwUJ0hxwhSHpzhRihOnOEmKk6Y4WYqTpzhFilOmOFWKU6c4TYrTpjhditOnOEOKM6Y4U4ozpzhLirOmOFuKs6c4R4pzpjhXinOnOE+K86Y4X4rzp7hAigumuFCKC6e4SIqLprhYiounuESKpLhkikuluHSKy6S4bIrLpbh8iiukuGKKK6W4coqrpLhqiquluHqKa6S4Zoprpbh2iuukuG6K66W4foobpLhhihuluHGKm6S4aYqbpbh5ilukuGWKW6W4dYrbpLhtituluH2KO6S4Y4o7pbhzirukuGuKu6W4e4p7pLhninuluHeK+6S4b4r7pbh/igekeGCKB6V4cIqHpHhoioeleHiKR6R4ZIpHpXh0isekeGyKx6V4fIonpHhiiqZ4Uoonp3hKiqemeFqKp6d4RopnpnhWimeneE6K56Z4Xornp3hBihemeFGKF6d4SYqXpnhZipeneEWKV6Z4VYpXp3hNitemeF2K16d4Q4o3pnhTijeneEuKt6Z4W4q3p3hHinemeFeKd6d4T4r3pnhfiven+ECKD6b4UIoPp/hIio+m+FiKj6f4RIpPpjhIMUgxTDFKMU4xSTFNMUsxT7FIsUyxSrFOsUmxTbFLsU/xqRSfTvGZFJ9N8bkUn0/xhRRfTPGlFF9O8ZUUX03xtRRfT/GNFN9M8a0U307xnRTfTfG9FN9P8YMUP0zxoxQ/TvGTFD9NcUSKn6X4eYpfpPhlil+l+HWK36T4bYrfpfh9ij+k+GOKP6X4c4q/pPhrir+l+HuKf6T4Z4p/pfh3iiNT/CfFf1P8L8VRKY5OcUyKY1MckuHQDMfJcNwMx8twWIbjZzhBhhNmODzDiTKcOMNJMpw0w8kynDzDKTKcMsOpMpw6w2kynDbD6TKcPsMZMpwxw5kynDnDWTKcNcPZMpw9wzkynDPDuTKcO8N5Mpw3w/kynD/DBTJcMMOFMlw4w0UyXDTDxTJcPMMlMiTDJTNcKsOlM1wmw2UzXC7D5TNcIcMVM1wpw5UzXCXDVTNcLcPVM1wjwzUzXCvDtTNcJ8N1M1wvw/Uz3CDDDTPcKMONM9wkw00z3CzDzTPcIsMtM9wqw60z3CbDbTPcLsPtM9whwx0z3CnDnTPcJcNdM9wtw90z3CPDPTPcK8O9M9wnw30z3C/D/TM8IMMDMzwow4MzPCTDQzM8LMPDMzwiwyMzPCrDozM8JsNjMzwuw+MzPCHDEzM0w5MyPDnDUzI8NcPTMjw9wzMyPDPDszI8O8NzMjw3w/MyPD/DCzK8MMOLMrw4w0syvDTDyzK8PMMrMrwyw6syvDrDazK8NsPrMrw+wxsyvDHDmzK8OcNbMrw1w9syvD3DOzK8M8O7Mrw7w3syvDfD+zK8P8MHMnwww4cyfDjDRzJ8NMPHMnw8wycyfDLDQYZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ9hk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYYjMvwsw88z/CLDLzP8KsOvM/wmw28z/C7D7zP8IcMfM/wpw58z/CXDXzP8LcPfM/wjwz8z/CvDvzMcmeE/Gf6b4X8ZjspwdIZjMhyb4ZAch+Y4To7j5jhejsNyHD/HCXKcMMfhOU6U48Q5TpLjpDlOluPkOU6R45Q5TpXj1DlOk+O0OU6X4/Q5zpDjjDnOlOPMOc6S46w5zpbj7DnOkeOcOc6V49w5zpPjvDnOl+P8OS6Q44I5LpTjwjkukuOiOS6W4+I5LpEjOS6Z41I5Lp3jMjkum+NyOS6f4wo5rpjjSjmunOMqOa6a42o5rp7jGjmumeNaOa6d4zo5rpvjejmun+MGOW6Y40Y5bpzjJjlumuNmOW6e4xY5bpnjVjluneM2OW6b43Y5bp/jDjnumONOOe6c4y457prjbjnunuMeOe6Z41457p3jPjnum+N+Oe6f4wE5HpjjQTkenOMhOR6a42E5Hp7jETkemeNROR6d4zE5HpvjcTken+MJOZ6YozmelOPJOZ6S46k5npbj6TmekeOZOZ6V49k5npPjuTmel+P5OV6Q44U5XpTjxTlekuOlOV6W4+U5XpHjlTlelePVOV6T47U5Xpfj9TnekOONOd6U48053pLjrTneluPtOd6R45053pXj3Tnek+O9Od6X4/05PpDjgzk+lOPDOT6S46M5Ppbj4zk+keOTOQ5yDHIMc4xyjHNMckxzzHLMcyxyLHOscqxzbHJsc+xy7IcPGfI/E0/n+EyOz+b4XI7P5/hCji/m+FKOL+f4So6v5vhajq/n+EaOb+b4Vo5v5/hOju/m+F6O7+f4QY4f5vhRjh/n+EmOn+Y4IsfPcvw8xy9y/DLHr3L8Osdvcvw2x+9y/D7HH3L8Mcefcvw5x19y/DXH33L8Pcc/cvwzx79y/DvHkTn+k+O/Of6X46gcR+c4JsexOQ4pcGiB4xQ4boHjFTiswPELnKDACQscXuBEBU5c4CQFTlrgZAVOXuAUBU5Z4FQFTl3gNAVOW+B0BU5f4AwFzljgTAXOXOAsBc5a4GwFzl7gHAXOWeBcBc5d4DwFzlvgfAXOX+ACBS5Y4EIFLlzgIgUuWuBiBS5e4BIFUuCSBS5V4NIFLlPgsgUuV+DyBa5Q4IoFrlTgygWuUuCqBa5W4OoFrlHgmgWuVeDaBa5T4LoFrlfg+gVuUOCGBW5U4MYFblLgpgVuVuDmBW5R4JYFblXg1gVuU+C2BW5X4PYF7lDgjgXuVODOBe5S4K4F7lbg7gXuUeCeBe5V4N4F7lPgvgXuV+D+BR5Q4IEFHlTgwQUeUuChBR5W4OEFHlHgkQUeVeDRBR5T4LEFHlfg8QWeUOCJBVrgSQWeXOApBZ5a4GkFnl7gGQWeWeBZBZ5d4DkFnlvgeQWeX+AFBV5Y4EUFXlzgJQVeWuBlBV5e4BUFXlngVQVeXeA1BV5b4HUFXl/gDQXeWOBNBd5c4C0F3lrgbQXeXuAdBd5Z4F0F3l3gPQXeW+B9Bd5f4AMFPljgQwU+XOAjBT5a4GMFPl7gEwU+WeCgwKDAsMCowLjApMC0wKzAvMCiwLLAqsC6wKbAtsCuwL7Apwp8usBnCny2wOcKfL7AFwp8scCXCny5wFcKfLXA1wp8vcA3CnyzwLcKfLvAdwp8t8D3Cny/wA8K/LDAjwr8uMBPCvy0wBEFflbg5wV+UeCXBX5V4NcFflPgtwV+V+D3Bf5Q4I8F/lTgzwX+UuCvBf5W4O8F/lHgnwX+VeDfBY4s8J8C/y3wvwJHFTi6wDEFji1wSIlDSxynxHFLHK/EYSWOX+IEJU5Y4vASJypx4hInKXHSEicrcfISpyhxyhKnKnHqEqcpcdoSpytx+hJnKHHGEmcqceYSZylx1hJnK3H2Eucocc4S5ypx7hLnKXHeEucrcf4SFyhxwRIXKnHhEhcpcdESFytx8RKXKJESlyxxqRKXLnGZEpctcbkSly9xhRJXLHGlElcucZUSVy1xtRJXL3GNEtcsca0S1y5xnRLXLXG9EtcvcYMSNyxxoxI3LnGTEjctcbMSNy9xixK3LHGrErcucZsSty1xuxK3L3GHEncscacSdy5xlxJ3LXG3EncvcY8S9yxxrxL3LnGfEvctcb8S9y/xgBIPLPGgEg8u8ZASDy3xsBIPL/GIEo8s8agSjy7xmBKPLfG4Eo8v8YQSTyzREk8q8eQSTynx1BJPK/H0Es8o8cwSzyrx7BLPKfHcEs8r8fwSLyjxwhIvKvHiEi8p8dISLyvx8hKvKPHKEq8q8eoSrynx2hKvK/H6Em8o8cYSbyrx5hJvKfHWEm8r8fYS7yjxzhLvKvHuEu8p8d4S7yvx/hIfKPHBEh8q8eESHynx0RIfK/HxEp8o8ckSByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2JT5V4tMlPlPisyU+V+LzJb5Q4oslvlTiyyW+UuKrJb5W4uslvlHimyW+VeLbJb5T4rslvlfi+yV+UOKHJX5U4sclflLipyWOKPGzEj8v8YsSvyzxqxK/LvGbEr8t8bsSvy/xhxJ/LPGnEn8u8ZcSfy3xtxJ/L/GPEv8s8a8S/y5xZIn/lPhvif+VOKrE0SWOKXFsiUMqHFrhOBWOW+F4FQ6rcPwKJ6hwwgqHVzhRhRNXOEmFk1Y4WYWTVzhFhVNWOFWFU1c4TYXTVjhdhdNXOEOFM1Y4U4UzVzhLhbNWOFuFs1c4R4VzVjhXhXNXOE+F81Y4X4XzV7hAhQtWuFCFC1e4SIWLVrhYhYtXuESFVLhkhUtVuHSFy1S4bIXLVbh8hStUuGKFK1W4coWrVLhqhatVuHqFa1S4ZoVrVbh2hetUuG6F61W4foUbVLhhhRtVuHGFm1S4aYWbVbh5hVtUuGWFW1W4dYXbVLhthdtVuH2FO1S4Y4U7VbhzhbtUuGuFu1W4e4V7VLhnhXtVuHeF+1S4b4X7Vbh/hQdUeGCFB1V4cIWHVHhohYdVeHiFR1R4ZIVHVYx4csgQj6nw2AqPq/D4Ck+o8MQKrfCkCk+u8JQKT63wtApPr/CMCs+s8KwKz67wnArPrfC8Cs+v8IIKL6zwogovrvCSCi+t8LIKL6/wigqvrPCqCq+u8JoKr63wugqvr/CGCm+s8KYKb67wlgpvrfC2Cm+v8I4K76zwrgrvrvCeCu+t8L4K76/wgQofrPChCh+u8JEKH63wsQofr/CJCp+scFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+FTFT5d4TMVPlvhcxU+X+ELFb5Y4UsVvlzhKxW+WuFrFb5e4RsVvlnhWxW+XeE7Fb5b4XsVvl/hBxV+WOFHFX5c4ScVflrhiAo/q/DzCr+o8MsKv6rw6wq/qfDbCr+r8PsKf6jwxwp/qvDnCn+p8NcKf6vw9wr/qPDPCv+q8O8KR1b4T4X/VvhfhaMqHF3hmArHVjikxqE1jlPjuDWOV+OwGsevcYIaJ6xxeI0T1ThxjZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOGONM9U4c42z1DhrjbPVOHuNc9Q4Z41z1Th3jfPUOG+N89U4f40L1LhgjQvVuHCNi9S4aI2L1bh4jUvUSI1L1rhUjUvXuEyNy9a4XI3L17hCjSvWuFKNK9e4So2r1rhajavXuEaNa9a4Vo1r17hOjevWuF6N69e4QY0b1rhRjRvXuEmNm9a4WY2b17hFjVvWuFWNW9e4TY3b1rhdjdvXuEONO9a4U40717hLjbvWuFuNu9e4R4171rhXjXvXuE+N+9a4X43713hAjQfWeFCNB9d4SI2H1nhYjYfXeESNR9Z4VI1H13hMjcfWeFyNx9d4Qo0n1miNJ9V4co2n1HhqjafVeHqNZ9R4Zo1n1Xh2jefUeG6N59V4fo0X1HhhjRfVeHGNl9R4aY2X1Xh5jVfUeGWNV9V4dY3X1HhtjdfVeH2NN9R4Y4031XhzjbfUeGuNt9V4e4131HhnjXfVeHeN99R4b4331Xh/jQ/U+GCND9X4cI2P1PhojY/V+HiNT9T4ZI2DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsan6rx6RqfqfHZGp+r8fkaX6jxxRpfqvHlGl+p8dUaX6vx9RrfqPHNGt+q8e0a36nx3Rrfq/H9Gj+o8cMaP6rx4xo/qfHTGkfU+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb/X+EeNf9b4V41/1ziyxn9q/LfG/2ocVePoGsfUOLbGIQ0ObXCcBsdtcLwGhzU4foMTNDhhg8MbnKjBiRucpMFJG5yswckbnKLBKRucqsGpG5ymwWkbnK7B6RucocEZG5xp2BBnbnCWBmdtcLYGZ29wjgbnbHCuBuducJ4G521wvgbnb3CBBhdscKEGF25wkQYXbXCxBhdvcIkGaXDJBpdqcOkGl2lw2QaXa3D5BldocMUGV2pw5QZXaXDVBldrcPUG12hwzQbXanDtBtdpcN0G12tw/QY3aHDDBjdqcOMGN2lw0wY3a3DzBrdocMsGt2pw6wa3aXDbBrdrcPsGd2hwxwZ3anDnBndpcNcGd2tw9wb3aHDPBvdqcO8G92lw3wb3a3D/Bg9o8MAGD2rw4AYPafDQBg9r8PAGj2jwyAaPavDoBo9p8NgGj2vw+AZPaPDEBm3wpAZPbvCUBk9t8LQGT2/wjAbPbPCsBs9u8JwGz23wvAbPb/CCBi9s8KIGL27wkgYvbfCyBi9v8IoGr2zwqgavbvCaBq9t8LoGr2/whgZvbPCmBm9u8JYGb23wtgZvb/COBu9s8K4G727wngbvbfC+Bu9v8IEGH2zwoQYfbvCRBh9t8LEGH2/wiQafbHDQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN/gUw0+3eAzDT7b4HMNPt/gCw2+2OBLDb7c4CsNvtrgaw2+3uAbDb7Z4FsNvt3gOw2+2+B7Db7f4AcNftjgRw1+3OAnDX7a4IgGP2vw8wa/aPDLBr9q8OsGv2nw2wa/a/D7Bn9o8McGf2rw5wZ/afDXBn9r8PcG/2jwzwb/avDvBkc2+E+D/zb4X4OjGhzd4JgGxzY4pMWhLY7T4rgtjtfisBbHb3GCFidscXiLE7U4cYuTtDhpi5O1OHmLU7Q4ZYtTtTh1i9O0OG2L07U4fYsztDhjizO1OHOLs7Q4a4uztTh7i3O0OGeLc7U4d4vztDhvi/O1OH+LC7S4YIsLtbhwi4u0uGiLi7W4eItLtEiLS7a41KihLt3iMi0u2+JyLS7f4gotrtjiSi2u3OIqLa7a4motrt7iGi2u2eJaLa7d4jotrtviei2u3+IGLW7Y4kYtbtziJi1u2uJmLW7e4hYtbtniVi1u3eI2LW7b4nYtbt/iDi3u2OJOLe7c4i4t7tribi3u3uIeLe7Z4l4t7t3iPi3u2+J+Le7f4gEtHtjiQS0e3OIhLR7a4mEtHt7iES0e2eJRLR7d4jEtHtvicS0e3+IJLZ7Yoi2e1OLJLZ7S4qktntbi6S2e0eKZLZ7V4tktntPiuS2e1+L5LV7Q4oUtXtTixS1e0uKlLV7W4uUtXtHilS1e1eLVLV7T4rUtXtfi9S3e0OKNLd7U4s0t3tLirS3e1uLtLd7R4p0t3tXi3S3e0+K9Ld7X4v0tPtDigy0+1OLDLT7S4qMtPtbi4y0+0eKTLQ5aDFoMW4xajFtMWkxbzFrMWyxaLFusWqxbbFpsW+xa7Ft8qsWnW3ymxWdbfK7F51t8ocUXW3ypxZdbfKXFV1t8rcXXW3yjxTdbfKvFt1t8p8V3W3yvxfdb/KDFD1v8qMWPW/ykxU9bHNHiZy1+3uIXLX7Z4lctft3iNy1+2+J3LX7f4g8t/tjiTy3+3OIvLf7a4m8t/t7iHy3+2eJfLf7d4sgW/2nx3xb/a3FUi6NbHNPi2BaHdDi0w3E6HLfD8Toc1uH4HU7Q4YQdDu9wog4n7nCSDiftcLIOJ+9wig6n7HCqDqfucJoOp+1wug6n73CGDmfscKYOZ+5wlg5n7XC2DmfvcI4O5+xwrg7n7nCeDuftcL4O5+9wgQ4X7HChDhfucJEOF+1wsQ4X73CJDulwyQ6X6nDpDpfpcNkOl+tw+Q5X6HDFDlfqcOUOV+lw1Q5X63D1DtfocM0O1+pw7Q7X6XDdDtfrcP0ON+hwww436nDjDjfpcNMON+tw8w636HDLDrfqcOsOt+lw2w6363D7DnfocMcOd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOj+rw6A6P6fDYDo/r8PgOT+jwxA7t8KQOT+7wlA5P7fC0Dk/v8IwOz+zwrA7P7vCcDs/t8LwOz+/wgg4v7PCiDi/u8JIOL+3wsg4v7/CKDq/s8KoOr+7wmg6v7fC6Dq/v8IYOb+zwpg5v7vCWDm/t8LYOb+/wjg7v7PCuDu/u8J4O7+3wvg7v7/CBDh/s8KEOH+7wkQ4f7fCxDh/v8IkOn+xw0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4VMdPt3hMx0+2+FzHT7f4QsdvtjhSx2+3OErHb7a4Wsdvt7hGx2+2eFbHb7d4Tsdvvs/V0Pw/Q4/6PDDDj/q8OMOP+nw0w5HdPhZh593+EWHX3b4VYdfd/hNh992+F2H33f4Q4c/dvhThz93+EuHv3b4W4e/d/hHh392+FeHf3c4ssN/Ovy3w/86HNXh6A7HdDi2wyE9Du1xnB7H7XG8Hof1OH6PE/Q4YY/De5yox4l7nKTHSXucrMfJe5yixyl7nKrHqXucpsdpe5yux+l7nKHHGXucqceZe5ylx1l7nK3H2Xuco8c5e5yrx7l7nKfHeXucr8f5e1ygxwV7XKjHhXtcpMdFe1ysx8V7XKJHelyyx6V6XLrHZXpctsflely+xxV6XLHHlXpcucdVely1x9V6XL3HNXpcs8e1ely7x3V6XLfH9Xpcv8cNetywx4163LjHTXrctMfNety8xy163LLHrXrcusdtety2x+163L7HHXrcscedety5x1163LXH3Xrcvcc9etyzx7163LvHfXrct8f9ety/xwN6PLDHg3o8uMdDejy0x8N6PLzHI3o8ssejejy6x2N6PLbH43o8vscTejyxR3s8qceTezylx1N7PK3H03s8o8czezyrx7N7PKfHc3s8r8fze7ygxwt7vKjHi3u8pMdLe7ysx8t7vKLHK3u8qsere7ymx2t7vK7H63u8occbe7ypx5t7vKXHW3u8rcfbe7yjxzt7vKvHu3u8p8d7e7yvx/t7fKDHB3t8qMeHe3ykx0d7fKzHx3t8oscnexz0+P8CAAD//9a/zfw=") r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 632.589455ms ago: executing program 5 (id=737): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x161281) r4 = dup2(r0, r1) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x10) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0xe, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x4, 0x3fd]}}) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) sendmsg$rds(r4, &(0x7f0000000a80)={&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@rdma_dest={0x18, 0x114, 0x2, {0xc0da}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x5}], 0x30}, 0x800) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x3}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x80, 0x0, @time={0x6, 0x7fffffff}, {}, {0x0, 0x6}, @result={0x0, 0xfffffffe}}, {0x0, 0x0, 0x0, 0x0, @tick=0x7f, {0x0, 0x3}, {}, @time=@time={0x8, 0xa}}], 0x54) 540.660102ms ago: executing program 4 (id=738): openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x5, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x8000000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 449.867138ms ago: executing program 2 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x33) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) fsopen(0x0, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='00:03\n', 0x6) 448.655588ms ago: executing program 5 (id=740): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000840), &(0x7f0000000140)=r3}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) 413.625255ms ago: executing program 0 (id=741): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000001c0)={0x2381, 0x0, 'client0\x00', 0x4, "3d39725aa503dec9", "d74e1b542bf7c4fdb207a05aecc4197ea916c74fc17c923268fe84262d4fb20a", 0x7fff}) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) epoll_create1(0x80000) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x20900, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004900)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) 355.962395ms ago: executing program 4 (id=742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x20000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x101040, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)={0x24, r1, 0x5, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}]]}, 0x24}}, 0x0) 181.837437ms ago: executing program 5 (id=743): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc15, &(0x7f0000001940)="$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") chdir(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000000)='2', 0x49) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r3 = fanotify_init(0xef0, 0x2) fanotify_mark(r3, 0x105, 0x995e, r2, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_pidfd_open(r1, 0x0) setns(r4, 0x24020000) umount2(0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=745): io_setup(0xb, &(0x7f0000000080)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffda4, 0x3, 0x0, 0x2}]) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10012, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) kernel console output (not intermixed with test programs): ease bring it up to get a fully working HSR network [ 86.996718][ T4539] loop2: detected capacity change from 0 to 1024 [ 87.055359][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.105527][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.198653][ T7] cfg80211: failed to load regulatory.db [ 87.437540][ T4543] hub 8-0:1.0: USB hub found [ 87.453274][ T4543] hub 8-0:1.0: 1 port detected [ 88.481787][ T4249] Bluetooth: hci5: Frame reassembly failed (-90) [ 88.559334][ T4549] Bluetooth: hci5: Frame reassembly failed (-84) [ 88.568283][ T4539] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 88.657389][ T4539] System zones: 0-1, 3-36 [ 88.714425][ T4539] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.67: bad orphan inode 134217728 [ 88.777967][ T4559] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 88.801111][ T4539] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000010001,debug,journal_dev=0x0000000000001007,,errors=continue. Quota mode: writeback. [ 89.057835][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.065639][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.144866][ T4372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.667742][ T4584] syz.0.73 uses obsolete (PF_INET,SOCK_PACKET) [ 89.981098][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.002136][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.157533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.166039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.217935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.241359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.277749][ T4372] device veth0_vlan entered promiscuous mode [ 90.306470][ T4592] netlink: 'syz.0.74': attribute type 2 has an invalid length. [ 90.350560][ T4372] device veth1_vlan entered promiscuous mode [ 90.441545][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.507477][ T1111] Bluetooth: hci5: command 0x1003 tx timeout [ 90.514010][ T147] Bluetooth: hci5: sending frame failed (-49) [ 90.522336][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.557891][ T4372] device veth0_macvtap entered promiscuous mode [ 90.647759][ T4372] device veth1_macvtap entered promiscuous mode [ 90.760002][ T4372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.788627][ T4372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.814800][ T4372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.832230][ T4372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.856005][ T4372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.884079][ T4372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.906229][ T4372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.945011][ T4372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.003373][ T4372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.018211][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.054320][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.073067][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.098386][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.117075][ T4611] loop0: detected capacity change from 0 to 8 [ 91.130380][ T4372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.172787][ T4372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.193282][ T4372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.214406][ T4372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.245480][ T4372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.275878][ T4372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.287174][ T4372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.302572][ T4372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.332704][ T4372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.347578][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.440041][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.495437][ T4372] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.560980][ T4372] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.585833][ T4372] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.604565][ T4372] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.908066][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.099659][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.598696][ T1111] Bluetooth: hci5: command 0x1001 tx timeout [ 92.934786][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.982619][ T147] Bluetooth: hci5: sending frame failed (-49) [ 93.004446][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.047242][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.054935][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.453740][ T4632] loop0: detected capacity change from 0 to 256 [ 93.513770][ T4632] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 94.017211][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 94.417237][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 94.781860][ T4641] bridge0: port 3(macvlan2) entered blocking state [ 94.846090][ T4641] bridge0: port 3(macvlan2) entered disabled state [ 94.955193][ T4638] loop0: detected capacity change from 0 to 2048 [ 94.987315][ T4641] device macvlan2 entered promiscuous mode [ 95.077616][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 95.138668][ T4641] bridge0: port 3(macvlan2) entered blocking state [ 95.146182][ T4641] bridge0: port 3(macvlan2) entered forwarding state [ 95.329693][ T4638] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.508511][ T4638] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.915262][ T4657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 96.913488][ T4674] FAULT_INJECTION: forcing a failure. [ 96.913488][ T4674] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.008149][ T4674] CPU: 0 PID: 4674 Comm: syz.2.90 Not tainted syzkaller #0 [ 97.015872][ T4674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.026315][ T4674] Call Trace: [ 97.029837][ T4674] [ 97.032988][ T4674] dump_stack_lvl+0x188/0x250 [ 97.038070][ T4674] ? show_regs_print_info+0x20/0x20 [ 97.043848][ T4674] ? load_image+0x410/0x410 [ 97.049424][ T4674] ? __lock_acquire+0x7b50/0x7b50 [ 97.054655][ T4674] ? __local_bh_enable_ip+0x136/0x1c0 [ 97.060047][ T4674] ? lockdep_hardirqs_on+0x94/0x140 [ 97.065278][ T4674] should_fail+0x383/0x4b0 [ 97.069811][ T4674] _copy_from_user+0x2e/0x170 [ 97.074513][ T4674] sock_setsockopt+0x1b4f/0x2480 [ 97.079563][ T4674] ? __sock_set_mark+0x150/0x150 [ 97.084628][ T4674] ? __lock_acquire+0x7b50/0x7b50 [ 97.089694][ T4674] ? aa_sk_perm+0x7dc/0x910 [ 97.094339][ T4674] ? __fget_files+0x402/0x470 [ 97.099136][ T4674] ? aa_sock_opt_perm+0x74/0x100 [ 97.104111][ T4674] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 97.110047][ T4674] ? security_socket_setsockopt+0x7a/0xa0 [ 97.116686][ T4674] __sys_setsockopt+0x2f6/0x3d0 [ 97.121763][ T4674] __x64_sys_setsockopt+0xb1/0xc0 [ 97.126929][ T4674] do_syscall_64+0x4c/0xa0 [ 97.131376][ T4674] ? clear_bhb_loop+0x30/0x80 [ 97.136072][ T4674] ? clear_bhb_loop+0x30/0x80 [ 97.140798][ T4674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.146834][ T4674] RIP: 0033:0x7fa2eeeb8159 [ 97.151463][ T4674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.173287][ T4674] RSP: 002b:00007fa2ed110028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 97.181833][ T4674] RAX: ffffffffffffffda RBX: 00007fa2ef13ffa0 RCX: 00007fa2eeeb8159 [ 97.190045][ T4674] RDX: 0000000000000032 RSI: 0000000000000001 RDI: 0000000000000005 [ 97.199348][ T4674] RBP: 00007fa2eef4f06b R08: 0000000000000004 R09: 0000000000000000 [ 97.207889][ T4674] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 97.216250][ T4674] R13: 00007fa2ef140038 R14: 00007fa2ef13ffa0 R15: 00007ffe9d17e798 [ 97.227079][ T4674] [ 97.466430][ T4402] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.524563][ T4638] fs-verity: sha512 using implementation "sha512-avx2" [ 97.640976][ T4402] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.719062][ T4402] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.789798][ T4402] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.858922][ T4670] chnl_net:caif_netlink_parms(): no params data found [ 98.104533][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.124220][ T4670] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.136282][ T4670] device bridge_slave_0 entered promiscuous mode [ 98.145012][ T4226] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 98.169947][ T4670] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.191034][ T4670] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.209856][ T4670] device bridge_slave_1 entered promiscuous mode [ 98.296383][ T4670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.333613][ T4670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.388647][ T4670] team0: Port device team_slave_0 added [ 98.397403][ T4226] usb 6-1: Using ep0 maxpacket: 16 [ 98.407123][ T4670] team0: Port device team_slave_1 added [ 98.466510][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.481316][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.509736][ T4670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.525279][ T4226] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.546586][ T4226] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.560100][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.567772][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.595701][ T4670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.723053][ T4670] device hsr_slave_0 entered promiscuous mode [ 98.733709][ T4670] device hsr_slave_1 entered promiscuous mode [ 98.740965][ T4226] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.750540][ T4670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.761932][ T4226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.771145][ T4226] usb 6-1: Product: syz [ 98.784636][ T4670] Cannot create hsr debugfs directory [ 98.786115][ T4226] usb 6-1: Manufacturer: syz [ 98.796243][ T4226] usb 6-1: SerialNumber: syz [ 98.908689][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 99.117626][ T4226] usb 6-1: 0:2 : does not exist [ 99.149345][ T4226] usb 6-1: USB disconnect, device number 2 [ 99.270181][ T4670] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.291724][ T4670] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.325862][ T4670] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.347065][ T4402] device hsr_slave_0 left promiscuous mode [ 99.355544][ T4402] device hsr_slave_1 left promiscuous mode [ 99.364207][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.372936][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.382667][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.390626][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.400481][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.402907][ T4402] device bridge_slave_1 left promiscuous mode [ 99.457638][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.480701][ T4402] device bridge_slave_0 left promiscuous mode [ 99.487813][ T4225] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.491374][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.543373][ T4402] device veth1_macvtap left promiscuous mode [ 99.555729][ T4402] device veth0_macvtap left promiscuous mode [ 99.568541][ T4402] device veth1_vlan left promiscuous mode [ 99.575294][ T4402] device veth0_vlan left promiscuous mode [ 99.587624][ T4748] loop0: detected capacity change from 0 to 256 [ 99.639098][ T4748] exfat: Deprecated parameter 'utf8' [ 99.644580][ T4748] exfat: Deprecated parameter 'namecase' [ 99.689893][ T4748] exfat: Deprecated parameter 'namecase' [ 99.696624][ T4748] exfat: Deprecated parameter 'utf8' [ 99.727434][ T4225] usb 3-1: Using ep0 maxpacket: 32 [ 99.774348][ T4748] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 99.847623][ T4225] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 99.857518][ T4225] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 99.870276][ T4225] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 99.882266][ T4225] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 99.896393][ T4225] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.058601][ T4755] loop0: detected capacity change from 0 to 64 [ 100.067740][ T4225] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 100.077150][ T4225] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 100.091908][ T26] audit: type=1804 audit(1790665827.763:5): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.104" name="/newroot/7/file0" dev="fuse" ino=1 res=1 errno=0 [ 101.617242][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.637243][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.647247][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.657228][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.667244][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.677227][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.687241][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.697230][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 101.913736][ T26] audit: type=1800 audit(1790665829.583:6): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.104" name="/" dev="fuse" ino=1 res=0 errno=0 [ 102.055826][ T4225] usb 3-1: Product: syz [ 102.075192][ T4225] usb 3-1: Manufacturer: syz [ 102.080210][ T4225] usb 3-1: SerialNumber: syz [ 102.091995][ T4225] usb 3-1: config 0 descriptor?? [ 102.110053][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 102.129983][ T4225] usb 3-1: can't set config #0, error -71 [ 102.131354][ T4402] team0 (unregistering): Port device team_slave_1 removed [ 102.136875][ T4225] usb 3-1: USB disconnect, device number 4 [ 102.263658][ T4402] team0 (unregistering): Port device team_slave_0 removed [ 102.334921][ T4402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.857916][ T4402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.223242][ T26] audit: type=1326 audit(1790665830.893:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.5.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071f116159 code=0x7ffc0000 [ 103.394215][ T26] audit: type=1326 audit(1790665830.953:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.5.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071f116159 code=0x7ffc0000 [ 103.478599][ T4773] loop5: detected capacity change from 0 to 1024 [ 103.494844][ T26] audit: type=1326 audit(1790665830.953:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.5.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071f116159 code=0x7ffc0000 [ 104.264017][ T4402] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 104.287990][ T4773] hfsplus: invalid btree flag [ 104.293270][ T4773] hfsplus: failed to load extents file [ 104.327152][ T4225] Bluetooth: hci4: command 0x040f tx timeout [ 104.335310][ T26] audit: type=1326 audit(1790665830.953:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.5.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071f116159 code=0x7ffc0000 [ 104.359273][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.382965][ T26] audit: type=1326 audit(1790665830.983:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.5.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f071f116159 code=0x7ffc0000 [ 104.407251][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.424996][ T26] audit: type=1326 audit(1790665830.983:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.5.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071f116159 code=0x7ffc0000 [ 104.509636][ T4402] bond0 (unregistering): Released all slaves [ 104.567271][ T26] audit: type=1326 audit(1790665830.983:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.5.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071f116159 code=0x7ffc0000 [ 104.591501][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.643897][ T4670] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 104.656796][ T26] audit: type=1326 audit(1790665830.983:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.5.111" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071f116159 code=0x7ffc0000 [ 105.041832][ T4670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.104206][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.118268][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.141315][ T4670] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.174703][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.204213][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.227782][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.235025][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.302498][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.319244][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.348455][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.369509][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.376745][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.436717][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.477399][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.537818][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.578291][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.658017][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.689691][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.733562][ T4800] loop2: detected capacity change from 0 to 32768 [ 105.752335][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.799492][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.828122][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.864616][ T4670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.927701][ T4800] XFS (loop2): Mounting V5 Filesystem [ 105.977007][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.043483][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.057500][ T4800] XFS (loop2): Ending clean mount [ 106.080864][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.130642][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 106.130658][ T26] audit: type=1800 audit(1790665833.803:73): pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.115" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 106.158613][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.185134][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.121'. [ 106.231003][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.347441][ T4185] Bluetooth: hci4: command 0x0419 tx timeout [ 106.479960][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.844363][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.868383][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.901973][ T4670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.941366][ T26] audit: type=1800 audit(1790665834.613:74): pid=4843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.115" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 106.970372][ T4853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.016277][ T4853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.164717][ T4865] IPVS: lc: FWM 3 0x00000003 - no destination available [ 107.169264][ T4864] binder: BINDER_SET_CONTEXT_MGR already set [ 107.211972][ T4864] binder: 4863:4864 ioctl 4018620d 200000004a80 returned -16 [ 107.261073][ T4859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.286466][ T4861] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.757026][ T4884] loop4: detected capacity change from 0 to 16 [ 108.003573][ T4884] erofs: (device loop4): mounted with root inode @ nid 36. [ 108.085765][ T4884] attempt to access beyond end of device [ 108.085765][ T4884] loop4: rw=0, want=40, limit=16 [ 108.145522][ T4884] attempt to access beyond end of device [ 108.145522][ T4884] loop4: rw=524288, want=48, limit=16 [ 108.158052][ T4884] attempt to access beyond end of device [ 108.158052][ T4884] loop4: rw=524288, want=40, limit=16 [ 108.789764][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.804345][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.893251][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.914873][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.950888][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.976203][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.002875][ T4899] device syzkaller0 entered promiscuous mode [ 109.035784][ T4670] device veth0_vlan entered promiscuous mode [ 109.343295][ T4670] device veth1_vlan entered promiscuous mode [ 109.367487][ T4193] XFS (loop2): Unmounting Filesystem [ 109.518816][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.567695][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.584605][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.624754][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.669479][ T4670] device veth0_macvtap entered promiscuous mode [ 109.698090][ T4670] device veth1_macvtap entered promiscuous mode [ 109.768126][ T4226] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.795221][ T4670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.872910][ T4670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.913311][ T4670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.950898][ T4670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.965475][ T4670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.987584][ T4670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.019221][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.043894][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.068335][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.083650][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.114861][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.132592][ T4932] loop2: detected capacity change from 0 to 512 [ 110.156847][ T4670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.185211][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.205594][ T4670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.219470][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.233536][ T4670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.251252][ T4670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.264018][ T4670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.281829][ T4670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.301136][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.330548][ T4226] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 110.341718][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.359698][ T4932] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.362842][ T4226] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 110.369584][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.387145][ T4932] EXT4-fs error (device loop2): ext4_quota_enable:6444: inode #15: comm syz.2.131: iget: bad i_size value: 360287970189639690 [ 110.399009][ T4226] usb 5-1: Manufacturer: syz [ 110.417402][ T4932] EXT4-fs error (device loop2): ext4_quota_enable:6447: comm syz.2.131: Bad quota inode: 15, type: 2 [ 110.435455][ T4932] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 110.469908][ T4670] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.494600][ T4226] usb 5-1: config 0 descriptor?? [ 110.507095][ T4670] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.520449][ T4932] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 110.529342][ T4932] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.550435][ T4932] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 110.560792][ T4670] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.569904][ T4670] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.595921][ T4932] EXT4-fs error (device loop2): ext4_quota_enable:6444: inode #15: comm syz.2.131: iget: bad i_size value: 360287970189639690 [ 110.644464][ T4932] EXT4-fs error (device loop2): ext4_quota_enable:6447: comm syz.2.131: Bad quota inode: 15, type: 2 [ 110.663434][ T4942] netlink: 'syz.0.136': attribute type 13 has an invalid length. [ 110.687979][ T4932] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 110.727780][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 110.762208][ T4942] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 110.898828][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.929329][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.966901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.065290][ T4959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 111.100782][ T4231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.111416][ T4231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.157585][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.708456][ T4226] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71 [ 111.782464][ T4226] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 112.414806][ T4226] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71 [ 112.423716][ T4226] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 112.431848][ T4226] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 112.456693][ T4226] usb 5-1: USB disconnect, device number 3 [ 113.267411][ T4226] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.567521][ T4226] usb 3-1: Using ep0 maxpacket: 8 [ 113.767895][ T4226] usb 3-1: unable to get BOS descriptor or descriptor too short [ 113.918733][ T4226] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.999212][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 114.174945][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 114.251951][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 114.271378][ T5007] netlink: 4 bytes leftover after parsing attributes in process `syz.6.148'. [ 114.313837][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 114.352841][ T4226] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 114.573595][ T4226] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 114.604047][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.632283][ T4226] usb 3-1: Product: syz [ 114.654160][ T5017] loop0: detected capacity change from 0 to 64 [ 114.715948][ T4226] usb 3-1: Manufacturer: syz [ 114.723045][ T4226] usb 3-1: SerialNumber: syz [ 114.735612][ T4226] usb 3-1: config 0 descriptor?? [ 115.620708][ T4226] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 115.667564][ T4226] usb 3-1: USB disconnect, device number 5 [ 115.894557][ T5042] Set syz1 is full, maxelem 256 reached [ 115.920839][ T5043] FAULT_INJECTION: forcing a failure. [ 115.920839][ T5043] name failslab, interval 1, probability 0, space 0, times 1 [ 115.983756][ T5037] udevd[5037]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.008209][ T5043] CPU: 1 PID: 5043 Comm: syz.0.156 Not tainted syzkaller #0 [ 116.015638][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.025729][ T5043] Call Trace: [ 116.029041][ T5043] [ 116.031998][ T5043] dump_stack_lvl+0x188/0x250 [ 116.036712][ T5043] ? show_regs_print_info+0x20/0x20 [ 116.042134][ T5043] ? load_image+0x410/0x410 [ 116.046933][ T5043] ? __lock_acquire+0x7b50/0x7b50 [ 116.052004][ T5043] ? _find_next_bit+0x1f0/0x200 [ 116.056894][ T5043] should_fail+0x383/0x4b0 [ 116.061354][ T5043] should_failslab+0x5/0x20 [ 116.065899][ T5043] slab_pre_alloc_hook+0x51/0xc0 [ 116.070909][ T5043] __kmalloc_node+0x6d/0x3a0 [ 116.075542][ T5043] ? bpf_map_kmalloc_node+0xba/0x140 [ 116.080860][ T5043] bpf_map_kmalloc_node+0xba/0x140 [ 116.086006][ T5043] cpu_map_update_elem+0x477/0xd60 [ 116.091148][ T5043] ? __might_fault+0xb7/0x110 [ 116.095865][ T5043] ? cpu_map_lookup_elem+0x1a0/0x1a0 [ 116.101195][ T5043] ? bpf_map_update_value+0x142/0x650 [ 116.106607][ T5043] map_update_elem+0x603/0x760 [ 116.111415][ T5043] __sys_bpf+0x46b/0x6f0 [ 116.115795][ T5043] ? bpf_link_show_fdinfo+0x380/0x380 [ 116.121401][ T5043] __x64_sys_bpf+0x78/0x90 [ 116.125851][ T5043] do_syscall_64+0x4c/0xa0 [ 116.130296][ T5043] ? clear_bhb_loop+0x30/0x80 [ 116.135009][ T5043] ? clear_bhb_loop+0x30/0x80 [ 116.139730][ T5043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.145923][ T5043] RIP: 0033:0x7f44ab727159 [ 116.150373][ T5043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.170014][ T5043] RSP: 002b:00007f44a997f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.178587][ T5043] RAX: ffffffffffffffda RBX: 00007f44ab9aefa0 RCX: 00007f44ab727159 [ 116.186670][ T5043] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 116.194672][ T5043] RBP: 00007f44ab7be06b R08: 0000000000000000 R09: 0000000000000000 [ 116.202677][ T5043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.210663][ T5043] R13: 00007f44ab9af038 R14: 00007f44ab9aefa0 R15: 00007fff27506f38 [ 116.218653][ T5043] [ 116.255466][ T5061] netlink: 44 bytes leftover after parsing attributes in process `syz.4.161'. [ 116.281341][ T5061] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.288777][ T5061] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.767133][ T5071] loop0: detected capacity change from 0 to 256 [ 118.741366][ T5091] loop4: detected capacity change from 0 to 1024 [ 119.230833][ T5091] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 119.980658][ T5113] device syzkaller1 entered promiscuous mode [ 120.049266][ T5113] FAULT_INJECTION: forcing a failure. [ 120.049266][ T5113] name failslab, interval 1, probability 0, space 0, times 0 [ 120.103140][ T5113] CPU: 1 PID: 5113 Comm: syz.4.172 Not tainted syzkaller #0 [ 120.110494][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.120574][ T5113] Call Trace: [ 120.123980][ T5113] [ 120.126935][ T5113] dump_stack_lvl+0x188/0x250 [ 120.131748][ T5113] ? show_regs_print_info+0x20/0x20 [ 120.136978][ T5113] ? load_image+0x410/0x410 [ 120.141527][ T5113] ? __might_sleep+0xf0/0xf0 [ 120.146229][ T5113] ? __lock_acquire+0x7b50/0x7b50 [ 120.151287][ T5113] should_fail+0x383/0x4b0 [ 120.155888][ T5113] should_failslab+0x5/0x20 [ 120.160418][ T5113] slab_pre_alloc_hook+0x51/0xc0 [ 120.165478][ T5113] __kmalloc+0x6b/0x340 [ 120.169655][ T5113] ? __sg_alloc_table+0x9f/0x6d0 [ 120.174628][ T5113] __sg_alloc_table+0x9f/0x6d0 [ 120.179428][ T5113] sg_alloc_table+0x2e/0x60 [ 120.183952][ T5113] ? sg_alloc_table+0x60/0x60 [ 120.188774][ T5113] system_heap_allocate+0x679/0xf40 [ 120.194010][ T5113] ? system_heap_create+0x100/0x100 [ 120.199242][ T5113] ? _copy_from_user+0x111/0x170 [ 120.204198][ T5113] dma_heap_ioctl+0x486/0x590 [ 120.208900][ T5113] ? dma_heap_init+0xb0/0xb0 [ 120.213531][ T5113] ? bpf_lsm_file_ioctl+0x5/0x10 [ 120.218495][ T5113] ? security_file_ioctl+0x7c/0xa0 [ 120.223840][ T5113] ? dma_heap_init+0xb0/0xb0 [ 120.228452][ T5113] __se_sys_ioctl+0xfa/0x170 [ 120.233065][ T5113] do_syscall_64+0x4c/0xa0 [ 120.237507][ T5113] ? clear_bhb_loop+0x30/0x80 [ 120.242212][ T5113] ? clear_bhb_loop+0x30/0x80 [ 120.246926][ T5113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.252842][ T5113] RIP: 0033:0x7f77895b6159 [ 120.257278][ T5113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.277114][ T5113] RSP: 002b:00007f778780e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.285647][ T5113] RAX: ffffffffffffffda RBX: 00007f778983dfa0 RCX: 00007f77895b6159 [ 120.293645][ T5113] RDX: 0000200000000040 RSI: 00000000c0184800 RDI: 0000000000000003 [ 120.301820][ T5113] RBP: 00007f778964d06b R08: 0000000000000000 R09: 0000000000000000 [ 120.309816][ T5113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.317812][ T5113] R13: 00007f778983e038 R14: 00007f778983dfa0 R15: 00007ffe2d0cb838 [ 120.325909][ T5113] [ 120.699640][ T5131] md: array md0 already has disks! [ 120.811605][ T5131] block device autoloading is deprecated and will be removed. [ 120.952286][ T5137] md/raid:md0: not clean -- starting background reconstruction [ 121.007589][ T5137] md/raid:md0: invalid chunk size 0 [ 121.421169][ T5137] md: pers->run() failed ... [ 123.297311][ T5169] device syzkaller0 entered promiscuous mode [ 123.893606][ T5193] FAULT_INJECTION: forcing a failure. [ 123.893606][ T5193] name failslab, interval 1, probability 0, space 0, times 0 [ 123.943128][ T5193] CPU: 1 PID: 5193 Comm: syz.4.193 Not tainted syzkaller #0 [ 123.950564][ T5193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.960650][ T5193] Call Trace: [ 123.963956][ T5193] [ 123.966995][ T5193] dump_stack_lvl+0x188/0x250 [ 123.971714][ T5193] ? stack_trace_snprint+0xe0/0xe0 [ 123.977036][ T5193] ? show_regs_print_info+0x20/0x20 [ 123.982449][ T5193] ? load_image+0x410/0x410 [ 123.987000][ T5193] ? __kasan_slab_alloc+0xa9/0xc0 [ 123.992435][ T5193] ? slab_post_alloc_hook+0x4c/0x380 [ 123.997762][ T5193] ? kmem_cache_alloc+0x15d/0x280 [ 124.002825][ T5193] ? dst_alloc+0x101/0x160 [ 124.007275][ T5193] ? verify_lock_unused+0x140/0x140 [ 124.012509][ T5193] should_fail+0x383/0x4b0 [ 124.016950][ T5193] should_failslab+0x5/0x20 [ 124.021469][ T5193] slab_pre_alloc_hook+0x51/0xc0 [ 124.026450][ T5193] kmem_cache_alloc_node+0x47/0x2c0 [ 124.031765][ T5193] ? __alloc_skb+0xf4/0x750 [ 124.036653][ T5193] __alloc_skb+0xf4/0x750 [ 124.041008][ T5193] _sctp_make_chunk+0x5b/0x430 [ 124.046070][ T5193] sctp_make_init+0x54f/0x2880 [ 124.050987][ T5193] ? default_post_xol_op+0x8a/0x480 [ 124.056408][ T5193] ? sctp_addto_chunk+0x220/0x220 [ 124.061477][ T5193] sctp_sf_do_prm_asoc+0xcb/0x3e0 [ 124.066809][ T5193] sctp_do_sm+0x245/0x56a0 [ 124.071246][ T5193] ? stack_trace_snprint+0xe0/0xe0 [ 124.076456][ T5193] ? xfrm_lookup_with_ifid+0x1aed/0x1f60 [ 124.082137][ T5193] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 124.088050][ T5193] ? sctp_stream_init_ext+0x53/0x160 [ 124.093360][ T5193] ? sctp_sendmsg_to_asoc+0x177c/0x1e10 [ 124.098930][ T5193] ? sctp_sendmsg+0x1b87/0x2940 [ 124.103816][ T5193] ? ____sys_sendmsg+0x5be/0x8f0 [ 124.108970][ T5193] ? ___sys_sendmsg+0x236/0x2e0 [ 124.113901][ T5193] ? __sk_mem_raise_allocated+0x6e2/0x11b0 [ 124.119761][ T5193] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 124.125189][ T5193] sctp_sendmsg_to_asoc+0x14f4/0x1e10 [ 124.130620][ T5193] ? memcpy+0x3c/0x60 [ 124.134660][ T5193] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 124.140502][ T5193] ? __sctp_connect+0xd80/0xd80 [ 124.145385][ T5193] ? __local_bh_enable_ip+0x136/0x1c0 [ 124.150782][ T5193] ? _local_bh_enable+0xa0/0xa0 [ 124.155661][ T5193] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 124.161315][ T5193] ? security_sctp_bind_connect+0x85/0xb0 [ 124.167237][ T5193] sctp_sendmsg+0x1b87/0x2940 [ 124.171969][ T5193] ? sctp_getsockopt+0x8a0/0x8a0 [ 124.176940][ T5193] ? aa_af_perm+0x340/0x340 [ 124.181904][ T5193] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 124.188348][ T5193] ? aa_sock_msg_perm+0x94/0x150 [ 124.193417][ T5193] ? sock_rps_record_flow+0x17/0x3b0 [ 124.198774][ T5193] ? inet_sendmsg+0x7a/0x2a0 [ 124.203532][ T5193] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 124.208940][ T5193] ? inet_send_prepare+0x250/0x250 [ 124.214078][ T5193] ____sys_sendmsg+0x5be/0x8f0 [ 124.218874][ T5193] ? __sys_sendmsg_sock+0x30/0x30 [ 124.224024][ T5193] ? import_iovec+0x6f/0xa0 [ 124.228557][ T5193] ___sys_sendmsg+0x236/0x2e0 [ 124.233276][ T5193] ? __sys_sendmsg+0x290/0x290 [ 124.238112][ T5193] __se_sys_sendmsg+0x1b7/0x2a0 [ 124.243171][ T5193] ? __x64_sys_sendmsg+0x80/0x80 [ 124.248125][ T5193] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.254319][ T5193] ? lockdep_hardirqs_on+0x94/0x140 [ 124.259543][ T5193] do_syscall_64+0x4c/0xa0 [ 124.263997][ T5193] ? clear_bhb_loop+0x30/0x80 [ 124.268794][ T5193] ? clear_bhb_loop+0x30/0x80 [ 124.273496][ T5193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.279426][ T5193] RIP: 0033:0x7f77895b6159 [ 124.284126][ T5193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.303839][ T5193] RSP: 002b:00007f778780e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.312374][ T5193] RAX: ffffffffffffffda RBX: 00007f778983dfa0 RCX: 00007f77895b6159 [ 124.320375][ T5193] RDX: 0000000000000801 RSI: 0000200000000640 RDI: 0000000000000004 [ 124.328461][ T5193] RBP: 00007f778964d06b R08: 0000000000000000 R09: 0000000000000000 [ 124.336557][ T5193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.344554][ T5193] R13: 00007f778983e038 R14: 00007f778983dfa0 R15: 00007ffe2d0cb838 [ 124.352572][ T5193] [ 125.271780][ T5197] loop2: detected capacity change from 0 to 32768 [ 126.711139][ T5197] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 8 [ 126.711139][ T5197] [ 126.805344][ T5197] ERROR: (device loop2): remounting filesystem as read-only [ 127.815431][ T5236] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.176073][ T5249] fuse: Bad value for 'fd' [ 128.193863][ T5248] zram0: detected capacity change from 0 to 8 [ 130.095953][ T5269] loop0: detected capacity change from 0 to 512 [ 130.176231][ T5076] Set syz1 is full, maxelem 65536 reached [ 130.208572][ T5276] device syzkaller0 entered promiscuous mode [ 130.249712][ T5279] fuse: Bad value for 'fd' [ 130.255068][ T5269] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.210: inode has both inline data and extents flags [ 130.322488][ T5269] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.210: couldn't read orphan inode 15 (err -117) [ 130.397245][ T5269] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000006,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 130.557988][ T5269] kvm: apic: phys broadcast and lowest prio [ 130.964539][ T5303] loop0: detected capacity change from 0 to 2048 [ 131.031070][ T5303] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 131.077424][ T5303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.087334][ T4227] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 132.357366][ T4227] usb 7-1: Using ep0 maxpacket: 32 [ 132.478215][ T4227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.580727][ T4227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.740754][ T4227] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.872518][ T4227] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.920404][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.927039][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.167997][ T4227] usb 7-1: config 0 descriptor?? [ 133.345835][ T4227] hub 7-1:0.0: USB hub found [ 133.771385][ T5324] loop6: detected capacity change from 0 to 2048 [ 133.794646][ T5324] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 133.815119][ T5324] EXT4-fs (loop6): Unrecognized mount option "uid=00000000000000000000" or missing value [ 133.857485][ T4227] hub 7-1:0.0: 1 port detected [ 134.136875][ T5340] batman_adv: batadv0: Adding interface: dummy0 [ 134.146190][ T5340] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.187339][ T5340] batman_adv: batadv0: Interface activated: dummy0 [ 135.247041][ T5351] fuse: Bad value for 'fd' [ 135.804936][ T4226] usb 7-1: USB disconnect, device number 2 [ 135.807366][ T4227] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 135.941265][ T5379] mmap: syz.2.236 (5379) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 136.170914][ T5377] loop6: detected capacity change from 0 to 2048 [ 136.415334][ T5392] loop0: detected capacity change from 0 to 512 [ 137.472280][ T5377] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 138.496528][ T5377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.847108][ T5392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.898263][ T5401] FAULT_INJECTION: forcing a failure. [ 139.898263][ T5401] name failslab, interval 1, probability 0, space 0, times 0 [ 139.972047][ T5401] CPU: 0 PID: 5401 Comm: syz.4.240 Not tainted syzkaller #0 [ 139.979401][ T5401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.989584][ T5401] Call Trace: [ 139.992982][ T5401] [ 139.995934][ T5401] dump_stack_lvl+0x188/0x250 [ 140.000929][ T5401] ? show_regs_print_info+0x20/0x20 [ 140.006183][ T5401] ? load_image+0x410/0x410 [ 140.010735][ T5401] ? __might_sleep+0xf0/0xf0 [ 140.015462][ T5401] ? __lock_acquire+0x7b50/0x7b50 [ 140.020522][ T5401] should_fail+0x383/0x4b0 [ 140.024979][ T5401] should_failslab+0x5/0x20 [ 140.029506][ T5401] slab_pre_alloc_hook+0x51/0xc0 [ 140.034554][ T5401] ? nf_nat_register_fn+0x246/0x530 [ 140.039784][ T5401] __kmalloc_track_caller+0x69/0x330 [ 140.045180][ T5401] ? nf_nat_register_fn+0x246/0x530 [ 140.050415][ T5401] kmemdup+0x22/0x50 [ 140.054335][ T5401] nf_nat_register_fn+0x246/0x530 [ 140.059505][ T5401] iptable_nat_table_init+0xd0/0x2d0 [ 140.064819][ T5401] xt_find_table_lock+0x220/0x360 [ 140.069881][ T5401] xt_request_find_table_lock+0x22/0x100 [ 140.075631][ T5401] do_ipt_get_ctl+0x6e2/0x1110 [ 140.080436][ T5401] ? do_ipt_set_ctl+0xd70/0xd70 [ 140.085511][ T5401] ? nf_getsockopt+0x21b/0x280 [ 140.090394][ T5401] ? __lock_acquire+0x7b50/0x7b50 [ 140.095440][ T5401] ? __mutex_lock_common+0x435/0x2400 [ 140.101038][ T5401] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 140.106702][ T5401] ? mutex_unlock+0x10/0x10 [ 140.111234][ T5401] ? __might_fault+0xb7/0x110 [ 140.116172][ T5401] ? __lock_acquire+0x7b50/0x7b50 [ 140.121238][ T5401] ? __local_bh_enable_ip+0x136/0x1c0 [ 140.126648][ T5401] nf_getsockopt+0x25e/0x280 [ 140.131310][ T5401] ip_getsockopt+0x1219/0x1660 [ 140.136118][ T5401] ? ip_setsockopt+0x31e0/0x31e0 [ 140.141173][ T5401] ? __might_sleep+0xf0/0xf0 [ 140.145787][ T5401] ? rcu_lock_release+0x9/0x20 [ 140.150558][ T5401] ? __lock_acquire+0x7b50/0x7b50 [ 140.155587][ T5401] ? aa_sk_perm+0x7dc/0x910 [ 140.160103][ T5401] ? aa_af_perm+0x340/0x340 [ 140.164606][ T5401] ? __fget_files+0x402/0x470 [ 140.169286][ T5401] ? aa_sock_opt_perm+0x74/0x100 [ 140.174337][ T5401] ? sctp_getsockopt+0x9e/0x8a0 [ 140.179188][ T5401] ? sock_recv_errqueue+0x580/0x580 [ 140.184478][ T5401] __sys_getsockopt+0x1b0/0x230 [ 140.189335][ T5401] __x64_sys_getsockopt+0xb1/0xc0 [ 140.194369][ T5401] do_syscall_64+0x4c/0xa0 [ 140.198784][ T5401] ? clear_bhb_loop+0x30/0x80 [ 140.203467][ T5401] ? clear_bhb_loop+0x30/0x80 [ 140.208243][ T5401] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.214150][ T5401] RIP: 0033:0x7f77895b6159 [ 140.218577][ T5401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.238194][ T5401] RSP: 002b:00007f778780e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 140.246627][ T5401] RAX: ffffffffffffffda RBX: 00007f778983dfa0 RCX: 00007f77895b6159 [ 140.254997][ T5401] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 140.262992][ T5401] RBP: 00007f778964d06b R08: 00002000000000c0 R09: 0000000000000000 [ 140.270976][ T5401] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 140.278951][ T5401] R13: 00007f778983e038 R14: 00007f778983dfa0 R15: 00007ffe2d0cb838 [ 140.287025][ T5401] [ 141.889639][ T5421] loop6: detected capacity change from 0 to 512 [ 141.947416][ T4197] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.110986][ T5421] EXT4-fs (loop6): Ignoring removed oldalloc option [ 142.217340][ T4197] usb 3-1: Using ep0 maxpacket: 16 [ 142.337910][ T4197] usb 3-1: config 0 has no interfaces? [ 142.368047][ T5421] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.244: iget: bad i_size value: 38620345925642 [ 142.497897][ T4197] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.564675][ T4197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.601179][ T5421] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.244: couldn't read orphan inode 15 (err -117) [ 142.655544][ T5421] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,norecovery,auto_da_alloc,abort,auto_da_alloc=0x0000000000000001,oldalloc,block_validity,,errors=continue. Quota mode: writeback. [ 142.685109][ T4197] usb 3-1: Product: syz [ 142.715919][ T4197] usb 3-1: Manufacturer: syz [ 142.771894][ T4197] usb 3-1: SerialNumber: syz [ 142.783730][ T5421] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.244: bg 0: block 5: invalid block bitmap [ 142.810128][ T4197] usb 3-1: config 0 descriptor?? [ 142.932563][ T5421] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 142.971833][ T5421] EXT4-fs (loop6): This should not happen!! Data will be lost [ 142.971833][ T5421] [ 143.042809][ T5421] EXT4-fs (loop6): Total free blocks count 0 [ 143.086231][ T5421] EXT4-fs (loop6): Free/Dirty block details [ 143.097440][ T5421] EXT4-fs (loop6): free_blocks=0 [ 143.117544][ T5421] EXT4-fs (loop6): dirty_blocks=65 [ 143.145217][ T5421] EXT4-fs (loop6): Block reservation details [ 143.174958][ T5421] EXT4-fs (loop6): i_reserved_data_blocks=65 [ 143.241175][ T5458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.247'. [ 143.574637][ T5325] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.617576][ T4197] usb 3-1: USB disconnect, device number 6 [ 143.705549][ T5466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.254'. [ 143.837414][ T5325] usb 5-1: Using ep0 maxpacket: 32 [ 143.998303][ T5325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.138294][ T5325] usb 5-1: config 165 has an invalid interface number: 162 but max is 0 [ 144.299948][ T5325] usb 5-1: config 165 has no interface number 0 [ 144.318642][ T5325] usb 5-1: config 165 interface 162 has no altsetting 0 [ 146.862856][ T5325] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 146.874315][ T5325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.897275][ T5325] usb 5-1: Product: syz [ 147.692926][ T5490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.257'. [ 148.457435][ T5325] usb 5-1: can't set config #165, error -71 [ 148.478760][ T5325] usb 5-1: USB disconnect, device number 4 [ 148.662393][ T5482] loop2: detected capacity change from 0 to 512 [ 149.736700][ T5482] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.810332][ T5482] EXT4-fs (loop2): 1 truncate cleaned up [ 149.827522][ T5482] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none. [ 151.370512][ T5535] netlink: 48 bytes leftover after parsing attributes in process `syz.6.267'. [ 151.419460][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.267'. [ 151.475929][ T5535] netlink: 96 bytes leftover after parsing attributes in process `syz.6.267'. [ 151.717883][ T5537] team0 (unregistering): Port device team_slave_0 removed [ 151.766477][ T5537] team0 (unregistering): Failed to send options change via netlink (err -105) [ 151.846518][ T5537] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 151.886218][ T5537] team0 (unregistering): Port device team_slave_1 removed [ 152.194851][ T5572] device syzkaller0 entered promiscuous mode [ 152.231726][ T5572] tipc: Started in network mode [ 152.252191][ T5572] tipc: Node identity c22a0652bef, cluster identity 4711 [ 152.277008][ T5572] tipc: Enabled bearer , priority 0 [ 152.352611][ T5582] binder: 5577:5582 ioctl c00c6211 0 returned -22 [ 152.362534][ T5569] tipc: Resetting bearer [ 153.536534][ T5569] tipc: Disabling bearer [ 153.651197][ T4227] tipc: Node number set to 2094663250 [ 153.728194][ T5587] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.879471][ T5587] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.959277][ T5587] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.972215][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.061978][ T5587] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.261538][ T5587] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.274710][ T5587] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.288204][ T5587] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.302201][ T5587] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.567659][ T7] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 154.610349][ T7] usb 5-1: config 0 has no interface number 0 [ 154.630517][ T7] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.507546][ T7] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 155.539651][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.552242][ T7] usb 5-1: Product: syz [ 155.556464][ T7] usb 5-1: Manufacturer: syz [ 155.562752][ T7] usb 5-1: SerialNumber: syz [ 155.578402][ T7] usb 5-1: config 0 descriptor?? [ 155.658936][ T7] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 155.681224][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.290'. [ 155.762008][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.770189][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.000464][ T4227] usb 5-1: USB disconnect, device number 5 [ 156.931791][ T4227] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 157.144347][ T5652] af_packet: tpacket_rcv: packet too big, clamped from 32820 to 3944. macoff=96 [ 158.479295][ T4382] Bluetooth: hci5: Frame reassembly failed (-84) [ 159.127968][ T26] audit: type=1800 audit(1790665886.803:75): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.299" name="ipv4_address" dev="configfs" ino=38490 res=0 errno=0 [ 159.203127][ T26] audit: type=1800 audit(1790665886.833:76): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.299" name="ipv4_port" dev="configfs" ino=38491 res=0 errno=0 [ 159.312745][ T26] audit: type=1800 audit(1790665886.833:77): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.299" name="num" dev="configfs" ino=38492 res=0 errno=0 [ 159.334322][ T26] audit: type=1800 audit(1790665886.833:78): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.299" name="local" dev="configfs" ino=38493 res=0 errno=0 [ 159.856622][ T26] audit: type=1800 audit(1790665886.833:79): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.299" name="dev" dev="configfs" ino=38500 res=0 errno=0 [ 161.442022][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 161.463742][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 162.964872][ T5716] device syzkaller0 entered promiscuous mode [ 163.005113][ T5716] tipc: Started in network mode [ 163.017293][ T5716] tipc: Node identity 9a8b6ea318d2, cluster identity 4711 [ 163.025308][ T5716] tipc: Enabled bearer , priority 0 [ 163.060020][ T5715] tipc: Resetting bearer [ 163.118240][ T5715] tipc: Disabling bearer [ 163.548986][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 163.575352][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 165.798025][ T4225] Bluetooth: hci5: command 0x1009 tx timeout [ 166.052036][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 166.345016][ T5756] file system registered [ 166.538532][ T5760] loop4: detected capacity change from 0 to 128 [ 166.644839][ T5760] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.655702][ T5760] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.693514][ T5760] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.316: No space for directory leaf checksum. Please run e2fsck -D. [ 166.728096][ T5760] EXT4-fs error (device loop4): __ext4_find_entry:1698: inode #2: comm syz.4.316: checksumming directory block 0 [ 167.717954][ T4226] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 167.735782][ T5778] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.745269][ T5778] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.754098][ T5778] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.762953][ T5778] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.878527][ T5778] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 168.267396][ T4226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.843503][ T4226] usb 1-1: config 0 has no interfaces? [ 168.849544][ T4226] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 168.858686][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.881741][ T4226] usb 1-1: config 0 descriptor?? [ 168.910895][ T5790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 169.264509][ T23] usb 1-1: USB disconnect, device number 3 [ 171.545663][ T5827] loop0: detected capacity change from 0 to 2048 [ 173.498158][ T5827] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.509433][ T5827] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.847599][ T26] audit: type=1800 audit(1790665901.513:80): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.330" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 173.922192][ T5837] device syzkaller0 entered promiscuous mode [ 174.185300][ T5841] netlink: 'syz.5.332': attribute type 3 has an invalid length. [ 174.406132][ T5844] ip_tables: iptables: counters copy to user failed while replacing table [ 175.873369][ T5865] loop2: detected capacity change from 0 to 512 [ 175.991712][ T5865] EXT4-fs (loop2): Mount option "journal_dev=0x0000000000000001" incompatible with ext2 [ 176.006311][ T5867] loop0: detected capacity change from 0 to 256 [ 176.087390][ T4227] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 176.377367][ T4227] usb 5-1: Using ep0 maxpacket: 32 [ 176.497673][ T4227] usb 5-1: config 0 has no interfaces? [ 176.658654][ T4227] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 176.736618][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.846976][ T4227] usb 5-1: Product: syz [ 176.874895][ T4227] usb 5-1: Manufacturer: syz [ 176.905661][ T4227] usb 5-1: SerialNumber: syz [ 176.996473][ T4227] usb 5-1: config 0 descriptor?? [ 177.309084][ T4185] usb 5-1: USB disconnect, device number 6 [ 177.805371][ T145] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.896324][ T145] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.066256][ T145] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.172337][ T5880] loop0: detected capacity change from 0 to 32768 [ 178.173840][ T145] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.403748][ T5880] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.340 (5880) [ 178.540638][ T5880] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 178.549819][ T5880] BTRFS info (device loop0): disabling tree log [ 178.556115][ T5880] BTRFS info (device loop0): using free space tree [ 178.569125][ T5886] chnl_net:caif_netlink_parms(): no params data found [ 178.577760][ T5880] BTRFS info (device loop0): has skinny extents [ 178.889025][ T145] tipc: Left network mode [ 178.903002][ T5880] BTRFS info (device loop0): enabling ssd optimizations [ 179.104224][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.140901][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.192339][ T5886] device bridge_slave_0 entered promiscuous mode [ 179.252882][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.280724][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.462115][ T5886] device bridge_slave_1 entered promiscuous mode [ 179.712827][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.736962][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.880537][ T5886] team0: Port device team_slave_0 added [ 180.333767][ T4185] Bluetooth: hci4: command 0x0409 tx timeout [ 180.495831][ T5886] team0: Port device team_slave_1 added [ 180.575739][ T5938] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 180.684445][ T4403] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 180.705973][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.746676][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.891294][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.975412][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.013485][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.158518][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.581530][ T5886] device hsr_slave_0 entered promiscuous mode [ 181.943483][ T5886] device hsr_slave_1 entered promiscuous mode [ 182.143847][ T5886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.162690][ T5886] Cannot create hsr debugfs directory [ 182.517795][ T4225] Bluetooth: hci4: command 0x041b tx timeout [ 184.058049][ T5886] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 184.325229][ T5886] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 184.371910][ T6002] loop2: detected capacity change from 0 to 1024 [ 184.389950][ T5886] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 184.427940][ T5886] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 184.597629][ T4185] Bluetooth: hci4: command 0x040f tx timeout [ 186.187851][ T4225] Bluetooth: hci1: command 0x0406 tx timeout [ 186.270180][ T4185] Bluetooth: hci2: command 0x0406 tx timeout [ 186.276306][ T4185] Bluetooth: hci3: command 0x0406 tx timeout [ 186.417727][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.533550][ T145] device hsr_slave_0 left promiscuous mode [ 186.564038][ T145] device hsr_slave_1 left promiscuous mode [ 186.579805][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.598062][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.619187][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.626659][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.669557][ T4185] Bluetooth: hci4: command 0x0419 tx timeout [ 186.739497][ T145] device bridge_slave_1 left promiscuous mode [ 186.745749][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.014174][ T145] device bridge_slave_0 left promiscuous mode [ 188.124053][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.204177][ T145] device veth1_macvtap left promiscuous mode [ 188.226227][ T145] device veth0_macvtap left promiscuous mode [ 188.256039][ T145] device veth1_vlan left promiscuous mode [ 188.265527][ T145] device veth0_vlan left promiscuous mode [ 188.324137][ T6048] loop2: detected capacity change from 0 to 256 [ 188.411119][ T6048] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.467456][ T6048] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 188.521426][ T6048] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 189.225765][ T145] team0 (unregistering): Port device team_slave_1 removed [ 189.315932][ T145] team0 (unregistering): Port device team_slave_0 removed [ 189.366319][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.409062][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.611968][ T145] bond0 (unregistering): Released all slaves [ 190.424020][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.433484][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.550823][ T6077] netlink: 'syz.5.374': attribute type 11 has an invalid length. [ 190.560859][ T5886] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.583704][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.373'. [ 190.667924][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.696970][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.706949][ T6080] loop4: detected capacity change from 0 to 4096 [ 190.714072][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.721328][ T4382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.762779][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.773589][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.792137][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.799325][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.828401][ T6086] netlink: 36 bytes leftover after parsing attributes in process `syz.5.377'. [ 190.869153][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.885169][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.929951][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.015320][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.062179][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.160060][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.230972][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.301734][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.569868][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.844452][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.018074][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.089841][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.122642][ T5886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.906429][ T6083] loop0: detected capacity change from 0 to 32768 [ 193.242345][ T6083] XFS (loop0): Mounting V5 Filesystem [ 193.303007][ T6120] device syzkaller0 entered promiscuous mode [ 193.976616][ T6083] XFS (loop0): Ending clean mount [ 194.367581][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.374498][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.513987][ T4191] XFS (loop0): Unmounting Filesystem [ 194.567779][ T6134] device syzkaller0 entered promiscuous mode [ 194.681695][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 195.131651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.200762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.365289][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.497826][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 196.877384][ T7] usb 3-1: device descriptor read/all, error -71 [ 198.314681][ T6195] netlink: 144 bytes leftover after parsing attributes in process `syz.0.394'. [ 198.358962][ T6195] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 198.369560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.407645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.631119][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.649664][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.688282][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.726963][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.749750][ T5886] device veth0_vlan entered promiscuous mode [ 198.810131][ T5886] device veth1_vlan entered promiscuous mode [ 198.881400][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.920567][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.968001][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.007410][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.055558][ T5886] device veth0_macvtap entered promiscuous mode [ 199.073108][ T5886] device veth1_macvtap entered promiscuous mode [ 199.136377][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.193863][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.226327][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.259127][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.297185][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.327180][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.378527][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.407008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.419634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.436500][ T6220] loop0: detected capacity change from 0 to 512 [ 199.458209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.478248][ T5978] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 199.487868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.529453][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.579769][ T6220] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 199.596213][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.627044][ T6220] System zones: 1-12 [ 199.646824][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.657623][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.667835][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.684924][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.697034][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.712189][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.717988][ T6220] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.398: missing EA_INODE flag [ 199.742259][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.748258][ T6220] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.398: error while reading EA inode 12 err=-117 [ 199.764411][ T6220] EXT4-fs (loop0): 1 orphan inode deleted [ 199.771707][ T6220] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 199.809553][ T5886] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.846246][ T5886] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.847570][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.859048][ T5886] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.880011][ T5886] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.923300][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.023902][ T5978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.114096][ T5978] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.028110][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.045422][ T5978] usb 3-1: config 0 descriptor?? [ 201.547597][ T4226] Bluetooth: hci0: command 0x0406 tx timeout [ 202.119065][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.127802][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.136862][ T6242] ip_tables: iptables: counters copy to user failed while replacing table [ 202.150311][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.159264][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.167105][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.168682][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.194133][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.212233][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.217489][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.237298][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.287476][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.291617][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 202.295005][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.359107][ T6217] udc-core: couldn't find an available UDC or it's busy [ 202.369937][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.378217][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.386062][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.407422][ T6217] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 202.425726][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.434423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 202.466160][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.485528][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.519676][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.522715][ T6254] loop4: detected capacity change from 0 to 1024 [ 202.558396][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.605724][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.636718][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.638354][ T6254] EXT4-fs (loop4): Ignoring removed oldalloc option [ 202.679446][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.696600][ T7] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 202.707390][ T6254] EXT4-fs (loop4): Ignoring removed oldalloc option [ 202.714084][ T6254] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.727485][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.734916][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.767598][ T7] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 202.778861][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.806050][ T6254] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,inode_readahead_blks=0x0000000000004000,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,nolazytime,,errors=continue. Quota mode: none. [ 202.837334][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.927645][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 202.989041][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 203.047503][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 203.055047][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 203.131459][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 203.186701][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 203.227734][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 203.272038][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 203.321055][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 203.347261][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 203.377277][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 203.411096][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 203.598113][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 203.606419][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 203.624528][ T5978] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 203.633762][ T5978] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 203.745503][ T5978] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 203.845655][ T6279] FAULT_INJECTION: forcing a failure. [ 203.845655][ T6279] name fail_futex, interval 1, probability 0, space 0, times 1 [ 204.537612][ T6279] CPU: 0 PID: 6279 Comm: syz.4.408 Not tainted syzkaller #0 [ 204.544960][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.555236][ T6279] Call Trace: [ 204.558544][ T6279] [ 204.561588][ T6279] dump_stack_lvl+0x188/0x250 [ 204.566299][ T6279] ? psi_task_switch+0x4c3/0x810 [ 204.571410][ T6279] ? show_regs_print_info+0x20/0x20 [ 204.576645][ T6279] ? load_image+0x410/0x410 [ 204.581198][ T6279] should_fail+0x383/0x4b0 [ 204.581993][ T5978] usb 3-1: USB disconnect, device number 9 [ 204.585659][ T6279] get_futex_key+0x1a1/0x12d0 [ 204.596351][ T6279] ? futex_wait_restart+0x250/0x250 [ 204.601584][ T6279] ? finish_lock_switch+0x12d/0x290 [ 204.606818][ T6279] futex_wake+0x101/0x540 [ 204.611185][ T6279] ? __schedule+0x11cb/0x4350 [ 204.615994][ T6279] ? futex_wait+0x680/0x680 [ 204.620711][ T6279] ? finish_lock_switch+0x12d/0x290 [ 204.626560][ T6279] ? lockdep_hardirqs_on+0x94/0x140 [ 204.631802][ T6279] do_futex+0xd83/0x12b0 [ 204.636099][ T6279] ? release_firmware_map_entry+0x190/0x190 [ 204.642030][ T6279] ? __schedule+0x11cb/0x4350 [ 204.646751][ T6279] ? preempt_schedule_irq+0xe6/0x160 [ 204.652079][ T6279] ? futex_exit_release+0x1c0/0x1c0 [ 204.657308][ T6279] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 204.663319][ T6279] ? lock_chain_count+0x20/0x20 [ 204.668222][ T6279] __se_sys_futex+0x389/0x420 [ 204.673107][ T6279] ? lockdep_hardirqs_on+0x94/0x140 [ 204.678343][ T6279] ? __x64_sys_futex+0xf0/0xf0 [ 204.683245][ T6279] ? __x64_sys_futex+0x1d/0xf0 [ 204.688040][ T6279] do_syscall_64+0x4c/0xa0 [ 204.692482][ T6279] ? clear_bhb_loop+0x30/0x80 [ 204.697198][ T6279] ? clear_bhb_loop+0x30/0x80 [ 204.702007][ T6279] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 204.708024][ T6279] RIP: 0033:0x7f77895b6159 [ 204.712471][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.732108][ T6279] RSP: 002b:00007f778780e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 204.740563][ T6279] RAX: ffffffffffffffda RBX: 00007f778983dfa8 RCX: 00007f77895b6159 [ 204.748570][ T6279] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f778983dfac [ 204.756572][ T6279] RBP: 00007f778983dfa0 R08: 002eee9281fe42f2 R09: 0000000000000000 [ 204.764579][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.773017][ T6279] R13: 00007f778983e038 R14: 00007ffe2d0cb750 R15: 00007ffe2d0cb838 [ 204.778566][ T6294] device syzkaller0 entered promiscuous mode [ 204.781125][ T6279] [ 204.822891][ T6291] fido_id[6291]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 205.363385][ T6308] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 206.264629][ T6318] bridge0: received packet on macvlan2 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 206.338631][ T6308] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 207.196165][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.417'. [ 207.434766][ T6329] device syzkaller0 entered promiscuous mode [ 208.535186][ T6346] device syzkaller0 entered promiscuous mode [ 208.567332][ T6346] tipc: Enabled bearer , priority 0 [ 208.624471][ T6345] tipc: Resetting bearer [ 208.654672][ T6324] loop7: detected capacity change from 0 to 32768 [ 208.722523][ T6345] tipc: Disabling bearer [ 208.744381][ T6352] jffs2: notice: (6352) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 208.864412][ T6357] autofs4:pid:6357:autofs_fill_super: called with bogus options [ 209.079792][ T6324] JBD2: Ignoring recovery information on journal [ 210.172614][ T6324] JBD2: recovery failed [ 210.224193][ T6324] (syz.7.416,6324,0):ocfs2_journal_load:1106 ERROR: Failed to load journal! [ 210.233710][ T6374] device lo entered promiscuous mode [ 210.297464][ T6324] (syz.7.416,6324,1):ocfs2_check_volume:2435 ERROR: ocfs2 journal load failed! -5 [ 210.357747][ T6324] (syz.7.416,6324,0):ocfs2_check_volume:2491 ERROR: status = -5 [ 210.385993][ T6324] (syz.7.416,6324,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 210.488431][ T6324] (syz.7.416,6324,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 211.397459][ T6374] device tunl0 entered promiscuous mode [ 211.426144][ T6374] device gre0 entered promiscuous mode [ 211.548065][ T6374] device gretap0 entered promiscuous mode [ 211.662889][ T6374] device erspan0 entered promiscuous mode [ 211.744792][ T6374] device ip_vti0 entered promiscuous mode [ 212.749131][ T6374] device ip6_vti0 entered promiscuous mode [ 212.812893][ T6374] device sit0 entered promiscuous mode [ 212.898166][ T6374] device ip6tnl0 entered promiscuous mode [ 212.957635][ T6374] device ip6gre0 entered promiscuous mode [ 212.985703][ T6374] device syz_tun entered promiscuous mode [ 213.009896][ T6374] device ip6gretap0 entered promiscuous mode [ 213.029639][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.037396][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.047290][ T6374] device bridge0 entered promiscuous mode [ 213.065424][ T6374] device vcan0 entered promiscuous mode [ 213.077007][ T6374] device bond0 entered promiscuous mode [ 213.082632][ T6374] device bond_slave_0 entered promiscuous mode [ 213.089304][ T6374] device bond_slave_1 entered promiscuous mode [ 213.112656][ T6374] device team0 entered promiscuous mode [ 213.118586][ T6374] device team_slave_0 entered promiscuous mode [ 213.124889][ T6374] device team_slave_1 entered promiscuous mode [ 213.146454][ T6374] device dummy0 entered promiscuous mode [ 213.168786][ T6374] device nlmon0 entered promiscuous mode [ 213.181516][ T6374] device caif0 entered promiscuous mode [ 213.187656][ T6374] device vxcan0 entered promiscuous mode [ 213.195763][ T6374] device vxcan1 entered promiscuous mode [ 213.197783][ T5975] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 213.209140][ T6374] device veth0 entered promiscuous mode [ 213.219416][ T6374] device veth1 entered promiscuous mode [ 213.250978][ T6374] device wg0 entered promiscuous mode [ 213.259379][ T6374] device wg1 entered promiscuous mode [ 213.273149][ T6374] device wg2 entered promiscuous mode [ 213.289211][ T6374] device veth0_to_bridge entered promiscuous mode [ 213.333058][ T6374] device veth1_to_bridge entered promiscuous mode [ 213.363692][ T6374] device veth0_to_bond entered promiscuous mode [ 213.389806][ T6374] device veth1_to_bond entered promiscuous mode [ 213.418076][ T6374] device veth0_to_team entered promiscuous mode [ 213.447227][ T5975] usb 5-1: Using ep0 maxpacket: 16 [ 213.454118][ T6374] device veth1_to_team entered promiscuous mode [ 213.485366][ T6374] device veth0_to_batadv entered promiscuous mode [ 213.499674][ T6374] device batadv_slave_0 entered promiscuous mode [ 213.506504][ T6374] device xfrm0 entered promiscuous mode [ 213.532149][ T6374] device veth0_to_hsr entered promiscuous mode [ 213.554247][ T6374] device veth1_to_hsr entered promiscuous mode [ 213.567604][ T5975] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 213.575862][ T5975] usb 5-1: config 0 has no interface number 0 [ 213.609039][ T6374] device hsr0 entered promiscuous mode [ 213.631665][ T6374] device veth1_virt_wifi entered promiscuous mode [ 213.654313][ T6374] device veth0_virt_wifi entered promiscuous mode [ 213.663534][ T6374] device virt_wifi0 entered promiscuous mode [ 213.717986][ T6374] device vlan0 entered promiscuous mode [ 213.724555][ T6374] device vlan1 entered promiscuous mode [ 213.736846][ T6374] device macvlan0 entered promiscuous mode [ 213.740967][ T5975] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 213.752525][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.760633][ T5975] usb 5-1: Product: syz [ 213.764822][ T5975] usb 5-1: Manufacturer: syz [ 213.769563][ T5975] usb 5-1: SerialNumber: syz [ 213.776815][ T5975] usb 5-1: config 0 descriptor?? [ 213.784719][ T6374] device macvlan1 entered promiscuous mode [ 213.812794][ T6374] device ipvlan0 entered promiscuous mode [ 213.819090][ T6374] device ipvlan1 entered promiscuous mode [ 213.819486][ T5975] hub 5-1:0.132: bad descriptor, ignoring hub [ 213.831399][ T5975] hub: probe of 5-1:0.132 failed with error -5 [ 213.840774][ T5975] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input9 [ 213.871425][ T6374] device macvtap0 entered promiscuous mode [ 213.881217][ T6374] device macsec0 entered promiscuous mode [ 213.897734][ T6374] device geneve0 entered promiscuous mode [ 213.906642][ T6374] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.916770][ T6374] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.932805][ T6374] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.979102][ T6374] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.988421][ T6374] device geneve1 entered promiscuous mode [ 214.016250][ T6374] device netdevsim0 entered promiscuous mode [ 214.046705][ T6374] device netdevsim1 entered promiscuous mode [ 214.086079][ T6374] device netdevsim2 entered promiscuous mode [ 214.121310][ T6374] device netdevsim3 entered promiscuous mode [ 214.157573][ T6374] device wlan0 entered promiscuous mode [ 214.177820][ T6374] device wlan1 entered promiscuous mode [ 214.200509][ T6374] device batadv0 entered promiscuous mode [ 214.399004][ T6413] loop4: detected capacity change from 0 to 32768 [ 214.549298][ T6413] jfs_mount: Mount Failure: superblock is corrupt! [ 215.538750][ T6413] Mount JFS Failure: -22 [ 215.788189][ T6413] jfs_mount failed w/return code = -22 [ 216.329005][ T5978] usb 5-1: USB disconnect, device number 7 [ 216.400196][ T6454] tipc: Started in network mode [ 216.442941][ T6454] tipc: Node identity 4, cluster identity 4711 [ 216.502169][ T6454] tipc: Node number set to 4 [ 216.562252][ T6444] loop0: detected capacity change from 0 to 8192 [ 216.763435][ T6444] loop0: p1 p2 p3 [ 216.780193][ T6444] loop0: partition table partially beyond EOD, truncated [ 216.816820][ T6444] loop0: p1 start 68157184 is beyond EOD, truncated [ 220.118392][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.141308][ T6492] Set syz0 is full, maxelem 0 reached [ 220.326600][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 220.352142][ T4260] udevd[4260]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 220.430129][ T6507] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 220.467625][ C1] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 220.503410][ T6510] device vlan2 entered promiscuous mode [ 221.895088][ T6526] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 222.243568][ T26] audit: type=1800 audit(1790665949.883:81): pid=6535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.461" name="protocol" dev="configfs" ino=40774 res=0 errno=0 [ 222.771903][ T6526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.872748][ T6562] netlink: 'syz.2.468': attribute type 10 has an invalid length. [ 224.183172][ T6560] Set syz0 is full, maxelem 0 reached [ 224.201777][ T6562] netlink: 'syz.2.468': attribute type 10 has an invalid length. [ 224.298049][ T6577] netlink: 20 bytes leftover after parsing attributes in process `syz.5.470'. [ 224.689175][ T6578] loop7: detected capacity change from 0 to 512 [ 225.141151][ T6562] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 226.891644][ T6578] EXT4-fs warning (device loop7): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop7. [ 228.540618][ T6609] loop2: detected capacity change from 0 to 256 [ 228.583035][ T6612] netlink: 32 bytes leftover after parsing attributes in process `syz.0.488'. [ 228.601592][ T6612] netlink: 32 bytes leftover after parsing attributes in process `syz.0.488'. [ 228.837013][ T6625] device wlan0 left promiscuous mode [ 228.971193][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.987466][ T26] audit: type=1800 audit(1790665956.663:82): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.483" name="protocol" dev="configfs" ino=43022 res=0 errno=0 [ 229.907320][ T5978] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 230.186735][ T6653] loop2: detected capacity change from 0 to 1024 [ 230.329166][ T5978] usb 8-1: Using ep0 maxpacket: 16 [ 230.477758][ T5978] usb 8-1: config 0 has no interfaces? [ 230.648194][ T5978] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.736445][ T5978] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.909570][ T5978] usb 8-1: Product: syz [ 231.006553][ T5978] usb 8-1: Manufacturer: syz [ 231.137269][ T5978] usb 8-1: SerialNumber: syz [ 231.174203][ T5978] usb 8-1: config 0 descriptor?? [ 231.221370][ T6653] EXT4-fs (loop2): Test dummy encryption mode enabled [ 231.297632][ T6653] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 231.427864][ T6681] ipt_REJECT: TCP_RESET invalid for non-tcp [ 231.633090][ T6690] netlink: 16 bytes leftover after parsing attributes in process `syz.7.485'. [ 231.783589][ T13] usb 8-1: USB disconnect, device number 2 [ 231.824528][ T6646] loop0: detected capacity change from 0 to 32768 [ 231.874142][ T6694] device syzkaller0 entered promiscuous mode [ 231.992243][ T6646] XFS (loop0): Mounting V5 Filesystem [ 232.147674][ T6646] XFS (loop0): Ending clean mount [ 232.486690][ T6714] loop7: detected capacity change from 0 to 256 [ 232.536389][ T4191] XFS (loop0): Unmounting Filesystem [ 232.696485][ T6724] device lo entered promiscuous mode [ 232.873561][ T6727] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 232.884144][ T6727] FAT-fs (loop7): Filesystem has been set read-only [ 232.891218][ T6727] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 232.901550][ T6727] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 232.919061][ T6727] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 233.061335][ T26] audit: type=1800 audit(1790665960.583:83): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.500" name="file1" dev="loop7" ino=1048614 res=0 errno=0 [ 234.067300][ T6724] device tunl0 entered promiscuous mode [ 234.145365][ T6724] device gre0 entered promiscuous mode [ 234.606190][ T6724] device gretap0 entered promiscuous mode [ 234.681636][ T6724] device erspan0 entered promiscuous mode [ 234.734773][ T6758] FAULT_INJECTION: forcing a failure. [ 234.734773][ T6758] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 234.749683][ T6758] CPU: 0 PID: 6758 Comm: syz.0.512 Not tainted syzkaller #0 [ 234.757006][ T6758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.767097][ T6758] Call Trace: [ 234.770411][ T6758] [ 234.773366][ T6758] dump_stack_lvl+0x188/0x250 [ 234.778085][ T6758] ? show_regs_print_info+0x20/0x20 [ 234.783326][ T6758] ? load_image+0x410/0x410 [ 234.787951][ T6758] ? mark_lock+0x94/0x320 [ 234.792507][ T6758] should_fail+0x383/0x4b0 [ 234.796963][ T6758] prepare_alloc_pages+0x1e3/0x5b0 [ 234.802115][ T6758] __alloc_pages+0x11b/0x480 [ 234.806728][ T6758] ? zone_statistics+0x170/0x170 [ 234.811696][ T6758] ? rcu_lock_acquire+0x30/0x30 [ 234.816579][ T6758] ? alloc_pages+0x452/0x560 [ 234.821198][ T6758] __get_free_pages+0x8/0x30 [ 234.825811][ T6758] __tlb_remove_page_size+0x1f2/0x3f0 [ 234.831224][ T6758] unmap_page_range+0xfcf/0x2410 [ 234.836225][ T6758] unmap_vmas+0x131/0x250 [ 234.840590][ T6758] ? unmap_page_range+0x2410/0x2410 [ 234.845810][ T6758] ? __mutex_lock_common+0x435/0x2400 [ 234.851290][ T6758] ? exit_mm_release+0x16/0x30 [ 234.856088][ T6758] exit_mmap+0x3b9/0x640 [ 234.860356][ T6758] ? vm_brk+0x20/0x20 [ 234.864386][ T6758] ? uprobe_clear_state+0x2f6/0x460 [ 234.869624][ T6758] __mmput+0x115/0x390 [ 234.874084][ T6758] exit_mm+0x632/0x7b0 [ 234.878173][ T6758] ? perf_pmu_migrate_context+0xb70/0xb70 [ 234.883922][ T6758] ? do_exit+0x2110/0x2110 [ 234.888534][ T6758] ? __ia32_sys_timer_delete+0x40/0x40 [ 234.894022][ T6758] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 234.899663][ T6758] ? tty_audit_exit+0x149/0x1f0 [ 234.904518][ T6758] do_exit+0x5b8/0x2110 [ 234.908680][ T6758] ? put_task_struct+0x80/0x80 [ 234.913455][ T6758] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 234.919446][ T6758] ? _raw_spin_lock_irq+0xb7/0xf0 [ 234.924481][ T6758] do_group_exit+0x12c/0x2f0 [ 234.929076][ T6758] ? lockdep_hardirqs_on+0x94/0x140 [ 234.934280][ T6758] get_signal+0x7eb/0x12e0 [ 234.938724][ T6758] arch_do_signal_or_restart+0xe6/0x12a0 [ 234.944376][ T6758] ? futex_exit_release+0x1c0/0x1c0 [ 234.949574][ T6758] ? get_sigframe_size+0x10/0x10 [ 234.954531][ T6758] ? __context_tracking_exit+0x4c/0x80 [ 234.960024][ T6758] ? exit_to_user_mode_loop+0x3b/0x130 [ 234.965671][ T6758] exit_to_user_mode_loop+0x9e/0x130 [ 234.970969][ T6758] exit_to_user_mode_prepare+0xee/0x180 [ 234.976622][ T6758] syscall_exit_to_user_mode+0x16/0x40 [ 234.982122][ T6758] do_syscall_64+0x58/0xa0 [ 234.986551][ T6758] ? clear_bhb_loop+0x30/0x80 [ 234.991233][ T6758] ? clear_bhb_loop+0x30/0x80 [ 234.996087][ T6758] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 235.001980][ T6758] RIP: 0033:0x7f44ab727159 [ 235.006405][ T6758] Code: Unable to access opcode bytes at RIP 0x7f44ab72712f. [ 235.013777][ T6758] RSP: 002b:00007f44a997f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 235.022194][ T6758] RAX: 0000000000000001 RBX: 00007f44ab9aefa8 RCX: 00007f44ab727159 [ 235.030166][ T6758] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f44ab9aefac [ 235.038144][ T6758] RBP: 00007f44ab9aefa0 R08: 0028601d3dd12b18 R09: 0000000000000000 [ 235.046112][ T6758] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 235.054085][ T6758] R13: 00007f44ab9af038 R14: 00007fff27506e50 R15: 00007fff27506f38 [ 235.062102][ T6758] [ 235.066200][ T6724] device ip_vti0 entered promiscuous mode [ 235.121862][ T6724] device ip6_vti0 entered promiscuous mode [ 235.182021][ T6724] device sit0 entered promiscuous mode [ 235.298632][ T6724] device ip6tnl0 entered promiscuous mode [ 235.385690][ T6724] device ip6gre0 entered promiscuous mode [ 235.453990][ T6724] device syz_tun entered promiscuous mode [ 235.531334][ T6724] device ip6gretap0 entered promiscuous mode [ 235.627737][ T6724] bridge0: port 3(macvlan2) entered disabled state [ 235.635176][ T6724] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.642762][ T6724] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.767896][ T6724] device bond0 entered promiscuous mode [ 235.773877][ T6724] device bond_slave_0 entered promiscuous mode [ 235.814098][ T6724] device bond_slave_1 entered promiscuous mode [ 235.827498][ T6724] device dummy0 entered promiscuous mode [ 235.937422][ T6724] device nlmon0 entered promiscuous mode [ 235.962018][ T6724] device caif0 entered promiscuous mode [ 235.992110][ T6724] device batadv0 entered promiscuous mode [ 236.064436][ T6724] device vxcan0 entered promiscuous mode [ 236.095962][ T6724] device vxcan1 entered promiscuous mode [ 236.129139][ T6724] device veth0 entered promiscuous mode [ 236.185796][ T6724] device veth1 entered promiscuous mode [ 236.292780][ T6724] device wg0 entered promiscuous mode [ 236.378984][ T6724] device wg1 entered promiscuous mode [ 236.435139][ T6724] device wg2 entered promiscuous mode [ 236.467675][ T6724] device veth0_to_bridge entered promiscuous mode [ 236.593308][ T6724] device veth1_to_bridge entered promiscuous mode [ 237.430562][ T6724] device veth0_to_bond entered promiscuous mode [ 237.477396][ T6724] device veth1_to_bond entered promiscuous mode [ 237.516240][ T6724] device veth0_to_team entered promiscuous mode [ 237.525512][ T6724] device team_slave_0 entered promiscuous mode [ 237.553417][ T6724] device veth1_to_team entered promiscuous mode [ 237.563215][ T6724] device team_slave_1 entered promiscuous mode [ 237.597263][ T6724] device veth0_to_batadv entered promiscuous mode [ 237.619500][ T6724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.641482][ T6724] device batadv_slave_0 entered promiscuous mode [ 237.662199][ T6724] device veth1_to_batadv entered promiscuous mode [ 237.672758][ T6724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.680739][ T6724] device batadv_slave_1 entered promiscuous mode [ 237.691820][ T6724] device xfrm0 entered promiscuous mode [ 237.723822][ T6724] device veth0_to_hsr entered promiscuous mode [ 237.738381][ T6724] device veth1_to_hsr entered promiscuous mode [ 237.758368][ T6724] device hsr0 entered promiscuous mode [ 237.774413][ T6724] device veth1_virt_wifi entered promiscuous mode [ 237.799802][ T6724] device veth0_virt_wifi entered promiscuous mode [ 237.811264][ T6724] device virt_wifi0 entered promiscuous mode [ 237.852599][ T6724] device vlan0 entered promiscuous mode [ 237.864699][ T6724] device vlan1 entered promiscuous mode [ 237.888889][ T6724] device macvlan0 entered promiscuous mode [ 237.909932][ T6724] device macvlan1 entered promiscuous mode [ 237.918932][ T6724] device ipvlan0 entered promiscuous mode [ 237.924820][ T6724] device ipvlan1 entered promiscuous mode [ 237.952024][ T6724] device macvtap0 entered promiscuous mode [ 237.967409][ T6724] device macsec0 entered promiscuous mode [ 237.977905][ T6724] device geneve0 entered promiscuous mode [ 237.991454][ T6724] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.000752][ T6724] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.009646][ T6724] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.018616][ T6724] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.029193][ T6724] device geneve1 entered promiscuous mode [ 238.058303][ T6724] device wlan0 entered promiscuous mode [ 238.073483][ T6724] device wlan1 entered promiscuous mode [ 238.091096][ T6724] device syztnl2 entered promiscuous mode [ 238.099192][ T6724] device syztnl1 entered promiscuous mode [ 238.120702][ T6724] device gre1 entered promiscuous mode [ 238.148913][ T6724] device gretap1 entered promiscuous mode [ 238.154924][ T6724] device eth0 entered promiscuous mode [ 238.177438][ T6724] device eth1 entered promiscuous mode [ 238.190365][ T6724] device eth2 entered promiscuous mode [ 238.196156][ T6724] device eth3 entered promiscuous mode [ 238.209869][ T6724] device bridge1 entered promiscuous mode [ 238.222647][ T6724] device ip6gre1 entered promiscuous mode [ 238.282216][ T6773] device bond_slave_0 entered promiscuous mode [ 238.289435][ T6773] device bond_slave_1 entered promiscuous mode [ 238.317995][ T6773] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 238.428646][ T6773] bond2: (slave macvlan2): making interface the new active one [ 238.448756][ T6773] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 238.477972][ T6777] netlink: 14 bytes leftover after parsing attributes in process `syz.0.506'. [ 238.547429][ T6777] device bond_slave_0 left promiscuous mode [ 238.554766][ T6777] device bond_slave_1 left promiscuous mode [ 238.635778][ T6777] bond2: (slave macvlan2): Releasing active interface [ 238.691886][ T6777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.725125][ T6777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.754932][ T6777] bond0 (unregistering): Released all slaves [ 238.772317][ T6775] batman_adv: batadv0: Adding interface: dummy0 [ 238.780211][ T6775] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.805595][ T6775] batman_adv: batadv0: Interface activated: dummy0 [ 240.418142][ T6828] overlayfs: failed to clone upperpath [ 240.693507][ T6827] netlink: 14 bytes leftover after parsing attributes in process `syz.4.528'. [ 241.233379][ T6827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.270427][ T6827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.317716][ T6827] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 241.335399][ T6842] loop0: detected capacity change from 0 to 512 [ 241.343895][ T6827] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.353125][ T6827] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.362210][ T6827] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.371439][ T6827] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.459275][ T6827] bond0 (unregistering): Released all slaves [ 241.485230][ T6842] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.911577][ T6842] EXT4-fs (loop0): 1 truncate cleaned up [ 241.957622][ T6842] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none. [ 242.908086][ T6870] netlink: 'syz.5.525': attribute type 10 has an invalid length. [ 244.133455][ T6870] device dummy0 left promiscuous mode [ 244.221760][ T6870] device dummy0 entered promiscuous mode [ 244.235677][ T6870] team0: Port device dummy0 added [ 244.305323][ T6866] device lo entered promiscuous mode [ 245.923368][ T6866] device tunl0 entered promiscuous mode [ 245.998489][ T6866] device gre0 entered promiscuous mode [ 246.012093][ T6896] overlayfs: failed to resolve './bus': -2 [ 246.172152][ T6866] device gretap0 entered promiscuous mode [ 247.069812][ T6866] device erspan0 entered promiscuous mode [ 247.106163][ T6866] device ip_vti0 entered promiscuous mode [ 247.131292][ T6866] device ip6_vti0 entered promiscuous mode [ 247.153568][ T6866] device sit0 entered promiscuous mode [ 247.224233][ T6866] device ip6tnl0 entered promiscuous mode [ 247.531984][ T6866] device ip6gre0 entered promiscuous mode [ 247.789192][ T6914] loop2: detected capacity change from 0 to 256 [ 247.825643][ T6866] device syz_tun entered promiscuous mode [ 247.852359][ T6866] device ip6gretap0 entered promiscuous mode [ 247.877955][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.885570][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.894330][ T6866] device bridge0 entered promiscuous mode [ 247.913126][ T6914] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 247.925661][ T6866] device vcan0 entered promiscuous mode [ 249.343852][ T6866] device bond0 entered promiscuous mode [ 249.349743][ T6866] device bond_slave_0 entered promiscuous mode [ 249.356068][ T6866] device bond_slave_1 entered promiscuous mode [ 249.404418][ T6866] device team0 entered promiscuous mode [ 249.411969][ T6866] device team_slave_0 entered promiscuous mode [ 249.428378][ T6866] device team_slave_1 entered promiscuous mode [ 249.448120][ T6866] batman_adv: batadv0: Interface deactivated: dummy0 [ 249.470642][ T6866] device dummy0 entered promiscuous mode [ 249.498816][ T6866] device nlmon0 entered promiscuous mode [ 249.506050][ T6866] device caif0 entered promiscuous mode [ 249.512693][ T6866] device batadv0 entered promiscuous mode [ 249.535895][ T6866] device vxcan0 entered promiscuous mode [ 249.553617][ T6866] device vxcan1 entered promiscuous mode [ 249.573159][ T6866] device veth0 entered promiscuous mode [ 249.601022][ T6866] device veth1 entered promiscuous mode [ 249.622415][ T6866] device wg0 entered promiscuous mode [ 249.639111][ T6866] device wg1 entered promiscuous mode [ 249.655577][ T6866] device wg2 entered promiscuous mode [ 249.671664][ T6866] device veth0_to_bridge entered promiscuous mode [ 249.703103][ T6866] device veth1_to_bridge entered promiscuous mode [ 249.725937][ T6866] device veth0_to_bond entered promiscuous mode [ 249.755015][ T6866] device veth1_to_bond entered promiscuous mode [ 249.781171][ T6866] device veth0_to_team entered promiscuous mode [ 249.811230][ T6866] device veth1_to_team entered promiscuous mode [ 249.843152][ T6866] device veth0_to_batadv entered promiscuous mode [ 249.851724][ T6866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.859661][ T6866] device batadv_slave_0 entered promiscuous mode [ 249.890900][ T6866] device veth1_to_batadv entered promiscuous mode [ 249.900761][ T6866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.914121][ T6866] device batadv_slave_1 entered promiscuous mode [ 249.931242][ T6866] device xfrm0 entered promiscuous mode [ 249.962476][ T6866] device veth0_to_hsr entered promiscuous mode [ 249.996172][ T6866] device veth1_to_hsr entered promiscuous mode [ 250.028139][ T6866] device hsr0 entered promiscuous mode [ 250.044802][ T6866] device veth1_virt_wifi entered promiscuous mode [ 250.065899][ T6866] device veth0_virt_wifi entered promiscuous mode [ 250.074490][ T6866] device virt_wifi0 entered promiscuous mode [ 250.131135][ T6866] device vlan0 entered promiscuous mode [ 250.136840][ T6866] device vlan1 entered promiscuous mode [ 250.144180][ T6866] device macvlan0 entered promiscuous mode [ 250.172755][ T6866] device macvlan1 entered promiscuous mode [ 250.188735][ T6866] device ipvlan0 entered promiscuous mode [ 250.194807][ T6866] device ipvlan1 entered promiscuous mode [ 250.243606][ T6866] device macvtap0 entered promiscuous mode [ 250.265243][ T6866] device macsec0 entered promiscuous mode [ 250.288882][ T6866] device geneve0 entered promiscuous mode [ 250.309987][ T6866] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.319014][ T6866] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.328909][ T6866] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.338218][ T6866] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.347754][ T6866] device geneve1 entered promiscuous mode [ 250.373146][ T6866] device netdevsim0 entered promiscuous mode [ 250.390266][ T6866] device netdevsim1 entered promiscuous mode [ 250.398062][ T6866] device netdevsim2 entered promiscuous mode [ 250.417511][ T6866] device netdevsim3 entered promiscuous mode [ 250.436143][ T6866] device wlan0 entered promiscuous mode [ 250.453942][ T6866] device wlan1 entered promiscuous mode [ 250.463933][ T6866] device gretap1 entered promiscuous mode [ 250.475964][ T6876] netlink: 'syz.5.525': attribute type 10 has an invalid length. [ 250.494313][ T6876] device dummy0 left promiscuous mode [ 250.505181][ T6876] team0: Port device dummy0 removed [ 250.513123][ T6876] device dummy0 entered promiscuous mode [ 250.519053][ T6876] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 250.543331][ T6910] netlink: 'syz.4.545': attribute type 10 has an invalid length. [ 250.576847][ T6910] device syz_tun entered promiscuous mode [ 252.102272][ T6936] netlink: 14 bytes leftover after parsing attributes in process `syz.5.541'. [ 252.118185][ T6936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.132431][ T6936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.218801][ T6936] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 252.817986][ T6936] device dummy0 left promiscuous mode [ 253.918240][ T6936] bond0 (unregistering): Released all slaves [ 254.328249][ T6978] overlayfs: failed to clone upperpath [ 255.520079][ T6994] futex_wake_op: syz.0.555 tries to shift op by 144; fix this program [ 256.279854][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.286814][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.347534][ T7001] tipc: Enabling of bearer rejected, failed to enable media [ 260.649877][ T5398] Bluetooth: hci5: Frame reassembly failed (-84) [ 261.558912][ T7059] loop2: detected capacity change from 0 to 64 [ 262.668756][ T5975] Bluetooth: hci5: command 0x1003 tx timeout [ 262.678070][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 263.902185][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.572'. [ 264.584929][ T7088] loop2: detected capacity change from 0 to 2048 [ 264.645602][ T7088] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 264.733647][ T7088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.747271][ T5975] Bluetooth: hci5: command 0x1001 tx timeout [ 264.753383][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 267.560224][ T1111] Bluetooth: hci5: command 0x1009 tx timeout [ 273.514783][ T1108] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 273.937062][ T1108] usb 8-1: Using ep0 maxpacket: 32 [ 273.948542][ T7174] loop0: detected capacity change from 0 to 16 [ 274.041169][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.5.595'. [ 274.614047][ T1108] usb 8-1: config 0 has no interfaces? [ 274.777406][ T7174] erofs: (device loop0): mounted with root inode @ nid 36. [ 274.823041][ T7174] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 275.015789][ T7174] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 275.024413][ T1108] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 275.777721][ T1108] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.795319][ T1108] usb 8-1: Product: syz [ 275.801555][ T1108] usb 8-1: Manufacturer: syz [ 275.806285][ T1108] usb 8-1: SerialNumber: syz [ 275.832520][ T1108] usb 8-1: config 0 descriptor?? [ 275.888004][ T1108] usb 8-1: can't set config #0, error -71 [ 275.989532][ T1108] usb 8-1: USB disconnect, device number 3 [ 280.297210][ T7231] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7231] [ 282.285792][ T7259] netlink: 36 bytes leftover after parsing attributes in process `syz.4.617'. [ 284.434237][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 302.074251][ T7449] loop2: detected capacity change from 0 to 512 [ 302.843598][ T7463] Invalid option length (409) for dns_resolver key [ 303.088723][ T7449] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 303.599241][ T7449] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.924857][ T7476] trusted_key: encrypted_key: insufficient parameters specified [ 303.936797][ T7476] netlink: 'syz.0.659': attribute type 9 has an invalid length. [ 303.944736][ T7476] netlink: 'syz.0.659': attribute type 7 has an invalid length. [ 303.952535][ T7476] netlink: 'syz.0.659': attribute type 8 has an invalid length. [ 304.945597][ T4262] Bluetooth: hci4: command 0x0406 tx timeout [ 305.715355][ T7485] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.973063][ T7511] netlink: 144 bytes leftover after parsing attributes in process `syz.7.666'. [ 308.755765][ T7517] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 315.146296][ T7600] loop2: detected capacity change from 0 to 512 [ 315.843285][ T7600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 316.077268][ T7600] System zones: 1-12 [ 316.211394][ T7600] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.680: missing EA_INODE flag [ 316.284731][ T7600] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.680: error while reading EA inode 12 err=-117 [ 316.346996][ T7600] EXT4-fs (loop2): 1 orphan inode deleted [ 316.417250][ T7600] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 318.546209][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.552585][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.686695][ T7658] device syzkaller0 entered promiscuous mode [ 322.700296][ T7676] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 322.780408][ T7680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.938837][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.697'. [ 325.683338][ T7710] loop7: detected capacity change from 0 to 128 [ 325.829042][ T7710] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 325.848398][ T7710] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.875051][ T7709] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.701: No space for directory leaf checksum. Please run e2fsck -D. [ 325.897437][ T7709] EXT4-fs error (device loop7): __ext4_find_entry:1698: inode #2: comm syz.7.701: checksumming directory block 0 [ 327.359475][ T7725] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 327.393344][ T7725] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 330.007813][ T7743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.918521][ T7752] futex_wake_op: syz.4.713 tries to shift op by 144; fix this program [ 331.949886][ T7763] loop7: detected capacity change from 0 to 128 [ 333.458690][ T7763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 333.588385][ T7763] System zones: 1-3, 19-19, 35-36 [ 334.180647][ T7763] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 334.197693][ T7763] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 335.587922][ T7791] loop2: detected capacity change from 0 to 512 [ 336.588575][ T26] audit: type=1326 audit(1790666068.955:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab727159 code=0x7ffc0000 [ 338.562572][ T26] audit: type=1326 audit(1790666068.955:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab727159 code=0x7ffc0000 [ 338.854925][ T26] audit: type=1326 audit(1790666068.955:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab727159 code=0x7ffc0000 [ 340.193613][ T26] audit: type=1326 audit(1790666068.955:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab727159 code=0x7ffc0000 [ 340.627189][ T26] audit: type=1326 audit(1790666068.955:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f44ab727159 code=0x7ffc0000 [ 341.300621][ T26] audit: type=1326 audit(1790666068.955:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f44ab726ec2 code=0x7ffc0000 [ 341.439234][ T6783] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 341.498238][ T26] audit: type=1326 audit(1790666068.955:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f44ab726ec2 code=0x7ffc0000 [ 341.957686][ T26] audit: type=1326 audit(1790666068.955:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab727159 code=0x7ffc0000 [ 341.969038][ T7833] tipc: Started in network mode [ 342.014162][ T7839] overlayfs: missing 'lowerdir' [ 342.068054][ T7833] tipc: Node identity 52751689551c, cluster identity 4711 [ 342.689263][ T26] audit: type=1326 audit(1790666068.955:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab727159 code=0x7ffc0000 [ 342.715175][ T7833] tipc: Enabled bearer , priority 0 [ 342.783495][ T26] audit: type=1326 audit(1790666068.955:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44ab6e798e code=0x7ffc0000 [ 342.808672][ T6783] usb 3-1: device descriptor read/all, error -71 [ 342.845575][ T26] audit: type=1326 audit(1790666069.045:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44ab6e798e code=0x7ffc0000 [ 342.868470][ T7833] tipc: Resetting bearer [ 342.911108][ T7830] tipc: Disabling bearer [ 342.924738][ T26] audit: type=1326 audit(1790666069.045:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44ab6e798e code=0x7ffc0000 [ 342.990179][ T26] audit: type=1326 audit(1790666069.045:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44ab6e798e code=0x7ffc0000 [ 343.018732][ T26] audit: type=1326 audit(1790666069.045:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44ab6e798e code=0x7ffc0000 [ 343.057343][ T26] audit: type=1326 audit(1790666069.045:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44ab6e798e code=0x7ffc0000 [ 343.117543][ T7862] ------------[ cut here ]------------ [ 343.162021][ T26] audit: type=1326 audit(1790666069.045:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44ab6e798e code=0x7ffc0000 [ 343.249623][ T26] audit: type=1326 audit(1790666069.055:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.0.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44ab6e798e code=0x7ffc0000 [ 343.294899][ T7862] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 343.433352][ T7862] WARNING: CPU: 0 PID: 7862 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 343.534999][ T7862] Modules linked in: [ 343.553482][ T7862] CPU: 0 PID: 7862 Comm: syz.4.742 Not tainted syzkaller #0 [ 343.580568][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.595269][ T7862] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 343.607414][ T7862] Code: 9f 79 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 51 39 8b 4c 89 e6 89 ea e8 a5 a0 71 00 <0f> 0b e9 07 fd ff ff e8 69 6b 34 f8 0f 0b e9 b1 fe ff ff e8 5d 6b [ 343.634659][ T7862] RSP: 0018:ffffc90002fef240 EFLAGS: 00010246 [ 343.641081][ T7862] RAX: 6bddb31074f71100 RBX: 0000000000400000 RCX: 0000000000080000 [ 343.655231][ T7862] RDX: ffffc9000f4ed000 RSI: 00000000000054dc RDI: 00000000000054dd [ 343.663889][ T7862] RBP: 0000000000000004 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 343.680745][ T7862] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88805e844000 [ 343.690497][ T7862] R13: ffff88805e845290 R14: ffff888077970e00 R15: ffff88805e846268 [ 343.699193][ T7862] FS: 00007f77877cc6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 343.711221][ T7862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.718171][ T7862] CR2: 00007fa2eef05840 CR3: 0000000060522000 CR4: 00000000003506e0 [ 343.726443][ T7862] Call Trace: [ 343.729863][ T7862] [ 343.732913][ T7862] ? netif_carrier_on+0x71/0x120 [ 343.738038][ T7862] ieee80211_ocb_leave+0x27f/0x320 [ 343.743208][ T7862] __cfg80211_leave_ocb+0x219/0x400 [ 343.748861][ T7862] cfg80211_leave_ocb+0x53/0x70 [ 343.753752][ T7862] cfg80211_change_iface+0x4ec/0xe10 [ 343.759346][ T7862] nl80211_set_interface+0x5b8/0x810 [ 343.764681][ T7862] ? nl80211_dump_interface+0x560/0x560 [ 343.770383][ T7862] ? mutex_lock_nested+0x17/0x20 [ 343.775456][ T7862] ? nl80211_pre_doit+0x27b/0x540 [ 343.780614][ T7862] genl_rcv_msg+0xd0b/0xfa0 [ 343.785167][ T7862] ? genl_bind+0x370/0x370 [ 343.791817][ T7862] ? __dev_queue_xmit+0x1b64/0x2e50 [ 343.797528][ T7862] ? verify_lock_unused+0x140/0x140 [ 343.824687][ T7862] ? dev_queue_xmit+0x20/0x20 [ 343.832083][ T7862] ? nl80211_dump_interface+0x560/0x560 [ 343.843491][ T7862] netlink_rcv_skb+0x1e9/0x430 [ 343.849368][ T7862] ? genl_bind+0x370/0x370 [ 343.854065][ T7862] ? netlink_ack+0xb10/0xb10 [ 343.863702][ T7862] ? down_read+0x1aa/0x2e0 [ 343.872763][ T7862] genl_rcv+0x24/0x40 [ 343.887646][ T7862] netlink_unicast+0x78f/0x940 [ 343.892548][ T7862] netlink_sendmsg+0x8ba/0xbe0 [ 343.899971][ T7862] ? netlink_getsockopt+0x570/0x570 [ 343.905251][ T7862] ? aa_sock_msg_perm+0x94/0x150 [ 343.911099][ T7862] ? apparmor_socket_sendmsg+0x88/0x230 [ 343.916753][ T7862] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 343.922859][ T7862] ? security_socket_sendmsg+0x7c/0xa0 [ 343.928601][ T7862] ? netlink_getsockopt+0x570/0x570 [ 343.933840][ T7862] ____sys_sendmsg+0x5be/0x8f0 [ 343.939157][ T7862] ? __sys_sendmsg_sock+0x30/0x30 [ 343.944235][ T7862] ? import_iovec+0x6f/0xa0 [ 343.949244][ T7862] ___sys_sendmsg+0x236/0x2e0 [ 343.954238][ T7862] ? __sys_sendmsg+0x290/0x290 [ 343.959505][ T7862] __se_sys_sendmsg+0x1b7/0x2a0 [ 343.964402][ T7862] ? __x64_sys_sendmsg+0x80/0x80 [ 343.969648][ T7862] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 343.975804][ T7862] ? lockdep_hardirqs_on+0x94/0x140 [ 343.981507][ T7862] do_syscall_64+0x4c/0xa0 [ 343.985954][ T7862] ? clear_bhb_loop+0x30/0x80 [ 343.990994][ T7862] ? clear_bhb_loop+0x30/0x80 [ 343.995829][ T7862] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.002149][ T7862] RIP: 0033:0x7f77895b6159 [ 344.006601][ T7862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.026656][ T7862] RSP: 002b:00007f77877cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.037587][ T7862] RAX: ffffffffffffffda RBX: 00007f778983e180 RCX: 00007f77895b6159 [ 344.045599][ T7862] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 344.054021][ T7862] RBP: 00007f778964d06b R08: 0000000000000000 R09: 0000000000000000 [ 344.062401][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.070540][ T7862] R13: 00007f778983e218 R14: 00007f778983e180 R15: 00007ffe2d0cb838 [ 344.079338][ T7862] [ 344.082415][ T7862] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 344.089890][ T7862] CPU: 0 PID: 7862 Comm: syz.4.742 Not tainted syzkaller #0 [ 344.097181][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.107258][ T7862] Call Trace: [ 344.110567][ T7862] [ 344.113595][ T7862] dump_stack_lvl+0x188/0x250 [ 344.118292][ T7862] ? show_regs_print_info+0x20/0x20 [ 344.123509][ T7862] ? load_image+0x410/0x410 [ 344.128049][ T7862] panic+0x2f8/0x850 [ 344.131966][ T7862] ? bpf_jit_dump+0xd0/0xd0 [ 344.136467][ T7862] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 344.142891][ T7862] __warn+0x248/0x2b0 [ 344.146936][ T7862] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 344.153467][ T7862] report_bug+0x1b9/0x2e0 [ 344.157813][ T7862] handle_bug+0x3a/0x70 [ 344.161993][ T7862] exc_invalid_op+0x16/0x40 [ 344.166529][ T7862] asm_exc_invalid_op+0x16/0x20 [ 344.171393][ T7862] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 344.178418][ T7862] Code: 9f 79 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 51 39 8b 4c 89 e6 89 ea e8 a5 a0 71 00 <0f> 0b e9 07 fd ff ff e8 69 6b 34 f8 0f 0b e9 b1 fe ff ff e8 5d 6b [ 344.198236][ T7862] RSP: 0018:ffffc90002fef240 EFLAGS: 00010246 [ 344.204326][ T7862] RAX: 6bddb31074f71100 RBX: 0000000000400000 RCX: 0000000000080000 [ 344.212390][ T7862] RDX: ffffc9000f4ed000 RSI: 00000000000054dc RDI: 00000000000054dd [ 344.220624][ T7862] RBP: 0000000000000004 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 344.228790][ T7862] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88805e844000 [ 344.236756][ T7862] R13: ffff88805e845290 R14: ffff888077970e00 R15: ffff88805e846268 [ 344.244949][ T7862] ? netif_carrier_on+0x71/0x120 [ 344.249902][ T7862] ieee80211_ocb_leave+0x27f/0x320 [ 344.255218][ T7862] __cfg80211_leave_ocb+0x219/0x400 [ 344.260422][ T7862] cfg80211_leave_ocb+0x53/0x70 [ 344.265288][ T7862] cfg80211_change_iface+0x4ec/0xe10 [ 344.270577][ T7862] nl80211_set_interface+0x5b8/0x810 [ 344.275880][ T7862] ? nl80211_dump_interface+0x560/0x560 [ 344.281436][ T7862] ? mutex_lock_nested+0x17/0x20 [ 344.286376][ T7862] ? nl80211_pre_doit+0x27b/0x540 [ 344.291407][ T7862] genl_rcv_msg+0xd0b/0xfa0 [ 344.295946][ T7862] ? genl_bind+0x370/0x370 [ 344.300384][ T7862] ? __dev_queue_xmit+0x1b64/0x2e50 [ 344.305721][ T7862] ? verify_lock_unused+0x140/0x140 [ 344.310942][ T7862] ? dev_queue_xmit+0x20/0x20 [ 344.315617][ T7862] ? nl80211_dump_interface+0x560/0x560 [ 344.321191][ T7862] netlink_rcv_skb+0x1e9/0x430 [ 344.325980][ T7862] ? genl_bind+0x370/0x370 [ 344.330392][ T7862] ? netlink_ack+0xb10/0xb10 [ 344.334991][ T7862] ? down_read+0x1aa/0x2e0 [ 344.339413][ T7862] genl_rcv+0x24/0x40 [ 344.343405][ T7862] netlink_unicast+0x78f/0x940 [ 344.348190][ T7862] netlink_sendmsg+0x8ba/0xbe0 [ 344.352970][ T7862] ? netlink_getsockopt+0x570/0x570 [ 344.358180][ T7862] ? aa_sock_msg_perm+0x94/0x150 [ 344.363146][ T7862] ? apparmor_socket_sendmsg+0x88/0x230 [ 344.368714][ T7862] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 344.373999][ T7862] ? security_socket_sendmsg+0x7c/0xa0 [ 344.379550][ T7862] ? netlink_getsockopt+0x570/0x570 [ 344.384939][ T7862] ____sys_sendmsg+0x5be/0x8f0 [ 344.389756][ T7862] ? __sys_sendmsg_sock+0x30/0x30 [ 344.394786][ T7862] ? import_iovec+0x6f/0xa0 [ 344.399304][ T7862] ___sys_sendmsg+0x236/0x2e0 [ 344.404113][ T7862] ? __sys_sendmsg+0x290/0x290 [ 344.408971][ T7862] __se_sys_sendmsg+0x1b7/0x2a0 [ 344.414199][ T7862] ? __x64_sys_sendmsg+0x80/0x80 [ 344.419162][ T7862] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 344.425186][ T7862] ? lockdep_hardirqs_on+0x94/0x140 [ 344.430390][ T7862] do_syscall_64+0x4c/0xa0 [ 344.434804][ T7862] ? clear_bhb_loop+0x30/0x80 [ 344.439582][ T7862] ? clear_bhb_loop+0x30/0x80 [ 344.444389][ T7862] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.450294][ T7862] RIP: 0033:0x7f77895b6159 [ 344.454838][ T7862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.474457][ T7862] RSP: 002b:00007f77877cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.482901][ T7862] RAX: ffffffffffffffda RBX: 00007f778983e180 RCX: 00007f77895b6159 [ 344.490891][ T7862] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 344.498871][ T7862] RBP: 00007f778964d06b R08: 0000000000000000 R09: 0000000000000000 [ 344.506955][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.514955][ T7862] R13: 00007f778983e218 R14: 00007f778983e180 R15: 00007ffe2d0cb838 [ 344.523132][ T7862] [ 344.526236][ T7862] Kernel Offset: disabled [ 344.531437][ T7862] Rebooting in 86400 seconds..