last executing test programs: 2m31.72391873s ago: executing program 3 (id=358): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x4, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000340)="eae6cfdf", 0x4, 0x3b00, 0x0, 0x0) 2m31.582990193s ago: executing program 3 (id=359): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 2m30.577842717s ago: executing program 3 (id=368): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x8000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m29.764980937s ago: executing program 3 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3c5093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) 2m29.537639473s ago: executing program 3 (id=380): unshare(0x22020600) r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_settime(r1, 0x1, &(0x7f0000000680)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000840)) 2m29.051882405s ago: executing program 3 (id=387): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000240)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0xfffffffd, 0x10c0348, 0xc0be, 0x2, 0xf296, 0x2, 0x0, 0x0, 0x100}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) 2m28.509113688s ago: executing program 32 (id=387): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000240)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0xfffffffd, 0x10c0348, 0xc0be, 0x2, 0xf296, 0x2, 0x0, 0x0, 0x100}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) 5.140940944s ago: executing program 4 (id=1358): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) close(0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 5.013303327s ago: executing program 4 (id=1359): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4.8963674s ago: executing program 4 (id=1361): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x700, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xfcca, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x807e) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 4.680899976s ago: executing program 4 (id=1363): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='bfq', 0x3) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000140)={[{@filestreams}, {@prjquota}, {@logbufs}, {@inode64}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$eJzs2gm8pnPhuP/nDGOXMVRSaiqiRdYsUc0MZigkS7QjS8pSUqESSgoVEe3Zt2xlCWVrJdlbKCFUskRabMP8X8ecYYyLb/36/l++dV3X63XO8zz3c9/3+Tyf972cw2wyaYOJg8Ecg2mNG8zceddOnjLm6nXvOGrz+Y9d5tR7DnjsiouOH3mcMPI4cTAYjBp5e2jasrGD004fNZj14eWPNveccw3NOxgsO/JyZD+DFac9zHvF9PWmztTMAx169Ns+074ebr7hHzH85PAD9jpiMBiMmWH7ocFgaPfHfVBpm0yYPOlRq0fchq1Gjzyf8Wu2aV/zXjwYzHvmgI+PGdcdego+0vDP3P0l545e9yn42f9xbTJh8loz+Q+fi7OMLFtx+Byf+Rw0NvNxfttim648MoUPH2+DwfAl7jHnyn9Em0yYtPbgia/zg6NWuXCfqdOum7MPpt0o5hwMBnONXF/neapd6t9rwsTlHr5nT389wj79WN6djosT3n7yQ8M36cFgsMBgMHbN6feCqqqq+s9owsTlVoP7/xxPdv8/5ZSFz+z+X1VV9Z/bWhMmLjd8r5/p/j/Pk93/d1z4oj2n/bf/8StO2+qhp/ZDVFVV1b/UpLXw/j/mye7/K6522drd/6uqqv5zW3+dh+//88x0/1/wye7/bzl5lUVG1pv+e8ODM+xyaIb/n/DADMtnmWH5/TMsHz3DfmZcf7YZlt87w/LZh9+D9ccNBmOn/3vBKY8uHjtu+L2R5ffNsHz8o/9OZ9HVZ1g+YYblk2ZYPnFkrMPLJ8+wfPIM66/5JFNdVVX1f6b1l5u02mCGf2c/snih6e/T/f+Cs65b8qkab1VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVf1n9tAdZ587GAyGBoPBqMFgymDk+YyPg6lTp04dfn3K+Zdf/pQN9P9GQ+ddO3nKmKvXveOozec/dplT7zng0Vn6j+0//xPUv9Ow/xzHjxsMtt/oqR5KPQV1/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMPJ89+mPZ+3/5reOrLryxqfedfCjWy46fpuRZ+ddO3nKNk/B2J+ChoY/65ir173jqM3nP3aZU+854L/g7PnP/wT17/Sw/zZDg8HI+T1m+Fxed8L6Gy4xGAwOvuvUjVcYPPLeSsPvrTJ2lsEsD2+6xMPf11iUd7z7mtMexw9/W/CRfZzy8P7XmnrYLEMzDWKGXnXejUe9a5N7lp/5cfEn/hyjpj854voz7p46derUxywcaY4n2Hj6/qd/lpnP85GxLzE89qV22u69S71/l12X3Ga7zbbecustt19muZWWX2HZZVZY+RVLbbXNtlsuPe37E8zZuIe/r/bPzNk8M8/ZHRNmnLOZP9sTzdm4J5+zh/c4ZdehDafP2az/4pyt9uRzNm6bkR+06PjRg00fnpqhwWDR1UcPdh5+sczsg8Gia4ysu9DwuquOHTUY7P/oBx1+Nvsjx+DQ7sPrbDJpg4mPjuzxn/Bx1+nHrLjo+JHHCSOPE6cNcdzg0UNx7OC000cNz8VjpnnuOecamncwWHbk5ch+BiuPvHvo9PWmztTMAx169Ns+074ebr7hnQw/effSZ18zfC7OtP3/H/0/Xf8f57XS0CMTNTTyNbLONK8Jk9d69Gc9PA3DczfLyLIVh01mnrP/zR433nGzDsY8yXgnrTVxueHFM83/9E3w+LpzsQs/PO3YGr/itK0e+n9GofHO8yTjXWsCjneeJxvv8R+59PRpu/pfG+9M17q1H/4+/p+51g2e/Fo3C+1gy0sWmfla97onHuJjzuPpczT7TCs90bVu50OW3X14/+Of/Fq39vDYRz/mWjdqMFh0tenXuuEL36TRg/2HXyw7/GLy6MGxwy+We/jFnIPzh1+8/J07bLvF8II1p8/J0sP7HT926GH3C1e8dfGpB06duvrIWMaPfexYR46PcTPezyeMnTaZ07edvt/hVafv95ZnTntv0sh+J/wL+52+LY33rvmmvTd5ZL8TZ9rv6CfZ7/RtH3c+LDH0yIXrCa43k2a63oz8jTP9xz3ma7ZpX/NePBjMeyb5zrTu/3jNpPN3jicZ74SJy602PL6Zzt9HDkc6fy+dfPXwvWLewWCwwGAwds3pY/8XG3qi8c765OOdCOOd9cnGe+Vx263zvzDewQzjfcxxtsn6046VNUeOs8n/wvE7fduZr2OjH3532mV/zX/mOjbucdexPWYZNdNkz9AT/c62Baw/7flCj/6ee+1Jx0yf+9Ez7fd/+p1ths8yBNexMTP9PT9qzRsGQzTnux+/6mVDBz35nI8ePPZvi+lzPn3bJ5vzyf/MnD/nyef8n/09eYkXTnt/9Ezjn3HO19vv2ftOn/PZZtrv/zTnk5/83vH4OR8/GE1zvvT90+btya6nTzTn07edPufDH3GVsbMO1hi+Z43M+aR/Zs4X+t85zueC9ac93/KRReccdeobp8/5zHP8P835pH91zsc9cpwv+vB7Lxg1mG22wc6b7bTTjstM+z795bLTvvO16N5rp83zk91Ln8ho+rZPdl6s/s8YjfmnjIb+J6OFZ30io0dPrSN32PEZ/6/XotX/VaMBX4uuPmbavD3Z70VPNOfTt6X74IIzbD/z36Hrr/Pw793zzHQfnL4J3gfPOWvtvafvcmSzB2ca5vT76gMzLJ9lhuX3z7B89Az7mXH92WZYfu8My4c/wmwzrD+dddzw37wjy6c8uvrY4V+exo0sv2+G5eMf3XbR1WdYPmGG5ZNmWD7x0UNj0ckzLJ88w/prDv7Fpv836W1mvsjXP1v//ddd/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMO350MjjYPeh9W5/zfDjYDAYveKJU9d7qsf7FDd03rWTp4y5et07jtp8/mOXOfWeA/4Lzp7//E9Q/04P+28zNBiMnN9jthkMButOWH/DJQaDwXpTT1xx1OCR9xYafm/VsaMGg/2HHrOD2R9ZZ2j34XU2mbTBxMFgjpE1xj3uhz7uPHrMiouOH3mcMPI4cdr1adzg0eN17OC000cNZn14+aPNPedcQ/MOBsuOvBzZz2DFaQ/zXjF9vakzNfNAhx79ts+0r4ebb/hHDD/ZeevJzx2eq5m2/z/T9Gv1NqP+x1U7/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u/jX/jpb/thJ1l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vojrPPHTkGRg0GUwbTng/tPvI4GDr5tBePHCKjd7nq6MOe6vE+xQ2dd+3kKWOuXveOozaf/9hlTr3ngP+Cs+c//xPUv9PD/tsMDQYj5/eYbQaDwboT1t9wicFgcNjRV+0yavDIewsNv7fq2FGDwf5Dj9nB7I+sM7T78DqbTNpg4mAwx8ga4x73Qx93Hj1mxUXHjzxOGHmcOO36NG7w6PE6dnDa6aMGsz68/NHmnnOuoXkHg2VHXo7sZ7DitId5r5i+3tSZmnmgQ49+22fa18PNN/wjhp/sNc+1Jw/P1Uzb/59p+rV6m1H/46qd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uoTvOPnfkGBg1GEwZTHs+auRxaPebb9ptw+HH4dfzr7n3tU/1eJ/ihs67dvKUMVeve8dRm89/7DKn3nPAf8HZ85//Cerfadh/juPHDQbbb/RUD6Wegjr/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9xDd5x97sjTUY8uHbV7xwU2dN61k6eMuXrdO47afP5jlzn1ngOe6gH9uz2B/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf5ZB/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkP/jmnXk0eD/wvwxy/m/aP6YxX+x/DGL/4vyxyz+i+ePWfyXyB+z+L84f8zi/5L8MYv/S/PHLP4vyx+z+C+ZP2bxf3n+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxf0X+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxfmT9m8V8lf8ziv2r+mMX/VfljFv9X549Z/F+TP2bxH58/ZvGfkD9m8Z+YP2bxXy1/zOK/ev6YxX+N/DGL/6T8MYv/ZJX/LP/0mhb/NVX+/3wW/7Xyxyz+r80fs/i/Ln/M4r92/pjFf538MYv/uvljFv/X549Z/NfLH7P4vyF/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP5vzB+z+G+cP2bx3yR/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//b88cs/u/IH7P4b5o/ZvHfLH/M4r95/pjF/535Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvF/V/6YxX+b/DGL/7vzxyz+78kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/9788cs/u/LH7P475g/ZvF/f/6YxX+n/DGL/wfyxyz+H8wfs/h/KH/M4r9z/pjFf5f8MYv/rvljFv8P549Z/D+SP2bx/2j+mMV/t/wxi//H8scs/rvnj1n898gfs/jvmT9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/vvmj1n898sfs/h/Jn/M4v/Z/DGL/+fyxyz+++ePWfwPyB+z+H8+f8zif2D+mMX/oPwxi/8X8scs/gfnj1n8D8kfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+b+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOL/rfwxi/+388cs/qfmj1n8T8sfs/ifnj9m8T8jf8zi/538MYv/mfljFv+z8scs/mfnj1n8v5s/ZvH/Xv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/+F+WMW/4vyxyz+P80fs/hfnD9m8f9Z/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif3X+mMX/mvwxi/+v88cs/r/JH7P4X5s/ZvH/bf6Yxf+6/DGL//X5Yxb/G/LHLP6/yx+z+N+YP2bxvyl/zOJ/c/6Yxf/3+WMW/z/kj1n8/5g/ZvG/JX/M4v+n/DGL/635Yxb/2/LHLP63549Z/O/IH7P4/zl/zOJ/Z/6Yxf+u/DGL/1/yxyz+d+ePWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/5T8MYv/g/ljFv+H8scs/lPzxyT+sw7yxyz+Q/ljFv9R+WMW/1nyxyz+s+aPWfxH549Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n8n5Y/ZvGfL3/M4j8mf8ziP3/+mMV/bP6YxX+B/DGL/4L5Yxb/p+ePWfyfkT9m8X9m/pjFf6H8MYv/s/LHLP4L549Z/J+dP2bxf07+mMV/kfwxi/9z88cs/s/LH7P4j8sfs/g/P3/M4v+C/DGL/wvzxyz+i+aPWfwXyx+z+L8of8ziv3j+mMV/ifwxi/+L88cs/i/JH7P4vzR/zOL/svwxi/+S+WMW/5fnj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/1fkj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/lfljFv9V8scs/qvmj1n8X5U/ZvF/df6Yxf81+WMW//H5Yxb/CfljFv+J+WMW/9Xyxyz+q+ePWfzXyB+z+E/KH7P4T84fs/ivmT9m8V8rf8zi/9r8MYv/6/LHLP5r549Z/NfJH7P4r5s/ZvF/ff6YxX+9/DGL/xsGl+cPWfzX7/zHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxHz3IH7P4D+WPWfxH5Y9Z/GfJH7P4z5o/ZvEfnT9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxf1r+mMV/vvwxi/+Y/DGL//z5Yxb/sfljFv8F8scs/gvmj1n8n54/ZvF/Rv6Yxf+Z+WMW/4Xyxyz+z8ofs/gvnD9m8X92/pjF/zn5Yxb/RfLHLP7PzR+z+D8vf8ziPy5/zOL//Pwxi/8L8scs/i/MH7P4L5o/ZvFfLH/M4v+i/DGL/+L5Yxb/JfLHLP4vzh+z+L8kf8zi/9L8MYv/y/LHLP5L5o9Z/F+eP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/F+RP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/V+aPWfxXyR+z+K+aP2bxf1X+mMX/1fljFv/X5I9Z/Mfnj1n8J+SPWfwn5o9Z/FfLH7P4r54/ZvFfI3/M4j8pf8ziPzl/zOK/Zv6YxX+t/DGL/2vzxyz+r8sfs/ivnT9m8V8nf8ziv27+mMX/9fljFv/18scs/m/IH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/G/PHLP4b549Z/DfJH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4vy1/zOL/9vwxi/878scs/pvmj1n8N8sfs/hvnj9m8X9n/pjFf4v8MYv/lvljFv+t8scs/lvnj1n835U/ZvHfJn/M4v/u/DGL/3vyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/3vwxi//78scs/jvmj1n8358/ZvHfKX/M4v+B/DGL/wfzxyz+H8ofs/jvnD9m8d8lf8ziv2v+mMX/w/ljFv+P5I9Z/D+aP2bx3y1/zOL/sfwxi//u+WMW/z3yxyz+e+aPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/+++WMW//3yxyz+n8kfs/h/Nn/M4v+5/DGL//75Yxb/A/LHLP6fzx+z+B+YP2bxPyh/zOL/hfwxi//B+WMW/0Pyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvH/Zv6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4fyt/zOL/7fwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+H8nf8zif2b+mMX/rPwxi//Z+WMW/+/mj1n8v5c/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/t/PH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOJ/Yf6Yxf+i/DGL/0/zxyz+F+ePWfx/lj9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+F+dP2bxvyZ/zOL/6/wxi/9v8scs/tfmj1n8f5s/ZvG/Ln/M4n99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/2yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW/6flj1n858sfs/iPyR+z+M+fP2bxH5s/ZvFfIH/M4r9g/pjF/+n5Yxb/Z+SPWfyfmT9m8V8of8zi/6z8MYv/wvljFv9n549Z/J+TP2bxXyR/zOL/3Pwxi//z8scs/uPyxyz+z88fs/i/IH/M4v/C/DGL/6L5Yxb/xfLHLP4vyh+z+C+eP2bxXyJ/zOL/4vwxi/9L8scs/i/NH7P4vyx/zOK/ZP6Yxf/l+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf8V+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxf2X+mMV/lfwxi/+q+WMW/1flj1n8X50/ZvF/Tf6YxX98/pjFf0L+mMV/Yv6YxX+1/DGL/+r5Yxb/NfLHLP6T8scs/pPzxyz+a+aPWfzXyh+z+L82f8zi/7r8MYv/2vljFv918scs/uvmj1n8X58/ZvFfL3/M4v+G/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4vzF/zOK/cf6YxX+T/DGL/5vyxyz+b84fs/i/JX/M4v/W/DGL/9vyxyz+b88fs/i/I3/M4r9p/pjFf7P8MYv/5vljFv935o9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/135Yxb/bfLHLP7vzh+z+L8nf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+780fs/i/L3/M4r9j/pjF//35Yxb/nfLHLP4fyB+z+H8wf8zi/6H8MYv/zvljFv9d8scs/rvmj1n8P5w/ZvH/SP6Yxf+j+WMW/93yxyz+H8sfs/jvnj9m8d8jf8ziv2f+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/jvmz9m8d8vf8zi/5n8MYv/Z/PHLP6fyx+z+O+fP2bxPyB/zOL/+fwxi/+B+WMW/4Pyxyz+X8gfs/gfnD9m8T8kf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/b+aPWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/7fyxyz+384fs/ifmj9m8T8tf8zif3r+mMX/jPwxi/938scs/mfmj1n8z8ofs/ifnT9m8f9u/pjF/3v5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+F+aPWfwvyh+z+P80f8zif3H+mMX/Z/ljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi//V+WMW/2vyxyz+v84fs/j/Jn/M4n9t/pjF/7f5Yxb/6/LHLP7X549Z/G/IH7P4/y5/zOJ/Y/6Yxf+m/DGL/835Yxb/3+ePWfz/kD9m8f9j/pjF/5b8MYv/n/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4v/n/DGL/535Yxb/u/LHLP5/yR+z+N+dP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP5T8scs/g/mj1n8H8ofs/hPzR+T+M8+yB+z+A/lj1n8R+WPWfxnyR+z+M+aP2bxH50/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8X9a/pjFf778MYv/mPwxi//8+WMW/7H5Yxb/BfLHLP4L5o9Z/J+eP2bxf0b+mMX/mfljFv+F8scs/s/KH7P4L5w/ZvF/dv6Yxf85+WMW/0Xyxyz+z80fs/g/L3/M4j8uf8zi//z8MYv/C/LHLP4vzB+z+C+aP2bxXyx/zOL/ovwxi//i+WMW/yXyxyz+L84fs/i/JH/M4v/S/DGL/8vyxyz+S+aPWfxfnj9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxfkT9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1fmj1n8V8kfs/ivmj9m8X9V/pjF/9X5Yxb/1+SPWfzH549Z/Cfkj1n8J+aPWfxXyx+z+K+eP2bxXyN/zOI/KX/M4j85f8ziv2b+mMV/rfwxi/9r88cs/q/LH7P4r50/ZvFfJ3/M4r9u/pjF//X5Yxb/9fLHLP5vyB+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/xvzxyz+G+ePWfw3yR+z+L8pf8zi/+b8MYv/W/LHLP5vzR+z+L8tf8zi//b8MYv/O/LHLP6b5o9Z/DfLH7P4b54/ZvF/Z/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+VP2bx3yZ/zOL/7vwxi/978scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/978MYv/+/LHLP475o9Z/N+fP2bx3yl/zOL/gfwxi/8H88cs/h/KH7P475w/ZvHfJX/M4r9r/pjF/8P5Yxb/j+SPWfw/mj9m8d8tf8zi/7H8MYv/7vljFv898scs/nvmj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/vvljFv/98scs/p/JH7P4fzZ/zOL/ufwxi//++WMW/wPyxyz+n88fs/gfmD9m8T8of8zi/4X8MYv/wfljFv9D8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bx/2b+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+H8rf8zi/+38MYv/qfljFv/T8scs/qfnj1n8z8gfs/h/J3/M4n9m/pjF/6z8MYv/2fljFv/v5o9Z/L+XP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif2H+mMX/ovwxi/9P88cs/hfnj1n8f5Y/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hfnT9m8b8mf8zi/+v8MYv/b/LHLP7X5o9Z/H+bP2bxvy5/zOJ/ff6Yxf+G/DGL/+/yxyz+N+aPWfxvyh+z+N+cP2bx/33+mMX/D/ljFv8/5o9Z/G/JH7P4/yl/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP5/zh+z+N+ZP2bxvyt/zOL/l/wxi//d+WMW/7/mj1n8/5Y/ZvH/e/6Yxf8f+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOI/JX/M4v9g/pjF/6H8MYv/1Pwxif8cg/wxi/9Q/pjFf1T+mMV/lvwxi/+s+WMW/9H5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv+n5Y9Z/OfLH7P4j8kfs/jPnz9m8R+bP2bxXyB/zOK/YP6Yxf/p+WMW/2fkj1n8n5k/ZvFfKH/M4v+s/DGL/8L5Yxb/Z+ePWfyfkz9m8V8kf8zi/9z8MYv/8/LHLP7j8scs/s/PH7P4vyB/zOL/wvwxi/+i+WMW/8Xyxyz+L8ofs/gvnj9m8V8if8zi/+L8MYv/S/LHLP4vzR+z+L8sf8ziv2T+mMX/5fljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMX/FfljFv8V8scs/ivmj1n8V8ofs/ivnD9m8X9l/pjFf5X8MYv/qvljFv9X5Y9Z/F+dP2bxf03+mMV/fP6YxX9C/pjFf2L+mMV/tfwxi//q+WMW/zXyxyz+k/LHLP6T88cs/mvmj1n818ofs/i/Nn/M4v+6/DGL/9r5Yxb/dfLHLP7r5o9Z/F+fP2bxXy9/zOL/hvwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+L8xf8ziv3H+mMV/k/wxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/m/PH7P4vyN/zOK/af6YxX+z/DGL/+b5Yxb/d+aPWfy3yB+z+G+ZP2bx3yp/zOK/df6Yxf9d+WMW/23yxyz+784fs/i/J3/M4r9t/pjFf7v8MYv/9vljFv8d8scs/u/NH7P4vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPOcgfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz/2WP/RT/Vw/v2ewP+6/DHL+X99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/1yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf+y/33+OR97K//H99/s/3Fzz5I9Z/OfNH7P4Py1/zOI/X/6YxX9M/pjFf/78MYv/2Pwxi/8C+WMW/wXzxyz+T88fs/g/I3/M4v/M/DGL/0L5Yxb/Z+WPWfwXzh+z+D87f8zi/5z8MYv/IvljFv/n5o9Z/J+XP2bxH5c/ZvF/fv6Yxf8F+WMW/xfmj1n8F80fs/gvlj9m8X9R/pjFf/H8MYv/EvljFv8X549Z/F+SP2bxf2n+mMX/ZfljFv8l88cs/i/PH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/q/IH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/K/PHLP6r5I9Z/FfNH7P4vyp/zOL/6vwxi/9r8scs/uPzxyz+E/LHLP4T88cs/qvlj1n8V88fs/ivkT9m8Z+UP2bxn5w/ZvFfM3/M4r9W/pjF/7X5Yxb/1+WPWfzXzh+z+K+TP2bxXzd/zOL/+vwxi/96+WMW/zfkj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/jfljFv+N88cs/pvkj1n835Q/ZvF/c/6Yxf8t+WMW/7fmj1n835Y/ZvF/e/6Yxf8d+WMW/03zxyz+m+WPWfw3zx+z+L8zf8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+78ofs/hvkz9m8X93/pjF/z35Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvF/b/6Yxf99+WMW/x3zxyz+788fs/jvlD9m8f9A/pjF/4P5Yxb/D+WPWfx3zh+z+O+SP2bx3zV/zOL/4fwxi/9H8scs/h/NH7P475Y/ZvH/WP6YxX/3/DGL/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf+5B/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkD9m8X9h/pjFf9H8MYv/YvljFv8X5Y9Z/BfPH7P4L5E/ZvF/cf6Yxf8l+WMW/5fmj1n8X5Y/ZvFfMn/M4v/y/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v+K/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4vzJ/zOK/Sv6YxX/V/DGL/6vyxyz+r84fs/i/Jn/M4j8+f8ziPyF/zOI/MX/M4r9a/pjFf/X8MYv/GvljFv9J+WMW/8n5Yxb/NfPHLP5r5Y9Z/F+bP2bxf13+mMV/7fwxi/86+WMW/3Xzxyz+r88fs/ivlz9m8X9D/pjFf/38MYv/BvljFv8N88cs/hvlj1n835g/ZvHfOH/M4r9J/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/t+ePWfzfkT9m8d80f8ziv1n+mMV/8/wxi/8788cs/lvkj1n8t8wfs/hvlT9m8d86f8zi/678MYv/NvljFv93549Z/N+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/9+aPWfzflz9m8d8xf8zi//78MYv/TvljFv8P5I9Z/D+YP2bx/1D+mMV/5/wxi/8u+WMW/13zxyz+H84fs/h/JH/M4v/R/DGL/275Yxb/j+WPWfx3zx+z+O+RP2bx3zN/zOL/8fwxi/8n8scs/nvlj1n8P5k/ZvHfO3/M4v+p/DGL/6fzxyz+++SPWfz3zR+z+O+XP2bx/0z+mMX/s/ljFv/P5Y9Z/PfPH7P4H5A/ZvH/fP6Yxf/A/DGL/0H5Yxb/L+SPWfwPzh+z+B+SP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/N/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/1v5Yxb/b+ePWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf87+WMW/zPzxyz+Z+WPWfzPzh+z+H83f8zi/738MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/C/PHLP4X5Y9Z/H+aP2bxvzh/zOL/s/wxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/q/DGL/zX5Yxb/X+ePWfx/kz9m8b82f8zi/9v8MYv/dfljFv/r88cs/jfkj1n8f5c/ZvG/MX/M4n9T/pjF/+b8MYv/7/PHLP5/yB+z+P8xf8zif0v+mMX/T/ljFv9b88cs/rflj1n8b88fs/jfkT9m8f9z/pjF/878MYv/XfljFv+/5I9Z/O/OH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8p+WMW/wfzxyz+D+WPWfyn5o9J/OcZ5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+D8tf8ziP1/+mMV/TP6YxX/+/DGL/9j8MYv/AvljFv8F88cs/k/PH7P4PyN/zOL/zPwxi/9C+WMW/2flj1n8F84fs/g/O3/M4v+c/DGL/yL5Yxb/5+aPWfyflz9m8R+XP2bxf37+mMX/BfljFv8X5o9Z/BfNH7P4L5Y/ZvF/Uf6YxX/x/DGL/xL5Yxb/F+ePWfxfkj9m8X9p/pjF/2X5Yxb/JfPHLP4vzx+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP6vyB+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yvzxyz+q+SPWfxXzR+z+L8qf8zi/+r8MYv/a/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FfPH7P4r5E/ZvGflD9m8Z+cP2bxXzN/zOK/Vv6Yxf+1+WMW/9flj1n8184fs/ivkz9m8V83f8zi//r8MYv/evljFv835I9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/435Yxb/jfPHLP6b5I9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/N+WP2bxf3v+mMX/HfljFv9N88cs/pvlj1n8N88fs/i/M3/M4r9F/pjFf8v8MYv/VvljFv+t88cs/u/KH7P4b5M/ZvF/d/6Yxf89+WMW/23zxyz+2+WPWfy3zx+z+O+QP/aI/1Yn/1f7vzd/zHL+vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPO8gfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz9m8b8uf8zif33+mMX/hvwxi//v8scs/jfmj1n8b8ofs/jfnD9m8f99/pjF/w/5Yxb/P+aPWfxvyR+z+P8pf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+f84fs/jfmT9m8b8rf8zi/5f8MYv/3fljFv+/5o9Z/P+WP2bx/3v+mMX/H/ljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8ziPyV/zOL/YP6Yxf+h/DGL/9T8MYn/0wb5Yxb/ofwxi/+o/DGL/yz5Yxb/WfPHLP6j88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+T8sfs/jPlz9m8R+TP2bxnz9/zOI/Nn/M4r9A/pjFf8H8MYv/0/PHLP7PyB+z+D8zf8ziv1D+mMX/WfljFv+F88cs/s/OH7P4Pyd/zOK/SP6Yxf+5+WMW/+flj1n8x+WPWfyfnz9m8X9B/pjF/4X5Yxb/RfPHLP6L5Y9Z/F+UP2bxXzx/zOK/RP6Yxf/F+WMW/5fkj1n8X5o/ZvF/Wf6YxX/J/DGL/8vzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/yvyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOL/yvwxi/8q+WMW/1Xzxyz+r8ofs/i/On/M4v+a/DGL//j8MYv/hPwxi//E/DGL/2r5Yxb/1UX+c/wL61r81xD5/ytZ/Cflj1n8J+ePWfzXzB+z+K+VP2bxf23+mMX/dfljFv+188cs/uvkj1n8180fs/i/Pn/M4r9e/pjF/w35Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxn2+QP2bxH8ofs/iPyh+z+M+SP2bxnzX/xzTLyKPFf3T+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6Yxf9p+WMW//nyxyz+Y/LHLP7z549Z/Mfmj1n8F8gfs/gvmD9m8X96/pjF/xn5Yxb/Z+aPWfwXyh+z+D8rf8ziv3D+mMX/2fljFv/n5I9Z/BfJH7P4Pzd/zOL/vPwxi/+4/DGL//Pzxyz+L8gfs/i/MH/M4r9o/pjFf7H8MYv/i/LHLP6L549Z/JfIH7P4vzh/zOL/kvwxi/9L88cs/i/LH7P4L5k/ZvF/ef6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvF/Rf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/F+ZP2bxXyV/zOK/av6Yxf9V+WMW/1fnj1n8X5M/ZvEfnz9m8Z+QP2bxn5g/ZvFfLX/M4r96/pjFf438MYv/pPwxi//k/DGL/5r5Yxb/tfLHLP6vzR+z+L8uf8ziv3b+mMV/nfwxi/+6+WMW/9fnj1n818sfs/i/IX/M4r9+/pjFf4P8MYv/hvljFv+N8scs/m/MH7P4b5w/ZvHfJH/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/9vzxyz+78gfs/hvmj9m8d8sf8ziv3n+mMX/nfljFv8t8scs/lvmj1n8t8ofs/hvnT9m8X9X/pjFf5v8MYv/u/PHLP7vyR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/3vzxyz+78sfs/jvmD9m8X9//pjFf6f8MYv/B/LHLP4fzB+z+H8of8ziv3P+mMV/l/wxi/+u+WMW/w/nj1n8P5I/ZvH/aP6YxX+3/DGL/8fyxyz+u+ePWfz3yB+z+O+ZP2bx///Yo6cEUAgACIDZeNm2bdu2bdv1kW3btm3btm3zAnuCduYKc6D/qOX/IP9Ry//B/qOW/0P8Ry3/h/qPWv4P8x+1/B/uP2r5P8J/1PJ/pP+o5f8o/1HL/9H+o5b/Y/xHLf/H+o9a/o/zH7X8H+8/avk/wX/U8n+i/6jl/yT/Ucv/yf6jlv9T/Ect/6f6j1r+T/Mftfyf7j9q+T/Df9Tyf6b/qOX/LP9Ry//Z/qOW/3P8Ry3/5/qPWv7P8x+1/J/vP2r5v8B/1PJ/of+o5f8i/1HL/8X+o5b/S/xHLf+X+o9a/i/zH7X8X+4/avm/wn/U8n+l/6jl/yr/Ucv/1f6jlv9r/Ect/9f6j1r+r/Mftfxf7z9q+b/Bf9Tyf6P/qOX/Jv9Ry//N/qOW/1v8Ry3/t/qPWv5v8x+1/N/uP2r5v8N/1PJ/p/+o5f8u/1HL/93+o5b/e/xHLf/3+o9a/u/zH7X83+8/avl/wH/U8v+g/6jl/yH/Ucv/w/6jlv9H/Ect/4/6j1r+H/Mftfw/7j9q+X/Cf9Ty/6T/qOX/Kf9Ry//T/qOW/2f8Ry3/z/qPWv6f8x+1/D/vP2r5f8F/1PL/ov+o5f8l/1HL/8v+o5b/V/xHLf+v+o9a/l/zH7X8v+4/avl/w3/U8v+m/6jl/y3/Ucv/2/6jlv93/Ect/+/6j1r+3/Mftfy/7z9q+f/Af9Ty/6H/qOX/I/9Ry//H/qOW/0/8Ry3/n/qPWv4/8x+1/H/uP2r5/8J/1PL/pf+o5f8r/1HL/9f+o5b/b/xHLf/f+o9a/r/zH7X8f+8/avn/wX/U8v+j/6jl/yf/Ucv/z/6jlv9f/Ect/7/6j1r+f/Mftfz/7j9q+f/Df9Ty/6f/qOX/L/9Ry//f/qOW/3/8Ry3///qPSv4HDOQ/avkf2H/U8j+I/6jlf1D/Ucv/YP6jlv/B/Uct/0P4j1r+h/QftfwP5T9q+R/af9TyP4z/qOV/WP9Ry/9w/qOW/+H9Ry3/I/iPWv5H9B+1/A/wH7X8j+Q/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+1/E/kP2r5n9h/1PI/if+o5X9S/1HL/2T+o5b/yf1HLf9T+I9a/qf0H7X8T+U/avmf2n/U8j+N/6jlf1r/Ucv/dP6jlv/p/Uct/zP4j1r+Z/QftfzP5D9q+Z/Zf9TyP4v/qOV/Vv9Ry/9s/qOW/9n9Ry3/c/iPWv7n9B+1/M/lP2r5n9t/1PI/j/+o5X9e/1HL/3z+o5b/+f1HLf8L+I9a/hf0H7X8L+Q/avlf2H/U8r+I/6jlf1H/Ucv/Yv6jlv/F/Uct/0v4j1r+l/Qftfwv5T9q+V/af9Tyv4z/qOV/Wf9Ry/9y/qOW/+X9Ry3/K/iPWv5X9B+1/K/kP2r5X9l/1PK/iv+o5X9V/1HL/2r+o5b/1f1HLf9r+I9a/tf0H7X8r+U/avlf23/U8r+O/6jlf13/Ucv/ev6jlv/1/Uct/xv4j1r+N/Qftfxv5D9q+d/Yf9Tyv4n/qOV/U/9Ry/9m/qOW/839Ry3/W/iPWv639B+1/G/lP2r539p/1PK/jf+o5X9b/1HL/3b+o5b/7f1HLf87+I9a/nf0H7X87+Q/avnf2X/U8r+L/6jlf1f/Ucv/bv6jlv/d/Uct/3v4j1r+9/Qftfzv5T9q+d/bf9Tyv4//qOV/X/9Ry/9+/qOW//39Ry3/B/iP/nf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf+zbbWydZeHH8bvbOsb+/JMRF1yGJptcKCTCbPeQ8YKwydhWB914HgMc3dqNjXabXYddAffwYhIhPEgyyRIlypahhJnQSAwEK4ho0EVNNPgAiEIUjRMh6Ja4WHPa09Ieu8Zz1etalM/nRc+577Pfva3Jd/e9wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ns1NC48Mr5m2KnxQw8+eLil73XO0ZU3H/htz4UDr+WPl41wyXFDD3p7e3vnPDd7R/nwlKIoSj/bzvLxpMpx6fo767/Q2X8UFvS8tOT4lJ83Hjmw5vRH6rqP3l/bd7a2uGndhtaWj40rinBxbdFZOqirKYqwuLa4r3RQXzpYUls8UjqY3XdwavHt0sH5aze3NpdOLI3+nsH/iobGncX4YcUWw/40GNr/zvpv3TnwOsolB642oSj3f0XX99+q+GzACfofuH5YWNl/1b9B4ISq6/+FBQOvo1zyX+7/k59a9cpIn524/4Hrh4/rH9IZ4fl/WKOVz/0Vz/8zRrjk4P6qmq7jpf4vve3ZmeVTE/6d5/93rx8urux/3LDn/9Jz/KKB5/9TiiJcMsZvB7ynNDTuOjLa/X/0/idMr9jUDO3/jPbN+0v9P77ke0+UT9VW2f+iUe7/45ZW/FqB6jQ0frm34v5fRf/FR0a45GD/bz/x64dL/T/2+wfOHPJZNf1fUtn/rI62LbO2bu86b0Nb0/qW9S2b6mbPnzOvvm7eBXNn9T0S9H8d43cF3hvGdv8vJldsaoqiZXB/TfeBp0v9z33wwTnlU5Oq7H/xqPf/Ge7/MKIPjSsmTiw6mzo62uv6vw4c1vd/7f9hI/Rfxd//zzqn/MNqy681RTFtcH/XmXevKPX/zqFnd5dPTayy/yWj9r9g8OcFIozx/t9csRnW/8FDL/U9/y+79+AZ5VPV/v1/6aj9v+r+D2PR0FjxP/z8h5X631VcFtlpaPDf/yCdHP0/9s4NPXHr8An9Qzo5+v/d546eG7cOy/QP6eTof8LGB56PW4dL9Q/p5Oh/+dT5K+LW4TL9Qzo5+l/76rl/jluHRv1DOjn6P+dLuzvj1mG5/iGdHP0/1D5nW9w6rNA/pJOj/5+e9tBrcetwuf4hnRz9Hzt2z41x63CF/iGdHP137zn7B3HrcKX+IZ0c/V++bmGIW4er9A/p5Oh/+rQ/Ph63DlfrH9LJ0f+8P/39tLh1uEb/kE6O/u/4/Ip9cetwrf4hnRz9j7/+lRfj1mGl/iGdHP0vPXvbwrh1uE7/kE6O/pt/0twbtw6r9A/p5Oh/1td/tCFuHa7XP6STo//Dyx/dE7cON+gf0snR/566YkrcOtyof0gnR/9f++7ph+LW4ZP6h3Ry9P+bp56cH7cOq/UP6eTo/7kP3P6NuHW4Sf+QTo7+713z4llx69Ckf0gnR/8P733+i3HrsEb/kE6O/t94o+3/4tZhrf4hnRz9T5506utx69Csf0gnR/8Lb/1Ke9w6tOgf0snRf9vu7h/GrcM6/UM6Ofr/8PFpq+LWYb3+IZ0c/a+cu/f9cetws/4hnRz9v2/Zhbvi1mGD/iGdHP1f1PPRi+LWYaP+IZ0c/Xc889mvxq3DLfqHdHL0v3fma4vj1qFV/5BOjv5fXr30x3Hr0KZ/SCdH/289et2muHXYpH9IJ0f/T/7s7WNx67BZ/5BOjv7//4JFf41bhy36h3Ry9L94yZtr49bhU/qHdHL0v7H7Hy/HrUO7/iGdHP3PPHz1srh12Kp/SCdH/985r25/3Dp06B/SydH/nVfuq49bh236h3Ry9L//4F13x63DrfqHdHL0/+YvZkyPW4dP6x/SydH//VMOXRu3Dp36h3Ry9P/LTbXPxK3Ddv1DOjn6/9u+qTvi1qFL/5BOjv6ffr3nD3HrcJv+IZ0c/a+e8KuJcetwu/4hnRz9T+3acl/cOtyhf0gnR//z72k6P24dPqN/SCdH/1v/8sI349Zhh/4hna3bu25pam1taffGG2+8GXxzsv9kAlJ7N/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRC9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//+O1eBI") ioprio_set$pid(0x2, 0x0, 0x2007) ioprio_get$pid(0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 4.265211616s ago: executing program 1 (id=1368): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0x4, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x24}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_RAW={0x8}]}}]}, 0x5c}}, 0x4004) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3.739160249s ago: executing program 1 (id=1373): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000003c0)={[{@nobarrier}]}, 0x4, 0x521, &(0x7f0000000640)="$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") syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x84406d, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000100)={[{@grpquota}, {@noquota}, {@journal_async_commit}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xfe, 0x50d, &(0x7f00000002c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 3.67476578s ago: executing program 5 (id=1374): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x301041, 0x41) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, r2, 0x190) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x80, 0x7800, 0x0, 0x8001, {{0x5, 0x4, 0x3, 0x28, 0x14, 0x68, 0x0, 0x54, 0x2f, 0x0, @local, @local}}}}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 3.663752971s ago: executing program 0 (id=1376): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x3) 3.343978948s ago: executing program 5 (id=1377): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) r3 = dup2(r1, r2) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x13) 3.27891812s ago: executing program 4 (id=1378): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='cubic', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000600)="89", 0x1, 0x4044880, 0x0, 0x0) 3.163069062s ago: executing program 5 (id=1379): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 2.991329056s ago: executing program 5 (id=1380): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x1ba2, 0x0) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x1000401) getdents64(r2, 0x0, 0x0) 2.812876831s ago: executing program 1 (id=1381): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x45, 0x8000047, r2, 0x0) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = dup(r3) r5 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r5, &(0x7f0000000ac0)="cf", 0x1) sendfile(r4, r5, &(0x7f00000005c0), 0x3) 2.629404705s ago: executing program 0 (id=1382): setns(0xc9, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x31863}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 2.245998765s ago: executing program 1 (id=1383): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0x80000a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 2.245879805s ago: executing program 5 (id=1384): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) close(0x3) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e20, @private=0xa010101}}}, 0x108) 1.835552825s ago: executing program 2 (id=1386): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff03000000000000000100000000000000ccb600000000000007000000000000003b00000003000000010000000000000034fcffffffffffff01000000000000000300000000000000ff7f000000000000000100000000000005000000fdffffff070000000040000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="018000000000b8df0000000002000000844d793c108331c20000000001"], 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 1.567865761s ago: executing program 2 (id=1387): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 1.337902357s ago: executing program 2 (id=1389): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x200008d5}, 0x20004090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) write(r0, &(0x7f0000000000)='1', 0x1) 1.090685223s ago: executing program 2 (id=1390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 814.00463ms ago: executing program 2 (id=1391): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 680.421223ms ago: executing program 1 (id=1392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x9, 0x8, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xf, 0x4d, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0x6, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0x10, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x0, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xa0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x9, 0x4b9, 0x4f1b04e0, 0x1000}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000800)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x17, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 457.722478ms ago: executing program 4 (id=1393): getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1, 0xf0}, 0x0, &(0x7f00000008c0)="eb2bcb44032c2a3a518de900279744e05b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f7999797e2aa4cded6713302261b487e569f8fac402918be4ee374a4257d4bf67e86ff4beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b2081640008000000000000cd90d32ebcf5ea2c79482fb0e0cfb8bf19da10adffeafb4747c5853fdaca77fe20bbb66b8e86486c2ea7e519a50fb23e5202f7f02c633d4f56361cd848e6cec9abcbf97c60de6c9d205a4e26b68fd5d7c3d516dce08adf9b56f1b52064b280f6", 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x800000, 0x4, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x59, 0x0, 0x0) 400.80063ms ago: executing program 0 (id=1394): unshare(0x22020600) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)="6921fd", 0x3}], 0x1, 0x1) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) creat(0x0, 0x49) 325.095752ms ago: executing program 0 (id=1395): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_getres(0x8, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x80) dup3(r1, 0xffffffffffffffff, 0x80000) read(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 289.141853ms ago: executing program 1 (id=1396): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) fcntl$setpipe(r1, 0x407, 0x100000) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000040)=0xfffffffe) ioctl$int_in(r0, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xa) close(r0) 237.420984ms ago: executing program 0 (id=1397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20) 112.241557ms ago: executing program 5 (id=1398): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000200)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, {0x1, @broadcast}, 0x4a, {0x2, 0x0, @dev}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f00000002c0)={{0x2, 0x0, @dev}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 69.870368ms ago: executing program 0 (id=1399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 0s ago: executing program 2 (id=1400): r0 = io_uring_setup(0x79c4, &(0x7f0000000340)={0x0, 0x701e, 0x8, 0x2, 0x36d}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f0000000280)={0x12, 0x0, 0x4}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r3, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) kernel console output (not intermixed with test programs): has an invalid length. [ 119.528117][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.594499][ T5051] device bridge_slave_1 left promiscuous mode [ 119.632511][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.898375][ T5059] netlink: 60 bytes leftover after parsing attributes in process `syz.4.208'. [ 119.966387][ T5059] unsupported nlmsg_type 40 [ 120.054837][ T5026] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 120.098150][ T4929] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 120.163500][ T4929] usb 4-1: USB disconnect, device number 2 [ 120.545620][ T5060] fido_id[5060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 120.937683][ T27] kauditd_printk_skb: 65 callbacks suppressed [ 120.937700][ T27] audit: type=1326 audit(2000000002.060:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d74b9e559 code=0x7ffc0000 [ 121.036811][ T27] audit: type=1326 audit(2000000002.100:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d74b9e559 code=0x7ffc0000 [ 121.096869][ T5072] netlink: 'syz.0.211': attribute type 4 has an invalid length. [ 121.119745][ T27] audit: type=1326 audit(2000000002.100:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d74b9e559 code=0x7ffc0000 [ 121.152387][ T27] audit: type=1326 audit(2000000002.100:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d74b9e559 code=0x7ffc0000 [ 121.202065][ T27] audit: type=1326 audit(2000000002.100:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8d74b9e559 code=0x7ffc0000 [ 121.310604][ T27] audit: type=1326 audit(2000000002.150:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d74b9e559 code=0x7ffc0000 [ 121.371461][ T27] audit: type=1326 audit(2000000002.150:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d74b9e559 code=0x7ffc0000 [ 121.463688][ T27] audit: type=1326 audit(2000000002.350:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d74b9e559 code=0x7ffc0000 [ 121.568386][ T27] audit: type=1326 audit(2000000002.350:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d74b9e559 code=0x7ffc0000 [ 121.612223][ T27] audit: type=1326 audit(2000000002.350:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.3.212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d74b9e559 code=0x7ffc0000 [ 122.066927][ T4375] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.279455][ T4375] usb 4-1: unable to get BOS descriptor or descriptor too short [ 122.299235][ T4375] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 122.350851][ T4375] usb 4-1: New USB device found, idVendor=fe9e, idProduct=cde4, bcdDevice= f.b6 [ 122.377994][ T4375] usb 4-1: New USB device strings: Mfr=5, Product=65, SerialNumber=3 [ 122.410087][ T4375] usb 4-1: Product: syz [ 122.414521][ T4375] usb 4-1: Manufacturer: syz [ 122.431063][ T4375] usb 4-1: SerialNumber: syz [ 122.475067][ T5086] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.805978][ T4375] usb 4-1: MIDIStreaming interface descriptor not found [ 122.971397][ T4375] usb 4-1: USB disconnect, device number 3 [ 123.188920][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.649092][ T5116] netlink: 'syz.2.226': attribute type 4 has an invalid length. [ 125.140385][ T5113] loop3: detected capacity change from 0 to 32768 [ 125.259295][ T5113] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.225 (5113) [ 125.424042][ T5113] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 125.516826][ T5113] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 125.575786][ T5113] BTRFS info (device loop3): using free space tree [ 125.924851][ T5113] BTRFS info (device loop3): enabling ssd optimizations [ 126.208409][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 126.208430][ T27] audit: type=1800 audit(2000000007.320:112): pid=5113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.225" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 126.336016][ T27] audit: type=1804 audit(2000000007.450:113): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.225" name="/newroot/40/file0/bus" dev="loop3" ino=263 res=1 errno=0 [ 126.821054][ T5130] loop2: detected capacity change from 0 to 40427 [ 126.829527][ T4280] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 126.900599][ T5130] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 127.110388][ T5166] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 127.110388][ T5166] The task syz.1.239 (5166) triggered the difference, watch for misbehavior. [ 130.431044][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 131.196834][ T4371] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 131.399111][ T4371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.447138][ T4371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.496798][ T4371] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.533549][ T4371] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.553940][ T4371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.589711][ T4371] usb 1-1: config 0 descriptor?? [ 131.620267][ T5256] loop1: detected capacity change from 0 to 2048 [ 131.706388][ T5256] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 131.780274][ T5256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.913852][ T5262] FAULT_INJECTION: forcing a failure. [ 131.913852][ T5262] name failslab, interval 1, probability 0, space 0, times 0 [ 131.927178][ T5262] CPU: 0 PID: 5262 Comm: syz.2.271 Not tainted syzkaller #0 [ 131.934542][ T5262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.944676][ T5262] Call Trace: [ 131.948013][ T5262] [ 131.950991][ T5262] dump_stack_lvl+0x188/0x24e [ 131.955760][ T5262] ? show_regs_print_info+0x12/0x12 [ 131.961028][ T5262] ? load_image+0x410/0x410 [ 131.965596][ T5262] ? mark_lock+0x94/0x320 [ 131.970440][ T5262] should_fail_ex+0x390/0x4c0 [ 131.975281][ T5262] should_failslab+0x5/0x20 [ 131.979836][ T5262] slab_pre_alloc_hook+0x59/0x300 [ 131.984940][ T5262] kmem_cache_alloc_node+0x5a/0x310 [ 131.990199][ T5262] ? __alloc_skb+0xf9/0x7d0 [ 131.994776][ T5262] __alloc_skb+0xf9/0x7d0 [ 131.999169][ T5262] tipc_buf_acquire+0x27/0xd0 [ 132.003899][ T5262] tipc_named_withdraw+0x1e2/0x760 [ 132.009065][ T5262] tipc_nametbl_withdraw+0x104/0x2c0 [ 132.014464][ T5262] tipc_release+0x4a1/0x2090 [ 132.019345][ T5262] ? tipc_sock_destruct+0x170/0x170 [ 132.024728][ T5262] sock_close+0xbf/0x210 [ 132.029089][ T5262] ? sock_mmap+0x90/0x90 [ 132.033398][ T5262] __fput+0x20a/0x8b0 [ 132.037471][ T5262] task_work_run+0x1d0/0x260 [ 132.042153][ T5262] ? task_work_cancel+0x220/0x220 [ 132.047268][ T5262] ? exit_to_user_mode_loop+0x3b/0x110 [ 132.052804][ T5262] exit_to_user_mode_loop+0xe6/0x110 [ 132.058154][ T5262] exit_to_user_mode_prepare+0xee/0x180 [ 132.063772][ T5262] syscall_exit_to_user_mode+0x16/0x40 [ 132.069294][ T5262] do_syscall_64+0x58/0xa0 [ 132.073764][ T5262] ? clear_bhb_loop+0x60/0xb0 [ 132.078539][ T5262] ? clear_bhb_loop+0x60/0xb0 [ 132.083282][ T5262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.089591][ T5262] RIP: 0033:0x7f830279e559 [ 132.094071][ T5262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.113731][ T5262] RSP: 002b:00007f8303726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 132.122217][ T5262] RAX: 0000000000000000 RBX: 00007f8302a25fa0 RCX: 00007f830279e559 [ 132.130272][ T5262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 132.138288][ T5262] RBP: 00007f83028358b0 R08: 0000000000000000 R09: 0000000000000000 [ 132.146306][ T5262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.154323][ T5262] R13: 00007f8302a26038 R14: 00007f8302a25fa0 R15: 00007ffd607e2958 [ 132.162375][ T5262] [ 132.165547][ T5262] tipc: Withdrawal distribution failure [ 132.196039][ T4371] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 132.304801][ T4371] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 132.929886][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.937192][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.560258][ T5301] loop3: detected capacity change from 0 to 1024 [ 133.595875][ T5301] EXT4-fs: Ignoring removed bh option [ 133.739342][ T5301] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.756777][ T4929] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.900695][ T5301] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 133.956807][ T4929] usb 5-1: Using ep0 maxpacket: 16 [ 133.967905][ T4929] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.010090][ T4929] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.060687][ T4929] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.095371][ T4929] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 134.136841][ T4929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.178223][ T4929] usb 5-1: config 0 descriptor?? [ 134.315981][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 134.408658][ T4346] usb 1-1: USB disconnect, device number 2 [ 134.601925][ T4929] input: HID 04f3:074d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04F3:074D.0003/input/input5 [ 134.711985][ T4929] elan 0003:04F3:074D.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.4-1/input0 [ 134.858384][ T4929] usb 5-1: USB disconnect, device number 2 [ 135.125921][ T5318] fido_id[5318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 137.020005][ T5375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.311'. [ 138.016555][ T5396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 138.462129][ T5398] loop3: detected capacity change from 0 to 2048 [ 138.522742][ T5398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.627889][ T5398] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 138.683096][ T5407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.320'. [ 138.836608][ T5409] fuse: root generation should be zero [ 138.947306][ T4928] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.157025][ T4928] usb 4-1: Using ep0 maxpacket: 16 [ 139.165711][ T4928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.190695][ T4928] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 139.206731][ T5424] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 139.222468][ T4928] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 139.252005][ T4928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.285240][ T4928] usb 4-1: Product: syz [ 139.299968][ T4928] usb 4-1: Manufacturer: syz [ 139.317377][ T4928] usb 4-1: SerialNumber: syz [ 139.546395][ T4928] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 139.563561][ T5431] capability: warning: `syz.2.329' uses deprecated v2 capabilities in a way that may be insecure [ 139.583998][ T4928] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 139.609784][ T5431] loop2: detected capacity change from 0 to 256 [ 139.660107][ T5431] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.695280][ T5431] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 139.763008][ T5431] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d4254, utbl_chksum : 0xe619d30d) [ 139.842507][ T5431] exFAT-fs (loop2): failed to load alloc-bitmap [ 139.874015][ T5431] exFAT-fs (loop2): failed to recognize exfat type [ 139.945675][ T4928] usb 4-1: 2:1 : can't get Cluster Descriptor [ 140.150724][ T4928] usb 4-1: USB disconnect, device number 4 [ 140.639728][ T5448] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 140.690034][ T5405] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 140.772660][ T5405] EXT4-fs (loop3): Remounting filesystem read-only [ 140.800991][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 142.222721][ T5487] loop2: detected capacity change from 0 to 8 [ 142.252043][ T5487] squashfs: Unknown parameter 'pim6reg' [ 143.541758][ T5516] loop0: detected capacity change from 0 to 512 [ 143.757101][ T5516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 143.769716][ T5516] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.102818][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 144.278788][ T5530] ip_tables: iptables: counters copy to user failed while replacing table [ 146.184318][ T5566] loop0: detected capacity change from 0 to 32768 [ 146.231501][ T5566] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.382 (5566) [ 146.335155][ T5566] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.377741][ T5566] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 146.406987][ T5566] BTRFS info (device loop0): using free space tree [ 146.694455][ T5566] BTRFS info (device loop0): enabling ssd optimizations [ 147.005872][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.022632][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.054204][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.065669][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.073803][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.089725][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.180975][ T5566] BTRFS info (device loop0): balance: start -dconvert=raid0 -mconvert=raid0 [ 147.227250][ T5602] rxe_eth0 speed is unknown, defaulting to 1000 [ 147.251534][ T5575] loop2: detected capacity change from 0 to 40427 [ 147.324424][ T5575] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 147.390147][ T5575] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 147.454546][ T5566] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 147.475935][ T5575] F2FS-fs (loop2): invalid crc value [ 147.520551][ T5575] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 147.613345][ T5575] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 147.766039][ T5566] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 147.869848][ T5575] F2FS-fs (loop2): recover fsync data on readonly fs [ 147.890531][ T5566] BTRFS info (device loop0): balance: canceled [ 147.911653][ T5575] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 147.939558][ T5575] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.073357][ T4269] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.473477][ T5602] chnl_net:caif_netlink_parms(): no params data found [ 148.831356][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.838981][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.848283][ T5602] device bridge_slave_0 entered promiscuous mode [ 148.860874][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.868521][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.877850][ T5602] device bridge_slave_1 entered promiscuous mode [ 148.913457][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.931640][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.011269][ T5602] team0: Port device team_slave_0 added [ 149.096625][ T5602] team0: Port device team_slave_1 added [ 149.167079][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 149.199426][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.206927][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.234376][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.260826][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.277111][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.368680][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.397661][ T5641] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.831368][ T5602] device hsr_slave_0 entered promiscuous mode [ 149.857683][ T5602] device hsr_slave_1 entered promiscuous mode [ 149.875409][ T5602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.913613][ T5602] Cannot create hsr debugfs directory [ 150.193012][ T5639] loop0: detected capacity change from 0 to 40427 [ 150.212859][ T5653] loop4: detected capacity change from 0 to 1024 [ 150.284862][ T5639] F2FS-fs (loop0): invalid crc value [ 150.311914][ T5653] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 150.354546][ T5639] F2FS-fs (loop0): Found nat_bits in checkpoint [ 150.371813][ T5653] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 150.396973][ T5653] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.533037][ T5653] syz.4.406 (pid 5653) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 150.600559][ T5639] F2FS-fs (loop0): Start checkpoint disabled! [ 150.662235][ T5602] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.689494][ T5639] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 150.702169][ T5602] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.738169][ T5602] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.761939][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 150.791994][ T5602] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.989550][ T5670] netlink: 156 bytes leftover after parsing attributes in process `syz.1.411'. [ 151.048579][ T5672] netlink: 'syz.1.411': attribute type 3 has an invalid length. [ 151.078231][ T5672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 151.099854][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.142344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.173387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.205355][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.247543][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 151.299073][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.315343][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.335021][ T4524] kworker/u4:8: attempt to access beyond end of device [ 151.335021][ T4524] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.397640][ T4628] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.404940][ T4628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.423896][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.462778][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.478038][ T4628] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.485429][ T4628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.500327][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.531726][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.541281][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.585891][ T5682] device bridge_slave_1 left promiscuous mode [ 151.611767][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.710665][ T5682] device bridge_slave_0 left promiscuous mode [ 151.753877][ T5686] FAULT_INJECTION: forcing a failure. [ 151.753877][ T5686] name failslab, interval 1, probability 0, space 0, times 0 [ 151.777288][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.811024][ T5686] CPU: 0 PID: 5686 Comm: syz.4.419 Not tainted syzkaller #0 [ 151.818439][ T5686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 151.828736][ T5686] Call Trace: [ 151.832095][ T5686] [ 151.835088][ T5686] dump_stack_lvl+0x188/0x24e [ 151.839835][ T5686] ? show_regs_print_info+0x12/0x12 [ 151.845141][ T5686] ? load_image+0x410/0x410 [ 151.849726][ T5686] ? __might_sleep+0xd0/0xd0 [ 151.854402][ T5686] ? __lock_acquire+0x7ea0/0x7ea0 [ 151.859535][ T5686] should_fail_ex+0x390/0x4c0 [ 151.864314][ T5686] should_failslab+0x5/0x20 [ 151.868884][ T5686] slab_pre_alloc_hook+0x59/0x300 [ 151.874017][ T5686] ? lockdep_softirqs_off+0x430/0x430 [ 151.879482][ T5686] kmem_cache_alloc+0x56/0x2f0 [ 151.884312][ T5686] ? security_inode_alloc+0x30/0x110 [ 151.889721][ T5686] security_inode_alloc+0x30/0x110 [ 151.894901][ T5686] inode_init_always+0x910/0xc90 [ 151.899936][ T5686] new_inode_pseudo+0x91/0x1c0 [ 151.904795][ T5686] new_inode+0x25/0x1d0 [ 151.909053][ T5686] fuse_ctl_add_dentry+0x91/0x470 [ 151.914200][ T5686] fuse_ctl_add_conn+0x207/0x370 [ 151.919268][ T5686] ? mutex_lock_nested+0x10/0x10 [ 151.924378][ T5686] ? fuse_inode_init_once+0x20/0x20 [ 151.929663][ T5686] ? do_raw_spin_unlock+0x11d/0x230 [ 151.935045][ T5686] ? _raw_spin_unlock+0x24/0x40 [ 151.940000][ T5686] fuse_fill_super_common+0xaf5/0x1110 [ 151.945557][ T5686] fuse_fill_super+0x173/0x1f0 [ 151.950404][ T5686] ? fuse_reconfigure+0xb0/0xb0 [ 151.955338][ T5686] get_tree_nodev+0xb0/0x160 [ 151.960012][ T5686] fuse_get_tree+0x2d7/0x4d0 [ 151.964697][ T5686] vfs_get_tree+0x88/0x270 [ 151.969200][ T5686] do_new_mount+0x247/0xa40 [ 151.973825][ T5686] __se_sys_mount+0x2e3/0x3d0 [ 151.978626][ T5686] ? __x64_sys_mount+0xc0/0xc0 [ 151.983510][ T5686] ? lockdep_hardirqs_on+0x94/0x140 [ 151.988941][ T5686] ? __x64_sys_mount+0x1c/0xc0 [ 151.993813][ T5686] do_syscall_64+0x4c/0xa0 [ 151.998383][ T5686] ? clear_bhb_loop+0x60/0xb0 [ 152.003165][ T5686] ? clear_bhb_loop+0x60/0xb0 [ 152.007932][ T5686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.013914][ T5686] RIP: 0033:0x7f4cf6f9e559 [ 152.018513][ T5686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.038221][ T5686] RSP: 002b:00007f4cf7e31028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.046745][ T5686] RAX: ffffffffffffffda RBX: 00007f4cf7225fa0 RCX: 00007f4cf6f9e559 [ 152.054798][ T5686] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 152.062842][ T5686] RBP: 00007f4cf70358b0 R08: 0000200000000440 R09: 0000000000000000 [ 152.070902][ T5686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.079224][ T5686] R13: 00007f4cf7226038 R14: 00007f4cf7225fa0 R15: 00007ffeb8121e88 [ 152.087299][ T5686] [ 152.258184][ T5691] syz.0.412 sent an empty control message without MSG_MORE. [ 152.267807][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.303836][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.357021][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.368541][ T5693] loop1: detected capacity change from 0 to 1024 [ 152.388613][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.405150][ T5693] EXT4-fs: Ignoring removed oldalloc option [ 152.413252][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.437501][ T5693] EXT4-fs: Ignoring removed oldalloc option [ 152.455585][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.479047][ T5693] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.502692][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.539085][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.585961][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.602747][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.611983][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.632990][ T5693] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 152.653806][ T5602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.046077][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 153.327962][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 153.526565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.542398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.707800][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.011560][ T4756] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.213754][ T4756] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.351625][ T4756] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.632849][ T4756] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.406862][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 155.462696][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.477073][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.487380][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.495465][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.503570][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.511154][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.573439][ T5747] loop4: detected capacity change from 0 to 1024 [ 155.631091][ T5747] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 155.674171][ T5747] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.759611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.788582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.900431][ T5739] rxe_eth0 speed is unknown, defaulting to 1000 [ 155.940134][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.988045][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.086561][ T5602] device veth0_vlan entered promiscuous mode [ 156.105046][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.130107][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.164508][ T5602] device veth1_vlan entered promiscuous mode [ 156.406576][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.465885][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.497843][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.517663][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.551648][ T5602] device veth0_macvtap entered promiscuous mode [ 156.642494][ T5602] device veth1_macvtap entered promiscuous mode [ 156.751882][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.777600][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.807010][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.826344][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.847074][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.878584][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.917770][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.928327][ T5750] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 156.959710][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.976470][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.994627][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.037129][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.049591][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.065556][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.094506][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.124572][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.203954][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.249583][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.276745][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.316865][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.356797][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.376756][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.397012][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.426757][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.463275][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.484152][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.507466][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.560418][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.568695][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 157.592635][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.622111][ T5787] netlink: 104 bytes leftover after parsing attributes in process `syz.2.447'. [ 157.718603][ T5602] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.757224][ T5602] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.791322][ T5602] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.828383][ T5602] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.982508][ T5796] overlayfs: failed to clone upperpath [ 158.353351][ T5802] FAULT_INJECTION: forcing a failure. [ 158.353351][ T5802] name failslab, interval 1, probability 0, space 0, times 0 [ 158.375858][ T5802] CPU: 0 PID: 5802 Comm: syz.1.452 Not tainted syzkaller #0 [ 158.383320][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 158.393473][ T5802] Call Trace: [ 158.396984][ T5802] [ 158.400086][ T5802] dump_stack_lvl+0x188/0x24e [ 158.404900][ T5802] ? show_regs_print_info+0x12/0x12 [ 158.410220][ T5802] ? load_image+0x410/0x410 [ 158.414940][ T5802] ? __might_sleep+0xd0/0xd0 [ 158.419713][ T5802] ? __lock_acquire+0x7ea0/0x7ea0 [ 158.424840][ T5802] ? __crypto_alloc_tfm+0x12c/0x480 [ 158.430140][ T5802] should_fail_ex+0x390/0x4c0 [ 158.434932][ T5802] should_failslab+0x5/0x20 [ 158.439505][ T5802] slab_pre_alloc_hook+0x59/0x300 [ 158.444612][ T5802] ? skcipher_init_tfm_simple+0x5f/0x90 [ 158.450254][ T5802] ? init_skcipher_req+0x83/0x1b0 [ 158.455378][ T5802] __kmem_cache_alloc_node+0x4f/0x270 [ 158.460865][ T5802] ? init_skcipher_req+0x83/0x1b0 [ 158.465972][ T5802] __kmalloc+0xa3/0x240 [ 158.470377][ T5802] init_skcipher_req+0x83/0x1b0 [ 158.475327][ T5802] encrypted_read+0x2f5/0xe10 [ 158.480098][ T5802] ? encrypted_destroy+0x40/0x40 [ 158.485136][ T5802] ? __mod_lruvec_page_state+0xa1/0x410 [ 158.490776][ T5802] ? __might_sleep+0xd0/0xd0 [ 158.495456][ T5802] ? read_lock_is_recursive+0x10/0x10 [ 158.500936][ T5802] ? rcu_is_watching+0x11/0xa0 [ 158.506107][ T5802] ? down_read+0x1a8/0x2d0 [ 158.510628][ T5802] keyctl_read_key+0x292/0x460 [ 158.515588][ T5802] __se_sys_keyctl+0x17f/0x870 [ 158.520497][ T5802] ? __x64_sys_keyctl+0xc0/0xc0 [ 158.525433][ T5802] ? do_futex+0x310/0x320 [ 158.529846][ T5802] ? __ia32_sys_get_robust_list+0x100/0x100 [ 158.535893][ T5802] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 158.542139][ T5802] ? lock_chain_count+0x20/0x20 [ 158.547130][ T5802] ? lockdep_hardirqs_on+0x94/0x140 [ 158.552423][ T5802] ? __x64_sys_keyctl+0x1c/0xc0 [ 158.557372][ T5802] do_syscall_64+0x4c/0xa0 [ 158.561887][ T5802] ? clear_bhb_loop+0x60/0xb0 [ 158.566743][ T5802] ? clear_bhb_loop+0x60/0xb0 [ 158.571529][ T5802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.577535][ T5802] RIP: 0033:0x7f99cf19e559 [ 158.582131][ T5802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.601815][ T5802] RSP: 002b:00007f99d0014028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 158.610413][ T5802] RAX: ffffffffffffffda RBX: 00007f99cf425fa0 RCX: 00007f99cf19e559 [ 158.618508][ T5802] RDX: 0000200000000240 RSI: 00000000059563de RDI: 000000000000000b [ 158.627533][ T5802] RBP: 00007f99cf2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 158.636126][ T5802] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 158.644345][ T5802] R13: 00007f99cf426038 R14: 00007f99cf425fa0 R15: 00007ffd51d2e178 [ 158.652782][ T5802] [ 158.662841][ T27] audit: type=1800 audit(2000000039.780:114): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.436" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 158.777253][ T5802] trusted_key: encrypted_key: failed to allocate request for cbc(aes) [ 158.872983][ T4524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.928739][ T4524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.963644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.024545][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.056271][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.339661][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.370247][ T5739] chnl_net:caif_netlink_parms(): no params data found [ 159.647431][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 159.734005][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 160.056180][ T4756] device hsr_slave_0 left promiscuous mode [ 160.107991][ T4756] device hsr_slave_1 left promiscuous mode [ 160.128740][ T4756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.167055][ T4756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.207463][ T4756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.237125][ T4756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.258347][ T4756] device bridge_slave_1 left promiscuous mode [ 160.267435][ T4756] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.320978][ T5844] ip_tables: iptables: counters copy to user failed while replacing table [ 160.376364][ T4756] device bridge_slave_0 left promiscuous mode [ 160.390935][ T4756] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.525246][ T4756] device veth1_macvtap left promiscuous mode [ 160.557230][ T4756] device veth0_macvtap left promiscuous mode [ 160.563704][ T4756] device veth1_vlan left promiscuous mode [ 160.610244][ T4756] device veth0_vlan left promiscuous mode [ 160.745612][ T5858] mmap: syz.1.467 (5858): VmData 37523456 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 161.736527][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 162.201405][ T4756] team0 (unregistering): Port device team_slave_1 removed [ 162.261151][ T4756] team0 (unregistering): Port device team_slave_0 removed [ 162.323419][ T4756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.385913][ T4756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.925620][ T4756] bond0 (unregistering): Released all slaves [ 163.061155][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.069177][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.078669][ T5739] device bridge_slave_0 entered promiscuous mode [ 163.094085][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.102245][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.111523][ T5739] device bridge_slave_1 entered promiscuous mode [ 163.243911][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.326195][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.476157][ T5739] team0: Port device team_slave_0 added [ 163.512944][ T5739] team0: Port device team_slave_1 added [ 163.529504][ T5890] netlink: 24 bytes leftover after parsing attributes in process `syz.5.474'. [ 163.568224][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.474'. [ 163.686307][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.703816][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.796896][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.807445][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 163.882963][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.917069][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.035439][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.311456][ T5739] device hsr_slave_0 entered promiscuous mode [ 164.354686][ T5739] device hsr_slave_1 entered promiscuous mode [ 164.384357][ T5739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.410233][ T5739] Cannot create hsr debugfs directory [ 164.452719][ T5914] rxe_eth0 speed is unknown, defaulting to 1000 [ 164.907479][ T5933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.490'. [ 165.865297][ T5918] netlink: 28 bytes leftover after parsing attributes in process `syz.5.485'. [ 166.000075][ T5971] ip_tables: iptables: counters copy to user failed while replacing table [ 166.045467][ T5971] netlink: 'syz.4.496': attribute type 4 has an invalid length. [ 166.302253][ T5739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.377443][ T5739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.443950][ T5739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.481242][ T5739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.867263][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.923389][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.942149][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.984282][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.058807][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.080389][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.137553][ T4628] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.144825][ T4628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.195740][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.244041][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.288303][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.304046][ T4628] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.311467][ T4628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.354348][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.383610][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.409076][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.445208][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.502721][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.552275][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.566212][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.607924][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.657333][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.701724][ T5739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.743616][ T5739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.775081][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.796501][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.411475][ T6028] No such timeout policy "syz1" [ 168.621206][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.646408][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.678171][ T6036] netlink: 28 bytes leftover after parsing attributes in process `syz.5.514'. [ 168.708811][ T6036] netlink: 'syz.5.514': attribute type 8 has an invalid length. [ 168.726909][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.5.514'. [ 168.814566][ T6036] device erspan0 entered promiscuous mode [ 168.894493][ T6036] device gretap0 entered promiscuous mode [ 168.929589][ T6036] device erspan0 left promiscuous mode [ 168.972350][ T6036] device gretap0 left promiscuous mode [ 169.020905][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.5.514'. [ 169.076917][ T6039] netlink: 'syz.5.514': attribute type 8 has an invalid length. [ 169.117863][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.5.514'. [ 169.168779][ T6039] device erspan0 entered promiscuous mode [ 169.208415][ T6039] device gretap0 entered promiscuous mode [ 169.216558][ T6039] device erspan0 left promiscuous mode [ 169.225706][ T6039] device gretap0 left promiscuous mode [ 169.253231][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.277599][ T6051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.520'. [ 169.370131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.387774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.449023][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.471370][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.503415][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.533121][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.565842][ T5739] device veth0_vlan entered promiscuous mode [ 169.600346][ T6068] loop4: detected capacity change from 0 to 512 [ 169.609956][ T5739] device veth1_vlan entered promiscuous mode [ 169.638553][ T6068] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 169.713979][ T6068] 9pnet: p9_errstr2errno: server reported unknown error _alloc,i [ 169.761621][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.776152][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 169.806374][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.838180][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.889858][ T5739] device veth0_macvtap entered promiscuous mode [ 169.925742][ T5739] device veth1_macvtap entered promiscuous mode [ 169.988335][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.016820][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.057059][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.096244][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.154380][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.181559][ T6077] tipc: Failed to remove unknown binding: 66,1,1/0:1803101866/1803101868 [ 170.190747][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.227074][ T6077] tipc: Failed to remove unknown binding: 66,1,1/0:1803101866/1803101868 [ 170.248568][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.275361][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.355307][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.375745][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.408931][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.428806][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.462347][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.504432][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.558387][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.585559][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.607311][ T5627] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 170.635406][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.663719][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.697394][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.722410][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.744357][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.761798][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.806755][ T5627] usb 2-1: Using ep0 maxpacket: 32 [ 170.813923][ T5627] usb 2-1: config 0 has an invalid interface number: 131 but max is 0 [ 170.825235][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.847138][ T5627] usb 2-1: config 0 has no interface number 0 [ 170.853395][ T5627] usb 2-1: too many endpoints for config 0 interface 131 altsetting 181: 207, using maximum allowed: 30 [ 170.868084][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.910090][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.926986][ T5627] usb 2-1: config 0 interface 131 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 170.951556][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.970507][ T5627] usb 2-1: config 0 interface 131 has no altsetting 0 [ 170.988801][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.009029][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.020127][ T5627] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 171.047845][ T5627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.059299][ T5739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.083099][ T5739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.093596][ T5627] usb 2-1: Product: syz [ 171.134049][ T5627] usb 2-1: Manufacturer: syz [ 171.146872][ T5739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.156928][ T5627] usb 2-1: SerialNumber: syz [ 171.185490][ T5627] usb 2-1: config 0 descriptor?? [ 171.196894][ T5739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.338922][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 171.640994][ T4628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.672366][ T4628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.692504][ T5627] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 171.699989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.806211][ T4756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.840065][ T4756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.883853][ T5627] gspca_topro: reg_w err -71 [ 171.928595][ T5627] gspca_topro: Sensor soi763a [ 171.983662][ T5627] usb 2-1: USB disconnect, device number 2 [ 172.108727][ T6109] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.188607][ T6109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.217822][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 172.259945][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.420098][ T22] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.449872][ T22] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 172.497037][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.526609][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 172.573084][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 172.632018][ T22] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.667627][ T22] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.678573][ T6125] loop1: detected capacity change from 0 to 512 [ 172.708971][ T22] usb 5-1: Product: syz [ 172.713273][ T22] usb 5-1: Manufacturer: syz [ 172.747072][ T6125] FAT-fs (loop1): bogus logical sector size 0 [ 172.756987][ T6125] FAT-fs (loop1): Can't find a valid FAT filesystem [ 172.786274][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 172.806896][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 172.898497][ T22] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 172.904541][ T22] cdc_wdm 5-1:1.0: Unknown control protocol [ 173.191984][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 173.199193][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 173.208397][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 173.213225][ T5174] usb 5-1: USB disconnect, device number 3 [ 173.215122][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 173.227075][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 173.247055][ T6111] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 173.786774][ T22] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 173.981113][ T22] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 174.002870][ T22] usb 2-1: config 0 has no interface number 0 [ 174.025586][ T22] usb 2-1: config 0 interface 41 has no altsetting 0 [ 174.064822][ T22] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 174.096858][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.104969][ T22] usb 2-1: Product: syz [ 174.136817][ T22] usb 2-1: Manufacturer: syz [ 174.141587][ T22] usb 2-1: SerialNumber: syz [ 174.155271][ T6172] loop0: detected capacity change from 0 to 164 [ 174.176311][ T22] usb 2-1: config 0 descriptor?? [ 175.020984][ T22] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 175.069232][ T6196] loop0: detected capacity change from 0 to 512 [ 175.078902][ T6196] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.133462][ T6196] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 175.157266][ T6196] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 175.210520][ T6196] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.557: Failed to acquire dquot type 1 [ 175.273001][ T6196] EXT4-fs (loop0): 1 truncate cleaned up [ 175.279135][ T6196] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 175.455843][ T22] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 175.487093][ T22] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 175.502966][ T22] CoreChips: probe of 2-1:0.41 failed with error -71 [ 175.534047][ T22] usb 2-1: USB disconnect, device number 3 [ 175.544424][ T5739] EXT4-fs (loop0): unmounting filesystem. [ 176.213101][ T6232] ip_tables: iptables: counters copy to user failed while replacing table [ 176.264293][ T6232] netlink: 'syz.1.569': attribute type 4 has an invalid length. [ 176.847254][ T6246] rxe_eth0 speed is unknown, defaulting to 1000 [ 178.436735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 179.549673][ T6291] bridge0: port 3(veth0) entered blocking state [ 179.560389][ T6291] bridge0: port 3(veth0) entered disabled state [ 179.580090][ T6291] device veth0 entered promiscuous mode [ 179.619402][ T6291] bridge0: port 3(veth0) entered blocking state [ 179.625835][ T6291] bridge0: port 3(veth0) entered forwarding state [ 181.036729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 182.572810][ T6360] rxe_eth0 speed is unknown, defaulting to 1000 [ 182.596759][ T5174] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 182.796837][ T5174] usb 5-1: Using ep0 maxpacket: 16 [ 182.811396][ T5174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 182.848514][ T5174] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 182.876331][ T5174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.895008][ T5174] usb 5-1: Product: syz [ 182.905654][ T5174] usb 5-1: Manufacturer: syz [ 182.912797][ T5174] usb 5-1: SerialNumber: syz [ 182.941331][ T5174] usb 5-1: config 0 descriptor?? [ 182.951381][ T5174] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 182.995466][ T5174] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 183.222345][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030e8d000: rx timeout, send abort [ 183.465484][ T6377] sctp: [Deprecated]: syz.5.619 (pid 6377) Use of int in max_burst socket option deprecated. [ 183.465484][ T6377] Use struct sctp_assoc_value instead [ 183.570204][ T5174] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 183.733018][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030e8d000: abort rx timeout. Force session deactivation [ 184.199790][ T5174] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 184.244795][ T5174] em28xx 5-1:0.0: board has no eeprom [ 184.377205][ T5174] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 184.399529][ T5174] em28xx 5-1:0.0: dvb set to bulk mode. [ 184.426547][ T4375] em28xx 5-1:0.0: Binding DVB extension [ 184.446268][ T5174] usb 5-1: USB disconnect, device number 4 [ 184.476077][ T5174] em28xx 5-1:0.0: Disconnecting em28xx [ 184.758626][ T4375] em28xx 5-1:0.0: Registering input extension [ 184.823913][ T5174] em28xx 5-1:0.0: Closing input extension [ 185.000692][ T5174] em28xx 5-1:0.0: Freeing device [ 185.119799][ T6407] device syzkaller0 entered promiscuous mode [ 185.129846][ T6407] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 185.201881][ T4346] libceph: connect (1)[c::]:6789 error -101 [ 185.242211][ T4346] libceph: mon0 (1)[c::]:6789 connect error [ 185.281899][ T6408] ceph: No mds server is up or the cluster is laggy [ 185.308911][ T14] libceph: connect (1)[c::]:6789 error -101 [ 185.315087][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 186.696981][ T4346] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 186.887436][ T6434] loop0: detected capacity change from 0 to 40427 [ 186.896918][ T4346] usb 6-1: Using ep0 maxpacket: 16 [ 186.924222][ T6434] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 186.936526][ T4346] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 186.979572][ T4346] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 186.991143][ T4346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.009405][ T4346] usb 6-1: Product: syz [ 187.018936][ T4346] usb 6-1: Manufacturer: syz [ 187.023646][ T4346] usb 6-1: SerialNumber: syz [ 187.055798][ T4346] usb 6-1: config 0 descriptor?? [ 187.081839][ T4346] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 187.123102][ T4346] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 187.706488][ T4346] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 187.801424][ T6466] netlink: 264 bytes leftover after parsing attributes in process `syz.4.648'. [ 188.086709][ T6453] loop1: detected capacity change from 0 to 32768 [ 188.121010][ T6453] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.645 (6453) [ 188.165854][ T6453] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.215859][ T6453] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 188.246009][ T6453] BTRFS info (device loop1): using free space tree [ 188.339982][ T4346] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 188.349922][ T4346] em28xx 6-1:0.0: board has no eeprom [ 188.436802][ T4346] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 188.444950][ T4346] em28xx 6-1:0.0: dvb set to bulk mode. [ 188.464614][ T14] em28xx 6-1:0.0: Binding DVB extension [ 188.506487][ T4346] usb 6-1: USB disconnect, device number 2 [ 188.581081][ T6453] BTRFS info (device loop1): enabling ssd optimizations [ 188.593586][ T4346] em28xx 6-1:0.0: Disconnecting em28xx [ 188.678425][ T14] em28xx 6-1:0.0: Registering input extension [ 188.692959][ T4346] em28xx 6-1:0.0: Closing input extension [ 188.733605][ T4346] em28xx 6-1:0.0: Freeing device [ 188.771104][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 188.820809][ T6453] BTRFS info (device loop1): balance: start -dconvert=raid0 -mconvert=raid0 [ 188.872598][ T6453] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 189.051911][ T6504] overlayfs: failed to clone upperpath [ 189.092509][ T6453] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 189.200206][ T6453] BTRFS info (device loop1): 1 enospc errors during balance [ 189.225286][ T6453] BTRFS info (device loop1): balance: canceled [ 189.407807][ T4271] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 189.959547][ T6392] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 16 /dev/loop1 scanned by udevd (6392) [ 190.261063][ T6538] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.667'. [ 190.317514][ T6538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.667'. [ 190.640867][ T6545] netlink: 'syz.1.669': attribute type 2 has an invalid length. [ 191.207863][ T6562] Bluetooth: MGMT ver 1.22 [ 192.396678][ C1] sched: RT throttling activated [ 192.650369][ T6577] overlayfs: upper fs does not support file handles, falling back to index=off. [ 193.286960][ T6593] overlayfs: failed to set xattr on upper [ 193.305845][ T6593] overlayfs: ...falling back to index=off,metacopy=off. [ 193.437084][ T27] audit: type=1800 audit(2000000074.560:115): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.680" name="file1" dev="fuse" ino=68719476738 res=0 errno=0 [ 194.086126][ T6613] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 194.184686][ T6613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.364631][ T6616] bond1: (slave veth0_to_bond): making interface the new active one [ 194.376551][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.378138][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.457651][ T6616] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 194.546375][ T6619] device bond1 entered promiscuous mode [ 194.563794][ T6619] device veth0_to_bond entered promiscuous mode [ 195.634391][ T6643] netlink: 'syz.1.705': attribute type 1 has an invalid length. [ 195.716412][ T27] audit: type=1800 audit(2000000076.830:116): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.701" name="file1" dev="fuse" ino=68719476738 res=0 errno=0 [ 195.841778][ T6643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.850217][ T6643] bond1: (slave bond2): making interface the new active one [ 195.858349][ T6643] bond1: (slave bond2): Enslaving as an active interface with an up link [ 195.896812][ T2123] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 195.922156][ T6643] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 196.009274][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 196.062506][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 196.116900][ T2123] usb 1-1: Using ep0 maxpacket: 8 [ 196.124784][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 196.144220][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 196.182487][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 196.212222][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 196.262959][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 196.302036][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 196.646138][ T2123] usb 1-1: unable to get BOS descriptor or descriptor too short [ 196.682306][ T2123] usb 1-1: no configurations [ 196.692440][ T2123] usb 1-1: can't read configurations, error -22 [ 196.939838][ T6673] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 197.391640][ T6679] FAULT_INJECTION: forcing a failure. [ 197.391640][ T6679] name failslab, interval 1, probability 0, space 0, times 0 [ 197.500355][ T6679] CPU: 0 PID: 6679 Comm: syz.5.719 Not tainted syzkaller #0 [ 197.507767][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 197.517897][ T6679] Call Trace: [ 197.521336][ T6679] [ 197.524326][ T6679] dump_stack_lvl+0x188/0x24e [ 197.529089][ T6679] ? show_regs_print_info+0x12/0x12 [ 197.534428][ T6679] ? load_image+0x410/0x410 [ 197.539191][ T6679] ? __might_sleep+0xd0/0xd0 [ 197.543990][ T6679] ? __lock_acquire+0x7ea0/0x7ea0 [ 197.549122][ T6679] should_fail_ex+0x390/0x4c0 [ 197.553900][ T6679] should_failslab+0x5/0x20 [ 197.559002][ T6679] slab_pre_alloc_hook+0x59/0x300 [ 197.564118][ T6679] ? lockdep_softirqs_off+0x430/0x430 [ 197.569584][ T6679] kmem_cache_alloc+0x56/0x2f0 [ 197.574431][ T6679] ? security_inode_alloc+0x30/0x110 [ 197.579818][ T6679] security_inode_alloc+0x30/0x110 [ 197.585025][ T6679] inode_init_always+0x910/0xc90 [ 197.590090][ T6679] new_inode_pseudo+0x91/0x1c0 [ 197.594965][ T6679] new_inode+0x25/0x1d0 [ 197.599219][ T6679] fuse_ctl_add_dentry+0x91/0x470 [ 197.604333][ T6679] fuse_ctl_add_conn+0x1d5/0x370 [ 197.609330][ T6679] ? mutex_lock_nested+0x10/0x10 [ 197.614319][ T6679] ? fuse_inode_init_once+0x20/0x20 [ 197.619588][ T6679] ? do_raw_spin_unlock+0x11d/0x230 [ 197.624847][ T6679] ? _raw_spin_unlock+0x24/0x40 [ 197.629754][ T6679] fuse_fill_super_common+0xaf5/0x1110 [ 197.635309][ T6679] fuse_fill_super+0x173/0x1f0 [ 197.640181][ T6679] ? fuse_reconfigure+0xb0/0xb0 [ 197.645094][ T6679] get_tree_nodev+0xb0/0x160 [ 197.649739][ T6679] fuse_get_tree+0x2d7/0x4d0 [ 197.654528][ T6679] vfs_get_tree+0x88/0x270 [ 197.659178][ T6679] do_new_mount+0x247/0xa40 [ 197.663743][ T6679] __se_sys_mount+0x2e3/0x3d0 [ 197.668485][ T6679] ? __x64_sys_mount+0xc0/0xc0 [ 197.673292][ T6679] ? lockdep_hardirqs_on+0x94/0x140 [ 197.678551][ T6679] ? __x64_sys_mount+0x1c/0xc0 [ 197.683386][ T6679] do_syscall_64+0x4c/0xa0 [ 197.687852][ T6679] ? clear_bhb_loop+0x60/0xb0 [ 197.692597][ T6679] ? clear_bhb_loop+0x60/0xb0 [ 197.697370][ T6679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.703379][ T6679] RIP: 0033:0x7f7af7f9e559 [ 197.707856][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.727524][ T6679] RSP: 002b:00007f7af8dda028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 197.735981][ T6679] RAX: ffffffffffffffda RBX: 00007f7af8225fa0 RCX: 00007f7af7f9e559 [ 197.744019][ T6679] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 197.752217][ T6679] RBP: 00007f7af80358b0 R08: 0000200000000440 R09: 0000000000000000 [ 197.760243][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.768462][ T6679] R13: 00007f7af8226038 R14: 00007f7af8225fa0 R15: 00007ffcc8d99768 [ 197.776677][ T6679] [ 198.520007][ T6709] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 199.265074][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 204.478448][ T6771] FAULT_INJECTION: forcing a failure. [ 204.478448][ T6771] name failslab, interval 1, probability 0, space 0, times 0 [ 204.522010][ T6771] CPU: 1 PID: 6771 Comm: syz.1.746 Not tainted syzkaller #0 [ 204.529532][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 204.539654][ T6771] Call Trace: [ 204.542993][ T6771] [ 204.545982][ T6771] dump_stack_lvl+0x188/0x24e [ 204.550871][ T6771] ? show_regs_print_info+0x12/0x12 [ 204.556177][ T6771] ? load_image+0x410/0x410 [ 204.560819][ T6771] ? __might_sleep+0xd0/0xd0 [ 204.565505][ T6771] ? __lock_acquire+0x7ea0/0x7ea0 [ 204.570623][ T6771] should_fail_ex+0x390/0x4c0 [ 204.575403][ T6771] should_failslab+0x5/0x20 [ 204.580105][ T6771] slab_pre_alloc_hook+0x59/0x300 [ 204.585221][ T6771] ? lockdep_softirqs_off+0x430/0x430 [ 204.591305][ T6771] kmem_cache_alloc+0x56/0x2f0 [ 204.596160][ T6771] ? security_inode_alloc+0x30/0x110 [ 204.601553][ T6771] security_inode_alloc+0x30/0x110 [ 204.606744][ T6771] inode_init_always+0x910/0xc90 [ 204.611773][ T6771] new_inode_pseudo+0x91/0x1c0 [ 204.616624][ T6771] new_inode+0x25/0x1d0 [ 204.620867][ T6771] fuse_ctl_add_dentry+0x91/0x470 [ 204.625992][ T6771] fuse_ctl_add_conn+0x207/0x370 [ 204.631011][ T6771] ? mutex_lock_nested+0x10/0x10 [ 204.636038][ T6771] ? fuse_inode_init_once+0x20/0x20 [ 204.643350][ T6771] ? do_raw_spin_unlock+0x11d/0x230 [ 204.648642][ T6771] ? _raw_spin_unlock+0x24/0x40 [ 204.653676][ T6771] fuse_fill_super_common+0xaf5/0x1110 [ 204.659256][ T6771] fuse_fill_super+0x173/0x1f0 [ 204.664104][ T6771] ? fuse_reconfigure+0xb0/0xb0 [ 204.669027][ T6771] get_tree_nodev+0xb0/0x160 [ 204.673707][ T6771] fuse_get_tree+0x2d7/0x4d0 [ 204.678401][ T6771] vfs_get_tree+0x88/0x270 [ 204.682897][ T6771] do_new_mount+0x247/0xa40 [ 204.687534][ T6771] __se_sys_mount+0x2e3/0x3d0 [ 204.692331][ T6771] ? __x64_sys_mount+0xc0/0xc0 [ 204.697196][ T6771] ? lockdep_hardirqs_on+0x94/0x140 [ 204.702495][ T6771] ? __x64_sys_mount+0x1c/0xc0 [ 204.707392][ T6771] do_syscall_64+0x4c/0xa0 [ 204.711881][ T6771] ? clear_bhb_loop+0x60/0xb0 [ 204.717310][ T6771] ? clear_bhb_loop+0x60/0xb0 [ 204.722254][ T6771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.728249][ T6771] RIP: 0033:0x7f99cf19e559 [ 204.732752][ T6771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.752430][ T6771] RSP: 002b:00007f99d0014028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.761051][ T6771] RAX: ffffffffffffffda RBX: 00007f99cf425fa0 RCX: 00007f99cf19e559 [ 204.769192][ T6771] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 204.777241][ T6771] RBP: 00007f99cf2358b0 R08: 0000200000000440 R09: 0000000000000000 [ 204.785283][ T6771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.793346][ T6771] R13: 00007f99cf426038 R14: 00007f99cf425fa0 R15: 00007ffd51d2e178 [ 204.801445][ T6771] [ 205.124023][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.374768][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.598660][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.635647][ T6792] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 205.766009][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.693451][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 206.697121][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 206.699925][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 209.428823][ T6855] netlink: 'syz.4.774': attribute type 1 has an invalid length. [ 209.543461][ T6855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.854426][ T6857] bond1: (slave dummy0): making interface the new active one [ 209.879010][ T6857] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 209.935234][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 211.024345][ T4375] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 211.219036][ T4375] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 211.242542][ T4375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.511794][ T4375] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 212.054537][ T6910] netlink: 48 bytes leftover after parsing attributes in process `syz.0.790'. [ 212.103945][ T11] device hsr_slave_0 left promiscuous mode [ 212.122975][ T11] device hsr_slave_1 left promiscuous mode [ 212.153366][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.190827][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.218693][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.241595][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.279231][ T11] device bridge_slave_1 left promiscuous mode [ 212.293616][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.322863][ T11] device bridge_slave_0 left promiscuous mode [ 212.335755][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.353976][ T4354] usb 2-1: USB disconnect, device number 4 [ 212.564387][ T11] device veth1_macvtap left promiscuous mode [ 212.593603][ T11] device veth0_macvtap left promiscuous mode [ 212.615092][ T11] device veth1_vlan left promiscuous mode [ 212.628123][ T11] device veth0_vlan left promiscuous mode [ 213.323741][ T6950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.403651][ T6945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.917567][ T5626] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 214.035613][ T11] team0 (unregistering): Port device team_slave_1 removed [ 214.107674][ T11] team0 (unregistering): Port device team_slave_0 removed [ 214.162001][ T5626] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 214.186271][ T5626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.194495][ T5626] usb 2-1: Product: syz [ 214.199535][ T5626] usb 2-1: Manufacturer: syz [ 214.204655][ T5626] usb 2-1: SerialNumber: syz [ 214.247864][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.330706][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.494929][ T5626] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 214.534896][ T5626] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 215.104111][ T11] bond0 (unregistering): Released all slaves [ 215.272106][ T6939] netlink: 'syz.0.794': attribute type 4 has an invalid length. [ 215.359252][ T6941] netlink: 'syz.0.794': attribute type 4 has an invalid length. [ 215.577092][ T5626] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 215.619927][ T5626] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 215.672141][ T5626] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 215.725910][ T5626] lan78xx: probe of 2-1:1.0 failed with error -71 [ 215.807118][ T5626] usb 2-1: USB disconnect, device number 5 [ 216.562630][ T6991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.874599][ T7044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.916938][ T4346] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 218.132469][ T4346] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 218.152342][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.167046][ T4346] usb 1-1: Product: syz [ 218.177176][ T4346] usb 1-1: Manufacturer: syz [ 218.187797][ T4346] usb 1-1: SerialNumber: syz [ 218.217994][ T4346] usb 1-1: config 0 descriptor?? [ 218.450701][ T4346] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 218.483312][ T7063] loop1: detected capacity change from 0 to 2048 [ 218.589932][ T7063] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.160060][ T7081] netlink: 'syz.4.835': attribute type 1 has an invalid length. [ 219.440039][ T7081] bond2 (unregistering): Released all slaves [ 219.475179][ T4346] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 219.514434][ T4346] usb 1-1: USB disconnect, device number 5 [ 219.931611][ T7100] device bridge_slave_1 entered promiscuous mode [ 219.945964][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 220.431445][ T7115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.979594][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.011477][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.071502][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.112560][ T7119] loop0: detected capacity change from 0 to 1024 [ 221.170342][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.190258][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.201791][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.214431][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.241144][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.276359][ T7118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.312634][ T7118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.371312][ T7118] device batadv_slave_1 entered promiscuous mode [ 221.405056][ T6772] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 222.013295][ T6527] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 222.108793][ T6527] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 222.150846][ T7147] netlink: 'syz.2.856': attribute type 1 has an invalid length. [ 222.248959][ T7147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.407397][ T7150] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 222.422942][ T7151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.856'. [ 222.464040][ T7121] loop5: detected capacity change from 0 to 32768 [ 222.512739][ T4756] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 222.556956][ T7121] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.847 (7121) [ 222.624534][ T7121] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 222.686949][ T7121] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 222.716860][ T7121] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 222.756715][ T7121] BTRFS info (device loop5): use zstd compression, level 3 [ 222.786783][ T7121] BTRFS info (device loop5): using free space tree [ 223.113195][ T7121] BTRFS info (device loop5): enabling ssd optimizations [ 223.596565][ T5602] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 223.810246][ T7195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.864'. [ 224.253907][ T7206] loop0: detected capacity change from 0 to 1024 [ 224.310945][ T7206] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 224.337979][ T7206] EXT4-fs (loop0): invalid journal inode [ 224.347915][ T7206] EXT4-fs (loop0): can't get journal size [ 224.423424][ T7206] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 224.567811][ T7206] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 64: comm syz.0.867: path (unknown): bad entry in directory: rec_len is too small for name_len - offset=0, inode=11, rec_len=12, size=1024 fake=0 [ 224.638374][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 224.704383][ T7221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.797074][ T7206] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 73: comm syz.0.867: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=83886080, rec_len=0, size=1024 fake=0 [ 225.304595][ T7236] loop5: detected capacity change from 0 to 7 [ 225.324436][ T6772] Dev loop5: unable to read RDB block 7 [ 225.344007][ T6772] loop5: AHDI p1 p2 p3 [ 225.353079][ T6772] loop5: partition table partially beyond EOD, truncated [ 225.369549][ T6772] loop5: p1 start 1818582900 is beyond EOD, truncated [ 225.384655][ T6772] loop5: p3 start 335544320 is beyond EOD, truncated [ 225.404197][ T7236] Dev loop5: unable to read RDB block 7 [ 225.417392][ T7236] loop5: AHDI p1 p2 p3 [ 225.422016][ T7236] loop5: partition table partially beyond EOD, truncated [ 225.458983][ T7236] loop5: p1 start 1818582900 is beyond EOD, truncated [ 225.492606][ T7236] loop5: p3 start 335544320 is beyond EOD, truncated [ 226.046856][ T5627] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 226.209396][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.222906][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.237090][ T5627] usb 2-1: Using ep0 maxpacket: 8 [ 226.244417][ T5627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.287121][ T5627] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 226.296576][ T5627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.348063][ T7263] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.356128][ T7263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.366323][ T5627] usb 2-1: config 0 descriptor?? [ 226.372767][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.380206][ T7263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.557411][ T7263] team0: Port device bridge0 added [ 226.643335][ T5627] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 226.712594][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.768891][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.878380][ T7266] device bond1 left promiscuous mode [ 226.896973][ T7266] device veth0_to_bond left promiscuous mode [ 226.924632][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.889'. [ 226.964709][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.151787][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.401965][ T6527] usb 2-1: USB disconnect, device number 6 [ 227.734768][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'. [ 228.546173][ T7303] tipc: Started in network mode [ 228.552538][ T7303] tipc: Node identity 4, cluster identity 4711 [ 228.575283][ T7303] tipc: Node number set to 4 [ 228.611001][ T7307] tipc: Enabled bearer , priority 0 [ 228.686971][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 229.420333][ T7345] ip_tables: iptables: counters copy to user failed while replacing table [ 229.968301][ T5739] EXT4-fs (loop0): unmounting filesystem. [ 230.612962][ T4385] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.675494][ T7373] loop5: detected capacity change from 0 to 1024 [ 230.768424][ T7373] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 230.847195][ T7373] EXT4-fs (loop5): invalid journal inode [ 230.855381][ T7373] EXT4-fs (loop5): can't get journal size [ 230.884107][ T4385] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.905154][ T7373] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 230.963230][ T7373] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 64: comm syz.5.919: path (unknown): bad entry in directory: rec_len is too small for name_len - offset=0, inode=11, rec_len=12, size=1024 fake=0 [ 231.088708][ T4385] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.114992][ T7373] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 73: comm syz.5.919: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=83886080, rec_len=0, size=1024 fake=0 [ 231.256496][ T4385] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.393129][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'. [ 231.589306][ T7393] 9pnet_fd: Insufficient options for proto=fd [ 232.165076][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.242668][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.268798][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.277212][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.288049][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.295442][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.444122][ T7403] rxe_eth0 speed is unknown, defaulting to 1000 [ 232.536067][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 232.702845][ T27] audit: type=1326 audit(2000000113.820:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.4.934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6f9e559 code=0x7ffc0000 [ 232.758188][ T7418] bridge0: port 1(vlan2) entered blocking state [ 232.765279][ T27] audit: type=1326 audit(2000000113.820:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.4.934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6f9e559 code=0x7ffc0000 [ 232.798464][ T7418] bridge0: port 1(vlan2) entered disabled state [ 232.841963][ T27] audit: type=1326 audit(2000000113.860:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.4.934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6f9e559 code=0x7ffc0000 [ 232.925972][ T27] audit: type=1326 audit(2000000113.860:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.4.934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6f9e559 code=0x7ffc0000 [ 233.038862][ T27] audit: type=1326 audit(2000000113.860:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.4.934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4cf6f9e559 code=0x7ffc0000 [ 233.150743][ T27] audit: type=1326 audit(2000000113.860:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.4.934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6f9e559 code=0x7ffc0000 [ 233.223037][ T27] audit: type=1326 audit(2000000113.860:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.4.934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6f9e559 code=0x7ffc0000 [ 233.274047][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 233.293485][ T27] audit: type=1326 audit(2000000113.860:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.4.934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6f9e559 code=0x7ffc0000 [ 233.345122][ T7440] ip_tables: iptables: counters copy to user failed while replacing table [ 233.619690][ T27] audit: type=1326 audit(2000000113.860:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.4.934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6f9e559 code=0x7ffc0000 [ 233.644054][ T27] audit: type=1326 audit(2000000113.860:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.4.934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4cf6f9e559 code=0x7ffc0000 [ 234.154118][ T7403] chnl_net:caif_netlink_parms(): no params data found [ 234.322752][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.941'. [ 234.366903][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 234.693189][ T7474] overlayfs: failed to clone upperpath [ 235.157804][ T7473] block device autoloading is deprecated and will be removed. [ 235.194016][ T7477] block device autoloading is deprecated and will be removed. [ 235.364083][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.398766][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.445583][ T7403] device bridge_slave_0 entered promiscuous mode [ 235.471366][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.504852][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.550077][ T7403] device bridge_slave_1 entered promiscuous mode [ 235.640540][ T4385] device hsr_slave_0 left promiscuous mode [ 235.661504][ T4385] device hsr_slave_1 left promiscuous mode [ 235.679036][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.698002][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.722688][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.745924][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.763459][ T4385] device bridge_slave_1 left promiscuous mode [ 235.782454][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.836125][ T4385] device bridge_slave_0 left promiscuous mode [ 235.874144][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.944505][ T4385] device batadv_slave_1 left promiscuous mode [ 235.965058][ T4385] device veth1_macvtap left promiscuous mode [ 235.980575][ T4385] device veth0_macvtap left promiscuous mode [ 235.990278][ T4385] device veth1_vlan left promiscuous mode [ 235.996460][ T4385] device veth0_vlan left promiscuous mode [ 236.449640][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 236.681938][ T4385] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 236.700816][ T4385] bond1 (unregistering): Released all slaves [ 237.984398][ T4385] team0 (unregistering): Port device team_slave_1 removed [ 238.094352][ T4385] team0 (unregistering): Port device team_slave_0 removed [ 238.165239][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.241057][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.546269][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 238.789630][ T4385] team0 (unregistering): Port device bridge0 removed [ 238.843239][ T4385] bond0 (unregistering): Released all slaves [ 238.934982][ T7403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.959820][ T7511] netlink: 'syz.5.955': attribute type 1 has an invalid length. [ 238.978732][ T7511] netlink: 64399 bytes leftover after parsing attributes in process `syz.5.955'. [ 239.045422][ T7519] team0: Port device bridge_slave_0 added [ 239.101405][ T7403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.275103][ T7403] team0: Port device team_slave_0 added [ 239.324176][ T7403] team0: Port device team_slave_1 added [ 239.426508][ T7403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.433711][ T7403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.514396][ T7403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.664883][ T7403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.675733][ T7403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.738163][ T7403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.803424][ T7556] loop1: detected capacity change from 0 to 128 [ 239.947877][ T7403] device hsr_slave_0 entered promiscuous mode [ 239.976760][ T7403] device hsr_slave_1 entered promiscuous mode [ 240.010530][ T47] kworker/u4:3: attempt to access beyond end of device [ 240.010530][ T47] loop1: rw=1, sector=145, nr_sectors = 223 limit=128 [ 240.034267][ T7561] overlayfs: failed to clone upperpath [ 240.606805][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 240.810833][ T7585] 9pnet: p9_errstr2errno: server reported unknown error @c [ 241.065997][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.985'. [ 241.103543][ T7592] netlink: 48 bytes leftover after parsing attributes in process `syz.1.985'. [ 241.183435][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.985'. [ 241.208634][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 241.247039][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 241.383520][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.985'. [ 241.595245][ T7403] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.650137][ T7403] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.684398][ T7403] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.730495][ T7403] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 242.010369][ T7403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.072241][ T7403] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.094731][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.132651][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.166378][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.176532][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.190805][ T4756] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.198103][ T4756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.220964][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.235132][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.273381][ T4756] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.280653][ T4756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.324588][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.338944][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.362890][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.403779][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.433608][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.473705][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.498761][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.570060][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.598202][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.617453][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.648091][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.661890][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.684994][ T7403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.299328][ T7655] device batadv_slave_1 entered promiscuous mode [ 243.328897][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 243.371978][ T7655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.738823][ T7655] device batadv_slave_1 left promiscuous mode [ 243.745133][ T7655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.059710][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.077045][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.115901][ T7403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.205195][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.246187][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.394928][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.416604][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.468187][ T7403] device veth0_vlan entered promiscuous mode [ 244.485717][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.504158][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.542161][ T7403] device veth1_vlan entered promiscuous mode [ 244.667871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.681859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.732097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.772829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.810604][ T7403] device veth0_macvtap entered promiscuous mode [ 244.854095][ T7403] device veth1_macvtap entered promiscuous mode [ 244.940623][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.983447][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.016883][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.032293][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.052720][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.063520][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.085893][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.104428][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.127428][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.147786][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.183065][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.202510][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.223797][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.240726][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.266313][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.283619][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.294836][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.311123][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.323347][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.343840][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.362656][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.403221][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.445679][ T7403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.465197][ T7403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.475767][ T7403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.495336][ T7403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.754744][ T4756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.788057][ T4756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.826787][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.856003][ T4756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.864605][ T4756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.884845][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.910600][ T7694] ip_tables: iptables: counters copy to user failed while replacing table [ 246.131408][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.929'. [ 246.502770][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1017'. [ 247.614296][ T7752] rxe_eth0 speed is unknown, defaulting to 1000 [ 247.717634][ T7756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1032'. [ 248.105353][ T27] kauditd_printk_skb: 98 callbacks suppressed [ 248.105371][ T27] audit: type=1326 audit(2000000129.220:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7768 comm="syz.0.1035" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a69b9e559 code=0x0 [ 248.446248][ T7776] bond1: (slave macvlan2): Opening slave failed [ 249.149402][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1046'. [ 249.470483][ T7753] loop1: detected capacity change from 0 to 40427 [ 249.544647][ T7753] F2FS-fs (loop1): Invalid log blocks per segment (83886089) [ 249.574696][ T7753] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 249.622395][ T7753] F2FS-fs (loop1): Unrecognized mount option "checkpoint=disabde" or missing value [ 249.962241][ T27] audit: type=1326 audit(2000000131.080:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a69b9e559 code=0x7ffc0000 [ 250.029449][ T7819] loop0: detected capacity change from 0 to 164 [ 250.065087][ T27] audit: type=1326 audit(2000000131.080:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a69b9e559 code=0x7ffc0000 [ 250.203381][ T27] audit: type=1326 audit(2000000131.120:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a69b9e559 code=0x7ffc0000 [ 250.341818][ T27] audit: type=1326 audit(2000000131.120:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a69b9e559 code=0x7ffc0000 [ 250.533854][ T27] audit: type=1326 audit(2000000131.120:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a69b9e559 code=0x7ffc0000 [ 250.575503][ T4287] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 250.586531][ T4287] CPU: 1 PID: 4287 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 250.594184][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 250.604420][ T4287] Workqueue: hci3 hci_rx_work [ 250.609344][ T4287] Call Trace: [ 250.612704][ T4287] [ 250.615712][ T4287] dump_stack_lvl+0x188/0x24e [ 250.620532][ T4287] ? show_regs_print_info+0x12/0x12 [ 250.625861][ T4287] ? load_image+0x410/0x410 [ 250.630602][ T4287] sysfs_create_dir_ns+0x26a/0x290 [ 250.635984][ T4287] ? __lock_acquire+0x7ea0/0x7ea0 [ 250.641205][ T4287] ? sysfs_warn_dup+0xa0/0xa0 [ 250.646064][ T4287] ? do_raw_spin_unlock+0x11d/0x230 [ 250.651351][ T4287] kobject_add_internal+0x617/0xca0 [ 250.656803][ T4287] kobject_add+0x160/0x230 [ 250.661320][ T4287] ? kobject_init+0x1c0/0x1c0 [ 250.666080][ T4287] ? __raw_spin_lock_init+0x41/0x100 [ 250.671446][ T4287] ? klist_children_get+0x50/0x50 [ 250.676681][ T4287] ? get_device_parent+0x121/0x3e0 [ 250.682059][ T4287] device_add+0x470/0x1050 [ 250.686605][ T4287] hci_conn_add_sysfs+0xd1/0x1e0 [ 250.691725][ T4287] hci_sync_conn_complete_evt+0x707/0xab0 [ 250.697559][ T4287] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 250.703742][ T4287] hci_event_packet+0x806/0x1290 [ 250.708808][ T4287] ? lock_chain_count+0x20/0x20 [ 250.713759][ T4287] ? bis_list+0x280/0x280 [ 250.718221][ T4287] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 250.724400][ T4287] ? kcov_remote_start+0x50f/0x810 [ 250.729612][ T4287] ? lockdep_hardirqs_on+0x94/0x140 [ 250.734994][ T4287] ? hci_send_to_monitor+0x9c/0x4a0 [ 250.740291][ T4287] hci_rx_work+0x3eb/0xd40 [ 250.744787][ T4287] ? _raw_spin_unlock+0x40/0x40 [ 250.749742][ T4287] ? process_one_work+0x7b4/0x1160 [ 250.755123][ T4287] process_one_work+0x8ab/0x1160 [ 250.760285][ T4287] ? worker_detach_from_pool+0x240/0x240 [ 250.766028][ T4287] ? _raw_spin_lock_irq+0xb7/0xf0 [ 250.771142][ T4287] ? _raw_spin_lock_irqsave+0x100/0x100 [ 250.776781][ T4287] ? wq_worker_running+0x97/0x190 [ 250.781956][ T4287] worker_thread+0xaf5/0x12a0 [ 250.786729][ T4287] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 250.792718][ T4287] kthread+0x29d/0x330 [ 250.796879][ T4287] ? worker_clr_flags+0x1a0/0x1a0 [ 250.801990][ T4287] ? kthread_blkcg+0xd0/0xd0 [ 250.806651][ T4287] ret_from_fork+0x1f/0x30 [ 250.811204][ T4287] [ 250.817983][ T4287] kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 250.831492][ T4287] Bluetooth: hci3: failed to register connection device [ 250.886576][ T27] audit: type=1326 audit(2000000131.120:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a69b9e559 code=0x7ffc0000 [ 251.155055][ T27] audit: type=1326 audit(2000000131.120:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a69b9e559 code=0x7ffc0000 [ 251.206508][ T27] audit: type=1326 audit(2000000131.140:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a69b9e559 code=0x7ffc0000 [ 251.287945][ T27] audit: type=1326 audit(2000000131.140:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.0.1051" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a69b9e559 code=0x7ffc0000 [ 251.475464][ T7841] netlink: 'syz.2.1057': attribute type 8 has an invalid length. [ 251.485384][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'. [ 251.495275][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 251.665903][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1058'. [ 251.768536][ T5627] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 251.984517][ T5627] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 252.031242][ T5627] usb 6-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 252.063202][ T5627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.087078][ T5627] usb 6-1: Product: syz [ 252.103330][ T5627] usb 6-1: Manufacturer: syz [ 252.113411][ T5627] usb 6-1: SerialNumber: syz [ 252.126799][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 252.127538][ T4287] Bluetooth: hci5: command 0x1003 tx timeout [ 252.419915][ T5627] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 252.453059][ T5627] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to g@b4.vu [ 252.481643][ T5627] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 252.597706][ T5627] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 252.635467][ T7867] batman_adv: batadv0: Adding interface: syzkaller0 [ 252.666747][ T7867] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.710276][ T7863] udevd[7863]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.747207][ T5627] usb 6-1: USB disconnect, device number 3 [ 252.771631][ T7867] batman_adv: batadv0: Interface activated: syzkaller0 [ 252.846854][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 252.906222][ T7866] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 253.018885][ T7866] batman_adv: batadv0: Removing interface: syzkaller0 [ 253.782734][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1076'. [ 253.904617][ T7903] sctp: [Deprecated]: syz.0.1078 (pid 7903) Use of int in maxseg socket option. [ 253.904617][ T7903] Use struct sctp_assoc_value instead [ 254.788969][ T7934] fuse: Bad value for 'fd' [ 255.809847][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.816333][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.107268][ T7984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1110'. [ 256.117124][ T7980] clocksource: Switched to clocksource kvm-clock [ 256.518375][ T7997] xt_hashlimit: max too large, truncated to 1048576 [ 256.842324][ T8001] rxe_eth0 speed is unknown, defaulting to 1000 [ 257.468929][ T8012] loop0: detected capacity change from 0 to 2048 [ 257.520075][ T8012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.522500][ T8041] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1130'. [ 259.121968][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.175877][ T8061] : renamed from bridge_slave_0 [ 260.062133][ T8078] 9pnet_fd: Insufficient options for proto=fd [ 260.824339][ T8107] capability: warning: `syz.0.1159' uses 32-bit capabilities (legacy support in use) [ 263.145281][ T8122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.197162][ T8122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.872468][ T8122] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.881800][ T8122] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.897093][ T8122] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.906105][ T8122] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.972770][ T8175] loop0: detected capacity change from 0 to 512 [ 264.480094][ T8186] WARNING! power/level is deprecated; use power/control instead [ 264.773144][ T27] kauditd_printk_skb: 93 callbacks suppressed [ 264.773163][ T27] audit: type=1326 audit(2000000145.898:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.5.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af7f9e559 code=0x7fc00000 [ 264.820875][ T8198] xt_hashlimit: size too large, truncated to 1048576 [ 264.876025][ T8198] xt_hashlimit: max too large, truncated to 1048576 [ 265.820390][ T27] audit: type=1326 audit(2000000146.948:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.5.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7af7f982d7 code=0x7fc00000 [ 266.104483][ T8204] loop0: detected capacity change from 0 to 40427 [ 266.164187][ T8204] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 266.228100][ T8204] F2FS-fs (loop0): invalid crc value [ 266.280534][ T8204] F2FS-fs (loop0): Found nat_bits in checkpoint [ 266.527536][ T8204] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 266.930988][ T7403] syz-executor: attempt to access beyond end of device [ 266.930988][ T7403] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 267.793607][ T8266] fuse: Bad value for 'fd' [ 268.247390][ T8276] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 272.704061][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.713864][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.247072][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 273.884597][ T8343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.004775][ T8343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.072981][ T8343] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.082479][ T8343] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.091498][ T8343] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.100558][ T8343] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.420844][ T8370] netlink: 'syz.2.1224': attribute type 15 has an invalid length. [ 275.432556][ T8370] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.1224'. [ 275.452675][ T8371] netlink: 'syz.2.1224': attribute type 11 has an invalid length. [ 275.471957][ T8371] netlink: 'syz.2.1224': attribute type 15 has an invalid length. [ 275.497424][ T8371] netlink: 'syz.2.1224': attribute type 16 has an invalid length. [ 275.514984][ T8371] netlink: 'syz.2.1224': attribute type 21 has an invalid length. [ 275.533661][ T8371] netlink: 'syz.2.1224': attribute type 25 has an invalid length. [ 275.552381][ T8371] netlink: 'syz.2.1224': attribute type 27 has an invalid length. [ 275.569902][ T8371] netlink: 'syz.2.1224': attribute type 28 has an invalid length. [ 275.593193][ T8371] netlink: 'syz.2.1224': attribute type 29 has an invalid length. [ 275.614182][ T8371] netlink: 'syz.2.1224': attribute type 30 has an invalid length. [ 275.764264][ T8411] netlink: 197348 bytes leftover after parsing attributes in process `syz.5.1238'. [ 276.559578][ T8444] device hsr0 entered promiscuous mode [ 276.592748][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'. [ 277.000952][ T8443] device hsr0 left promiscuous mode [ 277.799982][ T8490] overlayfs: failed to clone upperpath [ 277.839563][ T8490] overlayfs: failed to clone upperpath [ 279.378587][ T8522] device syz_tun entered promiscuous mode [ 279.425827][ T8522] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 280.195850][ T27] audit: type=1804 audit(2000000161.318:330): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1282" name="file1" dev="ramfs" ino=60618 res=1 errno=0 [ 280.249166][ T8536] loop0: detected capacity change from 0 to 512 [ 280.423813][ T8536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 280.438494][ T8536] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.800134][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 280.828354][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 280.904616][ T7403] EXT4-fs (loop0): unmounting filesystem. [ 281.671835][ T8550] loop1: detected capacity change from 0 to 40427 [ 281.699954][ T8550] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 281.736936][ T8550] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 281.801151][ T8550] F2FS-fs (loop1): Found nat_bits in checkpoint [ 281.967221][ T4279] Bluetooth: hci4: unexpected cc 0x204b length: 34 > 3 [ 281.987561][ T8550] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 281.996823][ T8550] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 282.369151][ T4271] syz-executor: attempt to access beyond end of device [ 282.369151][ T4271] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 283.155416][ T8605] loop0: detected capacity change from 0 to 256 [ 283.476791][ T4923] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 283.676869][ T4923] usb 2-1: Using ep0 maxpacket: 16 [ 283.689496][ T4923] usb 2-1: config 0 has no interfaces? [ 283.710668][ T4923] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 283.748092][ T4923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.773105][ T4923] usb 2-1: Product: syz [ 283.792409][ T4923] usb 2-1: Manufacturer: syz [ 283.798400][ T4923] usb 2-1: SerialNumber: syz [ 283.818269][ T4923] usb 2-1: config 0 descriptor?? [ 284.181706][ T4371] usb 2-1: USB disconnect, device number 7 [ 284.302735][ T8634] loop0: detected capacity change from 0 to 512 [ 284.398993][ T8634] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 284.552997][ T8634] EXT4-fs (loop0): 1 truncate cleaned up [ 284.579564][ T8634] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 284.717856][ T27] audit: type=1800 audit(2000000165.848:331): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1315" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 284.840555][ T7403] EXT4-fs (loop0): unmounting filesystem. [ 285.586822][ T27] audit: type=1326 audit(2000000166.708:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830279e559 code=0x7ffc0000 [ 285.670045][ T27] audit: type=1326 audit(2000000166.748:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830279e559 code=0x7ffc0000 [ 285.748000][ T27] audit: type=1326 audit(2000000166.748:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830279e559 code=0x7ffc0000 [ 285.797168][ T4375] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 285.802193][ T27] audit: type=1326 audit(2000000166.748:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f830279e559 code=0x7ffc0000 [ 285.811511][ T8663] bond0: (slave ip6tnl1): refused to change device type [ 285.898491][ T27] audit: type=1326 audit(2000000166.748:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830279e559 code=0x7ffc0000 [ 285.971880][ T27] audit: type=1326 audit(2000000166.748:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830279e559 code=0x7ffc0000 [ 286.060319][ T4279] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 286.069914][ T4279] Bluetooth: hci4: Injecting HCI hardware error event [ 286.077512][ T27] audit: type=1326 audit(2000000166.758:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830279e559 code=0x7ffc0000 [ 286.097015][ T4279] Bluetooth: hci4: hardware error 0x00 [ 286.115054][ T4375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.126979][ T4375] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 286.136114][ T4375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.161480][ T4375] usb 2-1: config 0 descriptor?? [ 286.209227][ T27] audit: type=1326 audit(2000000166.758:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830279e559 code=0x7ffc0000 [ 286.233834][ T27] audit: type=1326 audit(2000000166.758:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f830279e559 code=0x7ffc0000 [ 286.258330][ T27] audit: type=1326 audit(2000000166.778:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.2.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830279e559 code=0x7ffc0000 [ 286.381023][ T4375] usbhid 2-1:0.0: can't add hid device: -71 [ 286.390439][ T4375] usbhid: probe of 2-1:0.0 failed with error -71 [ 286.413121][ T4375] usb 2-1: USB disconnect, device number 8 [ 286.866143][ T8684] loop0: detected capacity change from 0 to 164 [ 286.986974][ T4375] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 287.247065][ T4375] usb 2-1: Using ep0 maxpacket: 32 [ 287.262085][ T4375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.294006][ T4375] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 287.326765][ T4375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.356505][ T4375] usb 2-1: config 0 descriptor?? [ 287.375203][ T4375] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 287.424127][ T4375] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 287.897653][ T4375] usb 2-1: USB disconnect, device number 9 [ 287.928218][ T4375] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 288.216960][ T4279] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 290.627120][ T8765] overlayfs: failed to clone upperpath [ 291.332683][ T8782] loop1: detected capacity change from 0 to 512 [ 291.445443][ T8782] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 291.683297][ T8782] EXT4-fs (loop1): 1 orphan inode deleted [ 291.709731][ T4385] __quota_error: 29 callbacks suppressed [ 291.709753][ T4385] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 291.726984][ T8782] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 291.746851][ T8782] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.767881][ T4385] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 291.824902][ T8782] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 292.153282][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 292.192704][ T8802] tipc: Resetting bearer [ 292.339196][ T8802] bridge0: port 3(veth0) entered disabled state [ 292.345859][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.258402][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.879276][ T8802] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.906539][ T8802] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.983239][ T8802] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.012192][ T8802] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.228379][ T8802] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 294.237549][ T8802] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 294.246413][ T8802] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 294.255458][ T8802] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 294.301491][ T8802] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 60387 - 0 [ 294.310888][ T8802] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 60387 - 0 [ 294.320196][ T8802] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 60387 - 0 [ 294.329339][ T8802] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 60387 - 0 [ 294.422304][ T8843] Disabled LAPIC found during irq injection [ 294.474638][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'. [ 294.544904][ T8840] device bond1 entered promiscuous mode [ 294.561488][ T8840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.688383][ T8846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.695751][ T8846] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 294.738054][ T8846] bond1: (slave sit1): Error -95 calling set_mac_address [ 294.977103][ T8862] [ 294.979718][ T8862] ====================================================== [ 294.986991][ T8862] WARNING: possible circular locking dependency detected [ 294.994094][ T8862] syzkaller #0 Not tainted [ 294.998577][ T8862] ------------------------------------------------------ [ 295.005655][ T8862] syz.1.1396/8862 is trying to acquire lock: [ 295.011690][ T8862] ffff88806358c428 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfb/0xe20 [ 295.020859][ T8862] [ 295.020859][ T8862] but task is already holding lock: [ 295.028295][ T8862] ffffffff8ecd7e28 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 295.037487][ T8862] [ 295.037487][ T8862] which lock already depends on the new lock. [ 295.037487][ T8862] [ 295.047964][ T8862] [ 295.047964][ T8862] the existing dependency chain (in reverse order) is: [ 295.057027][ T8862] [ 295.057027][ T8862] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 295.064485][ T8862] __mutex_lock+0x12d/0xae0 [ 295.069786][ T8862] rfcomm_security_cfm+0x95/0x780 [ 295.075494][ T8862] hci_encrypt_cfm+0x363/0x4d0 [ 295.081022][ T8862] hci_encrypt_change_evt+0x961/0xd30 [ 295.087255][ T8862] hci_event_packet+0x806/0x1290 [ 295.092867][ T8862] hci_rx_work+0x3eb/0xd40 [ 295.098038][ T8862] process_one_work+0x8ab/0x1160 [ 295.103566][ T8862] worker_thread+0xaf5/0x12a0 [ 295.108823][ T8862] kthread+0x29d/0x330 [ 295.113447][ T8862] ret_from_fork+0x1f/0x30 [ 295.118446][ T8862] [ 295.118446][ T8862] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 295.126229][ T8862] __mutex_lock+0x12d/0xae0 [ 295.131364][ T8862] hci_remote_features_evt+0x464/0xa10 [ 295.137434][ T8862] hci_event_packet+0x806/0x1290 [ 295.143068][ T8862] hci_rx_work+0x3eb/0xd40 [ 295.148152][ T8862] process_one_work+0x8ab/0x1160 [ 295.153845][ T8862] worker_thread+0xaf5/0x12a0 [ 295.159117][ T8862] kthread+0x29d/0x330 [ 295.163765][ T8862] ret_from_fork+0x1f/0x30 [ 295.168765][ T8862] [ 295.168765][ T8862] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 295.176573][ T8862] __lock_acquire+0x3a03/0x7ea0 [ 295.182063][ T8862] lock_acquire+0x1bc/0x4a0 [ 295.187151][ T8862] __mutex_lock+0x12d/0xae0 [ 295.192242][ T8862] l2cap_chan_connect+0xfb/0xe20 [ 295.197854][ T8862] l2cap_sock_connect+0x576/0x750 [ 295.203471][ T8862] kernel_connect+0x13e/0x1c0 [ 295.208856][ T8862] rfcomm_dlc_open+0x600/0x10c0 [ 295.214297][ T8862] rfcomm_sock_connect+0x2e9/0x600 [ 295.219988][ T8862] __sys_connect+0x3cb/0x450 [ 295.225143][ T8862] __x64_sys_connect+0x76/0x80 [ 295.230491][ T8862] do_syscall_64+0x4c/0xa0 [ 295.235506][ T8862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.241991][ T8862] [ 295.241991][ T8862] other info that might help us debug this: [ 295.241991][ T8862] [ 295.253151][ T8862] Chain exists of: [ 295.253151][ T8862] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 295.253151][ T8862] [ 295.266962][ T8862] Possible unsafe locking scenario: [ 295.266962][ T8862] [ 295.274543][ T8862] CPU0 CPU1 [ 295.279971][ T8862] ---- ---- [ 295.285381][ T8862] lock(rfcomm_mutex); [ 295.289589][ T8862] lock(hci_cb_list_lock); [ 295.296650][ T8862] lock(rfcomm_mutex); [ 295.303553][ T8862] lock(&hdev->lock); [ 295.307671][ T8862] [ 295.307671][ T8862] *** DEADLOCK *** [ 295.307671][ T8862] [ 295.315935][ T8862] 1 lock held by syz.1.1396/8862: [ 295.321163][ T8862] #0: ffffffff8ecd7e28 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 295.330625][ T8862] [ 295.330625][ T8862] stack backtrace: [ 295.336630][ T8862] CPU: 1 PID: 8862 Comm: syz.1.1396 Not tainted syzkaller #0 [ 295.344056][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 295.354168][ T8862] Call Trace: [ 295.357492][ T8862] [ 295.360449][ T8862] dump_stack_lvl+0x188/0x24e [ 295.365174][ T8862] ? load_image+0x410/0x410 [ 295.369719][ T8862] ? show_regs_print_info+0x12/0x12 [ 295.374965][ T8862] ? print_circular_bug+0x12b/0x1a0 [ 295.380247][ T8862] check_noncircular+0x2f8/0x400 [ 295.385366][ T8862] ? print_deadlock_bug+0x5d0/0x5d0 [ 295.390630][ T8862] ? lockdep_lock+0xf1/0x1f0 [ 295.395564][ T8862] ? _find_first_zero_bit+0xd2/0x100 [ 295.400965][ T8862] __lock_acquire+0x3a03/0x7ea0 [ 295.405940][ T8862] ? verify_lock_unused+0x140/0x140 [ 295.411194][ T8862] ? __lock_acquire+0x142d/0x7ea0 [ 295.416274][ T8862] ? verify_lock_unused+0x140/0x140 [ 295.421770][ T8862] lock_acquire+0x1bc/0x4a0 [ 295.426331][ T8862] ? l2cap_chan_connect+0xfb/0xe20 [ 295.431568][ T8862] ? __might_sleep+0xd0/0xd0 [ 295.436404][ T8862] ? read_lock_is_recursive+0x10/0x10 [ 295.441867][ T8862] ? __lock_acquire+0x7ea0/0x7ea0 [ 295.446976][ T8862] __mutex_lock+0x12d/0xae0 [ 295.451552][ T8862] ? l2cap_chan_connect+0xfb/0xe20 [ 295.456756][ T8862] ? release_sock+0x2b/0x1b0 [ 295.461541][ T8862] ? do_raw_read_unlock+0x39/0x70 [ 295.466609][ T8862] ? _raw_read_unlock+0x24/0x40 [ 295.471508][ T8862] ? hci_get_route+0x3a1/0x4d0 [ 295.476523][ T8862] ? l2cap_chan_connect+0xfb/0xe20 [ 295.481731][ T8862] ? mutex_lock_nested+0x10/0x10 [ 295.486737][ T8862] ? print_unlock_imbalance_bug+0x160/0x160 [ 295.492719][ T8862] ? mark_lock+0x94/0x320 [ 295.497174][ T8862] l2cap_chan_connect+0xfb/0xe20 [ 295.502233][ T8862] ? lock_chain_count+0x20/0x20 [ 295.507150][ T8862] ? l2cap_sock_connect+0x13e/0x750 [ 295.512466][ T8862] ? l2cap_chan_le_send_credits+0x590/0x590 [ 295.518430][ T8862] ? __local_bh_enable_ip+0x136/0x1c0 [ 295.524005][ T8862] ? _local_bh_enable+0xa0/0xa0 [ 295.528913][ T8862] l2cap_sock_connect+0x576/0x750 [ 295.534006][ T8862] ? l2cap_sock_bind+0x870/0x870 [ 295.539012][ T8862] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 295.545084][ T8862] ? __lock_acquire+0x7ea0/0x7ea0 [ 295.550171][ T8862] ? lock_chain_count+0x20/0x20 [ 295.555103][ T8862] ? kernel_connect+0xee/0x1c0 [ 295.559925][ T8862] kernel_connect+0x13e/0x1c0 [ 295.564670][ T8862] ? kernel_accept+0x420/0x420 [ 295.569496][ T8862] ? rfcomm_dlc_open+0x5c4/0x10c0 [ 295.574567][ T8862] rfcomm_dlc_open+0x600/0x10c0 [ 295.579478][ T8862] ? lock_chain_count+0x20/0x20 [ 295.584440][ T8862] ? rfcomm_sock_connect+0x2c2/0x600 [ 295.589811][ T8862] ? rfcomm_dlc_free+0x40/0x40 [ 295.594754][ T8862] ? __local_bh_enable_ip+0x136/0x1c0 [ 295.600213][ T8862] ? lockdep_hardirqs_on+0x94/0x140 [ 295.605615][ T8862] ? __local_bh_enable_ip+0x136/0x1c0 [ 295.611050][ T8862] ? _local_bh_enable+0xa0/0xa0 [ 295.615962][ T8862] ? do_raw_spin_unlock+0x11d/0x230 [ 295.621243][ T8862] rfcomm_sock_connect+0x2e9/0x600 [ 295.626438][ T8862] ? rfcomm_sock_bind+0x550/0x550 [ 295.631544][ T8862] __sys_connect+0x3cb/0x450 [ 295.636324][ T8862] ? __sys_connect_file+0x170/0x170 [ 295.641606][ T8862] __x64_sys_connect+0x76/0x80 [ 295.646489][ T8862] do_syscall_64+0x4c/0xa0 [ 295.650956][ T8862] ? clear_bhb_loop+0x60/0xb0 [ 295.655707][ T8862] ? clear_bhb_loop+0x60/0xb0 [ 295.660459][ T8862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.666416][ T8862] RIP: 0033:0x7f99cf19e559 [ 295.670872][ T8862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.690534][ T8862] RSP: 002b:00007f99cffd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 295.699016][ T8862] RAX: ffffffffffffffda RBX: 00007f99cf426180 RCX: 00007f99cf19e559 [ 295.707059][ T8862] RDX: 000000000000000a RSI: 00002000000001c0 RDI: 0000000000000004 [ 295.715074][ T8862] RBP: 00007f99cf2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 295.723100][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.731122][ T8862] R13: 00007f99cf426218 R14: 00007f99cf426180 R15: 00007ffd51d2e178 [ 295.739144][ T8862]