last executing test programs: 11.596086214s ago: executing program 4 (id=276): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodatasum}, {@compress_algo={'compress', 0x3d, 'no'}}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@max_inline={'max_inline', 0x3d, [0x45, 0x38, 0x67, 0x37, 0x65, 0x65]}}]}, 0x3, 0x512d, &(0x7f000000f380)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000500)='./bus\x00', 0x14800, 0x0, 0x0, 0x0, &(0x7f0000000240)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76632cb010852f426072a", 0x2a}, {&(0x7f00000003c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad79db2f8ffac454102a0b64722d3f9bc6cd3f362387a706fcab2b62c9cf7", 0x32}], 0x2) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x3, 0x401, 0xffffffff, 0x5, 0x88, 0x60000, 0x81}, &(0x7f00000004c0)=0x9c) rmdir(&(0x7f0000000100)='./bus\x00') 8.474917879s ago: executing program 2 (id=287): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000019030000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c001480"], 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000280)=[@request_death={0x400c6316, 0x3}], 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000180), 0x3) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000fcffffff00000de400000000000000000057690a46ce7513d6f3b6c74191c8eea57ad8a8cfc88f7187ea14bd34", @ANYRES32=0x0, @ANYBLOB="00000000022505002000128008000100677265001400028008001400000000800500130000000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x2, 0x15, 0xe, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000540)={0x0, 0x1, 0x1, [0x7, 0x2, 0x2, 0x7e4, 0xffffffffffffffff], [0x56, 0x8, 0x4, 0x7, 0xa99b, 0x6, 0x2, 0x1ff, 0x2, 0x1, 0x2, 0x10, 0xffffffffffffffff, 0x4, 0x7fffffffffffffff, 0x0, 0x2, 0x5, 0x9e4, 0xffffffffffffffb8, 0x203, 0x1, 0x8, 0x6, 0x5, 0x5, 0xfff, 0x81, 0x10, 0x8c, 0x4, 0x7fffffff, 0x0, 0x5, 0x5, 0x4, 0x0, 0x8001, 0xe, 0x8000000000000001, 0x80000001, 0x81, 0xa, 0x4, 0x7, 0x1, 0xd03, 0x4, 0x0, 0xbc, 0x0, 0x8, 0x1ff, 0x2, 0xa, 0x5, 0x100000001, 0xd, 0xfffffffffffffffe, 0x1, 0xf5ad, 0x7b44eb69, 0x9, 0x1ff, 0x0, 0x9, 0x5, 0x3, 0x10, 0x2, 0x100, 0x1, 0x7f, 0x2, 0x2, 0x5, 0x9, 0x2, 0x7fffffff, 0x3, 0x3ff800, 0x4, 0x3, 0x6, 0x6, 0x0, 0x4, 0x3, 0xffffffffffffffff, 0xe, 0x4, 0x691000000, 0x8000, 0x4eb, 0x1, 0x8, 0x8, 0x9, 0x5, 0x6, 0x100000001000, 0xd24, 0xfff, 0x9, 0x752a, 0x4, 0x5, 0x900000000, 0xfffffffffffffff7, 0x10001, 0x5, 0x4, 0x7, 0x6, 0x9, 0x3, 0x43d, 0x9, 0x1000, 0x0, 0x628]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000980)={0x0, "275ade5519b2d16f6d65cae34af1479b"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000001980)={0x0, 0x401, 0x0, [0x5, 0x6, 0x6, 0x8, 0x2], [0x200, 0x7, 0x50a, 0x3, 0x8, 0x1, 0x9fb, 0x6, 0x5, 0x7, 0x2, 0x9, 0x3, 0xeba7, 0x10000, 0x0, 0x7f, 0x9c68, 0x9, 0x6, 0x25e, 0x4, 0xc, 0x100, 0x128, 0x7fffffffffffffff, 0x5, 0x7, 0x5, 0x7fffffffffffffff, 0x7, 0x5, 0x0, 0xf80b, 0x7fff, 0x8d, 0x9, 0x1, 0x80000001, 0x40, 0x5, 0x4, 0xe9f8, 0x6, 0xffffffffffff0000, 0x1, 0x3ff, 0x1, 0x80000000, 0xffffffffffffef18, 0xff, 0x0, 0x45b, 0x6, 0x10001, 0xfff, 0x9, 0xffd, 0x8, 0x100000001, 0xc4, 0xffffffffffff8001, 0x1, 0x1, 0x8000000000000000, 0x4, 0x10000, 0x2ee2, 0x41, 0x10000, 0x8000000000000000, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x10000, 0x9, 0x2, 0x8, 0xb3b, 0x6, 0x0, 0xc89, 0x0, 0x4, 0x8, 0xffff, 0x81, 0x7, 0x1fff, 0x0, 0x400, 0x28, 0xffffffffffffffff, 0xaebd, 0x8000, 0x7, 0x7, 0x5, 0x2, 0x28, 0xe285c27, 0x5, 0x2f47, 0x3, 0x1, 0x4, 0x5, 0x6, 0x7fff, 0x0, 0x6, 0x1ff, 0x100000001, 0x8001, 0x993, 0xd, 0xe, 0x7f, 0x2, 0xd, 0x5]}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000001dc0)={0x1, 0x0, {0x1000, @usage=0xffffffffffffffff, r8, 0xb3, 0x5, 0x1a4, 0x4, 0x7, 0x0, @struct={0x1, 0x4}, 0x6922, 0xffffff7f, [0x9, 0x9, 0x53, 0x3, 0x80000000, 0x7fff]}, {0x4ae22dfe, @usage=0x1f, r9, 0x7ff, 0x2, 0xb791, 0xf, 0x0, 0x80, @struct={0xfffffff7, 0xc4ea86d}, 0x6, 0x8293, [0x9, 0x6, 0x5, 0x80, 0x3, 0x1]}, {0xf, @struct={0x10001}, r10, 0xd060000000000000, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x4, @usage=0xffffffffffff8000, 0x1, 0xffff, [0x3ff, 0x0, 0x4, 0xfffffffffffffff5, 0x2, 0x4]}, {0xffffffffffffffff, 0x5, 0x6}}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r6) 7.505369893s ago: executing program 1 (id=290): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000180)={"9273e1af", 0x1, 0x2, 0x0, 0x101, 0x800, "3cb3f8bbe5f2f0bc9056ddb8ae5053", "8066ab53", "eeee720c", "829b550d", ["d6575230845d3524fd17f7cf", "5c9a6eeb3030207ac77f69fd", "d8b02c05f4e96cbabd21a729", "e367629c368725d16521ca39"]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f393b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07420936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x2}]}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r5 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)=""/226, 0xe2}], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="40010000130001002dbd7000f7dbdf2500000000", @ANYRES32=r7, @ANYBLOB="000000009080020020011a8038000280340001"], 0x140}, 0x1, 0x0, 0x0, 0x3000c850}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f000075a000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r4}, 0x68) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x525, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0x6, 0x20002fe}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) 7.36305812s ago: executing program 4 (id=291): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r2, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x7}}], 0x1, 0x4044044) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@arm64={0x3, 0x0, 0x5, '\x00', 0x8}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000280)={0x1c0000, 0x0, {[0x2, 0x7, 0x4, 0x5, 0x5, 0x7ff, 0xfffffffffffffff8, 0x8000000cbe8]}}) ioctl$KVM_TDX_INIT_VM(r1, 0xc008aeba, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00000080000000000018000000000000090000000000000008000000000000000b000000000000000700000000000000a40000000000000005000000000000000100008000000000050000000000000091000000000000000100008000000000000000000100000005000000000000000800000000000000010000000100000009000000000000000e00000000000000158e000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000c00600000006000000e70600000800000009000000020000000000000000000000000000006d595680d98e9d76ce798705117ed43f7626241f66be9b7e68dd80c252375bf953d195fee77629a16c16dbdb4d6860b276c52f6c2f0abd014ff533ff2b270b3672e52207205c64608e9d9a9d5504ef4114dc3a53dc852f4be0a39901f6fb85913c29c76f464b88039ca70e1f8997a9500dabd007a6f9693a38671c97fd90eed97de64b60bcf1c5f9915f25ca54a18f1e7f9088f10e92054cac7865efeab9a2ba13659a28dd5e577e2a0e"]}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000740)={0x10002, 0x200, 0x0, &(0x7f0000000300)=[0x1, 0x9, 0x1, 0x8, 0xa, 0x0, 0x78000, 0x80000001, 0x2, 0x5, 0x4, 0x7999, 0x60, 0x800, 0x2, 0x2, 0x6, 0x10, 0x7, 0x3, 0xc, 0xfffffffffffffffa, 0x8e09, 0x7, 0x4, 0x4, 0xa, 0xb1c, 0x6, 0x6a, 0x6, 0x4, 0x8fe, 0x6, 0x8, 0x9, 0x216, 0x2, 0xfffffffffffffffa, 0x10000, 0x8, 0x9, 0x4, 0x1ff, 0x7e3, 0xfffffffffffffffa, 0x80000001, 0x62d, 0x4, 0x800, 0x48, 0xd, 0x0, 0x8, 0xa7c, 0xfffffffffffffffd, 0x7, 0xf, 0x7fffffffffffffff, 0x5, 0x7f, 0x80000000, 0x201, 0x3, 0x2, 0x3, 0x401, 0x3, 0x2, 0x2, 0x6, 0x3, 0x6, 0x1, 0x8, 0x0, 0x3, 0x80000001, 0x9, 0x0, 0x0, 0x2, 0x5, 0x9, 0x7fffffffffffffff, 0x4, 0x1, 0x5, 0x44f, 0x2288, 0x1, 0x9, 0x3, 0x100000000, 0x101, 0x6, 0x9, 0xfffffffffffffff9, 0x6, 0xfff, 0x4, 0x7, 0x2, 0x4, 0x2, 0x7, 0x8, 0x2, 0x1, 0x8001, 0x8000000000000000, 0x400, 0xab, 0x0, 0x3d9a, 0x10001, 0x7, 0x6, 0x3, 0x97d9, 0x4, 0x8, 0x1, 0x30ac, 0x6, 0x80000000, 0x4, 0x4]}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111da000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 7.02101834s ago: executing program 2 (id=292): set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000280)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)="3836d16e91115f4fa0bf6b76bbbd47f2a286628d4f34482d17831a56c84c86d1831479efe0ae4307aa8aa9f1daf69d8ef940edb821a7cf48a0bd751f", 0x3c}, {&(0x7f00000004c0)="c480b59805420867f0ace4e6fa0627ec19e1e2a8113ce08d9003bc02d7e47a085ca0c26b75e9354d76db03ea71ab27247731d41540ba4eb88e7ac3b7b36e23a9efc0599e751575d5409073656f7eca7b53c35f7a6ec817c8ae5100af3ce174d728192460970ffa", 0x67}, {&(0x7f0000000540)="68121d51afde0c7ccd78e4a93566b05e8203c0387670fade93391be50dc43356", 0x20}], 0x3, &(0x7f00000005c0)=[{0x88, 0x10e, 0x1, "6dc95e71ff6339947330d5102e83942dc94c5ce65e65f358f768932b074af34cbdb951d49712ce091105ece54021242a12d115698929cc0a0915d6fb252c61ece063e942d4ac1de240f933820a0ce6998d5143bbbfdb6bfe4f9124247f1e76c2edd522dcc32ac820573aea02c4c29f3733cc66b313b99fb3"}, {0x28, 0x30, 0x9, "a989c1b5c7f9369a21a57b1b7797407220285dc6"}, {0x10, 0x118, 0x2}], 0xc0}, 0x400008c0) sendmsg$inet_sctp(r2, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000240)=[@authinfo={0x12, 0x84, 0x6, {0x8}}, @init={0x18, 0x84, 0x0, {0x80, 0x0, 0xb, 0x140}}], 0x30, 0x4}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) set_mempolicy(0x0, &(0x7f0000000200)=0x3, 0x0) mprotect(&(0x7f00005b5000/0x1000)=nil, 0x1000, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x3}, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mbind(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) 6.634813664s ago: executing program 1 (id=295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x558d, &(0x7f00000014c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r3, &(0x7f0000002c00)={0x2020}, 0x2020) fallocate(r1, 0x21, 0x1, 0x532) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000005c0)) close(0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffec, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000ed212b1ae8346a903100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb04fffffff501000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) listns(&(0x7f0000000080)={0x20, 0x0, 0xa, 0x20000, 0x0, 0x1}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r7, 0x4000000) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB=' mY\x00', @ANYRES16=r6, @ANYBLOB="5b9726bd00000c0006100300000000000000d2086005875f09b8cf9f2f4ccbc5efe69b5ec41623f61baab882120e0c8fdbe607dd1034e44b27bf8d7add04d41301cb1e737aad776ee292ef002db2339056a33b58c1ea16589c484bffbb3e0127158c7a86b502498c9316a9d7ef6f2ec4b3775a2bb8748e86dcb6219c6b628e37e98021d217ebcebdc33adae0969e45216a62"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x200840c4) r9 = syz_io_uring_setup(0xda9, &(0x7f0000000140)={0x0, 0x0, 0x13291, 0x0, 0x42c}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r9, 0x3, 0xffffffff, 0x7, 0x0, 0x0) r10 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@phonet, &(0x7f0000000240)=0x80, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="67020000000000000100c910090000000000000000000014d3dfc48837f9c700"], 0x20) 5.215094185s ago: executing program 2 (id=298): syz_emit_ethernet(0x4f, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x19, 0x84, 0x0, @rand_addr=' \x01\x00', @local, {[], "a5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7", 0x1c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc4", 0x94}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="c1747815879f", @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x9, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x95da}, {0x7}, {0xffff}, {0x5a, 0x0, 0x1}, {0x1a1}, {0x6}]}}}}, &(0x7f00000000c0)={0x0, 0x1, [0xf99, 0x9b4, 0x696, 0x5fe]}) 5.106974904s ago: executing program 2 (id=300): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x10c94dafdf414d8f, 0x0, 0x2000000, 0x0, 0x7, &(0x7f0000000040)='vcan0\x00', 0x9, 0x9, 0x4}) 4.79063633s ago: executing program 2 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000000)='./bus\x00', 0x9128c0, 0x0, 0x1, 0x0, &(0x7f0000000080)) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001040)=ANY=[@ANYBLOB="4000000013000500"/20, @ANYRES32=0x0, @ANYBLOB="61ac070010180000140003006272696467655f736c6176655f31000008000a0098005821cd7874f7f9f82cf2c7753a408ada1d825ac04cf4fbebd5f8151292bb7d9bff57edf1a7e557cbee7cc3a30794b24b54683dd9ff0f1d89d2a9fc9c9a1b1687f3378c6675690a3be15f9690159503d07fa50126cab07f2516a0ddbb048f2318460ccbbbd77eeda21ba389ceb31f9c17270d7872051c667688557bbacaf7a623303aeea0b548fa2503c9c8e802007c7948f82392efbb6ebe49b875f26b02acb5cf748d1bff884fe3aa6410e5294d6515f2058a46453d0a5e8fb33069e09e49f409e35ccbe35b349d9f3bc2bc037cdef2", @ANYRES32=0x0, @ANYBLOB="04001880"], 0x40}, 0x1, 0x0, 0x0, 0x24000044}, 0xc010) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5d5dfca8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000000)=[{r1, 0x8607}], 0x1, 0x9) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001b40)={0xa, {"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", 0x1000}}, 0x1006) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x4a5, &(0x7f0000001300)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x4e) syz_mount_image$vxfs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000009e80), 0x1, 0x9de6, &(0x7f0000013cc0)="$eJwkwGMAnoUCQOGsZdv2ybZt27ZP7nttZNtuy7Zt2+Z8f9xn6ACHDfDeAd43wPsH+MAAHxzgQwN8eICPDPDRAT42wMcH+MQAnxzgUwN8eoDPDPDZAT43wOcH+MIAXxzgSwN8eYCvDPDVAb42wNcH+MYA3xzgWwN8e4DvDPDdAb43wPcH+MEAPxzgRwP8eICfDPDTAX42wM8H+MUAvxzgVwP8eoDfDPDbAX43wO8H+MMAfxzgTwP8eYC/DPDXAf42wN8H+McA/xzgXwP8e4D/DPDfAf43wOEDHDHAkQMcNcDRAxwzwLEDHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswCEBTh7gFAFOGeBUAU4d4DQBThvgdAFOH+AMAc4Y4EwBzhzgLAHOGuBsAc4e4BwBzhngXAHOHeA8Ac4b4HwBzh/gAgEuGOBCAS4c4CIBLhrgYgEuHuASAS4Z4FIBLh0gAS4T4LIBLhfg8gGuEOCKAa4U4MoBrhLgqgGuFuDqAa4R4JoBrhXg2gGuE+C6Aa4X4PoBbhDghgFuFODGAW4S4KYBbhbg5gFuEeCWAW4V4NYBbhPgtgFuF+D2Ae4Q4I4B7hTgzgHuEuCuAe4W4O4B7hHgngHuFeDeAe4T4L4B7hfg/gEeEOCBAR4U4MEBHhLgoQEeFuDhAR4R4JEBHhXg0QEeE+CxAR4X4PEBnhDgiQGeFODJAZ4SoAGeGuBpAZ4e4BkBnhngWQGeHeA5AQ4CDAIMA4wCjANMAkwDzALMAywCLAOsAqwDbAJsA+wC7AM8N8DzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrArw6wGsCvDbA6wK8PsAbArwxwJsCvDnAWwK8NcDbArw9wDsCvDPAuwK8O8B7Ahwa4LAA7w3wvgDvD/CBAB8M8KEAHw7wkQAfDfCxAB8P8IkAnwzwqQCfDvCZAJ8N8LkAnw/whQBfDPClAF8O8JUAXw3wtQBfD/CNAN8M8K0A3w7wnQDfDfC9AN8P8IMAPwzwowA/DvCTAD8N8LMAPw/wiwC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8A/wzwrwD/DvCfAP8N8L8Ahwc4IsCRAY4KcHSAYwIcG+A4IY4b4nghjh/iBCFOGOJEIU4c4iQhThriZCEOCXHyEKcIccoQpwpx6hCnCXHaEKcLcfoQZwhxxhBnCnHmEGcJcdYQZwtx9hDnCHHOEOcKce4Q5wlx3hDnC3H+EBcIccEQFwpx4RAXCXHREBcLcfEQlwhxyRCXCnHpEAlxmRCXDXG5EJcPcYUQVwxxpRBXDnGVEFcNcbUQVw9xjRDXDHGtENcOcZ0Q1w1xvRDXD3GDEDcMcaMQNw5xkxA3DXGzEDcPcYsQtwxxqxC3DnGbELcNcbsQtw9xhxB3DHGnEHcOcZcQdw1xtxB3D3GPEPcMca8Q9w5xnxD3DXG/EPcP8YAQDwzxoBAPDvGQEA8N8bAQDw/xiBCPDPGoEI8O8ZgQjw3xuBCPD/GEEE8M8aQQTw7xlBAN8dQQTwvx9BDPCPHMEM8K8ewQzwlxEGIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2If4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbi7SHeEeKdId4V4t0h3hPi0BCHhXhviPeFeH+ID4T4YIgPhfhwiI+E+GiIj4X4eIhPhPhkiE+F+HSIz4T4bIjPhfh8iC+E+GKIL4X4coivhPhqiK+F+HqIb4T4Zohvhfh2iO+E+G6I74X4fogfhPhhiB+F+HGIn4T4aYifhfh5iF+E+GWIX4X4dYjfhPhtiN+F+H2IP4T4Y4g/hfhziL+E+GuIv4X4e4h/hPhniH+F+HeI/4T4b4j/hTg8xBEhjgxxVIijQxwT4tgQx4lw3AjHi3D8CCeIcMIIJ4pw4ggniXDSCCeLcEiEk0c4RYRTRjhVhFNHOE2E00Y4XYTTRzhDhDNGOFOEM0c4S4SzRjhbhLNHOEeEc0Y4V4RzRzhPhPNGOF+E80e4QIQLRrhQhAtHuEiEi0a4WISLR7hEhEtGuFSES0dIhMtEuGyEy0W4fIQrRLhihCtFuHKEq0S4aoSrRbh6hGtEuGaEa0W4doTrRLhuhOtFuH6EG0S4YYQbRbhxhJtEDBnn/9w8wi0i3DLCrSLcOsJtItw2wu0i3D7CHSLcMcKdItw5wl0i3DXC3SLcPcI9Itwzwr0i3DvCfSLcN8L9Itw/wgMiPDDCgyI8OMJDIjw0wsMiPDzCIyI8MsKjIjw6wmMiPDbC4yI8PsITIjwxwpMiPDnCUyI0wlMjPC3C0yM8I8IzIzwrwrMjPCfCQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hOdGeF6E50d4QYQXRnhRhBdHeEmEl0Z4WYSXR3hFhFdGeFWEV0d4TYTXRnhdhNdHeEOEN0Z4U4Q3R3hLhLdGeFuEt0d4R4R3RnhXhHdHeE+EQyMcFuG9Ed4X4f0RPhDhgxE+FOHDET4S4aMRPhbh4xE+EeGTET4V4dMRPhPhsxE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZcRfhXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxH+F+HwCEdEODLCURGOjnBMhGMjHCfGcWMcL8bxY5wgxgljnCjGiWOcJMZJY5wsxiExTh7jFDFOGeNUMU4d4zQxThvjdDFOH+MMMc4Y40wxzhzjLDHOGuNsMc4e4xwxzhnjXDHOHeM8Mc4b43wxzh/jAjEuGONCMS4c4yIxLhrjYjEuHuMSMS4Z41IxLh0jMS4T47IxLhfj8jGuEOOKMa4U48oxrhLjqjGuFuPqMa4R45oxrhXj2jGuE+O6Ma4X4/oxbhDjhjFuFOPGMW4S46Yxbhbj5jFuEeOWMW4V49YxbhPjtjFuF+P2Me4Q444x7hTjzjHuEuOuMe4W4+4x7hHjnjHuFePeMe4T474x7hfj/jEeEOOBMR4U48ExHhLjoTEeFuPhMR4R45ExHhXj0TEeE+OxMR4X4/ExnhDjiTGeFOPJMZ4SozGeGuNpMZ4e4xkxnhnjWTGeHeM5MQ5iDGIMY4xijGNMYkxjzGLMYyxiLGOsYqxjbGJsY+xi7GM8N8bzYjw/xgtivDDGi2K8OMZLYrw0xstivDzGK2K8MsarYrw6xmtivDbG62K8PsYbYrwxxptivDnGW2K8NcbbYrw9xjtivDPGu2K8O8Z7Yhwa47AY743xvhjvj/GBGB+M8aEYH47xkRgfjfGxGB+P8YkYn4zxqRifjvGZGJ+N8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxh/jfG3GH+P8Y8Y/4zxrxj/jvGfGP+N8b8Yh8c4IsaRMY6KcXSMY2IcG+M4CY6b4HgJjp/gBAlOmOBECU6c4CQJTprgZAkOSXDyBKdIcMoEp0pw6gSnSXDaBKdLcPoEZ0hwxgRnSnDmBGdJcNYEZ0tw9gTnSHDOBOdKcO4E50lw3gTnS3D+BBdIcMEEF0pw4QQXSXDRBBdLcPEEl0hwyQSXSnDpBElwmQSXTXC5BJdPcIUEV0xwpQRXTnCVBFdNcLUEV09wjQTXTHCtBNdOcJ0E101wvQTXT3CDBDdMcKMEN05wkwQ3TXCzBDdPcIsEt0xwqwS3TnCbBLdNcLsEt09whwR3THCnBHdOcJcEd01wtwR3T3CPBPdMcK8E905wnwT3TXC/BPdP8IAED0zwoAQPTvCQBA9N8LAED0/wiASPTPCoBI9O8JgEj03wuASPT/CEBE9M8KQET07wlARN8NQET0vw9ATPSPDMBM9K8OwEz0lwkGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2Cf4LkJnpfg+QlekOCFCV6U4MUJXpLgpQleluDlCV6R4JUJXpXg1Qlek+C1CV6X4PUJ3pDgjQnelODNCd6S4K0J3pbg7QnekeCdCd6V4N0J3pPg0ASHJXhvgvcleH+CDyT4YIIPJfhwgo8k+GiCjyX4eIJPJPhkgk8l+HSCzyT4bILPJfh8gi8k+GKCLyX4coKvJPhqgq8l+HqCbyT4ZoJvJfh2gu8k+G6C7yX4foIfJPhhgh8l+HGCnyT4aYKfJfh5gl8k+GWCXyX4dYLfJPhtgt8l+H2CPyT4Y4I/Jfhzgr8k+GuCvyX4e4J/JPhngn8l+HeC/yT4b4L/JTg8wREJjkxwVIKjExyT4NgEx0lx3BTHS3H8FCdIccIUJ0px4hQnSXHSFCdLcUiKk6c4RYpTpjhVilOnOE2K06Y4XYrTpzhDijOmOFOKM6c4S4qzpjhbirOnOEeKc6Y4V4pzpzhPivOmOF+K86e4QIoLprhQigunuEiKi6a4WIqLp7hEikumuFSKS6dIisukuGyKy6W4fIorpLhiiiuluHKKq6S4aoqrpbh6imukuGaKa6W4dorrpLhuiuuluH6KG6S4YYobpbhxipukuGmKm6W4eYpbpLhliluluHWK26S4bYrbpbh9ijukuGOKO6W4c4q7pLhriruluHuKe6S4Z4p7pbh3ivukuG+K+6W4f4oHpHhgigeleHCKh6R4aIqHpXh4ikekeGSKR6V4dIrHpHhsiseleHyKJ6R4YoonpXhyiqekaIqnpnhaiqeneEaKZ6Z4Vopnp3hOioMUgxTDFKMU4xSTFNMUsxTzFIsUyxSrFOsUmxTbFLsU+xTPTfG8FM9P8YIUL0zxohQvTvGSFC9N8bIUL0/xihSvTPGqFK9O8ZoUr03xuhSvT/GGFG9M8aYUb07xlhRvTfG2FG9P8Y4U70zxrhTvTvGeFIemOCzFe1O8L8X7U3wgxQdTfCjFh1N8JMVHU3wsxcdTfCLFJ1N8KsWnU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1P8IsUvU/wqxa9T/CbFb1P8LsXvU/whxR9T/CnFn1P8JcVfU/wtxd9T/CPFP1P8K8W/U/wnxX9T/C/F4SmOSHFkiqNSHJ3imBTHpjhOhuNmOF6G42c4QYYTZjhRhhNnOEmGk2Y4WYZDMpw8wykynDLDqTKcOsNpMpw2w+kynD7DGTKcMcOZMpw5w1kynDXD2TKcPcM5Mpwzw7kynDvDeTKcN8P5Mpw/wwUyXDDDhTJcOMNFMlw0w8UyXDzDJTJcMsOlMlw6QzJcJsNlM1wuw+UzXCHDFTNcKcOVM1wlw1UzXC3D1TNcI8M1M1wrw7UzXCfDdTNcL8P1M9wgww0z3CjDjTPcJMNNM9wsw80z3CLDLTPcKsOtM9wmw20z3C7D7TPcIcMdM9wpw50z3CXDXTPcLcPdM9wjwz0z3CvDvTPcJ8N9M9wvw/0zPCDDAzM8KMODMzwkw0MzPCzDwzM8IsMjMzwqw6MzPCbDYzM8LsPjMzwhwxMzPCnDkzM8JUMzPDXD0zI8PcMzMjwzw7MyPDvDczIcZBhkGGYYZRhnmGSYZphlmGdYZFhmWGVYZ9hk2GbYZdhneG6G52V4foYXZHhhhhdleHGGl2R4aYaXZXh5hldkeGWGV2V4dYbXZHhthtdleH2GN2R4Y4Y3ZXhzhrdkeGuGt2V4e4Z3ZHhnhndleHeG92Q4NMNhGd6b4X0Z3p/hAxk+mOFDGT6c4SMZPprhYxk+nuETGT6Z4VMZPp3hMxk+m+FzGT6f4QsZvpjhSxm+nOErGb6a4WsZvp7hGxm+meFbGb6d4TsZvpvhexm+n+EHGX6Y4UcZfpzhJxl+muFnGX6e4RcZfpnhVxl+neE3GX6b4XcZfp/hDxn+mOFPGf6c4S8Z/prhbxn+nuEfGf6Z4V8Z/p3hPxn+m+F/GQ7PcESGIzMcleHoDMdkODbDcXIcN8fxchw/xwlynDDHiXKcOMdJcpw0x8lyHJLj5DlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpLjojkuluPiOS6R45I5LpXj0jmS4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOW6c4yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40E5HpzjITkemuNhOR6e4xE5HpnjUTkeneMxOR6b43E5Hp/jCTmemONJOZ6c4yk5muOpOZ6W4+k5npHjmTmelePZOZ6T4yDHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPsdzczwvx/NzvCDHC3O8KMeLc7wkx0tzvCzHy3O8Iscrc7wqx6tzvCbHa3O8Lsfrc7whxxtzvCnHm3O8Jcdbc7wtx9tzvCPHO3O8K8e7c7wnx6E5Dsvx3hzvy/H+HB/I8cEcH8rx4RwfyfHRHB/L8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txeI4jchyZ46gcR+c4JsexOY5T4LgFjlfg+AVOUOCEBU5U4MQFTlLgpAVOVuCQAicvcIoCpyxwqgKnLnCaAqctcLoCpy9whgJnLHCmAmcucJYCZy1wtgJnL3COAucscK4C5y5wngLnLXC+AucvcIECFyxwoQIXLnCRAhctcLECFy9wiQKXLHCpApcukAKXKXDZApcrcPkCVyhwxQJXKnDlAlcpcNUCVytw9QLXKHDNAtcqcO0C1ylw3QLXK3D9AjcocMMCNypw4wI3KXDTAjcrcPMCtyhwywK3KnDrArcpcNsCtytw+wJ3KHDHAncqcOcCdylw1wJ3K3D3AvcocM8C9ypw7wL3KXDfAvcrcP8CDyjwwAIPKvDgAg8p8NACDyvw8AKPKPDIAo8q8OgCjynw2AKPK/D4Ak8o8MQCTyrw5AJPKdACTy3wtAJPL/CMAs8s8KwCzy7wnAIHBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYFnlvgeQWeX+AFBV5Y4EUFXlzgJQVeWuBlBV5e4BUFXlngVQVeXeA1BV5b4HUFXl/gDQXeWOBNBd5c4C0F3lrgbQXeXuAdBd5Z4F0F3l3gPQUOLXBYgfcWeF+B9xf4QIEPFvhQgQ8X+EiBjxb4WIGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBvxb4W4G/F/hHgX8W+FeBfxf4T4H/FvhfgcMLHFHgyAJHFTi6wDEFji1wnBLHLXG8EscvcYISJyxxohInLnGSEictcbISh5Q4eYlTlDhliVOVOHWJ05Q4bYnTlTh9iTOUOGOJM5U4c4mzlDhribOVOHuJc5Q4Z4lzlTh3ifOUOG+J85U4f4kLlLhgiQuVuHCJi5S4aImLlbh4iUuUuGSJS5W4dImUuEyJy5a4XInLl7hCiSuWuFKJK5e4SomrlrhaiauXuEaJa5a4Volrl7hOieuWuF6J65e4QYkblrhRiRuXuEmJm5a4WYmbl7hFiVuWuFWJW5e4TYnblrhdiduXuEOJO5a4U4k7l7hLibuWuFuJu5e4R4l7lrhXiXuXuE+J+5a4X4n7l3hAiQeWeFCJB5d4SImHlnhYiYeXeESJR5Z4VIlHl3hMiceWeFyJx5d4QoknlnhSiSeXeEqJlnhqiaeVeHqJZ5R4ZolnlXh2ieeUOCgxKDEsMSoxLjEpMS0xKzEvsSixLLEqsS6xKbEtsSuxL/HcEs8r8fwSLyjxwhIvKvHiEi8p8dISLyvx8hKvKPHKEq8q8eoSrynx2hKvK/H6Em8o8cYSbyrx5hJvKfHWEm8r8fYS7yjxzhLvKvHuEu8pcWiJw0q8t8T7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEJ0p8ssSnSny6xGdKfLbE50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Sny3xPdKfL/ED0r8sMSPSvy4xE9K/LTEz0r8vMQvSvyyxK9K/LrEb0r8tsTvSvy+xB9K/LHEn0r8ucRfSvy1xN9K/L3EP0r8s8S/Svy7xH9K/LfE/0ocXuKIEkeWOKrE0SWOKXFsieNUOG6F41U4foUTVDhhhRNVOHGFk1Q4aYWTVTikwskrnKLCKSucqsKpK5ymwmkrnK7C6SucocIZK5ypwpkrnKXCWSucrcLZK5yjwjkrnKvCuSucp8J5K5yvwvkrXKDCBStcqMKFK1ykwkUrXKzCxStcosIlK1yqwqUrpMJlKly2wuUqXL7CFSpcscKVKly5wlUqXLXC1SpcvcI1KlyzwrUqXLvCdSpct8L1Kly/wg0q3LDCjSrcuMJNKty0ws0q3LzCLSrcssKtKty6wm0q3LbC7SrcvsIdKtyxwp0q3LnCXSrctcLdKty9wj0q3LPCvSrcu8J9Kty3wv0q3L/CAyo8sMKDKjy4wkMqPLTCwyo8vMIjKjyywqMqPLrCYyo8tsLjKjy+whMqPLHCkyo8ucJTKrTCUys8rcLTKzyjwjMrPKvCsys8p8JBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2F51Z4XoXnV3hBhRdWeFGFF1d4SYWXVnhZhZdXeEWFV1Z4VYVXV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWeFeFd1d4T4VDKxxW4b0V3lfh/RU+UOGDFT5U4cMVPlLhoxU+VuHjFT5R4ZMVPlXh0xU+U+GzFT5X4fMVvlDhixW+VOHLFb5S4asVvlbh6xW+UeGbFb5V4dsVvlPhuxW+V+H7FX5Q4YcVflThxxV+UuGnFX5W4ecVflHhlxV+VeHXFX5T4bcVflfh9xX+UOGPFf5U4c8V/lLhrxX+VuHvFf5R4Z8V/lXh3xX+U+G/Ff5X4fAKR1Q4ssJRFY6ucEyFYyscp8ZxaxyvxvFrnKDGCWucqMaJa5ykxklrnKzGITVOXuMUNU5Z41Q1Tl3jNDVOW+N0NU5f4ww1zljjTDXOXOMsNc5a42w1zl7jHDXOWeNcNc5d4zw1zlvjfDXOX+MCNS5Y40I1LlzjIjUuWuNiNS5e4xI1LlnjUjUuXSM1LlPjsjUuV+PyNa5Q44o1rlTjyjWuUuOqNa5W4+o1rlHjmjWuVePaNa5T47o1rlfj+jVuUOOGNW5U48Y1blLjpjVuVuPmNW5R45Y1blXj1jVuU+O2NW5X4/Y17lDjjjXuVOPONe5S46417lbj7jXuUeOeNe5V49417lPjvjXuV+P+NR5Q44E1HlTjwTUeUuOhNR5W4+E1HlHjkTUeVePRNR5T47E1Hlfj8TWeUOOJNZ5U48k1nlKjNZ5a42k1nl7jGTWeWeNZNZ5d4zk1DmoMagxrjGqMa0xqTGvMasxrLGosa6xqrGtsamxr7Grsazy3xvNqPL/GC2q8sMaLary4xktqvLTGy2q8vMYraryyxqtqvLrGa2q8tsbrary+xhtqvLHGm2q8ucZbary1xttqvL3GO2q8s8a7ary7xntqHFrjsBrvrfG+Gu+v8YEaH6zxoRofrvGRGh+t8bEaH6/xiRqfrPGpGp+u8Zkan63xuRqfr/GFGl+s8aUaX67xlRpfrfG1Gl+v8Y0a36zxrRrfrvGdGt+t8b0a36/xgxo/rPGjGj+u8ZMaP63xsxo/r/GLGr+s8asav67xmxq/rfG7Gr+v8Ycaf6zxpxp/rvGXGn+t8bcaf6/xjxr/rPGvGv+u8Z8a/63xvxqH1ziixpE1jqpxdI1jahxb4zgNjtvgeA2O3+AEDU7Y4EQNTtzgJA1O2uBkDQ5pcPIGp2hwygananDqBqdpcNoGp2tw+gZnaHDGBmdqcOYGZ2lw1gZna3D2BudocM4G52pw7gbnaXDeBudrcP4GF2hwwQYXanDhBhdpcNEGF2tw8QaXaHDJBpdqcOkGaXCZBpdtcLkGl29whQZXbHClBlducJUGV21wtQZXb3CNBtdscK0G125wnQbXbXC9BtdvcIMGN2xwowY3bnCTBjdtcLMGN29wiwa3bHCrBrducJsGt21wuwa3b3CHBndscKcGd25wlwZ3bXC3BndvcI8G92xwrwb3bnCfBvdtcL8G92/wgAYPbPCgBg9u8JAGD23wsAYPb/CIBo9s8KgGj27wmAaPbfC4Bo9v8IQGT2zwpAZPbvCUBm3w1AZPa/D0Bs9o8MwGz2rw7AbPaXDQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN/guQ2e1+D5DV7Q4IUNXtTgxQ1e0uClDV7W4OUNXtHglQ1e1eDVDV7T4LUNXtfg9Q3e0OCNDd7U4M0N3tLgrQ3e1uDtDd7R4J0N3tXg3Q3e0+DQBoc1eG+D9zV4f4MPNPhggw81+HCDjzT4aIOPNfh4g080+GSDTzX4dIPPNPhsg881+HyDLzT4YoMvNfhyg680+GqDrzX4eoNvNPhmg281+HaD7zT4boPvNfh+gx80+GGDHzX4cYOfNPhpg581+HmDXzT4ZYNfNfh1g980+G2D3zX4fYM/NPhjgz81+HODvzT4a4O/Nfh7g380+GeDfzX4d4P/NPhvg/81OLzBEQ2ObHBUg6MbHNPg2AbHaXHcFsdrcfwWJ2hxwhYnanHiFidpcdIWJ2txSIuTtzhFi1O2OFWLU7c4TYvTtjhdi9O3OEOLM7Y4U4sztzhLi7O2OFuLs7c4R4tztjhXi3O3OE+L87Y4X4vzt7hAiwu2uFCLC7e4SIuLtrhYi4u3uESLS7a4VItLt0iLy7S4bIvLtbh8iyu0uGKLK7W4courtLhqi6u1uHqLa7S4Zotrtbh2i+u0uG6L67W4fosbtLhhixu1uHGLm7S4aYubtbh5i1u0uGWLW7W4dYvbtLhti9u1uH2LO7S4Y4s7tbhzi7u0uGuLu7W4e4t7tLhni3u1uHeL+7S4b4v7tbh/iwe0eGCLB7V4cIuHtHhoi4e1eHiLR7R4ZItHtXh0i8e0eGyLx7V4fIsntHhiiye1eHKLp7Roi6e2eFqLp7d4RotntnhWi2e3eE6LgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7Fs9t8bwWz2/xghYvbPGiFi9u8ZIWL23xshYvb/GKFq9s8aoWr27xmhavbfG6Fq9v8YYWb2zxphZvbvGWFm9t8bYWb2/xjhbvbPGuFu9u8Z4Wh7Y4rMV7W7yvxftbfKDFB1t8qMWHW3ykxUdbfKzFx1t8osUnW3yqxadbfKbFZ1t8rsXnW3yhxRdbfKnFl1t8pcVXW3ytxddbfKPFN1t8q8W3W3ynxXdbfK/F91v8oMUPW/yoxY9b/KTFT1v8rMXPW/yixS9b/KrFr1v8psVvW/yuxe9b/KHFH1v8qcWfW/ylxV9b/K3F31v8o8U/W/yrxb9b/KfFf1v8r8XhLY5ocWSLo1oc3eKYFse2jB07dqzjdjheh+N3OEGHE3Y4UYcTdzhJh5N2OFmHQzqcvMMpOpyyw6k6nLrDaTqctsPpOpy+wxk6nLHDmTqcucNZOpy1w9k6nL3DOTqcs8O5Opy7w3k6nLfD+Tqcv8MFOlyww4U6XLjDRTpctMPFOly8wyU6XLLDpTpcukM6XKbDZTtcrsPlO1yhwxU7XKnDlTtcpcNVO1ytw9U7XKPDNTtcq8O1O1ynw3U7XK/D9TvcoMMNO9yow4073KTDTTvcrMPNO9yiwy073KrDrTvcpsNtO9yuw+073KHDHTvcqcOdO9ylw1073K3D3Tvco8M9O9yrw7073KfDfTvcr8P9OzygwwM7PKjDgzs8pMNDOzysw8M7PKLDIzs8qsOjOzymw2M7PK7D4zs8ocMTOzypw5M7PKVDOzy1w9M6PL3DMzo8s8OzOjy7w3M6HHQYdBh2GHUYd5h0mHaYdZh3WHRYdlh1WHfYdNh22HXYd3huh+d1eH6HF3R4YYcXdXhxh5d0eGmHl3V4eYdXdHhlh1d1eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0OLTDYR3e2+F9Hd7f4QMdPtjhQx0+3OEjHT7a4WMdPt7hEx0+2eFTHT7d4TMdPtvhcx0+3+ELHb7Y4UsdvtzhKx2+2uFrHb7e4RsdvtnhWx2+3eE7Hb7b4Xsdvt/hBx1+2OFHHX7c4ScdftrhZx1+3uEXHX7Z4Vcdft3hNx1+2+F3HX7f4Q8d/tjhTx3+3OEvHf7a4W8d/t7hHx3+2eFfHf7d4T8d/tvhfx0O73BEhyM7HNXh6A7HdDi2w3F6HLfH8Xocv8cJepywx4l6nLjHSXqctMfJehzS4+Q9TtHjlD1O1ePUPU7T47Q9Ttfj9D3O0OOMPc7U48w9ztLjrD3O1uPsPc7R45w9ztXj3D3O0+O8Pc7X4/w9LtDjgj0u1OPCPS7S46I9Ltbj4j0u0eOSPS7V49I90uMyPS7b43I9Lt/jCj2u2ONKPa7c4yo9rtrjaj2u3uMaPa7Z41o9rt3jOj2u2+N6Pa7f4wY9btjjRj1u3OMmPW7a42Y9bt7jFj1u2eNWPW7d4zY9btvjdj1u3+MOPe7Y40497tzjLj3u2uNuPe7e4x497tnjXj3u3eM+Pe7b43497t/jAT0e2ONBPR7c4yE9HtrjYT0e3uMRPR7Z41E9Ht3jMT0e2+NxPR7f4wk9ntjjST2e3OMpPdrjqT2e1uPpPZ7R45k9ntXj2T2e0+Ogx6DHsMeox7jHpMe0x6zHvMeix7LHqse6x6bHtseux77Hc3s8r8fze7ygxwt7vKjHi3u8pMdLe7ysx8t7vKLHK3u8qsere7ymx2t7vK7H63u8occbe7ypx5t7vKXHW3u8rcfbe7yjxzt7vKvHu3u8p8ehPQ77H4X0oEbXgQBAOLVt25zatm3b9tQ277FR27Zt2zbiZL99h3+A9w/wgQE+OMCHBvjwAB8Z4KMDfGyAjw/wiQE+OcCnBvj0AJ8Z4LMDfG6Azw/whQG+OMCXBvjyAF8Z4KsDfG2Arw/wjQG+OcC3Bvj2AN8Z4LsDfG+A7w/wgwF+OMCPBvjxAD8Z4KcD/GyAnw/wiwF+OcCvBvj1AL8Z4LcD/G6A3w/whwH+OMCfBvjzAH8Z4K8D/G2Avw/wjwH+OcC/Bvj3AP8Z4L8D/G+AQwc4bIDDBzhigCMHOGqAowc4ZoBjBzgkwHECHDfA8QIcP8AJApwwwIkCnDjASQKcNMDJApw8wCkCnDLAqQKcOsBpApw2wOkCnD7AGQKcMcCZApw5wFkCnDXA2QKcPcA5ApwzwLkCnDvAeQKcN8D5Apw/wAUCXDDAhQJcOMBFAlw0wMUCXDzAJQJcMsClAlw6QAJcJsBlA1wuwOUDXCHAFQNcKcCVA1wlwFUDXC3A1QNcI8A1A1wrwLUDXCfAdQNcL8D1A9wgwA0D3CjAjQPcJMBNA9wswM0D3CLALQPcKsCtA9wmwG0D3C7A7QPcIcAdA9wpwJ0D3CXAXQPcLcDdA9wjwD0D3CvAvQPcJ8B9A9wvwP0DPCDAAwM8KMCDAzwkwEMDPCzAwwM8IsAjAzwqwKMDPCbAYwM8LsDjAzwhwBMDPCnAkwM8JUADPDXA0wI8PcAzAjwzwLMCPDvAcwI8N8DzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrArw6wGsCHAQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYB3htgNcFeH2ANwR4Y4A3BXhzgLcEeGuAtwV4e4B3BHhngHcFeHeA9wR4b4D3BXh/gA8E+GCADwX4cICPBPhogI8F+HiATwT4ZIBPBfh0gM8E+GyAzwX4fIAvBPhigC8F+HKArwT4aoCvBfh6gG8E+GaAbwX4doDvBPhugO8F+H6AHwT4YYAfBfhxgJ8E+GmAnwX4eYBfBPhlgF8F+HWA3wT4bYDfBfh9gD8E+GOAPwX4c4C/BPhrgL8F+HuAfwT4Z4B/Bfh3gP8E+G+A/wU4NMBhAQ4PcESAIwMcFeDoAMcEODbAISGOE+K4IY4X4vghThDihCFOFOLEIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhLhLioiEuFuLiIS4R4pIhLhXi0iES4jIhLhviciEuH+IKIa4Y4kohrhziKiGuGuJqIa4e4hohrhniWiGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFuHuIWIW4Z4lYhbh3iNiFuG+J2IW4f4g4h7hjiTiHuHOIuIe4a4m4h7h7iHiHuGeJeIe4d4j4h7hvifiHuH+IBIR4Y4kEhHhziISEeGuJhIR4e4hEhHhniUSEeHeIxIR4b4nEhHh/iCSGeGOJJIZ4c4ikhGuKpIZ4W4ukhnhHimSGeFeLZIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+IgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7Ea0O8LsTrQ7whxBtDvCnEm0O8JcRbQ7wtxNtDvCPEO0O8K8S7Q7wnxHtDvC/E+0N8IMQHQ3woxIdDfCTER0N8LMTHQ3wixCdDfCrEp0N8JsRnQ3wuxOdDfCHEF0N8KcSXQ3wlxFdDfC3E10N8I8Q3Q3wrxLdDfCfEd0N8L8T3Q/wgxA9D/CjEj0P8JMRPQ/wsxM9D/CLEL0P8KsSvQ/wmxG9D/C7E70P8IcQfQ/wpxJ9D/CXEX0P8LcTfQ/wjxD9D/CvEv0P8J8R/Q/wvxKEhDgtxeIgjQhwZ4qgQR4c4JsSxIQ6JcJwIx41wvAjHj3CCCCeMcKIIJ45wkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCGeOcJYIZ41wtghnj3COCOeMcK4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNcLEIF49wiQiXjHCpCJeOkAiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I14lw3QjXi3D9CDeIcMMIN4pw4wg3iXDTCDeLcPMIt4hwywi3inDrCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICI+K8OgIj4nw2AiPi/D4CE+I8MQIT4rw5AhPidAIT43wtAhPj/CMCM+M8KwIz47wnAjPjfC8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCK+O8JoIBxEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2EV4b4XURXh/hDRHeGOFNEd4c4S0R3hrhbRHeHuEdEd4Z4V0R3h3hPRHeG+F9Ed4f4QMRPhjhQxE+HOEjET4a4WMRPh7hExE+GeFTET4d4TMRPhvhcxE+H+ELEb4Y4UsRvhzhKxG+GuFrEb4e4RsRvhnhWxG+HeE7Eb4b4XsRvh/hBxF+GOFHEX4c4ScRfhrhZxF+HuEXEX4Z4VcRfh3hNxF+G+F3EX4f4Q8R/hjhTxH+HOEvEf4a4W8R/h7hHxH+GeFfEf4d4T8R/hvhfxEOjXBYhMMjHBHhyAhHRTg6wjERjo1wSIzjxDhujOPFOH6ME8Q4YYwTxThxjJPEOGmMk8U4eYxTxDhljFPFOHWM08Q4bYzTxTh9jDPEOGOMM8U4c4yzxDhrjLPFOHuMc8Q4Z4xzxTh3jPPEOG+M88U4f4wLxLhgjAvFuHCMi8S4aIyLxbh4jEvEuGSMS8W4dIzEuEyMy8a4XIzLx7hCjCvGuFKMK8e4SoyrxrhajKvHuEaMa8a4Voxrx7hOjOvGuF6M68e4QYwbxrhRjBvHuEmMm8a4WYybx7hFjFvGuFWMW8e4TYzbxrhdjNvHuEOMO8a4U4w7x7hLjLvGuFuMu8e4R4x7xrhXjHvHuE+M+8a4X4z7x3hAjAfGeFCMB8d4SIyHxnhYjIfHeESMR8Z4VIxHx3hMjMfGeFyMx8d4QownxnhSjCfHeEqMxnhqjKfFeHqMZ8R4ZoxnxXh2jOfEeG6M58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8V4dYzXxDiIMYgxjDGKMY4xiTGNMYsxj7GIsYyxirGOsYmxjbGLsY/x2hivi/H6GG+I8cYYb4rx5hhvifHWGG+L8fYY74jxzhjvivHuGO+J8d4Y74vx/hgfiPHBGB+K8eEYH4nx0Rgfi/HxGJ+I8ckYn4rx6RififHZGJ+L8fkYX4jxxRhfivHlGF+J8dUYX4vx9RjfiPHNGN+K8e0Y34nx3Rjfi/H9GD+I8cMYP4rx4xg/ifHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4rx7xj/ifHfGP+LcWiMw2IcHuOIGEfGOCrG0TGOiXFsjEMSHCfBcRMcL8HxE5wgwQkTnCjBiROcJMFJE5wswckTnCLBKROcKsGpE5wmwWkTnC7B6ROcIcEZE5wpwZkTnCXBWROcLcHZE5wjwTkTnCvBuROcJ8F5E5wvwfkTXCDBBRNcKMGFE1wkwUUTXCzBxRNcIsElE1wqwaUTJMFlElw2weUSXD7BFRJcMcGVElw5wVUSXDXB1RJcPcE1ElwzwbUSXDvBdRJcN8H1Elw/wQ0S3DDBjRLcOMFNEtw0wc0S3DzBLRLcMsGtEtw6wW0S3DbB7RLcPsEdEtwxwZ0S3DnBXRLcNcHdEtw9wT0S3DPBvRLcO8F9Etw3wf0S3D/BAxI8MMGDEjw4wUMSPDTBwxI8PMEjEjwywaMSPDrBYxI8NsHjEjw+wRMSPDHBkxI8OcFTEjTBUxM8LcHTEzwjwTMTPCvBsxM8J8FzEzwvwfMTvCDBCxO8KMGLE7wkwUsTvCzByxO8IsErE7wqwasTvCbBQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gtcmeF2C1yd4Q4I3JnhTgjcneEuCtyZ4W4K3J3hHgncmeFeCdyd4T4L3Jnhfgvcn+ECCDyb4UIIPJ/hIgo8m+FiCjyf4RIJPJvhUgk8n+EyCzyb4XILPJ/hCgi8m+FKCLyf4SoKvJvhagq8n+EaCbyb4VoJvJ/hOgu8m+F6C7yf4QYIfJvhRgh8n+EmCnyb4WYKfJ/hFgl8m+FWCXyf4TYLfJvhdgt8n+EOCPyb4U4I/J/hLgr8m+FuCvyf4R4J/JvhXgn8n+E+C/yb4X4JDExyW4PAERyQ4MsFRCY5OcEyCYxMckuI4KY6b4ngpjp/iBClOmOJEKU6c4iQpTpriZClOnuIUKU6Z4lQpTp3iNClOm+J0KU6f4gwpzpjiTCnOnOIsKc6a4mwpzp7iHCnOmeJcKc6d4jwpzpvifCnOn+ICKS6Y4kIpLpziIikumuJiKS6e4hIpLpniUikunSIpLpPisikul+LyKa6Q4ooprpTiyimukuKqKa6W4uoprpHimimuleLaKa6T4roprpfi+ilukOKGKW6U4sYpbpLipiluluLmKW6R4pYpbpXi1iluk+K2KW6X4vYp7pDijinulOLOKe6S4q4p7pbi7inukeKeKe6V4t4p7pPivinul+L+KR6Q4oEpHpTiwSkekuKhKR6W4uEpHpHikSkeleLRKR6T4rEpHpfi8SmekOKJKZ6U4skpnpKiKZ6a4mkpnp7iGSmemeJZKZ6d4jkpnpvieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSleneI1KQ5SDFIMU4xSjFNMUkxTzFLMUyxSLFOsUqxTbFJsU+xS7FO8NsXrUrw+xRtSvDHFm1K8OcVbUrw1xdtSvD3FO1K8M8W7Urw7xXtSvDfF+1K8P8UHUnwwxYdSfDjFR1J8NMXHUnw8xSdSfDLFp1J8OsVnUnw2xedSfD7FF1J8McWXUnw5xVdSfDXF11J8PcU3UnwzxbdSfDvFd1J8N8X3Unw/xQ9S/DDFj1L8OMVPUvw0xc9S/DzFL1L8MsWvUvw6xW9S/DbF71L8PsUfUvwxxZ9S/DnFX1L8NcXfUvw9xT9S/DPFv1L8O8V/Uvw3xf9SHJrisBSHpzgixZEpjkpxdIpjUhyb4pAMx8lw3AzHy3D8DCfIcMIMJ8pw4gwnyXDSDCfLcPIMp8hwygynynDqDKfJcNoMp8tw+gxnyHDGDGfKcOYMZ8lw1gxny3D2DOfIcM4M58pw7gznyXDeDOfLcP4MF8hwwQwXynDhDBfJcNEMF8tw8QyXyHDJDJfKcOkMyXCZDJfNcLkMl89whQxXzHClDFfOcJUMV81wtQxXz3CNDNfMcK0M185wnQzXzXC9DNfPcIMMN8xwoww3znCTDDfNcLMMN89wiwy3zHCrDLfOcJsMt81wuwy3z3CHDHfMcKcMd85wlwx3zXC3DHfPcI8M98xwrwz3znCfDPfNcL8M98/wgAwPzPCgDA/O8JAMD83wsAwPz/CIDI/M8KgMj87wmAyPzfC4DI/P8IQMT8zwpAxPzvCUDM3w1AxPy/D0DM/I8MwMz8rw7AzPyfDcDM/L8PwML8jwwgwvyvDiDC/J8NIML8vw8gyvyPDKDK/K8OoMr8lwkGGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2Gf4bUZXpfh9RnekOGNGd6U4c0Z3pLhrRneluHtGd6R4Z0Z3pXh3Rnek+G9Gd6X4f0ZPpDhgxk+lOHDGT6S4aMZPpbh4xk+keGTGT6V4dMZPpPhsxk+l+HzGb6Q4YsZvpThyxm+kuGrGb6W4esZvpHhmxm+leHbGb6T4bsZvpfh+xl+kOGHGX6U4ccZfpLhpxl+luHnGX6R4ZcZfpXh1xl+k+G3GX6X4fcZ/pDhjxn+lOHPGf6S4a8Z/pbh7xn+keGfGf6V4d8Z/pPhvxn+l+HQDIdlODzDERmOzHBUhqMzHJPh2AyH5DhOjuPmOF6O4+c4QY4T5jhRjhPnOEmOk+Y4WY6T5zhFjlPmOFWOU+c4TY7T5jhdjtPnOEOOM+Y4U44z5zhLjrPmOFuOs+c4R45z5jhXjnPnOE+O8+Y4X47z57hAjgvmuFCOC+e4SI6L5rhYjovnuESOS+a4VI5L50iOy+S4bI7L5bh8jivkuGKOK+W4co6r5LhqjqvluHqOa+S4Zo5r5bh2juvkuG6O6+W4fo4b5LhhjhvluHGOm+S4aY6b5bh5jlvkuGWOW+W4dY7b5LhtjtvluH2OO+S4Y4475bhzjrvkuGuOu+W4e4575LhnjnvluHeO++S4b4775bh/jgfkeGCOB+V4cI6H5HhojofleHiOR+R4ZI5H5Xh0jsfkeGyOx+V4fI4n5HhijifleHKOp+RojqfmeFqOp+d4Ro5n5nhWjmfneE6O5+Z4Xo7n53hBjhfmeFGOF+d4SY6X5nhZjpfneEWOV+Z4VY5X53hNjoMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+xyvzfG6HK/P8YYcb8zxphxvzvGWHG/N8bYcb8/xjhzvzPGuHO/O8Z4c783xvhzvz/GBHB/M8aEcH87xkRwfzfGxHB/P8Ykcn8zxqRyfzvGZHJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387xnRzfzfG9HN/P8YMcP8zxoxw/zvGTHD/N8bMcP8/xixy/zPGrHL/O8Zscv83xuxy/z/GHHH/M8accf87xlxx/zfG3HH/P8Y8c/8zxrxz/zvGfHP/N8b8ch+Y4LMfhOY7IcWSOo3IcneOYHMfmOKTAcQoct8DxChy/wAkKnLDAiQqcuMBJCpy0wMkKnLzAKQqcssCpCpy6wGkKnLbA6QqcvsAZCpyxwJkKnLnAWQqctcDZCpy9wDkKnLPAuQqcu8B5Cpy3wPkKnL/ABQpcsMCFCly4wEUKXLTAxQpcvMAlClyywKUKXLpAClymwGULXK7A5QtcocAVC1ypwJULXKXAVQtcrcDVC1yjwDULXKvAtQtcp8B1C1yvwPUL3KDADQvcqMCNC9ykwE0L3KzAzQvcosAtC9yqwK0L3KbAbQvcrsDtC9yhwB0L3KnAnQvcpcBdC9ytwN0L3KPAPQvcq8C9C9ynwH0L3K/A/Qs8oMADCzyowIMLPKTAQws8rMDDCzyiwCMLPKrAows8psBjCzyuwOMLPKHAEws8qcCTCzylQAs8tcDTCjy9wDMKPLPAswo8u8BzCjy3wPMKPL/ACwq8sMCLCry4wEsKvLTAywq8vMArCryywKsKvLrAawocFBgUGBYYFRgXmBSYFpgVmBdYFFgWWBVYF9gU2BbYFdgXeG2B1xV4fYE3FHhjgTcVeHOBtxR4a4G3FXh7gXcUeGeBdxV4d4H3FHhvgfcVeH+BDxT4YIEPFfhwgY8U+GiBjxX4eIFPFPhkgU8V+HSBzxT4bIHPFfh8gS8U+GKBLxX4coGvFPhqga8V+HqBbxT4ZoFvFfh2ge8U+G6B7xX4foEfFPhhgR8V+HGBnxT4aYGfFfh5gV8U+GWBXxX4dYHfFPhtgd8V+H2BPxT4Y4E/Ffhzgb8U+GuBvxX4e4F/FPhngX8V+HeB/xT4b4H/FTi0wGEFDi9wRIEjCxxV4OgCxxQ4tsAhJY5T4rgljlfi+CVOUOKEJU5U4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlTiwiUuUuKiJS5W4uIlLlHikiUuVeLSJVLiMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDiXuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5d4jElHlvicSUeX+IJJZ5Y4kklnlziKSVa4qklnlbi6SWeUeKZJZ5V4tklnlPiuSWeV+L5JV5Q4oUlXlTixSVeUuKlJV5W4uUlXlHilSVeVeLVJV5T4qDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsRrS7yuxOtLvKHEG0u8qcSbS7ylxFtLvK3E20u8o8Q7S7yrxLtLvKfEe0u8r8T7S3ygxAdLfKjEh0t8pMRHS3ysxMdLfKLEJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxE9L/KzEz0v8osQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEP0v8q8S/S/ynxH9L/K/EoSUOK3F4iSNKHFniqBJHlzimxLElDqlwnArHrXC8CsevcIIKJ6xwogonrnCSCietcLIKJ69wigqnrHCqCqeucJoKp61wugqnr3CGCmescKYKZ65wlgpnrXC2CmevcI4K56xwrgrnrnCeCuetcL4K569wgQoXrHChCheucJEKF61wsQoXr3CJCpescKkKl66QCpepcNkKl6tw+QpXqHDFCleqcOUKV6lw1QpXq3D1CteocM0K16pw7QrXqXDdCtercP0KN6hwwwo3qnDjCjepcNMKN6tw8wq3qHDLCreqcOsKt6lw2wq3q3D7CneocMcKd6pw5wp3qXDXCnercPcK96hwzwr3qnDvCvepcN8K96tw/woPqPDACg+q8OAKD6nw0AoPq/DwCo+o8MgKj6rw6AqPqfDYCo+r8PgKT6jwxApPqvDkCk+p0ApPrfC0Ck+v8IwKz6zwrArPrvCcCs+t8LwKz6/wggovrPCiCi+u8JIKL63wsgovr/CKCq+s8KoKr67wmgoHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYVXlvhdRVeX+ENFd5Y4U0V3lzhLRXeWuFtFd5e4R0V3lnhXRXeXeE9Fd5b4X0V3l/hAxU+WOFDFT5c4SMVPlrhYxU+XuETFT5Z4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4V8V/l3hPxX+W+F/FQ6tcFiFwyscUeHICkdVOLrCMRWOrXBIjePUOG6N49U4fo0T1DhhjRPVOHGNk9Q4aY2T1Th5jVPUOGWNU9U4dY3T1DhtjdPVOH2NM9Q4Y40z1ThzjbPUOGuNs9U4e41z1DhnjXPVOHeN89Q4b43z1Th/jQvUuGCNC9W4cI2L1LhojYvVuHiNS9S4ZI1L1bh0jdS4TI3L1rhcjcvXuEKNK9a4Uo0r17hKjavWuFqNq9e4Ro1r1rhWjWvXuE6N69a4Xo3r17hBjRvWuFGNG9e4SY2b1rhZjZvXuEWNW9a4VY1b17hNjdvWuF2N29e4Q4071rhTjTvXuEuNu9a4W42717hHjXvWuFeNe9e4T4371rhfjfvXeECNB9Z4UI0H13hIjYfWeFiNh9d4RI1H1nhUjUfXeEyNx9Z4XI3H13hCjSfWeFKNJ9d4So3WeGqNp9V4eo1n1HhmjWfVeHaN59R4bo3n1Xh+jRfUeGGNF9V4cY2X1HhpjZfVeHmNV9R4ZY1X1Xh1jdfUOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/HaGq+r8foab6jxxhpvqvHmGm+p8dYab6vx9hrvqPHOGu+q8e4a76nx3hrvq/H+Gh+o8cEaH6rx4RofqfHRGh+r8fEan6jxyRqfqvHpGp+p8dkan6vx+RpfqPHFGl+q8eUaX6nx1Rpfq/H1Gt+o8c0a36rx7RrfqfHdGt+r8f0aP6jxwxo/qvHjGj+p8dMaP6vx8xq/qPHLGr+q8esav6nx2xq/q/H7Gn+o8ccaf6rx5xp/qfHXGn+r8fca/6jxzxr/qvHvGv+p8d8a/6txaI3Dahxe44gaR9Y4qsbRNY6pcWyNQxocp8FxGxyvwfEbnKDBCRucqMGJG5ykwUkbnKzByRucosEpG5yqwakbnKbBaRucrsHpG5yhwRkbnKnBmRucpcFZG5ytwdkbnKPBORucq8G5G5ynwXkbnK/B+RtcoMEFG1yowYUbXKTBRRtcrMHFG1yiwSUbXKrBpRukwWUaXLbB5RpcvsEVGlyxwZUaXLnBVRpctcHVGly9wTUaXLPBtRpcu8F1Gly3wfUaXL/BDRrcsMGNGty4wU0a3LTBzRrcvMEtGtyywa0a3LrBbRrctsHtGty+wR0a3LHBnRrcucFdGty1wd0a3L3BPRrcs8G9Gty7wX0a3LfB/Rrcv8EDGjywwYMaPLjBQxo8tMHDGjy8wSMaPLLBoxo8usFjGjy2weMaPL7BExo8scGTGjy5wZFjx461wVMbPK3B0xs8o8EzGzyrwbMbPKfBcxs8r8HzG7ygwQsbvKjBixu8pMFLG7yswcsbvKLBKxu8qsGrG7ymwUGDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12DfYPXNnhdg9c3eEODNzZ4U4M3N3hLg7c2eFuDtzd4R4N3NnhXg3c3eE+D9zZ4X4P3N/hAgw82+FCDDzf4SIOPNvhYg483+ESDTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJg582+FmDnzf4RYNfNvhVg183+E2D3zb4XYPfN/hDgz82+FODPzf4S4O/Nvhbg783+EeDfzb4V4N/N/hPg/82+F+DQxsc1uDwBkf830CDoxoc3eCYBsc2OKTFcVoct8XxWhy/xQlanLDFiVqcuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWlyyxaVaXLpFWlymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1s8qcWTWzylRVs8tcXTWjy9xTNaPLPFs1o8u8VzWjy3xfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxatavLrFa1octBi0GLYYtRi3mLSYtpi1mLdYtFi2WLVYt9i02LbYtdi3eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLd7V4d4v3tHhvi/e1eH+LD7T4YIsPtfhwi4+0+GiLj7X4eItPtPhki0+1+HSLz7T4bIvPtfh8iy+0+GKLL7X4couvtPhqi6+1+HqLb7T4Zotvtfh2i++0+G6L77X4fosftPhhix+1+HGLn7T4aYuftfh5i1+0+GWLX7X4dYvftPhti9+1+H2LP7T4Y4s/tfhzi7+0+GuLv7X4e4t/tPhni3+1+HeL/7T4b4v/tTi0xWEtDm9xRIsjWxzV4ugWx7Q4tsUhHY7T4bgdjtfh+B1O0OGEHU7U4cQdTtLhpB1O1uHkHU7R4ZQdTtXh1B1O0+G0HU7X4fQdztDhjB3O1OHMHc7S4awdztbh7B3O0eGcHc7V4dwdztPhvB3O1+H8HS7Q4YIdLtThwh0u0uGiHS7W4eIdLtHhkh0u1eHSHdLhMh0u2+FyHS7f4QodrtjhSh2u3OEqHa7a4Wodrt7hGh2u2eFaHa7d4Todrtvheh2u3+EGHW7Y4UYdbtzhJh1u2uFmHW7e4RYdbtnhVh1u3eE2HW7b4XYdbt/hDh3u2OFOHe7c4S4d7trhbh3u3uEeHe7Z4V4d7t3hPh3u2+F+He7f4QEdHtjhQR0e3OEhHR7a4WEdHt7hER0e2eFRHR7d4TEdHtvhcR0e3+EJHZ7Y4UkdntzhKR3a4akdntbh6R2e0eGZHZ7V4dkdntPhuR2e1+H5HV7Q4YUdXtThxR1e0uGlHV7W4eUdXtHhlR1e1eHVHV7T4aDDoMOww6jDuMOkw7TDrMO8w6LDssOqw7rDpsO2w67DvsNrO7yuw+s7vKHDGzu8qcObO7ylw1s7vK3D2zu8o8M7O7yrw7s7vKfDezu8r8P7O3ygwwc7fKjDhzt8pMNHO3ysw8c7fKLDJzt8qsOnO3ymw2c7fK7D5zt8ocMXO3ypw5c7fKXDVzt8rcPXO3yjwzc7fKvDtzt8p8N3O3yvw/c7/KDDDzv8qMOPO/ykw087/KzDzzv8osMvO/yqw687/KbDbzv8rsPvO/yhwx87/KnDnzv8pcNfO/ytw987/KPDPzv8q8O/O/ynw387/K/DoR0O63B4hyM6HNnhqA5Hdzimw7EdDulxnB7H7XG8HsfvcYIeJ+xxoh4n7nGSHiftcbIeJ+9xih6n7HGqHqfucZoep+1xuh6n73GGHmfscaYeZ+5xlh5n7XG2HmfvcY4e5+xxrh7n7nGeHuftcb4e5+9xgR4X7HGhHhfucZEeF+1xsR4X73GJHpfscakel+6RHpfpcdkel+tx+R5X6HHFHlfqceUeV+lx1R5X63H1Htfocc0e1+px7R7X6XHdHtfrcf0eN+hxwx436nHjHjfpcdMeN+tx8x636HHLHrfqceset+lx2x6363H7Hnfoccced+px5x536XHXHnfrcfce9+hxzx736nHvHvfpcd8e9+tx/x4P6PHAHg/q8eAeD+nx0B4P6/HwHo/o8cgej+rx6B6P6fHYHo/r8fgeT+jxxB5P6vHkHk/p0R5P7fG0Hk/v8Ywez+zxrB7P7vGcHs/t8bwez+/xgh4v7PGiHi/u8ZIeL+3xsh4v7/GKHq/s8aoer+7xmh4HPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12PfY9XtvjdT1e3+MNPd7Y40093tzjLT3e2uNt/ZAht/d4R4939nhXj3f3eE+P9/Z4X4//IwAeAOgsAAAIL9eybbd02bZt2/Zl2zbebyPbtm3bzX33DvC+Ad4/wAcG+OAAHxrgwwN8ZICPDvCxAT4+wCcG+OQAnxrg0wN8ZoDPDvC5AT4/wBcG+OIAXxrgywN8ZYCvDvC1Ab4+wDcG+OYA3xrg2wN8Z4DvDvC9Ab4/wA8G+OEAPxrgxwP8ZICfDvCzAX4+wC8G+OUAvxrg1wP8ZoDfDvC7AX4/wB8G+OMAfxrgzwP8ZYC/DvC3Af4+wD8G+OcA/xrg3wP8Z4D/DvC/AQ4f4IgBjhzgqAGOHuCYAY4d4JAAxwlw3ADHC3D8ACcIcMIAJwpw4gAnCXBogJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAwwJcNMDFAlw8wCUCXDJAAlwqwKUDXCbAZQNcLsDlA1whwBUDXCnAlQNcJcBVA1wtwNUDXCPANQNcK8C1A1wnwHUDXC/A9QPcIMANA9wowI0D3CTATQPcLMDNA9wiwC0D3CrArQPcJsBtA9wuwO0D3CHAHQPcKcCdA9wlwF0D3C3A3QPcI8A9A9wrwL0D3CfAfQPcL8D9AzwgwAMDPCjAgwM8JMBDAzwswMMDPCLAIwM8KsCjAzwmwGMDPC7A4wM8IcATAzwpQAM8OcBTAjw1wNMCPD3AMwI8M8CzAjw7wHMCPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7ArwzwLsCHAQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYB3h3gPcEeG+A9wV4f4APBPhggA8F+HCAjwT4aICPBfh4gE8E+GSATwX4dIDPBPhsgM8F+HyALwT4YoAvBfhygK8E+GqArwX4eoBvBPhmgG8F+HaA7wT4boDvBfh+gB8E+GGAHwX4cYCfBPhpgJ8F+HmAXwT4ZYBfBfh1gN8E+G2A3wX4fYA/BPhjgD8F+HOAvwT4a4C/Bfh7gH8E+GeAfwX4d4D/BPhvgP8FODzAEQGODHBUgKMDHBPg2ACHhDhOiOOGOF6I44c4QYgThjhRiBOHOEmIQ0OcNMTJQpw8xClCnDLEqUKcOsRpQpw2xOlCnD7EGUKcMcSZQpw5xFlCnDXE2UKcPcQ5QpwzxLlCnDvEeUKcN8T5Qpw/xAVCXDDEhUJcOMRFQhwW4qIhLhbi4iEuEeKSIRLiUiEuHeIyIS4b4nIhLh/iCiGuGOJKIa4c4iohrhriaiGuHuIaIa4Z4lohrh3iOiGuG+J6Ia4f4gYhbhjiRiFuHOImIW4a4mYhbh7iFiFuGeJWIW4d4jYhbhvidiFuH+IOIe4Y4k4h7hziLiHuGuJuIe4e4h4h7hniXiHuHeI+Ie4b4n4h7h/iASEeGOJBIR4c4iEhHhriYSEeHuIRIR4Z4lEhHh3iMSEeG+JxIR4f4gkhnhjiSSEa4skhnhLiqSGeFuLpIZ4R4pkhnhXi2SGeE+K5IZ4X4vkhXhDihSFeFOLFIV4S4qUhXhbi5SFeEeKVIV4V4tUhXhPitSFeF+L1Id4Q4o0h3hTizSHeEuKtId4W4u0h3hHinSHeFeIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7Eu0O8J8R7Q7wvxPtDfCDEB0N8KMSHQ3wkxEdDfCzEx0N8IsQnQ3wqxKdDfCbEZ0N8LsTnQ3whxBdDfCnEl0N8JcRXQ3wtxNdDfCPEN0N8K8S3Q3wnxHdDfC/E90P8IMQPQ/woxI9D/CTET0P8LMTPQ/wixC9D/CrEr0P8JsRvQ/wuxO9D/CHEH0P8KcSfQ/wlxF9D/C3E30P8I8Q/Q/wrxL9D/CfEf0P8L8ThIY4IcWSIo0IcHeKYEMeGOCTCcSIcN8LxIhw/wgkinDDCiSKcOMJJIhwa4aQRThbh5BFOEeGUEU4V4dQRThPhtBFOF+H0Ec4Q4YwRzhThzBHOEuGsEc4W4ewRzhHhnBHOFeHcEc4T4bwRzhfh/BEuEOGCES4U4cJDcZEIh0W4aISLRbh4hEtEuGSERLhUhEtHuEyEy0a4XITLR7hChCtGuFKEK0e4SoSrRrhahKtHuEaEa0a4VoRrR7hOhOtGuF6E60e4QYQbRrhRhBtHuEmEm0a4WYSbR7hFhFtGuFWEW0e4TYTbRrhdhNtHuEOEO0a4U4Q7R7hLhLtGuFuEu0e4R4R7RrhXhHtHuE+E+0a4X4T7R3hAhAdGeFCEB0d4SISHRnhYhIdHeESER0Z4VIRHR3hMhMdGeFyEx0d4QoQnRnhShEZ4coSnRHhqhKdFeHqEZ0R4ZoRnRXh2hOdEeG6E50V4foQXRHhhhBdFeHGEl0R4aYSXRXh5hFdEeGWEV0V4dYTXRHhthNdFeH2EN0R4Y4Q3RXhzhLdEeGuEt0V4e4R3RHhnhHdFOIgwiDCMMIowjjCJMI0wizCPsIiwjLCKsI6wibCNsIuwj/DuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QififDZCJ+L8PkIX4jwxQhfivDlCF+J8NUIX4vw9QjfiPDNCN+K8O0I34nw3Qjfi/D9CD+I8MMIP4rw4wg/ifDTCD+L8PMIv4jwywi/ivDrCL+J8NsIv4vw+wh/iPDHCH+K8OcIf4nw1wh/i/D3CP+I8M8I/4rw7wj/ifDfCP+LcHiEIyIcGeGoCEdHOCbCsREOiXGcGMeNcbwYx49xghgnjHGiGCeOcZIYh8Y4aYyTxTh5jFPEOGWMU8U4dYzTxDhtjNPFOH2MM8Q4Y4wzxThzjLPEOGuMs8U4e4xzxDhnjHPFOHeM88Q4b4zzxTh/jAvEuGCMC8W4cIyLxDgsxkVjXCzGxWNcIsYlYyTGpWJcOsZlYlw2xuViXD7GFWJcMcaVYlw5xlViXDXG1WJcPcY1YlwzxrViXDvGdWJcN8b1Ylw/xg1i3DDGjWLcOMZNYtw0xs1i3DzGLWLcMsatYtw6xm1i3DbG7WLcPsYdYtwxxp1i3DnGXWLcNcbdYtw9xj1i3DPGvWLcO8Z9Ytw3xv1i3D/GA2I8MMaDYjw4xkNiPDTGw2I8PMYjYjwyxqNiPDrGY2I8NsbjYjw+xhNiPDHGk2I0xpNjPCXGU2M8LcbTYzwjxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCbGa2O8LsbrY7whxhtjvCnGm2O8JcZbY7wtxttjvCPGO2O8K8ZBjEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2Md8d4T4z3xnhfjPfH+ECMD8b4UIwPx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8b4XIzPx/hCjC/G+FKML8f4SoyvxvhajK/H+EaMb8b4Voxvx/hOjO/G+F6M78f4QYwfxvhRjB/H+EmMn8b4WYyfx/hFjF/G+FWMX8f4TYzfxvhdjN/H+EOMP8b4U4w/x/hLjL/G+FuMv8f4R4x/xvhXjH/H+E+M/8b4X4zDYxwR48gYR8U4OsYxMY6NcUiC4yQ4boLjJTh+ghMkOGGCEyU4cYKTJDg0wUkTnCzByROcIsEpE5wqwakTnCbBaROcLsHpE5whwRkTnCnBmROcJcFZE5wtwdkTnCPBOROcK8G5E5wnwXkTnC/B+RNcIMEFE1wowYUTXCTBYQkumuBiCS6e4BIJLpkgCS6V4NIJLpPgsgkul+DyCa6Q4IoJrpTgygmukuCqCa6W4OoJrpHgmgmuleDaCa6T4LoJrpfg+glukOCGCW6U4MYJbpLgpgluluDmCW6R4JYJbpXg1gluk+C2CW6X4PYJ7pDgjgnulODOCe6S4K4J7pbg7gnukeCeCe6V4N4J7pPgvgnul+D+CR6Q4IEJHpTgwQkekuChCR6W4OEJHpHgkQkeleDRCR6T4LEJHpfg8QmekOCJCZ6UoAmenOApCZ6a4GkJnp7gGQmemeBZCZ6d4DkJnpvgeQmen+AFCV6Y4EUJXpzgJQlemuBlCV6e4BUJXpngVQleneA1CV6b4HUJXp/gDQnemOBNCd6c4C0J3prgbQnenuAdCd6Z4F0JDhIMEgwTjBKME0wSTBPMEswTLBIsE6wSrBNsEmwT7BLsE7w7wXsSvDfB+xK8P8EHEnwwwYcSfDjBRxJ8NMHHEnw8wScSfDLBpxJ8OsFnEnw2wecSfD7BFxJ8McGXEnw5wVcSfDXB1xJ8PcE3EnwzwbcSfDvBdxJ8N8H3Enw/wQ8S/DDBjxL8OMFPEvw0wc8S/DzBLxL8MsGvEvw6wW8S/DbB7xL8PsEfEvwxwZ8S/DnBXxL8NcHfEvw9wT8S/DPBvxL8O8F/Evw3wf8SHJ7giARHJjgqwdEJjklwbIJDUhwnxXFTHC/F8VOcIMUJU5woxYlTnCTFoSlOmuJkKU6e4hQpTpniVClOneI0KU6b4nQpTp/iDCnOmOJMKc6c4iwpzpribCnOnuIcKc6Z4lwpzp3iPCnOm+J8Kc6f4gIpLpjiQikunOIiKQ5LcdEUF0tx8RSXSHHJFElxqRSXTnGZFJdNcbkUl09xhRRXTHGlFFdOcZUUV01xtRRXT3GNFNdMca0U105xnRTXTXG9FNdPcYMUN0xxoxQ3TnGTFDdNcbMUN09xixS3THGrFLdOcZsUt01xuxS3T3GHFHdMcacUd05xlxR3TXG3FHdPcY8U90xxrxT3TnGfFPdNcb8U90/xgBQPTPGgFA9O8ZAUD03xsBQPT/GIFI9M8agUj07xmBSPTfG4FI9P8YQUT0zxpBRN8eQUT0nx1BRPS/H0FM9I8cwUz0rx7BTPSfHcFM9L8fwUL0jxwhQvSvHiFC9J8dIUL0vx8hSvSPHKFK9K8eoUr0nx2hSvS/H6FG9I8cYUb0rx5hRvSfHWFG9L8fYU70jxzhTvSnGQYpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp/i3Snek+K9Kd6X4v0pPpDigyk+lOLDKT6S4qMpPpbi4yk+keKTKT6V4tMpPpPisyk+l+LzKb6Q4ospvpTiyym+kuKrKb6W4uspvpHimym+leLbKb6T4rspvpfi+yl+kOKHKX6U4scpfpLipyl+luLnKX6R4pcpfpXi1yl+k+K3KX6X4vcp/pDijyn+lOLPKf6S4q8p/pbi7yn+keKfKf6V4t8p/pPivyn+l+LwFEekODLFUSmOTnFMimNTHJLhOBmOm+F4GY6f4QQZTpjhRBlOnOEkGQ7NcNIMJ8tw8gynyHDKDKfKcOoMp8lw2gyny3D6DGfIcMYMZ8pw5gxnyXDWDGfLcPYM58hwzgznynDuDOfJcN4M58tw/gwXyHDBDBfKcOEMF8lwWIaLZrhYhotnuESGS2ZIhktluHSGy2S4bIbLZbh8hitkuGKGK2W4coarZLhqhqtluHqGa2S4ZoZrZbh2hutkuG6G62W4foYbZLhhhhtluHGGm2S4aYabZbh5hltkuGWGW2W4dYbbZLhthttluH2GO2S4Y4Y7ZbhzhrtkuGuGu2W4e4Z7ZLhnhntluHeG+2S4b4b7Zbh/hgdkeGCGB2V4cIaHZHhohodleHiGR2R4ZIZHZXh0hsdkeGyGx2V4fIYnZHhihidlaIYnZ3hKhqdmeFqGp2d4RoZnZnhWhmdneE6G52Z4XobnZ3hBhhdmeFGGF2d4SYaXZnhZhpdneEWGV2Z4VYZXZ3hNhtdmeF2G12d4Q4Y3ZnhThjdneEuGt2Z4W4a3Z3hHhndmeFeGgwyDDMMMowzjDJMM0wyzDPMMiwzLDKsM6wybDNsMuwz7DO/O8J4M783wvgzvz/CBDB/M8KEMH87wkQwfzfCxDB/P8IkMn8zwqQyfzvCZDJ/N8LkMn8/whQxfzPClDF/O8JUMX83wtQxfz/CNDN/M8K0M387wnQzfzfC9DN/P8IMMP8zwoww/zvCTDD/N8LMMP8/wiwy/zPCrDL/O8JsMv83wuwy/z/CHDH/M8KcMf87wlwx/zfC3DH/P8I8M/8zwrwz/zvCfDP/N8L8Mh2c4IsORGY7KcHSGYzIcm+GQHMfJcdwcx8tx/BwnyHHCHCfKceIcJ8lxaI6T5jhZjpPnOEWOU+Y4VY5T5zhNjtPmOF2O0+c4Q44z5jhTjjPnOEuOs+Y4W46z5zhHjnPmOFeOc+c4T47z5jhfjvPnuECOC+a4UI4L57hIjsNyXDTHxXJcPMclclwyR3JcKselc1wmx2VzXC7H5XNcIccVc1wpx5VzXCXHVXNcLcfVc1wjxzVzXCvHtXNcJ8d1c1wvx/Vz3CDHDXPcKMeNc9wkx01z3CzHzXPcIsctc9wqx61z3CbHbXPcLsftc9whxx1z3CnHnXPcJcddc9wtx91z3CPHPXPcK8e9c9wnx31z3C/H/XM8IMcDczwox4NzPCTHQ3M8LMfDczwixyNzPCrHo3M8Jsdjczwux+NzPCHHE3M8KUdzPDnHU3I8NcfTcjw9xzNyPDPHs3I8O8dzcjw3x/NyPD/HC3K8MMeLcrw4x0tyvDTHy3K8PMcrcrwyx6tyvDrHa3K8Nsfrcrw+xxtyvDHHm3K8Ocdbcrw1x9tyvD3HO3K8M8e7chzkGOQY5hjlGOeY5JjmmOWY51jkWOZY5Vjn2OTY5tjl2Od4d4735HhvjvfleH+OD+T4YI4P5fhwjo/k+GiOj+X4eI5P5Phkjk/l+HSOz+T4bI7P5fh8ji/k+GKOL+X4co6v5Phqjq/l+HqOb+T4Zo5v5fh2ju/k+G6O7+X4fo4f5Phhjh/l+HGOn+T4aY6f5fh5jl/k+GWOX+X4dY7f5Phtjt/l+H2OP+T4Y44/5fhzjr/k+GuOv+X4e45/5Phnjn/l+HeO/+T4b47/5Tg8xxE5jsxxVI6jcxyT49gchxQ4ToHjFjhegeMXOEGBExY4UYETFzhJgUMLnLTAyQqcvMApCpyywKkKnLrAaQqctsDpCpy+wBkKnLHAmQqcucBZCpy1wNkKnL3AOQqcs8C5Cpy7wHkKnLfA+Qqcv8AFClywwIUKXLjARQocVuCiBS5W4OIFLlHgkgVS4FIFLl3gMgUuW+ByBS5f4ArDhrhigSsVuHKBqxS4aoGrFbh6gWsUuGaBaxW4doHrFLhugesVuH6BGxS4YYEbFbhxgZsUuGmBmxW4eYFbFLhlgVsVuHWB2xS4bYHbFbh9gTsUuGOBOxW4c4G7FLhrgbsVuHuBexS4Z4F7Fbh3gfsUuG+B+xW4f4EHFHhggQcVeHCBhxR4aIGHFXh4gUcUeGSBRxV4dIHHFHhsgccVeHyBJxR4YoEnFWiBJxd4SoGnFnhagacXeEaBZxZ4VoFnF3hOgecWeF6B5xd4QYEXFnhRgRcXeEmBlxZ4WYGXF3hFgVcWeFWBVxd4TYHXFnhdgdcXeEOBNxZ4U4E3F3hLgbcWeFuBtxd4R4F3FnhXgYMCgwLDAqMC4wKTAtMCswLzAosCywKrAusCmwLbArsC+wLvLvCeAu8t8L4C7y/wgQIfLPChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyzwqwK/LvCbAr8t8LsCvy/whwJ/LPCnAn8u8JcCfy3wtwJ/L/CPAv8s8K8C/y7wnwL/LfC/AocXOKLAkQWOKnB0gWMKHFvgkBLHKXHcEscrcfwSJyhxwhInKnHiEicpcWiJk5Y4WYmTlzhFiVOWOFWJU5c4TYnTljhdidOXOEOJM5Y4U4kzlzhLibOWOFuJs5c4R4lzljhXiXOXOE+J85Y4X4nzl7hAiQuWuFCJC5e4SInDSly0xMVKXLzEJUpcskRKXKrEpUtcpsRlS1yuxOVLXKHEFUtcqcSVS1ylxFVLXK3E1Utco8Q1S1yrxLVLXKfEdUtcr8T1S9ygxA1L3KjEjUvcpMRNS9ysxM1L3KLELUvcqsStS9ymxG1L3K7E7UvcocQdS9ypxJ1L3KXEXUvcrcTdS9yjxD1L3KvEvUvcp8R9S9yvxP1LPKDEA0s8qMSDSzykxENLPKzEw0s8osQjSzyqxKNLPKbEY0s8rsTjSzyhxBNLPKlESzy5xFNKPLXE00o8vcQzSjyzxLNKPLvEc0o8t8TzSjy/xAtKvLDEi0q8uMRLSry0xMtKvLzEK0q8ssSrSry6xGtKvLbE60q8vsQbSryxxJtKvLnEW0q8tcTbSry9xDtKvLPEu0oclBiUGJYYlRiXmJSYlpiVmJdYlFiWWJVYl9iU2JbYldiXeHeJ95R4b4n3lXh/iQ+U+GCJD5X4cImPlPhoiY+V+HiJT5T4ZIlPlfh0ic+U+GyJz5X4fIkvlPhiiS+V+HKJr5T4aomvlfh6iW+U+GaJb5X4donvlPhuie+V+H6JH5T4YYkflfhxiZ+U+GmJn5X4eYlflPhliV+V+HWJ35T4bYnflfh9iT+U+GOJP5X4c4m/lPhrib+V+HuJf5T4Z4l/lfh3if+U+G+J/5U4vMQRJY4scVSJo0scU+LYEodUOE6F41Y4XoXjVzhBhRNWOFGFE1c4SYVDK5y0wskqnLzCKSqcssKpKpy6wmkqnLbC6SqcvsIZKpyxwpkqnLnCWSqctcLZKpy9wjkqnLPCuSqcu8J5Kpy3wvkqnL/CBSpcsMKFKly4wkUqHFbhohUuVuHiFS5R4ZIVUuFSFS5d4TIVLlvhchUuX+EKFa5Y4UoVrlzhKhWuWuFqFa5e4RoVrlnhWhWuXeE6Fa5b4XoVrl/hBhVuWOFGFW5c4SYVblrhZhVuXuEWFW5Z4VYVbl3hNhVuW+F2FW5f4Q4V7ljhThXuXOEuFe5a4W4V7l7hHhXuWeFeFe5d4T4V7lvhfhXuX+EBFR5Y4UEVHlzhIRUeWuFhFR5e4REVHlnhURUeXeExFR5b4XEVHl/hCRWeWOFJFVrhyRWeUuGpFZ5W4ekVnlHhmRWeVeHZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4aDCoMKwwqjCuMKkwrTCrMK8wqLCssKqwrrCpsK2wq7CvsK7K7ynwnsrvK/C+yt8oMIHK3yowocrfKTCRyt8rMLHK3yiwicrfKrCpyt8psJnK3yuwucrfKHCFyt8qcKXK3ylwlcrfK3C1yt8o8I3K3yrwrcrfKfCdyt8r8L3K/ygwg8r/KjCjyv8pMJPK/ysws8r/KLCLyv8qsKvK/ymwm8r/K7C7yv8ocIfK/ypwp8r/KXCXyv8rcLfK/yjwj8r/KvCvyv8p8J/K/yvwuEVjqhwZIWjKhxd4ZgKx1Y4pMZxahy3xvFqHL/GCWqcsMaJapy4xklqHFrjpDVOVuPkNU5R45Q1TlXj1DVOU+O0NU5X4/Q1zlDjjDXOVOPMNc5S46w1zlbj7DXOUeOcNc5V49w1zlPjvDXOV+P8NS5Q44I1LlTjwjUuUuOwGhetcbEaF69xiRqXrJEal6px6RqXqXHZGpercfkaV6hxxRpXqnHlGlepcdUaV6tx9RrXqHHNGteqce0a16lx3RrXq3H9GjeoccMaN6px4xo3qXHTGjercfMat6hxyxq3qnHrGrepcdsat6tx+xp3qHHHGneqcecad6lx1xp3q3H3Gveocc8a96px7xr3qXHfGvercf8aD6jxwBoPqvHgGg+p8dAaD6vx8BqPqPHIGo+q8egaj6nx2BqPq/H4Gk+o8cQaT6rRGk+u8ZQaT63xtBpPr/GMGs+s8awaz67xnBrPrfG8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhoHNQY1hjVGNcY1JjWmNWY15jUWNZY1VjXWNTY1tjV2NfY13l3jPTXeW+N9Nd5f4wM1PljjQzU+XOMjNT5a42M1Pl7jEzU+WeNTNT5d4zM1PlvjczU+X+MLNb5Y40s1vlzjKzW+WuNrNb5e4xs1vlnjWzW+XeM7Nb5b43s1vl/jBzV+WONHNX5c4yc1flrjZzV+XuMXNX5Z41c1fl3jNzV+W+N3NX5f4w81/ljjTzX+XOMvNf5a4281/l7jHzX+WeNfNf5d4z81/lvjfzUOr3FEjSNrHFXj6BrH1Di2xiENjtPguA2O1+D4DU7Q4IQNTtTgxA1O0uDQBidtcLIGJ29wiganbHCqBqducJoGp21wuganb3CGBmdscKYGZ25wlgZnbXC2BmdvcI4G52xwrgbnbnCeBudtcL4G529wgQYXbHChBhducJEGhzW4aIOLNbh4g0s0uGSDNLhUg0s3uEyDyza4XIPLN7hCgys2uFKDKze4SoOrNrhag6s3uEaDaza4VoNrN7hOg+s2uF6D6ze4QYMbNrhRgxs3uEmDmza4WYObN7hFg1s2uFWDWze4TYPbNrhdg9s3uEODOza4U4M7N7hLg7s2uFuDuze4R4N7NrhXg3s3uE+D+za4X4P7N3hAgwc2eFCDBzd4SIOHNnhYg4c3eESDRzZ4VINHN3hMg8c2eFyDxzd4QoMnNnhSgzZ4coOnNHhqg6c1eHqDZzR4ZoNnNXh2g+c0eG6D5zV4foMXNHhhgxc1eHGDlzR4aYOXNXh5g1c0eGWDVzV4dYPXNHhtg9c1eH2DNzR4Y4M3NXhzg7c0eGuDtzV4e4N3NHhng3c1OGgwaDBsMGowbjBpMG0wazBvsGiwbLBqsG6wabBtsGuwb/DuBu9p8N4G72vw/gYfaPDBBh9q8OEGH2nw0QYfa/DxBp9o8MkGn2rw6QafafDZBp9r8PkGX2jwxQZfavDlBl9p8NUGX2vw9QbfaPDNBt9q8O0G32nw3Qbfa/D9Bj9o8MMGP2rw4wY/afDTBj9r8PMGv2jwywa/avDrBr9p8NsGv2vw+wZ/aPDHBn9q8OcGf2nw1wZ/a/D3Bv9o8M8G/2rw7wb/afDfBv9rcHiDIxoc2eCoBkc3OKbBsQ0OaXGcFsdtcbwWx29xghYnbHGiFiducZIWh7Y4aYuTtTh5i1O0OGWLU7U4dYvTtDhti9O1OH2LM7Q4Y4sztThzi7O0OGuLs7U4e4tztDhni3O1OHeL87Q4b4vztTh/iwu0uGCLC7W4cIuLtDisxUVbXKzFxVtcosUlW6TFpVpcusVlWly2xeVaXL7FFVpcscWVWly5xVVaXLXF1VpcvcU1WlyzxbVaXLvFdVpct8X1Wly/xQ1a3LDFjVrcuMVNWty0xc1a3LzFLVrcssWtWty6xW1a3LbF7VrcvsUdWtyxxZ1a3LnFXVrctcXdWty9xT1a3LPFvVrcu8V9Wty3xf1a3L/FA1o8sMWDWjy4xUNaPLTFw1o8vMUjWjyyxaNaPLrFY1o8tsXjWjy+xRNaPLHFk1q0xZNbPKXFU1s8rcXTWzyjxTNbPKvFs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxatbvKbFa1u8rsXrW7yhxRtbvKnFm1u8pcVbW7ytxdtbvKPFO1u8q8VBi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32Ld7d4T4v3tnhfi/e3+ECLD7b4UIsPt/hIi4+2+FiLj7f4RItPtvhUi0+3+EyLz7b4XIvPt/hCiy+2+FKLL7f4Souvtvhai6+3+EaLb7b4Votvt/hOi++2+F6L77f4QYsftvhRix+3+EmLn7b4WYuft/hFi1+2+FWLX7f4TYvftvhdi9+3+EOLP7b4U4s/t/hLi7+2+FuLv7f4R4t/tvhXi3+3+E+L/7b4X4vDWxzR4sgWR7U4usUxLY5tcUiH43Q4bofjdTh+hxN0OGGHE3U4cYeTdDi0w0k7nKzDyTucosMpO5yqw6k7nKbDaTucrsPpO5yhwxk7nKnDmTucpcNZO5ytw9k7nKPDOTucq8O5O5ynw3k7nK/D+TtcoMMFO1yow4U7XKTDYR0u2uFiHS7e4RIdLtkhHS7V4dIdLtPhsh0u1+HyHa7Q4YodrtThyh2u0uGqHa7W4eodrtHhmh2u1eHaHa7T4bodrtfh+h1u0OGGHW7U4cYdbtLhph1u1uHmHW7R4ZYdbtXh1h1u0+G2HW7X4fYd7tDhjh3u1OHOHe7S4a4d7tbh7h3u0eGeHe7V4d4d7tPhvh3u1+H+HR7Q4YEdHtThwR0e0uGhHR7W4eEdHtHhkR0e1eHRHR7T4bEdHtfh8R2e0OGJHZ7UoR2e3OEpHZ7a4Wkdnt7hGR2e2eFZHZ7d4TkdntvheR2e3+EFHV7Y4UUdXtzhJR1e2uFlHV7e4RUdXtnhVR1e3eE1HV7b4XUdXt/hDR3e2OFNHd7c4S0d3trhbR3e3uEdHd7Z4V0dDjoMOgw7jDqMO0w6TDvMOsw7LDosO6w6rDtsOmw77DrsO7y7w3s6vLfD+zq8v8MHOnyww4c6fLjDRzp8tMPHOny8wyc6fLLDpzp8usNnOny2w+c6fL7DFzp8scOXOny5w1c6fLXD1zp8vcM3Onyzw7c6fLvDdzp8t8P3Ony/ww86/LDDjzr8uMNPOvy0w886/LzDLzr8ssOvOvy6w286/LbD7zr8vsMfOvyxw586/LnDXzr8tcPfOvy9wz86/LPDvzr8u8N/Ovy3w/86HN7hiA5Hdjiqw9EdjulwbIdDehynx3F7HK/H8XucoMcJe5yox4l7nKTHoT1O2uNkPU7e4xQ9TtnjVD1O3eM0PU7b43Q9Tt/jDD3O2ONMPc7c4yw9ztrjbD3O3uMcPc7Z41w9zt3jPD3O2+N8Pc7f4wI9LtjjQj0u3OMiPQ7rcdEeF+tx8R6X6HHJHulxqR6X7nGZHpftcbkel+9xhR5X7HGlHlfucZUeV+1xtR5X73GNHtfsca0e1+5xnR7X7XG9HtfvcYMeN+xxox437nGTHjftcbMeN+9xix637HGrHrfucZset+1xux6373GHHnfscaced+5xlx537XG3HnfvcY8e9+xxrx737nGfHvftcb8e9+/xgB4P7PGgHg/u8ZAeD+3xsB4P7/GIHo/s8agej+7xmB6P7fG4Ho/v8YQeT+zxpB7t8eQeT+nx1B5P6/H0Hs/o8cwez+rx7B7P6fHcHs/r8fweL+jxwh4v6vHiHi/p8dIeL+vx8h6v6PHKHq/q8eoer+nx2h6v6/H6Hm/o8cYeb+rx5h5v6fHWHm/r8fYe7+jxzh7v6nHQY9Bj2GPUY9xj0mPaY9Zj3mPRY9lj1WPdY9Nj22PXY9/j3T3e0+P/JJKDEp4HwyiTprZtu90aqW3bdpsaW9u27ZTvY6O2bdtKm+TMd/69gZ3Z2WiA8QCTAaYDzAaYD7AYYDnAaoD1AJsBtgPsBtgP8IkBPjnApwb49ACfGeCzA3xugM8P8IUBvjjAlwb48gBfGeCrA3xtgK8P8I0BvjnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeCoAf47wP8GOHqAYwY4doBDAhwa4DgBDgtw3ADHC3D8ACcIcMIAJwpw4gAnCXDSACcLcPIApwhwygCnCnDqAKcJcNoApwtw+gBnCHDGAGcKcOYAZwlw1gBnC3D2AOcIcM4A5wpw7gDnCXDeAOcLcP4AFwhwwQAXCnDhABcJcNEAFwtw8QCXCHDJAAlwqQCXDnCZAJcNcLkAlw9whQBXDHClAFcOcHiAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBTgiwMMDPCLAIwM8KsCjAzwmwGMDPC7A4wM8IUADPDHAkwI8OcBTAjw1wNMCPD3AMwI8M8CzAjw7wHMCPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7ArwzwLsCvDvAewK8N8D7Arw/wAcCfDDAkQE+FODDAT4S4KMBPhbg4wEOAgwCDAOMAowDTAJMA8wCzAMsAiwDrAKsA2wCbAPsAuwDfCLAJwN8KsCnA3wmwGcDfC7A5wN8IcAXA3wpwJcDfCXAVwN8LcDXA3wjwDcDfCvAtwN8J8B3A3wvwPcD/CDADwP8KMCPA/wkwE8D/CzAzwP8IsAvA/wqwK8D/CbAbwP8LsDvA/whwB8D/CnAnwP8JcBfA/wtwN8D/CPAPwP8K8C/A/wnwFEB/hvgfwGODnBMgGMDHBLi0BDHCXFYiOOGOF6I44c4QYgThjhRiBOHOEmIk4Y4WYiThzhFiFOGOFWIU4c4TYjThjhdiNOHOEOIM4Y4U4gzhzhLiLOGOFuIs4c4R4hzhjhXiHOHOE+I84Y4X4jzh7hAiAuGuFCIC4e4SIiLhrhYiIuHuESIS4ZIiEuFuHSIy4S4bIjLhbh8iCuEuGKIK4W4cojDQ1wlxFVDXC3E1UNcI8Q1Q1wrxLVDXCfEdUNcL8T1Q9wgxA1D3CjEjUPcJMRNQ9wsxM1D3CLELUPcKsStQ9wmxG1D3C7E7UPcIcQdQ9wpxJ1D3CXEXUPcLcTdQ9wjxD1D3CvEvUPcJ8R9Q9wvxP1DPCDEA0M8KMSDQzwkxENDPCzEESEeHuIRIR4Z4lEhHh3iMSEeG+JxIR4f4gkhGuKJIZ4U4skhnhLiqSGeFuLpIZ4R4pkhnhXi2SGeE+K5IZ4X4vkhXhDihSFeFOLFIV4S4qUhXhbi5SFeEeKVIV4V4tUhXhPitSFeF+L1Id4Q4o0h3hTizSHeEuKtId4W4u0h3hHinSHeFeLdId4T4r0h3hfi/SE+EOKDIY4M8aEQHw7xkRAfDfGxEB8PcRBiEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH+ITIT4Z4lMhPh3iMyE+G+JzIT4f4gshvhjiSyG+HOIrIb4a4mshvh7iGyG+GeJbIb4d4jshvhvieyG+H+IHIX4Y4kchfhziJyF+GuJnIX4e4hchfhniVyF+HeI3IX4b4nchfh/iDyH+GOJPIf4c4i8h/hribyH+HuIfIf4Z4l8h/h3iPyGOCvHfEP8LcXSIY0IcG+KQCIdGOE6EwyIcN8LxIhw/wgkinDDCiSKcOMJJIpw0wskinDzCKSKcMsKpIpw6wmkinDbC6SKcPsIZIpwxwpkinDnCWSKcNcLZIpw9wjkinDPCuSKcO8J5Ipw3wvkinD/CBSJcMMKFIlw4wkUiXDTCxSJcPMIlIlwyQiJcKsKlI1wmwmUjXC7C5SNcIcIVI1wpwpUjHB7hKhGuGuFqEa4e4RoRrhnhWhGuHeE6Ea4b4XoRrh/hBhFuGOFGEW4c4SYRbhrhZhFuHuEWEW4Z4VYRbh3hNhFuG+F2EW4f4Q7/azlsyP9n5wh3iXDXCHeLcPcI94hwzwj3inDvCPeJcN8I94tw/wgPiPDACA+K8OAID4nw0AgPi3BEhIdHeESER0Z4VIRHR3hMhMdGeFyEx0d4QoRGeGKEJ0V4coSnRHhqhKdFeHqEZ0R4ZoRnRXh2hOdEeG6E50V4foQXRHhhhBdFeHGEl0R4aYSXRXh5hFdEeGWEV0V4dYTXRHhthNdFeH2EN0R4Y4Q3RXhzhLdEeGuEt0V4e4R3RHhnhHdFeHeE90R4b4T3RXh/hA9E+GCEIyN8KMKHI3wkwkcjfCzCxyMcRBhEGEYYRRhHmESYRphFmEdYRFhGWEVYR9hE2EbYRdhH+ESET0b4VIRPR/hMhM9G+FyEz0f4QoQvRvhShC9H+EqEr0b4WoSvR/hGhG9G+FaEb0f4ToTvRvhehO9H+EGEH0b4UYQfR/hJhJ9G+FmEn0f4RYRfRvhVhF9H+E2E30b4XYTfR/hDhD9G+FOEP0f4S4S/RvhbhL9H+EeEf0b4V4R/R/hPhKOiof834BAcHeGYCMdGOCTGoTGOE+OwGMeNcbwYx49xghgnjHGiGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePcYkYl4yRGJeKcekYl4lx2RiXi3H5GFeIccUYV4px5RiHx7hKjKvGuFqMq8e4RoxrxrhWjGvHuE6M68a4Xozrx7hBjBvGuFGMG8e4SYybxrhZjJvHuEWMW8a4VYxbx7hNjNvGuF2M28e4Q4w7xrhTjDvHuEuMu8a4W4y7x7hHjHvGuFeMe8e4T4z7xrhfjPvHeECMB8Z4UIwHx3hIjIfGeFiMI2I8PMYjYjwyxqNiPDrGY2I8NsbjYjw+xhNiNMYTYzwpxpNjPCXGU2M8LcbTYzwjxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCbGa2O8LsbrY7whxhtjvCnGm2O8JcZbY7wtxttjvCPGO2O8K8a7Y7wnxntjvC/G+2N8IMYHYxwZ40MxPhzjIzE+GuNjMT4e4yDGIMYwxijGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsYnYnwyxqdifDrGZ2J8NsbnYnw+xhdifDHGl2J8OcZXYnw1xtdifD3GN2J8M8a3Ynw7xndifDfG92J8P8YPYvwwxo9i/DjGT2L8NMbPYvw8xi9i/DLGr2L8OsZvYvw2xu9i/D7GH2L8McafYvw5xl9i/DXG32L8PcY/Yvwzxr9i/DvGf2IcFeO/Mf4X4+gYx8Q4NsYhCQ5NcJwEhyU4boLjJTh+ghMkOGGCEyU4cYKTJDhpgpMlOHmCUyQ4ZYJTJTh1gtMkOG2C0yU4fYIzJDhjgjMlOHOCsyQ4a4KzJTh7gnMkOGeCcyU4d4LzJDhvgvMlOH+CCyS4YIILJbhwgoskuGiCiyW4eIJLJLhkgiS4VIJLJ7hMgssmuFyCyye4QoIrJrhSgisnODzBVRJcNcHVElw9wTUSXDPBtRJcO8F1Elw3wfUSXD/BDRLcMMGNEtw4wU0S3DTBzRLcPMEtEtwywa0S3DrBbRLcNsHtEtw+wR0S3DHBnRLcOcFdEtw1wd0S3D3BPRLcM8G9Etw7wX0S3DfB/RLcP8EDEjwwwYMSPDjBQxI8NMHDEhyR4OEJHpHgkQkeleDRCR6T4LEJHpfg8QmekKAJnpjgSQmenOApCZ6a4GkJnp7gGQmemeBZCZ6d4DkJnpvgeQmen+AFCV6Y4EUJXpzgJQlemuBlCV6e4BUJXpngVQleneA1CV6b4HUJXp/gDQnemOBNCd6c4C0J3prgbQnenuAdCd6Z4F0J3p3gPQnem+B9Cd6f4AMJPpjgyAQfSvDhBB9J8NEEH0vw8QQHCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYJPpHgkwk+leDTCT6T4LMJPpfg8wm+kOCLCb6U4MsJvpLgqwm+luDrCb6R4JsJvpXg2wm+k+C7Cb6X4PsJfpDghwl+lODHCX6S4KcJfpbg5wl+keCXCX6V4NcJfpPgtwl+l+D3Cf6Q4I8J/pTgzwn+kuCvCf6W4O8J/pHgnwn+leDfCf6T4KgE/03wvwRHJzgmwbEJDklx6IiRw+dIcViK46Y4XorjpzhBihOmOFGKE6c4SYqTpjhZipOnOEWKU6Y4VYpTpzhNitOmOF2K06c4Q4ozpjhTijOnOEuKs6Y4W4qzp/g/55wpzpXi3CnOk+K8Kc6X4vwpLpDigikulOLCKS6S4qIpLpbi4ikukeKSKZLiUikuneIyKS6b4nIpLp/iCimumOJKKa6c4vAUV0lx1RRXS3H1FNdIcc0U10px7RTXSXHdFNdLcf0UN0hxwxQ3SnHjFDdJcdMUN0tx8xS3SHHLFLdKcesUt0lx2xS3S3H7FHdIcccUd0px5xR3SXHXFHdLcfcU90hxzxT3SnHvFPdJcd8U90tx/xQPSPHAFA9K8eAUD0nx0BQPS3FEioeneESKR6Z4VIpHp3hMisemeFyKx6d4QoqmeGKKJ6V4coqnpHhqiqeleHqKZ6R4ZopnpXh2iuekeG6K56V4fooXpHhhiheleHGKl6R4aYqXpXh5ilekeGWKV6V4dYrXpHhtiteleH2KN6R4Y4o3pXhzirekeGuKt6V4e4p3pHhnineleHeK96R4b4r3pXh/ig+k+GCKI1N8KMWHU3wkxUdTfCzFx1McpBikGKYYpRinmKSYppilmKdYpFimWKVYp9ik2KbYpdin+ESKT6b4VIpPp/hMis+m+FyKz6f4QoovpvhSii+n+EqKr6b4Woqvp/hGim+m+FaKb6f4Torvpvheiu+n+EGKH6b4UYofp/hJip+m+FmKn6f4RYpfpvhVil+n+E2K36b4XYrfp/hDij+m+FOKP6f4S4q/pvhbir+n+EeKf6b4V4p/p/hPiqNS/DfF/1IcneKYFMemOCTDoRmOk+GwDMfNcLwMx89wggwnzHCiDCfOcJIMJ81wsgwnz3CKDKfMcKoMp85wmgynzXC6DKfPcIYMZ8xwpgxnznCWDGfNcLYMZ89wjgznzHCuDOfOcJ4M581wvgznz3CBDBfMcKEMF85wkQwXzXCxDBfPcIkMl8yQDJfKcOkMl8lw2QyXy3D5DFfIcMUMV8pw5QyHZ7hKhqtmuFqGq2e4RoZrZrhWhmtnuE6G62a4XobrZ7hBhhtmuFGGG2e4SYabZrhZhptnuEWGW2a4VYZbZ7hNhttmuF2G22e4Q4Y7ZrhThjtnuEuGu2a4W4a7Z7hHhntmuFeGe2e4T4b7ZrhfhvtneECGB2Z4UIYHZ3hIhodmeFiGIzI8PMMjMjwyw6MyPDrDYzI8NsPjMjw+wxMyNMMTMzwpw5MzPCXDUzM8LcPTMzwjwzMzPCvDszM8J8NzMzwvw/MzvCDDCzO8KMOLM7wkw0szvCzDyzO8IsMrM7wqw6szvCbDazO8LsPrM7whwxszvCnDmzO8JcNbM7wtw9szvCPDOzO8K8O7M7wnw3szvC/D+zN8IMMHMxyZ4UMZPpzhIxk+muFjGT6e4SDDIMMwwyjDOMMkwzTDLMM8wyLDMsMqwzrDJsM2wy7DPsMnMnwyw6cyfDrDZzJ8NsPnMnw+wxcyfDHDlzJ8OcNXMnw1w9cyfD3DNzJ8M8O3Mnw7w3cyfDfD9zJ8P8MPMvwww48y/DjDTzL8NMPPMvw8wy8y/DLDrzL8OsNvMvw2w+8y/D7DHzL8McOfMvw5w18y/DXD3zL8PcM/Mvwzw78y/DvDfzIcleG/Gf6X4egMx2Q4NsMhOQ7NcZwch+U4bo7j5Th+jhPkOGGOE+U4cY6T5DhpjpPlOHmOU+Q4ZY5T5Th1jtPkOG2O0+U4fY4z5DhjjjPlOHOOs+Q4a46z5Th7jnPkOGeOc+U4d47z5DhvjvPlOH+OC+S4YI4L5bhwjovkuGiOi+W4eI5L5LhkjuS4VI5L57hMjsvmuFyOy+e4Qo4r5rhSjivnODzHVXJcNcfVclw9xzVyXDPHtXJcO8d1clw3x/VyXD/HDXLcMMeNctw4x01y3DTHzXLcPMctctwyx61y3DrHbXLcNsftctw+xx1y3DHHnXLcOcddctw1x91y3D3HPXLcM8e9ctw7x31y3DfH/XLcP8cDcjwwx4NyPDjHQ3I8NMfDchyR4+E5HpHjkTkelePROR6T47E5Hpfj8TmekKM5npjjSTmenOMpOZ6a42k5np7jGTmemeNZOZ6d4zk5npvjeTmen+MFOV6Y40U5XpzjJTlemuNlOV6e4xU5XpnjVTleneM1OV6b43U5Xp/jDTnemONNOd6c4y053prjbTnenuMdOd6Z41053p3jPTnem+N9Od6f4wM5PpjjyBwfyvHhHB/J8dEcH8vx8RwHOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY5PpHjkzk+lePTOT6T47M5Ppfj8zm+kOOLOb6U48s5vpLjqzm+luPrOb6R45s5vpXj2zm+k+O7Ob6X4/s5fpDjhzl+lOPHOX6S46c5fpbj5zl+keOXOX6V49c5fpPjtzl+l+P3Of6Q4485/pTjzzn+kuOvOf6W4+85/pHjnzn+lePfOf6T46gc/83xvxxH5zgmx7E5DilwaIHjFDiswHELHK/A8QucoMAJC5yowIkLnKTASQucrMDJC5yiwCkLnKrAqQucpsBpC5yuwOkLnKHAGQucqcCZC5ylwFkLnK3A2Quco8A5C5yrwLkLnKfAeQucr8D5C1ygwAULXKjAhQtcpMBFC1yswMULXKLAJQukwKUKXLrAZQpctsDlCly+wBUKXLHAlQpcucDhBa5S4KoFrlbg6gWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmBW5W4OYFblHglgVuVeDWBW5T4LYFblfg9gXuUOCOBe5U4M4F7lLgrgXuVuDuBe5R4J4F7lXg3gXuU+C+Be5X4P4FHlDggQUeVODBBR5S4KEFHlbgiAIPL/CIAo8s8KgCjy7wmAKPLfC4Ao8v8IQCLfDEAk8q8OQCTynw1AJPK/D0As8o8MwCzyrw7ALPKfDcAs8r8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCrynw2gKvK/D6Am8o8MYCbyrw5gJvKfDWAm8r8PYC7yjwzgLvKvDuAu8p8N4C7yvw/gIfKPDBAkcW+FCBDxf4SIGPFvhYgY8XOCgwKDAsMCowLjApMC0wKzAvsCiwLLAqsC6wKbAtsCuwL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyzwqwK/LvCbAr8t8LsCvy/whwJ/LPCnAn8u8JcCfy3wtwJ/L/CPAv8s8K8C/y7wnwJHFfhvgf8VOLrAMQWOLXBIiUNLHKfEYSWOW+J4JY5f4gQlTljiRCVOXOIkJU5a4mQlTl7iFCVOWeJUJU5d4jQlTlvidCVOX+IMJc5Y4kwlzlziLCXOWuJsJc5e4hwlzlniXCXOXeI8Jc5b4nwlzl/iAiUuWOJCJS5c4iIlLlriYiUuXuISJS5ZIiUuVeLSJS5T4rIlLlfi8iWuUOKKJa5U4solDi9xlRJXLXG1ElcvcY0S1yxxrRLXLnGdEtctcb0S1y9xgxI3LHGjEjcucZMSNy1xsxI3L3GLErcscasSty5xmxK3LXG7ErcvcYcSdyxxpxJ3LnGXEnctcbcSdy9xjxL3LHGvEvcucZ8S9y1xvxL3L/GAEg8s8aASDy7xkBIPLfGwEkeUeHiJR5R4ZIlHlXh0iceUeGyJx5V4fIknlGiJJ5Z4Uoknl3hKiaeWeFqJp5d4RolnlnhWiWeXeE6J55Z4Xonnl3hBiReWeFGJF5d4SYmXlnhZiZeXeEWJV5Z4VYlXl3hNideWeF2J15d4Q4k3lnhTiTeXeEuJt5Z4W4m3l3hHiXeWeFeJd5d4T4n3lnhfifeX+ECJD5Y4ssSHSny4xEdKfLTEx0p8vMRBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2JT5T4ZIlPlfh0ic+U+GyJz5X4fIkvlPhiiS+V+HKJr5T4aomvlfh6iW+U+GaJb5X4donvlPhuie+V+H6JH5T4YYkflfhxiZ+U+GmJn5X4eYlflPhliV+V+HWJ35T4bYnflfh9iT+U+GOJP5X4c4m/lPhrib+V+HuJf5T4Z4l/lfh3if+UOKrEf0v8r8TRJY4pcWyJQyocWuE4FQ6rcNwKx6tw/AonqHDCCieqcOIKJ6lw0gonq3DyCqeocMoKp6pw6gqnqXDaCqercPoKZ6hwxgpnqnDmCmepcNYKZ6tw9grnqHDOCueqcO4K56lw3grnq3D+CheocMEKF6pw4QoXqXDRChercPEKl6hwyQqpcKkKl65wmQqXrXC5CpevcIUKV6xwpQpXrnB4hatUuGqFq1W4eoVrVLhmhWtVuHaF61S4boXrVbh+hRtUuGGFG1W4cYWbVLhphZtVuHmFW1S4ZYVbVbh1hdtUuG2F21W4fYU7VLhjhTtVuHOFu1S4a4W7Vbh7hXtUuGeFe1W4d4X7VLhvhftVuH+FB1R4YIUHVXhwhYdUeGiFh1U4osLDKzyiwiMrPKrCoys8psJjKzyuwuMrPKFCKzyxwpMqPLnCUyo8tcLTKjy9wjMqPLPCsyo8u8JzKjy3wvMqPL/CCyq8sMKLKry4wksqvLTCyyq8vMIrKryywqsqvLrCayq8tsLrKry+whsqvLHCmyq8ucJbKry1wtsqvL3COyq8s8K7Kry7wnsqvLfC+yq8v8IHKnywwpEVPlThwxU+UuGjFT5W4eMVDioMKgwrjCqMK0wqTCvMKswrLCosK6wqrCtsKmwr7CrsK3yiwicrfKrCpyt8psJnK3yuwucrfKHCFyt8qcKXK3ylwlcrfK3C1yt8o8I3K3yrwrcrfKfCdyt8r8L3K/ygwg8r/KjCjyv8pMJPK/ysws8r/KLCLyv8qsKvK/ymwm8r/K7C7yv8ocIfK/ypwp8r/KXCXyv8rcLfK/yjwj8r/KvCvyv8p8JRFf5b4X8Vjq5wTIVjKxxS49Aax6lxWI3j1jhejePXOEGNE9Y4UY0T1zhJjZPWOFmNk9c4RY1T1jhVjVPXOE2N09Y4XY3T1zhDjTPWOFONM9c4S42z1jhbjbPXOEeNc9Y4V41z1zhPjfPWOF+N89e4QI0L1rhQjQvXuEiNi9a4WI2L17hEjUvWSI1L1bh0jcvUuGyNy9W4fI0r1LhijSvVuHKNw2tcpcZVa1ytxtVrXKPGNWtcq8a1a1ynxnVrXK/G9WvcoMYNa9yoxo1r3KTGTWvcrMbNa9yixi1r3KrGrWvcpsZta9yuxu1r3KHGHWvcqcada9ylxl1r3K3G3Wvco8Y9a9yrxr1r3KfGfWvcr8b9azygxgNrPKjGg2s8pMZDazysxhE1Hl7jETUeWeNRNR5d4zE1HlvjcTUeX+MJNVrjiTWeVOPJNZ5S46k1nlbj6TWeUeOZNZ5V49k1nlPjuTWeV+P5NV5Q44U1XlTjxTVeUuOlNV5W4+U1XlHjlTVeVePVNV5T47U1Xlfj9TXeUOONNd5U48013lLjrTXeVuPtNd5R45013lXj3TXeU+O9Nd5X4/01PlDjgzWOrPGhGh+u8ZEaH63xsRofr3FQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/jEzU+WeNTNT5d4zM1PlvjczU+X+MLNb5Y40s1vlzjKzW+WuNrNb5e4xs1vlnjWzW+XeM7Nb5b43s1vl/jBzV+WONHNX5c4yc1flrjZzV+XuMXNX5Z41c1fl3jNzV+W+N3NX5f4w81/ljjTzX+XOMvNf5a4281/l7jHzX+WeNfNf5d4z81jqrx3xr/q3F0jWNqHFvjkAaHNjhOg8MaHLfB8Rocv8EJGpywwYkanLjBSRqctMHJGpy8wSkanLLBqRqcusFpGpy2wekanL7BGRqcscGZGpy5wVkanLXB2RqcvcE5GpyzwbkanLvBeRqct8H5Gpy/wQUaXLDBhRpcuMFFGly0wcUaXLzBJRpcskEaXKrBpRtcpsFlG1yuweUbXKHBFRtcqcGVGxze4CoNrtrgag2u3uAaDa7Z4FoNrt3gOg2u2+B6Da7f4AYNbtjgRg1u3OAmDW7a4GYNbt7gFg1u2eBWDW7d4DYNbtvgdg1u3+AODe7Y4E4N7tzgLg3u2uBuDe7e4B4N7tngXg3u3eA+De7b4H4N7t/gAQ0e2OBBDR7c4CENHtrgYQ2OaPDwBo9o8MgGj2rw6AaPafDYBo9r8PgGT2jQBk9s8KQGT27wlAZPbfC0Bk9v8IwGz2zwrAbPbvCcBs9t8LwGz2/wggYvbPCiBi9u8JIGL23wsgYvb/CKBq9s8KoGr27wmgavbfC6Bq9v8IYGb2zwpgZvbvCWBm9t8LYGb2/wjgbvbPCuBu9u8J4G723wvgbvb/CBBh9scGSDDzX4cIOPNPhog481+HiDgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7Bp9o8MkGn2rw6QafafDZBp9r8PkGX2jwxQZfavDlBl9p8NUGX2vw9QbfaPDNBt9q8O0G32nw3Qbfa/D9Bj9o8MMGP2rw4wY/afDTBj9r8PMGv2jwywa/avDrBr9p8NsGv2vw+wZ/aPDHBn9q8OcGf2nw1wZ/a/D3Bv9o8M8G/2rw7wb/aXBUg/82+F+Doxsc0+DYBoe0OLTFcVoc1uK4LY7X4vgtTtDihC1O1OLELU7S4qQtTtbi5C1O0eKULU7V4tQtTtPitC1O1+L0Lc7Q4owtztTizC3O0uKsLc7W4uwtztHinC3O1eLcLc7T4rwtztfi/C0u0OKCLS7U4sItLtLioi0u1uLiLS7R4pIt0uJSLS7d4jItLtvici0u3+IKLa7Y4kotrtzi8BZXaXHVFldrcfUW12hxzRbXanHtFtdpcd0W12tx/RY3aHHDFjdqceMWN2lx0xY3a3HzFrdoccsWt2px6xa3aXHbFrdrcfsWd2hxxxZ3anHnFndpcdcWd2tx9xb3aHHPFvdqce8W92lx3xb3a3H/Fg9o8cAWD2rx4BYPafHQFg9rcUSLh7d4RItHtnhUi0e3eEyLx7Z4XIvHt3hCi7Z4YosntXhyi6e0eGqLp7V4eotntHhmi2e1eHaL57R4bovntXh+ixe0eGGLF7V4cYuXtHhpi5e1eHmLV7R4ZYtXtXh1i9e0eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLd7V4d4v3tHhvi/e1eH+LD7T4YIsjW3yoxYdbfKTFR1t8rMXHWxy0GLQYthi1GLeYtJi2mLWYt1i0WLZYtVi32LTYtti12Lf4RItPtvhUi0+3+EyLz7b4XIvPt/hCiy+2+FKLL7f4Souvtvhai6+3+EaLb7b4Votvt/hOi++2+F6L77f4QYsftvhRix+3+EmLn7b4WYuft/hFi1+2+FWLX7f4TYvftvhdi9+3+EOLP7b4U4s/t/hLi7+2+FuLv7f4R4t/tvhXi3+3+E+Lo1r8t8X/Whzd4pgWx7Y4pMOhHY7T4bAOx+1wvA7H73CCDifscKIOJ+5wkg4n7XCyDifvcIoOp+xwqg6n7nCaDqftcLoOp+9whg5n7HCmDmfucJYOZ+1wtg5n73CODufscK4O5+5wng7n7XC+DufvcIEOF+xwoQ4X7nCRDhftcLEOF+9wiQ6X7JAOl+pw6Q6X6XDZDpfrcPkOV+hwxQ5X6nDlDod3uEqHq3a4Woerd7hGh2t2uFaHa3e4Tofrdrheh+t3uEGHG3a4UYcbd7hJh5t2uFmHm3e4RYdbdrhVh1t3uE2H23a4XYfbd7hDhzt2uFOHO3e4S4e7drhbh7t3uEeHe3a4V4d7d7hPh/t2uF+H+3d4QIcHdnhQhwd3eEiHh3Z4WIcjOjy8wyM6PLLDozo8usNjOjy2w+M6PL7DEzq0wxM7PKnDkzs8pcNTOzytw9M7PKPDMzs8q8OzOzynw3M7PK/D8zu8oMMLO7yow4s7vKTDSzu8rMPLO7yiwys7vKrDqzu8psNrO7yuw+s7vKHDGzu8qcObO7ylw1s7vK3D2zu8o8M7O7yrw7s7vKfDezu8r8P7O3ygwwc7HNnhQx0+3OEjHT7a4WMdPt7hoMOgw7DDqMO4w6TDtBs7JOsw77DosOyw6rDusOmw7bDrsO/wiQ6f7PCpDp/u8JkOn+3wuQ6f7/CFDl/s8KUOX+7wlQ5f7fC1Dl/v8I0O3+zwrQ7f7vCdDt/t8L0O3+/wgw4/7PCjDj/u8JMOP+3wsw4/7/CLDr/s8KsOv+7wmw6/7fC7Dr/v8IcOf+zwpw5/7vCXDn/t8LcOf+/wjw7/7PCvDv/u8J8OR3X4b4f/dTi6wzEdju1wSI9Dexynx2E9jtvjeD2O3+MEPU7Y40Q9TtzjJD1O2uNkPU7e4xQ9TtnjVD1O3eM0PU7b43Q9Tt/jDD3O2ONMPc7c4yw9ztrjbD3O3uMcPc7Z41w9zt3jPD3O2+N8Pc7f4wI9LtjjQj0u3OMiPS7a42I9Lt7jEj0u2SM9LtXj0j0u0+OyPS7X4/I9rtDjij2u1OPKPQ7vcZUeV+1xtR5X73GNHtfsca0e1+5xnR7X7XG9HtfvcYMeN+xxox437nGTHjftcbMeN+9xix637HGrHrfucZset+1xux6373GHHnfscaced+5xlx537XG3HnfvcY8e9+xxrx737nGfHvftcb8e9+/xgB4P7PGgHg/u8ZAeD+3xsB5H9Hh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/Rojyf2eFKPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOj+f2eF6P5/d4QY8X9nhRjxf3eEmPl/Z4WY+X93hFj1f2eFWPV/d4TY/X9nhdj9f3eEOPN/Z4U48393hLj7f2eFuPt/d4R4939nhXj3f3eE+P9/Z4X4/39/hAjw/2OLLHh3p8uMdHeny0x8d6fLzHQY//LwAA//9O1+w0") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="017c0f68", @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf2501000000000000000941000000140018fffffffc7564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x6880) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r6, 0x90000000000002, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000280)={@vsock={0x28, 0x0, 0x0, @my=0x0}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000000240), 0x42}, 0xa0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f00000001c0)=0x1bd2) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) name_to_handle_at(r7, &(0x7f0000000300)='./mnt\x00', &(0x7f0000001280)=ANY=[@ANYBLOB="1c00000081000000050000000000000000100000000000000c00000000000000fcffffff233edd8df4aeb9c08de222bde672501dd957f0c844bacbfebbf5b9a2d2b072a0b2ab2c217fd4beabcde29cd8acb17a2b8f9e7a079d4ad94e722d95072cba8d2da24cbe505c3358936acb2c31c4a78e2537b7c75ba266d1bbedbdf3476c28581709651a948b7de94436189993bb9ffc2b394ba6cc32fb30af196c3dec503f62fba86269efa2505dfa1dd85781c187b30a4c84e5de8f4daa6301da27fb666140eff70364902f125f25a25c9ba5d61652a99b08f077b1a4e2116cf3de57f55f1f5078764b263c4481ad6a2a9ee1e75a7ee3f5e9bc193911255577ef3f91dfd3daa9a31baec749289ec724f5464c2275121273a162e40a8585c5e0138f90c3f1cf8cb0d617d645fd30fb271fb4d650"], &(0x7f0000001500), 0x200) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000001180)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x101202, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f00000000c0)={0x9, r0}) 3.238811971s ago: executing program 3 (id=307): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2.875369833s ago: executing program 3 (id=308): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, 0x0}, 0x20) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0xfdff, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x2, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x20008010}, 0x18) 2.239800074s ago: executing program 3 (id=311): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)=""/53, 0xff, 0x35, 0x1, 0xc}, 0x28) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) (async) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r0, 0x20, &(0x7f0000000700)={&(0x7f0000000300)=""/203, 0xcb, 0x0, &(0x7f0000000680)=""/96, 0x60}}, 0x10) (async) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x202000) ioctl$CEC_ADAP_G_CAPS(r1, 0xc04c6100, &(0x7f0000000140)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e28362be85fde321f0010000700000003000000fdffffff00000000000000002e00"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000240)={0x14, {{0x29, 0x0, 0x3e000000, @remote, 0xfffffffc}}}, 0x88) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1.939300225s ago: executing program 0 (id=312): r0 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r1, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = inotify_init1(0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) migrate_pages(r0, 0xfffffffffffffff9, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x2) inotify_add_watch(r3, 0x0, 0xa4000960) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x6, 0x4f, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xa}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.926701709s ago: executing program 1 (id=313): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x3) prlimit64(r2, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7fdc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000840)={@ptr={0x66642a85, 0x1, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 1.674206518s ago: executing program 2 (id=314): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_ep_write(r0, 0xf, 0x53, &(0x7f0000000180)="be39800ee663698d824be9e4abacbbad5726e2a90a74e74c32fe7b0301aeec0ac1fe8d8c9a45e81646a6dded8928f598b8a9f5da593406aab89d090c8b335c683f5b659faa22b5719985277dcae05e8efd405e") syz_usb_connect$uac1(0x1, 0x100, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x8b, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x31}, [@selector_unit={0xa, 0x24, 0x5, 0x5, 0x4, "f472f75f5b"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x5, 0x2c, 0x8, 0x4, 0x8d}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x0, "f708"}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x0, 0x52, "63871d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x10, 0x0, 0x9, 'c'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x3, 0x33, 0x0, "2b3302", "1684"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0xff8, 0x6, 0x7}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6e, 0x4, 0x6, 0x4, "", "ab"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x38, 0x1, 0x87, 0x6, "0cb701", "d18eee"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xf4, 0x5, 0x4, {0x7, 0x25, 0x1, 0x8, 0xd, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x80, 0x5, "8b"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x6}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7f, 0x3, 0xf4, 0x8, "1316", '`H\v'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc0, 0x0, 0x2, 0x0, 0xfc}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x40, 0x6, 0x2, 0xa, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x5, 0xb, {0x7, 0x25, 0x1, 0x4, 0x9, 0x1}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x3, 0x4, 0xff, 0x20, 0x7f}, 0xf, &(0x7f0000000340)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xfc, 0x3, 0x5275}]}, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4ff}}, {0x52, &(0x7f00000003c0)=@string={0x52, 0x3, "265b216343bc0c04ef044a34bac1d8bd619d464f93de230d036f1d89d7339f873c1cc35976847a05103c099d5a1d17a5bf155c965f997fa3b63837a94071cb6d158876d316bfa7d106541bff14acb469"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42f}}, {0x65, &(0x7f00000004c0)=@string={0x65, 0x3, "af576414146d463588740d905d3c2b765d41b12137318a273b56e42b04e8dd667a5fac950527603f2165d39fb954ec5297120eacb421165258c44af022981987c3e7f11592557cbd4d0abf71d5cdbfdff96f37fb389668f7815e62b6054b166e3ca9b2"}}]}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "e1e78da0cc71508d", "a1586eda1a5539e3fe792189450c0914714439ae6e5d218253607e4c5500f1aa", "4f147c53", "454505f8c37670db"}, 0x38) (async, rerun: 64) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x5, 0x80, &(0x7f00000000c0)="e05e351645d42d826d5b3e8a71f7cca9874df2f2d4aaa17e91bdbd59c762c3d0ea1e33a5def2adc15e8bf9bfe38771754cd9f0469be385ab6c5d9cf6cb17e7bf2aced4c16a24c9be6659df37ebfd2644a4f5d854e04ab69789decd1d466e27703e7a193da809494f1dd7fc1483399a166578a7298159544479ee3445f1192e71"}) 1.604183038s ago: executing program 0 (id=315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0xffffff}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 1.599698671s ago: executing program 4 (id=316): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000280)=[{0x45, 0x1, 0x2, 0x7}, {0x60, 0x0, 0x0, 0x3f}, {0x0, 0x6}, {0x6}]}) 1.338037301s ago: executing program 4 (id=317): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x30, 0x1, 0x3, 0xfffff03d}, {0x6, 0x6, 0x0, 0x9}]}, 0x10) 1.239289812s ago: executing program 0 (id=318): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="900000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1.085030772s ago: executing program 1 (id=319): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 1.064333212s ago: executing program 4 (id=320): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r3, 0x6, 0x9fd, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x106}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKDISCARDZEROES(r3, 0x127c, &(0x7f0000000140)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2000000016000d002cbd7000bedbdf252f7c00000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) sendto$inet6(r0, &(0x7f00000004c0)='+', 0x1, 0x40011, 0x0, 0x0) 1.048895168s ago: executing program 0 (id=321): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r3, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 991.319252ms ago: executing program 3 (id=322): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000680)=@urb_type_iso={0x0, {0x7, 0x1}, 0x6, 0x40, &(0x7f0000000180), 0x0, 0x2, 0x0, 0x16, 0x7, 0x0, 0x0, [{0x1, 0x3ff, 0x8000}, {0x1, 0x1}, {0x101, 0x80000000, 0x9}, {0x4, 0x638f, 0xc}, {0x9, 0x4, 0x6}, {0x5, 0x2, 0x1}, {0xffffffff, 0x10, 0x3}, {0x7, 0x8, 0xb}, {0x8, 0x7, 0x3ff}, {0x6, 0x6, 0x9e8}, {0xf, 0xffffffd4, 0x7}, {0x4, 0xe9bb, 0x4}, {0x8, 0x0, 0x6}, {0xfffffff1, 0x5, 0xb7}, {0x9, 0xfffffff7, 0x383a}, {0x2800000, 0x3, 0x4}, {0x31, 0x4763, 0x1}, {0x7f, 0x3ff, 0x8}, {0xfffffff8, 0x8, 0x4}, {0x7, 0x6, 0x200}, {0xb999, 0x9, 0x9715}, {0x4, 0x9, 0x7f}]}) 964.238621ms ago: executing program 1 (id=323): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000005180061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x8, 0xff92, &(0x7f00000003c0)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x6}, 0xfffffe9a, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xffffffff}, 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x48) 788.363393ms ago: executing program 3 (id=324): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x97, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 730.387489ms ago: executing program 4 (id=325): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000040)={[{@debug}, {@jqfmt_vfsv0}, {@errors_continue}, {@debug}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") mount$overlay(0x0, 0x0, 0x0, 0xc, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000140)={0x1, 0x2, 0x0, 0xb, 0x100a}) pipe2(0x0, 0x80000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r1, &(0x7f0000000040), r0, 0x0, 0x800000000ff, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d007241301"], 0x0) 406.722831ms ago: executing program 0 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x800) (fail_nth: 7) 401.135671ms ago: executing program 1 (id=327): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf9, 0x80, 0xe, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x7, 0x8, 0xa}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x7, 0x8}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x0, 0x4, 0x2, 0x40, 0x67}, 0xf3, &(0x7f0000000080)={0x5, 0xf, 0xf3, 0x1, [@generic={0xee, 0x10, 0x1, "938c082a31da8b61ad3b0ab01322bed68a5ba1eb0ad138cc56c577916bf23f34c5d07c5753b76c4486a5f6d0aedae4bf63a2240eac8ce91e4f349bc00b0d9ca796bcfeea254623e4ba4a7b9c1bacd744ad0e4e711ad3019e9645a0b0345f521661ae1e4cceb38a6055756cfe9f85b63563712a8ab0b0453ce919e48c60fbc8e6f8a3a5ecd80692c17eed2be7563c27d22ca54edd5eaf65a4018547cd5f96b829006ad09f1b7b4b2fc3c9a96f9165bda379793c2d523a48017e02891985b61121e809da62f74747e3e50869c0f76c0f3bf83b81454c96334518dacf99a8f8b52b15f8ef5b3c0119df4226f4"}]}, 0x3, [{0x34, &(0x7f0000000180)=@string={0x34, 0x3, "ec27092544f311b9589f099d57c8927a615a6efd58e56c4ec4f42981de68b9bb461ad27879b4fe7f47e462fa8871ba84a996"}}, {0xed, &(0x7f00000001c0)=@string={0xed, 0x3, "aac7d38bdedeead3986fc2a580b1f7a388d70c8fa2172dba05d55ca836214f22c251d699552007fea6e338eb5566f6f0b7e94b94db190015a9c5ca1a48c6e7b2e7e6219180780b59d8ef420a009da844b0b28735914d8754fc7b1105e5e069145ae41d2d1c26efed36aeb24b92fa07469529f80ea5d3371008c614b89e886c2dc107f4200dadcd1d8afcb031ac4a0d0d2907d59171b42c1eec1ceb5acfc2df8bff47778c985d143e3f354625d597490df44726d5b70beaed5cacf01ef4589c69a62f5d69893538ec774276e1cb86fa3db201d6d048703647cb641e32ba4dc8b5d2896aca78bc19f6d7941e"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42c}}]}) 2.091843ms ago: executing program 0 (id=328): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1900000004000000040000da54c22ff6087f0b569b00000400000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000006c0)={r1, &(0x7f0000000500)}, 0x20) recvmsg(r0, &(0x7f0000000ac0)={&(0x7f0000000400)=@hci, 0x80, &(0x7f0000000980)=[{&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000000500)=""/69, 0x45}, {&(0x7f0000000580)=""/169, 0xa9}, {&(0x7f0000000700)=""/162, 0xa2}, {&(0x7f00000007c0)=""/105, 0x69}, {&(0x7f0000000840)=""/121, 0x79}, {&(0x7f00000008c0)=""/172, 0xac}], 0x7, &(0x7f0000000a00)=""/146, 0x92}, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xc8}}, 0x0) r3 = syz_io_uring_setup(0xd4e, &(0x7f00000000c0)={0x0, 0x1e1a, 0x20, 0x2, 0xcd}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r3, 0x7eb8, 0xf546, 0x42, &(0x7f0000000200)={[0x6]}, 0x8) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 3 (id=329): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa1300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0xbfcaffe22d660a57, 0xfa00, {0x3, &(0x7f0000000280), 0x111, 0xa}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0xe, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x1, {0x3, 0x0, 0x0, 0x1}, 0xb2a1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9c000000060a09040000000000000000020000237000048010000180080001006c6f6700040002805c0001800a00010071756f74610000004c0002800c000440fffffffffffffffb0c000440ffffffff7fffffff0c00044000000000ffffffff0c00014000000000000000020c00044000000000000000050c00014000000000000000070900010073797a30000000000900020073797a32"], 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. [ 78.331522][ T5597] cgroup: Unknown subsys name 'net' [ 78.573789][ T5597] cgroup: Unknown subsys name 'cpuset' [ 78.628131][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.508759][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.419841][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.426554][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.428204][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.452973][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.455294][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.629151][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.668695][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.669715][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.672349][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.679900][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.735212][ T4926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.760062][ T4926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.763228][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.769876][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.804537][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.810764][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.811697][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.813382][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.815525][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.826003][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.841908][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.855358][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.856860][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.856958][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.857652][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.558967][ T5626] Bluetooth: hci0: command tx timeout [ 86.797659][ T5626] Bluetooth: hci1: command tx timeout [ 87.037923][ T5626] Bluetooth: hci2: command tx timeout [ 87.037939][ T5612] Bluetooth: hci4: command tx timeout [ 87.038076][ T5626] Bluetooth: hci3: command tx timeout [ 87.413601][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.414658][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.414841][ T5610] bridge_slave_0: entered allmulticast mode [ 87.417094][ T5610] bridge_slave_0: entered promiscuous mode [ 87.486907][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.487168][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.487361][ T5610] bridge_slave_1: entered allmulticast mode [ 87.498177][ T5610] bridge_slave_1: entered promiscuous mode [ 87.674336][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.734144][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.734523][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.734729][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.734900][ T5615] bridge_slave_0: entered allmulticast mode [ 87.737162][ T5615] bridge_slave_0: entered promiscuous mode [ 87.830515][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.830752][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.830951][ T5615] bridge_slave_1: entered allmulticast mode [ 87.833081][ T5615] bridge_slave_1: entered promiscuous mode [ 87.860659][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.862081][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.863675][ T5617] bridge_slave_0: entered allmulticast mode [ 87.875531][ T5617] bridge_slave_0: entered promiscuous mode [ 87.957059][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.957296][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.958751][ T5617] bridge_slave_1: entered allmulticast mode [ 87.969305][ T5617] bridge_slave_1: entered promiscuous mode [ 87.983872][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.984271][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.984718][ T5618] bridge_slave_0: entered allmulticast mode [ 87.987098][ T5618] bridge_slave_0: entered promiscuous mode [ 88.017428][ T5610] team0: Port device team_slave_0 added [ 88.070304][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.070672][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.070894][ T5618] bridge_slave_1: entered allmulticast mode [ 88.074405][ T5618] bridge_slave_1: entered promiscuous mode [ 88.091456][ T5610] team0: Port device team_slave_1 added [ 88.113718][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.114215][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.114521][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.114759][ T5622] bridge_slave_0: entered allmulticast mode [ 88.116897][ T5622] bridge_slave_0: entered promiscuous mode [ 88.221232][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.221617][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.221835][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.222262][ T5622] bridge_slave_1: entered allmulticast mode [ 88.225310][ T5622] bridge_slave_1: entered promiscuous mode [ 88.240540][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.337147][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.350288][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.352518][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.352528][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.352544][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.448673][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.450188][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.450198][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.450217][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.454980][ T5615] team0: Port device team_slave_0 added [ 88.486764][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.566294][ T5615] team0: Port device team_slave_1 added [ 88.576661][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.587027][ T5617] team0: Port device team_slave_0 added [ 88.637644][ T5623] Bluetooth: hci0: command tx timeout [ 88.655114][ T5617] team0: Port device team_slave_1 added [ 88.662400][ T5618] team0: Port device team_slave_0 added [ 88.720837][ T5618] team0: Port device team_slave_1 added [ 88.743832][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.743844][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.743864][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.748534][ T5622] team0: Port device team_slave_0 added [ 88.877746][ T5623] Bluetooth: hci1: command tx timeout [ 89.117624][ T5623] Bluetooth: hci3: command tx timeout [ 89.117656][ T5623] Bluetooth: hci4: command tx timeout [ 89.117686][ T5623] Bluetooth: hci2: command tx timeout [ 89.211380][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.211484][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.211510][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.216758][ T5622] team0: Port device team_slave_1 added [ 89.230975][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.231010][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.231078][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.326709][ T5610] hsr_slave_0: entered promiscuous mode [ 89.334025][ T5610] hsr_slave_1: entered promiscuous mode [ 89.373380][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.373393][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.373413][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.375239][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.375249][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.375266][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.484196][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.484209][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.484229][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.535584][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.535598][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.535619][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.634381][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.634393][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.634410][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.756973][ T5615] hsr_slave_0: entered promiscuous mode [ 89.762739][ T5615] hsr_slave_1: entered promiscuous mode [ 89.770486][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 89.770579][ T5615] Cannot create hsr debugfs directory [ 89.835170][ T5617] hsr_slave_0: entered promiscuous mode [ 89.836544][ T5617] hsr_slave_1: entered promiscuous mode [ 89.838904][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 89.838959][ T5617] Cannot create hsr debugfs directory [ 89.996805][ T5618] hsr_slave_0: entered promiscuous mode [ 90.003332][ T5618] hsr_slave_1: entered promiscuous mode [ 90.009153][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 90.009224][ T5618] Cannot create hsr debugfs directory [ 90.099647][ T5622] hsr_slave_0: entered promiscuous mode [ 90.101311][ T5622] hsr_slave_1: entered promiscuous mode [ 90.102638][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 90.102662][ T5622] Cannot create hsr debugfs directory [ 90.719592][ T5626] Bluetooth: hci0: command tx timeout [ 90.922607][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.957803][ T5626] Bluetooth: hci1: command tx timeout [ 90.965527][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.013033][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.035248][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.051208][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.097203][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.125378][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.155148][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.199056][ T5626] Bluetooth: hci2: command tx timeout [ 91.199087][ T5626] Bluetooth: hci4: command tx timeout [ 91.199109][ T5626] Bluetooth: hci3: command tx timeout [ 91.342407][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.384984][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.399982][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.433988][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.446419][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.472306][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.503139][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.543545][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.751778][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.783265][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.803053][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.852840][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.866655][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.902730][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.964667][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.980010][ T820] cfg80211: failed to load regulatory.db [ 91.996018][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.162383][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.202038][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.219852][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.251518][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.278683][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.302527][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.350620][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.382995][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.484254][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.591539][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.634542][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.660761][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.691802][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.716251][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.742071][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.755865][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.782530][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.801671][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.810032][ T5623] Bluetooth: hci0: command tx timeout [ 92.867430][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.880337][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.881153][ T3329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.957469][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.958086][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.038207][ T5623] Bluetooth: hci1: command tx timeout [ 93.081094][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.140472][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.141120][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.180696][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.237408][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.238058][ T3329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.277842][ T5623] Bluetooth: hci3: command tx timeout [ 93.277869][ T5623] Bluetooth: hci4: command tx timeout [ 93.277889][ T5623] Bluetooth: hci2: command tx timeout [ 93.357136][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.422137][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.422311][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.494490][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.550002][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.550883][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.725531][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.800296][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.820006][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.820208][ T3329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.906336][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.906461][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.103200][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.191944][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.192184][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.272517][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.272774][ T3383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.638775][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.032278][ T5610] veth0_vlan: entered promiscuous mode [ 95.072810][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.217003][ T5610] veth1_vlan: entered promiscuous mode [ 95.515661][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.587964][ T5617] veth0_vlan: entered promiscuous mode [ 95.615182][ T5610] veth0_macvtap: entered promiscuous mode [ 95.652624][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.675742][ T5610] veth1_macvtap: entered promiscuous mode [ 95.730297][ T5617] veth1_vlan: entered promiscuous mode [ 95.885807][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.969354][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.016832][ T5615] veth0_vlan: entered promiscuous mode [ 96.051823][ T3329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.066508][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.082808][ T3329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.107764][ T3329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.136467][ T5617] veth0_macvtap: entered promiscuous mode [ 96.159987][ T3329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.239344][ T5622] veth0_vlan: entered promiscuous mode [ 96.255031][ T5615] veth1_vlan: entered promiscuous mode [ 96.271580][ T5617] veth1_macvtap: entered promiscuous mode [ 96.456139][ T5622] veth1_vlan: entered promiscuous mode [ 96.525093][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.660288][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.714015][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.723979][ T3411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.724030][ T3411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.726286][ T5615] veth0_macvtap: entered promiscuous mode [ 96.768394][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.796753][ T3329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.819781][ T3329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.839177][ T5615] veth1_macvtap: entered promiscuous mode [ 96.943918][ T5622] veth0_macvtap: entered promiscuous mode [ 96.963164][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.963185][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.074280][ T5622] veth1_macvtap: entered promiscuous mode [ 97.306807][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.371708][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.466034][ T5618] veth0_vlan: entered promiscuous mode [ 97.505527][ T3329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.537349][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.552765][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.552783][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.553034][ T3329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.601520][ T3329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.614432][ T3329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.675438][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.740985][ T5618] veth1_vlan: entered promiscuous mode [ 97.964254][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.980704][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.296343][ T3383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.296435][ T3383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.822242][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.859931][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.855057][ T5618] veth0_macvtap: entered promiscuous mode [ 99.933755][ T3352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.933773][ T3352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.967297][ T5618] veth1_macvtap: entered promiscuous mode [ 100.171943][ T5821] netlink: 'syz.0.9': attribute type 2 has an invalid length. [ 100.172422][ T5821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 100.234447][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.234468][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.352743][ T5723] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.447284][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.467131][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.467149][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.560238][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.604493][ T5723] usb 2-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 100.637017][ T5723] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 100.637046][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 100.637066][ T5723] usb 2-1: Product: syz [ 100.727255][ T5723] usb 2-1: config 0 descriptor?? [ 100.821761][ T5723] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 100.913232][ T5830] netlink: 'syz.0.11': attribute type 2 has an invalid length. [ 100.913265][ T5830] netlink: 'syz.0.11': attribute type 8 has an invalid length. [ 100.913280][ T5830] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11'. [ 101.046771][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.046793][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.050966][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.094650][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.140621][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.166364][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.304626][ T5835] loop0: detected capacity change from 0 to 2048 [ 101.557004][ T5738] usb 2-1: USB disconnect, device number 2 [ 102.584875][ T38] audit: type=1326 audit(1781980841.819:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.2.13" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d07cdce59 code=0x7ffc0000 [ 102.626991][ T38] audit: type=1326 audit(1781980841.829:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.2.13" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d07cdce59 code=0x7ffc0000 [ 102.627043][ T38] audit: type=1326 audit(1781980841.869:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.2.13" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d07cdce59 code=0x7ffc0000 [ 102.627083][ T38] audit: type=1326 audit(1781980841.869:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.2.13" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d07cdce59 code=0x7ffc0000 [ 102.774177][ T38] audit: type=1326 audit(1781980841.989:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.2.13" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d07cdce59 code=0x7ffc0000 [ 102.774242][ T38] audit: type=1326 audit(1781980842.019:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.2.13" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d07cdce59 code=0x7ffc0000 [ 102.774282][ T38] audit: type=1326 audit(1781980842.019:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.2.13" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d07cdcbc2 code=0x7ffc0000 [ 102.774320][ T38] audit: type=1326 audit(1781980842.019:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.2.13" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6d07cdcc57 code=0x7ffc0000 [ 102.774360][ T38] audit: type=1326 audit(1781980842.019:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.2.13" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6d07c99b51 code=0x7ffc0000 [ 102.774407][ T38] audit: type=1326 audit(1781980842.019:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.2.13" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6d07cddc49 code=0x7ffc0000 [ 102.910425][ T5850] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 103.102094][ T5835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.165059][ T5849] loop2: detected capacity change from 0 to 1024 [ 103.169323][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.169391][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.400382][ T5853] loop3: detected capacity change from 0 to 512 [ 103.447884][ T3364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.447902][ T3364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.522421][ T5626] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 103.522559][ T5626] Bluetooth: hci0: Injecting HCI hardware error event [ 103.525176][ T5626] Bluetooth: hci0: hardware error 0x00 [ 103.808308][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.821354][ T5849] hfsplus: failed to load root directory [ 103.907798][ T5853] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.907817][ T5853] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.134267][ T5738] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.291710][ T5738] usb 2-1: Using ep0 maxpacket: 16 [ 104.327410][ T5738] usb 2-1: config 3 has an invalid interface number: 231 but max is 0 [ 104.327440][ T5738] usb 2-1: config 3 has no interface number 0 [ 104.341969][ T5738] usb 2-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 104.342004][ T5738] usb 2-1: config 3 interface 231 has no altsetting 0 [ 104.391896][ T5738] usb 2-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 104.391923][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.391942][ T5738] usb 2-1: Product: syz [ 104.391955][ T5738] usb 2-1: Manufacturer: syz [ 104.391969][ T5738] usb 2-1: SerialNumber: syz [ 104.622114][ T5853] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.4: invalid indirect mapped block 83886080 (level 1) [ 104.699810][ T5853] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 104.780255][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 104.780279][ C1] EXT4-fs (loop3): initial error at time 1781980844: ext4_free_branches:1023: inode 16 [ 104.780324][ C1] EXT4-fs (loop3): last error at time 1781980844: ext4_free_branches:1023: inode 16 [ 105.058556][ T5860] loop2: detected capacity change from 0 to 512 [ 105.133151][ T5860] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.133176][ T5860] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.352673][ T5860] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.377069][ T5853] EXT4-fs (loop3): 1 orphan inode deleted [ 105.377091][ T5853] EXT4-fs (loop3): 1 truncate cleaned up [ 105.405788][ T5853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.638077][ T5864] loop0: detected capacity change from 0 to 1024 [ 105.679164][ T5864] hfsplus: Bad value for 'part' [ 105.682089][ T5738] kvaser_usb 2-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 105.726742][ T5738] usb 2-1: USB disconnect, device number 3 [ 105.751119][ T5860] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.17: Allocating blocks 41-42 which overlap fs metadata [ 105.804114][ T5860] loop2: lost filesystem error report for type 5 error -117 [ 105.808625][ C1] EXT4-fs (loop2): initial error at time 1781980845: ext4_mb_mark_diskspace_used:4222 [ 105.808652][ C1] EXT4-fs (loop2): last error at time 1781980845: ext4_mb_mark_diskspace_used:4222 [ 106.041818][ T5860] EXT4-fs (loop2): Remounting filesystem read-only [ 106.042448][ T5860] EXT4-fs (loop2): 1 truncate cleaned up [ 106.173082][ T5626] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 106.192599][ T5860] EXT4-fs (loop2): pa ffff888041749818: logic 1, phys. 41, len 23 [ 106.805853][ T5860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.416209][ T5872] loop1: detected capacity change from 0 to 512 [ 107.585391][ T1260] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.783670][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.912683][ T1260] usb 1-1: Using ep0 maxpacket: 8 [ 107.914794][ T1260] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.914822][ T1260] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.917074][ T1260] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 107.917100][ T1260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.917120][ T1260] usb 1-1: Product: syz [ 107.917134][ T1260] usb 1-1: Manufacturer: syz [ 107.917149][ T1260] usb 1-1: SerialNumber: syz [ 108.134985][ T5872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.135130][ T5872] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.216663][ T1260] usb 1-1: config 0 descriptor?? [ 108.218960][ T1260] usb 1-1: can't set config #0, error -71 [ 108.281105][ T1260] usb 1-1: USB disconnect, device number 2 [ 108.366528][ T5878] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.18: iget: bad i_size value: 2533274857506816 [ 108.435640][ T5877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20'. [ 108.435685][ T5877] netlink: 52 bytes leftover after parsing attributes in process `syz.4.20'. [ 108.643975][ T5854] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 108.745186][ T5881] loop0: detected capacity change from 0 to 512 [ 109.459131][ T5895] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.564200][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.635032][ T5896] FAULT_INJECTION: forcing a failure. [ 109.635032][ T5896] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.635068][ T5896] CPU: 1 UID: 0 PID: 5896 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.635088][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.635103][ T5896] Call Trace: [ 109.635135][ T5896] [ 109.635144][ T5896] dump_stack_lvl+0xe8/0x150 [ 109.635176][ T5896] should_fail_ex+0x467/0x600 [ 109.635206][ T5896] _copy_to_user+0x31/0xb0 [ 109.635239][ T5896] simple_read_from_buffer+0xe1/0x170 [ 109.635269][ T5896] proc_fail_nth_read+0x1be/0x230 [ 109.635288][ T5896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.635307][ T5896] ? rw_verify_area+0x250/0x4d0 [ 109.635327][ T5896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.635343][ T5896] vfs_read+0x219/0xa90 [ 109.635366][ T5896] ? __pfx_vfs_read+0x10/0x10 [ 109.635386][ T5896] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 109.635407][ T5896] ? lockdep_hardirqs_on+0x7a/0x110 [ 109.635426][ T5896] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 109.635445][ T5896] ? mutex_lock_nested+0x152/0x1d0 [ 109.635458][ T5896] ? fdget_pos+0x252/0x320 [ 109.635480][ T5896] ksys_read+0x156/0x270 [ 109.635500][ T5896] ? __pfx_ksys_read+0x10/0x10 [ 109.635525][ T5896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.635540][ T5896] do_syscall_64+0x174/0x580 [ 109.635559][ T5896] ? trace_irq_disable+0x3b/0x140 [ 109.635579][ T5896] ? clear_bhb_loop+0x40/0x90 [ 109.635596][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.635610][ T5896] RIP: 0033:0x7fdfc183d68e [ 109.635628][ T5896] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.635640][ T5896] RSP: 002b:00007fdfbfab4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.635654][ T5896] RAX: ffffffffffffffda RBX: 00007fdfbfab56c0 RCX: 00007fdfc183d68e [ 109.635665][ T5896] RDX: 000000000000000f RSI: 00007fdfbfab50a0 RDI: 0000000000000005 [ 109.635674][ T5896] RBP: 00007fdfbfab5090 R08: 0000000000000000 R09: 0000000000000000 [ 109.635682][ T5896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.635690][ T5896] R13: 00007fdfc1af6128 R14: 00007fdfc1af6090 R15: 00007fff15facad8 [ 109.635712][ T5896] [ 109.893211][ T5888] ======================================================= [ 109.893211][ T5888] WARNING: The mand mount option has been deprecated and [ 109.893211][ T5888] and is ignored by this kernel. Remove the mand [ 109.893211][ T5888] option from the mount to silence this warning. [ 109.893211][ T5888] ======================================================= [ 110.170051][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.796800][ T5904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.854131][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 110.901782][ T5905] netlink: 'syz.2.19': attribute type 3 has an invalid length. [ 110.901812][ T5905] netlink: 264 bytes leftover after parsing attributes in process `syz.2.19'. [ 111.305167][ T38] kauditd_printk_skb: 53 callbacks suppressed [ 111.305186][ T38] audit: type=1326 audit(1781980850.529:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.0.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc187ce59 code=0x7ffc0000 [ 111.315236][ T38] audit: type=1326 audit(1781980850.559:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.0.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc187ce59 code=0x7ffc0000 [ 111.381614][ T38] audit: type=1326 audit(1781980850.629:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.0.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc187ce59 code=0x7ffc0000 [ 111.381773][ T38] audit: type=1326 audit(1781980850.629:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.0.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc187ce59 code=0x7ffc0000 [ 111.382017][ T38] audit: type=1326 audit(1781980850.629:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.0.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdfc187ce59 code=0x7ffc0000 [ 111.382159][ T38] audit: type=1326 audit(1781980850.629:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.0.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc187ce59 code=0x7ffc0000 [ 111.382618][ T38] audit: type=1326 audit(1781980850.629:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.0.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdfc187ce59 code=0x7ffc0000 [ 111.382783][ T38] audit: type=1326 audit(1781980850.629:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.0.28" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdfc187ce59 code=0x7ffc0000 [ 111.787762][ T5738] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.970619][ T5738] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 111.970648][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.060842][ T5738] usb 2-1: config 0 descriptor?? [ 112.512825][ T5738] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0e [ 112.512851][ T5738] hackrf 2-1:0.0: Could not detect board [ 112.512907][ T5738] hackrf 2-1:0.0: probe with driver hackrf failed with error -71 [ 112.604350][ T5738] usb 2-1: USB disconnect, device number 4 [ 112.733064][ T5924] loop4: detected capacity change from 0 to 16 [ 114.040834][ T5902] loop3: detected capacity change from 0 to 32768 [ 114.507863][ T5924] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 114.552623][ T5924] erofs (device loop4): mounted with root inode @ nid 36. [ 114.647842][ T5902] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop3": -EINTR [ 115.363709][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.555159][ T32] usb 4-1: config 0 has an invalid interface number: 174 but max is 0 [ 115.555191][ T32] usb 4-1: config 0 has no interface number 0 [ 115.555226][ T32] usb 4-1: config 0 interface 174 has no altsetting 0 [ 115.602156][ T32] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice=83.92 [ 115.602190][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.602211][ T32] usb 4-1: Product: syz [ 115.602226][ T32] usb 4-1: Manufacturer: syz [ 115.602242][ T32] usb 4-1: SerialNumber: syz [ 115.728473][ T32] usb 4-1: config 0 descriptor?? [ 116.205114][ T32] option 4-1:0.174: GSM modem (1-port) converter detected [ 116.218824][ T5739] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.347662][ T5739] usb 5-1: device descriptor read/64, error -71 [ 116.555470][ T32] usb 4-1: USB disconnect, device number 2 [ 116.628424][ T5739] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.647356][ T32] option 4-1:0.174: device disconnected [ 116.757704][ T5739] usb 5-1: device descriptor read/64, error -71 [ 116.869265][ T5723] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.892845][ T5739] usb usb5-port1: attempt power cycle [ 117.039871][ T5977] loop0: detected capacity change from 0 to 512 [ 117.049241][ T5343] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.088947][ T5723] usb 3-1: Using ep0 maxpacket: 16 [ 117.107200][ T5723] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.117589][ T5723] usb 3-1: config 204 has an invalid interface number: 8 but max is 1 [ 117.117616][ T5723] usb 3-1: config 204 has an invalid interface number: 8 but max is 1 [ 117.117636][ T5723] usb 3-1: config 204 has 1 interface, different from the descriptor's value: 2 [ 117.117657][ T5723] usb 3-1: config 204 has no interface number 0 [ 117.117686][ T5723] usb 3-1: Duplicate descriptor for config 204 interface 8 altsetting 9, skipping [ 117.117707][ T5723] usb 3-1: config 204 interface 8 has no altsetting 0 [ 117.122296][ T5723] usb 3-1: New USB device found, idVendor=1199, idProduct=9091, bcdDevice=6b.dd [ 117.122324][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.122356][ T5723] usb 3-1: Product: syz [ 117.122367][ T5723] usb 3-1: Manufacturer: syz [ 117.122378][ T5723] usb 3-1: SerialNumber: syz [ 117.213579][ T5343] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 117.216035][ T5343] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.216091][ T5343] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 117.216115][ T5343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.217233][ T5343] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.217294][ T5343] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 117.217322][ T5343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.277196][ T5739] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.287263][ T5343] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.287318][ T5343] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 117.287342][ T5343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.313999][ T5739] usb 5-1: device descriptor read/8, error -71 [ 117.323908][ T5343] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.323966][ T5343] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 117.323991][ T5343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.355277][ T5343] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.355345][ T5343] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 117.355360][ T5343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.356408][ T5343] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.356470][ T5343] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 117.356502][ T5343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.422100][ T5343] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.422162][ T5343] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 117.422187][ T5343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.457954][ T5343] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.458011][ T5343] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 117.458034][ T5343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.504668][ T5343] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 117.504705][ T5343] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 117.504721][ T5343] usb 2-1: Product: syz [ 117.504731][ T5343] usb 2-1: Manufacturer: syz [ 117.504741][ T5343] usb 2-1: SerialNumber: syz [ 117.579590][ T5977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.579719][ T5977] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.607662][ T5739] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.631049][ T5739] usb 5-1: device descriptor read/8, error -71 [ 117.694998][ T5343] usb 2-1: config 0 descriptor?? [ 117.739222][ T5739] usb usb5-port1: unable to enumerate USB device [ 117.809603][ T5343] yurex 2-1:0.0: Could not find endpoints [ 118.116552][ T5723] usb 3-1: USB disconnect, device number 2 [ 118.185314][ T5987] netlink: 'syz.3.51': attribute type 30 has an invalid length. [ 118.212583][ T5968] loop1: detected capacity change from 0 to 4096 [ 118.224161][ T5968] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.249422][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 118.258994][ T5968] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 118.259015][ T5968] EXT4-fs (loop1): Test dummy encryption mode enabled [ 118.297213][ T5968] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 118.297353][ T5968] System zones: 0-5 [ 118.382299][ T5968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.664919][ T5968] gtp0: entered promiscuous mode [ 118.670155][ T5968] gtp0: entered allmulticast mode [ 119.042059][ T5738] usb 2-1: USB disconnect, device number 5 [ 119.762317][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.418961][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888061230800: rx timeout, send abort [ 120.421558][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888061230800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.485418][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 120.485439][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.529357][ T9] usb 4-1: config 0 descriptor?? [ 120.752910][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.775529][ T9] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0e [ 120.775555][ T9] hackrf 4-1:0.0: Could not detect board [ 120.775702][ T9] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 120.816913][ T9] usb 4-1: USB disconnect, device number 3 [ 121.233747][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.390435][ T6015] loop2: detected capacity change from 0 to 1024 [ 121.391342][ T6015] ext4: Unknown parameter 'dont_measure' [ 122.038237][ T6023] loop1: detected capacity change from 0 to 4096 [ 122.041053][ T6023] ntfs3: Unknown parameter '/dev/video36' [ 122.329689][ T6038] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 122.363488][ T6038] Error validating options; rc = [-22] [ 122.627620][ T5343] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.770105][ T5343] usb 3-1: device descriptor read/64, error -71 [ 123.074021][ T5343] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.548757][ T5343] usb 3-1: device descriptor read/64, error -71 [ 123.659753][ T5343] usb usb3-port1: attempt power cycle [ 124.007854][ T1260] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.010571][ T5343] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.030378][ T5343] usb 3-1: device descriptor read/8, error -71 [ 124.156753][ T6062] capability: warning: `syz.3.72' uses 32-bit capabilities (legacy support in use) [ 124.157172][ T6062] program syz.3.72 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.181266][ T1260] usb 2-1: Using ep0 maxpacket: 16 [ 124.183842][ T1260] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 124.183869][ T1260] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.183890][ T1260] usb 2-1: config 0 has no interface number 0 [ 124.183937][ T1260] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 124.183961][ T1260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.258351][ T1260] usb 2-1: config 0 descriptor?? [ 124.284584][ T1260] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 124.360438][ T6044] loop0: detected capacity change from 0 to 32768 [ 124.363118][ T5343] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.409632][ T5343] usb 3-1: device descriptor read/8, error -71 [ 124.481916][ T6044] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.513721][ T5723] usb 2-1: USB disconnect, device number 6 [ 124.541690][ T5343] usb usb3-port1: unable to enumerate USB device [ 124.630218][ T6044] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 124.740821][ T6044] XFS (loop0): Starting recovery (logdev: internal) [ 124.831579][ T6044] XFS (loop0): Ending recovery (logdev: internal) [ 124.844308][ T6075] Illegal XDP return value 4294967274 on prog (id 9) dev N/A, expect packet loss! [ 125.424514][ T5610] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 126.350773][ T6095] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 126.411907][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.80'. [ 126.414925][ T6095] loop8: detected capacity change from 0 to 7 [ 126.570368][ T6095] Dev loop8: unable to read RDB block 7 [ 126.570413][ T6095] loop8: unable to read partition table [ 126.570618][ T6095] loop8: partition table beyond EOD, truncated [ 126.570649][ T6095] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 127.525232][ T6103] loop0: detected capacity change from 0 to 1764 [ 128.079106][ T5723] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 128.222356][ T6105] ipip0: entered promiscuous mode [ 128.222386][ T6105] ipip0: entered allmulticast mode [ 128.248319][ T5723] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 128.248348][ T5723] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 128.248370][ T5723] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 128.248392][ T5723] usb 1-1: config 150 has no interface number 0 [ 128.248426][ T5723] usb 1-1: config 150 interface 204 has no altsetting 0 [ 128.322506][ T5723] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 128.322539][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.322559][ T5723] usb 1-1: Product: syz [ 128.322575][ T5723] usb 1-1: Manufacturer: syz [ 128.322590][ T5723] usb 1-1: SerialNumber: syz [ 128.611385][ T1260] usb 1-1: USB disconnect, device number 3 [ 128.854763][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 129.428478][ T6112] bridge_slave_1: left allmulticast mode [ 129.428516][ T6112] bridge_slave_1: left promiscuous mode [ 129.519106][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.463512][ T6131] loop2: detected capacity change from 0 to 2048 [ 130.464498][ T6133] loop0: detected capacity change from 0 to 64 [ 130.515095][ T6133] minix: Unknown parameter '' [ 130.630308][ T6131] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.764805][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.850156][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.856967][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.880617][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.881500][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.040642][ T3383] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.083744][ T6140] program syz.0.94 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.480029][ T6147] capability: warning: `syz.2.95' uses deprecated v2 capabilities in a way that may be insecure [ 132.580056][ T6147] loop2: detected capacity change from 0 to 512 [ 132.905286][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.905406][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.704540][ T3383] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.790303][ T6159] loop1: detected capacity change from 0 to 16 [ 133.852482][ T6159] erofs: Unknown parameter '/dev/cpu/#/msr' [ 133.917698][ T5623] Bluetooth: hci3: command tx timeout [ 133.997606][ T5739] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.167348][ T5739] usb 3-1: Using ep0 maxpacket: 8 [ 134.208373][ T5739] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 134.208408][ T5739] usb 3-1: config 0 interface 0 has no altsetting 0 [ 134.208441][ T5739] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 134.208464][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.269698][ T5739] usb 3-1: config 0 descriptor?? [ 134.475379][ T6158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.476515][ T6158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.771440][ T3383] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.938690][ T5739] corsair 0003:1B1C:1B09.0001: unknown main item tag 0x2 [ 134.938729][ T5739] corsair 0003:1B1C:1B09.0001: unknown main item tag 0x0 [ 134.938755][ T5739] corsair 0003:1B1C:1B09.0001: unknown main item tag 0x0 [ 134.938779][ T5739] corsair 0003:1B1C:1B09.0001: unknown main item tag 0x0 [ 134.938805][ T5739] corsair 0003:1B1C:1B09.0001: unknown main item tag 0x0 [ 134.938831][ T5739] corsair 0003:1B1C:1B09.0001: unknown main item tag 0x0 [ 134.938916][ T5739] corsair 0003:1B1C:1B09.0001: unknown main item tag 0x5 [ 134.938942][ T5739] corsair 0003:1B1C:1B09.0001: unknown main item tag 0x0 [ 134.938968][ T5739] corsair 0003:1B1C:1B09.0001: unknown main item tag 0x0 [ 134.938994][ T5739] corsair 0003:1B1C:1B09.0001: unknown main item tag 0x0 [ 135.039462][ T5739] corsair 0003:1B1C:1B09.0001: hidraw0: USB HID v0.04 Device [HID 1b1c:1b09] on usb-dummy_hcd.2-1/input0 [ 135.086280][ T5739] usb 3-1: USB disconnect, device number 7 [ 135.107950][ T6172] loop1: detected capacity change from 0 to 4096 [ 135.253995][ T6172] ntfs3(loop1): Primary boot: invalid record size -14. [ 135.334612][ T6174] fido_id[6174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 135.423781][ T6172] ntfs3(loop1): try to read out of volume at offset 0x1ffe00 [ 135.641153][ T3383] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.759736][ T5723] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 135.860777][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 135.921691][ T5723] usb 2-1: device descriptor read/64, error -71 [ 135.997656][ T9] usb 4-1: device descriptor read/64, error -71 [ 135.997750][ T5623] Bluetooth: hci3: command tx timeout [ 136.175864][ T6184] loop0: detected capacity change from 0 to 512 [ 136.197656][ T5723] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 136.234278][ T6184] EXT4-fs (loop0): orphan cleanup on readonly fs [ 136.236915][ T6184] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.107: ea_inode with extended attributes [ 136.258317][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 136.266825][ T6184] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.277967][ C1] EXT4-fs (loop0): initial error at time 1781980875: ext4_xattr_inode_iget:441: inode 11 [ 136.277998][ C1] EXT4-fs (loop0): last error at time 1781980875: ext4_xattr_inode_iget:441: inode 11 [ 136.340403][ T6184] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.107: error while reading EA inode 11 err=-117 [ 136.340439][ T6184] loop0: lost filesystem error report for type 5 error -117 [ 136.357675][ T5723] usb 2-1: device descriptor read/64, error -71 [ 136.389863][ T9] usb 4-1: device descriptor read/64, error -71 [ 136.393691][ T6184] EXT4-fs (loop0): 1 orphan inode deleted [ 136.410850][ T6184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 136.479911][ T5723] usb usb2-port1: attempt power cycle [ 136.498080][ T9] usb usb4-port1: attempt power cycle [ 136.837688][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 136.884267][ T9] usb 4-1: device descriptor read/8, error -71 [ 136.940621][ T5723] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 136.959251][ T5723] usb 2-1: device descriptor read/8, error -71 [ 137.120029][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 137.141045][ T9] usb 4-1: device descriptor read/8, error -71 [ 137.247966][ T9] usb usb4-port1: unable to enumerate USB device [ 137.249050][ T5723] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 137.269900][ T5723] usb 2-1: device descriptor read/8, error -71 [ 137.321734][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.378523][ T5723] usb usb2-port1: unable to enumerate USB device [ 137.678070][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.763984][ T3383] bridge_slave_1: left allmulticast mode [ 137.764120][ T3383] bridge_slave_1: left promiscuous mode [ 137.773865][ T3383] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.829546][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 137.829583][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.841610][ T9] usb 1-1: config 0 descriptor?? [ 137.867419][ T6207] netlink: 56 bytes leftover after parsing attributes in process `syz.2.112'. [ 138.043528][ T3383] bridge_slave_0: left allmulticast mode [ 138.043554][ T3383] bridge_slave_0: left promiscuous mode [ 138.045785][ T3383] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.077595][ T5623] Bluetooth: hci3: command tx timeout [ 138.099169][ T9] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 138.099196][ T9] hackrf 1-1:0.0: Could not detect board [ 138.099250][ T9] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 138.128287][ T1260] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.137432][ T9] usb 1-1: USB disconnect, device number 4 [ 139.287085][ T1260] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 139.287108][ T1260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.323033][ T1260] usb 2-1: config 0 descriptor?? [ 139.398416][ T1260] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 139.817609][ T5723] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.957663][ T5723] usb 4-1: device descriptor read/64, error -71 [ 140.150500][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.113'. [ 140.152400][ T1260] gspca_sunplus: reg_w_riv err -71 [ 140.152506][ T1260] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 140.164027][ T5623] Bluetooth: hci3: command tx timeout [ 140.236008][ T1260] usb 2-1: USB disconnect, device number 11 [ 140.320459][ T5723] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.540728][ T5723] usb 4-1: device descriptor read/64, error -71 [ 140.648011][ T5723] usb usb4-port1: attempt power cycle [ 140.888574][ T3383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.953599][ T6229] IPVS: set_ctl: invalid protocol: 12 172.20.20.63:20001 [ 140.990271][ T3383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.004676][ T5723] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 141.031818][ T5723] usb 4-1: device descriptor read/8, error -71 [ 141.070435][ T3383] bond0 (unregistering): Released all slaves [ 141.308478][ T5723] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.336713][ T5723] usb 4-1: device descriptor read/8, error -71 [ 141.438034][ T5723] usb usb4-port1: unable to enumerate USB device [ 141.472380][ T6234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.121'. [ 141.472412][ T6234] netlink: 44 bytes leftover after parsing attributes in process `syz.1.121'. [ 141.734870][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.736099][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.736421][ T6134] bridge_slave_0: entered allmulticast mode [ 141.779970][ T6134] bridge_slave_0: entered promiscuous mode [ 141.820042][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.820288][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.832875][ T6134] bridge_slave_1: entered allmulticast mode [ 141.857159][ T6134] bridge_slave_1: entered promiscuous mode [ 141.942994][ T6134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.962922][ T6134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.177461][ T6134] team0: Port device team_slave_0 added [ 142.366273][ T6134] team0: Port device team_slave_1 added [ 142.479466][ T6259] FAULT_INJECTION: forcing a failure. [ 142.479466][ T6259] name failslab, interval 1, probability 0, space 0, times 1 [ 142.479502][ T6259] CPU: 1 UID: 0 PID: 6259 Comm: syz.2.126 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.479528][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 142.479541][ T6259] Call Trace: [ 142.479549][ T6259] [ 142.479559][ T6259] dump_stack_lvl+0xe8/0x150 [ 142.479592][ T6259] should_fail_ex+0x467/0x600 [ 142.479626][ T6259] should_failslab+0xa8/0x100 [ 142.479656][ T6259] kmem_cache_alloc_noprof+0xa4/0x650 [ 142.479681][ T6259] ? skb_clone+0x212/0x3a0 [ 142.479711][ T6259] ? skb_clone+0x212/0x3a0 [ 142.479749][ T6259] skb_clone+0x212/0x3a0 [ 142.479786][ T6259] __netlink_deliver_tap+0x410/0x880 [ 142.479817][ T6259] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.479858][ T6259] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.479894][ T6259] netlink_deliver_tap+0x19c/0x1b0 [ 142.479929][ T6259] netlink_unicast+0x7b8/0x990 [ 142.479970][ T6259] netlink_sendmsg+0x813/0xb40 [ 142.480018][ T6259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.480052][ T6259] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 142.480091][ T6259] ? aa_sock_msg_perm+0x122/0x200 [ 142.480119][ T6259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.480146][ T6259] sock_sendmsg_nosec+0x13a/0x180 [ 142.480169][ T6259] ____sys_sendmsg+0x565/0x870 [ 142.480197][ T6259] ? __might_fault+0xaf/0x130 [ 142.480229][ T6259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.480272][ T6259] ? import_iovec+0x73/0xa0 [ 142.480311][ T6259] ___sys_sendmsg+0x2a5/0x360 [ 142.480353][ T6259] ? __lock_acquire+0x683/0x2ce0 [ 142.480388][ T6259] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.480473][ T6259] ? __fget_files+0x2a/0x420 [ 142.480494][ T6259] ? __fget_files+0x3a8/0x420 [ 142.480527][ T6259] __x64_sys_sendmsg+0x1b7/0x290 [ 142.480558][ T6259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.480604][ T6259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.480626][ T6259] do_syscall_64+0x174/0x580 [ 142.480653][ T6259] ? trace_irq_disable+0x3b/0x140 [ 142.480680][ T6259] ? clear_bhb_loop+0x40/0x90 [ 142.480705][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.480725][ T6259] RIP: 0033:0x7f6d07cdce59 [ 142.480744][ T6259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.480761][ T6259] RSP: 002b:00007f6d05f2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.480782][ T6259] RAX: ffffffffffffffda RBX: 00007f6d07f55fa0 RCX: 00007f6d07cdce59 [ 142.480796][ T6259] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000005 [ 142.480809][ T6259] RBP: 00007f6d05f2e090 R08: 0000000000000000 R09: 0000000000000000 [ 142.480822][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.480833][ T6259] R13: 00007f6d07f56038 R14: 00007f6d07f55fa0 R15: 00007ffef05a5108 [ 142.480865][ T6259] [ 143.310984][ T6267] loop0: detected capacity change from 0 to 1024 [ 143.370198][ T6267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.370343][ T6267] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.887351][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 143.942673][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 144.041811][ T6134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.041829][ T6134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.041858][ T6134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.324424][ T6134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.324439][ T6134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.324464][ T6134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.338907][ T6291] loop0: detected capacity change from 0 to 32768 [ 145.346280][ T6291] btrfs: Deprecated parameter 'usebackuproot' [ 145.346494][ T6291] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 145.377363][ T6296] loop3: detected capacity change from 0 to 8 [ 145.545477][ T6291] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.134 (6291) [ 145.899807][ T6288] loop1: detected capacity change from 0 to 40427 [ 145.903788][ T6288] F2FS-fs: heap/no_heap options were deprecated [ 145.977863][ T5738] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 146.159792][ T5738] usb 4-1: Using ep0 maxpacket: 8 [ 146.181410][ T6288] F2FS-fs (loop1): build fault injection rate: 19 [ 146.181433][ T6288] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 146.188424][ T5738] usb 4-1: config 4 has an invalid interface number: 207 but max is 0 [ 146.188448][ T5738] usb 4-1: config 4 has no interface number 0 [ 146.188477][ T5738] usb 4-1: config 4 interface 207 has no altsetting 0 [ 146.260853][ T5738] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 0.02 [ 146.260884][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.260904][ T5738] usb 4-1: Product: syz [ 146.260917][ T5738] usb 4-1: Manufacturer: syz [ 146.260933][ T5738] usb 4-1: SerialNumber: syz [ 146.311785][ T6134] hsr_slave_0: entered promiscuous mode [ 146.427777][ T6134] hsr_slave_1: entered promiscuous mode [ 146.474819][ T6134] debugfs: 'hsr0' already exists in 'hsr' [ 146.474848][ T6134] Cannot create hsr debugfs directory [ 146.629815][ T6288] F2FS-fs (loop1): invalid crc value [ 146.717668][ T6291] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.717785][ T6291] BTRFS info (device loop0): using crc32c checksum algorithm [ 146.831440][ T6314] netlink: 56 bytes leftover after parsing attributes in process `syz.2.139'. [ 146.895197][ T6288] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0 [ 146.956540][ T5738] ttusb_dec_send_command: command bulk message failed: error -22 [ 146.956796][ T5738] ttusb-dec 4-1:4.207: probe with driver ttusb-dec failed with error -22 [ 147.017097][ T5738] usb 4-1: USB disconnect, device number 12 [ 147.121746][ T68] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 147.138378][ T6291] BTRFS error (device loop0): failed to load root extent [ 147.138443][ T6291] BTRFS warning (device loop0): try to load backup roots slot 1 [ 147.140170][ T3329] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 147.141103][ T6291] BTRFS warning (device loop0): couldn't read tree root [ 147.141124][ T6291] BTRFS warning (device loop0): try to load backup roots slot 2 [ 147.141436][ T68] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 147.141560][ T6291] BTRFS warning (device loop0): couldn't read tree root [ 147.141580][ T6291] BTRFS warning (device loop0): try to load backup roots slot 3 [ 147.789512][ T6337] loop2: detected capacity change from 0 to 1024 [ 148.004014][ T6291] BTRFS error (device loop0): open_ctree failed: -4 [ 148.044917][ T3383] hsr_slave_0: left promiscuous mode [ 148.106670][ T6288] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 148.206431][ T3383] hsr_slave_1: left promiscuous mode [ 148.321227][ T3383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.321300][ T3383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.326415][ T6288] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 148.570984][ T6288] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 148.572992][ T3383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.573018][ T3383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.320919][ T3383] veth1_macvtap: left promiscuous mode [ 149.321077][ T3383] veth0_macvtap: left promiscuous mode [ 149.342455][ T3383] veth1_vlan: left promiscuous mode [ 149.343823][ T3383] veth0_vlan: left promiscuous mode [ 149.437998][ T6355] loop0: detected capacity change from 0 to 128 [ 149.962877][ T38] audit: type=1326 audit(1781980889.209:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.0.145" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfc187ce59 code=0x0 [ 150.903765][ T6369] netlink: 'syz.0.149': attribute type 5 has an invalid length. [ 151.173518][ T3383] team0 (unregistering): Port device team_slave_1 removed [ 151.238384][ T3383] team0 (unregistering): Port device team_slave_0 removed [ 151.643427][ T6372] loop1: detected capacity change from 0 to 32768 [ 151.708940][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 151.725455][ T6372] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 151.924401][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 152.222083][ T6372] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 152.304352][ T6372] XFS (loop1): Starting recovery (logdev: internal) [ 152.424212][ T6384] program syz.3.152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.460734][ T6386] loop0: detected capacity change from 0 to 8 [ 152.463160][ T6372] XFS (loop1): Ending recovery (logdev: internal) [ 152.785540][ T6386] SQUASHFS error: Failed to read block 0x2fc: -5 [ 152.785563][ T6386] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 152.785579][ T6386] SQUASHFS error: Unable to read directory block [2fa:0] [ 152.820600][ T6386] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 152.820620][ T6386] SQUASHFS error: Unable to read directory block [247:26] [ 152.950586][ T6365] XFS (loop1): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 [ 152.950623][ T6365] XFS (loop1): Unmount and run xfs_repair [ 152.950632][ T6365] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 152.950643][ T6365] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 152.950653][ T6365] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 152.950662][ T6365] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 152.950672][ T6365] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 152.950681][ T6365] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 152.950691][ T6365] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.950700][ T6365] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.950709][ T6365] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.950875][ T6365] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x8 len 8 error 117 [ 153.175304][ T6394] syz.0.154 uses obsolete (PF_INET,SOCK_PACKET) [ 153.841953][ T6399] netlink: 96 bytes leftover after parsing attributes in process `syz.2.155'. [ 153.899086][ T6400] loop2: detected capacity change from 0 to 128 [ 154.438315][ T5617] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.468625][ T5617] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 155.968067][ T6403] loop2: detected capacity change from 0 to 32768 [ 156.374623][ T6420] binder: BINDER_SET_CONTEXT_MGR already set [ 156.374638][ T6420] binder: 6418:6420 ioctl 4018620d 200000000100 returned -16 [ 156.374757][ T6420] binder: BINDER_SET_CONTEXT_MGR already set [ 156.374767][ T6420] binder: 6418:6420 ioctl 4018620d 200000000100 returned -16 [ 156.374864][ T6420] binder: BINDER_SET_CONTEXT_MGR already set [ 156.374873][ T6420] binder: 6418:6420 ioctl 4018620d 200000000100 returned -16 [ 156.375000][ T6420] binder: BINDER_SET_CONTEXT_MGR already set [ 156.375009][ T6420] binder: 6418:6420 ioctl 4018620d 200000000100 returned -16 [ 156.375126][ T6420] binder: BINDER_SET_CONTEXT_MGR already set [ 156.375134][ T6420] binder: 6418:6420 ioctl 4018620d 200000000100 returned -16 [ 156.375231][ T6420] binder: BINDER_SET_CONTEXT_MGR already set [ 156.375240][ T6420] binder: 6418:6420 ioctl 4018620d 200000000100 returned -16 [ 156.419909][ T6420] binder: BINDER_SET_CONTEXT_MGR already set [ 156.419967][ T6420] binder: 6418:6420 ioctl 4018620d 200000000100 returned -16 [ 156.420151][ T6420] binder: BINDER_SET_CONTEXT_MGR already set [ 156.420167][ T6420] binder: 6418:6420 ioctl 4018620d 200000000100 returned -16 [ 156.420452][ T6420] binder: BINDER_SET_CONTEXT_MGR already set [ 156.420474][ T6420] binder: 6418:6420 ioctl 4018620d 200000000100 returned -16 [ 156.524966][ T6420] binder: BINDER_SET_CONTEXT_MGR already set [ 156.524979][ T6420] binder: 6418:6420 ioctl 4018620d 200000000100 returned -16 [ 156.922549][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 157.355794][ T6430] loop0: detected capacity change from 0 to 64 [ 157.689193][ T6432] netlink: 'syz.3.163': attribute type 29 has an invalid length. [ 158.487860][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 158.487894][ T6439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.164'. [ 160.141797][ T38] audit: type=1326 audit(1781980899.389:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.3.168" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2a63cce59 code=0x0 [ 160.526010][ T6459] hub 8-0:1.0: USB hub found [ 160.532754][ T6459] hub 8-0:1.0: 1 port detected [ 161.532591][ T6466] loop1: detected capacity change from 0 to 1024 [ 161.533599][ T6466] hfsplus: Unknown parameter '¹Þ“°' [ 161.605706][ T6469] netlink: 'syz.3.171': attribute type 29 has an invalid length. [ 161.822129][ T6471] netlink: 'syz.3.171': attribute type 29 has an invalid length. [ 161.822602][ T6472] netlink: 'syz.3.171': attribute type 29 has an invalid length. [ 162.256184][ T6482] loop3: detected capacity change from 0 to 2048 [ 162.257216][ T6482] udf: Unknown parameter 'file_e' [ 162.424638][ T6482] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 162.473646][ T6489] loop1: detected capacity change from 0 to 22 [ 162.504924][ T6489] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 162.532311][ T6489] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 162.816239][ T38] audit: type=1326 audit(1781980902.059:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.177" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a63cce59 code=0x7ffc0000 [ 162.818009][ T38] audit: type=1326 audit(1781980902.059:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.177" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a63cce59 code=0x7ffc0000 [ 162.818074][ T38] audit: type=1326 audit(1781980902.059:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.177" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a63cce59 code=0x7ffc0000 [ 162.818127][ T38] audit: type=1326 audit(1781980902.059:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.177" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff2a63cbcc7 code=0x7ffc0000 [ 162.927571][ T38] audit: type=1326 audit(1781980902.149:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.177" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a63cce59 code=0x7ffc0000 [ 162.927611][ T38] audit: type=1326 audit(1781980902.169:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.177" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a63cce59 code=0x7ffc0000 [ 162.935392][ T38] audit: type=1326 audit(1781980902.179:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.177" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a63cce59 code=0x7ffc0000 [ 162.935451][ T38] audit: type=1326 audit(1781980902.179:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.177" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a63cce59 code=0x7ffc0000 [ 162.935489][ T38] audit: type=1326 audit(1781980902.179:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.177" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff2a63cce59 code=0x7ffc0000 [ 163.367637][ T1260] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 163.502372][ T1260] usb 2-1: device descriptor read/64, error -71 [ 163.694634][ T6511] loop2: detected capacity change from 0 to 8 [ 163.745258][ T1260] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 163.869963][ T1260] usb 2-1: device descriptor read/64, error -71 [ 163.909865][ T6511] SQUASHFS error: xz decompression failed, data probably corrupt [ 163.909896][ T6511] SQUASHFS error: Failed to read block 0x108: -5 [ 163.909912][ T6511] SQUASHFS error: Unable to read metadata cache entry [106] [ 163.909926][ T6511] SQUASHFS error: Unable to read inode 0x11f [ 163.982224][ T1260] usb usb2-port1: attempt power cycle [ 164.525536][ T1260] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 164.587583][ T1260] usb 2-1: device descriptor read/8, error -71 [ 164.758000][ T6134] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.828899][ T1260] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 164.850872][ T1260] usb 2-1: device descriptor read/8, error -71 [ 164.962319][ T1260] usb usb2-port1: unable to enumerate USB device [ 164.964882][ T6134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.966362][ T6134] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.044255][ T6528] loop0: detected capacity change from 0 to 512 [ 165.063956][ T6134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.099567][ T6134] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.176150][ T6134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.187326][ T6134] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.218476][ T6528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.218578][ T6528] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.254650][ T6134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.746530][ T6555] netlink: 'syz.2.189': attribute type 27 has an invalid length. [ 165.746550][ T6555] netlink: 'syz.2.189': attribute type 4 has an invalid length. [ 165.746562][ T6555] netlink: 152 bytes leftover after parsing attributes in process `syz.2.189'. [ 165.801345][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.189'. [ 165.801376][ T6559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.189'. [ 165.842814][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.191'. [ 165.880408][ T38] kauditd_printk_skb: 100 callbacks suppressed [ 165.880425][ T38] audit: type=1800 audit(1781980905.129:182): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.185" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 166.011606][ T6558] loop3: detected capacity change from 0 to 2048 [ 166.300385][ T6568] loop2: detected capacity change from 0 to 8 [ 166.352539][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.358182][ T6568] SQUASHFS error: xz decompression failed, data probably corrupt [ 166.358209][ T6568] SQUASHFS error: Failed to read block 0x108: -5 [ 166.358223][ T6568] SQUASHFS error: Unable to read metadata cache entry [106] [ 166.358238][ T6568] SQUASHFS error: Unable to read inode 0x11f [ 166.399226][ T6571] loop1: detected capacity change from 0 to 512 [ 166.407359][ T6571] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.424957][ T6571] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.192: invalid indirect mapped block 4294967295 (level 0) [ 166.424992][ T6571] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 166.431810][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 166.431828][ C1] EXT4-fs (loop1): initial error at time 1781980905: ext4_free_branches:1023: inode 16 [ 166.431852][ C1] EXT4-fs (loop1): last error at time 1781980905: ext4_free_branches:1023: inode 16 [ 166.436692][ T6134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.581049][ T6571] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.192: invalid indirect mapped block 4294967295 (level 1) [ 166.581087][ T6571] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 166.604034][ T6571] EXT4-fs (loop1): 1 orphan inode deleted [ 166.604058][ T6571] EXT4-fs (loop1): 1 truncate cleaned up [ 166.606848][ T6571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.873942][ T6134] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.091021][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.095209][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.123919][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.183160][ T6585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.310709][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.310864][ T3383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.431051][ T6589] loop0: detected capacity change from 0 to 16 [ 168.467379][ T6589] erofs (device loop0): mounted with root inode @ nid 36. [ 168.709028][ T820] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 168.762337][ T5343] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 168.890155][ T820] usb 2-1: Using ep0 maxpacket: 8 [ 168.901262][ T820] usb 2-1: config 6 has an invalid interface number: 220 but max is 0 [ 168.901290][ T820] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 168.901311][ T820] usb 2-1: config 6 has no interface number 0 [ 168.901345][ T820] usb 2-1: config 6 interface 220 has no altsetting 0 [ 168.904471][ T820] usb 2-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 168.904496][ T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.904515][ T820] usb 2-1: Product: syz [ 168.904530][ T820] usb 2-1: Manufacturer: syz [ 168.904545][ T820] usb 2-1: SerialNumber: syz [ 168.913677][ T5343] usb 1-1: Using ep0 maxpacket: 32 [ 168.950453][ T5343] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 168.950483][ T5343] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 168.950505][ T5343] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 168.950529][ T5343] usb 1-1: config 1 has no interface number 0 [ 168.950576][ T5343] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.950614][ T5343] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 168.950659][ T5343] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 168.950685][ T5343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.200948][ T5343] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 169.278993][ T6599] loop3: detected capacity change from 0 to 256 [ 169.625364][ T5343] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 170.981328][ T5715] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 171.497497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 171.657504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 171.718199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.051428][ T820] uvcvideo 2-1:6.220: probe with driver uvcvideo failed with error -22 [ 172.185105][ T820] usb 2-1: USB disconnect, device number 16 [ 172.757506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.767501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.777503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.787502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.797502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.807502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.817505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.515723][ T821] usb 1-1: USB disconnect, device number 5 [ 173.744845][ T6636] loop1: detected capacity change from 0 to 8 [ 173.793153][ T821] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 173.826196][ T6636] SQUASHFS error: xz decompression failed, data probably corrupt [ 173.826226][ T6636] SQUASHFS error: Failed to read block 0x108: -5 [ 173.826242][ T6636] SQUASHFS error: Unable to read metadata cache entry [106] [ 173.826257][ T6636] SQUASHFS error: Unable to read inode 0x11f [ 174.567770][ T5343] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 174.737631][ T5343] usb 4-1: Using ep0 maxpacket: 32 [ 174.740375][ T5343] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 174.740404][ T5343] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 174.740427][ T5343] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 174.740450][ T5343] usb 4-1: config 1 has no interface number 0 [ 174.740627][ T5343] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.740657][ T5343] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 174.740702][ T5343] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 174.740725][ T5343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.859880][ T5343] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 174.911362][ T6654] loop0: detected capacity change from 0 to 4096 [ 174.971964][ T6654] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 174.973879][ T6134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.990330][ T820] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 175.111865][ T5343] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 175.208959][ T820] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 175.208989][ T820] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 175.209971][ T820] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 175.210002][ T820] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 175.210093][ T820] usb 2-1: config 220 interface 0 has no altsetting 0 [ 175.210114][ T820] usb 2-1: config 220 interface 1 has no altsetting 0 [ 175.215412][ T820] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 175.215440][ T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.215519][ T820] usb 2-1: Product: syz [ 175.215536][ T820] usb 2-1: Manufacturer: syz [ 175.215550][ T820] usb 2-1: SerialNumber: syz [ 175.677350][ T6660] netlink: 52 bytes leftover after parsing attributes in process `syz.3.206'. [ 176.627239][ T5343] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 176.795489][ T6652] loop1: detected capacity change from 0 to 1024 [ 176.856535][ T6652] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 176.856565][ T6652] EXT4-fs (loop1): group descriptors corrupted! [ 176.926929][ T6649] Zero length message leads to an empty skb [ 177.143795][ T820] usb 2-1: selecting invalid altsetting 0 [ 177.188512][ T820] uvcvideo 2-1:220.0: probe with driver uvcvideo failed with error -22 [ 177.230150][ T820] usb 2-1: selecting invalid altsetting 0 [ 177.230189][ T820] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 177.328059][ T820] usb 2-1: USB disconnect, device number 17 [ 177.559780][ T6654] ntfs3(loop0): Failed to read $UpCase (-4). [ 178.685655][ T820] usb 4-1: USB disconnect, device number 13 [ 178.694771][ T820] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 179.903689][ T38] audit: type=1326 audit(1781980918.749:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.3.213" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2a63cce59 code=0x0 [ 180.094554][ T6134] veth0_vlan: entered promiscuous mode [ 180.125492][ T6677] loop3: detected capacity change from 0 to 512 [ 180.183680][ T6677] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 180.183789][ T6677] EXT4-fs (loop3): failed to open journal device unknown-block(128,0) -ENXIO [ 180.240762][ T6134] veth1_vlan: entered promiscuous mode [ 180.286259][ T5723] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 180.467602][ T5723] usb 1-1: Using ep0 maxpacket: 32 [ 180.504604][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.504627][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.504654][ T5723] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 180.504669][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.557719][ T5738] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 180.607158][ T5723] usb 1-1: config 0 descriptor?? [ 180.631172][ T5723] hub 1-1:0.0: USB hub found [ 180.739669][ T5738] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 180.739694][ T5738] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.739712][ T5738] usb 2-1: config 0 has no interface number 0 [ 180.739752][ T5738] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 180.739774][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.838330][ T5738] usb 2-1: config 0 descriptor?? [ 180.858410][ T5723] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 180.895897][ T5738] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 181.095043][ T6134] veth0_macvtap: entered promiscuous mode [ 181.177207][ T5723] usbhid 1-1:0.0: can't add hid device: -71 [ 181.177336][ T5723] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 181.233602][ T5723] usb 1-1: USB disconnect, device number 6 [ 181.260165][ T6134] veth1_macvtap: entered promiscuous mode [ 181.467345][ T6134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.566328][ T6134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.615510][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.616382][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.616431][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.616468][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.677794][ T1260] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 181.891553][ T1260] usb 3-1: Using ep0 maxpacket: 32 [ 181.893642][ T1260] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.893674][ T1260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.893702][ T1260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 181.893744][ T1260] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 181.893768][ T1260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.991623][ T1260] usb 3-1: config 0 descriptor?? [ 182.030217][ T1260] hub 3-1:0.0: USB hub found [ 182.230106][ T5723] usb 2-1: USB disconnect, device number 18 [ 182.283753][ T1260] hub 3-1:0.0: 1 port detected [ 183.010686][ T6700] loop1: detected capacity change from 0 to 8 [ 183.291260][ T6700] SQUASHFS error: xz decompression failed, data probably corrupt [ 183.291289][ T6700] SQUASHFS error: Failed to read block 0x108: -5 [ 183.291305][ T6700] SQUASHFS error: Unable to read metadata cache entry [106] [ 183.291320][ T6700] SQUASHFS error: Unable to read inode 0x11f [ 183.813578][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.813600][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.505248][ T1386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.505269][ T1386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.876184][ T1260] usb 3-1: USB disconnect, device number 8 [ 185.104372][ T6714] loop3: detected capacity change from 0 to 64 [ 185.191838][ T6715] netlink: 48 bytes leftover after parsing attributes in process `syz.2.226'. [ 186.076531][ T6728] loop4: detected capacity change from 0 to 32768 [ 186.128703][ T6728] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 186.128717][ T6728] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 186.205828][ T5343] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 186.339878][ T6728] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 186.361720][ T32] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 186.361738][ T32] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 186.368395][ T5343] usb 4-1: Using ep0 maxpacket: 16 [ 186.479462][ T6714] netlink: 'syz.3.227': attribute type 3 has an invalid length. [ 186.479476][ T6714] netlink: 132 bytes leftover after parsing attributes in process `syz.3.227'. [ 190.670222][ T5343] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.671476][ T5343] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 190.671509][ T5343] usb 4-1: can't read configurations, error -71 [ 190.970305][ T32] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 4608ms [ 191.014933][ T32] gfs2: fsid=syz:syz.0: jid=0: Done [ 191.029509][ T6728] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 191.135164][ T6728] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 191.152917][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.234'. [ 191.200765][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.234'. [ 191.200794][ T6742] netlink: 'syz.1.234': attribute type 6 has an invalid length. [ 191.589721][ T5723] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 191.661256][ T6748] loop3: detected capacity change from 0 to 2048 [ 191.739329][ T5723] usb 3-1: device descriptor read/64, error -71 [ 191.821136][ T6748] iocharset  not found [ 192.008347][ T5723] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 192.435852][ T5723] usb 3-1: device descriptor read/64, error -71 [ 193.352169][ T5723] usb usb3-port1: attempt power cycle [ 193.530718][ T6766] netlink: 'syz.0.239': attribute type 30 has an invalid length. [ 193.708692][ T5723] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 193.722137][ T6772] geneve2: entered promiscuous mode [ 193.722160][ T6772] geneve2: entered allmulticast mode [ 193.732271][ T5723] usb 3-1: device descriptor read/8, error -71 [ 193.957848][ T820] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 193.969555][ T5723] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 193.993200][ T5723] usb 3-1: device descriptor read/8, error -71 [ 194.097878][ T5723] usb usb3-port1: unable to enumerate USB device [ 194.122553][ T820] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 194.124226][ T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.124244][ T820] usb 2-1: Product: syz [ 194.124255][ T820] usb 2-1: Manufacturer: syz [ 194.124265][ T820] usb 2-1: SerialNumber: syz [ 194.347556][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.347726][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.801074][ T6788] netlink: 48 bytes leftover after parsing attributes in process `syz.4.249'. [ 194.943226][ T6790] loop4: detected capacity change from 0 to 64 [ 195.311593][ T6787] loop2: detected capacity change from 0 to 4096 [ 195.321255][ T820] rtl8150 2-1:1.0: couldn't reset the device [ 195.345514][ T6787] ext4: block size(16384) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 195.345542][ T6787] EXT4-fs (loop2): bad block size 16384 [ 195.347582][ T820] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 195.457643][ T820] usb 2-1: USB disconnect, device number 19 [ 195.928572][ T6795] loop2: detected capacity change from 0 to 512 [ 195.948851][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 196.081658][ T6795] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 196.144311][ T6790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.412041][ T6779] loop0: detected capacity change from 0 to 40427 [ 196.446104][ T6788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.249'. [ 196.506321][ T6779] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 196.506339][ T6779] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 196.522627][ T6779] F2FS-fs (loop0): invalid crc value [ 196.913697][ T6795] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.248: bg 0: block 255: padding at end of block bitmap is not set [ 196.913744][ T6795] loop2: lost filesystem error report for type 5 error -117 [ 196.917568][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 196.917590][ C1] EXT4-fs (loop2): initial error at time 1781980936: ext4_validate_block_bitmap:441 [ 196.917614][ C1] EXT4-fs (loop2): last error at time 1781980936: ext4_validate_block_bitmap:441 [ 197.012214][ T6795] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 197.012242][ T6795] loop2: lost filesystem error report for type 5 error -117 [ 197.288470][ T6795] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.248: invalid indirect mapped block 1 (level 1) [ 197.288504][ T6795] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 197.546259][ T6795] EXT4-fs (loop2): 1 truncate cleaned up [ 197.694406][ T6779] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 197.784370][ T6795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.937951][ T6810] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 198.579174][ T6816] netlink: 'syz.3.256': attribute type 30 has an invalid length. [ 198.900363][ T6822] loop4: detected capacity change from 0 to 8 [ 198.980378][ T6822] SQUASHFS error: xz decompression failed, data probably corrupt [ 198.980419][ T6822] SQUASHFS error: Failed to read block 0x108: -5 [ 198.980430][ T6822] SQUASHFS error: Unable to read metadata cache entry [106] [ 198.980441][ T6822] SQUASHFS error: Unable to read inode 0x11f [ 199.554471][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.758328][ T6835] loop4: detected capacity change from 0 to 256 [ 200.231291][ T6841] sctp: [Deprecated]: syz.1.265 (pid 6841) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.231291][ T6841] Use struct sctp_sack_info instead [ 202.297759][ T820] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 202.429185][ T6863] netlink: 'syz.0.272': attribute type 30 has an invalid length. [ 202.471365][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 202.489304][ T820] usb 3-1: Using ep0 maxpacket: 16 [ 202.491129][ T820] usb 3-1: config 1 has an invalid interface number: 172 but max is 2 [ 202.491147][ T820] usb 3-1: config 1 has an invalid interface number: 10 but max is 2 [ 202.491164][ T820] usb 3-1: config 1 has an invalid interface number: 51 but max is 2 [ 202.491178][ T820] usb 3-1: config 1 has no interface number 0 [ 202.491190][ T820] usb 3-1: config 1 has no interface number 1 [ 202.491200][ T820] usb 3-1: config 1 has no interface number 2 [ 202.491278][ T820] usb 3-1: config 1 interface 172 altsetting 4 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 202.491307][ T820] usb 3-1: config 1 interface 172 altsetting 4 endpoint 0x83 has an invalid bInterval 155, changing to 7 [ 202.491337][ T820] usb 3-1: config 1 interface 172 altsetting 4 endpoint 0x83 has invalid maxpacket 1978, setting to 1024 [ 202.491357][ T820] usb 3-1: config 1 interface 172 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 202.491375][ T820] usb 3-1: config 1 interface 172 altsetting 4 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 202.491399][ T820] usb 3-1: config 1 interface 172 altsetting 4 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 202.491418][ T820] usb 3-1: config 1 interface 172 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 202.491434][ T820] usb 3-1: config 1 interface 172 altsetting 4 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 202.491452][ T820] usb 3-1: config 1 interface 172 altsetting 4 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 202.491489][ T820] usb 3-1: config 1 interface 10 altsetting 252 has a duplicate endpoint with address 0x9, skipping [ 202.491504][ T820] usb 3-1: config 1 interface 10 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 202.491519][ T820] usb 3-1: config 1 interface 10 altsetting 252 has a duplicate endpoint with address 0xE, skipping [ 202.491535][ T820] usb 3-1: config 1 interface 10 altsetting 252 has a duplicate endpoint with address 0x6, skipping [ 202.491550][ T820] usb 3-1: config 1 interface 10 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 202.491565][ T820] usb 3-1: config 1 interface 10 altsetting 252 has a duplicate endpoint with address 0x9, skipping [ 202.491582][ T820] usb 3-1: config 1 interface 10 altsetting 252 has a duplicate endpoint with address 0x8, skipping [ 202.491597][ T820] usb 3-1: config 1 interface 10 altsetting 252 has a duplicate endpoint with address 0x8, skipping [ 202.491613][ T820] usb 3-1: config 1 interface 10 altsetting 252 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 202.491632][ T820] usb 3-1: config 1 interface 10 altsetting 252 has a duplicate endpoint with address 0x1, skipping [ 202.491647][ T820] usb 3-1: config 1 interface 10 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 202.491662][ T820] usb 3-1: config 1 interface 10 altsetting 252 has an endpoint descriptor with address 0x74, changing to 0x4 [ 202.491680][ T820] usb 3-1: config 1 interface 10 altsetting 252 has a duplicate endpoint with address 0xE, skipping [ 202.491697][ T820] usb 3-1: config 1 interface 10 altsetting 252 bulk endpoint 0xF has invalid maxpacket 8 [ 202.491722][ T820] usb 3-1: config 1 interface 51 altsetting 255 has a duplicate endpoint with address 0x8, skipping [ 202.491738][ T820] usb 3-1: config 1 interface 51 altsetting 255 has a duplicate endpoint with address 0x3, skipping [ 202.491754][ T820] usb 3-1: config 1 interface 51 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 202.491769][ T820] usb 3-1: config 1 interface 51 altsetting 255 has a duplicate endpoint with address 0x8, skipping [ 202.491785][ T820] usb 3-1: config 1 interface 51 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 202.491801][ T820] usb 3-1: config 1 interface 172 has no altsetting 0 [ 202.491814][ T820] usb 3-1: config 1 interface 10 has no altsetting 0 [ 202.491826][ T820] usb 3-1: config 1 interface 51 has no altsetting 0 [ 202.494250][ T820] usb 3-1: New USB device found, idVendor=041e, idProduct=4060, bcdDevice=30.27 [ 202.494283][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.494297][ T820] usb 3-1: Product: syz [ 202.494308][ T820] usb 3-1: Manufacturer: syz [ 202.494318][ T820] usb 3-1: SerialNumber: syz [ 203.156675][ T6870] loop1: detected capacity change from 0 to 64 [ 203.387271][ T820] usb 3-1: USB disconnect, device number 13 [ 204.014854][ T6872] loop4: detected capacity change from 0 to 32768 [ 204.153518][ T1260] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 204.174807][ T6872] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.276 (6872) [ 204.364250][ T1260] usb 2-1: Using ep0 maxpacket: 32 [ 204.382712][ T1260] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 204.382739][ T1260] usb 2-1: config 0 has no interface number 0 [ 204.382783][ T1260] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.382812][ T1260] usb 2-1: config 0 interface 85 has no altsetting 0 [ 204.433309][ T1260] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 204.433340][ T1260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.433361][ T1260] usb 2-1: Product: syz [ 204.433377][ T1260] usb 2-1: Manufacturer: syz [ 204.433392][ T1260] usb 2-1: SerialNumber: syz [ 204.575982][ T6872] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 204.576016][ T6872] BTRFS info (device loop4): using crc32c checksum algorithm [ 204.642355][ T1260] usb 2-1: config 0 descriptor?? [ 204.907310][ T6897] netlink: 44 bytes leftover after parsing attributes in process `syz.2.281'. [ 205.060972][ T3364] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 205.111617][ T6872] BTRFS warning (device loop4): couldn't read tree root [ 205.112037][ T6872] BTRFS warning (device loop4): try to load backup roots slot 1 [ 205.186291][ T3411] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 205.199851][ T6872] BTRFS warning (device loop4): couldn't read tree root [ 205.200283][ T6872] BTRFS warning (device loop4): try to load backup roots slot 2 [ 205.264374][ T1260] appletouch 2-1:0.85: Geyser mode initialized. [ 205.307809][ T1027] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 205.307970][ T6872] BTRFS warning (device loop4): couldn't read tree root [ 205.307989][ T6872] BTRFS warning (device loop4): try to load backup roots slot 3 [ 205.315487][ T6902] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 205.532737][ T1260] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input5 [ 205.572800][ T6872] BTRFS info (device loop4): checking UUID tree [ 205.573999][ T6872] BTRFS info (device loop4): setting nodatasum [ 205.574021][ T6872] BTRFS info (device loop4): enabling ssd optimizations [ 205.574044][ T6872] BTRFS info (device loop4): turning on flush-on-commit [ 205.574062][ T6872] BTRFS info (device loop4): turning on async discard [ 205.574080][ T6872] BTRFS info (device loop4): enabling free space tree [ 205.574102][ T6872] BTRFS info (device loop4): trying to use backup root at mount time [ 205.574140][ T6872] BTRFS info (device loop4): max_inline set to 0 [ 206.272584][ T6908] loop0: detected capacity change from 0 to 4096 [ 206.507192][ T6920] binder: 6917:6920 unknown command 1074553622 [ 206.507211][ T6920] binder: 6917:6920 ioctl c0306201 2000000001c0 returned -22 [ 206.887729][ T5343] usb 2-1: USB disconnect, device number 20 [ 206.932036][ T6924] binder: 6917:6924 ioctl d000941e 200000000980 returned -22 [ 207.682894][ T5343] appletouch 2-1:0.85: input: appletouch disconnected [ 210.060880][ T6966] loop2: detected capacity change from 0 to 2048 [ 210.363526][ T6966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.363654][ T6966] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.459102][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 210.495696][ T6973] netlink: 'syz.3.305': attribute type 5 has an invalid length. [ 210.548765][ T6134] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.685694][ T6966] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.303: bg 0: block 345: padding at end of block bitmap is not set [ 210.712183][ T6944] loop1: detected capacity change from 0 to 40427 [ 210.712343][ T6966] EXT4-fs (loop2): Remounting filesystem read-only [ 210.715708][ T6944] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 210.715731][ T6944] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 210.842026][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 210.844722][ T6977] bridge_slave_1: left allmulticast mode [ 210.864534][ T6944] F2FS-fs (loop1): invalid crc value [ 210.864866][ T6977] bridge_slave_1: left promiscuous mode [ 210.865124][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.091945][ T6981] netlink: 'syz.3.306': attribute type 83 has an invalid length. [ 211.443208][ T6944] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 211.758831][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 211.759095][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 211.759122][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 212.899089][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.377300][ T7015] netlink: 112 bytes leftover after parsing attributes in process `syz.0.318'. [ 213.407854][ T7012] binder: BINDER_SET_CONTEXT_MGR already set [ 213.407868][ T7012] binder: 7010:7012 ioctl 4018620d 200000000040 returned -16 [ 213.687754][ T5738] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 213.877855][ T5738] usb 3-1: device descriptor read/64, error -71 [ 213.924393][ T7031] FAULT_INJECTION: forcing a failure. [ 213.924393][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 213.924434][ T7031] CPU: 0 UID: 0 PID: 7031 Comm: syz.0.326 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 213.924473][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.924486][ T7031] Call Trace: [ 213.924495][ T7031] [ 213.924504][ T7031] dump_stack_lvl+0xe8/0x150 [ 213.924537][ T7031] should_fail_ex+0x467/0x600 [ 213.924571][ T7031] should_failslab+0xa8/0x100 [ 213.924602][ T7031] __kmalloc_cache_noprof+0xa0/0x6b0 [ 213.924630][ T7031] ? hash_ip_create+0x6fe/0x1510 [ 213.924661][ T7031] ? hash_ip_create+0x6fe/0x1510 [ 213.924691][ T7031] hash_ip_create+0x6fe/0x1510 [ 213.924731][ T7031] ? __pfx_hash_ip_create+0x10/0x10 [ 213.924757][ T7031] ? __nla_parse+0x40/0x60 [ 213.924788][ T7031] ? __pfx_hash_ip_create+0x10/0x10 [ 213.924812][ T7031] ip_set_create+0xae4/0x1a40 [ 213.924842][ T7031] ? ip_set_create+0x4f1/0x1a40 [ 213.924883][ T7031] ? __pfx_ip_set_create+0x10/0x10 [ 213.924934][ T7031] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 213.924965][ T7031] ? lockdep_hardirqs_on+0x7a/0x110 [ 213.924993][ T7031] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 213.925031][ T7031] nfnetlink_rcv_msg+0xcd6/0x12c0 [ 213.925061][ T7031] ? nfnetlink_rcv_msg+0x22e/0x12c0 [ 213.925112][ T7031] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 213.925170][ T7031] ? __lock_acquire+0x683/0x2ce0 [ 213.925211][ T7031] ? __lock_acquire+0x683/0x2ce0 [ 213.925246][ T7031] ? sock_sendmsg_nosec+0x13a/0x180 [ 213.925278][ T7031] netlink_rcv_skb+0x226/0x4a0 [ 213.925311][ T7031] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 213.925344][ T7031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.925389][ T7031] ? bpf_lsm_capable+0x9/0x20 [ 213.925419][ T7031] ? security_capable+0x7e/0x2c0 [ 213.925455][ T7031] nfnetlink_rcv+0x2b9/0x28d0 [ 213.925486][ T7031] ? sock_sendmsg_nosec+0x13a/0x180 [ 213.925512][ T7031] ? __pfx_snprintf+0x10/0x10 [ 213.925537][ T7031] ? unwind_get_return_address+0x4d/0x90 [ 213.925570][ T7031] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 213.925610][ T7031] ? trim_netdev_trace+0x791/0x820 [ 213.925637][ T7031] ? __pfx_trim_netdev_trace+0x10/0x10 [ 213.925667][ T7031] ? stack_trace_save+0xa9/0x100 [ 213.925699][ T7031] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 213.925729][ T7031] ? save_netdev_trace_buffer+0x18f/0x5e0 [ 213.925757][ T7031] ? save_netdev_trace_buffer+0x4c3/0x5e0 [ 213.925787][ T7031] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 213.925809][ T7031] ? ref_tracker_free+0x668/0x820 [ 213.925836][ T7031] ? __netlink_deliver_tap+0x600/0x880 [ 213.925867][ T7031] ? netlink_deliver_tap+0x19c/0x1b0 [ 213.925898][ T7031] ? netlink_unicast+0x7b8/0x990 [ 213.925936][ T7031] ? netlink_sendmsg+0x813/0xb40 [ 213.925983][ T7031] ? sock_sendmsg_nosec+0x13a/0x180 [ 213.926004][ T7031] ? ____sys_sendmsg+0x565/0x870 [ 213.926033][ T7031] ? ___sys_sendmsg+0x2a5/0x360 [ 213.926061][ T7031] ? __x64_sys_sendmsg+0x1b7/0x290 [ 213.926090][ T7031] ? do_syscall_64+0x174/0x580 [ 213.926119][ T7031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.926150][ T7031] ? __skb_clone+0x449/0x6c0 [ 213.926189][ T7031] ? skb_clone+0x246/0x3a0 [ 213.926225][ T7031] ? __netlink_deliver_tap+0x838/0x880 [ 213.926256][ T7031] ? netlink_deliver_tap+0x2e/0x1b0 [ 213.926295][ T7031] ? netlink_deliver_tap+0x2e/0x1b0 [ 213.926328][ T7031] ? netlink_deliver_tap+0x2e/0x1b0 [ 213.926367][ T7031] netlink_unicast+0x7f5/0x990 [ 213.926409][ T7031] netlink_sendmsg+0x813/0xb40 [ 213.926452][ T7031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.926487][ T7031] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 213.926528][ T7031] ? aa_sock_msg_perm+0x122/0x200 [ 213.926560][ T7031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.926593][ T7031] sock_sendmsg_nosec+0x13a/0x180 [ 213.926620][ T7031] ____sys_sendmsg+0x565/0x870 [ 213.926660][ T7031] ? __might_fault+0xaf/0x130 [ 213.926694][ T7031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.926736][ T7031] ? import_iovec+0x73/0xa0 [ 213.926774][ T7031] ___sys_sendmsg+0x2a5/0x360 [ 213.926805][ T7031] ? __lock_acquire+0x683/0x2ce0 [ 213.926840][ T7031] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.926912][ T7031] ? __fget_files+0x2a/0x420 [ 213.926937][ T7031] ? __fget_files+0x3a8/0x420 [ 213.926975][ T7031] __x64_sys_sendmsg+0x1b7/0x290 [ 213.927011][ T7031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.927063][ T7031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.927088][ T7031] do_syscall_64+0x174/0x580 [ 213.927116][ T7031] ? trace_irq_disable+0x3b/0x140 [ 213.927147][ T7031] ? clear_bhb_loop+0x40/0x90 [ 213.927174][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.927196][ T7031] RIP: 0033:0x7fdfc187ce59 [ 213.927218][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.927237][ T7031] RSP: 002b:00007fdfbfad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.927260][ T7031] RAX: ffffffffffffffda RBX: 00007fdfc1af5fa0 RCX: 00007fdfc187ce59 [ 213.927276][ T7031] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 213.927303][ T7031] RBP: 00007fdfbfad6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.927316][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.927328][ T7031] R13: 00007fdfc1af6038 R14: 00007fdfc1af5fa0 R15: 00007fff15facad8 [ 213.927362][ T7031] [ 214.531322][ T7034] loop4: detected capacity change from 0 to 4096 [ 214.536689][ T7034] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 214.536711][ T7034] EXT4-fs (loop4): Test dummy encryption mode enabled [ 214.574766][ T7034] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 214.574904][ T7034] System zones: 0-5 [ 214.607019][ T7034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.677736][ T5738] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 214.771857][ T3411] ------------[ cut here ]------------ [ 214.771873][ T3411] in_task() && kcov_mode_enabled(mode) [ 214.771893][ T3411] WARNING: kernel/kcov.c:894 at kcov_remote_start+0x5bb/0x6f0, CPU#0: kworker/u8:16/3411 [ 214.771939][ T3411] Modules linked in: [ 214.771964][ T3411] CPU: 0 UID: 0 PID: 3411 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 214.771990][ T3411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.772004][ T3411] Workqueue: events_unbound cfg80211_wiphy_work [ 214.772032][ T3411] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 214.772061][ T3411] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc 93 eb 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 47 f9 6a 09 89 c0 48 c7 c7 c0 52 75 [ 214.772082][ T3411] RSP: 0018:ffffc9000f21fa78 EFLAGS: 00010202 [ 214.772101][ T3411] RAX: 0000000000000000 RBX: ffff888033218000 RCX: 0000000080000001 [ 214.772118][ T3411] RDX: 0000000000000000 RSI: ffffffff8baa4c60 RDI: ffffffff8baa4c20 [ 214.772134][ T3411] RBP: ffff8880270fadc0 R08: ffffffff8b325920 R09: 0000000000000000 [ 214.772150][ T3411] R10: 0000000000000000 R11: ffffffff8dfc3040 R12: dffffc0000000000 [ 214.772166][ T3411] R13: ffff88804e55df58 R14: 0000000000000000 R15: ffff88804e531180 [ 214.772181][ T3411] FS: 0000000000000000(0000) GS:ffff888125ed4000(0000) knlGS:0000000000000000 [ 214.772200][ T3411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.772215][ T3411] CR2: 0000200000000000 CR3: 0000000066c30000 CR4: 00000000003526f0 [ 214.772233][ T3411] Call Trace: [ 214.772242][ T3411] [ 214.772257][ T3411] ieee80211_iface_work+0x20c/0x1010 [ 214.772298][ T3411] cfg80211_wiphy_work+0x29e/0x420 [ 214.772324][ T3411] ? process_one_work+0x8cd/0x12b0 [ 214.772355][ T3411] process_one_work+0x93a/0x12b0 [ 214.772403][ T3411] ? __pfx_process_one_work+0x10/0x10 [ 214.772433][ T3411] ? do_raw_spin_lock+0x12b/0x2f0 [ 214.772466][ T3411] ? assign_work+0x3cf/0x5d0 [ 214.772503][ T3411] worker_thread+0xb05/0x10d0 [ 214.772534][ T3411] ? __kthread_parkme+0x71/0x1f0 [ 214.772580][ T3411] kthread+0x388/0x470 [ 214.772604][ T3411] ? __pfx_worker_thread+0x10/0x10 [ 214.772620][ T3411] ? __pfx_kthread+0x10/0x10 [ 214.772646][ T3411] ret_from_fork+0x514/0xb70 [ 214.772676][ T3411] ? __pfx_ret_from_fork+0x10/0x10 [ 214.772703][ T3411] ? __switch_to+0xc89/0x1420 [ 214.772730][ T3411] ? __pfx_kthread+0x10/0x10 [ 214.772757][ T3411] ret_from_fork_asm+0x1a/0x30 [ 214.772806][ T3411] [ 214.772827][ T3411] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 214.772844][ T3411] CPU: 0 UID: 0 PID: 3411 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 214.772870][ T3411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.772884][ T3411] Workqueue: events_unbound cfg80211_wiphy_work [ 214.772912][ T3411] Call Trace: [ 214.772920][ T3411] [ 214.772930][ T3411] vpanic+0x56c/0xa60 [ 214.772967][ T3411] ? __pfx__printk+0x10/0x10 [ 214.772990][ T3411] ? __pfx_vpanic+0x10/0x10 [ 214.773018][ T3411] ? is_bpf_text_address+0x292/0x2b0 [ 214.773051][ T3411] ? is_bpf_text_address+0x26/0x2b0 [ 214.773093][ T3411] panic+0xc5/0xd0 [ 214.773126][ T3411] ? __pfx_panic+0x10/0x10 [ 214.773167][ T3411] ? ret_from_fork_asm+0x1a/0x30 [ 214.773204][ T3411] __warn+0x315/0x4c0 [ 214.773234][ T3411] ? kcov_remote_start+0x5bb/0x6f0 [ 214.773264][ T3411] ? kcov_remote_start+0x5bb/0x6f0 [ 214.773292][ T3411] __report_bug+0x331/0x530 [ 214.773330][ T3411] ? kcov_remote_start+0x5bb/0x6f0 [ 214.773360][ T3411] ? __pfx___report_bug+0x10/0x10 [ 214.773392][ T3411] ? do_raw_spin_lock+0x12b/0x2f0 [ 214.773420][ T3411] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 214.773450][ T3411] ? rt_spin_lock+0x1e0/0x400 [ 214.773475][ T3411] ? rt_spin_lock+0x1e0/0x400 [ 214.773504][ T3411] ? kcov_remote_start+0x5bb/0x6f0 [ 214.773532][ T3411] report_bug+0x16a/0x220 [ 214.773571][ T3411] ? kcov_remote_start+0x5bb/0x6f0 [ 214.773598][ T3411] ? kcov_remote_start+0x5bd/0x6f0 [ 214.773625][ T3411] handle_bug+0x9c/0x200 [ 214.773662][ T3411] exc_invalid_op+0x1a/0x50 [ 214.773695][ T3411] asm_exc_invalid_op+0x1a/0x20 [ 214.773716][ T3411] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 214.773745][ T3411] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc 93 eb 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 47 f9 6a 09 89 c0 48 c7 c7 c0 52 75 [ 214.773763][ T3411] RSP: 0018:ffffc9000f21fa78 EFLAGS: 00010202 [ 214.773781][ T3411] RAX: 0000000000000000 RBX: ffff888033218000 RCX: 0000000080000001 [ 214.773797][ T3411] RDX: 0000000000000000 RSI: ffffffff8baa4c60 RDI: ffffffff8baa4c20 [ 214.773812][ T3411] RBP: ffff8880270fadc0 R08: ffffffff8b325920 R09: 0000000000000000 [ 214.773827][ T3411] R10: 0000000000000000 R11: ffffffff8dfc3040 R12: dffffc0000000000 [ 214.773842][ T3411] R13: ffff88804e55df58 R14: 0000000000000000 R15: ffff88804e531180 [ 214.773864][ T3411] ? rt_spin_lock+0x1e0/0x400 [ 214.773895][ T3411] ? kcov_remote_start+0xda/0x6f0 [ 214.773928][ T3411] ieee80211_iface_work+0x20c/0x1010 [ 214.773974][ T3411] cfg80211_wiphy_work+0x29e/0x420 [ 214.774012][ T3411] ? process_one_work+0x8cd/0x12b0 [ 214.774046][ T3411] process_one_work+0x93a/0x12b0 [ 214.774102][ T3411] ? __pfx_process_one_work+0x10/0x10 [ 214.774136][ T3411] ? do_raw_spin_lock+0x12b/0x2f0 [ 214.774172][ T3411] ? assign_work+0x3cf/0x5d0 [ 214.774206][ T3411] worker_thread+0xb05/0x10d0 [ 214.774233][ T3411] ? __kthread_parkme+0x71/0x1f0 [ 214.774262][ T3411] kthread+0x388/0x470 [ 214.774284][ T3411] ? __pfx_worker_thread+0x10/0x10 [ 214.774301][ T3411] ? __pfx_kthread+0x10/0x10 [ 214.774324][ T3411] ret_from_fork+0x514/0xb70 [ 214.774351][ T3411] ? __pfx_ret_from_fork+0x10/0x10 [ 214.774374][ T3411] ? __switch_to+0xc89/0x1420 [ 214.774396][ T3411] ? __pfx_kthread+0x10/0x10 [ 214.774420][ T3411] ret_from_fork_asm+0x1a/0x30 [ 214.774460][ T3411] [ 214.775057][ T3411] Kernel Offset: disabled