last executing test programs: 4m0.433719971s ago: executing program 0 (id=48): syz_open_dev$dvb_demux(0x0, 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$media(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff0000000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4b}, 0x94) 3m57.637064088s ago: executing program 0 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/161, 0xa1}], 0x1) 3m57.370938898s ago: executing program 0 (id=53): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket(0xa, 0x3, 0x3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x61, 0x35, 0x62, 0x64, 0x39, 0x63, 0x65, 0x34, 0x64, 0x62, 0x35, 0x37, 0x64, 0x65, 0x39, 0x65]}, &(0x7f0000000300)={0x0, "470f70bd989b74fc1963471df7d1ba26479918a5138a6a93e2abce7f2f9cdb7931450c6679c369b428e4403b24f03148bdf1f9558d12deadab63b858c64b24d9", 0x8029}, 0x48, 0xfffffffffffffffc) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="00f1ff0f0900000000000000", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) open$dir(0x0, 0x40000, 0x4) syz_open_dev$swradio(&(0x7f00000005c0), 0x1, 0x2) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc68, &(0x7f0000000fc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, &(0x7f0000000100), 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000003c0), 0x5005) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) 3m53.683424959s ago: executing program 0 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff0000000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4b}, 0x94) 3m51.475258759s ago: executing program 0 (id=61): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000000)={[{@grpquota}, {@errors_remount}]}, 0x3, 0x7b5, &(0x7f00000007c0)="$eJzs3c9rG9kdAPDvyJbtOGntQqFNT4ZCawiR69RNWig0pYdSaCDQnpMYWTGpZStYcoiNIQml0EsPLT0sbC45b3azt1z3x3X3sn/DHpaE7K4TNsseFi8jjRLZlhwltuQs/nxgrPdmnvTeV2/mzbNmkAI4tCbSP7mI4xH5NDmWrU8iWxGDEWcb5Z5urBfTJYnNzb99kdTLPNlYL0bLc1JHs8xPI+KDf0WcyO2st7q6tjBbLpeWs/xUbfHqVHV17eSVxdn50nxp6fT0zMypM785c3r/Yv3q47VjD//751++c/abf/7k3n8+TOJsHMu2tcaxXyZiIntP8ulbuMWf9ruyA5Z0VaabUvRTemgONI7yOB5jMbBLH/2hry0DAHrlRkRsAgCHTOL8DwCHTPNzgCcb68XmEo3rOTcP9IOJPnn0x4gYacTfvL7Z2DLYuGb3yUj9Oujok6R+jaQpiYjxfah/IiJu379wN12iR9chAdq5eSsiLo1PbB//0xFu+z0LL+tXXZSZ2JY3/kH/vJfOf367c/4XkcuO/5H63+3zn+E2x+6rePHxn3uwJZvfh0pbpPO/37fc2/a0Jf7M+ECW+0F9zpdPLl8pl9Kx7YcRMRn54TQ/vUsdk4+/fdxpW+v878v//eOttP708XmJ3IPB4a3PmZutze4l5laPbkX8bLBd/Mmz/k86zH/Pd1nHX3737zc7bUvjT+NtLjvj763NOxG/aNv/z++DSna9P3GqvjtMNXeKNt799I3RTvW39v/t+2lN68Xm/wL9kPb/6O7xjyet92tWX76Oj+6Mvd9p29b4L9xN698af/v9fyj5ez09lK27PlurLU9HDCV/3bn+1PPnNvPN8mn8kz9vf/zvtv+nw9ClLL35gtsaBx9+/varx99bafxzaf8nWRAv7P+XT9x7ujDQqf7u+n+mnprM1uwc/wZ3vG63DdzTmwcAAAAAAAAAAAAAAAAAAAAAAAAAXcpFxLFIcoVn6VyuUGj8hvePYzRXrlRrJy5XVpbmov5b2eORzzW/6nKs5ftQp7Pvw2/mT23L/zoifhQR/x8+Us8XipXy3EEHDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACZox1+/z/12fBBtw4A6JmRg24AANB3zv8AcPh0OP8PtV99pKdtAQD6o37+TwYPuhkAQB/5/B8ADh/nfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrs/Llz6bL59cZ6Mc3PXVtdWahcOzlXqi4UFleKhWJl+WphvlKZL5cKxcpixxe62XgoVypXZ2Jp5fpUrVStTVVX1y4uVlaWahevLM7Oly6W8n2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6V11dW5gtl0vLErsnbrwWzbiVddueXzAfr0M4EntLDEdEr6poHSWOHMzgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA98F0AAAD///BHHvM=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x4) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000a00)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@gid}, {}, {@check_relaxed}, {@dmode={'dmode', 0x3d, 0x40000000002}}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@showassoc}, {@overriderock}, {@unhide}, {@gid}, {@uid}, {@check_relaxed}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x50}}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'cp862'}}]}, 0x5, 0xa51, &(0x7f0000001240)="$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") 3m48.838575656s ago: executing program 0 (id=64): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f000004b680)=""/102385, 0x18fef) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0xfffffffd, 0x4) listen(r1, 0x3) 3m33.114094274s ago: executing program 32 (id=64): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f000004b680)=""/102385, 0x18fef) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0xfffffffd, 0x4) listen(r1, 0x3) 2m51.093027962s ago: executing program 4 (id=144): mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000200)=0x40000000007d, 0x5, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) socket$kcm(0x2b, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x4, 0x7, 0x0, 0x4}, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0x20000) 2m50.728605081s ago: executing program 4 (id=145): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket(0xa, 0x3, 0x3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x61, 0x35, 0x62, 0x64, 0x39, 0x63, 0x65, 0x34, 0x64, 0x62, 0x35, 0x37, 0x64, 0x65, 0x39, 0x65]}, &(0x7f0000000300)={0x0, "470f70bd989b74fc1963471df7d1ba26479918a5138a6a93e2abce7f2f9cdb7931450c6679c369b428e4403b24f03148bdf1f9558d12deadab63b858c64b24d9", 0x8029}, 0x48, 0xfffffffffffffffc) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="00f1ff0f0900000000000000", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) open$dir(0x0, 0x40000, 0x4) r3 = syz_open_dev$swradio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000680)=@mmap={0x8, 0xb, 0x4, 0x4, 0x8000, {}, {0x5, 0x0, 0xc, 0x2, 0xf1, 0x7, "8f22a717"}, 0x5, 0x1, {}, 0x1}) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc68, &(0x7f0000000fc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, &(0x7f0000000100), 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000003c0), 0x5005) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) 2m48.984166531s ago: executing program 4 (id=146): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x4c, 0x3, 0x0, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x141101, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r6, 0x3b87, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x9a}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000080)={0x18, r7, 0xfffffffffffffff9, 0x8}) 2m48.538540295s ago: executing program 4 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x8, 0x0) 2m46.765208382s ago: executing program 4 (id=151): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000000)={[{@grpquota}, {@errors_remount}]}, 0x3, 0x7b5, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x4) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000a00)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@gid}, {}, {@check_relaxed}, {@dmode={'dmode', 0x3d, 0x40000000002}}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@showassoc}, {@overriderock}, {@unhide}, {@gid}, {@uid}, {@check_relaxed}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x50}}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'cp862'}}]}, 0x5, 0xa51, &(0x7f0000001240)="$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") 2m41.480948697s ago: executing program 4 (id=162): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db25", 0xa3}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583d0c1bf65a670b2911e63cdc6d7ed06f73cfff3675832fce4151730f7ef2c8becc88720661c5013e176dca9141e3db9acc3293f66963645623733b0f3b11aec36f59f89b36e0236a31d", 0x8f}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6b", 0x2fa) 2m26.224381691s ago: executing program 33 (id=162): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db25", 0xa3}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583d0c1bf65a670b2911e63cdc6d7ed06f73cfff3675832fce4151730f7ef2c8becc88720661c5013e176dca9141e3db9acc3293f66963645623733b0f3b11aec36f59f89b36e0236a31d", 0x8f}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x2fa) 50.742454148s ago: executing program 1 (id=379): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001000700"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000000)={0x12, 0x0, 0x3}) 49.42706489s ago: executing program 1 (id=382): syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x7, &(0x7f0000000140)=[{0x9, 0x81, 0x2, 0x5}, {0x8, 0xd5, 0xfc, 0xf}, {0x240, 0x4, 0x0, 0x26}, {0x5, 0xff, 0x9, 0xd}, {0x9, 0x8, 0x2, 0x8}, {0x450, 0xd7, 0x3d, 0xfffff001}, {0xe2cb, 0x5, 0xf, 0x1}]}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4024587b, &(0x7f0000001a40)={{r2, &(0x7f0000000440)='/dev/nullb0\x00', 0x4000, &(0x7f0000000480)={@_ha_fsid={[0xffffffc0, 0xe557]}, {0x7f, 0x737, 0x3, 0x261}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x2, &(0x7f00000019c0)=[{0x3, 0x4, &(0x7f0000000700)='*%(-\\?-(\x00', &(0x7f0000000740)="af41bea5e910b68e8707e4cea6b68ed488bbb811ab0e445175a7fbb40b385430dea705babb8059c4ca081d93b697666b5fe53ff6ab3fb1ad92bd", 0x3a, 0x8}, {0x2, 0x401, &(0x7f0000000780)='sysfs\x00', &(0x7f00000008c0)="eb064c72c36ec0962249c2dbad451f5681df5b14f313d57a2f6db8e045cdd3ae8660c3832dd85f4759305e22fdfcec", 0x2f, 0x18}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) write(r3, &(0x7f0000000400)='dummy_', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) close(0x3) 42.224261649s ago: executing program 1 (id=394): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) 35.846602799s ago: executing program 1 (id=409): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r2}, 0x38) 34.364028468s ago: executing program 1 (id=411): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000000)={[{@grpquota}, {@errors_remount}]}, 0x3, 0x7b5, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x4) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000a00)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@gid}, {}, {@check_relaxed}, {@dmode={'dmode', 0x3d, 0x40000000002}}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@showassoc}, {@overriderock}, {@unhide}, {@gid}, {@uid}, {@check_relaxed}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x50}}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'cp862'}}]}, 0x5, 0xa51, &(0x7f0000001240)="$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") 32.675945532s ago: executing program 1 (id=413): openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r2, &(0x7f0000000780)='t', 0x1) 22.967523054s ago: executing program 2 (id=434): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xe69, 0x0, 0x0, 0x1000, 0x86, r0, 0x0, 0x30}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, 0x0, 0x1, 0x0, 0x0) 21.743674353s ago: executing program 2 (id=435): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) unshare(0x2a020480) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001000700"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r7, &(0x7f0000004380), 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000000)={0x12, 0x0, 0x3}) 19.488538637s ago: executing program 2 (id=436): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x61, 0x35, 0x62, 0x64, 0x39, 0x63, 0x65, 0x34, 0x64, 0x62, 0x35, 0x37, 0x64, 0x65, 0x39, 0x65]}, &(0x7f0000000300)={0x0, "470f70bd989b74fc1963471df7d1ba26479918a5138a6a93e2abce7f2f9cdb7931450c6679c369b428e4403b24f03148bdf1f9558d12deadab63b858c64b24d9", 0x8029}, 0x48, 0xfffffffffffffffc) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="00f1ff0f0900000000000000", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) open$dir(0x0, 0x40000, 0x4) r3 = syz_open_dev$swradio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000680)=@mmap={0x8, 0xb, 0x4, 0x4, 0x8000, {}, {0x5, 0x0, 0xc, 0x2, 0xf1, 0x7, "8f22a717"}, 0x5, 0x1, {}, 0x1}) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc68, &(0x7f0000000fc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, &(0x7f0000000100), 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000003c0), 0x5005) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) 17.413360784s ago: executing program 34 (id=413): openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r2, &(0x7f0000000780)='t', 0x1) 14.947202592s ago: executing program 2 (id=444): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$xfs(&(0x7f0000000300), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x3, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x144) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400, &(0x7f0000000400)) 13.096348818s ago: executing program 6 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.255569468s ago: executing program 3 (id=447): mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000200)=0x40000000007d, 0x5, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) socket$kcm(0x2b, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x4, 0x7, 0x0, 0x4}, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000) 11.139278749s ago: executing program 6 (id=448): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000010000), &(0x7f0000020000), &(0x7f0000018000)}) write(r1, &(0x7f0000018000), 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) 10.366777186s ago: executing program 3 (id=449): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x61, 0x65, 0x30, 0x32, 0x37, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x65, 0x35, 0x33, 0x37]}, &(0x7f0000000100)={0x0, "0011223344557c778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40020}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @desc4}, &(0x7f0000000780)={0x0, "1b699af42db92c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c49522f82f6ffcdcf860c0cadb646c435e077ecbbae7968117a70a9a1090", 0x25}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x3f, 0x64, 0x30, 0x30, 0x30, 0x31, 0x30, 0x66, 0x36, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f0000000900)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff0011220011223344556677889c69bbccddeeff00", 0x22}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x34, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x63, 0x30, 0x62, 0x61, 0x66]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x65, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 10.218059764s ago: executing program 3 (id=450): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffec5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001940)}, 0x80c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x28, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x47}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 8.456472446s ago: executing program 5 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000180)='./file0\x00', 0x1000) 8.380277642s ago: executing program 3 (id=453): openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$vbi(0x0, 0x2, 0x2) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x66b1, 0x0, 0x0, &(0x7f0000000100)=0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001a80)=""/4128, &(0x7f0000000440)="ebe9eb32ded3e6138d2f5d279bf8884859d3616136fe3c2501b9acaf38b5d9d6c84d5934a7e18be348d9a685134eb08cae5e00a0b87f5cf2bade8adbd26d4c373f2940b0691c2f663203cabb9227ec63ac1fb920b72a4151e6f1a2a45f82f3094dd5c926c5b33d8340bbc239ceb86266c5ae5b", &(0x7f0000000040), 0x4}, 0x38) syz_io_uring_submit(0x0, r2, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="10000000f3030000000000000000000010000000fb030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c9c500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0588c51a6bc3833983333c803ef8d898e6e39e9183cd316e1c2106451b8c21161846ae77b93f2ca347a864da3cb92da3961fc7b3642fb4e7e7dbbe5296cf7b8f296a3d0f5d91de519c1a2762286d930808f8f481a0f50cc35e13445be064fe02deadd389c0391f77dc699bc2e"], 0x420}}, 0x0) 8.347953671s ago: executing program 6 (id=454): mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000200)=0x40000000007d, 0x5, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) socket$kcm(0x2b, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x4, 0x7, 0x0, 0x4}, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 7.457292373s ago: executing program 6 (id=455): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket(0xa, 0x3, 0x3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000200)={'fscrypt:', @auto=[0x61, 0x35, 0x62, 0x64, 0x39, 0x63, 0x65, 0x34, 0x64, 0x62, 0x35, 0x37, 0x64, 0x65, 0x39, 0x65]}, &(0x7f0000000300)={0x0, "470f70bd989b74fc1963471df7d1ba26479918a5138a6a93e2abce7f2f9cdb7931450c6679c369b428e4403b24f03148bdf1f9558d12deadab63b858c64b24d9", 0x8029}, 0x48, 0xfffffffffffffffc) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="00f1ff0f0900000000000000", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) open$dir(0x0, 0x40000, 0x4) r4 = syz_open_dev$swradio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000680)=@mmap={0x8, 0xb, 0x4, 0x4, 0x8000, {}, {0x5, 0x0, 0xc, 0x2, 0xf1, 0x7, "8f22a717"}, 0x5, 0x1, {}, 0x1}) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc68, &(0x7f0000000fc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r5, &(0x7f0000000100), 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000003c0), 0x5005) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) 7.278470616s ago: executing program 5 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) getxattr(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)=@known='security.selinux\x00', 0x0, 0xfb) 6.645872525s ago: executing program 2 (id=457): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0x8}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@private=0xa010102, 0x3505, 0x2, 0x1, 0x0, 0x1}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 5.780033515s ago: executing program 3 (id=458): syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4024587b, &(0x7f0000001a40)={{r1, &(0x7f0000000440)='/dev/nullb0\x00', 0x4000, &(0x7f0000000480)={@_ha_fsid={[0xffffffc0, 0xe557]}, {0x7f, 0x737, 0x3, 0x261}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1}, 0x1, &(0x7f00000019c0)=[{0x3, 0x4, &(0x7f0000000700)='*%(-\\?-(\x00', &(0x7f0000000740)="af41bea5e910b68e8707e4cea6b68ed488bbb811ab0e445175a7fbb40b385430dea705babb8059c4ca081d93b697666b5fe53ff6ab3fb1ad92bd", 0x3a, 0x8}]}) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) write(r2, &(0x7f0000000400)='dummy_', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) close(0x3) 5.514037044s ago: executing program 5 (id=459): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000340)='1\n', 0x2) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='1', 0x1) 3.203484223s ago: executing program 6 (id=460): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x20800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x14004040) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d000000000000", 0x1b) 2.784054734s ago: executing program 5 (id=461): openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$vbi(0x0, 0x2, 0x2) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x66b1, &(0x7f0000000140)={0x0, 0xe967, 0x9ba20, 0x1, 0x10397}, 0x0, &(0x7f0000000100)=0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001a80)=""/4128, &(0x7f0000000440)="ebe9eb32ded3e6138d2f5d279bf8884859d3616136fe3c2501b9acaf38b5d9d6c84d5934a7e18be348d9a685134eb08cae5e00a0b87f5cf2bade8adbd26d4c373f2940b0691c2f663203cabb9227ec63ac1fb920b72a4151e6f1a2a45f82f3094dd5c926c5b33d8340bbc239ceb86266c5ae5b", &(0x7f0000000040), 0x4}, 0x38) syz_io_uring_submit(0x0, r2, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="10000000f3030000000000000000000010000000fb030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c9c500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0588c51a6bc3833983333c803ef8d898e6e39e9183cd316e1c2106451b8c21161846ae77b93f2ca347a864da3cb92da3961fc7b3642fb4e7e7dbbe5296cf7b8f296a3d0f5d91de519c1a2762286d930808f8f481a0f50cc35e13445be064fe02deadd389c0391f77dc699bc2e"], 0x420}}, 0x0) 1.330582192s ago: executing program 5 (id=462): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x22d4, 0x1503, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x9, 0xf9}}}}}]}}]}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r0 = socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) 237.11975ms ago: executing program 3 (id=463): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1', 0x1) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='1', 0x1) 183.028771ms ago: executing program 6 (id=464): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r2, 0x0, 0x0) 114.777053ms ago: executing program 2 (id=465): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000180)='./file0\x00', 0x1000) 0s ago: executing program 5 (id=466): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$key(0xf, 0x3, 0x2) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) kernel console output (not intermixed with test programs): 0: port 2(bridge_slave_1) entered disabled state [ 85.064820][ T5621] bridge_slave_1: entered allmulticast mode [ 85.071336][ T5621] bridge_slave_1: entered promiscuous mode [ 85.110541][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.171746][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.172090][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.172428][ T5620] bridge_slave_0: entered allmulticast mode [ 85.177067][ T5620] bridge_slave_0: entered promiscuous mode [ 85.194632][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.212071][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.241213][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.241545][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.241876][ T5620] bridge_slave_1: entered allmulticast mode [ 85.246518][ T5620] bridge_slave_1: entered promiscuous mode [ 85.263175][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.276966][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.284726][ T5622] team0: Port device team_slave_0 added [ 85.335686][ T5622] team0: Port device team_slave_1 added [ 85.337849][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.338118][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.339229][ T5626] bridge_slave_0: entered allmulticast mode [ 85.348558][ T5626] bridge_slave_0: entered promiscuous mode [ 85.405763][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.406131][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.408970][ T5626] bridge_slave_1: entered allmulticast mode [ 85.413539][ T5626] bridge_slave_1: entered promiscuous mode [ 85.441786][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.451566][ T5621] team0: Port device team_slave_0 added [ 85.458353][ T5619] team0: Port device team_slave_0 added [ 85.488842][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.496794][ T5621] team0: Port device team_slave_1 added [ 85.502556][ T5619] team0: Port device team_slave_1 added [ 85.505528][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.505568][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.505629][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.526094][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.604449][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.604495][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.604523][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.640865][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.689549][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.689596][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.690611][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.743959][ T5620] team0: Port device team_slave_0 added [ 85.749006][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.749047][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.749115][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.755079][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.755119][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.755184][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.777707][ T5626] team0: Port device team_slave_0 added [ 85.791520][ T5620] team0: Port device team_slave_1 added [ 85.855513][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.855559][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.855587][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.901625][ T5626] team0: Port device team_slave_1 added [ 85.945245][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.945564][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.945637][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.008155][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.015985][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.016017][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.055591][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.055633][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.055661][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.121466][ T5622] hsr_slave_0: entered promiscuous mode [ 86.124583][ T5622] hsr_slave_1: entered promiscuous mode [ 86.133038][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.133090][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.133130][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.221374][ T5619] hsr_slave_0: entered promiscuous mode [ 86.224115][ T5619] hsr_slave_1: entered promiscuous mode [ 86.226005][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 86.226291][ T5619] Cannot create hsr debugfs directory [ 86.256319][ T5621] hsr_slave_0: entered promiscuous mode [ 86.260892][ T5621] hsr_slave_1: entered promiscuous mode [ 86.262727][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 86.262780][ T5621] Cannot create hsr debugfs directory [ 86.334979][ T5626] hsr_slave_0: entered promiscuous mode [ 86.338372][ T5626] hsr_slave_1: entered promiscuous mode [ 86.340772][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 86.340792][ T5626] Cannot create hsr debugfs directory [ 86.388091][ T5620] hsr_slave_0: entered promiscuous mode [ 86.394334][ T5620] hsr_slave_1: entered promiscuous mode [ 86.399888][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 86.399952][ T5620] Cannot create hsr debugfs directory [ 86.838373][ T5636] Bluetooth: hci1: command tx timeout [ 86.952843][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.975075][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.982910][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.993975][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.999096][ T5636] Bluetooth: hci0: command tx timeout [ 87.007512][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.021658][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.029199][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.040463][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.078909][ T5632] Bluetooth: hci3: command tx timeout [ 87.078932][ T52] Bluetooth: hci2: command tx timeout [ 87.079489][ T5636] Bluetooth: hci4: command tx timeout [ 87.175326][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.186996][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.203472][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.215146][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.230598][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.243611][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.270006][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.284915][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.378683][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.393410][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.403348][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.412748][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.424711][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.435115][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.443339][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.453246][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.547733][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.559123][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.562853][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.580575][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.586678][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.596745][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.615336][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.625445][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.699275][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.751382][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.762481][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.764689][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.778934][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.799598][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.810092][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.812204][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.824693][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.839777][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.856193][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.891060][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.891310][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.924184][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.924428][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.970004][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.988908][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.989203][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.023749][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.024180][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.052530][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.135847][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.183219][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.192417][ T516] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.192694][ T516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.245838][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.246196][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.326286][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.373357][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.373511][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.433656][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.455995][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.456158][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.531454][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.591535][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.591878][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.644148][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.644302][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.918458][ T52] Bluetooth: hci1: command tx timeout [ 89.086742][ T52] Bluetooth: hci0: command tx timeout [ 89.157634][ T52] Bluetooth: hci4: command tx timeout [ 89.160915][ T52] Bluetooth: hci3: command tx timeout [ 89.160993][ T52] Bluetooth: hci2: command tx timeout [ 89.172541][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.381945][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.449557][ T5622] veth0_vlan: entered promiscuous mode [ 89.495439][ T5622] veth1_vlan: entered promiscuous mode [ 89.637705][ T5622] veth0_macvtap: entered promiscuous mode [ 89.680614][ T5622] veth1_macvtap: entered promiscuous mode [ 89.755615][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.793915][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.858421][ T1447] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.858507][ T1447] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.858562][ T1447] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.858602][ T1447] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.055234][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.119947][ T249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.120004][ T249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.232733][ T1447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.232778][ T1447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.321219][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.352440][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.364601][ T5622] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.396035][ T5626] veth0_vlan: entered promiscuous mode [ 90.412224][ T5621] veth0_vlan: entered promiscuous mode [ 90.438848][ T5626] veth1_vlan: entered promiscuous mode [ 90.469088][ T5621] veth1_vlan: entered promiscuous mode [ 92.186405][ T5636] Bluetooth: hci1: command tx timeout [ 92.186458][ T52] Bluetooth: hci0: command tx timeout [ 92.186489][ T52] Bluetooth: hci2: command tx timeout [ 92.186945][ T5632] Bluetooth: hci3: command tx timeout [ 92.186956][ T52] Bluetooth: hci4: command tx timeout [ 92.244881][ T10] cfg80211: failed to load regulatory.db [ 92.304952][ T5626] veth0_macvtap: entered promiscuous mode [ 92.325735][ T5620] veth0_vlan: entered promiscuous mode [ 92.344673][ T5619] veth0_vlan: entered promiscuous mode [ 92.354020][ T5626] veth1_macvtap: entered promiscuous mode [ 92.392779][ T5621] veth0_macvtap: entered promiscuous mode [ 92.399991][ T5620] veth1_vlan: entered promiscuous mode [ 92.414140][ T5619] veth1_vlan: entered promiscuous mode [ 92.435227][ T5621] veth1_macvtap: entered promiscuous mode [ 92.480274][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.515003][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.541425][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.589603][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.620715][ T5619] veth0_macvtap: entered promiscuous mode [ 92.648842][ T5620] veth0_macvtap: entered promiscuous mode [ 92.675785][ T5619] veth1_macvtap: entered promiscuous mode [ 92.702329][ T5620] veth1_macvtap: entered promiscuous mode [ 92.823886][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.828312][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.829523][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.829638][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.829756][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.829863][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.909097][ T139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.960072][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.960975][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.961019][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.996965][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.011406][ T5823] loop1: detected capacity change from 0 to 2048 [ 93.046267][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.065647][ T5823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.389392][ T5823] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 94.193237][ T89] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.231654][ T5823] EXT4-fs (loop1): Remounting filesystem read-only [ 94.411482][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.485843][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.485895][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.523513][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.523561][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.669534][ T139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.669721][ T139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.669880][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.669920][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.670456][ T139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.888899][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.899900][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.967502][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.976123][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.032753][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.032792][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.050643][ T139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.059573][ T1447] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.060662][ T1447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.159238][ T1447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.159276][ T1447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.252390][ T5830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 95.271149][ T5830] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 96.549835][ T1447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.549885][ T1447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.317025][ T5843] smc: net device vlan1 applied user defined pnetid SYZ2 [ 101.400170][ T5856] smc: net device vlan1 applied user defined pnetid SYZ2 [ 103.275730][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.555070][ T31] audit: type=1326 audit(1788391604.186:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.4.16" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a3e99e159 code=0x0 [ 104.138266][ T5880] loop1: detected capacity change from 0 to 64 [ 104.704345][ T5882] loop4: detected capacity change from 0 to 2048 [ 106.934850][ T5622] hfs: node 4:3 still has 1 user(s)! [ 106.994519][ T5882] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.987958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 108.397549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 108.971643][ T5890] loop1: detected capacity change from 0 to 64 [ 110.333449][ T5893] loop3: detected capacity change from 0 to 64 [ 110.384308][ T5622] hfs: node 4:3 still has 1 user(s)! [ 110.689132][ T5899] smc: net device vlan1 applied user defined pnetid SYZ2 [ 111.112999][ T5619] hfs: node 4:3 still has 1 user(s)! [ 111.876912][ T5804] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.901171][ T5804] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.286894][ T5729] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.287582][ T5923] loop2: detected capacity change from 0 to 64 [ 114.511226][ T5729] usb 2-1: Using ep0 maxpacket: 32 [ 114.569324][ T5729] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 114.722894][ T5729] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.757539][ T5729] usb 2-1: config 0 has no interface number 0 [ 114.817978][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.826805][ T5729] usb 2-1: Product: syz [ 114.836703][ T5729] usb 2-1: Manufacturer: syz [ 114.843468][ T5729] usb 2-1: SerialNumber: syz [ 115.112730][ T5729] usb 2-1: config 0 descriptor?? [ 115.352819][ T5729] usb 2-1: can't set config #0, error -71 [ 115.624779][ T5931] syzkaller0: entered promiscuous mode [ 115.624866][ T5931] syzkaller0: entered allmulticast mode [ 116.142574][ T5729] usb 2-1: USB disconnect, device number 2 [ 116.333031][ T5626] hfs: node 4:3 still has 1 user(s)! [ 118.637637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.660860][ T5954] loop3: detected capacity change from 0 to 64 [ 121.197543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 121.561896][ T5619] hfs: node 4:3 still has 1 user(s)! [ 124.847376][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 124.847601][ T5980] bridge_slave_1: left allmulticast mode [ 124.847684][ T5980] bridge_slave_1: left promiscuous mode [ 124.854263][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.933215][ T5980] bridge_slave_0: left allmulticast mode [ 124.933272][ T5980] bridge_slave_0: left promiscuous mode [ 124.945763][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.280678][ T5986] binder: 5985:5986 ioctl 4018620d 0 returned -22 [ 125.343623][ T5986] jffs2: notice: (5986) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 125.417433][ T5750] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.458023][ T31] audit: type=1800 audit(1788391626.086:3): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.42" name="alua_access_type" dev="configfs" ino=9388 res=0 errno=0 [ 125.578785][ T5750] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 125.589530][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.604744][ T5750] usb 3-1: config 0 descriptor?? [ 126.047113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.887162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 127.087115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.769920][ T5750] hackrf 3-1:0.0: usb_control_msg() failed -110 request 0e [ 127.771336][ T5750] hackrf 3-1:0.0: Could not detect board [ 127.773938][ T5750] hackrf 3-1:0.0: probe with driver hackrf failed with error -110 [ 128.877515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.407672][ T10] usb 3-1: USB disconnect, device number 2 [ 131.020619][ T31] audit: type=1326 audit(1788391631.656:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.3.47" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feab159e159 code=0x0 [ 131.300718][ T31] audit: type=1326 audit(1788391631.936:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.53" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4c879e159 code=0x0 [ 131.475901][ T6028] syzkaller0: entered promiscuous mode [ 131.475990][ T6028] syzkaller0: entered allmulticast mode [ 132.213625][ T6030] loop3: detected capacity change from 0 to 2048 [ 132.326780][ T6032] loop0: detected capacity change from 0 to 2048 [ 133.142323][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.142423][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.189501][ T6032] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.389247][ T6030] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.667172][ T6039] binder: 6037:6039 ioctl 4018620d 0 returned -22 [ 134.699564][ T6039] jffs2: notice: (6039) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 134.734059][ T1169] IPVS: starting estimator thread 0... [ 134.840746][ T6043] IPVS: using max 26 ests per chain, 62400 per kthread [ 134.845230][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 134.849607][ T6041] bridge_slave_1: left allmulticast mode [ 134.849676][ T6041] bridge_slave_1: left promiscuous mode [ 134.850289][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.886945][ T6041] bridge_slave_0: left allmulticast mode [ 134.887000][ T6041] bridge_slave_0: left promiscuous mode [ 134.905251][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.557555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.970881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 137.700236][ T6059] loop0: detected capacity change from 0 to 2048 [ 137.789883][ T6059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.298835][ T6065] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 139.375448][ T6065] EXT4-fs (loop0): Remounting filesystem read-only [ 143.225413][ T6087] loop1: detected capacity change from 0 to 64 [ 143.600278][ T6084] loop3: detected capacity change from 0 to 4096 [ 143.796488][ T6084] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 144.499476][ T5622] hfs: node 4:3 still has 1 user(s)! [ 144.551355][ T6084] ntfs3(loop3): Failed to load $Extend (-22). [ 144.551419][ T6084] ntfs3(loop3): Failed to initialize $Extend. [ 147.515701][ T89] IPVS: starting estimator thread 0... [ 147.618284][ T6102] IPVS: using max 39 ests per chain, 93600 per kthread [ 147.936422][ T6106] Zero length message leads to an empty skb [ 147.957435][ T89] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.957496][ T89] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.957551][ T89] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.957591][ T89] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.094895][ T6108] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 148.480691][ T31] audit: type=1326 audit(1788391649.116:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.3.77" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feab159e159 code=0x0 [ 148.803383][ T6114] loop3: detected capacity change from 0 to 2048 [ 148.927044][ T6114] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.399051][ T6117] loop4: detected capacity change from 0 to 64 [ 151.421366][ T5621] hfs: node 4:3 still has 1 user(s)! [ 151.827739][ T31] audit: type=1326 audit(1788391652.466:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.4.79" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a3e99e159 code=0x0 [ 152.116776][ T6125] loop4: detected capacity change from 0 to 2048 [ 152.221065][ T6125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.467662][ T13] IPVS: starting estimator thread 0... [ 153.513879][ T6128] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 153.514105][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 153.561089][ T6130] IPVS: using max 25 ests per chain, 60000 per kthread [ 153.608226][ T6131] netlink: 72 bytes leftover after parsing attributes in process `syz.3.81'. [ 153.618438][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 153.702756][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.525942][ T6148] loop1: detected capacity change from 0 to 2048 [ 155.628193][ T6148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.179878][ T6063] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 157.456849][ T6063] EXT4-fs (loop1): Remounting filesystem read-only [ 157.699906][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.713675][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.721864][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.769633][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.780197][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.139360][ T6160] smc: net device vlan1 applied user defined pnetid SYZ2 [ 159.878428][ T5625] Bluetooth: hci5: command tx timeout [ 161.958065][ T5625] Bluetooth: hci5: command tx timeout [ 161.991690][ T89] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.388598][ T991] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 162.520795][ T6186] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 163.138309][ T991] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 163.168523][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.185632][ T89] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.222812][ T991] usb 5-1: config 0 descriptor?? [ 164.057704][ T5625] Bluetooth: hci5: command tx timeout [ 164.284317][ T991] hackrf 5-1:0.0: usb_control_msg() failed -32 request 0e [ 164.292884][ T991] hackrf 5-1:0.0: Could not detect board [ 164.300668][ T991] hackrf 5-1:0.0: probe with driver hackrf failed with error -32 [ 164.401886][ T31] audit: type=1800 audit(1788391665.036:8): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.97" name="alua_access_type" dev="configfs" ino=8989 res=0 errno=0 [ 164.426125][ T6193] Unable to extract alua_access_type [ 164.447956][ T89] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.792002][ T6199] netlink: 64 bytes leftover after parsing attributes in process `syz.4.94'. [ 164.803800][ T5750] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 164.855032][ T6199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.866232][ T6199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.884664][ T5750] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.911211][ T6199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.937927][ T6199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.952796][ T89] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.377953][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 167.387223][ T5625] Bluetooth: hci5: command tx timeout [ 167.527250][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 167.531006][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 167.558478][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.558529][ T10] usb 3-1: config 0 has no interface number 0 [ 167.581324][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.581381][ T10] usb 3-1: Product: syz [ 167.581416][ T10] usb 3-1: Manufacturer: syz [ 167.581473][ T10] usb 3-1: SerialNumber: syz [ 167.626719][ T10] usb 3-1: config 0 descriptor?? [ 167.644013][ T89] bridge_slave_1: left allmulticast mode [ 167.644078][ T89] bridge_slave_1: left promiscuous mode [ 167.660775][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.708808][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 167.708872][ T10] usb 3-1: selecting invalid altsetting 1 [ 167.708894][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 167.810712][ T5354] usb 5-1: USB disconnect, device number 2 [ 167.848876][ T89] bridge_slave_0: left allmulticast mode [ 167.882425][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 167.883837][ T89] bridge_slave_0: left promiscuous mode [ 167.885903][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.892763][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 167.892818][ T10] usb 3-1: media controller created [ 168.127953][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.287902][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 168.288016][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 168.289230][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 168.714233][ T10] usb 3-1: USB disconnect, device number 3 [ 169.954065][ T6220] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 170.104923][ T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.172873][ T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.198444][ T89] bond0 (unregistering): Released all slaves [ 170.374392][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.581079][ T1391] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.637240][ T516] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.637337][ T516] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.637422][ T516] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.171796][ T6228] loop1: detected capacity change from 0 to 64 [ 172.158746][ T5622] hfs: node 4:3 still has 1 user(s)! [ 174.301822][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.301952][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.302130][ T6155] bridge_slave_0: entered allmulticast mode [ 174.304058][ T6155] bridge_slave_0: entered promiscuous mode [ 174.379055][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.379307][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.394283][ T6155] bridge_slave_1: entered allmulticast mode [ 174.436707][ T6155] bridge_slave_1: entered promiscuous mode [ 174.707346][ T89] hsr_slave_0: left promiscuous mode [ 174.734809][ T89] hsr_slave_1: left promiscuous mode [ 174.735584][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.749011][ T89] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.773620][ T89] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.827556][ T89] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.663364][ T89] veth1_macvtap: left promiscuous mode [ 175.672017][ T89] veth0_macvtap: left promiscuous mode [ 175.683806][ T89] veth1_vlan: left promiscuous mode [ 175.683946][ T89] veth0_vlan: left promiscuous mode [ 177.466455][ T89] team0 (unregistering): Port device team_slave_1 removed [ 177.531228][ T89] team0 (unregistering): Port device team_slave_0 removed [ 178.381365][ T6155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.457429][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 178.569893][ T6274] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 178.580154][ T6155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.871187][ T249] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.919867][ T6155] team0: Port device team_slave_0 added [ 178.924983][ T249] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.943232][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.944180][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.985075][ T6155] team0: Port device team_slave_1 added [ 178.990898][ T5750] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 179.125635][ T6282] loop1: detected capacity change from 0 to 2048 [ 179.156683][ T5750] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.166911][ T5750] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.166950][ T5750] usb 5-1: config 0 has no interface number 0 [ 179.166993][ T5750] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 179.167021][ T5750] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 179.167093][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.227142][ T5750] usb 5-1: config 0 descriptor?? [ 179.234653][ T6278] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.275689][ T5750] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 179.291357][ T6282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.377248][ T6286] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 179.393349][ T6286] EXT4-fs (loop1): Remounting filesystem read-only [ 179.768535][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.768570][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.768638][ T6155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.825333][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.825369][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.825413][ T6155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.382256][ T6155] hsr_slave_0: entered promiscuous mode [ 180.410544][ T6155] hsr_slave_1: entered promiscuous mode [ 180.442955][ T6155] debugfs: 'hsr0' already exists in 'hsr' [ 180.443014][ T6155] Cannot create hsr debugfs directory [ 180.540884][ T5751] usb 5-1: USB disconnect, device number 3 [ 181.017484][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 181.243667][ T6301] loop3: detected capacity change from 0 to 64 [ 182.380724][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.495420][ T5619] hfs: node 4:3 still has 1 user(s)! [ 184.192875][ T6319] CIFS: Attempting to mount //::1/share [ 184.429947][ T6155] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 184.472189][ T6155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.487555][ T6155] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 184.532314][ T6155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.543031][ T6155] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 184.632060][ T6155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.674898][ T6155] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 184.703190][ T6155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.811736][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 184.847797][ T6306] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 185.071943][ T6319] CIFS: VFS: cifs_mount failed w/return code = -112 [ 185.374262][ T6155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.458352][ T6155] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.520634][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.520842][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.553783][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.554011][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.587490][ T5751] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 185.652273][ T5629] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 185.748080][ T5751] usb 3-1: Using ep0 maxpacket: 8 [ 185.757450][ T5751] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 185.793530][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.793578][ T5751] usb 3-1: Product: syz [ 185.793610][ T5751] usb 3-1: Manufacturer: syz [ 185.793628][ T5751] usb 3-1: SerialNumber: syz [ 185.809403][ T5629] usb 4-1: Using ep0 maxpacket: 16 [ 185.814257][ T5629] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 185.844946][ T5751] usb 3-1: config 0 descriptor?? [ 185.848638][ T5629] usb 4-1: config 0 has no interfaces? [ 185.882186][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.882249][ T5629] usb 4-1: Product: syz [ 185.882312][ T5629] usb 4-1: Manufacturer: syz [ 185.882330][ T5629] usb 4-1: SerialNumber: syz [ 185.922923][ T5629] usb 4-1: config 0 descriptor?? [ 186.130815][ T5751] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 186.727449][ T5742] usb 4-1: USB disconnect, device number 2 [ 186.762522][ T5751] usb write operation failed. (-71) [ 186.837547][ T5751] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 186.849608][ T5751] dvbdev: DVB: registering new adapter (Terratec H7) [ 186.867182][ T5751] usb 3-1: media controller created [ 186.868280][ T5751] usb read operation failed. (-71) [ 186.874984][ T5751] usb write operation failed. (-71) [ 186.902505][ T5751] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 186.931211][ T5751] usb 3-1: USB disconnect, device number 4 [ 187.297225][ T5769] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 187.459543][ T5769] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 187.471769][ T5769] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 187.471819][ T5769] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 187.471876][ T5769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.652278][ T6371] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 187.667684][ T6371] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 188.005985][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 188.280709][ T6383] openvswitch: netlink: IP tunnel dst address not specified [ 188.338471][ T5625] Bluetooth: hci0: command 0x2016 tx timeout [ 189.403447][ T5769] pegasus 2-1:1.0: probe with driver pegasus failed with error -71 [ 189.471602][ T5769] usb 2-1: USB disconnect, device number 3 [ 189.803835][ T6155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.924189][ T6369] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 190.232956][ T6399] binder: 6398:6399 ioctl 4018620d 0 returned -22 [ 190.296628][ T6399] jffs2: notice: (6399) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 190.449976][ T5625] Bluetooth: hci0: command 0x2016 tx timeout [ 190.848370][ T5751] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 190.872682][ T6155] veth0_vlan: entered promiscuous mode [ 190.921228][ T6155] veth1_vlan: entered promiscuous mode [ 191.017596][ T5751] usb 5-1: Using ep0 maxpacket: 8 [ 191.024067][ T5751] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 191.046142][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.046202][ T5751] usb 5-1: Product: syz [ 191.046224][ T5751] usb 5-1: Manufacturer: syz [ 191.046244][ T5751] usb 5-1: SerialNumber: syz [ 191.073667][ T6155] veth0_macvtap: entered promiscuous mode [ 191.092416][ T5751] usb 5-1: config 0 descriptor?? [ 191.118427][ T6155] veth1_macvtap: entered promiscuous mode [ 191.270285][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.315423][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.351462][ T6411] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 191.364730][ T5751] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 191.457817][ T516] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.617502][ T139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.618392][ T139] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.618464][ T139] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.791240][ T5751] usb write operation failed. (-71) [ 191.803128][ T5751] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 191.814219][ T5751] dvbdev: DVB: registering new adapter (Terratec H7) [ 191.821145][ T5751] usb 5-1: media controller created [ 191.826831][ T5751] usb read operation failed. (-71) [ 191.833551][ T5751] usb write operation failed. (-71) [ 191.850128][ T5751] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 191.865052][ T5751] usb 5-1: USB disconnect, device number 4 [ 191.876348][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 191.905313][ T516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.905350][ T516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.029761][ T516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.029819][ T516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.421890][ T6433] openvswitch: netlink: IP tunnel dst address not specified [ 194.457625][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.457727][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.981246][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.008295][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.017217][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.017264][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.148411][ T5729] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 196.932430][ T6442] openvswitch: netlink: IP tunnel dst address not specified [ 196.993755][ T5729] usb 3-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 197.008132][ T5729] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 197.008194][ T5729] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 197.008246][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.045629][ T6447] syzkaller0: entered promiscuous mode [ 197.045667][ T6447] syzkaller0: entered allmulticast mode [ 197.501819][ T6453] binder: 6452:6453 ioctl 4018620d 0 returned -22 [ 197.535109][ T6453] MTD: Couldn't look up './dev/mtdblock0': -2 [ 198.135710][ T5729] pegasus 3-1:1.0: probe with driver pegasus failed with error -71 [ 198.207925][ T5729] usb 3-1: USB disconnect, device number 5 [ 198.215880][ T31] audit: type=1326 audit(1788391698.846:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.4.145" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a3e99e159 code=0x0 [ 198.443122][ T6459] loop4: detected capacity change from 0 to 2048 [ 198.615786][ T6459] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.478653][ T5804] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 201.630887][ T6481] binder: 6479:6481 ioctl 4018620d 0 returned -22 [ 201.696253][ T6481] jffs2: notice: (6481) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 201.715373][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.715934][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.810933][ T5804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 201.811012][ T5804] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 201.820209][ T5804] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 201.820249][ T5804] usb 4-1: can't read configurations, error -71 [ 202.174132][ T6485] binder: 6484:6485 ioctl 4018620d 0 returned -22 [ 202.190245][ T6485] jffs2: notice: (6485) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 202.636185][ T6494] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 202.907765][ T5742] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 203.097209][ T5742] usb 2-1: Using ep0 maxpacket: 16 [ 203.103035][ T5742] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.113432][ T5742] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.126522][ T5742] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.155032][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.163437][ T5742] usb 2-1: Product: syz [ 203.163482][ T5742] usb 2-1: Manufacturer: syz [ 203.163502][ T5742] usb 2-1: SerialNumber: syz [ 203.200538][ T5742] usb 2-1: 0:2 : does not exist [ 203.457259][ T991] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 203.509076][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 203.786890][ T5742] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 203.792025][ T991] usb 6-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 203.801679][ T991] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 203.801722][ T991] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 203.801760][ T991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.967525][ T5742] usb 2-1: USB disconnect, device number 4 [ 204.047876][ T6513] loop4: detected capacity change from 0 to 2048 [ 204.164178][ T6513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.557231][ T6519] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 205.785083][ T991] pegasus 6-1:1.0: probe with driver pegasus failed with error -32 [ 206.787717][ T6519] EXT4-fs (loop4): Remounting filesystem read-only [ 206.876124][ T6035] EXT4-fs (loop4): ext4_do_writepages: jbd2_start: 12288 pages, ino 18; err -30 [ 206.907474][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.839176][ T4938] Bluetooth: hci4: command 0x0406 tx timeout [ 207.839235][ T4938] Bluetooth: hci0: command 0x2016 tx timeout [ 207.839312][ T4938] Bluetooth: hci3: command 0x0406 tx timeout [ 207.839343][ T4938] Bluetooth: hci2: command 0x0406 tx timeout [ 208.109408][ T5742] usb 6-1: USB disconnect, device number 2 [ 208.832416][ T6541] binder: 6540:6541 ioctl 4018620d 0 returned -22 [ 208.859570][ T5354] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 208.941742][ T6541] jffs2: notice: (6541) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 209.058001][ T6544] FAULT_INJECTION: forcing a failure. [ 209.058001][ T6544] name failslab, interval 1, probability 0, space 0, times 1 [ 209.058068][ T6544] CPU: 1 UID: 0 PID: 6544 Comm: syz.1.166 Not tainted syzkaller #0 PREEMPT(full) [ 209.058094][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.058121][ T6544] Call Trace: [ 209.058134][ T6544] [ 209.058143][ T6544] dump_stack_lvl+0xe8/0x150 [ 209.058195][ T6544] should_fail_ex+0x3eb/0x540 [ 209.058229][ T6544] should_failslab+0xa8/0x100 [ 209.058257][ T6544] ? ioctx_alloc+0xf6/0x830 [ 209.058282][ T6544] kmem_cache_alloc_noprof+0xa1/0x600 [ 209.058319][ T6544] ? ioctx_alloc+0xf6/0x830 [ 209.058356][ T6544] ioctx_alloc+0xf6/0x830 [ 209.058379][ T6544] ? __might_fault+0xaf/0x130 [ 209.058416][ T6544] __se_sys_io_setup+0x7b/0x1d0 [ 209.058440][ T6544] do_syscall_64+0x166/0x520 [ 209.058468][ T6544] ? trace_irq_disable+0x3b/0x140 [ 209.058490][ T6544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.058513][ T6544] ? clear_bhb_loop+0x70/0xc0 [ 209.058541][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.058564][ T6544] RIP: 0033:0x7f224019e159 [ 209.058590][ T6544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.058608][ T6544] RSP: 002b:00007f22410ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 209.058632][ T6544] RAX: ffffffffffffffda RBX: 00007f2240425fa0 RCX: 00007f224019e159 [ 209.058649][ T6544] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000004089 [ 209.058663][ T6544] RBP: 00007f2240235024 R08: 0000000000000000 R09: 0000000000000000 [ 209.058677][ T6544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.058690][ T6544] R13: 00007f2240426038 R14: 00007f2240425fa0 R15: 00007ffeaa3208e8 [ 209.058724][ T6544] [ 209.062719][ T5354] usb 6-1: Using ep0 maxpacket: 16 [ 209.073988][ T5354] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 209.131112][ T5354] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 209.131200][ T5354] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 209.182876][ T5354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.182961][ T5354] usb 6-1: Product: syz [ 209.183002][ T5354] usb 6-1: Manufacturer: syz [ 209.183049][ T5354] usb 6-1: SerialNumber: syz [ 209.270430][ T5354] usb 6-1: config 0 descriptor?? [ 209.361460][ T5354] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 209.361547][ T5354] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 209.941161][ T6555] loop1: detected capacity change from 0 to 64 [ 210.081112][ T5354] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 210.101102][ T5354] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 210.949888][ T5354] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 210.995022][ T5354] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 211.012359][ T5354] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 211.029320][ T5354] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 211.066336][ T5354] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 211.077954][ T5354] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 211.095964][ T5354] usb 6-1: USB disconnect, device number 3 [ 211.109468][ T5622] hfs: node 4:3 still has 1 user(s)! [ 214.222083][ T5354] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 214.407863][ T5354] usb 6-1: Using ep0 maxpacket: 8 [ 214.411154][ T5354] usb 6-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 214.426099][ T5354] usb 6-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.426176][ T5354] usb 6-1: config 0 interface 0 has no altsetting 0 [ 214.426212][ T5354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.502877][ T5354] usb 6-1: config 0 descriptor?? [ 214.950765][ T5354] usbhid 6-1:0.0: can't add hid device: -71 [ 214.951008][ T5354] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 214.996907][ T5354] usb 6-1: USB disconnect, device number 4 [ 217.510125][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.178'. [ 218.159345][ T6605] fuse: Unknown parameter 'grou00000000000000000000' [ 218.595621][ T6612] binder: 6609:6612 ioctl 4018620d 0 returned -22 [ 218.635221][ T6612] jffs2: notice: (6612) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 220.372288][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.790712][ T6632] openvswitch: netlink: IP tunnel dst address not specified [ 220.830570][ T6620] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 222.849824][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.861741][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.870636][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.889677][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.903402][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.499681][ T6653] binder: 6651:6653 ioctl 4018620d 0 returned -22 [ 224.585321][ T6653] jffs2: notice: (6653) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 224.958003][ T6664] FAULT_INJECTION: forcing a failure. [ 224.958003][ T6664] name failslab, interval 1, probability 0, space 0, times 0 [ 224.958055][ T6664] CPU: 1 UID: 0 PID: 6664 Comm: syz.5.186 Not tainted syzkaller #0 PREEMPT(full) [ 224.958082][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.958096][ T6664] Call Trace: [ 224.958105][ T6664] [ 224.958114][ T6664] dump_stack_lvl+0xe8/0x150 [ 224.958154][ T6664] should_fail_ex+0x3eb/0x540 [ 224.958184][ T6664] should_failslab+0xa8/0x100 [ 224.958213][ T6664] ? ioctx_alloc+0xf6/0x830 [ 224.958237][ T6664] kmem_cache_alloc_noprof+0xa1/0x600 [ 224.958276][ T6664] ? ioctx_alloc+0xf6/0x830 [ 224.958305][ T6664] ioctx_alloc+0xf6/0x830 [ 224.958329][ T6664] ? __might_fault+0xaf/0x130 [ 224.958373][ T6664] __se_sys_io_setup+0x7b/0x1d0 [ 224.958398][ T6664] do_syscall_64+0x166/0x520 [ 224.958425][ T6664] ? trace_irq_disable+0x3b/0x140 [ 224.958446][ T6664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.958468][ T6664] ? clear_bhb_loop+0x70/0xc0 [ 224.958494][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.958516][ T6664] RIP: 0033:0x7fafe659e159 [ 224.958537][ T6664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.958556][ T6664] RSP: 002b:00007fafe753b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 224.958581][ T6664] RAX: ffffffffffffffda RBX: 00007fafe6825fa0 RCX: 00007fafe659e159 [ 224.958597][ T6664] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000004089 [ 224.958611][ T6664] RBP: 00007fafe6635024 R08: 0000000000000000 R09: 0000000000000000 [ 224.958626][ T6664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.958639][ T6664] R13: 00007fafe6826038 R14: 00007fafe6825fa0 R15: 00007ffed8635ff8 [ 224.958673][ T6664] [ 224.998367][ T5636] Bluetooth: hci1: command tx timeout [ 225.528120][ T991] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 225.697927][ T991] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 225.708901][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.720485][ T991] usb 4-1: config 0 descriptor?? [ 225.945785][ T991] hackrf 4-1:0.0: usb_control_msg() failed -32 request 0e [ 225.956021][ T991] hackrf 4-1:0.0: Could not detect board [ 225.956113][ T991] hackrf 4-1:0.0: probe with driver hackrf failed with error -32 [ 226.371350][ T6678] netlink: 64 bytes leftover after parsing attributes in process `syz.3.189'. [ 226.392084][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.400472][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.420565][ T1169] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.471202][ T6679] loop5: detected capacity change from 0 to 64 [ 226.559222][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.600029][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.778143][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.870387][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.087335][ T5636] Bluetooth: hci1: command tx timeout [ 228.138815][ T6155] hfs: node 4:3 still has 1 user(s)! [ 228.212333][ T1169] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.160579][ T5636] Bluetooth: hci1: command tx timeout [ 229.186243][ T1169] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.755744][ T5751] usb 4-1: USB disconnect, device number 5 [ 230.806610][ T1169] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.237318][ T5636] Bluetooth: hci1: command tx timeout [ 232.838959][ T5804] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 232.868007][ T5804] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 233.337182][ T5804] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 233.497095][ T5804] usb 4-1: Using ep0 maxpacket: 16 [ 233.503314][ T5804] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 233.514588][ T5804] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 233.514632][ T5804] usb 4-1: config 0 has no interface number 0 [ 233.514698][ T5804] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 233.514729][ T5804] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 233.562256][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.562302][ T5804] usb 4-1: Product: syz [ 233.562348][ T5804] usb 4-1: Manufacturer: syz [ 233.562369][ T5804] usb 4-1: SerialNumber: syz [ 233.602279][ T5804] usb 4-1: config 0 descriptor?? [ 233.610790][ T6723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 233.610958][ T6723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 233.728625][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.762860][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.779306][ T1169] bond0 (unregistering): Released all slaves [ 233.962556][ T6736] loop5: detected capacity change from 0 to 64 [ 234.177463][ T6723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.225568][ T6723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.515269][ T5804] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 234.992323][ T6155] hfs: node 4:3 still has 1 user(s)! [ 235.031403][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 235.171061][ T5769] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 235.261950][ T6748] binder: 6746:6748 ioctl 4018620d 0 returned -22 [ 235.275063][ T6748] jffs2: notice: (6748) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 235.297173][ T5354] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 235.343707][ T5769] usb 2-1: Using ep0 maxpacket: 32 [ 235.349865][ T5769] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 235.364545][ T5769] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.364618][ T5769] usb 2-1: config 0 has no interface number 0 [ 235.384570][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.384613][ T5769] usb 2-1: Product: syz [ 235.384690][ T5769] usb 2-1: Manufacturer: syz [ 235.384719][ T5769] usb 2-1: SerialNumber: syz [ 235.415491][ T5769] usb 2-1: config 0 descriptor?? [ 235.437682][ T5769] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 235.447747][ T5354] usb 6-1: Using ep0 maxpacket: 32 [ 235.453750][ T5769] usb 2-1: selecting invalid altsetting 1 [ 235.453823][ T5769] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 235.454320][ T5354] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 235.458876][ T5354] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 235.458961][ T5354] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.459084][ T5354] usb 6-1: config 0 interface 0 has no altsetting 0 [ 235.459185][ T5354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.489600][ T5354] usb 6-1: config 0 descriptor?? [ 235.534718][ T5769] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 235.545636][ T5769] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 235.545724][ T5769] usb 2-1: media controller created [ 235.583874][ T5769] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.615112][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.615905][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.616744][ T6647] bridge_slave_0: entered allmulticast mode [ 235.650849][ T6647] bridge_slave_0: entered promiscuous mode [ 235.665494][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.673121][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.673337][ T6647] bridge_slave_1: entered allmulticast mode [ 235.703057][ T6647] bridge_slave_1: entered promiscuous mode [ 235.811924][ T6754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.827830][ T6754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.918595][ T6754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.931813][ T6754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.984884][ T5354] usbhid 6-1:0.0: can't add hid device: -71 [ 235.985095][ T5354] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 236.002998][ T5751] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 236.024057][ T5354] usb 6-1: USB disconnect, device number 5 [ 236.084037][ T6647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.126771][ T1169] hsr_slave_0: left promiscuous mode [ 236.134307][ T1169] hsr_slave_1: left promiscuous mode [ 236.137340][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.137409][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.141013][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.141032][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.175005][ T5751] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 236.187707][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.204357][ T5751] usb 3-1: config 0 descriptor?? [ 236.223994][ T1169] veth1_macvtap: left promiscuous mode [ 236.231394][ T1169] veth0_macvtap: left promiscuous mode [ 236.238416][ T1169] veth1_vlan: left promiscuous mode [ 236.245619][ T1169] veth0_vlan: left promiscuous mode [ 236.430670][ T5751] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 236.481182][ T1169] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 236.778437][ T5769] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 236.778937][ T5769] zl10353_read_register: readreg error (reg=127, ret==-110) [ 236.872966][ T5751] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 236.873030][ T5751] [drm] Initialized udl on minor 1 [ 236.962441][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 236.979914][ T6715] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 236.991343][ T5751] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 237.036468][ T5751] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 237.051851][ T5751] usb 3-1: USB disconnect, device number 6 [ 237.060637][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 237.160240][ T5769] usb 2-1: USB disconnect, device number 5 [ 237.302464][ T5804] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 237.302523][ T5804] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 237.303188][ T5804] asix 4-1:0.34: probe with driver asix failed with error -71 [ 237.352003][ T5804] usb 4-1: USB disconnect, device number 6 [ 237.442428][ T6647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.453862][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 237.503311][ T6647] team0: Port device team_slave_0 added [ 237.513698][ T6647] team0: Port device team_slave_1 added [ 237.580189][ T6773] binder: 6772:6773 ioctl 4018620d 0 returned -22 [ 237.592839][ T6773] jffs2: notice: (6773) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 237.709689][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.709721][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.709757][ T6647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.714054][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.714095][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.714161][ T6647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.002204][ T6647] hsr_slave_0: entered promiscuous mode [ 238.013643][ T6647] hsr_slave_1: entered promiscuous mode [ 238.020984][ T6647] debugfs: 'hsr0' already exists in 'hsr' [ 238.021006][ T6647] Cannot create hsr debugfs directory [ 238.057661][ T5804] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 238.195791][ T6784] netlink: 40 bytes leftover after parsing attributes in process `syz.3.211'. [ 238.207935][ T5804] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 238.218598][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.238944][ T5804] usb 6-1: config 0 descriptor?? [ 238.305881][ T1169] IPVS: stop unused estimator thread 0... [ 238.477653][ T5804] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 240.641838][ T5804] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 240.656051][ T5804] [drm] Initialized udl on minor 1 [ 240.760691][ T5804] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 240.761127][ T5804] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 240.796508][ T5804] usb 6-1: USB disconnect, device number 6 [ 240.797899][ T5751] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 240.826261][ T5751] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 241.550388][ T6805] binder: 6803:6805 ioctl 4018620d 0 returned -22 [ 241.629993][ T6805] jffs2: notice: (6805) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.656838][ T6647] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 241.680977][ T6647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.691239][ T6647] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 241.713444][ T6647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 241.723205][ T6647] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 241.753840][ T6647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 241.770793][ T6647] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 241.794743][ T6647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 243.616845][ T6647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.699635][ T6647] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.741117][ T1447] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.741351][ T1447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.793443][ T1447] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.793682][ T1447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.944478][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 245.051529][ T6836] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 245.176340][ T31] audit: type=1326 audit(1788391745.806:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.219" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feab159e159 code=0x0 [ 245.286655][ T6855] loop3: detected capacity change from 0 to 2048 [ 245.302528][ T6855] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.150186][ T31] audit: type=1326 audit(1788391747.786:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.3.225" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feab159e159 code=0x0 [ 247.286484][ T6647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.530169][ T6875] loop3: detected capacity change from 0 to 2048 [ 247.671624][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 247.701435][ T6875] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.451315][ T6880] loop5: detected capacity change from 0 to 64 [ 249.316114][ T6155] hfs: node 4:3 still has 1 user(s)! [ 249.525678][ T31] audit: type=1326 audit(1788391750.156:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.3.227" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feab159e159 code=0x0 [ 249.871084][ T6895] loop3: detected capacity change from 0 to 2048 [ 250.003647][ T6895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.579899][ T6894] Unable to extract alua_access_type [ 250.585412][ T31] audit: type=1800 audit(1788391751.206:13): pid=6898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.228" name="alua_access_type" dev="configfs" ino=13425 res=0 errno=0 [ 250.635281][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 254.729672][ T5742] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 254.887145][ T5742] usb 3-1: Using ep0 maxpacket: 32 [ 254.890646][ T5742] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 254.895787][ T5742] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.895852][ T5742] usb 3-1: config 0 has no interfaces? [ 254.895927][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.926381][ T5742] usb 3-1: config 0 descriptor?? [ 254.980508][ T6647] veth0_vlan: entered promiscuous mode [ 255.032063][ T6647] veth1_vlan: entered promiscuous mode [ 255.151823][ T6647] veth0_macvtap: entered promiscuous mode [ 255.189851][ T6647] veth1_macvtap: entered promiscuous mode [ 255.212155][ T6913] FAULT_INJECTION: forcing a failure. [ 255.212155][ T6913] name failslab, interval 1, probability 0, space 0, times 0 [ 255.212217][ T6913] CPU: 0 UID: 0 PID: 6913 Comm: syz.2.232 Not tainted syzkaller #0 PREEMPT(full) [ 255.212244][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.212258][ T6913] Call Trace: [ 255.212294][ T6913] [ 255.212325][ T6913] dump_stack_lvl+0xe8/0x150 [ 255.212461][ T6913] should_fail_ex+0x3eb/0x540 [ 255.212557][ T6913] should_failslab+0xa8/0x100 [ 255.212635][ T6913] __kmalloc_cache_noprof+0xa3/0x600 [ 255.212707][ T6913] ? kobject_uevent_env+0x289/0x9e0 [ 255.212804][ T6913] ? kobject_uevent_env+0x289/0x9e0 [ 255.212899][ T6913] ? module_add_driver+0x31b/0x320 [ 255.212997][ T6913] kobject_uevent_env+0x289/0x9e0 [ 255.213115][ T6913] driver_register+0x2d4/0x320 [ 255.213207][ T6913] usb_gadget_register_driver_owner+0xf9/0x270 [ 255.213280][ T6913] raw_ioctl+0x1541/0x41c0 [ 255.213375][ T6913] ? tomoyo_path_number_perm+0x219/0x5f0 [ 255.213468][ T6913] ? do_vfs_ioctl+0x116f/0x1530 [ 255.213555][ T6913] ? __pfx_raw_ioctl+0x10/0x10 [ 255.213661][ T6913] ? hook_file_ioctl+0x1f2/0x600 [ 255.213797][ T6913] ? __fget_files+0x2a/0x420 [ 255.213902][ T6913] ? __fget_files+0x2a/0x420 [ 255.213974][ T6913] ? __fget_files+0x3a2/0x420 [ 255.214049][ T6913] ? __fget_files+0x2a/0x420 [ 255.214136][ T6913] ? bpf_lsm_file_ioctl+0x9/0x20 [ 255.214220][ T6913] ? __pfx_raw_ioctl+0x10/0x10 [ 255.214293][ T6913] __se_sys_ioctl+0xfc/0x170 [ 255.214358][ T6913] do_syscall_64+0x166/0x520 [ 255.214429][ T6913] ? trace_irq_disable+0x3b/0x140 [ 255.214482][ T6913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.214542][ T6913] ? clear_bhb_loop+0x70/0xc0 [ 255.214606][ T6913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.214665][ T6913] RIP: 0033:0x7f44a4b9ddeb [ 255.214719][ T6913] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 255.214762][ T6913] RSP: 002b:00007f44a5997f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.214824][ T6913] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f44a4b9ddeb [ 255.214866][ T6913] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 255.214898][ T6913] RBP: 00007f44a5998fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 255.214932][ T6913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.214964][ T6913] R13: 00002000000001c0 R14: 0000000000000002 R15: 0000000000000868 [ 255.215032][ T6913] [ 255.232599][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.233455][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.396234][ T10] usb 3-1: USB disconnect, device number 7 [ 255.508186][ T6647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.534682][ T6647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.609102][ T89] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.618109][ T89] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.697242][ T6035] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.729262][ T89] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.832079][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.840122][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.889630][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.898083][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.744345][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.744387][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.291224][ T6944] loop3: detected capacity change from 0 to 64 [ 257.293202][ T5729] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 257.502322][ T5751] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 257.653591][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 257.673065][ T5729] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.707168][ T5751] usb 6-1: Using ep0 maxpacket: 32 [ 257.713885][ T5751] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 257.742776][ T5751] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.753974][ T5751] usb 6-1: config 0 has no interfaces? [ 257.759825][ T5751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.821218][ T5729] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.821265][ T5729] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.936282][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.936332][ T5729] usb 3-1: Product: syz [ 257.936366][ T5729] usb 3-1: Manufacturer: syz [ 257.936398][ T5729] usb 3-1: SerialNumber: syz [ 258.280888][ T5751] usb 6-1: config 0 descriptor?? [ 258.548297][ T5729] usb 3-1: 0:2 : does not exist [ 258.643956][ T6942] FAULT_INJECTION: forcing a failure. [ 258.643956][ T6942] name failslab, interval 1, probability 0, space 0, times 0 [ 258.644038][ T6942] CPU: 0 UID: 0 PID: 6942 Comm: syz.5.239 Not tainted syzkaller #0 PREEMPT(full) [ 258.644119][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.644178][ T6942] Call Trace: [ 258.644200][ T6942] [ 258.644216][ T6942] dump_stack_lvl+0xe8/0x150 [ 258.644306][ T6942] should_fail_ex+0x3eb/0x540 [ 258.644378][ T6942] should_failslab+0xa8/0x100 [ 258.644449][ T6942] ? __kernfs_new_node+0xe6/0x980 [ 258.644515][ T6942] kmem_cache_alloc_noprof+0xa1/0x600 [ 258.644606][ T6942] ? __kernfs_new_node+0xe6/0x980 [ 258.644691][ T6942] __kernfs_new_node+0xe6/0x980 [ 258.644777][ T6942] ? __pfx___kernfs_new_node+0x10/0x10 [ 258.644843][ T6942] ? kernfs_root+0x1c/0x230 [ 258.644927][ T6942] ? kernfs_root+0x1c/0x230 [ 258.644989][ T6942] ? kernfs_root+0x1c/0x230 [ 258.645035][ T6942] ? kernfs_root+0x1c/0x230 [ 258.645108][ T6942] kernfs_new_node+0xea/0x140 [ 258.645183][ T6942] __kernfs_create_file+0x4b/0x2e0 [ 258.645269][ T6942] sysfs_add_file_mode_ns+0x237/0x300 [ 258.645377][ T6942] sysfs_create_file_ns+0x12b/0x1b0 [ 258.645459][ T6942] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 258.645566][ T6942] ? module_add_driver+0x31b/0x320 [ 258.645659][ T6942] ? sysfs_create_groups+0xa0/0x120 [ 258.645733][ T6942] bus_add_driver+0x47d/0x670 [ 258.645817][ T6942] driver_register+0x23a/0x320 [ 258.645913][ T6942] usb_gadget_register_driver_owner+0xf9/0x270 [ 258.645990][ T6942] raw_ioctl+0x1541/0x41c0 [ 258.646092][ T6942] ? tomoyo_path_number_perm+0x219/0x5f0 [ 258.646159][ T6942] ? do_vfs_ioctl+0x116f/0x1530 [ 258.646253][ T6942] ? __pfx_raw_ioctl+0x10/0x10 [ 258.646358][ T6942] ? hook_file_ioctl+0x1f2/0x600 [ 258.646468][ T6942] ? __fget_files+0x2a/0x420 [ 258.646544][ T6942] ? __fget_files+0x2a/0x420 [ 258.646634][ T6942] ? __fget_files+0x3a2/0x420 [ 258.646702][ T6942] ? __fget_files+0x2a/0x420 [ 258.646787][ T6942] ? bpf_lsm_file_ioctl+0x9/0x20 [ 258.646854][ T6942] ? __pfx_raw_ioctl+0x10/0x10 [ 258.647087][ T6942] __se_sys_ioctl+0xfc/0x170 [ 258.647224][ T6942] do_syscall_64+0x166/0x520 [ 258.647335][ T6942] ? trace_irq_disable+0x3b/0x140 [ 258.647439][ T6942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.647554][ T6942] ? clear_bhb_loop+0x70/0xc0 [ 258.647644][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.647707][ T6942] RIP: 0033:0x7fafe659ddeb [ 258.647772][ T6942] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 258.647811][ T6942] RSP: 002b:00007fafe7538f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.647877][ T6942] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fafe659ddeb [ 258.647948][ T6942] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 258.648019][ T6942] RBP: 00007fafe7539fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 258.648077][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.648125][ T6942] R13: 00002000000001c0 R14: 0000000000000002 R15: 0000000000000868 [ 258.648212][ T6942] [ 258.650564][ T6942] bus_add_driver: add_bind_files(raw-gadget.2) failed [ 258.651258][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.667593][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.851757][ T10] usb 6-1: USB disconnect, device number 7 [ 259.014727][ T5619] hfs: node 4:3 still has 1 user(s)! [ 259.055252][ T5729] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 259.412975][ T6952] loop3: detected capacity change from 0 to 64 [ 260.552768][ T5729] usb 3-1: USB disconnect, device number 8 [ 260.594966][ T5619] hfs: node 4:3 still has 1 user(s)! [ 260.751489][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.876802][ T6964] openvswitch: netlink: IP tunnel dst address not specified [ 260.879835][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 261.125152][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.132989][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.369370][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 261.369447][ T10] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 261.375195][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 261.375334][ T10] usb 2-1: can't read configurations, error -71 [ 261.435399][ T6970] jffs2: notice: (6970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 261.597238][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 261.757122][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 261.763160][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 261.774610][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 261.786558][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.802060][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.802120][ T25] usb 4-1: Product: syz [ 261.802141][ T25] usb 4-1: Manufacturer: syz [ 261.802160][ T25] usb 4-1: SerialNumber: syz [ 261.828848][ T25] usb 4-1: config 0 descriptor?? [ 261.843845][ T25] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 261.857119][ T25] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 261.941283][ T6982] jffs2: notice: (6982) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 262.675325][ T25] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 262.706388][ T25] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 263.051582][ T5769] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 263.143362][ T7003] binder: 7002:7003 ioctl 4018620d 0 returned -22 [ 263.153824][ T7003] jffs2: notice: (7003) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 263.208274][ T5769] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 263.222993][ T5769] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.240748][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 263.241990][ T5769] usb 7-1: config 0 descriptor?? [ 263.407374][ T5804] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 263.409377][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 263.414389][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.433504][ T10] usb 2-1: config 0 descriptor?? [ 263.473819][ T5769] hackrf 7-1:0.0: usb_control_msg() failed -32 request 0e [ 263.483639][ T5769] hackrf 7-1:0.0: Could not detect board [ 263.485461][ T5769] hackrf 7-1:0.0: probe with driver hackrf failed with error -32 [ 263.506021][ T25] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 263.520671][ T25] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 263.529218][ T25] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 263.545855][ T25] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 263.553558][ T25] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 263.565645][ T25] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 263.574026][ T5804] usb 3-1: device descriptor read/64, error -71 [ 263.592498][ T25] usb 4-1: USB disconnect, device number 7 [ 263.659490][ T10] hackrf 2-1:0.0: usb_control_msg() failed -32 request 0e [ 263.659548][ T10] hackrf 2-1:0.0: Could not detect board [ 263.659710][ T10] hackrf 2-1:0.0: probe with driver hackrf failed with error -32 [ 263.817263][ T5804] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 263.947140][ T5804] usb 3-1: device descriptor read/64, error -71 [ 263.999024][ T7029] netlink: 64 bytes leftover after parsing attributes in process `syz.6.253'. [ 264.004858][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.006046][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.032655][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.038398][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.054539][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.064052][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.076143][ T5804] usb usb3-port1: attempt power cycle [ 264.080280][ T5729] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 264.090788][ T7031] netlink: 64 bytes leftover after parsing attributes in process `syz.1.252'. [ 264.106439][ T7031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.112989][ T7031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.126718][ T7031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.149790][ T7031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.164534][ T7031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.171620][ T7031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.229201][ T5729] usb 6-1: Using ep0 maxpacket: 16 [ 264.230561][ T5729] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 264.231560][ T5729] usb 6-1: config 0 has no interfaces? [ 264.235255][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.235287][ T5729] usb 6-1: Product: syz [ 264.235321][ T5729] usb 6-1: Manufacturer: syz [ 264.235341][ T5729] usb 6-1: SerialNumber: syz [ 264.264925][ T5729] usb 6-1: config 0 descriptor?? [ 264.447269][ T5804] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 264.477804][ T5804] usb 3-1: device descriptor read/8, error -71 [ 264.503492][ T7035] jffs2: notice: (7035) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 264.531845][ T5636] Bluetooth: hci5: failed to read key size for handle 0 [ 264.532399][ T5636] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 264.550073][ T5729] usb 6-1: USB disconnect, device number 8 [ 264.616725][ T7038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.261'. [ 264.737561][ T5804] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 264.763835][ T5804] usb 3-1: device descriptor read/8, error -71 [ 264.869035][ T5804] usb usb3-port1: unable to enumerate USB device [ 264.927205][ T5769] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 265.100118][ T7040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.103456][ T7040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.126127][ T5769] usb 4-1: unable to get BOS descriptor or descriptor too short [ 265.126196][ T5769] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 265.144308][ T5769] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 265.144350][ T5769] usb 4-1: can't read configurations, error -71 [ 265.410863][ T5729] usb 7-1: USB disconnect, device number 2 [ 265.448219][ T5751] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 265.509859][ T10] usb 2-1: USB disconnect, device number 8 [ 265.607915][ T5751] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 265.620024][ T5751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.632865][ T5751] usb 6-1: config 0 descriptor?? [ 265.971951][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 265.987988][ T5751] hackrf 6-1:0.0: usb_control_msg() failed -32 request 0e [ 266.000723][ T5751] hackrf 6-1:0.0: Could not detect board [ 266.006673][ T5751] hackrf 6-1:0.0: probe with driver hackrf failed with error -32 [ 267.198923][ T7054] netlink: 64 bytes leftover after parsing attributes in process `syz.5.263'. [ 267.211137][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.231846][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.447763][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.449740][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.475283][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.478788][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.683788][ T7064] syzkaller0: entered promiscuous mode [ 267.683893][ T7064] syzkaller0: entered allmulticast mode [ 267.722963][ T7064] netlink: 36 bytes leftover after parsing attributes in process `syz.1.267'. [ 268.357136][ T10] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 268.508638][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 268.521046][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 268.521105][ T10] usb 3-1: config 0 has no interface number 0 [ 268.521247][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 268.521342][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 268.521458][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.570729][ T10] usb 3-1: config 0 descriptor?? [ 268.573321][ T7063] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 268.681879][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 268.784088][ T7071] jffs2: notice: (7071) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 268.936977][ T10] usb 3-1: USB disconnect, device number 13 [ 269.119167][ T7077] jffs2: notice: (7077) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 269.161305][ T5636] Bluetooth: hci5: command 0x2016 tx timeout [ 269.417954][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 269.454445][ T7088] jffs2: notice: (7088) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 269.549284][ T5769] usb 6-1: USB disconnect, device number 9 [ 269.567912][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 269.571251][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.595771][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.595822][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.621457][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.621518][ T10] usb 2-1: Product: syz [ 269.621536][ T10] usb 2-1: Manufacturer: syz [ 269.621597][ T10] usb 2-1: SerialNumber: syz [ 269.626538][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.6.275'. [ 270.447878][ T10] usb 2-1: 0:2 : does not exist [ 270.467177][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 270.549790][ T7098] binder: 7096:7098 ioctl 4018620d 0 returned -22 [ 270.597615][ T5769] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 270.681717][ T10] usb 2-1: USB disconnect, device number 9 [ 270.782184][ T7095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.800764][ T7095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.812246][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.837427][ T5769] usb 3-1: unable to get BOS descriptor or descriptor too short [ 270.847514][ T5769] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 270.862606][ T5769] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 270.862649][ T5769] usb 3-1: can't read configurations, error -71 [ 271.007377][ T5729] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 271.147150][ T5729] usb 6-1: device descriptor read/64, error -71 [ 271.320723][ T7107] jffs2: notice: (7107) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 271.397686][ T5729] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 271.528831][ T5729] usb 6-1: device descriptor read/64, error -71 [ 271.642657][ T5729] usb usb6-port1: attempt power cycle [ 271.908631][ T7118] binder: 7117:7118 ioctl 4018620d 0 returned -22 [ 271.912682][ T7118] jffs2: notice: (7118) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 271.987436][ T5729] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 272.007925][ T5729] usb 6-1: device descriptor read/8, error -71 [ 272.247455][ T7121] syzkaller0: entered promiscuous mode [ 272.247552][ T7121] syzkaller0: entered allmulticast mode [ 272.289381][ T7121] netlink: 36 bytes leftover after parsing attributes in process `syz.2.282'. [ 273.981465][ T5729] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 274.104904][ T5729] usb 6-1: device descriptor read/8, error -71 [ 274.134404][ T5821] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 274.210539][ T5729] usb usb6-port1: unable to enumerate USB device [ 274.297359][ T5821] usb 4-1: Using ep0 maxpacket: 16 [ 274.304596][ T5821] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 274.314518][ T5821] usb 4-1: config 0 has no interfaces? [ 274.327723][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.327769][ T5821] usb 4-1: Product: syz [ 274.327799][ T5821] usb 4-1: Manufacturer: syz [ 274.327819][ T5821] usb 4-1: SerialNumber: syz [ 274.330303][ T7136] binder: 7133:7136 ioctl 4018620d 0 returned -22 [ 274.351617][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 274.503292][ T7138] MTD: Couldn't look up './dev/mtdblock0': -2 [ 274.511955][ T5821] usb 4-1: config 0 descriptor?? [ 275.297689][ T52] Bluetooth: hci0: failed to read key size for handle 0 [ 275.297767][ T52] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 275.362054][ T5821] usb 4-1: USB disconnect, device number 10 [ 276.807201][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 276.976589][ T7148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.992649][ T7148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.030392][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 277.030474][ T10] usb 7-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 277.032179][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 277.032280][ T10] usb 7-1: can't read configurations, error -71 [ 277.087134][ T5729] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 277.237169][ T5729] usb 4-1: Using ep0 maxpacket: 16 [ 277.241994][ T5729] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.248194][ T5729] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.248265][ T5729] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.267868][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.267956][ T5729] usb 4-1: Product: syz [ 277.268006][ T5729] usb 4-1: Manufacturer: syz [ 277.268042][ T5729] usb 4-1: SerialNumber: syz [ 277.327399][ T5729] usb 4-1: 0:2 : does not exist [ 277.520778][ T7159] binder: 7158:7159 ioctl 4018620d 0 returned -22 [ 277.564739][ T5729] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 277.787698][ T5729] usb 4-1: USB disconnect, device number 11 [ 279.008514][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.527222][ T52] Bluetooth: hci0: command 0x2016 tx timeout [ 279.936637][ T7174] jffs2: notice: (7174) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 280.140615][ T7180] binder: 7179:7180 ioctl 4018620d 0 returned -22 [ 280.158532][ T7180] jffs2: notice: (7180) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 280.277106][ T5821] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 280.417275][ T5821] usb 2-1: device descriptor read/64, error -71 [ 280.837200][ T5821] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 281.489697][ T7194] loop6: detected capacity change from 0 to 64 [ 281.507923][ T5821] usb 2-1: device descriptor read/64, error -71 [ 281.620247][ T5821] usb usb2-port1: attempt power cycle [ 282.017907][ T5821] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 282.062428][ T5821] usb 2-1: device descriptor read/8, error -71 [ 282.308343][ T5821] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 282.348175][ T5821] usb 2-1: device descriptor read/8, error -71 [ 282.466875][ T5821] usb usb2-port1: unable to enumerate USB device [ 282.595162][ T6647] hfs: node 4:3 still has 1 user(s)! [ 282.612975][ T7199] binder: 7198:7199 ioctl 4018620d 0 returned -22 [ 282.977217][ T991] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 283.565413][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.585053][ T5636] Bluetooth: hci5: command 0x2016 tx timeout [ 283.652300][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 283.657793][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.764062][ T7216] jffs2: notice: (7216) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 283.768440][ T991] usb 7-1: unable to get BOS descriptor or descriptor too short [ 283.768496][ T991] usb 7-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 283.769356][ T991] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 283.769395][ T991] usb 7-1: can't read configurations, error -71 [ 283.887113][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 283.888614][ T10] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 283.888715][ T10] usb 6-1: no configurations [ 283.888748][ T10] usb 6-1: can't read configurations, error -22 [ 284.019470][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 284.278344][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 284.430668][ T10] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 284.430734][ T10] usb 6-1: no configurations [ 284.430767][ T10] usb 6-1: can't read configurations, error -22 [ 284.435341][ T10] usb usb6-port1: attempt power cycle [ 285.771523][ T7228] loop6: detected capacity change from 0 to 64 [ 285.907295][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 286.076953][ T10] usb 6-1: device descriptor read/8, error -71 [ 287.159057][ T6647] hfs: node 4:3 still has 1 user(s)! [ 288.766143][ T991] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 288.849376][ T7242] binder: 7241:7242 ioctl 4018620d 0 returned -22 [ 288.860540][ T7242] MTD: Couldn't look up './dev/mtdblock0': -2 [ 290.179863][ T991] usb 4-1: device descriptor read/all, error -71 [ 292.999969][ T7261] jffs2: notice: (7261) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 292.999984][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 293.000162][ T7259] bridge_slave_1: left allmulticast mode [ 293.000247][ T7259] bridge_slave_1: left promiscuous mode [ 293.000855][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.056306][ T7259] bridge_slave_0: left allmulticast mode [ 293.056365][ T7259] bridge_slave_0: left promiscuous mode [ 293.062570][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.709722][ T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 293.760969][ T7272] smc: net device vlan1 applied user defined pnetid SYZ2 [ 293.860769][ T10] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 293.885834][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.896607][ T10] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 293.908605][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.920214][ T7289] binder: 7288:7289 ioctl 4018620d 0 returned -22 [ 297.616014][ T5821] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 297.717161][ T10] usb 2-1: USB disconnect, device number 14 [ 297.787918][ T5821] usb 6-1: Using ep0 maxpacket: 16 [ 297.789729][ T5821] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 297.791409][ T5821] usb 6-1: config 0 has no interfaces? [ 297.816177][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.816234][ T5821] usb 6-1: Product: syz [ 297.816289][ T5821] usb 6-1: Manufacturer: syz [ 297.816349][ T5821] usb 6-1: SerialNumber: syz [ 297.852822][ T5821] usb 6-1: config 0 descriptor?? [ 298.119057][ T5636] Bluetooth: hci5: failed to read key size for handle 0 [ 298.119130][ T5636] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 298.173984][ T5821] usb 6-1: USB disconnect, device number 18 [ 298.310827][ T7302] jffs2: notice: (7302) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 298.468167][ T5742] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 298.798854][ T5742] usb 7-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 298.824829][ T5742] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.824978][ T5742] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.825092][ T5742] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.106124][ T5742] pegasus 7-1:1.0: Missing or invalid endpoints [ 299.291252][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.342'. [ 300.264547][ T7299] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 300.439041][ T31] audit: type=1326 audit(1788391801.076:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7316 comm="syz.3.336" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feab159e159 code=0x0 [ 300.709432][ T7320] loop3: detected capacity change from 0 to 2048 [ 300.795656][ T7320] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.191586][ T7323] binder: 7321:7323 ioctl 4018620d 0 returned -22 [ 301.725116][ T5751] usb 7-1: USB disconnect, device number 7 [ 302.197195][ T5636] Bluetooth: hci5: command 0x2016 tx timeout [ 305.174617][ T7349] jffs2: notice: (7349) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 305.179831][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 306.322806][ T31] audit: type=1800 audit(1788391806.956:15): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.355" name="test2" dev="jffs2" ino=2 res=0 errno=0 [ 307.121335][ T31] audit: type=1326 audit(1788391807.756:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.6.359" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f517e99e159 code=0x0 [ 307.486198][ T7364] loop6: detected capacity change from 0 to 2048 [ 307.493940][ T7364] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.844023][ T7367] loop2: detected capacity change from 0 to 32768 [ 308.049085][ T7367] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 308.174543][ T7367] XFS (loop2): Ending clean mount [ 309.110263][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.6.362'. [ 309.953920][ T7387] binder: 7384:7387 ioctl 4018620d 0 returned -22 [ 310.095014][ T7391] No control pipe specified [ 310.653356][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'. [ 311.787956][ T31] audit: type=1326 audit(1788391812.426:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.5.356" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafe659e159 code=0x0 [ 311.826678][ T7407] binder: 7405:7407 ioctl 4018620d 0 returned -22 [ 312.061888][ T7409] loop5: detected capacity change from 0 to 2048 [ 312.141051][ T7409] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.508379][ T7422] loop6: detected capacity change from 0 to 64 [ 314.465245][ T6647] hfs: node 4:3 still has 1 user(s)! [ 314.825485][ T7429] openvswitch: netlink: IP tunnel dst address not specified [ 315.954016][ T5626] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 317.329342][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.329422][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.546633][ T7442] binder: 7441:7442 ioctl 4018620d 0 returned -22 [ 317.595389][ T7442] MTD: Couldn't look up './dev/mtdblock0': -2 [ 317.783278][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 319.276952][ T7456] CIFS: Attempting to mount //::1/share [ 319.322740][ T7456] CIFS: VFS: Error connecting to socket. Aborting operation. [ 319.322823][ T7456] CIFS: VFS: cifs_mount failed w/return code = -111 [ 320.243864][ T52] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 320.588009][ T31] audit: type=1326 audit(1788391821.226:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.6.388" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f517e99e159 code=0x0 [ 320.967726][ T7477] loop6: detected capacity change from 0 to 2048 [ 321.101142][ T7477] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.281017][ T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 324.281115][ T52] Bluetooth: hci1: Injecting HCI hardware error event [ 324.292472][ T5636] Bluetooth: hci1: hardware error 0x00 [ 324.542668][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'. [ 326.279437][ T7494] binder: 7491:7494 ioctl 4018620d 0 returned -22 [ 326.318550][ T7494] MTD: Couldn't look up './dev/mtdblock0': -2 [ 326.437363][ T5636] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 326.999982][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 328.342814][ T7507] loop2: detected capacity change from 0 to 32768 [ 328.382924][ T7507] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 328.447305][ T7507] XFS (loop2): Ending clean mount [ 328.492741][ T7517] binder: 7508:7517 ioctl 4018620d 0 returned -22 [ 328.735305][ T7517] MTD: Couldn't look up './dev/mtdblock0': -2 [ 329.390655][ T7521] No control pipe specified [ 329.535106][ T5626] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 332.574978][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.407'. [ 334.310605][ T7552] loop1: detected capacity change from 0 to 2048 [ 334.390759][ T7552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.424573][ T7557] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 336.483465][ T7557] EXT4-fs (loop1): Remounting filesystem read-only [ 336.564511][ T7559] binder: 7558:7559 ioctl 4018620d 0 returned -22 [ 336.656813][ T7559] jffs2: notice: (7559) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 338.548884][ T7567] binder: 7566:7567 ioctl 4018620d 0 returned -22 [ 338.564251][ T7567] jffs2: notice: (7567) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 339.201293][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.408'. [ 340.137152][ T5742] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 340.287148][ T5742] usb 4-1: Using ep0 maxpacket: 16 [ 340.288074][ T5742] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.311126][ T5742] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.311170][ T5742] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.329686][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.329798][ T5742] usb 4-1: Product: syz [ 340.329840][ T5742] usb 4-1: Manufacturer: syz [ 340.329881][ T5742] usb 4-1: SerialNumber: syz [ 340.531910][ T5742] usb 4-1: 0:2 : does not exist [ 340.660013][ T5742] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 340.968419][ T7592] jffs2: notice: (7592) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 340.996453][ T5742] usb 4-1: USB disconnect, device number 14 [ 341.203599][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.470309][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.420'. [ 343.243691][ T7603] binder: 7602:7603 ioctl 4018620d 0 returned -22 [ 343.291154][ T7605] jffs2: notice: (7605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 343.859863][ T7610] binder: 7608:7610 ioctl 4018620d 0 returned -22 [ 343.881445][ T7610] jffs2: notice: (7610) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 344.435284][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'. [ 347.395863][ T7629] binder: 7628:7629 ioctl 4018620d 0 returned -22 [ 348.910736][ T7629] MTD: Couldn't look up './dev/mtdblock0': -2 [ 349.517662][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.438'. [ 350.811317][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.698350][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.705603][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.722971][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.729262][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.732593][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.957411][ T7653] binder: 7652:7653 ioctl 4018620d 0 returned -22 [ 352.004648][ T7653] jffs2: notice: (7653) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 352.169845][ T31] audit: type=1326 audit(1788391852.806:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.436" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44a4b9e159 code=0x0 [ 352.238119][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.442'. [ 352.576457][ T7662] loop2: detected capacity change from 0 to 2048 [ 352.713393][ T7662] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 352.904411][ T1391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.904557][ T1391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.797150][ T52] Bluetooth: hci2: command tx timeout [ 353.909024][ T1391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.958407][ T1391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.521466][ T1391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.532587][ T1391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.466091][ T1391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.466149][ T1391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.887146][ T52] Bluetooth: hci2: command tx timeout [ 356.073886][ T7667] loop2: detected capacity change from 0 to 32768 [ 356.219928][ T7667] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 356.458763][ T7667] XFS (loop2): Ending clean mount [ 356.595989][ T1391] bridge_slave_1: left allmulticast mode [ 356.596057][ T1391] bridge_slave_1: left promiscuous mode [ 356.598343][ T1391] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.660758][ T1391] bridge_slave_0: left allmulticast mode [ 356.660820][ T1391] bridge_slave_0: left promiscuous mode [ 356.661391][ T1391] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.375711][ T7693] binder: 7692:7693 ioctl 4018620d 0 returned -22 [ 357.402099][ T7693] jffs2: notice: (7693) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 357.796742][ T7703] No control pipe specified [ 357.958737][ T52] Bluetooth: hci2: command tx timeout [ 358.272580][ T1391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.378722][ T1391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.414383][ T1391] bond0 (unregistering): Released all slaves [ 358.430779][ T7709] openvswitch: netlink: IP tunnel dst address not specified [ 358.653348][ T7712] loop5: detected capacity change from 0 to 64 [ 359.961627][ T6155] hfs: node 4:3 still has 1 user(s)! [ 360.038038][ T52] Bluetooth: hci2: command tx timeout [ 360.116773][ T7716] binder: 7714:7716 ioctl 4018620d 0 returned -22 [ 360.134989][ T7716] jffs2: notice: (7716) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 360.434641][ T7721] No source specified [ 360.514518][ T7723] loop3: detected capacity change from 0 to 64 [ 362.595592][ T5626] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 362.667632][ T5619] hfs: node 4:3 still has 1 user(s)! [ 362.915029][ T31] audit: type=1326 audit(1788391863.546:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.6.455" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f517e99e159 code=0x0 [ 363.289937][ T7736] loop6: detected capacity change from 0 to 2048 [ 363.784134][ T7736] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.296003][ T7743] nvmet: adding nsid 1 to subsystem testsubsys [ 365.313484][ T1391] hsr_slave_0: left promiscuous mode [ 365.368884][ T1391] hsr_slave_1: left promiscuous mode [ 365.383502][ T1391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.383549][ T1391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.412542][ T1391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.412585][ T1391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.513230][ T1391] veth1_macvtap: left promiscuous mode [ 365.520837][ T1391] veth0_macvtap: left promiscuous mode [ 365.527509][ T1391] veth1_vlan: left promiscuous mode [ 365.533019][ T1391] veth0_vlan: left promiscuous mode [ 365.745552][ T7755] syz.2.457 uses obsolete (PF_INET,SOCK_PACKET) [ 365.971554][ T7759] loop5: detected capacity change from 0 to 64 [ 367.046277][ T6155] hfs: node 4:3 still has 1 user(s)! [ 367.246913][ T1391] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 367.427219][ T5751] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 367.498877][ T1391] team0 (unregistering): Port device team_slave_1 removed [ 367.553047][ T1391] team0 (unregistering): Port device team_slave_0 removed [ 367.605750][ T7762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.606115][ T7762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.641448][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.462'. [ 367.654405][ T5751] usb 6-1: unable to get BOS descriptor or descriptor too short [ 367.662410][ T5751] usb 6-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 367.675501][ T5751] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 367.676079][ T5751] usb 6-1: can't read configurations, error -71 [ 368.051824][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 368.415858][ T7770] No source specified [ 368.453391][ T7767] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 368.465340][ T7767] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 368.473776][ T7767] CPU: 1 UID: 0 PID: 7767 Comm: syz.3.463 Not tainted syzkaller #0 PREEMPT(full) [ 368.482970][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.493037][ T7767] RIP: 0010:strlen+0x29/0x70 [ 368.497688][ T7767] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 368.517344][ T7767] RSP: 0018:ffffc9000d9e7978 EFLAGS: 00010246 [ 368.523454][ T7767] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 368.531483][ T7767] RDX: ffffc9000dab9000 RSI: 0000000000000052 RDI: 0000000000000000 [ 368.539492][ T7767] RBP: ffffc9000d9e7ab8 R08: ffffffff907a5c7f R09: 1ffffffff20f4b8f [ 368.547474][ T7767] R10: dffffc0000000000 R11: fffffbfff20f4b90 R12: 1ffff92001b3cf40 [ 368.555579][ T7767] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 368.563557][ T7767] FS: 00007feab241a6c0(0000) GS:ffff888124dcb000(0000) knlGS:0000000000000000 [ 368.572500][ T7767] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.579099][ T7767] CR2: 0000001b3431aff8 CR3: 000000007917a000 CR4: 00000000003526f0 [ 368.587084][ T7767] Call Trace: [ 368.590404][ T7767] [ 368.593357][ T7767] do_getname_kernel+0x1d/0x230 [ 368.598237][ T7767] ? getname_kernel+0xd/0x20 [ 368.602858][ T7767] filp_open+0x87/0x1d0 [ 368.607038][ T7767] ? __pfx_filp_open+0x10/0x10 [ 368.611845][ T7767] ? __pfx___mutex_lock+0x10/0x10 [ 368.616921][ T7767] nvmet_file_ns_enable+0x74/0x350 [ 368.622050][ T7767] nvmet_ns_enable+0xaa/0x780 [ 368.626747][ T7767] ? lock_acquire+0x115/0x350 [ 368.631447][ T7767] nvmet_ns_enable_store+0xd7/0x170 [ 368.636666][ T7767] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 368.642496][ T7767] ? down_read+0x2be/0x330 [ 368.646960][ T7767] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 368.652811][ T7767] configfs_write_iter+0x337/0x430 [ 368.657944][ T7767] vfs_write+0x612/0xba0 [ 368.662304][ T7767] ? __pfx_vfs_write+0x10/0x10 [ 368.667107][ T7767] ? __fget_files+0x2a/0x420 [ 368.671750][ T7767] ksys_write+0x150/0x270 [ 368.676126][ T7767] ? __pfx_ksys_write+0x10/0x10 [ 368.681019][ T7767] do_syscall_64+0x166/0x520 [ 368.685652][ T7767] ? trace_irq_disable+0x3b/0x140 [ 368.690708][ T7767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.696815][ T7767] ? clear_bhb_loop+0x70/0xc0 [ 368.701577][ T7767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.707500][ T7767] RIP: 0033:0x7feab159e159 [ 368.711951][ T7767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.731601][ T7767] RSP: 002b:00007feab241a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 368.740046][ T7767] RAX: ffffffffffffffda RBX: 00007feab1825fa0 RCX: 00007feab159e159 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 368.748050][ T7767] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000005 [ 368.756045][ T7767] RBP: 00007feab1635024 R08: 0000000000000000 R09: 0000000000000000 [ 368.764033][ T7767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.772024][ T7767] R13: 00007feab1826038 R14: 00007feab1825fa0 R15: 00007ffd8fa769d8 [ 368.780027][ T7767] [ 368.783102][ T7767] Modules linked in: [ 368.790435][ T7767] ---[ end trace 0000000000000000 ]--- [ 368.848471][ T7767] RIP: 0010:strlen+0x29/0x70 [ 368.853906][ T7767] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 368.875016][ T7767] RSP: 0018:ffffc9000d9e7978 EFLAGS: 00010246 [ 368.881680][ T7767] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 368.891837][ T7767] RDX: ffffc9000dab9000 RSI: 0000000000000052 RDI: 0000000000000000 [ 368.900153][ T7767] RBP: ffffc9000d9e7ab8 R08: ffffffff907a5c7f R09: 1ffffffff20f4b8f [ 368.911197][ T7767] R10: dffffc0000000000 R11: fffffbfff20f4b90 R12: 1ffff92001b3cf40 [ 368.911478][ T7774] fuse: Bad value for 'fd' [ 368.924379][ T7767] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 368.933829][ T7767] FS: 00007feab241a6c0(0000) GS:ffff888124dcb000(0000) knlGS:0000000000000000 [ 368.943203][ T7767] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.950107][ T7767] CR2: 0000001b34221ff8 CR3: 000000007917a000 CR4: 00000000003526f0 [ 369.028707][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.028786][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.028899][ T7649] bridge_slave_0: entered allmulticast mode [ 369.035489][ T7649] bridge_slave_0: entered promiscuous mode [ 369.060722][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.060971][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.061357][ T7649] bridge_slave_1: entered allmulticast mode [ 369.065118][ T7649] bridge_slave_1: entered promiscuous mode [ 369.114291][ T7767] Kernel panic - not syncing: Fatal exception [ 369.120612][ T7767] Kernel Offset: disabled [ 369.124953][ T7767] Rebooting in 86400 seconds..