last executing test programs: 16m5.237226336s ago: executing program 2 (id=1677): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) r0 = syz_io_uring_setup(0x4f6, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x48, 0x2007, @fd, 0x4000000000003, 0x0, 0x0, 0x18, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) syz_io_uring_submit(r3, 0x0, 0x0) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) io_uring_enter(r0, 0x47bc, 0xf5, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209fffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40046f41, &(0x7f0000000440)=0x1f) 16m4.805720626s ago: executing program 2 (id=1681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc834}, 0x0) 16m3.857952333s ago: executing program 2 (id=1682): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000000000085"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) 16m1.64909073s ago: executing program 2 (id=1688): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x7e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) clock_gettime(0x2, &(0x7f0000001cc0)={0x0, 0x0}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000080)={0x690, 0x140, 0x556, 0x640, 0xd5f, 0x4, 0x20, 0x1, {0x3, 0x45}, {0x80000000, 0xd, 0x1}, {0x7fffffff, 0xab, 0x1}, {0x6, 0x3ff, 0x1}, 0x3, 0x40, 0x5, 0x4, 0x1, 0x10001, 0x4, 0x7, 0x5, 0x8, 0x0, 0x7, 0x0, 0x100, 0x5, 0x3}) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') recvmmsg(r4, &(0x7f0000006b80)=[{{&(0x7f0000000240)=@nfc_llcp, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/207, 0xcf}, {0x0}], 0x2}, 0x1}, {{&(0x7f0000001480)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x80, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000001500)=""/185, 0xb9}, {&(0x7f00000015c0)=""/68, 0x44}, {&(0x7f0000001640)=""/97, 0x61}], 0x5}, 0x6}, {{&(0x7f0000006e00)=@ax25={{0x3, @null}, [@null, @netrom, @remote, @null, @remote, @default, @netrom, @default]}, 0x80, &(0x7f00000019c0)=[{0x0}, {0x0}], 0x2}, 0x8c73}, {{&(0x7f0000001a00)=@xdp, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001a80)=""/94, 0x5e}, {&(0x7f0000001b00)=""/217, 0xd9}, {&(0x7f0000001c00)=""/135, 0x87}, {&(0x7f0000001cc0)}, {0x0}, {0x0}, {&(0x7f0000001e40)=""/41, 0x29}], 0x7}, 0x5}, {{&(0x7f00000032c0)=@in, 0x80, 0x0, 0x0, &(0x7f0000004480)=""/105, 0x69}, 0x3ff}, {{0x0, 0x0, &(0x7f0000006980)=[{0x0}, {&(0x7f00000045c0)=""/219, 0xdb}, {&(0x7f00000046c0)=""/214, 0xd6}, {0x0}], 0x4}, 0x83c}, {{&(0x7f0000006a80)=@xdp, 0x80, &(0x7f0000006b40)=[{&(0x7f0000006b00)=""/4, 0x4}], 0x1}, 0xd4ed}], 0x7, 0x0, &(0x7f0000006dc0)={r1, r2+10000000}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x18) io_uring_setup(0x585f, 0x0) 15m59.779920571s ago: executing program 2 (id=1696): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getscheduler(0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="3800000002020102000000000000000002000008240002800c0002800500010030000000140001800800"], 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 15m58.598868625s ago: executing program 2 (id=1697): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 15m43.184199133s ago: executing program 32 (id=1697): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 4m3.01005915s ago: executing program 5 (id=3155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9, 0x3f}) r5 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, 0x0, 0x0) 3m59.02465642s ago: executing program 5 (id=3160): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x80805, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sysinfo(&(0x7f0000000000)=""/196) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"}) 3m57.870304038s ago: executing program 5 (id=3162): close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x4, 0x300}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x48080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setreuid(0xee01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() setns(0xffffffffffffffff, 0x24020000) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21240e22250d6d5d", 0x2f}], 0x1}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 3m56.556197817s ago: executing program 5 (id=3164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r2 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x21, 0x2, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffea7, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x36, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x8000, "dc"}], 0x18}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m55.794431849s ago: executing program 5 (id=3167): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, &(0x7f00000000c0)={0x1}) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0xc7) 3m53.288599303s ago: executing program 5 (id=3173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f00000007c0)={0xfff, r1, 0x0, {0x3af4df0f, 0xd18}, 0xe}, 0x1) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3, 0x3df}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102400, 0x19000) socket(0x2b, 0x1, 0x1) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pipe2$9p(0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 3m38.057886163s ago: executing program 33 (id=3173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f00000007c0)={0xfff, r1, 0x0, {0x3af4df0f, 0xd18}, 0xe}, 0x1) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3, 0x3df}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102400, 0x19000) socket(0x2b, 0x1, 0x1) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pipe2$9p(0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 20.201558339s ago: executing program 6 (id=3571): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x17, 0x2, 0x7, "d30580c9042b7275077bafe6410c2087850000000000000000000080001500", 0x7d776419}) close(r3) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x8818) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x800, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0xfffffffe, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) 17.960286532s ago: executing program 6 (id=3574): socket$nl_netfilter(0x10, 0x3, 0xc) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 17.550322993s ago: executing program 6 (id=3576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='task_rename\x00', r2, 0x0, 0x800080}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='\x00') 16.382291735s ago: executing program 6 (id=3577): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@grpquota}, {@auto_da_alloc}, {@grpquota}]}, 0xfe, 0x572, &(0x7f0000000240)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x103000, 0x50) getdents(r0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 15.168352514s ago: executing program 3 (id=3581): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) dup2(0xffffffffffffffff, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sysfs$2(0x9, 0x0, 0x0) 13.24210686s ago: executing program 3 (id=3584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000180)=0x2, 0x4) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000200)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) 13.188570479s ago: executing program 6 (id=3585): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_setup(0xd, 0x0, 0x0, &(0x7f0000000280)) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs(0xffffffffffffffff, 0x0) ftruncate(r0, 0x6) 9.879464965s ago: executing program 6 (id=3592): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$cont(0x9, r3, 0x10000, 0x0) 8.63345755s ago: executing program 34 (id=3592): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$cont(0x9, r3, 0x10000, 0x0) 6.049157857s ago: executing program 1 (id=3602): close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x4, 0x300}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x48080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setreuid(0xee01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb", 0x24}], 0x1}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 6.010617515s ago: executing program 3 (id=3603): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) 4.950443455s ago: executing program 4 (id=3606): syz_usb_connect(0x2, 0x24, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_role_discovery={{0x9}, {0x0, 0xc9, 0x2}}}}, 0xa) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 4.931619677s ago: executing program 1 (id=3608): quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) keyctl$set_reqkey_keyring(0xe, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x2000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) getpid() 4.83984838s ago: executing program 3 (id=3609): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x800802, &(0x7f00000001c0)={[{@file_umask}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@part={'part', 0x3d, 0x2}}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@codepage={'codepage', 0x3d, 'cp1251'}}]}, 0x1, 0x306, &(0x7f0000000240)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x202080, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 4.698232868s ago: executing program 1 (id=3610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setresuid(0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x100, &(0x7f0000000380)) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000004c0), 0x1000) geteuid() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',oache=loose,\x00']) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@local, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000680)=0xe8) stat(&(0x7f00000006c0)='./file0\x00', 0x0) fstat(r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x2, 0x5, 0x7, 0x74, 0xffd, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r8, r9, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 4.229413851s ago: executing program 3 (id=3611): landlock_create_ruleset(&(0x7f00000001c0)={0x4, 0x0, 0x8f9ec559a2ba88f}, 0x18, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a01060000000000000000020000010c000340000000000000000508000b40000000041c000740afb884766855e19923001a0cea75563fdf86c115b2c78a230c00034000000000000000050c000640000000000000000224000000090a010200000000000000000500000a080007400000002a080004400000000244000000080a03000000000000000000030000000900020073797a310000000024000580080001400000020108000140000000ff080001400000006c080001400000003c74000000080a010100000000000000000100000608000940000000010c0006400000000000000004400004803c0001800b00010064796e73657400002c0002800c00064000000000544e730f100007800b0001006c6f6f6b757000000900010073797a30000000000900010073797a310000000028000000050a01020000000000000000070000080900030073797a310000000008000b400000000128010000160a01030000000000000000070000010c00054000000000000000050900010073797a31000000000c000540000000000000000394000380900003801400010069705f76746930000000000000000000140001007665746830000000000000000000000014000100766c616e3000000000000000000000001400010070696d367265673100000000000000001400010067656e657665310000000000000000001400010074756e6c300000000000000000000000140001007465616d5f736c6176655f30000000003400038008000140000000000800014000000000080001400000000008000240ffffffff080001400000000008000240000000070c0003800800024000000a1908000740000000010900020073797a3200000000080007400000000248000000180a0104000000000000000005000001140003800800024000000007080001400000000008000740000000020900010073797a30000000000900020073797a32000000004c010000140a01080000000000000000020000090900010073797a30000000000800034000000008fa000800468c80c5b45807fb66146dfee151"], 0x464}}, 0x0) 4.133049991s ago: executing program 4 (id=3612): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x208}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900003a6c40f455090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f00000001c0), 0x4) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000180)=""/30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.89924735s ago: executing program 1 (id=3613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000180)=0x2, 0x4) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000200)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) 3.10055843s ago: executing program 4 (id=3614): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x110e22fff2) 2.948757664s ago: executing program 3 (id=3616): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = getpgid(0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.937022863s ago: executing program 4 (id=3617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000680)=""/192, 0xc0}], 0x1) 2.782991698s ago: executing program 1 (id=3619): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x702, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e23000500000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0xc084) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 2.765835651s ago: executing program 0 (id=3620): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x30048010) 2.561721782s ago: executing program 0 (id=3621): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(0x0, 0x204, 0x2) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000000)={0x80, 0x32, 0xfdfa, 0x435d}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x9, 0x3, 0x457f1c9146f8f874, "464905e1000000000000000000150040000000000000143000", 0x3631564e}) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x74012101}, 0x22) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) 1.899141983s ago: executing program 4 (id=3622): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setrlimit(0xe, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5, &(0x7f0000000340)=[{0x5a717210, 0x6, 0x401}, {0xffffffffffffc6f9, 0x8, 0x3ff}], 0x2, 0x3, 0x6, 0x8, 0x0, 0xb}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000003580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) 1.821720816s ago: executing program 0 (id=3623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_exit\x00', r1, 0x0, 0x4000000000000004}, 0x18) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0xd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.111281056s ago: executing program 0 (id=3624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x4000000, &(0x7f0000000140), 0x1, 0x983d, &(0x7f0000002240)="$eJzs3QW8pWWheP8zwwBDhyJYgJSYpISBdCiipCghSEsKiIDSoYQKioACCiiISHd3S3d3d3f8PwMDwrjgcn//e4XLWuvjnH12nH2e/Xzf5/Xs8x72XnLeReccGBh34LVeP/1XZ+1667KLjbXgukfvPOSavXZY6IHhF4/y2sl4sw8/nWP46ZwDAwODht/PoNcuGzLbUUcPHhgyMOx//2rM0UYfPObAwOjDzw6/n4GZXzsZY//Xb/fKCPFAJx327bZ/7d+rjTXsToZ9svRyL601MDAw9E1fP2xc0/7bA5W25BzzzfsvqzfcBg+/etC/rnv1dMhr/8bYd2BgjL0H3n77GHbbkd/0tf/Jhn3PcScfWPzW9+B7/59ryTnmW2AE/2FrcaThl808bI2PuAaNjbid77Do6vcNn8JBwyduyJvWy3ux3f8/teQc8y448PbreGCheTa595VX95tD5h4YGDLPwMCQeQcGhsz3XnvU/0zv6cZXVVVV70lzzDnDsOfsg0f4eWDo6z/X0s+F57043Z0DA0MWeu154pDlXn8uWFVVVVVVVVXvz+aYc4a54Pn/uO/0/H/SE7cer+f/VVVVVVVVVf93WmCOOWcY9lx/hOf/E73T8/9H7z94v9f+9n/2mV/7qpff2wdRVVVVVVVVVe/YvAvg8/9J3+n5/wVHTXpxz/+rqqqqqqqq/u+0yCuvvLLZm15nb/jFU79+PT3/P/mem5d5zwZcVVVVVVVVVf/tXn7ohFP+9ZrvEw+M8Hrvrzb89wKDDjvt0kvfs4G+Pxr0778P2fy9HtP/34Y5Dz1w0oGBtRZ/r4dS70H/Z16rvv5Xyt9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb3N8f83Xv//5CNWeP294D895QzXnvCvr3z1vf+HLLTAQ1u8R0N/L/qgHv8fWG3QwMBw33FXGxgYWGiORRabemBg4IRrZ5hyioE3rptl2HVfGX+kV98g/vX/TGSe8fiON5/stdNhG8rAh9+4j8Nevf8FXtlnpEEjDOJNjXfMfvutuuQzM454OtXbP47Bb3w21tH3v/7fsgwe4UZD3+aLX7//1x/LiM7Dxz71sLFPs/6a60yz3kYbf2G1NZdfZaVVVlpr1ulnmm7GWWedaaZpVl5tjZWmfe3j283ZpK9+nOvdzNmYI87ZQ3O8ec5GfGxvN2eTvvOcvXqPu5w/9Ouvz9mQ/+aczfXOczbpasO/0Xizjzyw3KtzM2hgYLy5Rx7YcNiZ6UYdGBhvnuG3nWjYbb86/uCBgZ3+9UCHfTbqG9vgoM2H3WbJeRed87Xd1MDAv07/1du8n/0ow0c++/DTOYafzvnatxl34F+b4pDZjjp68LC5eMt0jDna6IPHHBgYffjZ4fczMOtrJ6Of+Prt3uZ91kcY6Ksvs7L9a/9ebayBgYExhn0y8fInbzNs6v8D79P+//T////mNcugN7bHQcP/Db/Na15zzLfAv77Xq9MwbO5GGn7ZzMNM/off2v4t/dt4Jx06MOk7jPcdXhfn1Wj7WuOECbb8n3pdHBrvRO8w3nd4Hd+3He8Sd+5+32t39T823hH2dQu++nH2d7OvG3jnfd1IdAcrXfTJEfd133z7Ib5ld/n6HI06wo3ebl830Z6TbD7s/md/533dgsPGPvJb9nWDBwbGm+v1fd2wHd+8Iw/sNOzM9MPOzDfywAHDzszw6pnRBk4bduaLK6y9xorDLpj/37eDqQe95Q80YZ3NO8I6G/Smxz5ohL/vHPLa6Rj7vv4eTm+z3xw0/GH9l/sK2m7HfYfxvsP7T+E8D7tsxcOHTvA/9f5TNN6h7zzet3u/7Lcd745Pn3zr//B431hnI79puuZ/N+ts0reus2EPcaQ3rYx3+3PYinD71z6f6I1722DT+9/4mWLkEe73v/qZYv53XmfjrjbC122398Cgd5qb+d7N3Hzi3/ZBW7x5bt7tz1tTT/7a9SO9w9yMOuuyU70+N6P8N+dmvv/u3Mw+MNJb52bIwDwDAwNTDN8/zPtu5maid56bd7vdjA63f+3zld64aO4dDjzn9bkZcS7+q7mZ9787N5O+sd1M8ep1kw0eGGWUgQ2XX3/9dad77ePrZ6d/7eM7r8G5381cjvs/M5cfG/J2c/mvTXXMOy/e979Yg/+2T3/9/uf+787lwBtzObDaiIul3q/1+z93+bvL313+7vJ3l7+7/MW9zfH/N17/f7dxv7Lz8F9ujHzxJBNu+16P9z3uA338f7jvW47/bzvhJBcPHnjjunc8Pvvabd6Xx2dnfu1kjP1fv92Ixwd5oG9/fHbvWWfe+j90fPb/qdfX6rv4PVz7f3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4tzn+P+3rfwdwz3QLPz78QOjID2y11MLv9Xjf4z7Qx/+H+77l+P/CS231wOCBN657x+P/r93Gcfz/9hfm3fH9fPz/9bXa8f/6L8rfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MW9zfH/2V//O4CDD95949f/HuDK8bY/4b0e73vcB/X4f+//7639v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c8OP/AyO8veV32i4wOP7/f7u38V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfy/mz9m8V8yf8zi/738MYv/9/PHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4v+D/DGL/3L5Yxb/5fPHLP4/zB+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+UP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/H+cP2bxXzd/zOK/Xv6YxX/9/DGL/0/yxyz+G+SPWfx/mj9m8d8wf8ziv1H+mMV/4/wxi//P8scs/j/PH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8zi/4v8MYv/L/PHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4v+r/DGL/6/zxyz+v8kfs/jvlD9m8d85f8zi/9v8MYv/7/LHLP675I9Z/H+fP2bx3zV/zOK/W/6YxX/3/DGL/x/yxyz+f8wfs/jvkT9m8d8zf8ziv1f+mMX/T/ljFv8/549Z/PfOH7P475M/ZvHfN3/M4v+X/DGL/1/zxyz+++WPWfz3zx+z+P8tf8zif0D+mMX/7/ljFv8D88cs/v/IH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8/5k/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljEv9BA/ljFv9B+WMW/8H5Yxb/kfLHLP5D8scs/iPnj1n8R8kfs/iPmj9m8R+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjF/0P5Yxb/D+ePWfwnyB+z+H8kf8ziP2H+mMV/ovwxi/9H88cs/h/LH7P4fzx/zOL/ifwxi/8n88cs/hPnj1n8J8kfs/hPmj9m8f9U/pjFf7LX/Ye+R+N6n2bxn7z1j1n8p8gfs/hPmT9m8Z8qf8zi/+n8MYv/1PljFv/P5I9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/L+UP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/2fLHLP5fzx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v+N/DGL/zfzxyz+C+aPWfy/lT9m8V8of8zi/+38MYv/d/LHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/d/PHLP5L5o9Z/L+XP2bx/37+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfx/kD9m8V8uf8ziv3z+mMX/h/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/+P8scs/qvnj1n818gf+4D6Xzcwgv+a+WMfUP9Xe7P/WvljFv+188cs/uvkj1n8f5w/ZvFfN3/M4r9e/pjFf/38MYv/T/LHLP4b5I9Z/H+aP2bx3zB/zOK/Uf6YxX/j/DGL/8/yxyz+P88fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL/i/wxi/8v88cs/tvlj1n8t88fs/jvkD9m8d8xf8zi/6v8MYv/r/PHLP6/yR+z+O+UP2bx3zl/zOL/2/wxi//v8scs/rvkj1n8f58/ZvHfNX/M4r9b/pjFf/f8MYv/H/LHLP5/zB+z+O+RP2bx3zN/zOK/V/6Yxf9P+WMW/z/nj1n8984fs/jvkz9m8d83f8zi/5f8MYv/X/PHLP775Y9Z/PfPH7P4/+2t/nf/x8f1Ps3if0DrH7P4/z1/zOJ/YP6Yxf8f+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGJ/6vl/+9J/AddmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8h+FLrT4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8sck/q9+mv+/Z/EflD9m8R+cP2bxHyl/zOI/JH/M4j9y/pjFf5T8MYv/qPljFv+h+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+UP2bx/3D+mMV/gvwxi/9H8scs/hPmj1n8J8ofs/h/NH/M4v+x/DGL/8fzxyz+n8gfs/h/Mn/M4j9x/pjFf5L8MYv/pPljFv9P5Y9Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/p/PHLP5T549Z/D+TP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMV/mvwxi/+0+WODztp15IGBgQ+8/3T5Y5b1P33+mMV/hvwxi/+M+WMW/y/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMV/tvwxi//X88cs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8jf8zi/838MYv/gvljFv9v5Y9Z/BfKH7P4fzt/zOL/nfwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/3fwxi/+S+WMW/+/lj1n8v58/ZvFfKn/M4r90/pjFf5n8MYv/svljFv8f5I9Z/JfLH7P4L58/ZvH/Yf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+j/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4v/j/DGL/7r5Yxb/9fLHLP7r549Z/H+SP2bx3yB/zOL/0/wxi/+G+WMW/43yxyz+G+ePWfx/lj9m8f95/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/1/kj1n8f5k/ZvHfLn/M4r99/pjFf4f8MYv/jvljFv9f5Y9Z/H+dP2bx/03+mMV/p/wxi//O+WMW/9/mj1n8f5c/ZvHfJX/M4v/7/DGL/675Yxb/3fLHLP67549Z/P+QP2bx/2P+mMV/j/wxi/+e+WMW/73yxyz+f8ofs/j/OX/M4r93/pjFf5/8MYv/vvljFv+/5I9Z/P+aP2bx3y9/zOK/f/6Yxf9v+WMW/wPyxyz+f88fs/gfmD9m8f9H/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zi/8/8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfk/iPNJA/ZvEflD9m8R+cP2bxHyl/zOI/JH/M4j9y/pjFf5T8MYv/qPljFv+h+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+UP2bx/3D+mMV/gvwxi/9H8scs/hPmj1n8J8ofs/h/NH/M4v+x/DGL/8fzxyz+n8gfs/h/Mn/M4j9x/pjFf5L8MYv/pPljFv9P5Y9Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/p/PHLP5T549Z/D+TP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/1L+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfxnyx+z+H89f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/zfyxyz+38wfs/gvmD9m8f9W/pjFf6H8MYv/t/PHLP7fyR+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP7fzR+z+C+ZP2bx/17+mMX/+/ljFv+l8scs/kvnj1n8l8kfs/gvmz9m8f9B/pjFf7n8MYv/8vljFv8f5o9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/KH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/j/OH7P4r5s/ZvFfL3/M4r9+/pjF/yf5Yxb/DfLHLP4/zR+z+G+YP2bx3yh/zOK/cf6Yxf9n+WMW/5/nj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/0X+mMX/l/ljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9V/pjF/9f5Yxb/3+SPWfx3yh+z+O+cP2bx/23+mMX/d/ljFv9d8scs/r/PH7P475o/ZvHfLX/M4r97/pjF/w/5Yxb/P+aPWfz3yB+z+O+ZP2bx3yt/zOL/p/wxi/+f88cs/nvnj1n898kfs/jvmz9m8f9L/pjF/6/5Yxb//fLHLP77549Z/P+WP2bxPyB/zOL/9/wxi/+B+WMW/3/kj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+/8wfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxif+Qgfwxi/+gd+c/yv/auN6nWfwHt/4xi/9I+WMW/yH5Yxb/kfPHLP6j5I9Z/EfNH7P4D80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/ofwxi/+H88cs/hPkj1n8P5I/ZvGfMH/M4j9R/pjF/6P5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/ifPHLP6T5I9Z/CfNH7P4fyp/zOI/Wf6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/D+dP2bxnzp/zOL/mfwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/+X8scs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/+X8MYv/V/LHLP5fzR+z+H8tf8ziP1v+mMX/6/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/kT9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bx/07+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/27+mMV/yfwxi//38scs/t/PH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/D/LHLP7L5Y9Z/JfPH7P4/zB/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/Uf6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvH/cf6YxX/d/DGL/3r5Yxb/9fPHLP4/yR+z+G+QP2bx/2n+mMV/w/wxi/9G+WMW/43zxyz+P8sfs/j/PH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/8v8scs/r/MH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/r/LHLP6/zh+z+P8mf8ziv1P+mMV/5/wxi/9v88cs/r/LH7P475I/ZvH/ff6YxX/X/DGL/275Yxb/3fPHLP5/yB+z+P8xf8ziv0f+mMV/z/wxi/9e+WMW/z/lj1n8/5w/ZvHfO3/M4r9P/pjFf9/8MYv/X/LHLP5/zR+z+O+XP2bx3z9/zOL/t/wxi/8B+WMW/7/nj1n8D8wfs/j/I3/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9n/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj0n8Rx7IH7P4D8ofs/gPzh+z+I+UP2bxH5I/ZvEfOX/M4j9K/pjFf9T8MYv/0Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyh+z+H84f8ziP0H+mMX/I/ljFv8J88cs/hPlj1n8P5o/ZvH/WP6Yxf/j+WMW/0/kj1n8P5k/ZvGfOH/M4j9J/pjFf9L8MYv/p/LHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF/9P5Yxb/qfPHLP6fyR+z+H82f8zi/7n8MYv/5/PHLP5fyB+z+H8xf8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+H8pf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+s+WPWfy/nj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf8b+WMW/2/mj1n8F8wfs/h/K3/M4r9Q/pjF/9v5Yxb/77j8h7zbG1r8F3b5v+ss/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/u/ljFv8l88cs/t/LH7P4fz9/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/yB+z+C+XP2bxXz5/zOL/w/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf9H+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf/H+WMW/3Xzxyz+6+WPWfzXzx+z+P8kf8ziv0H+mMX/p/ljFv8N88cs/hvlj1n8N84fs/j/LH/M4v/z/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/r/IH7P4/zJ/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP6/yh+z+P86f8zi/5v8MYv/TvljFv+d88cs/r/NH7P4/y5/zOK/S/6Yxf/3+WMW/13zxyz+u+WPWfx3zx+z+P8hf8zi/8f8MYv/HvljFv8988cs/nvlj1n8/5Q/ZvH/c/6YxX/v/DGL/z75Yxb/ffPHLP5/yR+z+P81f8ziv1/+mMV///wxi//f8scs/gfkj1n8/54/ZvE/MH/M4v+P/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/5/5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/JvEfZSB/zOI/KH/M4j84f8ziP1L+mMV/SP6YxX/k/DGL/yj5Yxb/UfPHLP5D88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8of8zi/+H8MYv/BPljFv+P5I9Z/CfMH7P4T5Q/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvH/ZP6YxX/i/DGL/yT5Yxb/SfPHLP6fyh+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/T+ePWfynzh+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/6X8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/jPlj9m8f96/pjFf/b/2n/U/9VxvU+z+M/R+scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+38gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+H8nf8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H83f8ziv2T+mMX/e/ljFv/v549Z/JfKH/uA+g8awXqUpfPHPqD+r/bm9b9M/pjFf9n8MYv/D/LHLP7L5Y9Z/JfPH7P4/zB/zOK/Qv7YoLMGDZ+ZD7b/ivljlvW/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+UP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/H+cP2bxXzd/zOK/Xv6YxX/9/DGL/0/yxyz+G+SPWfx/mj9m8d8wf8ziv1H+mMV/4/wxi//P8scs/j/PH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8zi/4v8MYv/L/PHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4v+r/DGL/6/zxyz+v8kfs/jvlD9m8d85f8zi/9v8MYv/7/LHLP675I9Z/H+fP2bx3zV/zOK/W/6YxX/3/DGL/x/yxyz+f8wfs/jvkT9m8d8zf8ziv1f+mMX/T/ljFv8/549Z/PfOH7P475M/ZvHfN3/M4v+X/DGL/1/zxyz+++WPWfz3zx+z+P8tf8zif0D+mMX/7/ljFv8D88cs/v/IH7P4H5Q/ZvE/OH/M4n9I/pjF/1Cd/6B39XAt/ofp/N9dFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8/5k/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hf8S79h/xvjet9msX/ytY/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mf/AaHCZxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8sck/qMO5I9Z/Aflj1n8B+ePWfxHyh+z+A/JH7P4j5w/ZvEfJX/M4j9q/pjFf2j+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/Ic39C3nLP7j549Z/D+UP2bx/3D+mMV/gvwxi/9H8scs/hPmj1n8J8ofs/h/NH/M4v+x/DGL/8fzxyz+n8gfs/h/Mn/M4j9x/pjFf5L8MYv/pPljFv9P5Y9Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/p/PHLP5T549Z/D+TP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/1L+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfxnyx+z+H89f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/zfyxyz+38wfs/gvmD9m8f9W/pjFf6H8MYv/t/PHLP7fyR+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP7fzR+z+C+ZP2bx/17+mMX/+/ljFv+l8scs/kvnj1n8l8kfs/gvmz9m8f9B/pjFf7n8MYv/8vljFv8f5o9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/KH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/j/OH7P4r5s/ZvFfL3/M4r9+/pjF/yf5Yxb/DfLHLP4/zR+z+G+YP2bx3yh/zOK/cf6Yxf9n+WMW/5/nj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3Qf+2CIv/tmljFv9f5I9Z/H+ZP2bx3y5/zOK/ff6YxX+H1/xfeuW9Gtf7NIv/jq1/zOL/q/wxi/+v88cs/r/JH7P475Q/ZvHfOX/M4v/b/DGL/+/yxyz+u+SPWfx/nz9m8d81f8ziv1v+mMV/9/wxi/8f8scs/n/MH7P475E/ZvHfM3/M4r9X/pjF/0/vyn/k/71xvU+z+P+59Y9Z/PfOH7P475M/ZvHfN3/M4v+X/DGL/1/zxyz+++WPWfz3zx+z+P8tf8zif0D+mMX/7/ljFv8D88cs/v/IH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8/5k/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljEv+hA/ljFv9B+WMW/8H5Yxb/kfLHLP5D8scs/iPnj1n8R8kfs/iPmj9m8R+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjF/0P5Yxb/D+ePWfwnyB+z+H8kf8ziP2H+mMV/ovwxi/9H88cs/h/LH7P4fzx/zOL/ifwxi/8n88cs/hPnj1n8J8kfs/hPmj9m8f9U/pjFf7L8MYv/5PljH2D/wW/2nyJ/7APs/5b1P2X+mMV/qvwxi/+n88cs/lPnj1n8P5M/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/Uv6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+cP2bx/8o7+u/+vz+u92kW/6+2/jGL/9fyxyz+s+WPWfy/nj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf8b+WMW/2/mj1n8F8wfs/h/K3/M4r9Q/pjF/9v5Yxb/7+SPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/7+aPWfyXzB+z+H8vf8zi//38MYv/UvljFv+l88cs/svkj1n8l80fs/j/IH/M4r9c/pjFf/n8MYv/D/PHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv8f5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv8f549Z/NfNH7P4r5c/ZvFfP3/M4v+T/LEPpv89nxnh0qEb5I99MP1f683r/6f5Yxb/DfPHLP4b5Y9Z/DfOH7P4/yx/zOL/8/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP6/yB+z+P8yf8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+v8ofs/j/On/M4v+b/DGL/075Yxb/nfPHLP6/zR+z+P8uf8ziv0v+mMX/9/ljFv9d88cs/rvlj1n8d88fs/j/IX/M4v/H/DGL/x75Yxb/PfPHLP575Y9Z/P+UP2bx/3P+mMV/7/wxi/8++WMW/33zxyz+f8kfs/j/NX/M4r9f/pjFf//8MYv/3/LHLP4H5I9Z/P+eP2bxPzB/zOL/j/wxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf+f+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/3zv5j/0fGNf7NIv//a1/zOL/QP6Yxf/B/DGL/0P5Ywb/QUMGhj6cP2bwH7b+H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH5P4jzaQP2bxH5Q/ZvEfnD9m8R8pf8ziPyR/zOI/cv6YxX+U/DGL/6j5Yxb/ofljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfw/lD9m8f9w/pjFf4L8MYv/R/LHLP4T5o9Z/CfKH7P4fzR/zOL/sfwxi//H88cs/p/IH7P4fzJ/zOI/cf6YxX+S/DGL/6T5Yxb/T+WPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/6fzxyz+U+ePWfw/kz9m8f9s/pjF/3P5Yxb/z8v8p3uXt7P4f0Hm/26z+H8xf8ziP03+mMV/2oGBzd6rIb2fs/hP1/rHLP7T549Z/GfIH7P4z5g/ZvH/Uv6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+cP2bx/0r+mMX/q+/kL94wLP5fczO/bRb/2fLHLP5fzx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v+N/DGL/zfzxyz+C+aPWfy/lT9m8V8of8zi/+38MYv/d/LHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/d/PHLP5L5o9Z/L+XP2bx/37+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfx/kD9m8V8uf8ziv3z+mMX/h/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/+P8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+P88cs/uvmj1n818sfs/ivnz9m8f9J/pjFf4P8MYv/T/PHLP4b5o9Z/DfKH7P4b5w/ZvH/Wf6Yxf/n+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/H+RP2bx/2X+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx/lT9m8f91/pjF/zf5Yxb/nfLHLP47549Z/H+bP2bx/13+mMV/l/wxi//v88cs/rvmj1n8d8sfs/jvnj9m8f9D/pjF/4/5Yxb/PfLHLP575o9Z/PfKH7P4/yl/zOL/5/wxi//e+WMW/33yxyz+++aPWfz/kj9m8f9r/pjFf7/8MYv//vljFv+/5Y9Z/A/IH7P4/z1/zOJ/YP6Yxf8f+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5Ej+g/9D4/rfZrF/6jWP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH/vg+u9x/psuHe2k/LEPrv9b1//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4v/P/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH5P4jz6QP2bxH5Q/ZvEfnD9m8R8pf8ziPyR/zOI/cv6YxX+U/DGL/6gq/9He9S0t/kNV/u8+i/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyh+z+H84f8ziP0H+mMX/I/ljFv8J88cs/hPlj1n8P5o/ZvH/WP6Yxf/j+WMW/0/kj1n8P5k/ZvGfOH/M4j9J/pjFf9L8MYv/p/LHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF/9P5Yxb/qfPHLP6fyR+z+H82f8zi/7n8MYv/5/PHLP5fyB+z+H8xf8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+H8pf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+s+WPWfy/nj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf8b+WMW/2/mj1n8F8wfs/h/K3/M4r9Q/pjF/9v5Yxb/7+SPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/7+aPWfyXzB+z+H8vf8zi//38MYv/UvljFv+l88cs/svkj1n8l80fs/j/IH/M4r9c/pjFf/n8MYv/D/PHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv8f5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv8f549Z/NfNH7P4r5c/ZvFfP3/M4v+T/DGL/wb5Yxb/n+aPWfw3zB+z+G+UP2bx3zh/zOL/s/wxi//P88cs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+P8if8zi/8v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/j/Kn/M4v/r/DGL/2/yxyz+O+WPWfx3fjv/Uf9D43qfZvH/besfs/j/Ln/M4r9L/pjF//f5Yxb/XfPHLP675Y9Z/HfPH7P4/yF/zOL/x/wxi/8e+WMW/z3zxyz+e+WPWfz/lD9m8f9z/pjFf+/8MYv/PvljFv9988cs/n/JH7P4/zV/zOK/X/6YxX///DGL/9/yxyz+B+SPWfz/nj9m8T8wf8zi/4/8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/EN/kPfi/G9T7N4n9S6x+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8sbf6D3xg/c/PH7Os/wvyxyz+/8wfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s8L/Ud7F7ex+L8g9H83WfxfzB+z+L+UP2bxfzl/zOL/Sv6YxH+Mgfwxi/+g/DGL/+D8MYv/SPljFv8h+WMW/5Hzxyz+o+SPWfxHzR+z+A/NH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8zi/6H8MYv/h/PHLP4T5I9Z/D+SP2bxnzB/zOI/Uf6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/4nzxyz+k+SPWfwnzR+z+H8qf8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfw/nT9m8Z86f8zi/5n8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/l/LHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4v/l/DGL/9xD86cs/l9t/WMW/6/lj1n8Z8sfs/h/PX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/838scs/t/MH7P4L5g/ZvH/Vv6YxX+h/DGL/7fzxyz+38kfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+380fs/gvmT9m8f9e/pjF//v5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/Qf6YxX+5/DGL//L5Yxb/H+aPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/yh+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP4/zh+z+K+bP2bxXy9/zOK/fv6Yxf8n+WMW/w3yxyz+P80fs/hvmD9m8d8of8ziv3H+mMX/Z/ljFv+f549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9F/pjF/5f5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/Vf6Yxf/X+WMW/9/kj33g/N+E/Gb/nfLHPnD+b7P+d84fs/j/Nn/M4v+7/DGL/y75Yxb/3+ePWfx3zR+z+O+WP2bx3z1/zOL/h/wxi/8f88cs/nvkj1n898wfs/jvlT9m8f9T/pjF/8/5Yxb/vfPHLP775I9Z/PfNH7P4/yV/zOL/1/wxi/9++WMW//3zxyz+f8sfs/gfkD9m8f97/pjF/8D8MYv/P/LHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzx173Hxg6MPBB9j8pf8yy/k/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/3/mj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMO/+TfLof/wBgPtBVgFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/JvEfcyB/zOI/KH/M4j84f8ziP1L+mMV/SP6YxX/k/DGL/yj5Yxb/UfPHLP5D88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8of8zi/+H8MYv/BPljFv+P5I9Z/CfMH7P4T5Q/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvH/ZP6YxX/i/DGL/yT5Yxb/SfPHLP6fyh+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/T+ePWfynzh+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/6X8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/jPlj9m8f96/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/2/kj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfy/kz9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfy/mz9m8V8yf8zi/738MYv/9/PHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4v+D/DGL/3L5Yxb/5fPHLP4/zB+z+K+QP2bxX9Ho/y4esMV/JaP/u8jiv3L+mMV/lfwxi/+q+WMW/9Xyxyz+P8ofs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+P84fs/ivmz9m8V8vf8ziv37+mMX/J/ljFv8N8scs/j/NH7P4b5g/ZvHfKH/M4r9x/pjF/2f5Yxb/n+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvH/Rf6Yxf+X+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx/1X+mMX/1/ljFv/f5I9Z/HfKH7P475w/ZvH/bf6Yxf93+WMW/13yxyz+v88fs/jvmj9m8d8tf8ziv3v+mMX/D/ljFv8/5o9Z/PfIH7P475k/ZvHfK3/M4v+n/DGL/5/zxyz+e+ePWfz3yR+z+O+bP2bx/0v+mMX/r/ljFv/98scs/vvnj1n8/5Y/ZvE/IH/M4v/3/DGL/4H5Yxb/f+SPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP7/zB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf+yD7X/r65eOeXP+2Afb/43GvCV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/9gH1n3KES8e8J3/sA+r/am9e//fmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8sck/mMN5I9Z/Aflj1n8B+ePWfxHyh+z+A/JH7P4j5w/ZvEfJX/M4j9q/pjFf2j+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/D+WPWfw/nD9m8Z8gf8zi/5H8MYv/hPljFv+J8scs/h/NH7P4fyx/zOL/8fwxi/8n8scs/p/MH7P4T5w/ZvGfJH/M4j9p/pjF/1P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGf6h39d/nfH9f7NIv/p1v/mMV/6vwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/l/KH7P4z5Q/ZvGfOX/M4j9L/thb/IdfNu57PKb/X72N/6z5Y5b1/+X8MYv/V/LHLP5fzR+z+H8tf8ziP1v+mMX/6/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/kT9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bx/07+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/27+mMV/yfwxi//38scs/t/PH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/D/LHLP7L5Y9Z/JfPH7P4/zB/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/Uf6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvH/cf6YxX/d/DGL/3r5Yxb/9fPHLP4/yR+z+G+QP2bx/2n+mMV/w/wxi/9G+WMW/43zxyz+P8sfs/j/PH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/8v8scs/r/MH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/r/LHLP6/zh+z+P8mf8ziv1P+mMV/5/yxD6r/0BH8f5s/9kH1HxjB/3f5Yxb/XfLHLP6/zx+z+O+aP2bx3y1/zOK/e/6Yxf8P+WMW/z/mj1n898gfs/jvmT9m8d8rf8zi/6f8MYv/n/PHLP57549Z/PfJH7P475s/ZvH/S/6Yxf+v+WMW//3yxyz+++ePWfz/lj9m8T8gf8zi//f8MYv/gfljFv9/5I9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/v/MH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/54R/Tf/D4/rfZrF/97WP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+T+I89kD9m8R+UP2bxH5w/ZvEfKX/M4j8kf8ziP3L+mMV/lPwxi/+o+WMW/6H5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8P5Q/ZvH/cP6YxX+C/DGL/0fyxyz+E+aPWfwnyh+z+H80f8zi/7H8MYv/x/PHLP6fyB+z+H8yf8ziP3H+mMV/kvwxi/+k+WMW/0/lj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/+n88cs/lPnj1n8P5M/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/Uv6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/GfLH7P4f13tv9wYb3eNxX92tf/bZ/GfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/438MYv/N/PHLP4L5o9Z/L+VP2bxXyh/zOL/7fwxi/938scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/9388cs/kvmj1n8v5c/ZvH/fv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+QP2bxXy5/zOK/fP6Yxf+H+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/4/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/4/zxyz+6+aPWfzXyx+z+K+fP2bx/0n+mMV/g/wxi/9P88cs/hvmj1n8N8ofs/hvnD9m8f9Z/gMDA6P92yUW/5/nj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/0X+mMX/l/ljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9V/pjF/9f5Yxb/3+SPWfx3yh+z+O+cP2bx/23+mMX/d/ljFv9d8scs/r/PH7P475o/ZvHfLX/M4r97/pjF/w/5Yxb/P+aPWfz3yB+z+O+ZP2bx3yt/zOL/p/wxi/+f88cs/nvnj1n898kfs/jvmz9m8f9L/pjF/6/5Yxb//fLHLP77549Z/P+WP2bxPyB/zOL/9/wxi/+B+WMW/3/kj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+/8wfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxif84A/ljFv9B+WMW/8H5Yxb/kfLHLP5D8scs/iPnj1n8R8kfs/iPmj9m8R+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvH//9i5/3Ct6/qO4ze/yXL2sU1d2nBozLUZiYxGLURF8fjjlIlm/kY9AgkiPyTBFNhopY5Nl7pZsImFY85WLXG4uX6taFjWbI3YWuUU18IYc7DInLHrwDkIZ2/PtfNl36/L9+PxB+fc9/F9pzyvl/ftxXVV9A9l6X+g/qEs/V+lfyhL/5/WP5Sl/8/oH8rS/yD9Q1n6H6x/KEv/Q/QPZen/s/qHsvR/tf6hLP0P1T+Upf9h+oey9H+N/qEs/X9O/1CW/sP0D2Xpf7j+oSz9f17/UJb+w/UPZel/hP6hLP2P1D+Upf9r9Q9l6T9C/1CW/r+gfyhL/6P0D2Xp/4v6h7L0f53+oSz9f0n/UJb+v6x/KEv/o/UPZen/ev1DWfqP1D+Upf8b9A9l6X+M/qEs/UfpH8rS/1j9Q1n6j9Y/lKX/r+gfytJ/jP6hLP3fqH8oS/9f1T+Upf9Y/UNZ+r9J/1CW/m/WP5Sl/6/pH8rS/y36h7L0H6d/KEv/4/QPZek/Xv9Qlv7H6x/K0v8E/UNZ+p+ofyhL/wn6h7L0P0n/UJb+J+sfytJ/ov6hLP1P0T+UpX+b/qEs/U/VP5Sl/2n6h7L0P13/UJb+Z+gfytK/Xf9Qlv5v1T+Upf/b9A9l6X+m/qEs/d+ufyhL/7P0D2XpP0n/UJb+Z+sfytL/HP1DWfq/Q/9Qlv7n6h/K0v+d+oey9D9P/1CW/ufrH8rS/wL9Q1n6X6h/KEv/i/QPZel/sf6hLP0v0T+Upf9k/UNZ+l+qfyhL/8v0D2Xpf7n+oSz9O/QPZel/hf6hLP2n6B/K0n+q/qEs/afpH8rS/136h7L0v1L/UJb+0/UPZek/Q/9Qlv5X6R/K0n+m/qEs/a/WP5Sl/yz9Q1n6z9Y/lKX/HP1DWfrP1T+Upf81+oey9J+nfyhL/3frH8rS/1r9Q1n6z9c/lKX/Av1DWfpfp38oS//36B/K0v96/UNZ+t+gfyhL/4X6h7L0X6R/KEv/xfqHsvT/df1DWfr/hv6hLP2X6B/K0v+9+oey9P9N/UNZ+r9P/1CW/u/XP5Sl/436h7L0v0n/UJb+N+sfytL/t/QPZem/VP9Qlv6/rX8oS//f0T+Upf8t+oey9L9V/1CW/r+rfyhL/w/oH8rS/zb9Q1n6365/KEv/O/QPZen/e/qHsvT/ff1DWfrfqX8oS/8P6h/K0v9D+oey9F+mfyhL/+X6h7L0/wP9Q1n6/6H+oSz979I/lKX/Cv1DWfrfrX8oS/8P6x/K0v8j+oey9F+pfyhL/3v0D2Xp/0f6h7L0X6V/KEv/P9Y/lKX/vfqHsvT/E/1DWfrfp38oS/+P6h/K0v9P9Q9l6f8x/UNZ+n9c/1CW/p/QP5Sl/5/pH8rS/5P6h7L0v1//UJb+q/UPZen/gP6hLP3/XP9Qlv5r9A9l6f+g/qEs/f9C/1CW/n+pfyhL/4f0D2Xp/1f6h7L0/5T+oSz9P61/KEv/z+gfytL/s/qHsvT/nP6hLP3/Wv9Qlv6f1z+Upf8X9A9l6b9W/1CW/l/UP5Sl/9/oH8rSf53+oSz9H9Y/lKX/l/QPZen/Zf1DWfo/on8oS/+v6B/K0v+r+oey9P9b/UNZ+j+qfyhL/6/pH8rS/+/0D2Xp/3X9Q1n6/73+oSz91+sfytL/G/qHsvTfoH8oS/9/0D+Upf8/6h/K0v+b+oey9P8n/UNZ+n9L/1CW/t/WP5Sl/3f0D2Xp/5j+oSz9/1n/UJb+j+sf6uo/YGCr9ZLu/4T+oSz736h/KEv/J/UPZen/L/qHsvT/rv6hLP3/Vf9Qlv7f0z+Upf8m/UNZ+j+lfyhL/+/rH8rSf7P+oSz9/03/UJb+W/QPZen/7/qHsvR/Wv9Qlv7/oX8oS/+t+oey9N+mfyhL///UP5Sl/w/0D2Xpv13/UJb+P9Q/lKX/M/qHsvT/kf6hLP2f1T+Upf9/6R/K0v85/UNZ+v9Y/1CW/jv0DyXp/8qW/qEs/fvpH8rSv7/+oSz9B+gfytJ/oP6hLP0H6R/K0n+w/qEs/YfoH8rSf6j+oSz9X6Z/KEv//fQPZen/cv1DWfq/Qv9Qlv776x/K0v+n9A9l6X+A/qGXXH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/b+bMX3Dl5OnTO2b7xje+8c3ub17sfzMBAAD/157/0P9i/50AAAAAAAAAAAAAAAAAAABAXk3834m92P+MAAAAAAAAAAAAAADwk66t/fjNA/rt9dSAPR+85pGOnV9Hbz936sqVD5Tur10/Pi14yf57PtixY8eO5U+Pm9D1cEir1er8X3tl1+OhPY87X3/RsGWH7HpUxn/+jscumrT/6bNX3zrwG8tvbn9q0M5nB7UuuWLa9I439G+1yomDWtd2PjimX6tVTh7UuqXzwajOBxMHtVZ1Pjh254OXtT7T+eD1l82cfnnnE6dU/j2Dl4q29kWtAXsttrXXvw323P+iYY9P7f7ay0t2v9rAVtf+h6/+0sE9ftbtBfbf/frl+J777/M/IPCC+rb/ZzZ0f+3lJf/H+/+H121fEP3shfff/frlBPuH+gSf//faaM/P/T0+/x8evOTu++OGrrutc/9tZ997WNdTA/83n/+ff/1yYs/999/r83/n5/gJ3Z//h7Ra5aR9/O2AVNraF2/u7f2/9/0PfHWPm3577v/ur2x8Ref+73m2taTrqUF93P+E3t7/b+zx9wr0TVv7ih093v/7sP/WiOAld+9/0+r9d37+33jfZQft8bO+7P+knvsfOXfG1SPnzF9w9LQZk6d0TOm4auyoMceMHjt2zJiROz8R7Pp1H39TIIl9e/9v7dfjpl+r1bH7fu29N0/o3P+WB5d8pOupoX3c/8m9vv8f7v0fQsP7twYPbl07ee7c2cfs+rX74ahdv+76y4L99+G//484qusv6/4zw36t1iG770dcNHZI5/6vm1XWdD01uI/7n9jr/sfv/WeVQN/s4/v/5T1u9tr/cZtumNe5/yN/cODGrqf6+t//p/S6/7u8/8O+aGtv1fom2rn/Y4csPrXadWnz539Qnyb2P2zrLduqXZdT7R/q08T+Jy1986XVrstp9g/1aWL/D8y4eGm163K6/UN9mtj/c6/admi163KG/UN9mtj/o999cmW169Ju/1CfJvb/wTvbj612Xd5q/1CfJvZ/9DU/HFfturzN/qE+Tez/ipeftaradTnT/qE+Tez/1B0nHFTturzd/qE+Tey/3+LvLap2Xc6yf6hPE/t/YvLSmdWuyyT7h/o0sf9Vw0Y8U+26nG3/UJ8m9r/kqTdOrHZdzrF/qE8T+//q7cserXZd3mH/UJ8m9v+JCw5cVu26nGv/UJ8m9v+j4Q/uV+26vNP+oT5N7H/9+lX3V7su59k/1KeJ/S9fNWB4tetyvv1DfZrY/8JTpjxS7bpcYP9Qnyb2P3rMl8+vdl0utH+oTxP7P+Rz33qy2nW5yP6hPk3s/6yH5s2pdl0utn+oTxP7n3fox39c7bpcYv9Qnyb2/5aOQ6dWuy6T7R/q08T+y637ra92XS61f6hPE/s/b8uK8dWuy2X2D/VpYv9rDvjCx6pdl8vtH+rTxP63zrpqbLXr0mH/UJ8m9v+d9y58X7XrcoX9Q32a2P9tz369VLsuU+wf6tPE/jeNOu+Catdlqv1DfZrY/4rTn3642nWZZv9Qnyb2v3TNY3OrXZd32T/Up4n9r1172uPVrsuV9g/1aWL/R44YuX+16zLd/qE+Tex/5rlLPlTtusywf6hPE/s/8b7bX1vtulxl/1CfJvY/9GvjPlntusy0f6hPE/v/9Lj3f6radbna/qE+Tex/2/gjjqp2XWbZP9Snif1vuH/UHdWuy2z7h/o0sf8PPHxnxesyx/6hPk3sf9brnttS7brMtX+oTxP7f9Okc+ZXuy7X2D/Up4n9H3TXxC9Wuy7z7B/q08T+L/z298+sdl3ebf9Qnyb2f8TBlx5W7bpca/9Qnyb2P3XaupuqXZf59g/1aWL/E5ZvGF3tuiywf6hPE/s/4Ik5d1e7LtfZP9Snif1vHnDwGdWuy3vsH+rTxP7vuf6hb1a7LtfbP9Snif3fdONHO6pdlxvsH+rTxP4/u33w1mrXZaH9AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/80OHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADxwIAAAAAwvytg+jdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKAAA//+93Olf") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 977.864245ms ago: executing program 4 (id=3625): syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB="7684f222bdac5555d8f51a8fb1fe"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 591.719856ms ago: executing program 0 (id=3626): socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) mount$tmpfs(0x0, 0x0, 0x0, 0x10a40a2, &(0x7f0000000040)=ANY=[@ANYBLOB="f4697a653d"]) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x20, &(0x7f0000000c40)={&(0x7f0000000b00)=""/163, 0xa3, 0x0, &(0x7f0000000bc0)=""/85, 0x55}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x16, 0x0, 0x0, 0x0, 0x10001, 0x1000, &(0x7f0000000d40)=""/4096, 0xaa104880839cf50c, 0x65, '\x00', 0x0, @fallback=0x35, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0xd, 0xb, 0xf}, 0x10, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) close(r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) open(0x0, 0x80100, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) 463.216121ms ago: executing program 0 (id=3627): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001240)={0x38, 0x3, 0x2, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0x4fa11, 0xfffffffe}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r3, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001000, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001200)={0x73622a85, 0xa, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x2) 0s ago: executing program 1 (id=3628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000180)=0x2, 0x4) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000200)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) kernel console output (not intermixed with test programs): uid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1995" name="/newroot/425/file0" dev="tmpfs" ino=2217 res=1 errno=0 [ 1035.390777][T13681] netlink: 'syz.5.2007': attribute type 1 has an invalid length. [ 1035.494508][T13681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1036.646637][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 1037.935955][ T30] audit: type=1804 audit(1762402996.033:789): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2008" name="/newroot/405/file0" dev="tmpfs" ino=2094 res=1 errno=0 [ 1038.319516][T13683] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1038.602211][T13701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.610347][T13701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.021812][ T30] audit: type=1804 audit(1762403005.153:790): pid=13754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2020" name="/newroot/430/file0" dev="tmpfs" ino=2244 res=1 errno=0 [ 1048.538425][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 1049.778038][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805679e800: rx timeout, send abort [ 1049.786806][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805679e800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1054.173976][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1054.863557][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1054.927002][ T24] usb 1-1: config index 0 descriptor too short (expected 48631, got 18) [ 1054.968289][ T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1055.017255][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.048131][ T24] usb 1-1: config 0 descriptor?? [ 1055.272862][ T24] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1055.298967][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1055.318807][ T24] dib0700: firmware download failed at 7 with -22 [ 1055.996779][ T24] usb 1-1: USB disconnect, device number 21 [ 1059.700828][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.709348][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.679547][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2057'. [ 1061.076443][T13863] netlink: 'syz.1.2061': attribute type 1 has an invalid length. [ 1061.382051][T13863] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1061.742300][T13865] bond6: (slave veth13): Enslaving as an active interface with a down link [ 1086.039259][ T5923] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1086.363508][ T5923] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1086.375410][ T5923] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1086.388348][ T5923] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1086.398094][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1086.406807][ T5923] usb 1-1: Product: syz [ 1086.411524][ T5923] usb 1-1: Manufacturer: syz [ 1086.416240][ T5923] usb 1-1: SerialNumber: syz [ 1086.437653][ T5923] usb 1-1: config 0 descriptor?? [ 1086.468120][ T5923] usb 1-1: selecting invalid altsetting 0 [ 1086.930883][T14056] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1088.704772][ T5923] usb 1-1: USB disconnect, device number 22 [ 1100.160652][T14146] comedi comedi3: pcm3724: I/O port conflict (0x12,16) [ 1108.122344][ T797] IPVS: starting estimator thread 0... [ 1109.112026][T14196] IPVS: using max 29 ests per chain, 69600 per kthread [ 1111.269306][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1111.517315][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1111.679216][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1111.735541][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1111.745270][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.755049][ T24] usb 2-1: Product: ⃄䔅ᓕ赉룪äžíˆç¦‚퇥㫧縖è‡ê®”팳籧㔠䓰ï±â³– [ 1111.766746][ T24] usb 2-1: Manufacturer: Ћ [ 1111.775682][ T24] usb 2-1: SerialNumber: Ñ„ [ 1112.055852][ T24] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1112.084344][ T24] cdc_ncm 2-1:1.0: bind() failure [ 1112.124825][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1112.144474][ T24] cdc_ncm 2-1:1.1: bind() failure [ 1116.260127][ T24] usb 2-1: USB disconnect, device number 31 [ 1117.674157][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1117.859117][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1117.974160][ T24] usb 2-1: config index 0 descriptor too short (expected 48631, got 18) [ 1118.028865][ T30] audit: type=1326 audit(1762403078.153:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14259 comm="syz.3.2179" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f230ef8f6c9 code=0x0 [ 1118.056517][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.093687][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1118.103090][ T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1118.113715][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.276185][ T24] usb 2-1: config 0 descriptor?? [ 1119.742407][ T30] audit: type=1804 audit(1762403079.873:792): pid=14280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2182" name="/newroot/428/file0" dev="tmpfs" ino=2239 res=1 errno=0 [ 1120.068316][T14242] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1120.307818][ T5843] usb 2-1: USB disconnect, device number 32 [ 1121.148209][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.509185][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1132.559939][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1133.179388][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1133.191417][ T24] usb 1-1: config index 0 descriptor too short (expected 48631, got 18) [ 1133.210306][ T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1133.749666][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.811165][ T24] usb 1-1: config 0 descriptor?? [ 1135.414743][ T24] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1135.491534][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1135.512819][ T24] dib0700: firmware download failed at 7 with -22 [ 1135.570235][ T24] usb 1-1: USB disconnect, device number 23 [ 1141.519358][ T5843] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1141.719512][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 1141.740575][ T5843] usb 5-1: config index 0 descriptor too short (expected 48631, got 18) [ 1141.749784][ T5843] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1141.774086][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.007287][ T5843] usb 5-1: config 0 descriptor?? [ 1147.459269][ T5843] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1147.471804][ T5843] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1147.480424][ T5843] dib0700: firmware download failed at 7 with -22 [ 1147.873208][ T8755] usb 5-1: USB disconnect, device number 25 [ 1152.114182][T14510] bridge1: entered promiscuous mode [ 1152.119576][T14510] bridge1: entered allmulticast mode [ 1153.377631][T14521] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1156.571324][ T5843] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1157.169113][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 1157.176629][ T5843] usb 2-1: config index 0 descriptor too short (expected 48631, got 18) [ 1157.269496][ T5843] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1157.278589][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.322851][ T5843] usb 2-1: config 0 descriptor?? [ 1157.344140][T14552] syz_tun: entered allmulticast mode [ 1161.671698][T14580] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1161.678476][T14580] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1161.689889][T14580] vhci_hcd vhci_hcd.0: Device attached [ 1161.865065][T14578] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 1161.871717][T14578] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1161.879504][T14578] vhci_hcd vhci_hcd.0: Device attached [ 1161.888252][T14578] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 1161.894893][T14578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1161.902605][T14578] vhci_hcd vhci_hcd.0: Device attached [ 1161.920905][T14578] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1161.979778][ T797] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1162.162354][T14588] vhci_hcd: connection closed [ 1162.162754][ T50] vhci_hcd vhci_hcd.0: stop threads [ 1162.180747][T14581] vhci_hcd: connection closed [ 1162.180968][T14585] vhci_hcd: connection closed [ 1162.928362][ T5843] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1162.944155][ T5843] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1162.959716][ T797] usb 33-1: new low-speed USB device number 6 using vhci_hcd [ 1163.091425][T14582] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1163.114115][ T50] vhci_hcd vhci_hcd.0: release socket [ 1163.236314][ T5843] dib0700: firmware download failed at 7 with -22 [ 1163.248361][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 1163.280171][ T50] vhci_hcd vhci_hcd.0: stop threads [ 1163.339216][ T50] vhci_hcd vhci_hcd.0: release socket [ 1163.440343][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 1163.449424][ T50] vhci_hcd vhci_hcd.0: stop threads [ 1163.482848][ T50] vhci_hcd vhci_hcd.0: release socket [ 1163.525864][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 1165.312366][ T24] usb 2-1: USB disconnect, device number 33 [ 1169.149165][ T797] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1170.449129][ T5841] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1170.729181][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 1170.754134][ T5841] usb 5-1: config index 0 descriptor too short (expected 48631, got 18) [ 1170.970630][ T5841] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1171.100809][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.161947][ T5841] usb 5-1: config 0 descriptor?? [ 1173.871225][T14681] cgroup: release_agent respecified [ 1173.876754][ T5841] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1174.032039][ T5841] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1174.040715][ T5841] dib0700: firmware download failed at 7 with -22 [ 1174.052489][ T5841] usb 5-1: USB disconnect, device number 26 [ 1175.252258][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2296'. [ 1180.970217][ T5841] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1182.128586][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 1182.138346][ T5841] usb 5-1: config index 0 descriptor too short (expected 48631, got 18) [ 1182.148420][ T5841] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1182.165067][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.176894][ T5841] usb 5-1: config 0 descriptor?? [ 1182.580650][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.587010][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.480642][T14760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2316'. [ 1184.984132][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 1187.190546][ T5841] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1187.831906][ T5841] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1187.859276][ T5841] dib0700: firmware download failed at 7 with -22 [ 1189.474525][ T8755] usb 5-1: USB disconnect, device number 27 [ 1194.569414][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'. [ 1199.499157][ T30] audit: type=1804 audit(1762403159.413:793): pid=14872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2342" name="/newroot/420/file0" dev="tmpfs" ino=2196 res=1 errno=0 [ 1200.089399][ T6037] libceph: connect (1)[c::]:6789 error -101 [ 1200.095507][ T6037] libceph: mon0 (1)[c::]:6789 connect error [ 1200.362161][ T6037] libceph: connect (1)[c::]:6789 error -101 [ 1200.368220][ T6037] libceph: mon0 (1)[c::]:6789 connect error [ 1200.879593][ T6037] libceph: connect (1)[c::]:6789 error -101 [ 1200.914632][ T6037] libceph: mon0 (1)[c::]:6789 connect error [ 1201.473733][T14880] ceph: No mds server is up or the cluster is laggy [ 1201.994534][ T6037] libceph: connect (1)[c::]:6789 error -101 [ 1202.054876][ T6037] libceph: mon0 (1)[c::]:6789 connect error [ 1203.496256][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 1203.538480][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 1203.707165][T14907] netlink: 'syz.4.2355': attribute type 1 has an invalid length. [ 1204.060878][T14907] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1206.300014][T14932] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2361'. [ 1209.586416][T14961] veth0_to_team: entered promiscuous mode [ 1209.592365][T14961] veth0_to_team: entered allmulticast mode [ 1209.931243][T14963] siw: device registration error -23 [ 1211.566606][T14969] netlink: 'syz.3.2372': attribute type 1 has an invalid length. [ 1211.812304][T14969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1212.578946][T14991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2376'. [ 1213.691003][T15001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1215.863902][T15013] siw: device registration error -23 [ 1219.262503][T15035] netlink: 'syz.3.2389': attribute type 1 has an invalid length. [ 1219.393438][T15035] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1223.850035][T15084] cgroup: release_agent respecified [ 1224.755272][ T30] audit: type=1804 audit(1762403184.653:794): pid=15089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2401" name="/newroot/508/file0" dev="tmpfs" ino=2651 res=1 errno=0 [ 1230.159177][ T6037] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1230.973496][ T6037] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1231.009276][ T6037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.017329][ T6037] usb 5-1: Product: syz [ 1231.051186][ T6037] usb 5-1: Manufacturer: syz [ 1231.057737][ T6037] usb 5-1: SerialNumber: syz [ 1231.070565][ T6037] usb 5-1: config 0 descriptor?? [ 1231.080130][ T6037] hub 5-1:0.0: bad descriptor, ignoring hub [ 1231.086099][ T6037] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1231.300205][ T6037] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1231.333344][ T6037] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1231.359891][ T6037] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1231.387052][ T6037] usb 5-1: media controller created [ 1231.430982][ T6037] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1231.501729][T15133] dib0700: tx buffer length is larger than 4. Not supported. [ 1231.638636][ T6037] DVB: Unable to find symbol dib7000p_attach() [ 1231.652025][ T6037] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1231.822045][ T6037] rc_core: IR keymap rc-dib0700-rc5 not found [ 1231.831759][ T6037] Registered IR keymap rc-empty [ 1231.837214][ T6037] dvb-usb: could not initialize remote control. [ 1231.844973][ T6037] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1231.861097][ T6037] usb 5-1: USB disconnect, device number 28 [ 1232.041034][ T6037] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1233.844220][T15170] netlink: 'syz.4.2428': attribute type 1 has an invalid length. [ 1241.830735][ T30] audit: type=1804 audit(1762403201.963:795): pid=15235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2444" name="/newroot/490/file0" dev="tmpfs" ino=2529 res=1 errno=0 [ 1244.000684][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.007002][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.080247][ T30] audit: type=1804 audit(1762403207.513:796): pid=15285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2457" name="/newroot/494/file0" dev="tmpfs" ino=2550 res=1 errno=0 [ 1248.219522][T13004] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1248.374178][T15297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2462'. [ 1248.399106][T13004] usb 1-1: Using ep0 maxpacket: 32 [ 1248.406467][T15297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2462'. [ 1248.420303][T13004] usb 1-1: config index 0 descriptor too short (expected 48631, got 18) [ 1248.450508][T13004] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1248.474877][T13004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.502965][T13004] usb 1-1: config 0 descriptor?? [ 1250.230388][T15306] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1250.669700][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'. [ 1251.379399][ T6037] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1251.679117][ T6037] usb 6-1: Using ep0 maxpacket: 32 [ 1251.686508][ T6037] usb 6-1: config index 0 descriptor too short (expected 48631, got 18) [ 1251.695253][ T6037] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1251.705001][ T6037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.731501][ T6037] usb 6-1: config 0 descriptor?? [ 1252.174484][T13004] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1253.061597][T13004] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1253.109112][T13004] dib0700: firmware download failed at 7 with -22 [ 1253.138349][T13004] usb 1-1: USB disconnect, device number 24 [ 1254.130040][ T6037] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1254.282547][ T6037] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1254.321176][ T6037] dib0700: firmware download failed at 7 with -22 [ 1254.393589][ T6037] usb 6-1: USB disconnect, device number 2 [ 1256.813430][T15351] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2477'. [ 1257.919105][T13004] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1258.109262][T13004] usb 5-1: Using ep0 maxpacket: 32 [ 1258.116692][T13004] usb 5-1: config index 0 descriptor too short (expected 48631, got 18) [ 1258.127056][T13004] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1258.137765][T13004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.160027][T13004] usb 5-1: config 0 descriptor?? [ 1258.796828][T15372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2483'. [ 1261.521876][T15373] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1261.725497][T15394] cgroup: release_agent respecified [ 1263.217239][T13004] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1263.293114][T13004] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1263.484599][T13004] dib0700: firmware download failed at 7 with -22 [ 1263.626731][ T797] usb 5-1: USB disconnect, device number 29 [ 1270.717012][T15467] cgroup: release_agent respecified [ 1270.961906][T15472] xt_NFQUEUE: number of total queues is 0 [ 1275.566699][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 1279.164201][T15531] cgroup: release_agent respecified [ 1281.159846][T15551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2527'. [ 1285.849417][T15575] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1286.870967][T15575] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1286.921621][T15575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.939145][T15575] usb 4-1: Product: syz [ 1286.945735][T15575] usb 4-1: Manufacturer: syz [ 1286.999902][T15575] usb 4-1: SerialNumber: syz [ 1287.042941][T15575] usb 4-1: config 0 descriptor?? [ 1287.092549][T15575] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1287.112116][T15575] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1287.143065][T15575] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1287.782486][T15592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.797753][T15592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.221937][T15575] usb 4-1: media controller created [ 1288.485362][T15575] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1288.670526][T15603] cgroup: release_agent respecified [ 1288.699520][T15575] DVB: Unable to find symbol mt352_attach() [ 1291.563445][T15575] DVB: Unable to find symbol nxt6000_attach() [ 1291.569763][T15575] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1291.585470][T15575] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 1291.624790][T15575] dvb-usb: schedule remote query interval to 1000 msecs. [ 1291.633536][T15575] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1291.644165][T15575] dvb-usb: bulk message failed: -22 (7/0) [ 1291.659335][T15575] dvb-usb: bulk message failed: -22 (7/0) [ 1291.684013][T15575] usb 4-1: USB disconnect, device number 24 [ 1291.873526][T15575] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1297.838465][T15655] netlink: 'syz.4.2553': attribute type 1 has an invalid length. [ 1297.849395][T15655] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1298.068061][T15665] cgroup: release_agent respecified [ 1298.819274][T15669] Invalid ELF header magic: != ELF [ 1302.539254][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2566'. [ 1303.533240][T15704] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2567'. [ 1305.433855][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.440504][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.224067][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 1310.310050][T15749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2581'. [ 1314.643268][T15785] cgroup: release_agent respecified [ 1316.923404][T15795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2593'. [ 1325.116848][T15840] cgroup: release_agent respecified [ 1327.779118][ T30] audit: type=1804 audit(1762403287.903:797): pid=15861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2611" name="/newroot/180/file0" dev="tmpfs" ino=936 res=1 errno=0 [ 1331.190165][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 1335.403054][T15575] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1336.169173][T15575] usb 6-1: Using ep0 maxpacket: 32 [ 1336.176091][T15575] usb 6-1: config index 0 descriptor too short (expected 48631, got 18) [ 1336.221127][T15575] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1336.236693][T15575] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.278229][T15575] usb 6-1: config 0 descriptor?? [ 1336.310062][T15917] cgroup: release_agent respecified [ 1338.708506][T15575] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1338.719490][T15575] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1338.728028][T15575] dib0700: firmware download failed at 7 with -22 [ 1338.738387][T15575] usb 6-1: USB disconnect, device number 3 [ 1345.299085][ T5923] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1345.469415][ T797] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1345.490268][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 1345.497276][ T5923] usb 4-1: config index 0 descriptor too short (expected 48631, got 18) [ 1345.509013][ T5923] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1345.739042][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 1345.753884][ T797] usb 1-1: config index 0 descriptor too short (expected 48631, got 18) [ 1345.764035][ T797] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1345.789063][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.819055][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.843596][ T5923] usb 4-1: config 0 descriptor?? [ 1345.857552][ T797] usb 1-1: config 0 descriptor?? [ 1347.593744][ T5923] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1347.683827][ T5923] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1347.740546][ T5923] dib0700: firmware download failed at 7 with -22 [ 1347.802785][ T5923] usb 4-1: USB disconnect, device number 25 [ 1348.179044][ T797] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1348.200870][ T797] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1348.208896][ T797] dib0700: firmware download failed at 7 with -22 [ 1348.242397][ T797] usb 1-1: USB disconnect, device number 25 [ 1348.318299][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2644'. [ 1350.883669][T16020] siw: device registration error -23 [ 1351.647965][T16021] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1351.657441][T16021] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1351.667125][T16021] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1355.559075][ T797] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1355.880744][ T797] usb 6-1: Using ep0 maxpacket: 32 [ 1355.911094][ T797] usb 6-1: config index 0 descriptor too short (expected 48631, got 18) [ 1355.939175][ T797] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1355.967320][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.998396][ T797] usb 6-1: config 0 descriptor?? [ 1356.162712][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 1358.171294][ T797] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1358.190879][ T797] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1358.209750][ T797] dib0700: firmware download failed at 7 with -22 [ 1358.239938][ T797] usb 6-1: USB disconnect, device number 4 [ 1364.148060][T16114] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2674'. [ 1366.691863][ T6037] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1366.880046][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.886485][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.098244][ T6037] usb 5-1: Using ep0 maxpacket: 32 [ 1367.158612][ T6037] usb 5-1: config index 0 descriptor too short (expected 48631, got 18) [ 1368.116323][ T6037] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1368.198478][ T6037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.001331][ T6037] usb 5-1: config 0 descriptor?? [ 1369.019135][ T6037] usb 5-1: can't set config #0, error -71 [ 1369.027320][ T6037] usb 5-1: USB disconnect, device number 30 [ 1370.379060][ T8755] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1372.479707][ T8755] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1372.488820][ T8755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.499168][ T8755] usb 6-1: Product: syz [ 1372.503457][ T8755] usb 6-1: Manufacturer: syz [ 1372.516175][ T8755] usb 6-1: SerialNumber: syz [ 1372.626320][ T8755] usb 6-1: config 0 descriptor?? [ 1372.640077][ T8755] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1373.123819][ T8755] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1373.139837][ T8755] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1373.159352][ T8755] usb 6-1: media controller created [ 1373.271812][T16167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.285156][T16167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.886230][ T8755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1374.930257][ T8755] DVB: Unable to find symbol mt352_attach() [ 1375.059406][ T8755] DVB: Unable to find symbol nxt6000_attach() [ 1375.065527][ T8755] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1375.079957][ T8755] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 1375.101334][ T8755] dvb-usb: schedule remote query interval to 1000 msecs. [ 1375.108415][ T8755] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1375.141141][ T8755] dvb-usb: bulk message failed: -22 (7/0) [ 1375.146921][ T8755] dvb-usb: bulk message failed: -22 (7/0) [ 1375.237543][ T8755] usb 6-1: USB disconnect, device number 5 [ 1376.639052][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1377.283320][ T8755] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1377.401640][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1377.435326][ T10] usb 4-1: config index 0 descriptor too short (expected 48631, got 18) [ 1377.444544][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1377.454751][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.472077][ T10] usb 4-1: config 0 descriptor?? [ 1379.294092][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1379.305648][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1379.314907][ T10] dib0700: firmware download failed at 7 with -22 [ 1379.325359][ T10] usb 4-1: USB disconnect, device number 26 [ 1380.211229][ T5923] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1380.349220][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1380.395119][ T5923] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1380.414765][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.430989][ T5923] usb 2-1: Product: syz [ 1380.440019][ T5923] usb 2-1: Manufacturer: syz [ 1380.448993][ T5923] usb 2-1: SerialNumber: syz [ 1380.462374][ T5923] usb 2-1: config 0 descriptor?? [ 1380.474046][ T5923] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1380.486987][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1380.497242][ T5923] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1380.507155][ T5923] usb 2-1: media controller created [ 1380.519322][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1380.528346][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1380.532595][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.563656][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1380.586361][ T10] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1380.598625][ T5923] DVB: Unable to find symbol mt352_attach() [ 1380.603763][ T10] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1380.627989][ T10] usb 1-1: Product: syz [ 1380.634884][ T10] usb 1-1: Manufacturer: syz [ 1380.639995][ T10] usb 1-1: SerialNumber: syz [ 1380.651380][ T10] usb 1-1: config 0 descriptor?? [ 1380.682502][ T5923] DVB: Unable to find symbol nxt6000_attach() [ 1380.694957][ T5923] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1380.726076][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 1380.756315][ T5923] dvb-usb: schedule remote query interval to 1000 msecs. [ 1380.775464][ T5923] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1380.797119][ T5923] dvb-usb: bulk message failed: -22 (7/0) [ 1380.817998][ T5923] dvb-usb: bulk message failed: -22 (7/0) [ 1381.860346][ T5923] dvb-usb: bulk message failed: -22 (7/0) [ 1381.881772][ T5923] dvb-usb: error while querying for an remote control event. [ 1382.723010][T16230] ªªªªª2: renamed from veth0_vlan (while UP) [ 1383.042252][ T5843] usb 2-1: USB disconnect, device number 34 [ 1383.133588][ T8755] usb 1-1: USB disconnect, device number 26 [ 1383.264156][T16230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2708'. [ 1383.352564][T16231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2708'. [ 1383.603280][ T5843] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1388.249181][ T8755] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1388.425635][ T8755] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1388.447444][ T8755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.466449][ T8755] usb 4-1: Product: syz [ 1388.476638][ T8755] usb 4-1: Manufacturer: syz [ 1388.484465][ T8755] usb 4-1: SerialNumber: syz [ 1388.570403][ T8755] usb 4-1: config 0 descriptor?? [ 1388.591683][ T8755] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1388.650513][ T8755] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1388.679721][ T8755] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1388.709124][ T8755] usb 4-1: media controller created [ 1388.737763][ T8755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1389.412957][T16285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.421773][T16285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.490300][T15575] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1389.525096][ T8755] DVB: Unable to find symbol mt352_attach() [ 1389.729242][T15575] usb 1-1: Using ep0 maxpacket: 32 [ 1389.748287][T15575] usb 1-1: config index 0 descriptor too short (expected 48631, got 18) [ 1389.798465][T15575] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1389.879010][T15575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.917343][ T8755] DVB: Unable to find symbol nxt6000_attach() [ 1390.161492][ T8755] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1390.340385][T15575] usb 1-1: config 0 descriptor?? [ 1390.372702][ T8755] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 1390.658819][ T8755] dvb-usb: schedule remote query interval to 1000 msecs. [ 1390.666076][ T8755] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1390.676875][ T8755] dvb-usb: bulk message failed: -22 (7/0) [ 1390.683113][ T8755] dvb-usb: bulk message failed: -22 (7/0) [ 1390.841876][T16302] siw: device registration error -23 [ 1391.671710][ T8755] dvb-usb: bulk message failed: -22 (7/0) [ 1391.677503][ T8755] dvb-usb: error while querying for an remote control event. [ 1392.243198][ T10] usb 4-1: USB disconnect, device number 27 [ 1392.619045][T13004] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1392.779046][T13004] usb 2-1: Using ep0 maxpacket: 32 [ 1392.806234][T13004] usb 2-1: config index 0 descriptor too short (expected 48631, got 18) [ 1392.831199][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1392.842305][T15575] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1392.848679][T13004] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1392.896831][T13004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.723664][T15575] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1393.763960][T15575] dib0700: firmware download failed at 7 with -22 [ 1393.997616][T13004] usb 2-1: config 0 descriptor?? [ 1394.027769][T15575] usb 1-1: USB disconnect, device number 27 [ 1397.656178][T13004] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1397.710320][T16345] Invalid ELF header magic: != ELF [ 1397.799892][T13004] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1397.807966][T13004] dib0700: firmware download failed at 7 with -22 [ 1397.841327][T13004] usb 2-1: USB disconnect, device number 35 [ 1400.499227][ T8755] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1400.660056][ T8755] usb 2-1: Using ep0 maxpacket: 32 [ 1400.913541][ T8755] usb 2-1: config index 0 descriptor too short (expected 48631, got 18) [ 1400.923616][ T8755] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1400.933617][ T8755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.973406][ T8755] usb 2-1: config 0 descriptor?? [ 1407.117214][ T8755] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1407.190884][ T8755] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1407.210321][ T8755] dib0700: firmware download failed at 7 with -22 [ 1407.247708][ T8755] usb 2-1: USB disconnect, device number 36 [ 1415.917470][T16471] Invalid ELF header magic: != ELF [ 1416.154590][T16477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2774'. [ 1427.741647][T16544] block device autoloading is deprecated and will be removed. [ 1427.775298][T16544] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1427.792191][T16544] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1427.890222][T16544] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1427.898598][T16544] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1428.315670][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.324540][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.500855][T16570] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1430.526898][ T36] Bluetooth: hci3: Frame reassembly failed (-84) [ 1430.998343][T16575] Invalid ELF header magic: != ELF [ 1431.404283][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2803'. [ 1432.769822][T16236] Bluetooth: hci3: command 0x1003 tx timeout [ 1432.779102][ T5148] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1439.411305][T16622] cgroup: release_agent respecified [ 1439.640563][T16617] xt_NFQUEUE: number of total queues is 0 [ 1439.977096][T16630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1440.559509][ T5923] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1440.729600][ T5923] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1440.744264][T16634] bond4: (slave veth7): Enslaving as an active interface with an up link [ 1440.753096][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.781232][ T5923] usb 2-1: Product: syz [ 1440.799163][ T5923] usb 2-1: Manufacturer: syz [ 1440.810319][ T5923] usb 2-1: SerialNumber: syz [ 1440.880448][ T5923] usb 2-1: config 0 descriptor?? [ 1440.896396][ T5923] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1441.813619][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1441.835393][ T5923] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1442.063477][ T5923] usb 2-1: media controller created [ 1442.175438][T16651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.189342][T16651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.807792][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1443.047245][ T5923] DVB: Unable to find symbol mt352_attach() [ 1443.167242][ T5923] DVB: Unable to find symbol nxt6000_attach() [ 1443.179045][ T5923] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1443.215259][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 1443.269267][ T5923] dvb-usb: schedule remote query interval to 1000 msecs. [ 1443.291991][ T5923] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1443.309306][ T5923] dvb-usb: bulk message failed: -22 (7/0) [ 1443.317312][ T5923] dvb-usb: bulk message failed: -22 (7/0) [ 1444.508584][ T5923] dvb-usb: bulk message failed: -22 (7/0) [ 1444.514636][ T5923] dvb-usb: error while querying for an remote control event. [ 1444.519162][ T6037] usb 2-1: USB disconnect, device number 37 [ 1446.991301][ T6037] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1447.827877][T16698] overlayfs: missing 'lowerdir' [ 1448.399689][T16697] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1448.406283][T16697] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1448.424602][T16697] vhci_hcd vhci_hcd.0: Device attached [ 1449.359017][T15575] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 1449.480388][T16702] vhci_hcd: connection closed [ 1449.489814][ T13] vhci_hcd vhci_hcd.4: stop threads [ 1449.522659][ T13] vhci_hcd vhci_hcd.4: release socket [ 1449.528270][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 1454.789757][T15575] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1456.822759][T16770] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1456.884381][T16770] kvm: pic: level sensitive irq not supported [ 1456.884872][T16770] kvm: pic: non byte read [ 1456.932261][T16770] kvm: pic: level sensitive irq not supported [ 1456.932933][T16770] kvm: pic: non byte read [ 1456.971365][T16770] kvm: pic: level sensitive irq not supported [ 1456.971475][T16770] kvm: pic: non byte read [ 1470.580547][T16236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1470.591700][T16236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1470.616707][T16236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1470.649702][T16236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1470.678335][T16236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1472.748995][T16236] Bluetooth: hci3: command tx timeout [ 1472.880882][T16865] chnl_net:caif_netlink_parms(): no params data found [ 1474.790088][T16236] Bluetooth: hci3: command tx timeout [ 1476.170244][T16865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.181107][T16865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.194737][T16865] bridge_slave_0: entered allmulticast mode [ 1476.204962][T16865] bridge_slave_0: entered promiscuous mode [ 1476.214987][T16865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.237009][T16865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.274372][T16865] bridge_slave_1: entered allmulticast mode [ 1476.475115][T16865] bridge_slave_1: entered promiscuous mode [ 1476.676170][T16865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.873896][T16236] Bluetooth: hci3: command tx timeout [ 1477.090699][T16865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.431523][T16865] team0: Port device team_slave_0 added [ 1477.462589][T16865] team0: Port device team_slave_1 added [ 1477.753559][T16865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.778922][T16865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.929093][T16865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.986723][T16865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.996309][T16865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.069234][T16865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.949040][T16236] Bluetooth: hci3: command tx timeout [ 1479.121544][T16865] hsr_slave_0: entered promiscuous mode [ 1479.159549][T16865] hsr_slave_1: entered promiscuous mode [ 1479.166190][T16865] debugfs: 'hsr0' already exists in 'hsr' [ 1479.194894][T16865] Cannot create hsr debugfs directory [ 1483.350201][T16865] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.102427][T16865] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.242004][T16865] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.353329][T16865] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.670890][T16865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1484.683356][T16865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1484.695837][T16865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1484.713742][T16865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1484.889581][T16865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.919997][ T5923] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1485.102831][T16865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.213247][ T10] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1485.390444][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.397727][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.530719][ T10] usb 2-1: config 0 has no interfaces? [ 1485.538569][ T5923] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1485.540143][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1485.559013][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1485.568315][ T10] usb 2-1: Product: syz [ 1485.573466][ T10] usb 2-1: Manufacturer: syz [ 1485.589330][ T10] usb 2-1: SerialNumber: syz [ 1485.604139][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.604635][ T10] usb 2-1: config 0 descriptor?? [ 1485.643385][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.650604][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.669118][ T5923] usb 6-1: Product: syz [ 1485.678980][ T5923] usb 6-1: Manufacturer: syz [ 1485.689077][ T5923] usb 6-1: SerialNumber: syz [ 1486.240582][ T5923] usb 6-1: config 0 descriptor?? [ 1486.259519][ T5923] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1486.276300][T16865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1486.433284][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1487.214766][ T5923] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1487.224607][ T5923] usb 6-1: media controller created [ 1487.243513][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1487.266026][T16865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1487.594651][T17013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.603472][T17013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.105204][ T5923] DVB: Unable to find symbol mt352_attach() [ 1488.175587][ T5923] DVB: Unable to find symbol nxt6000_attach() [ 1488.188334][ T5923] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1488.212302][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input21 [ 1488.257549][ T5923] dvb-usb: schedule remote query interval to 1000 msecs. [ 1488.376930][ T5905] usb 2-1: USB disconnect, device number 38 [ 1489.050955][ T5923] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1489.199051][ T5923] dvb-usb: bulk message failed: -22 (7/0) [ 1489.206612][ T5923] dvb-usb: bulk message failed: -22 (7/0) [ 1489.229621][ T5923] usb 6-1: USB disconnect, device number 6 [ 1489.333931][T16865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1490.192942][ T5923] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1490.348172][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.363092][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.737171][T16865] veth0_vlan: entered promiscuous mode [ 1492.682914][T16865] veth1_vlan: entered promiscuous mode [ 1494.021677][T16865] veth0_macvtap: entered promiscuous mode [ 1494.062271][T16865] veth1_macvtap: entered promiscuous mode [ 1494.289149][ T24] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1494.331494][T16865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1494.516389][ T24] usb 5-1: config 0 has no interfaces? [ 1494.604002][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1494.606505][T16865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1494.842064][ T1145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.438976][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1495.447220][ T24] usb 5-1: Product: syz [ 1495.592873][ T1145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.601751][ T1145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.628970][ T24] usb 5-1: Manufacturer: syz [ 1495.639053][ T24] usb 5-1: SerialNumber: syz [ 1495.646750][ T24] usb 5-1: config 0 descriptor?? [ 1495.658542][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.162927][ T6311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.197880][ T6311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.778753][ T5841] usb 5-1: USB disconnect, device number 31 [ 1498.844335][ T6311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.854362][ T6311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1499.806759][ T30] audit: type=1804 audit(1762403459.283:798): pid=17108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2936" name="/newroot/538/file0" dev="tmpfs" ino=2803 res=1 errno=0 [ 1500.639666][T17117] siw: device registration error -23 [ 1501.037342][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2939'. [ 1507.950734][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1507.966730][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1507.976926][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1507.985937][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1507.994523][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1508.098139][T17170] overlayfs: missing 'lowerdir' [ 1509.820998][ T6309] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.028276][T17166] chnl_net:caif_netlink_parms(): no params data found [ 1510.050740][T12480] tipc: Resetting bearer [ 1510.076209][T16236] Bluetooth: hci0: command tx timeout [ 1510.185875][ T6309] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.149302][T16236] Bluetooth: hci0: command tx timeout [ 1513.652572][ T6309] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.937470][T17166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.960639][T17166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.999871][T17166] bridge_slave_0: entered allmulticast mode [ 1514.031315][T17166] bridge_slave_0: entered promiscuous mode [ 1514.152656][T17166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.164659][T17166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.172499][T17166] bridge_slave_1: entered allmulticast mode [ 1514.180986][T17166] bridge_slave_1: entered promiscuous mode [ 1514.229205][T16236] Bluetooth: hci0: command tx timeout [ 1515.387736][ T6309] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.627021][T17166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.700238][T17166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.082217][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2966'. [ 1516.326905][T16236] Bluetooth: hci0: command tx timeout [ 1517.401498][T17166] team0: Port device team_slave_0 added [ 1517.427719][T17166] team0: Port device team_slave_1 added [ 1519.081297][T17166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1519.114578][T17166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1519.235831][T17166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.729212][T17166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1519.736215][T17166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1520.079091][T17166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1521.742565][T17166] hsr_slave_0: entered promiscuous mode [ 1521.772520][T17166] hsr_slave_1: entered promiscuous mode [ 1521.799457][T17166] debugfs: 'hsr0' already exists in 'hsr' [ 1521.805245][T17166] Cannot create hsr debugfs directory [ 1522.917062][T17295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2979'. [ 1523.380097][ T6309] bridge_slave_1: left allmulticast mode [ 1523.389115][ T6309] bridge_slave_1: left promiscuous mode [ 1523.569152][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.585436][ T6309] bridge_slave_0: left allmulticast mode [ 1524.579728][ T6309] bridge_slave_0: left promiscuous mode [ 1524.589960][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.034497][ T30] audit: type=1804 audit(1762403486.013:799): pid=17310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2984" name="/newroot/606/file0" dev="tmpfs" ino=3127 res=1 errno=0 [ 1529.048451][ T6309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1529.065850][ T6309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1529.177754][ T6309] bond0 (unregistering): Released all slaves [ 1529.279692][ T10] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1529.452479][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.484547][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1529.499407][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1529.516655][ T10] usb 2-1: Product: syz [ 1529.528981][ T10] usb 2-1: Manufacturer: syz [ 1529.533630][ T10] usb 2-1: SerialNumber: syz [ 1529.553554][ T10] usb 2-1: config 0 descriptor?? [ 1529.563067][ T6309] bond1 (unregistering): (slave veth3): Releasing active interface [ 1529.587562][ T6309] bond1 (unregistering): Released all slaves [ 1529.647660][ T10] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1529.863636][ T6309] bond2 (unregistering): (slave veth5): Releasing active interface [ 1529.914464][ T6309] vlan2: entered promiscuous mode [ 1529.953783][ T6309] bond2 (unregistering): (slave vlan2): Releasing active interface [ 1529.999701][ T6309] bond2 (unregistering): Released all slaves [ 1530.848777][ T6309] bond3 (unregistering): Released all slaves [ 1530.979525][ T6309] bond4 (unregistering): (slave veth7): Releasing backup interface [ 1530.993326][ T6309] bond4 (unregistering): Released all slaves [ 1531.213109][ T6309] tipc: Disabling bearer [ 1531.221109][ T6309] tipc: Disabling bearer [ 1531.237180][ T6309] tipc: Left network mode [ 1531.383779][ T6309] IPVS: stopping master sync thread 8944 ... [ 1532.918285][T17364] xt_connbytes: Forcing CT accounting to be enabled [ 1532.925490][T17364] set match dimension is over the limit! [ 1533.294867][T13004] usb 2-1: USB disconnect, device number 39 [ 1535.781052][T17398] xt_cgroup: invalid path, errno=-2 [ 1536.488096][ T6309] hsr_slave_0: left promiscuous mode [ 1536.535076][ T6309] hsr_slave_1: left promiscuous mode [ 1536.544224][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1536.644879][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.657212][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1536.707698][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.294725][ T6309] veth1_macvtap: left promiscuous mode [ 1537.312002][ T6309] veth0_macvtap: left promiscuous mode [ 1537.322219][ T6309] veth1_vlan: left promiscuous mode [ 1538.454241][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3008'. [ 1542.371376][ T6309] team0 (unregistering): Port device team_slave_1 removed [ 1542.414235][ T6309] team0 (unregistering): Port device team_slave_0 removed [ 1544.115327][T17166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1544.160074][T17166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1544.210176][T17166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1544.383983][T17166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1545.306505][T17166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1545.393201][T17166] 8021q: adding VLAN 0 to HW filter on device team0 [ 1545.437918][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.445180][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.465127][T12484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.472402][T12484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1545.650081][ T6309] IPVS: stop unused estimator thread 0... [ 1547.892178][T17166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1548.825329][T17166] veth0_vlan: entered promiscuous mode [ 1548.859952][T17492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 1549.549068][T17494] vlan2: entered allmulticast mode [ 1549.554243][T17494] veth1: entered allmulticast mode [ 1549.582619][T17166] veth1_vlan: entered promiscuous mode [ 1549.672830][T17166] veth0_macvtap: entered promiscuous mode [ 1549.696989][T17166] veth1_macvtap: entered promiscuous mode [ 1549.765180][T17166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1549.799453][T17166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1549.836799][T17027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.866232][T17027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.885358][T17027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.899220][T17027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.719721][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.726041][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.341037][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.352210][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.430928][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.449789][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.564938][T17542] ======================================================= [ 1555.564938][T17542] WARNING: The mand mount option has been deprecated and [ 1555.564938][T17542] and is ignored by this kernel. Remove the mand [ 1555.564938][T17542] option from the mount to silence this warning. [ 1555.564938][T17542] ======================================================= [ 1556.923543][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1556.933612][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1556.943015][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1556.961439][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1556.969635][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1556.979514][T12480] bridge_slave_1: left allmulticast mode [ 1557.009088][T12480] bridge_slave_1: left promiscuous mode [ 1557.014836][T12480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.099744][T12480] bridge_slave_0: left allmulticast mode [ 1557.105441][T12480] bridge_slave_0: left promiscuous mode [ 1557.318623][T12480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.079177][T16236] Bluetooth: hci2: command tx timeout [ 1559.345203][T17576] random: crng reseeded on system resumption [ 1559.759346][T12480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1559.772060][T12480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1559.783001][T12480] bond0 (unregistering): Released all slaves [ 1560.845698][T12480] bond1 (unregistering): (slave veth3): Releasing active interface [ 1560.853833][T12480] vlan2: entered promiscuous mode [ 1560.904152][T17596] netlink: 'syz.1.3053': attribute type 1 has an invalid length. [ 1560.962549][T12480] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1560.978307][ T30] audit: type=1326 audit(1762403521.103:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17597 comm="syz.0.3054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8488d8f6c9 code=0x0 [ 1561.060713][T12480] bond1 (unregistering): Released all slaves [ 1561.109172][T16236] Bluetooth: hci2: command tx timeout [ 1561.717433][T12480] bond2 (unregistering): Released all slaves [ 1562.009350][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3057'. [ 1562.841081][T12480] bond3 (unregistering): Released all slaves [ 1563.176026][T17596] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1563.189170][T16236] Bluetooth: hci2: command tx timeout [ 1563.201742][T12480] IPVS: stopping master sync thread 8286 ... [ 1564.549535][T17624] fuse: Bad value for 'fd' [ 1565.279497][T16236] Bluetooth: hci2: command tx timeout [ 1566.218949][ T30] audit: type=1804 audit(1762403526.313:801): pid=17653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3066" name="/newroot/8/file0" dev="tmpfs" ino=59 res=1 errno=0 [ 1567.183138][T17553] chnl_net:caif_netlink_parms(): no params data found [ 1567.237576][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 1567.713807][T17657] siw: device registration error -23 [ 1567.965158][T12480] hsr_slave_0: left promiscuous mode [ 1567.974124][T12480] hsr_slave_1: left promiscuous mode [ 1568.083664][T12480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1568.091265][T12480] net_ratelimit: 30 callbacks suppressed [ 1568.091279][T12480] batadv0: mtu less than device minimum [ 1568.105030][T12480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1568.117412][T12480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1568.129745][T12480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1568.142013][T12480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1568.154408][T12480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1568.166821][T12480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1568.179005][T12480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1568.191240][T12480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1568.203518][T12480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1568.267746][T17669] fuse: Bad value for 'fd' [ 1568.778316][T12480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1568.807660][T12480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1568.898542][T12480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.939957][T12480] batman_adv: batadv0: Interface deactivated: dummy0 [ 1568.946705][T12480] batman_adv: batadv0: Removing interface: dummy0 [ 1569.064190][T12480] veth1_macvtap: left promiscuous mode [ 1569.100893][T12480] veth0_macvtap: left promiscuous mode [ 1569.111636][T12480] veth1_vlan: left promiscuous mode [ 1569.118062][T12480] ªªªªª2: left promiscuous mode [ 1570.729006][ T30] audit: type=1804 audit(1762403530.853:802): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3080" name="/newroot/269/file0" dev="tmpfs" ino=1410 res=1 errno=0 [ 1572.137921][T17709] fuse: Bad value for 'fd' [ 1573.214253][T12480] team0 (unregistering): Port device team_slave_1 removed [ 1573.416504][T12480] team0 (unregistering): Port device team_slave_0 removed [ 1574.169097][T17716] vlan2: entered allmulticast mode [ 1575.897023][ T30] audit: type=1804 audit(1762403535.363:803): pid=17739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3093" name="/newroot/271/file0" dev="tmpfs" ino=1421 res=1 errno=0 [ 1576.110602][T17553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.117821][T17553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.129244][T17553] bridge_slave_0: entered allmulticast mode [ 1576.154776][T17553] bridge_slave_0: entered promiscuous mode [ 1576.182344][T17553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.219744][T17553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.237324][T17553] bridge_slave_1: entered allmulticast mode [ 1576.257754][T17553] bridge_slave_1: entered promiscuous mode [ 1576.332226][T17747] siw: device registration error -23 [ 1576.649272][ T5923] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1577.409615][T17553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1577.432824][T17553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1577.668633][ T5923] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1577.720627][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.754532][ T5923] usb 6-1: Product: syz [ 1577.787623][ T5923] usb 6-1: Manufacturer: syz [ 1577.803843][ T5923] usb 6-1: SerialNumber: syz [ 1577.834781][ T5923] usb 6-1: config 0 descriptor?? [ 1577.847035][ T5923] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1577.861867][T17553] team0: Port device team_slave_0 added [ 1577.873452][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1577.888525][T17553] team0: Port device team_slave_1 added [ 1578.002870][ T5923] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1578.459405][T17763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.468121][T17763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.004002][ T5923] usb 6-1: media controller created [ 1579.305036][T12480] IPVS: stop unused estimator thread 0... [ 1579.314733][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1579.394870][T17553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.429584][T17553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.504047][T17553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.563580][T17553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.578191][ T5923] DVB: Unable to find symbol mt352_attach() [ 1579.594663][T17553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.777648][T17553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1580.472303][ T5923] DVB: Unable to find symbol nxt6000_attach() [ 1580.480648][ T5923] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1580.497548][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input22 [ 1580.512469][ T5923] dvb-usb: schedule remote query interval to 1000 msecs. [ 1580.525479][ T5923] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1580.537037][ T5923] dvb-usb: bulk message failed: -22 (7/0) [ 1580.547654][ T5923] dvb-usb: bulk message failed: -22 (7/0) [ 1580.573049][ T5923] usb 6-1: USB disconnect, device number 7 [ 1580.735450][T17553] hsr_slave_0: entered promiscuous mode [ 1580.943895][T17553] hsr_slave_1: entered promiscuous mode [ 1580.964722][T17553] debugfs: 'hsr0' already exists in 'hsr' [ 1580.965167][ T5923] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1580.987498][T17553] Cannot create hsr debugfs directory [ 1581.228564][T12480] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.593216][T17788] Cannot find set identified by id 0 to match [ 1581.973201][T12480] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.213509][T12480] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.176247][T12480] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.352683][T17815] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3113'. [ 1585.138411][T12480] bridge_slave_1: left allmulticast mode [ 1585.175179][T17825] xt_connbytes: Forcing CT accounting to be enabled [ 1585.182111][T17825] Cannot find set identified by id 0 to match [ 1585.435607][T12480] bridge_slave_1: left promiscuous mode [ 1585.462579][T12480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.521064][T12480] bridge_slave_0: left allmulticast mode [ 1585.541508][T12480] bridge_slave_0: left promiscuous mode [ 1585.559667][T12480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.931706][T17830] xt_NFQUEUE: number of total queues is 0 [ 1586.835518][T17845] siw: device registration error -23 [ 1588.579176][T12480] bond0 (unregistering): left promiscuous mode [ 1588.592919][T12480] bond_slave_0: left promiscuous mode [ 1588.604502][T12480] bond_slave_1: left promiscuous mode [ 1588.622822][T12480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1588.649147][T12480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1588.673735][T12480] bond0 (unregistering): Released all slaves [ 1590.072404][T12480] bond1 (unregistering): (slave veth3): Releasing active interface [ 1590.091377][T12480] bond1 (unregistering): Released all slaves [ 1592.038870][T12480] bond2 (unregistering): Released all slaves [ 1592.392636][T17836] vlan2: entered allmulticast mode [ 1592.397799][T17836] veth1: entered allmulticast mode [ 1592.433749][T12480] IPVS: stopping master sync thread 12332 ... [ 1593.223891][T17873] x_tables: ip_tables: NOTRACK target: only valid in raw table, not [ 1593.223891][T17873] [ 1594.236633][ T5148] Bluetooth: hci3: command 0x0406 tx timeout [ 1596.242774][T12480] team0: left promiscuous mode [ 1596.247891][T12480] team_slave_0: left promiscuous mode [ 1596.315337][T12480] team_slave_1: left promiscuous mode [ 1596.376554][T12480] hsr_slave_0: left promiscuous mode [ 1596.398945][T12480] hsr_slave_1: left promiscuous mode [ 1596.405257][T12480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1596.428961][T12480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1596.509969][T12480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1596.517673][T12480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1596.578676][T12480] veth1_macvtap: left promiscuous mode [ 1596.584455][T12480] veth0_macvtap: left promiscuous mode [ 1600.598259][T12480] team0 (unregistering): Port device team_slave_1 removed [ 1600.609547][T17920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3142'. [ 1600.663411][T12480] team0 (unregistering): Port device team_slave_0 removed [ 1600.794234][T17925] siw: device registration error -23 [ 1601.418325][T16310] infiniband syz1: ib_query_port failed (-19) [ 1601.437393][T17553] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1601.651095][T17553] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1601.715656][T17553] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1601.775288][T17553] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1602.066071][T17939] Cannot find set identified by id 0 to match [ 1602.515816][T12480] IPVS: stop unused estimator thread 0... [ 1603.784010][T17553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1603.878769][T17553] 8021q: adding VLAN 0 to HW filter on device team0 [ 1603.957612][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.964875][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1605.105357][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.112756][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1606.933892][T17553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1610.257720][T17553] veth0_vlan: entered promiscuous mode [ 1610.307676][T17553] veth1_vlan: entered promiscuous mode [ 1610.427900][T17553] veth0_macvtap: entered promiscuous mode [ 1610.494506][T17553] veth1_macvtap: entered promiscuous mode [ 1610.568182][T17553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1610.618477][T17553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1610.676204][T12480] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.718665][T12480] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.808976][T12480] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.858278][T12480] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.091105][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.107671][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.209164][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.218272][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.650186][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.656682][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.965677][T18016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3158'. [ 1614.372148][T18019] vlan2: entered allmulticast mode [ 1615.194127][T18044] binder: 18035:18044 ioctl c0306201 200000000080 returned -14 [ 1615.669385][T18051] xt_connbytes: Forcing CT accounting to be enabled [ 1615.679259][T18051] Cannot find set identified by id 0 to match [ 1617.891182][ T5923] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1618.260271][ T5923] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1618.313463][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.354933][ T5923] usb 5-1: Product: syz [ 1618.368986][ T5923] usb 5-1: Manufacturer: syz [ 1618.379190][ T5923] usb 5-1: SerialNumber: syz [ 1618.399904][ T5923] usb 5-1: config 0 descriptor?? [ 1618.422263][ T5923] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1618.492922][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1618.532103][ T5923] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1618.555191][ T5923] usb 5-1: media controller created [ 1618.762935][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1619.563135][T18062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.571924][T18062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.827789][ T5923] DVB: Unable to find symbol mt352_attach() [ 1620.099250][ T5923] DVB: Unable to find symbol nxt6000_attach() [ 1620.106233][ T5923] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1620.122553][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 1620.920514][ T5923] dvb-usb: schedule remote query interval to 1000 msecs. [ 1621.014554][ T5923] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1621.945550][ T5923] dvb-usb: bulk message failed: -22 (7/0) [ 1621.979682][ T5923] dvb-usb: bulk message failed: -22 (7/0) [ 1622.045820][ T5923] usb 5-1: USB disconnect, device number 32 [ 1623.939473][ T5923] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1630.167264][T18123] xt_connbytes: Forcing CT accounting to be enabled [ 1630.174225][T18123] set match dimension is over the limit! [ 1633.093380][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1633.107577][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1633.121107][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1633.163582][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1633.171568][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1635.201969][ T5148] Bluetooth: hci0: command 0x0406 tx timeout [ 1635.405752][ T5148] Bluetooth: hci1: command tx timeout [ 1636.001951][T12660] syz_tun (unregistering): left allmulticast mode [ 1637.785137][T18138] chnl_net:caif_netlink_parms(): no params data found [ 1637.794090][ T5842] Bluetooth: hci1: command tx timeout [ 1637.959092][ T30] audit: type=1804 audit(1762403597.403:804): pid=18176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3200" name="/newroot/44/file0" dev="tmpfs" ino=245 res=1 errno=0 [ 1637.981395][T18173] hub 1-0:1.0: USB hub found [ 1638.001976][T18173] hub 1-0:1.0: 1 port detected [ 1639.907358][ T5842] Bluetooth: hci1: command tx timeout [ 1640.133470][T18138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.162386][T18138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.181341][T18138] bridge_slave_0: entered allmulticast mode [ 1640.219661][T18138] bridge_slave_0: entered promiscuous mode [ 1640.230187][T18138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.237476][T18138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.257260][T18138] bridge_slave_1: entered allmulticast mode [ 1640.272988][T18138] bridge_slave_1: entered promiscuous mode [ 1641.265056][T18138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1641.293781][T18203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3209'. [ 1641.310476][T18138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1641.388989][ T6037] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1641.691388][ T6037] usb 1-1: Using ep0 maxpacket: 32 [ 1642.019024][ T5842] Bluetooth: hci1: command tx timeout [ 1642.274987][T18138] team0: Port device team_slave_0 added [ 1642.281092][ T6037] usb 1-1: config index 0 descriptor too short (expected 48631, got 18) [ 1642.313853][T18138] team0: Port device team_slave_1 added [ 1642.335841][ T6037] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1642.369603][ T6037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.390194][ T6037] usb 1-1: config 0 descriptor?? [ 1642.415378][T18138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1642.424287][T18138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.469409][T18138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1642.493164][T18138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1642.505938][T18138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.536986][T18138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.096937][T18138] hsr_slave_0: entered promiscuous mode [ 1643.285307][T18138] hsr_slave_1: entered promiscuous mode [ 1644.205127][ T6037] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1644.212302][T18138] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1644.247963][ T6037] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1644.265656][T18138] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1644.279400][ T6037] dib0700: firmware download failed at 7 with -22 [ 1644.296852][T18138] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1644.302683][ T6037] usb 1-1: USB disconnect, device number 28 [ 1644.335867][T18138] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1644.629703][T18138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1644.668661][T18138] 8021q: adding VLAN 0 to HW filter on device team0 [ 1644.683258][T17245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.690465][T17245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1644.992229][T13963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.999467][T13963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1648.828583][T18262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3223'. [ 1649.364752][T18262] vlan2: entered allmulticast mode [ 1649.652605][T18138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1652.955147][T18138] veth0_vlan: entered promiscuous mode [ 1652.975269][T18138] veth1_vlan: entered promiscuous mode [ 1653.066016][T18138] veth0_macvtap: entered promiscuous mode [ 1653.087120][T18138] veth1_macvtap: entered promiscuous mode [ 1653.168542][T18138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1653.263057][T18138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1653.335489][T17245] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.365221][T17245] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.425555][T17245] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.458455][T17015] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.763241][T17245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.812047][T17245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.871505][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.939388][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.505418][T18325] xt_cgroup: invalid path, errno=-2 [ 1660.324222][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1660.335105][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1660.343255][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1660.351625][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1660.359423][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1660.501388][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.885894][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.039965][ T5833] syz_tun (unregistering): left allmulticast mode [ 1662.310851][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.388983][ T5148] Bluetooth: hci5: command tx timeout [ 1662.633440][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.472306][ T5148] Bluetooth: hci5: command tx timeout [ 1664.480176][ T36] bridge_slave_1: left allmulticast mode [ 1664.500881][ T36] bridge_slave_1: left promiscuous mode [ 1664.506762][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.082242][ T36] bridge_slave_0: left allmulticast mode [ 1665.087938][ T36] bridge_slave_0: left promiscuous mode [ 1665.089053][ T30] audit: type=1804 audit(1762403625.213:805): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3247" name="/newroot/69/file0" dev="tmpfs" ino=377 res=1 errno=0 [ 1665.109124][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.560065][ T5148] Bluetooth: hci5: command tx timeout [ 1668.628928][ T5148] Bluetooth: hci5: command tx timeout [ 1669.673829][T18412] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3256'. [ 1670.580601][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1670.659054][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1670.720473][ T36] bond0 (unregistering): Released all slaves [ 1672.382312][ T36] bond1 (unregistering): (slave veth3): Releasing active interface [ 1672.591627][ T36] bond1 (unregistering): Released all slaves [ 1673.962921][ T36] bond2 (unregistering): (slave veth5): Releasing active interface [ 1673.975263][ T36] bond2 (unregistering): Released all slaves [ 1674.000671][T18398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3252'. [ 1674.043699][T18398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3252'. [ 1674.095259][T18350] chnl_net:caif_netlink_parms(): no params data found [ 1674.111855][T18429] Process accounting resumed [ 1674.183402][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.191749][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.594826][T18439] fuse: Bad value for 'group_id' [ 1675.229929][T18439] fuse: Bad value for 'group_id' [ 1675.415326][ T36] IPVS: stopping master sync thread 13377 ... [ 1677.295733][T18350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.388303][T18350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.442631][T18350] bridge_slave_0: entered allmulticast mode [ 1677.457733][T18350] bridge_slave_0: entered promiscuous mode [ 1678.362692][T18350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.370509][T18350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.377927][T18350] bridge_slave_1: entered allmulticast mode [ 1678.398773][T18350] bridge_slave_1: entered promiscuous mode [ 1678.874810][T18350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1679.006163][T18350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1679.211385][ T36] hsr_slave_0: left promiscuous mode [ 1679.228366][ T36] hsr_slave_1: left promiscuous mode [ 1679.248496][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1679.256572][T18482] cgroup: release_agent respecified [ 1679.307415][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1679.372574][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1679.390413][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1679.843850][ T36] veth1_macvtap: left promiscuous mode [ 1679.859276][ T36] veth0_macvtap: left promiscuous mode [ 1679.865113][ T36] veth1_vlan: left promiscuous mode [ 1679.889713][ T36] veth0_vlan: left promiscuous mode [ 1681.311705][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 1684.474612][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3279'. [ 1686.108200][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1686.174693][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1687.813681][T18350] team0: Port device team_slave_0 added [ 1687.841012][T18480] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1687.921827][T18350] team0: Port device team_slave_1 added [ 1687.971216][T18480] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1688.012423][T18480] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1688.135604][T18350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.205102][T18350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.542540][T18350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1689.603318][T18350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1689.620089][T18350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.895214][T18350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1690.123069][ T30] audit: type=1326 audit(1762403650.223:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.4.3288" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19bb98f6c9 code=0x0 [ 1691.205169][T18350] hsr_slave_0: entered promiscuous mode [ 1691.212357][T18350] hsr_slave_1: entered promiscuous mode [ 1691.231707][T18350] debugfs: 'hsr0' already exists in 'hsr' [ 1691.237467][T18350] Cannot create hsr debugfs directory [ 1691.813399][ T36] IPVS: stop unused estimator thread 0... [ 1695.085855][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1696.512673][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.981502][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.129913][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.522132][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.997692][ T36] bridge_slave_1: left allmulticast mode [ 1703.004057][ T36] bridge_slave_1: left promiscuous mode [ 1703.013770][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.054200][ T36] bridge_slave_0: left allmulticast mode [ 1703.080456][ T36] bridge_slave_0: left promiscuous mode [ 1703.100078][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.139961][ T36] bond0 (unregistering): left promiscuous mode [ 1706.146192][ T36] bond_slave_0: left promiscuous mode [ 1707.125741][ T36] bond_slave_1: left promiscuous mode [ 1707.133494][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1707.149594][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1707.311440][ T36] bond0 (unregistering): Released all slaves [ 1707.516022][ T36] bond1 (unregistering): (slave veth3): Releasing active interface [ 1707.533590][ T36] bond1 (unregistering): Released all slaves [ 1707.866243][ T36] bond2 (unregistering): (slave veth5): Releasing active interface [ 1707.891803][ T36] bond2 (unregistering): Released all slaves [ 1708.685258][ T36] bond3 (unregistering): (slave veth7): Releasing active interface [ 1708.738438][T18657] 9p: Bad value for 'wfdno' [ 1708.768485][ T36] bond3 (unregistering): Released all slaves [ 1709.280927][ T36] bond4 (unregistering): (slave veth9): Releasing active interface [ 1709.309619][ T36] bond4 (unregistering): Released all slaves [ 1711.819624][ T36] bond5 (unregistering): (slave veth11): Releasing active interface [ 1711.841108][ T36] bond5 (unregistering): Released all slaves [ 1712.012679][T18686] use of bytesused == 0 is deprecated and will be removed in the future, [ 1712.021604][T18686] use the actual size instead. [ 1713.309064][T18695] Cannot find set identified by id 0 to match [ 1713.653388][ T36] bond6 (unregistering): (slave veth13): Releasing active interface [ 1713.680711][ T36] bond6 (unregistering): Released all slaves [ 1713.902944][ T36] : left promiscuous mode [ 1714.164754][ T36] IPVS: stopping master sync thread 12139 ... [ 1714.733762][T18704] xt_connbytes: Forcing CT accounting to be enabled [ 1714.740640][T18704] Cannot find set identified by id 0 to match [ 1714.875672][T18707] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3332'. [ 1715.876079][ T36] team0: left promiscuous mode [ 1715.881643][ T36] team_slave_0: left promiscuous mode [ 1715.894469][ T36] team_slave_1: left promiscuous mode [ 1715.944662][ T36] hsr_slave_0: left promiscuous mode [ 1715.959580][ T36] hsr_slave_1: left promiscuous mode [ 1715.980752][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1716.004426][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1716.026609][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1716.042377][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1716.248730][ T36] veth1_macvtap: left promiscuous mode [ 1716.255080][ T36] veth0_macvtap: left promiscuous mode [ 1716.261735][ T36] veth1_vlan: left promiscuous mode [ 1716.267165][ T36] veth0_vlan: left promiscuous mode [ 1720.848954][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1720.907999][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1720.917989][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1720.925955][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1720.936939][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1720.946721][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1721.087743][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1723.040543][ T5148] Bluetooth: hci4: command tx timeout [ 1723.860442][T18762] mkiss: ax0: crc mode is auto. [ 1724.430281][ T36] IPVS: stop unused estimator thread 0... [ 1724.439529][T18742] chnl_net:caif_netlink_parms(): no params data found [ 1724.797888][T18773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3347'. [ 1724.876674][T18774] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1724.876674][T18774] program syz.3.3347 not setting count and/or reply_len properly [ 1725.109734][ T5148] Bluetooth: hci4: command tx timeout [ 1725.219690][T18777] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3348'. [ 1726.690613][ T30] audit: type=1326 audit(1762403686.813:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18780 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24938f6c9 code=0x7ffc0000 [ 1726.970406][T18790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3349'. [ 1726.980253][T18790] net_ratelimit: 30 callbacks suppressed [ 1726.980274][T18790] openvswitch: netlink: Flow key attr not present in new flow. [ 1727.088395][T18742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.129040][ T30] audit: type=1326 audit(1762403686.813:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18780 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24938f6c9 code=0x7ffc0000 [ 1727.179177][T18742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.187905][T18742] bridge_slave_0: entered allmulticast mode [ 1727.200258][ T5148] Bluetooth: hci4: command tx timeout [ 1727.208584][ T30] audit: type=1326 audit(1762403686.813:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18780 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd24938f6c9 code=0x7ffc0000 [ 1727.243824][ T30] audit: type=1326 audit(1762403686.813:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18780 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24938f6c9 code=0x7ffc0000 [ 1727.319035][T18742] bridge_slave_0: entered promiscuous mode [ 1727.350120][T18742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.369586][T18742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.398901][ T30] audit: type=1326 audit(1762403686.813:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18780 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24938f6c9 code=0x7ffc0000 [ 1727.449140][T18742] bridge_slave_1: entered allmulticast mode [ 1727.457251][T18742] bridge_slave_1: entered promiscuous mode [ 1727.631306][T18742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1727.773648][T18742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1727.778844][ T30] audit: type=1326 audit(1762403686.813:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18780 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fd24938f6c9 code=0x7ffc0000 [ 1727.810929][ T30] audit: type=1326 audit(1762403686.813:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18780 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24938f6c9 code=0x7ffc0000 [ 1727.838838][ T30] audit: type=1326 audit(1762403686.813:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18780 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24938f6c9 code=0x7ffc0000 [ 1727.861974][ T30] audit: type=1326 audit(1762403686.813:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18780 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fd24938f6c9 code=0x7ffc0000 [ 1727.900459][ T30] audit: type=1326 audit(1762403686.943:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18780 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24938f6c9 code=0x7ffc0000 [ 1728.029182][T17066] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1728.062212][T18742] team0: Port device team_slave_0 added [ 1728.070815][T18742] team0: Port device team_slave_1 added [ 1728.151127][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3353'. [ 1728.199023][T17066] usb 7-1: Using ep0 maxpacket: 8 [ 1728.216512][T18742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1728.234422][T18742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1728.239836][T17066] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1728.271844][T17066] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.281763][T17066] usb 7-1: Product: syz [ 1728.286104][T17066] usb 7-1: Manufacturer: syz [ 1728.292238][T17066] usb 7-1: SerialNumber: syz [ 1728.300223][T17066] usb 7-1: config 0 descriptor?? [ 1728.305722][T18742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1728.322551][T17066] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1728.365194][T18742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1728.373201][T18742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1728.443346][T18742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1729.448943][ T5148] Bluetooth: hci4: command tx timeout [ 1730.001512][T18742] hsr_slave_0: entered promiscuous mode [ 1730.008624][T18742] hsr_slave_1: entered promiscuous mode [ 1730.091132][T18742] debugfs: 'hsr0' already exists in 'hsr' [ 1730.096904][T18742] Cannot create hsr debugfs directory [ 1730.363466][ T36] bridge_slave_1: left allmulticast mode [ 1730.377664][ T36] bridge_slave_1: left promiscuous mode [ 1730.384081][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.400007][ T36] bridge_slave_0: left allmulticast mode [ 1731.443526][ T36] bridge_slave_0: left promiscuous mode [ 1731.463784][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.617918][T18827] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3359'. [ 1731.848586][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1732.216953][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1732.253236][ T36] bond0 (unregistering): Released all slaves [ 1733.240292][T17066] gspca_sonixj: reg_w1 err -110 [ 1733.245289][T17066] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 1733.580399][T17066] usb 7-1: USB disconnect, device number 2 [ 1733.943973][T18819] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1733.991291][ T36] hsr_slave_0: left promiscuous mode [ 1734.030213][ T36] hsr_slave_1: left promiscuous mode [ 1734.082925][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1734.158624][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1735.343518][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1735.415617][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1735.516134][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.523349][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1737.558870][T13004] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1737.720861][T13004] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1737.739008][T13004] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1737.748968][T13004] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1737.769182][T13004] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1737.777398][T13004] usb 4-1: Product: syz [ 1737.788859][T13004] usb 4-1: Manufacturer: syz [ 1737.793501][T13004] usb 4-1: SerialNumber: syz [ 1737.874095][T13004] usb 4-1: config 0 descriptor?? [ 1737.884651][T13004] usb 4-1: selecting invalid altsetting 0 [ 1738.488570][T18742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1738.501432][T18742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1738.520928][T18742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1738.647563][T18742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1738.998174][T18742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1739.099427][T18879] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1739.268585][T18742] 8021q: adding VLAN 0 to HW filter on device team0 [ 1740.292711][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1740.299985][ T8377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1740.324227][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1740.331476][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1742.480293][T18893] ªªªªª2: renamed from veth0_vlan (while UP) [ 1742.560590][T18894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3376'. [ 1742.611014][T18895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3376'. [ 1743.128918][T18902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.137818][T18902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.531573][T18909] siw: device registration error -23 [ 1744.459365][ T797] usb 4-1: USB disconnect, device number 28 [ 1744.499854][T18915] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3379'. [ 1744.526340][T18742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1744.548908][ T5148] Bluetooth: hci4: command tx timeout [ 1744.697364][T18742] veth0_vlan: entered promiscuous mode [ 1744.977369][T18742] veth1_vlan: entered promiscuous mode [ 1745.186796][T18742] veth0_macvtap: entered promiscuous mode [ 1745.196704][T18742] veth1_macvtap: entered promiscuous mode [ 1746.061577][T18742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1746.076786][T18742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1746.122031][T17027] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.205916][T17027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.238817][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1747.238839][ T30] audit: type=1804 audit(1762403707.303:832): pid=18937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3375" name="/newroot/86/file0" dev="tmpfs" ino=465 res=1 errno=0 [ 1747.528900][T17027] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.537667][T17027] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.990169][T18943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'. [ 1748.146401][T12481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1748.190615][T12481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1748.953351][T17245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1748.965820][T17245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.457960][T18998] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1758.139954][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 1759.269330][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3403'. [ 1759.291368][T19015] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3404'. [ 1762.592537][T19033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3408'. [ 1762.603721][T19033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1762.781808][T19033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1763.052326][ T6037] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1763.073461][T19039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3411'. [ 1763.648834][ T6037] usb 2-1: Using ep0 maxpacket: 32 [ 1763.656619][ T6037] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1763.673145][ T6037] usb 2-1: config 0 has no interface number 0 [ 1763.686349][ T6037] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1763.713179][ T6037] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1763.728048][ T6037] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1763.762189][ T6037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.777333][ T6037] usb 2-1: Product: syz [ 1763.804529][ T6037] usb 2-1: Manufacturer: syz [ 1763.955506][ T6037] usb 2-1: SerialNumber: syz [ 1763.962642][ T6037] usb 2-1: config 0 descriptor?? [ 1763.968612][T19034] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1764.818933][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1764.981563][ T10] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1765.007539][ T6037] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1765.018821][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.034583][ T6037] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 1765.056630][ T6037] usb 2-1: USB disconnect, device number 40 [ 1765.105046][ T10] usb 7-1: config 0 descriptor?? [ 1766.113408][ T10] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1766.676619][T19061] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 1767.107196][ T10] gspca_sunplus: reg_w_riv err -71 [ 1767.135600][T19065] loop3: detected capacity change from 0 to 32768 [ 1767.156752][ T10] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1767.159397][T19065] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1767.167732][ T10] usb 7-1: USB disconnect, device number 3 [ 1767.173086][T19065] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1767.194962][T19065] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1767.233954][T19065] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1767.420759][T19066] vlan2: entered allmulticast mode [ 1767.452473][T19066] veth1: entered allmulticast mode [ 1768.008395][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3424'. [ 1768.018296][T19083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3424'. [ 1768.028319][T19083] netlink: 'syz.4.3424': attribute type 18 has an invalid length. [ 1768.864898][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3422'. [ 1769.034365][T19087] faux_driver vkms: [drm] Unknown color mode 561516; guessing buffer size. [ 1769.079252][T19089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1771.459242][T19111] 9p: Bad value for 'rfdno' [ 1773.612380][T19125] fuse: Bad value for 'fd' [ 1775.567422][T19133] mkiss: ax0: crc mode is auto. [ 1776.339374][T19145] 9p: Bad value for 'rfdno' [ 1776.848985][T19151] Bluetooth: MGMT ver 1.23 [ 1777.188994][T19151] loop3: detected capacity change from 0 to 32768 [ 1777.202845][T19155] siw: device registration error -23 [ 1777.781291][T19151] jfs_mount: Failed to read FILESYSTEM_I [ 1777.787736][T19151] Mount JFS Failure: -5 [ 1787.801424][T19239] loop1: detected capacity change from 0 to 164 [ 1788.899246][T19246] overlayfs: missing 'lowerdir' [ 1789.411008][T19262] xt_connbytes: Forcing CT accounting to be enabled [ 1789.418306][T19262] Cannot find set identified by id 0 to match [ 1789.518244][T19265] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3474'. [ 1795.027203][T19305] pim6reg: entered allmulticast mode [ 1796.970481][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.977084][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.652707][T19328] siw: device registration error -23 [ 1798.441565][T19329] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1798.754536][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1799.598919][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1800.099118][ T10] usb 4-1: no configurations [ 1800.111671][ T10] usb 4-1: can't read configurations, error -22 [ 1800.288861][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1801.259654][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1801.266527][ T10] usb 4-1: no configurations [ 1801.271616][ T10] usb 4-1: can't read configurations, error -22 [ 1801.285503][ T10] usb usb4-port1: attempt power cycle [ 1801.377196][T19346] Cannot find set identified by id 0 to match [ 1801.419256][T19345] netlink: 'syz.0.3499': attribute type 1 has an invalid length. [ 1801.595264][T19345] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1802.692277][T19348] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1802.822598][T19349] vlan2: entered allmulticast mode [ 1802.849814][T19349] veth1: entered promiscuous mode [ 1802.926544][T19349] veth1: left promiscuous mode [ 1803.056923][T19349] bond1: (slave vlan2): making interface the new active one [ 1803.067114][T19349] veth1: entered promiscuous mode [ 1803.116473][T19349] vlan2: entered promiscuous mode [ 1803.148853][T19349] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1803.599782][T19366] loop1: detected capacity change from 0 to 32768 [ 1803.616605][T19367] 9p: Bad value for 'wfdno' [ 1803.626715][T19366] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1803.634967][T19366] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1803.653283][T19366] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1803.756574][T19366] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1806.785037][T13004] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1806.958859][T13004] usb 5-1: Using ep0 maxpacket: 32 [ 1806.964923][T13004] usb 5-1: no configurations [ 1806.971995][T13004] usb 5-1: can't read configurations, error -22 [ 1807.118854][T13004] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1807.497165][T19401] loop1: detected capacity change from 0 to 32768 [ 1807.517309][T19401] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1807.525616][T19401] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1807.538879][T13004] usb 5-1: Using ep0 maxpacket: 32 [ 1807.545994][T19401] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1807.577105][T13004] usb 5-1: no configurations [ 1807.598306][T19401] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1807.660377][T13004] usb 5-1: can't read configurations, error -22 [ 1807.703586][T13004] usb usb5-port1: attempt power cycle [ 1807.812846][T19405] loop3: detected capacity change from 0 to 128 [ 1807.865250][T19405] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1807.914422][T19405] hpfs: filesystem error: improperly stopped [ 1807.940275][T19405] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1807.958844][T19405] hpfs: You really don't want any checks? You are crazy... [ 1807.966611][T19405] hpfs: hpfs_map_sector(): read error [ 1808.001526][T19405] hpfs: code page support is disabled [ 1808.018848][T19405] hpfs: hpfs_map_4sectors(): unaligned read [ 1808.025038][T19405] hpfs: hpfs_map_4sectors(): unaligned read [ 1808.048889][T19405] hpfs: filesystem error: unable to find root dir [ 1808.098985][T13004] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1808.169848][T13004] usb 5-1: Using ep0 maxpacket: 32 [ 1808.180561][T13004] usb 5-1: no configurations [ 1808.198810][T13004] usb 5-1: can't read configurations, error -22 [ 1808.359810][T13004] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1808.399965][T13004] usb 5-1: Using ep0 maxpacket: 32 [ 1808.415313][T13004] usb 5-1: no configurations [ 1808.436351][T13004] usb 5-1: can't read configurations, error -22 [ 1808.609245][T13004] usb usb5-port1: unable to enumerate USB device [ 1811.214768][T19426] fuse: Invalid rootmode [ 1815.979040][T17066] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1817.300184][T17066] usb 5-1: Using ep0 maxpacket: 32 [ 1817.314558][T17066] usb 5-1: config index 0 descriptor too short (expected 48631, got 18) [ 1817.360654][T17066] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.408837][T17066] usb 5-1: config 0 has no interfaces? [ 1817.414372][T17066] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1817.444344][T17066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.482613][T17066] usb 5-1: config 0 descriptor?? [ 1817.518174][T19477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1817.524581][T19477] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1817.537536][T19477] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1817.543776][T19477] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1817.550945][T19477] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1817.556948][T19477] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1817.563951][T19477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1817.570271][T19477] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1817.577066][T19477] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1817.583122][T19477] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1817.614440][T19477] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1817.624413][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3536'. [ 1817.647668][T19480] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3536'. [ 1817.720723][T19482] fuse: Bad value for 'rootmode' [ 1819.539102][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 1819.588975][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 1819.595129][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 1819.601255][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 1819.607339][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 1819.951582][ T797] usb 5-1: USB disconnect, device number 37 [ 1821.679790][T19513] siw: device registration error -23 [ 1821.724719][ T5148] Bluetooth: hci3: command 0x0406 tx timeout [ 1821.731084][ T5148] Bluetooth: hci0: command 0x0406 tx timeout [ 1821.737303][ T5148] Bluetooth: hci2: command 0x0406 tx timeout [ 1821.743723][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 1821.752292][ T5148] Bluetooth: hci4: command 0x0c1a tx timeout [ 1823.337026][T19530] loop1: detected capacity change from 0 to 32768 [ 1823.363778][T17027] vlan2: left promiscuous mode [ 1823.404872][T19530] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1823.488885][ T797] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1823.616939][T19530] XFS (loop1): Ending clean mount [ 1823.829096][T16236] Bluetooth: hci4: command 0x0c1a tx timeout [ 1823.908988][T16236] Bluetooth: hci2: command 0x0406 tx timeout [ 1824.349170][ T797] usb 4-1: Using ep0 maxpacket: 32 [ 1824.561383][ T797] usb 4-1: config index 0 descriptor too short (expected 48631, got 18) [ 1824.883026][T18742] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1824.892049][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.946837][ T797] usb 4-1: config 0 has no interfaces? [ 1824.978501][ T797] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1825.308899][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.856447][ T797] usb 4-1: config 0 descriptor?? [ 1826.888192][ T797] usb 4-1: can't set config #0, error -71 [ 1826.930473][ T797] usb 4-1: USB disconnect, device number 32 [ 1827.207015][T19565] siw: device registration error -23 [ 1828.437458][T19575] loop1: detected capacity change from 0 to 32768 [ 1828.919168][T19575] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32 [ 1828.934512][T19575] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1828.944909][T19575] OCFS2: File system is now read-only. [ 1828.950781][T19575] (syz.1.3563,19575,0):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 1828.960409][T19575] (syz.1.3563,19575,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 1828.973001][T19575] (syz.1.3563,19575,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 1828.984062][T19575] (syz.1.3563,19575,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 1828.993130][T19575] (syz.1.3563,19575,0):ocfs2_mount_volume:1758 ERROR: status = -30 [ 1829.023568][T19575] (syz.1.3563,19575,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 1830.624544][T19594] sctp: [Deprecated]: syz.1.3569 (pid 19594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1830.624544][T19594] Use struct sctp_sack_info instead [ 1832.257535][ T6037] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1832.363503][T19609] siw: device registration error -23 [ 1832.458819][ T6037] usb 4-1: Using ep0 maxpacket: 32 [ 1832.873143][ T6037] usb 4-1: config index 0 descriptor too short (expected 48631, got 18) [ 1832.917125][ T6037] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1832.980599][ T6037] usb 4-1: config 0 has no interfaces? [ 1833.009524][ T6037] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1833.026924][ T6037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.058027][ T6037] usb 4-1: config 0 descriptor?? [ 1834.456274][T19615] loop1: detected capacity change from 0 to 1024 [ 1834.463877][T19615] EXT4-fs: Ignoring removed oldalloc option [ 1834.470987][T19615] EXT4-fs: Ignoring removed bh option [ 1834.525218][T19615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1834.793175][T19626] loop6: detected capacity change from 0 to 1024 [ 1835.638888][T17066] usb 4-1: USB disconnect, device number 33 [ 1835.685230][T18742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1835.792481][T19626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1837.707999][T18138] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 1838.127229][T19653] xt_connbytes: Forcing CT accounting to be enabled [ 1838.134355][T19653] Cannot find set identified by id 0 to match [ 1838.199923][T18138] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 1838.732118][T19661] siw: device registration error -23 [ 1840.150447][T18138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1840.977871][T19677] 9p: Bad value for 'wfdno' [ 1843.284500][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1843.305213][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1843.317739][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1843.329890][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1843.351292][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1844.120860][T19701] siw: device registration error -23 [ 1844.874197][T19708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3603'. [ 1845.503775][ T5148] Bluetooth: hci1: command tx timeout [ 1845.934789][T19718] netlink: 'syz.0.3607': attribute type 1 has an invalid length. [ 1845.951606][ T5148] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 1846.029987][T19718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1846.044987][T19727] loop3: detected capacity change from 0 to 64 [ 1846.103873][T19725] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1847.048449][T19743] siw: device registration error -23 [ 1847.694542][ T5148] Bluetooth: hci1: command tx timeout [ 1847.787234][T19744] Cannot find set identified by id 0 to match [ 1847.862676][T19691] chnl_net:caif_netlink_parms(): no params data found [ 1847.981461][T19751] 9p: Bad value for 'wfdno' [ 1848.232248][T19764] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3619'. [ 1848.287564][T19766] fuse: Unknown parameter 'user_id00000000000000000000' [ 1848.312540][T19691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.329130][T19691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.339548][T19691] bridge_slave_0: entered allmulticast mode [ 1848.354907][T19691] bridge_slave_0: entered promiscuous mode [ 1848.897814][T19691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.905534][T19691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.949559][T19691] bridge_slave_1: entered allmulticast mode [ 1848.960941][T19691] bridge_slave_1: entered promiscuous mode [ 1849.629235][T19691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1849.749537][ T5148] Bluetooth: hci1: command tx timeout [ 1849.772578][T19691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1849.982156][T19691] team0: Port device team_slave_0 added [ 1850.186895][T19780] netlink: 'syz.4.3625': attribute type 1 has an invalid length. [ 1850.212212][T19691] team0: Port device team_slave_1 added [ 1850.334432][T19780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1850.445946][T19781] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1850.483689][T19783] vlan2: entered allmulticast mode [ 1850.488981][T19783] veth1: entered allmulticast mode [ 1850.780983][T19783] veth1: entered promiscuous mode [ 1850.789242][T19783] veth1: left promiscuous mode [ 1850.827849][T19783] bond1: (slave vlan2): making interface the new active one [ 1850.851602][T19783] veth1: entered promiscuous mode [ 1850.876582][T19783] vlan2: entered promiscuous mode [ 1850.897035][T19783] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1850.970582][T19691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1850.978396][T19691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1851.013470][T19794] Cannot find set identified by id 0 to match [ 1851.022279][T19691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1851.039695][T19691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1851.047811][T19691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1851.074557][T19691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1851.083445][ C0] ------------[ cut here ]------------ [ 1851.091082][ C0] WARNING: ./include/linux/ns_common.h:255 at put_cred_rcu+0x2c5/0x340, CPU#0: swapper/0/0 [ 1851.101268][ C0] Modules linked in: [ 1851.105592][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1851.114679][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1851.124831][ C0] RIP: 0010:put_cred_rcu+0x2c5/0x340 [ 1851.130209][ C0] Code: 5c 41 5d 41 5e 41 5f 5d e9 08 c4 8d 00 e8 b3 7c 32 00 4c 89 e7 be 03 00 00 00 e8 66 72 ff 02 e9 b8 fe ff ff e8 9c 7c 32 00 90 <0f> 0b 90 eb 9f e8 91 7c 32 00 4c 89 ff be 03 00 00 00 e8 44 72 ff [ 1851.149902][ C0] RSP: 0018:ffffc90000007ba8 EFLAGS: 00010246 [ 1851.156046][ C0] RAX: ffffffff818ea124 RBX: ffff8880297a8ca0 RCX: ffffffff8dc93300 [ 1851.164141][ C0] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000 [ 1851.172235][ C0] RBP: 0000000000000004 R08: ffff888031d8deab R09: 1ffff110063b1bd5 [ 1851.180318][ C0] R10: dffffc0000000000 R11: ffffed10063b1bd6 R12: dffffc0000000000 [ 1851.188388][ C0] R13: ffff8880297a8c00 R14: ffff888031d8dd18 R15: ffff888031d8dea8 [ 1851.196441][ C0] FS: 0000000000000000(0000) GS:ffff888125ed5000(0000) knlGS:0000000000000000 [ 1851.205509][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1851.212147][ C0] CR2: 000020000019b000 CR3: 0000000059986000 CR4: 00000000003526f0 [ 1851.220207][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1851.228183][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1851.236244][ C0] Call Trace: [ 1851.239584][ C0] [ 1851.242450][ C0] ? __pfx_put_cred_rcu+0x10/0x10 [ 1851.247498][ C0] ? rcu_core+0xc37/0x1770 [ 1851.251988][ C0] rcu_core+0xcab/0x1770 [ 1851.256339][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1851.261097][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1851.266357][ C0] ? sched_clock_cpu+0x74/0x430 [ 1851.271268][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 1851.277528][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1851.282859][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1851.288754][ C0] handle_softirqs+0x286/0x870 [ 1851.293578][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1851.298385][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1851.303768][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1851.309006][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1851.313609][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1851.318861][ C0] irq_exit_rcu+0x9/0x30 [ 1851.323114][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1851.328781][ C0] [ 1851.331737][ C0] [ 1851.334713][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1851.340718][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1851.346449][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 ab 10 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1851.366100][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c2 [ 1851.372236][ C0] RAX: d714118065e8c400 RBX: ffffffff819729b7 RCX: d714118065e8c400 [ 1851.380265][ C0] RDX: 0000000000000001 RSI: ffffffff8d786026 RDI: ffffffff8bbf3260 [ 1851.388264][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b863319b R09: 1ffff110170c6633 [ 1851.396295][ C0] R10: dffffc0000000000 R11: ffffed10170c6634 R12: ffffffff8f7d8c70 [ 1851.404329][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92660 [ 1851.412328][ C0] ? do_idle+0x1e7/0x510 [ 1851.416646][ C0] default_idle+0x13/0x20 [ 1851.421038][ C0] default_idle_call+0x73/0xb0 [ 1851.425818][ C0] do_idle+0x1e7/0x510 [ 1851.429942][ C0] ? __pfx_do_idle+0x10/0x10 [ 1851.434568][ C0] cpu_startup_entry+0x44/0x60 [ 1851.439359][ C0] rest_init+0x2de/0x300 [ 1851.443607][ C0] start_kernel+0x3ac/0x410 [ 1851.448148][ C0] x86_64_start_reservations+0x24/0x30 [ 1851.453655][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1851.458827][ C0] common_startup_64+0x13e/0x147 [ 1851.463793][ C0] [ 1851.466842][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1851.474139][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1851.483070][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1851.493131][ C0] Call Trace: [ 1851.496408][ C0] [ 1851.499256][ C0] dump_stack_lvl+0x99/0x250 [ 1851.503852][ C0] ? __asan_memcpy+0x40/0x70 [ 1851.508452][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1851.513693][ C0] ? __pfx__printk+0x10/0x10 [ 1851.518322][ C0] vpanic+0x237/0x6d0 [ 1851.522307][ C0] ? __pfx_vpanic+0x10/0x10 [ 1851.526803][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1851.532087][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1851.537307][ C0] panic+0xb9/0xc0 [ 1851.541024][ C0] ? __pfx_panic+0x10/0x10 [ 1851.545441][ C0] ? common_startup_64+0x13e/0x147 [ 1851.550562][ C0] __warn+0x334/0x4c0 [ 1851.554536][ C0] ? put_cred_rcu+0x2c5/0x340 [ 1851.559223][ C0] ? put_cred_rcu+0x2c5/0x340 [ 1851.563896][ C0] report_bug+0x2be/0x4f0 [ 1851.568226][ C0] ? put_cred_rcu+0x2c5/0x340 [ 1851.572904][ C0] ? put_cred_rcu+0x2c5/0x340 [ 1851.577608][ C0] ? put_cred_rcu+0x2c7/0x340 [ 1851.582284][ C0] handle_bug+0x84/0x160 [ 1851.586538][ C0] exc_invalid_op+0x1a/0x50 [ 1851.591054][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1851.595901][ C0] RIP: 0010:put_cred_rcu+0x2c5/0x340 [ 1851.601185][ C0] Code: 5c 41 5d 41 5e 41 5f 5d e9 08 c4 8d 00 e8 b3 7c 32 00 4c 89 e7 be 03 00 00 00 e8 66 72 ff 02 e9 b8 fe ff ff e8 9c 7c 32 00 90 <0f> 0b 90 eb 9f e8 91 7c 32 00 4c 89 ff be 03 00 00 00 e8 44 72 ff [ 1851.620815][ C0] RSP: 0018:ffffc90000007ba8 EFLAGS: 00010246 [ 1851.626907][ C0] RAX: ffffffff818ea124 RBX: ffff8880297a8ca0 RCX: ffffffff8dc93300 [ 1851.634879][ C0] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000 [ 1851.642850][ C0] RBP: 0000000000000004 R08: ffff888031d8deab R09: 1ffff110063b1bd5 [ 1851.650820][ C0] R10: dffffc0000000000 R11: ffffed10063b1bd6 R12: dffffc0000000000 [ 1851.658792][ C0] R13: ffff8880297a8c00 R14: ffff888031d8dd18 R15: ffff888031d8dea8 [ 1851.666770][ C0] ? put_cred_rcu+0x2c4/0x340 [ 1851.671451][ C0] ? put_cred_rcu+0x2c4/0x340 [ 1851.676128][ C0] ? __pfx_put_cred_rcu+0x10/0x10 [ 1851.681151][ C0] ? rcu_core+0xc37/0x1770 [ 1851.685596][ C0] rcu_core+0xcab/0x1770 [ 1851.689859][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1851.694546][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1851.699761][ C0] ? sched_clock_cpu+0x74/0x430 [ 1851.704649][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 1851.710899][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1851.716196][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1851.722036][ C0] handle_softirqs+0x286/0x870 [ 1851.726811][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1851.731589][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1851.736880][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1851.742080][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1851.746671][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1851.751876][ C0] irq_exit_rcu+0x9/0x30 [ 1851.756123][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1851.761774][ C0] [ 1851.764701][ C0] [ 1851.767629][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1851.773615][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1851.779335][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 ab 10 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1851.798941][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c2 [ 1851.805036][ C0] RAX: d714118065e8c400 RBX: ffffffff819729b7 RCX: d714118065e8c400 [ 1851.813011][ C0] RDX: 0000000000000001 RSI: ffffffff8d786026 RDI: ffffffff8bbf3260 [ 1851.820992][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b863319b R09: 1ffff110170c6633 [ 1851.829019][ C0] R10: dffffc0000000000 R11: ffffed10170c6634 R12: ffffffff8f7d8c70 [ 1851.837078][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92660 [ 1851.845056][ C0] ? do_idle+0x1e7/0x510 [ 1851.849316][ C0] default_idle+0x13/0x20 [ 1851.853655][ C0] default_idle_call+0x73/0xb0 [ 1851.858427][ C0] do_idle+0x1e7/0x510 [ 1851.862506][ C0] ? __pfx_do_idle+0x10/0x10 [ 1851.867113][ C0] cpu_startup_entry+0x44/0x60 [ 1851.871894][ C0] rest_init+0x2de/0x300 [ 1851.876142][ C0] start_kernel+0x3ac/0x410 [ 1851.880655][ C0] x86_64_start_reservations+0x24/0x30 [ 1851.886125][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1851.891250][ C0] common_startup_64+0x13e/0x147 [ 1851.896215][ C0] [ 1851.899644][ C0] Kernel Offset: disabled [ 1851.903985][ C0] Rebooting in 86400 seconds..