last executing test programs: 14m40.645577678s ago: executing program 32 (id=41): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0x0, 0x0, {0xffffffff, 0x0, 0x0, 0x200000}}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000003c0)={0x6, {{0x2, 0x4e26, @multicast2}}, {{0x14, 0x4e20, @loopback}}}, 0x108) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 13m47.814663587s ago: executing program 33 (id=334): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000070000006122000002"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x47}, 0x4e20, 0x3, 'none\x00', 0x10, 0x2, 0x49}, 0x2c) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r2, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 13m31.129584729s ago: executing program 34 (id=434): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) sendto$packet(r2, 0x0, 0x0, 0x4000, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 13m9.599109903s ago: executing program 35 (id=516): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x6, 0x10002) pipe2$watch_queue(0x0, 0x80) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, 0x0, 0x48005) pipe2$watch_queue(&(0x7f0000000340), 0x80) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, 0x0) socket$inet(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="0000000000403b0008001d00c3000000c80f9094654d715651036c353aee0b8a7c48aaa4b7d53c70179db82a41cbb81790f3d1ce45907ca5d90772b3b70e7f92a4c64430b376285c1a356452780b5c296cacd9113bd546c7b4c46de80238271dab0a89d46341d242d66053744438e68e4a1fa10da6e739accd53eb"], 0x28}}, 0x0) 13m5.6248403s ago: executing program 36 (id=478): r0 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) preadv(r0, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000003000)=[@in6={0xa, 0x4e22, 0x2, @mcast1, 0x6}], 0x1d) sysinfo(0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4bc442, 0x0) ioperm(0x0, 0x1, 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) 12m34.182698136s ago: executing program 37 (id=694): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x42) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, 0x0, &(0x7f0000000080)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x24, 0x0, &(0x7f0000000080)) r3 = socket$kcm(0x21, 0x2, 0x2) fcntl$setstatus(r3, 0x4, 0x3400) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) 11m56.368661494s ago: executing program 9 (id=872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000740)="8bf9c333442d145a6a694ddaf5187a9516cf6edf46a03edb22e95f7475bc09b09d936ec8c043218bf958243462042a21fef9de75ff8be922de6b1d40", 0x3c}], 0x2) 11m55.116669569s ago: executing program 9 (id=886): mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x20) openat$pidfd(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000006, 0xc276, 0x0, 0xfffffffffffffffb, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002780)={0x14, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xa880}, 0x44040050) 11m53.609383848s ago: executing program 9 (id=897): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x41}, @dstopts={0x29}]}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x48, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x0, 0x2, 0x8}, @hopopts={0x1d, 0x6, '\x00', [@generic={0x0, 0x2f, "a8f518be4dc3011c04292b8423289d5a6b88f6da28ea24d1abf1c3743a9ab41057333049bc973286cdb6dfe503bbf8"}]}]}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x4, 0x4, 0x5, 0x0, 0x7fff, 0x1, 0x2, 0x2, 0xec, 0x8, 0x5, 0x3d, 0x0, 0x3, 0x5, 0x4, 0x6, 0x5, 0x1, '\x00', 0x9, 0x6}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m50.94533557s ago: executing program 9 (id=903): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x3}}]}}, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x40081) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 11m49.85336807s ago: executing program 9 (id=906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26004411}, 0x800) 11m47.964572477s ago: executing program 9 (id=915): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x6, 0x7ff}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m47.602358534s ago: executing program 38 (id=915): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x6, 0x7ff}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m1.08613689s ago: executing program 5 (id=1140): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd28, 0x25dfdbfc, 0x1, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x8080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r4 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r5, 0x8, r4) exit(0x7) sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)='\x00', 0x1}], 0x1}, 0x4044881) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0xc4, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x408d1) 10m58.752649005s ago: executing program 5 (id=1148): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x181) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000002c0)}], 0x1, 0xfff, 0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0x8c94}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10m58.50230314s ago: executing program 5 (id=1152): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 10m55.426598789s ago: executing program 5 (id=1162): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) dup(r0) socket$kcm(0x10, 0x2, 0x0) pipe2(&(0x7f0000000140), 0x80) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000140), 0x5, 0x97a1, &(0x7f0000009780)="$eJzs/QWcrWWhuH/Phg1sOgRBVEBKTFJCFOlQRElRQpCWFBABpUMJFRQBle7u7i7p7u7ujvezYYOKFxzP7z3/g4fruj7uWbNi1tzr/j7346x5hrWWnHfROQcGxhp4p3dP/94Fu9697GKjL7juiTsPvmnPHRZ6bNjFI75zMvbsw07nGHY658DAwKBh9zPoncsGz3bCicMNDB4Y+r+/N9rIoww32sDAKMPODrufgZneORn1oHdv99b74oFOMvTbbf/Ov7cbfeidDP1k6eXeWGtgYGDIP3z90HFN8y8PVNqSc8w379+t3nMbbtjVg/5+3dung9/5N+p+AwOj7jPwwdvH0NuO8A9f+7/Z0O851mQDi9/9EXzv/3MtOcd8C7zPf+haHH7YZTMNXePvX4PG3r+d77Do6o8Mm8JBwyZu8D+sl49iu/9/ask55l1w4IPX8cBC82zy8Ftv7zcHzz0wMHiegYHB8w4MDJ7vo/ao/5k+0o2vqqqqPpLmmHP6oc/Zh3vfzwND3v25ln4uvOT1ae8fGBi80DvPEwcv9+5zwaqqqqqqqqr6z2yOOaefC57/j/Vhz/8nOX3rsXv+X1VVVVVVVfV/pwXmmHP6oc/13/f8f4IPe/7/9KNHHvjO3/7PPtM7X/XmR/sgqqqqqqqqqupDm3cBfP4/yYc9/7/shEmu7Pl/VVVVVVVV1f+dFnnrrbc2+4fX2Rt28VTvXk/P/8986M5lPrIBV1VVVVVVVdV/uzefOO2sv7/m+0QD73u997cb9nuBQcecc/XVH9lA/9caZdQPuXLQv/4+ZPP/xbH9f9JQ5yGHTTIwsNbiH/VQ6iPo/8xr1df/J+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/e6//f+ZxK7z7XvCfn2L6m0/7+1e+/d7/gxda4IktPqKhfxR9XI//D6w2aGBgmO9Yqw0MDCw0xyKLTTUwMHDazdNPMfnAe9fNPPS6WccZ/u03iH/3PxOZZ2y+480nfed06IYyMO5793HM2/e/wFv7Dj/ofYP4h8Y+6cADV13ypRnefzrlBz+O4d77bPQTH333v2UZ7n03GvIBX/zu/b/7WN7vPGzsUw0d+9Trr7nO1OtttPFXVltz+VVWWmWltWaZbsZpZ5hllhlnnHrl1dZYaZp3Pn7QnE3y9se5/p05G+39c/bEHP84Z+9/bB80Z5N8+Jy9fY+7XDrkW+/O2eD/5pzN9eFzNslqw77R2LOPMLDc23MzaGBg7LlHGNhw6JlpRxoYGHueYbedYOhtvzHOcAMDO/39gQ79bKT3tsFBmw+9zZLzLjrnO7upgYG/n/69D3g/+xGHjXz2YadzDDud851vM9bA3zfFwbOdcOJwQ+fin6ZjtJFHGW60gYFRhp0ddj8Ds7xzMsrp797uA95n/X0DfftlVrZ/59/bjT4wMPD23x9NtPyZ2wyd+v+F92n/f/r//3/xmnnQe9vjoGH/ht3mHa855lvg79/r7WkYOnfDD7tspqEm/8Nvbf9P/ct4JxkyMMmHjPdDXhfn7Wj7WuO08bb8n3pdHBrvBB8y3g95Hd8PHO8S9+/+yDt39T823vft6xZ8++Ps/86+buDD93XD0x2sdMVn37+v+84HD/GfdpfvztFI77vRB+3rJthj4s2H3v/sH76vW3Do2Ef4p33dcAMDY8/17r5u6I5v3hEGdhp6ZrqhZ+YbYeCQoWemf/vMyAPnDD3z1RXWXmPFoRfM/6/bwVSD/ukPNGGdzfu+dTboHx77oPf9fefgd05H3e/d93D6gP3moGEP67/cV9B2O9aHjPdD3n8K53noZSseO2S8/6n3n6LxDvnw8X7Q+2V/4Hh3fPHMu/+Hx/veOhvhH6Zr/n9nnU3yz+ts6EMc/h9Wxr/7c9iKcPt3Pp/gvXvbYNNH3/uZYoT33e9/9TPF/B++zsZa7X1ft90+A4M+bG7m+3fm5jP/sg/a4h/n5t/9eWuqyd65fvgPmZuRZll2ynfnZsT/5tzM99+dm9kHhv/nuRk8MM/AwMDkw/YP8/47czPBh8/Nv7vdjAK3f+fzld67aO4dDrvo3bl5/1z8V3Mz7393biZ5b7uZ/O3rJh1uYMQRBzZcfv311532nY/vnp3unY8fvgbn/nfmcqz/mbmccPAHzeXfN9XR7r9yv/9iDf7LPv3d+5/7vzuXA+/N5cBq718s9Z9av/9zl7+7/N3l7y5/d/m7y1/cBxz/f+/1/3cba9adh/1yY4QrJx5/2496vB9xH+vj/8N8/+n4/7bjT3zlcAPvXfehx2ffuc1/5PHZmd45GfWgd2/3/uODPNAPPj67zywzbf2/dHz2/6l31+q/8Xu49v/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/H+ad/8O4KFpF3522IHQER7baqmFP+rxfsR9rI//D/P9p+P/Cy+11WPDDbx33Yce/3/nNo7j//e+Nu+O/8nH/99dqx3/r/+i/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Acc/5/93b8DOPLI3Td+9+8Brh97+9M+6vF+xH1cj//3/v/e2v+7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xQ07/j/wvre3/H7bBQbH//9v9wH+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/w/yxyz+S+aPWfx/mD9m8f9R/pjFf6n8MYv/0vljFv9l8scs/svmj1n8f5w/ZvFfLn/M4r98/pjF/yf5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/T/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/z/LHLP7r5o9Z/NfLH7P4r58/ZvH/ef6YxX+D/DGL/y/yxyz+G+aPWfw3yh+z+G+cP2bx/2X+mMX/V/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfx/nT9m8f9N/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8f5s/ZvH/Xf6Yxf/3+WMW/53yxyz+O+ePWfz/kD9m8f9j/pjFf5f8MYv/n/LHLP675o9Z/HfLH7P4754/ZvH/c/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/n/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYn/oIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfkj9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6Yxf8T+WMW/3Hzxyz+4+WPWfw/mT9m8R8/f8ziP0H+mMX/U/ljFv8J88cs/p/OH7P4fyZ/zOL/2fwxi/9E+WMW/4nzxyz+k+SPWfw/lz9m8Z/0Xf8hH9G4/kOz+E/W+scs/pPnj1n8p8gfs/hPmT9m8f98/pjFf6r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fyx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/9fzxyz+s+aPWfy/kT9m8f9m/pjFf7b8MYv/t/LHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/O3/M4v+d/DGL/4L5Yxb/7+aPWfwXyh+z+H8vf8zi//38MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4P8MYv/kvljFv8f5o9Z/H+UP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/H+ePWfyXyx+z+C+fP2bx/0n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/0/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOL/s/wxi/+6+WMW//Xyxyz+6+ePWfx/nj9m8d8gf8zi/4v8MYv/hvljFv+N8scs/hvnj1n8f5k/ZvH/Vf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv9f549Z/H+TP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/3+aPWfx/lz9m8f99/pjFf6f8MYv/zvljFv8/5I9Z/P+YP2bx3yV/zOL/p/wxi/+u+WMW/93yxyz+u+ePWfz/nD9m8f9L/pjF/6/5Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gf/M/+D/6vj+s/NIv/Ia1/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYn/2+X/r0n8B12eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyH5EutPi/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyT+b3+a/79m8R+UP2bxHy5/zOI/fP6YxX9w/pjFf4T8MYv/iPljFv+R8scs/kPyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4fyJ/zOI/bv6YxX+8/DGL/yfzxyz+4+ePWfwnyB+z+H8qf8ziP2H+mMX/0/ljFv/P5I9Z/D+bP2bxnyh/zOI/cf6YxX+S/DGL/+fyxyz+k+aPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6Yxf/z+WMW/6nyxyz+X8gfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4j91/pjFf5r8sUEX7DrCwMDAx95/2vwxy/qfLn/M4j99/pjFf4b8MYv/1/LHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v/1/DGL/6z5Yxb/b+SPWfy/mT9m8Z8tf8zi/638MYv/7PljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+384fs/h/J3/M4r9g/pjF/7v5Yxb/hfLHLP7fyx+z+H8/f8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8gf8ziv2T+mMX/h/ljFv8f5Y9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjF/8f5Yxb/5fLHLP7L549Z/H+SP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/zR/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4/yx/zOK/bv6YxX+9/DGL//r5Yxb/n+ePWfw3yB+z+P8if8ziv2H+mMV/o/wxi//G+WMW/1/mj1n8f5U/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/1/ljFv/f5I9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjF/7f5Yxb/3+WPWfx/nz9m8d8pf8ziv3P+mMX/D/ljFv8/5o9Z/HfJH7P4/yl/zOK/a/6YxX+3/DGL/+75Yxb/P+ePWfz/kj9m8f9r/pjFf4/8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4v+3/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WPv+U/y8fa/I3/Msv7vzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/JvEffiB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfyH5I9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8f9E/pjFf9z8MYv/ePljFv9P5o9Z/MfPH7P4T5A/ZvH/VP6YxX/C/DGL/6fzxyz+n8kfs/h/Nn/M4j9R/pjFf+L8MYv/JPljFv/P5Y9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/5/PHLP5T5Y9Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMV/6vwxi/80Kv8R/+1bWvynVfn/+1n8p8sfs/hPnz9m8Z8hf8zi/7X8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/PX/M4j9r/pjF/xv5Yxb/b+aPWfxnyx+z+H8rf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/7fzxyz+38kfs/gvmD9m8f9u/pjFf6H8MYv/9/LHLP7fzx+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yB+z+C+ZP2bx/2H+mMX/R/ljFv+l8scs/kvnj1n8l8kfs/gvmz9m8f9x/pjFf7n8MYv/8vljFv+f5I9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/NH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/j/LH7P4r5s/ZvFfL3/M4r9+/pjF/+f5Yxb/DfLHLP6/yB+z+G+YP2bx3yh/zOK/cf6Yxf+X+WMW/1/lj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/3X+mMX/N/ljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9t/pjF/3f5Yxb/3+ePWfx3yh+z+O+cP2bx/0P+mMX/j/ljFv9d8scs/n/KH7P475o/ZvHfLX/M4r97/pjF/8/5Yxb/v+SPWfz/mj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/j/LX/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38sck/oMH8scs/oPyxyz+w+WPve0/4sfff/j8Mcv6H5w/ZvEfIX/M4j9i/pjFf6T8MYv/kPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP6fyB+z+I+bP2bxHy9/zOL/yfwxi//4+WMW/wnyxyz+n8ofs/hPmD9m8f90/pjF/zP5Yxb/z+aPWfwnyh+z+E+cP2bxnyR/zOL/ufwxi/+k+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bx/3z+mMV/qvwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/LH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/1/PHLP6z5o9Z/L+RP2bx/2b+mMV/tvwxi/+38scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H87f8zi/538MYv/gvljFv/v5o9Z/BfKH7P4fy9/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/+S+WMW/x/mj1n8f5Q/ZvFfKn/M4r90/pjFf5n8MYv/svljFv8f549Z/JfLH7P4L58/ZvH/Sf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v/T/DGL/+r5Yxb/NfLHLP5r5o+95z/ywMDAx9h/rfwxy/pfO3/M4r9O/pjF/2f5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zx/zOK/Qf6Yxf8X+WMW/w3zxyz+G+WPWfw3zh+z+P8yf8zi/6v8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+v84fs/j/Jn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/r/NH7P4/y5/zOL/+/wxi/9O+WMW/53zxyz+f8gfs/j/MX/M4r9L/pjF/0/5Yxb/XfPHLP675Y9Z/HfPH7P4/zl/zOL/l/wxi/9f88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv+/5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjEf4SB/DGL/6D8MYv/cPljFv/h88cs/oPzxyz+I+SPWfxHzB+z+I+UP2bxH5I/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMX/E/ljFv9x88cs/uPlj1n8P5k/ZvEfP3/M4j9B/pjF/1P5Yxb/CfPHLP6fzh+z+H8mf8zi/9n8MYv/RPljFv+J88cs/pPkj1n8P5c/ZvGfNH/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/p/PH7P4T5U/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf9r+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/3r+mMV/1vwxi/838scs/t/MH7P4z5Y/ZvH/Vv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv9v549Z/L+TP2bxXzB/zOL/3fwxi/9C+WMW/+/lj1n8v58/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8f5A/ZvFfMn/M4v/D/DGL/4/yxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/4/wxi/9y+WMW/+Xzxyz+P8kfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/mj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfx/lj9m8V83f8ziv17+mMV//fwxi//P88cs/hvkj1n8f5E/ZvHfMH/M4r9R/pjFf+P8MYv/L/PHLP6/yh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/r/DGL/2/yxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/2/wxi//v8scs/r/PH7P475Q/ZvHfOX/M4v+H/DGL/x/zxyz+u+SPWfz/lD9m8d81f8ziv1v+mMV/9/wxi/+f88cs/n/JH7P4/zV/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bx/1v+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfxHHMgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv8h+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/D+RP2bxHzd/zOI/Xv6Yxf+T+WMW//Hzxyz+E+SPWfw/lT9m8Z8wf8zi/+n8MYv/Z/LHLP6fzR+z+E+UP2bxnzh/zOI/Sf6Yxf9z+WMW/0nzxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOL/+fwxi/9U+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8v5Y/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv+v549Z/GfNH7P4fyN/zOL/zfwxi/9s+WMW/2/lj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/3b+mMX/O/ljFv8F88cs/t/NH7P4L5Q/ZvH/Xv6Yxf/7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf8H+WMW/yXzxyz+P8wfs/j/KH/M4r9U/tjH1H/Q+6xHXDp/7GPq/3b/uP6XyR+z+C+bP2bx/3H+mMV/ufwxi//y+WMW/5/kj1n8V8gfG3TBoGEz8/H2XzF/zLL+V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/9P88cs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi//P8scs/uvmj1n818sfs/ivnz9m8f95/pjFf4P8MYv/L/LHLP4b5o9Z/DfKH7P4b5w/ZvH/Zf6Yxf9X+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/H+dP2bx/03+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx/mz9m8f9d/pjF//f5Yxb/nfLHLP47549Z/P+QP2bx/2P+mMV/l/wxi/+f8scs/rvmj1n8d8sfs/jvnj9m8f9z/pjF/y/5Yxb/v+aPWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+f8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P5//wMhwmcX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHJP4jDeSPWfwH5Y9Z/IfLH7P4D58/ZvEfnD9m8R8hf8ziP2L+mMV/pPwxi/+Q/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PkPa8g/nbP4j5M/ZvH/RP6YxX/c/DGL/3j5Yxb/T+aPWfzHzx+z+E+QP2bx/1T+mMV/wvwxi/+n88cs/p/JH7P4fzZ/zOI/Uf6YxX/i/DGL/yT5Yxb/z+WPWfwnzR+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/+fzxyz+U+WPWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8f9a/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v54/ZvGfNX/M4v+N/DGL/zfzxyz+s+WPWfy/lT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf/b+WMW/+/kj1n8F8wfs/h/N3/M4r9Q/pjF/3v5Yxb/7+ePWfwXzh+z+C+SP2bxXzT/93przL9/bvFfLH/M4r94/pjFf4n8MYv/D/LHLP5L5o9Z/H+YP2bx/1H+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfx/nD9m8V8uf8ziv3z+mMX/J/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/9P88cs/qvnj1n81zD7D/rgh27xX9Ps/yFZ/NfKH7P4r50/ZvFfJ3/M4v+z/DGL/7r5Yxb/9fLHLP7r549Z/H+eP2bx3yB/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfx/mT9m8f9V/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/G/Rvi7D4b5s2ZvH/df6Yxf83+WMW/+3yxyz+2+ePWfx3eMf/jbc+qnH9h2bx37H1j1n8f5s/ZvH/Xf6Yxf/3+WMW/53yxyz+O+ePWfz/kD9m8f9j/pjFf5f8MYv/n/LHLP675o9Z/HfLH7P4754/ZvH/c/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/n/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYn/kIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfkj9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6Yxf8T+WMW/3Hzxyz+4+WPWfw/mT9m8R8/f8ziP0H+mMX/U/ljFv8J88cs/p/OH7P4fyZ/zOL/2fwxi/9E+WMW/4nzxyz+k+SPWfw/lz9m8Z80f8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+n88fs/hPlT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/zfyxyz+38wfs/jPlj9m8f9W/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/2/nj1n8v5M/ZvFfMH/M4v/d/DGL/0L5Yxb/7+WPWfy/nz9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfx/kD9m8V8yf8zi/8P8MYv/j/LHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/j/DGL/3L5Yxb/5fPHLP4/yR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+aP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/H+WP2bxXzd/zOK/Xv6YxX/9/DGL/8/zxyz+G+SPWfx/kT9m8d8wf8ziv1H+mMV/4/wxi/8v88cs/r/KH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8zi/+v8MYv/b/LHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4v/b/DGL/+/yxyz+v88fs/jvlD9m8d85f8zi/4f8MYv/H/PHLP675I9Z/P+UP2bx3zV/zOK/W/6YxX/3/DGL/5/zxyz+f8kfs/j/NX/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvH/W/6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljBv9BgweGPJk/ZvAfuv6fyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofk/iPPJA/ZvEflD9m8R8uf8ziP3z+mMV/cP6YxX+E/DGL/4j5Yxb/kfLHLP5D8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+H8if8ziP27+mMV/vPwxi/8n88cs/uPnj1n8J8gfs/h/Kn/M4j9h/pjF/9P5Yxb/z+SPWfw/mz9m8Z8of8ziP3H+mMV/kvwxi//n8scs/pPmj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMX/8/ljFv+p8scs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/df6YxX+agYHNPqoh/Sdn8Z+29Y9Z/KfLH7P4T58/ZvGfIX/M4v+1/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fz1/zOI/a/6Yxf8b+WMW/2/mj1n8Z8sfs/h/K3/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+388cs/t/JH7P4L5g/ZvH/bv6YxX+h/DGL//fyxyz+388fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8gfs/gvmT9m8f9h/pjF/0f5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP4/yx+z+K+bP2bxXy9/zOK/fv6Yxf/n+WMW/w3yxyz+v8gfs/hvmD9m8d8of8ziv3H+mMX/l/ljFv9f5Y9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f91/pjF/zf5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/bf6Yxf93+WMW/9/nj1n8d8ofs/jvnD9m8f9D/pjF/4/5Yxb/XfLHLP5/yh+z+O+aP2bx3y1/zOK/e/6Yxf/P+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4/y1/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHJP6jDOSPWfwH5Y9Z/IfLH7P4D58/ZvEfnD9m8R8hf8ziP2L+mMV/pPwxi/+Q/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/p/IH7P4j5s/ZvEfL3/M4v/J/DGL//j5Yxb/CfLHLP6fyh+z+E+YP2bx/3T+mMX/M/ljFv/P5o9Z/CfKH7P4T5w/ZvGfJH/M4v+5/DGL/6T5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvH/fP6YxX+q/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X8sfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi//X88cs/rPmj1n8v5E/ZvH/Zv6YxX+2/DGL/7fyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzt/zOL/nfwxi/+C+WMW/+/mj1n8F8ofs/h/L3/M4v/9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+D/DGL/5L5Yxb/H+aPWfx/lD9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/x/nj1n8l8sfs/gvnz9m8f9J/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/9P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi/7P8MYv/uvljFv/18scs/uvnj1n8f54/ZvHfIH/M4v+L/DGL/4b5Yxb/jfLHLP4b549Z/H+ZP2bx/1X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/X+ePWfx/kz9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/9/mj1n8f5c/ZvH/ff6YxX+n/DGL/875Yxb/P+SPWfz/mD9m8d8lf8zi/6f8MYv/rvljFv/d8scs/rvnj1n8/5w/ZvH/S/6Yxf+v+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//f8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf0ziP+pA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4D8kfs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOL/ifwxi/+4+WMW//Hyxyz+n8wfs/iPnz9m8Z8gf8zi/6n8MYv/hPljFv9P549Z/D+TP2bx/2z+mMV/ovwxi//E+WMW/0nyxyz+n8sfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/8/nj1n8p8ofs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+1/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fz1/zOI/a/6Yxf8b+WMW/2/mj1n8Z8sfs/h/K3/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+388cs/t/JH7P4L5g/ZvH/bv6YxX+h/DGL//fyxyz+388fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8gfs/gvmT9m8f9h/pjF/0f5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP4/yx+z+K+bP2bxXy9/zOK/fv6Yxf/n+WMW/w3yxyz+v8gfs/hvmD9m8d8of8ziv3H+mMX/l/ljFv9f5Y9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f91/pjF/zf5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/bf6Yxf93+WMW/9/nj1n8d8ofs/jvnD9m8f9D/pjF/4/5Yxb/XfLHLP5/yh+z+O+aP2bx3y1/zOK/e/6Yxf/P+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n/i3/1f+kjG9R+axf+k1j9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzx971HxgyMPBx9j8jf8yy/s/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/7/lj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMO/+Q/KIf/wKiPtRVgFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/JvEfbSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfyH5I9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj318/ae/6R8uHW3s/LGPr/8/r/9x8scs/p/IH7P4j5s/ZvEfL3/M4v/J/DGL//j5Yxb/CfLHLP6fyh+z+E+YP2bx/3T+mMX/M/ljFv/P5o9Z/CfKH7P4T5w/ZvGfJH/M4v+5/DGL/6T5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvH/fP6YxX+q/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X8sfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi//X88cs/rPmj1n8v5E/ZvH/Zv6YxX+2/DGL/7fyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzt/zOL/nfwxi/+C+WMW/+/mj1n8F8ofs/h/L3/M4v/9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+D/DGL/5L5Yxb/H+aPWfx/lD9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/x/nj1n8l8sfs/gvnz9m8f9J/pjFf4X8MYv/ikb/f+MBW/xXMvr/G1n8V84fs/ivkj9m8V81f8ziv1r+mMX/p/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/Z/ljFv9188cs/uvlj1n8188fs/j/PH/M4r9B/pjF/xf5Yxb/DfPHLP4b5Y9Z/DfOH7P4/zJ/zOL/q/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP6/zh+z+P8mf8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+v80fs/j/Ln/M4v/7/DGL/075Yxb/nfPHLP5/yB+z+P8xf8ziv0v+mMX/T/ljFv9d88cs/rvlj1n8d88fs/j/OX/M4v+X/DGL/1/zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/7/lj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMR/9IH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfkj9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6Yxf8T+WMW/3Hzxyz+4+WPWfw/mT9m8R8/f8ziP0H+mMX/U/ljFv8J88cs/p/OH7P4fyZ/zOL/2fwxi/9E+WMW/4nzxyz+k+SPWfw/lz9m8Z80f8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+n88fs/hPlT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH/sn/2GXjfURj+n/rz7Af5b8Mcv6/3r+mMV/1vwxi/838scs/t/MH7P4z5Y/ZvH/Vv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv9v549Z/L+TP2bxXzB/zOL/3fwxi/9C+WMW/+/lj1n8v58/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8f5A/ZvFfMn/M4v/D/DGL/4/yxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/4/wxi/9y+WMW/+Xzxyz+P8kfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/mj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfx/lj9m8V83f8ziv17+mMV//fwxi//P88cs/hvkj1n8f5E/ZvHfMH/M4r9R/pjFf+P8MYv/L/PHLP6/yh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/r/DGL/2/yxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/2/wxi//v8scs/r/PH7P475Q/ZvHfOX/s4+o/5H3+f8gf+7j6D7zP/4/5Yxb/XfLHLP5/yh+z+O+aP2bx3y1/zOK/e/6Yxf/P+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4/y1/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h97vv/n/8rj+Q7P4P9z6xyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMS/zEG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf0j+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/T+SPWfzHzR+z+I+XP2bx/2T+mMV//Pwxi/8E+WMW/0/lj1n8J8wfs/h/On/M4v+Z/DGL/2fzxyz+E+WPWfwnzh+z+E+SP2bx/1z+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+H8+f8ziP1X+mMX/C/ljFv8v5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv+v5Y9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/+v5Yxb/WfPHLP7fyB+z+H8zf8ziP1v+mMX/W3r/IXipxX92vT9n8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOL/7fwxi/938scs/gvmj1n8v5s/ZvFfKH/M4v+9/DGL//fzxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/w/yxyz+S+aPWfx/mD9m8f9R/pjFf6n8MYv/0vljFv9l8scs/svmj1n8f5w/ZvFfLn/M4r98/pjF/yf5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/T/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/z/LHLP7r5o9Z/NfLH7P4r58/ZvH/ef6YxX+D/DGL/y/yxyz+G+aPWfw3yh+z+G+cP2bx/2X+mMX/V/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfx/nT9m8f9N/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8f5s/ZvH/Xf6Yxf/3+WMW/53yxyz+O+ePWfz/kD9m8f9j/pjFf5f8MYv/n/LHLP675o9Z/HfLH7P4754/ZvH/c/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/n/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYn/mAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/JH/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/8n8scs/uPmj1n8x8sfs/h/Mn/M4j9+/pjFf4L8MYv/p/LHLP4T5o9Z/D+d//+PnbsP97qu7zj+454sZ592Xeo1bTg05tqMREajFqKieLw5ZaKZ96iHm+RGbiTAFNhopY5Nl7pZsImFY85WLXG4ue5WNCxrtkZsrXKKa2GMOVhkzth14ByCs7fn2vmy79et9+PxB+f8fsf3L+V5vfz9vLiuQln6H61/KEv/V+sfytL/Z/UPZek/TP9Qlv7H6B/K0v/n9A9l6T9c/1CW/sfqH8rS/zj9Q1n6v0b/UJb+I/QPZen/8/qHsvQ/Xv9Qlv6/oH8oS//X6h/K0v8X9Q9l6f9L+oey9D9B/1CW/q/TP5Sl/0j9Q1n6v17/UJb+J+ofytJ/lP6hLP1P0j+Upf9o/UNZ+v+y/qEs/cfoH8rS/w36h7L0/xX9Q1n6j9U/lKX/G/UPZen/Jv1DWfr/qv6hLP3frH8oS/9x+oey9D9Z/1CW/uP1D2Xpf4r+oSz9T9U/lKX/afqHsvSfoH8oS//T9Q9l6X+G/qEs/SfqH8rS/0z9Q1n6t+kfytL/LP1DWfqfrX8oS/9z9A9l6X+u/qEs/dv1D2Xp/xb9Q1n6v1X/UJb+5+kfytL/bfqHsvQ/X/9Qlv6T9A9l6X+B/qEs/S/UP5Sl/9v1D2Xpf5H+oSz936F/KEv/i/UPZel/if6hLP0v1T+Upf9l+oey9L9c/1CW/lfoH8rS/0r9Q1n6T9Y/lKX/VfqHsvS/Wv9Qlv7X6B/K0r9D/1CW/lP0D2XpP1X/UJb+0/QPZek/Xf9Qlv7v1D+Upf+1+oey9J+hfyhL/5n6h7L0n6V/KEv/2fqHsvS/Tv9Qlv5z9A9l6T9X/1CW/vP0D2XpP1//UJb+1+sfytJ/gf6hLP3fpX8oS/+F+oey9F+kfyhL/8X6h7L0v0H/UJb+79Y/lKX/jfqHsvS/Sf9Qlv5L9A9l6b9U/1CW/sv0D2Xp/2v6h7L0/3X9Q1n6L9c/lKX/e/QPZen/G/qHsvR/r/6hLP3fp38oS/+b9Q9l6X+L/qEs/W/VP5Sl/2/qH8rSf4X+oSz9f0v/UJb+v61/KEv/2/QPZel/u/6hLP1/R/9Qlv7v1z+Upf8d+oey9L9T/1CW/nfpH8rS/3f1D2Xp/3v6h7L0v1v/UJb+H9A/lKX/B/UPZem/Uv9Qlv6r9A9l6f/7+oey9P8D/UNZ+t+jfyhL/9X6h7L0v1f/UJb+H9I/lKX/h/UPZem/Rv9Qlv736R/K0v8P9Q9l6b9W/1CW/n+kfyhL//v1D2Xp/8f6h7L0f0D/UJb+H9E/lKX/n+gfytL/o/qHsvT/mP6hLP0/rn8oS/8/1T+Upf8n9A9l6f+g/qEs/dfpH8rS/yH9Q1n6/5n+oSz91+sfytL/Yf1DWfr/uf6hLP3/Qv9Qlv6P6B/K0v8v9Q9l6f9J/UNZ+n9K/1CW/p/WP5Sl/2f0D2Xp/1n9Q1n6/5X+oSz9P6d/KEv/z+sfytJ/g/6hLP2/oH8oS/+/1j+Upf9G/UNZ+j+qfyhL/y/qH8rS/0v6h7L0f0z/UJb+X9Y/lKX/V/QPZen/N/qHsvR/XP9Qlv5f1T+Upf/f6h/K0v9r+oey9P87/UNZ+m/SP5Sl/9f1D2Xpv1n/UJb+f69/KEv/f9A/lKX/N/QPZen/j/qHsvT/pv6hLP2/pX8oS/9v6x/K0v8J/UNZ+v+T/qEs/Z/UP5Sl/1P6h7L036J/KEv/p/UPZen/z/qHsvT/jv6hLP3/Rf9Qlv7f1T+Upf9W/UNZ+j+jfyhL/+/pH8rSf5v+oSz9/1X/UJb+2/UPZen/b/qHsvR/Vv9Qlv7/rn8oS/8d+oey9N+pfyhL///QP5Sl//f1D2Xpv0v/UJb+P9A/lKX/c/qHsvT/of6hLP2f1z+Upf9/6h/K0v8F/UNZ+v9I/1CW/rv1DyXp/8qW/qEs/fvpH8rSv7/+oSz9B+gfytJ/oP6hLP0H6R/K0n+w/qEs/YfoH8rSf6j+oSz9X6Z/KEv/Q/QPZen/cv1DWfq/Qv9Qlv6H6h/K0v+n9A9l6X+Y/qGfuP4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/18xbtPjayTNmdMz1jW9845t937zU/2YCAAD+t/34Q/9L/XcCAAAAAAAAAAAAAAAAAAAAeTXxfyf2Uv8zAgAAAAAAAAAAAADA/3dt7adsG9DvgKcG7P/g1Y917Pk6etdF09aseah0f+368dnBS/bf/8Hu3bt3r3p23ISuh0NarVbn/9orux4P7Xnc+fpLh608cu+jMv5zdz1x+aRDz5m77vaBX191a/szg/Y8O6h15ZTpMzpe37/VKqcNai3sfHBiv1arnDGodVvng1GdDyYOaq3tfHDSngcva32688Hrrp4945rOJ86s/HsGPyna2pe2Bhyw2NYB/zbYf/9Lhz05rftrLy/Z/WoDW137H77ui0f0+Fm3F9l/9+uXU3ruv8//gMCL6tv+n9vc/bWXl/xv7/8f2rhrcfSzF99/9+uXU+0f6hN8/j9goz0/9/f4/H9M8JL77k8euvGOzv23XXD/0V1PDfyffP7/8euX03ruv/8Bn/87P8dP6P78P6TVKqcf5G8HpNLWvmxbb+//ve9/4M/0uOm3//7v/fKWV3Tu/77nW8u7nhrUx/1P6O39/+Yef69A37S1r97d4/2/D/tvjQhect/+t647dM/n/y0PXH34fj/ry/5P77n/kfNnXjdy3qLFJ0yfOXlqx9SOWWNHjTlx9NixY8aM3POJYO+vB/mbAkkc3Pt/65AeN/1arY599xvuv3VC5/63P7z8w11PDe3j/s/o9f3/GO//EBrevzV4cGvh5Pnz556499fuh6P2/rr3Lwv234f//j/2+K6/rPvPDPu1Wkfuux9x+dghnfu/YU5Z3/XU4D7uf2Kv+x9/4J9VAn1zkO//1/S4OWD/J2+9aUHn/o/7/qu2dD3V1//+P7PX/d/j/R8ORlt7q9Y30c79nzRk2VnVrkubP/+D+jSx/2E7bttZ7bqcZf9Qnyb2P2nFm66qdl3Otn+oTxP7f2jmFSuqXZdz7B/q08T+X/jpnUdVuy7n2j/Up4n9P/6dp9dUuy7t9g/1aWL/H7i7/aRq1+Ut9g/1aWL/J1z/g3HVrstb7R/q08T+p7z8/LXVrst59g/1aWL/Z+0+9fBq1+Vt9g/1aWL//ZZ9d2m163K+/UN9mtj/U5NXzK52XSbZP9Snif2vHTbiuWrX5QL7h/o0sf/lz7xhYrXrcqH9Q32a2P9X7lz5eLXr8nb7h/o0sf+PX/qqldWuy0X2D/VpYv8/HP7wIdWuyzvsH+rTxP43bVr7YLXrcrH9Q32a2P+qtQOGV7sul9g/1KeJ/S85c+pj1a7LpfYP9Wli/6PHfOmSatflMvuH+jSx/yM/+82nq12Xy+0f6tPE/s9/ZMG8atflCvuH+jSx/wVHfexH1a7LlfYP9Wli/2/uOGpatesy2f6hPk3sv9x+yKZq1+Uq+4f6NLH/i7evHl/tulxt/1CfJva//rDPf7TadbnG/qE+Tex/x5xZY6tdlw77h/o0sf9vv2fJe6tdlyn2D/VpYv93PP+1Uu26TLV/qE8T+9866uJLq12XafYP9Wli/6vPefbRatdluv1DfZrY/4r1T8yvdl3eaf9Qnyb2v2HD2U9Wuy7X2j/Up4n9Hzdi5KHVrssM+4f6NLH/2Rct/2C16zLT/qE+Tez/tAfufE216zLL/qE+Tex/6FfHfaLadZlt/1CfJvb/qXHv+2S163Kd/UN9mtj/zvHHHl/tusyxf6hPE/vf/OCou6pdl7n2D/VpYv/vf/Tuitdlnv1DfZrY/5zXvrC92nWZb/9Qnyb2/8ZJFy6qdl2ut3+oTxP7P/yeiV+odl0W2D/Up4n9X/at751X7bq8y/6hPk3s/9gjrjq62nVZaP9Qnyb2P236xluqXZdF9g/1aWL/E1ZtHl3tuiy2f6hPE/s/7Kl591a7LjfYP9Snif1vG3DEudWuy7vtH+rTxP7vu/GRb1S7LjfaP9Snif3fcvNHOqpdl5vsH+rTxP4/s2vwjmrXZYn9AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf7EDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rIHo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKAAA///+TOkC") pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x8080583a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x9}) 10m52.561381294s ago: executing program 5 (id=1176): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket(0x2, 0x80805, 0x0) syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 10m52.468768266s ago: executing program 5 (id=1178): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x60001600, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r4) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m37.435062706s ago: executing program 39 (id=1178): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x60001600, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r4) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m50.326694183s ago: executing program 4 (id=1395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0) 9m48.280061913s ago: executing program 4 (id=1398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002300)={0x7, {"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", 0x10af}}, 0x1006) 9m47.383565721s ago: executing program 4 (id=1401): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xfc, 0x0, 0x0, 0x9, 0x0, 0x4, 0xfe, 0xb, 0x5, 0x0, 0x2, 0x5, 0x1, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x7ff, 0x4) shutdown(r0, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 9m47.265694702s ago: executing program 4 (id=1402): socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x12) wait4(r3, 0x0, 0x8, 0x0) 9m45.904292989s ago: executing program 4 (id=1407): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001880)={0x53, 0xffffffffffffffff, 0x0, 0xf7, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0xff, 0x10016, 0x3, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket(0x11, 0xa, 0x80000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_tree(0xffffffffffffff9c, 0x0, 0x89901) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0xffffffffffffffff, &(0x7f0000000040)=0x13e) 9m42.350040737s ago: executing program 4 (id=1415): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 9m27.295246108s ago: executing program 40 (id=1415): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 8m34.857842236s ago: executing program 7 (id=1601): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0xfffffffe, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000000000000002000000000000", @ANYRES32=r1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200000000000000e3ffffffffff"], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8m34.561888872s ago: executing program 7 (id=1603): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x17) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r4, 0x0, 0x2, 0x0, &(0x7f0000000100)) 8m33.189299028s ago: executing program 7 (id=1606): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000480)={[{@jqfmt_vfsv0}, {@errors_remount}, {@nobh}, {}, {@data_err_abort}, {@sysvgroups}, {@minixdf}, {@acl}]}, 0x1, 0x5e7, &(0x7f0000002080)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='\x00\x00', 0xc6a2, 0x0) 8m32.245343247s ago: executing program 7 (id=1610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) 8m30.353428693s ago: executing program 7 (id=1617): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000b148b0a28bd70"], 0x18}, 0x1, 0x0, 0x0, 0x48010}, 0x20004000) 8m29.373551402s ago: executing program 7 (id=1621): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCXONC(r2, 0x540a, 0x0) dup3(r0, r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) 8m11.124971723s ago: executing program 41 (id=1621): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCXONC(r2, 0x540a, 0x0) dup3(r0, r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) 7m12.855073883s ago: executing program 3 (id=1818): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff14) 7m11.186954165s ago: executing program 3 (id=1822): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="fabb5c00000000e60a573d1e77e221d09c43f10f33", @ANYRES32, @ANYBLOB='\x00'/14], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fcntl$setlease(r0, 0x400, 0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000001300)="80e0cb0a50d1c0841c01fa3f0b1555ae29716dab53fa4e4ab6473907e24f037ff657a7c214f272c977d09c594f39ab36e8d26366377070ea4793dbb528c5486ad32856c357", 0x45}], 0x1) ioctl$VT_RELDISP(r4, 0x5605) 7m10.117316926s ago: executing program 3 (id=1826): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=0x0], 0x1, 0x14c, &(0x7f00000001c0)="$eJzszzFLOgEYx/Hf/e+Uf6VRYGANIjR0FOZ1Yk0NGklCelC4NAl2UaAZCdGotDYEjTVYruJbsCwC64SwN9FyW9AUF+cdlGP777PofZ+Hh7v11Z6MMCDCsVYuHR3rlYq+G97SDlPb7+12wu5eAP+H5s7+XQLYt38lwKwBdn7wA3sHRX2xUC7az2YCkAEkx5yuwNkdtVvAaUsQBLMGEbNAZ8ppqrsn/2oxt81IQPjr5551A8zZ9yaddgXgA8Dp9ULLg6xhWZYFPHXczxz05nPW6KYj8yH9XE1NN3xBETn98RZJwZ6/RbuR12ir2e8ZmU0to/ViqrocUyRFife1FyMdr15A2vCdADvC8D0vgiEpB5wJwOVgZt4LfgCd+qdWGl+pu+9QHXH/FPJBTyMfmPgHUYYAIiIiIiIiIiIiIiIiIiKiv/oOAAD//0rtZa4=") r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000300)) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x60}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c00018006000600800a000000010280f90014"], 0x124}}, 0xc000) 7m7.337082969s ago: executing program 3 (id=1829): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) 7m5.078453673s ago: executing program 3 (id=1833): socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2000, 0x1a8) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x11, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="4ab9", 0x2}], 0x1) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) 7m2.481218443s ago: executing program 3 (id=1839): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c890}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x20000040) sendto$inet6(r5, 0x0, 0x0, 0xe0, 0x0, 0x0) close(0x4) 6m47.05810872s ago: executing program 42 (id=1839): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c890}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x20000040) sendto$inet6(r5, 0x0, 0x0, 0xe0, 0x0, 0x0) close(0x4) 4.798986398s ago: executing program 1 (id=3723): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1}, 0x20000801) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)='x', 0x1}], 0x1}, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)}, 0x40002000) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 3.881434046s ago: executing program 0 (id=3734): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f000000a380)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) read(0xffffffffffffffff, &(0x7f0000001400)=""/4096, 0x1000) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x1}}, 0x18) 3.870444326s ago: executing program 1 (id=3735): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) write$cgroup_pid(r2, 0x0, 0x0) 3.846571656s ago: executing program 1 (id=3736): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) 3.808898997s ago: executing program 1 (id=3737): unshare(0x24020400) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x814400, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.725466759s ago: executing program 1 (id=3738): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_io_uring_submit(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.725055489s ago: executing program 0 (id=3740): syz_emit_ethernet(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xc) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x40000000015, 0x5, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 3.094152701s ago: executing program 0 (id=3749): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044) 2.835557166s ago: executing program 8 (id=3752): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x28) 2.234728198s ago: executing program 8 (id=3760): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x550e, &(0x7f0000005980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143042, 0x2a0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f00000001c0)='=', 0x1, 0x8) lseek(r0, 0x2, 0x4) 2.169460989s ago: executing program 0 (id=3761): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) unshare(0x24040000) unshare(0x2c020400) 2.136190239s ago: executing program 0 (id=3762): syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40), 0xff, 0x4b7, &(0x7f0000000640)="$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") r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfbba, 0x0, 0x1}, &(0x7f0000000480)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 1.993447382s ago: executing program 0 (id=3764): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0x8, 0x1}}}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x141, 0x7, 0x3, 0x5, 0x8, 0x72}, 0x14e, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.57455271s ago: executing program 8 (id=3769): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 1.501919092s ago: executing program 8 (id=3770): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001c40)=ANY=[@ANYBLOB='time_offset=0x0000000800000007,discard,time_offset=0x00000000000000fd,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESHEX=0xee01, @ANYBLOB=',\x00'], 0x80, 0x1503, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x800) fanotify_mark(r1, 0x1, 0x4800003a, r0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r2, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) 1.373414484s ago: executing program 8 (id=3771): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x91ea6c1af182532) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x3, 0x7}]}) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) r1 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r1}) 1.210122748s ago: executing program 6 (id=3776): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="002222000000962313068c58070900be00070c0000002a001e830000"], 0x0}, 0x0) 636.418108ms ago: executing program 6 (id=3777): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x650ce4b086bd44cb) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, 0x0) 496.320021ms ago: executing program 2 (id=3779): r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa400080a) rmdir(&(0x7f0000000100)='./control\x00') 474.407171ms ago: executing program 6 (id=3780): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x10101) 419.786453ms ago: executing program 1 (id=3781): r0 = syz_usb_connect(0x0, 0x28, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x33, 0xcc, 0x99, 0x20, 0x1b3d, 0x1a6, 0x2c6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x0, 0xf6, 0xdb, 0x78, 0x0, [@generic={0x2, 0xd}, @generic={0x2}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x40, 0x23, 0x2, {0x2, 0x30}}, 0x0}, &(0x7f0000000800)={0x1c, &(0x7f00000006c0)={0x0, 0xb, 0x4, "03f26a59"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x20, 0x18, 0x2, "1036"}, 0x0, 0x0, 0x0, 0x0}) 419.291342ms ago: executing program 8 (id=3782): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 325.445074ms ago: executing program 2 (id=3783): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f00000002c0)={0x8000000000000000, 0x5, 0x1, 0xc05}) mq_getsetattr(r0, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r0, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 280.359085ms ago: executing program 6 (id=3784): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[], 0x1, 0xa27, &(0x7f00000029c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 270.896415ms ago: executing program 2 (id=3785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000100000000000000001000000003f00"]) 165.501617ms ago: executing program 6 (id=3786): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 165.364157ms ago: executing program 2 (id=3787): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='cdg\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) 118.283358ms ago: executing program 6 (id=3788): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 116.077788ms ago: executing program 2 (id=3789): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480b6f4276433eec67beef368c238bba859d2f4f4c28ab94a65821f55045e540914677befa72c", 0x350}], 0x1, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0xff1f, 0x8000000}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000700)=@req3={0x6, 0x0, 0x7, 0x8, 0x2, 0x1, 0x1}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=3790): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x650ce4b086bd44cb) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, 0x0) kernel console output (not intermixed with test programs): uid=0 gid=0 ses=4294967295 subj=unconfined pid=11786 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe925b7bba9 code=0x7ffc0000 [ 486.519630][T11784] team0: Port device team_slave_1 removed [ 486.519863][ T26] audit: type=1326 audit(1757642458.024:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11786 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe925b7bba9 code=0x7ffc0000 [ 486.559558][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.567757][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.607216][T11784] bond1: (slave macvlan2): Releasing active interface [ 487.521042][T11785] team0: Mode changed to "activebackup" [ 487.672237][T11813] loop0: detected capacity change from 0 to 4096 [ 488.022099][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1777'. [ 489.391313][T11813] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 489.425596][T11831] sp0: Synchronizing with TNC [ 489.598239][T11824] [U] [ 492.243741][T11852] Process accounting resumed [ 492.882750][T11391] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 492.931166][T11391] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 493.008318][T11391] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 495.961655][T11883] loop3: detected capacity change from 0 to 128 [ 495.992334][T11883] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 496.025309][T11885] loop2: detected capacity change from 0 to 128 [ 497.635855][T11885] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 498.983193][ T4291] Bluetooth: hci5: command 0x0406 tx timeout [ 499.008847][T11885] hpfs: filesystem error: improperly stopped [ 499.028147][T11885] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 499.341773][T11910] hub 6-0:1.0: USB hub found [ 499.348255][T11910] hub 6-0:1.0: 1 port detected [ 499.641390][T11885] hpfs: You really don't want any checks? You are crazy... [ 499.881115][T11885] hpfs: hpfs_map_sector(): read error [ 499.886627][T11885] hpfs: code page support is disabled [ 500.161003][T11885] hpfs: hpfs_map_4sectors(): unaligned read [ 500.168641][T11885] hpfs: hpfs_map_4sectors(): unaligned read [ 500.254339][T11885] hpfs: filesystem error: unable to find root dir [ 500.857939][T11928] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 501.291760][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.494439][T11934] tipc: Enabled bearer , priority 0 [ 501.513467][T11934] device syzkaller0 entered promiscuous mode [ 501.545197][T11934] tipc: Resetting bearer [ 501.551222][ T4574] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 501.649218][T11933] tipc: Resetting bearer [ 501.676654][T11933] tipc: Disabling bearer [ 501.715927][T11939] netlink: 'syz.1.1807': attribute type 39 has an invalid length. [ 502.531005][ T4574] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 502.564275][ T4574] usb 3-1: config 0 interface 0 has no altsetting 0 [ 502.775701][ T4574] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 502.806549][ T4574] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 502.923547][ T4574] usb 3-1: Product: syz [ 503.217064][ T4574] usb 3-1: Manufacturer: syz [ 503.268204][ T26] audit: type=1326 audit(1757642476.204:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.6.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa360167ba9 code=0x7ffc0000 [ 503.350350][ T4574] usb 3-1: SerialNumber: syz [ 503.840023][ T4574] usb 3-1: config 0 descriptor?? [ 503.861735][T11959] tipc: Enabling of bearer rejected, failed to enable media [ 503.862704][ T26] audit: type=1326 audit(1757642476.204:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.6.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa360167ba9 code=0x7ffc0000 [ 503.910954][ T4249] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 504.011137][ T4574] usb 3-1: can't set config #0, error -71 [ 504.021258][ T4574] usb 3-1: USB disconnect, device number 5 [ 504.221050][ T26] audit: type=1326 audit(1757642476.214:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.6.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa360167ba9 code=0x7ffc0000 [ 504.321906][T11971] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 504.333700][T11971] CIFS mount error: No usable UNC path provided in device string! [ 504.333700][T11971] [ 504.344070][T11971] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 505.031076][ T4249] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.358515][T11975] loop2: detected capacity change from 0 to 4096 [ 506.217952][ T26] audit: type=1326 audit(1757642476.214:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.6.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa360167ba9 code=0x7ffc0000 [ 506.249368][ T4249] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 506.258938][ T4249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.291826][ T4249] usb 4-1: config 0 descriptor?? [ 506.302291][T11983] loop3: detected capacity change from 0 to 1024 [ 506.311152][ T4249] usb 4-1: can't set config #0, error -71 [ 506.312279][ T26] audit: type=1326 audit(1757642476.214:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.6.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa360167ba9 code=0x7ffc0000 [ 506.318054][ T4249] usb 4-1: USB disconnect, device number 10 [ 506.433022][ T26] audit: type=1326 audit(1757642476.224:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.6.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa360167ba9 code=0x7ffc0000 [ 506.461041][ T26] audit: type=1326 audit(1757642476.224:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.6.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa360167ba9 code=0x7ffc0000 [ 506.487235][ T26] audit: type=1326 audit(1757642476.224:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.6.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa360167ba9 code=0x7ffc0000 [ 506.504932][T11986] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 508.781745][ T4291] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 509.010750][T12007] loop3: detected capacity change from 0 to 16 [ 509.081428][T12007] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 509.261331][ T4291] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 509.627438][ T4291] usb 7-1: config 0 interface 0 has no altsetting 0 [ 509.638137][ T26] audit: type=1800 audit(1757642482.594:112): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1819" name="bus" dev="ramfs" ino=60043 res=0 errno=0 [ 509.825832][T10031] udevd[10031]: incorrect cramfs checksum on /dev/loop3 [ 511.630990][ T4291] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 511.750929][ T4291] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 511.861029][ T4291] usb 7-1: Product: syz [ 511.865548][ T4291] usb 7-1: Manufacturer: syz [ 511.872013][ T4291] usb 7-1: config 0 descriptor?? [ 511.901981][ T4291] usb 7-1: can't set config #0, error -71 [ 511.923795][T11929] udevd[11929]: incorrect cramfs checksum on /dev/loop3 [ 511.931064][ T4291] usb 7-1: USB disconnect, device number 3 [ 512.844970][T12026] loop6: detected capacity change from 0 to 40427 [ 513.656338][T12026] F2FS-fs (loop6): invalid crc value [ 513.759209][T12026] F2FS-fs (loop6): Found nat_bits in checkpoint [ 513.786252][T12026] F2FS-fs (loop6): Start checkpoint disabled! [ 513.812710][T12026] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 515.184513][T12048] fuse: Unknown parameter '0x0000000000000008' [ 515.856936][T12047] loop0: Can't mount, would change RO state [ 516.481389][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 516.494902][T12056] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 516.627896][ T6042] attempt to access beyond end of device [ 516.627896][ T6042] loop6: rw=2049, want=40968, limit=40427 [ 516.776939][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 516.793763][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 516.839614][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 517.403426][ T9] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 517.674061][ T4291] vxcan1 speed is unknown, defaulting to 1000 [ 517.693901][T12061] infiniband syz2: set active [ 517.699499][T12061] infiniband syz2: added vxcan1 [ 517.778009][T12061] RDS/IB: syz2: added [ 517.783969][T12061] smc: adding ib device syz2 with port count 1 [ 517.790621][T12061] smc: ib device syz2 port 1 has pnetid [ 518.200241][ T5186] vxcan1 speed is unknown, defaulting to 1000 [ 518.428925][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 519.780448][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 519.853294][T12092] loop0: detected capacity change from 0 to 128 [ 519.991742][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 520.078797][T12100] misc userio: No port type given on /dev/userio [ 520.210893][T12100] loop2: detected capacity change from 0 to 4096 [ 520.251800][T12102] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 520.482076][T12092] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 520.576075][T12092] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.904266][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 522.880650][T12117] device team0 entered promiscuous mode [ 523.012172][T12119] tipc: Enabled bearer , priority 0 [ 523.037281][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1852'. [ 523.055015][T12121] device team0 left promiscuous mode [ 524.550212][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 524.559219][T12115] tipc: Resetting bearer [ 524.575547][T12129] loop0: detected capacity change from 0 to 4096 [ 524.621726][T12115] tipc: Disabling bearer [ 524.715706][T12129] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 528.082316][T12157] loop2: detected capacity change from 0 to 512 [ 528.385432][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 528.468013][T12157] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1865: casefold flag without casefold feature [ 528.491517][T12157] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1865: couldn't read orphan inode 15 (err -117) [ 528.505653][T12157] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 529.897465][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 530.115929][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 530.833076][T12191] sp0: Synchronizing with TNC [ 531.369214][T12185] [U] [ 532.101898][T12199] tipc: Enabled bearer , priority 0 [ 532.299188][T12203] hub 6-0:1.0: USB hub found [ 532.307409][T12203] hub 6-0:1.0: 1 port detected [ 533.173622][T12199] device syzkaller0 entered promiscuous mode [ 533.621576][T12204] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1877'. [ 533.774315][T12212] loop6: detected capacity change from 0 to 512 [ 533.819182][T12197] tipc: Resetting bearer [ 534.154505][T12197] tipc: Disabling bearer [ 534.221111][T12212] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1880: casefold flag without casefold feature [ 534.301103][T12212] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1880: couldn't read orphan inode 15 (err -117) [ 534.691400][T12212] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 536.505976][ T9] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.591217][T12242] loop0: detected capacity change from 0 to 1024 [ 536.611326][T12225] vxcan1 speed is unknown, defaulting to 1000 [ 536.632971][T12242] hfsplus: unable to parse mount options [ 536.937179][ T9] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.869558][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 539.826926][T12256] loop6: detected capacity change from 0 to 128 [ 540.100087][ T4568] Bluetooth: hci0: command 0x041b tx timeout [ 540.104270][T12256] qnx6: invalid mount options. [ 540.174383][ T9] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.283829][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1893'. [ 540.464147][ T9] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.383907][T12274] loop0: detected capacity change from 0 to 16 [ 541.407592][T12264] bridge1: port 1(veth3) entered blocking state [ 541.420982][T12264] bridge1: port 1(veth3) entered disabled state [ 541.433378][T12274] erofs: (device loop0): mounted with root inode @ nid 36. [ 541.438733][T12264] device veth3 entered promiscuous mode [ 541.467179][ T4199] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 541.494552][T12274] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 541.506019][T12277] x_tables: duplicate underflow at hook 1 [ 541.521569][ T26] audit: type=1800 audit(1757642514.474:113): pid=12274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1896" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 541.940884][T12283] overlayfs: failed to clone upperpath [ 542.648492][T11735] Bluetooth: hci0: command 0x040f tx timeout [ 543.452993][T12225] chnl_net:caif_netlink_parms(): no params data found [ 543.688286][ T9] tipc: Left network mode [ 543.898742][T12297] input: syz1 as /devices/virtual/input/input11 [ 545.103007][ T5187] Bluetooth: hci0: command 0x0419 tx timeout [ 545.349200][T12225] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.475708][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.484719][T12225] device bridge_slave_0 entered promiscuous mode [ 545.493231][T12225] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.500299][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.508563][T12225] device bridge_slave_1 entered promiscuous mode [ 546.613495][T12225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.664631][T12225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.514484][T12225] team0: Port device team_slave_0 added [ 548.531924][T12338] loop2: detected capacity change from 0 to 40427 [ 548.542986][T12225] team0: Port device team_slave_1 added [ 548.799949][T12338] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 548.807206][T12338] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 548.852612][T12338] F2FS-fs (loop2): invalid crc value [ 549.011543][T12338] F2FS-fs (loop2): Found nat_bits in checkpoint [ 549.118374][T12338] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 549.125554][T12338] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 549.263124][T12225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.314196][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.380088][T12225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.597791][T12225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.628013][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.741236][T12225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.897484][T12225] device hsr_slave_0 entered promiscuous mode [ 549.924450][T12225] device hsr_slave_1 entered promiscuous mode [ 549.941530][T12225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.949102][T12225] Cannot create hsr debugfs directory [ 551.731312][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 551.740227][T12374] netlink: 'syz.1.1928': attribute type 2 has an invalid length. [ 551.748076][T12374] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1928'. [ 551.767594][T12373] device team0 entered promiscuous mode [ 551.775601][T12373] device team_slave_0 entered promiscuous mode [ 551.791192][T12373] device team_slave_1 entered promiscuous mode [ 551.823545][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 551.899210][T12375] device team0 left promiscuous mode [ 551.910042][T12375] device team_slave_0 left promiscuous mode [ 551.928098][T12375] device team_slave_1 left promiscuous mode [ 552.165847][T12375] team0 (unregistering): Port device team_slave_0 removed [ 552.259075][T12375] team0 (unregistering): Port device team_slave_1 removed [ 553.173176][T12388] tipc: Enabled bearer , priority 0 [ 553.253255][T12385] device syzkaller0 entered promiscuous mode [ 553.778562][T12394] tipc: Resetting bearer [ 553.883231][T12384] tipc: Resetting bearer [ 553.896211][T12384] tipc: Disabling bearer [ 553.908716][ T9] device hsr_slave_0 left promiscuous mode [ 553.916601][ T9] device hsr_slave_1 left promiscuous mode [ 553.924199][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.941024][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.971503][ T9] device bridge_slave_1 left promiscuous mode [ 553.977724][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.006430][ T9] device bridge_slave_0 left promiscuous mode [ 554.016258][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.035455][T12390] loop0: detected capacity change from 0 to 512 [ 554.074327][ T9] rdma_rxe: ignoring netdev event = 10 for vxcan1 [ 554.083260][ T9] device veth1_macvtap left promiscuous mode [ 554.089385][ T9] device veth0_macvtap left promiscuous mode [ 554.096249][ T9] device veth1_vlan left promiscuous mode [ 554.102224][ T9] device veth0_vlan left promiscuous mode [ 554.193542][ T9] infiniband syz2: set down [ 554.264923][T12390] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 554.797575][ T9] team0 (unregistering): Port device team_slave_1 removed [ 554.923452][ T9] team0 (unregistering): Port device team_slave_0 removed [ 554.948241][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.979641][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.034028][ T8497] smc: removing ib device syz2 [ 555.126208][ T9] bond0 (unregistering): Released all slaves [ 555.892194][ T5187] vxcan1 speed is unknown, defaulting to 1000 [ 556.698258][T12418] loop2: detected capacity change from 0 to 256 [ 556.739284][T12416] tipc: Enabled bearer , priority 0 [ 556.796727][T12416] device syzkaller0 entered promiscuous mode [ 556.812245][T12416] tipc: Resetting bearer [ 556.819232][T12225] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 557.144991][T12415] tipc: Resetting bearer [ 557.220610][T12415] tipc: Disabling bearer [ 557.229029][T12418] FAT-fs (loop2): Directory bread(block 64) failed [ 557.341396][T12418] FAT-fs (loop2): Directory bread(block 65) failed [ 557.438282][T12418] FAT-fs (loop2): Directory bread(block 66) failed [ 557.445840][T12418] FAT-fs (loop2): Directory bread(block 67) failed [ 557.452790][T12418] FAT-fs (loop2): Directory bread(block 68) failed [ 557.459655][T12418] FAT-fs (loop2): Directory bread(block 69) failed [ 557.466718][T12418] FAT-fs (loop2): Directory bread(block 70) failed [ 557.474211][T12418] FAT-fs (loop2): Directory bread(block 71) failed [ 557.481113][T12418] FAT-fs (loop2): Directory bread(block 72) failed [ 557.487893][T12418] FAT-fs (loop2): Directory bread(block 73) failed [ 557.581346][T12225] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 557.611339][T12423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1934'. [ 557.620479][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'. [ 557.646682][T12225] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 557.723897][T12225] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 558.005878][T12427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1935'. [ 560.739411][T12225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.498732][T10450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 561.517819][T10450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 561.546186][T12225] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.605967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 561.623474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 561.733350][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.740482][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.819770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 561.873017][T12473] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 561.961319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 562.010576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 562.072354][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.079464][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.087565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 562.114021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 562.148370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 562.598672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 562.629855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 562.639168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 562.801484][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.847163][T12225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 562.858847][T12225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 563.465069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 563.640353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 563.670626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 563.743350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 563.770165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 563.784050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 564.616608][T12506] loop6: detected capacity change from 0 to 512 [ 564.662218][T12512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1955'. [ 564.694998][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 564.758882][T12506] EXT4-fs (loop6): Ignoring removed oldalloc option [ 564.802772][T12506] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 565.036615][T12506] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.1954: invalid indirect mapped block 4294967295 (level 0) [ 565.056898][T12225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.069903][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 565.077477][T12506] EXT4-fs (loop6): Remounting filesystem read-only [ 565.085521][T12506] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.1954: invalid indirect mapped block 4294967295 (level 1) [ 565.109509][T12506] EXT4-fs (loop6): Remounting filesystem read-only [ 565.118107][T12506] EXT4-fs (loop6): 1 orphan inode deleted [ 565.134587][T12506] EXT4-fs (loop6): 1 truncate cleaned up [ 565.140400][T12506] EXT4-fs (loop6): mounted filesystem without journal. Opts: oldalloc,errors=remount-ro,init_itable,block_validity,block_validity,quota,. Quota mode: writeback. [ 565.190612][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 566.398863][T12534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1959'. [ 567.631402][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 567.692664][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 567.779682][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 567.877691][T12555] 9pnet: Insufficient options for proto=fd [ 567.884677][T12555] fuse: Bad value for 'fd' [ 567.897480][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 567.906462][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 567.914560][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 567.946979][T12225] device veth0_vlan entered promiscuous mode [ 568.193017][T12225] device veth1_vlan entered promiscuous mode [ 568.802413][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 568.852199][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 568.871045][ T4568] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 568.967193][T12225] device veth0_macvtap entered promiscuous mode [ 569.079753][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 569.210896][ T4568] usb 3-1: Using ep0 maxpacket: 8 [ 569.521621][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 569.541236][ T4568] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 569.577643][ T4568] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 569.582660][T12225] device veth1_macvtap entered promiscuous mode [ 569.668489][ T4568] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 569.678980][ T4568] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 569.680030][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 569.692226][ T4568] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 569.710244][ T4568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.773983][T12574] loop6: detected capacity change from 0 to 1024 [ 569.792040][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 569.809370][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.868753][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.884954][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.896048][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.906963][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.927024][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.984621][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.020950][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.049023][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.079468][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.095561][T12225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.103215][T12574] EXT4-fs (loop6): Ignoring removed bh option [ 570.109454][ T4568] usb 3-1: GET_CAPABILITIES returned 0 [ 570.117520][ T4568] usbtmc 3-1:16.0: can't read capabilities [ 570.126652][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 570.138866][T12574] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e118, mo2=0000] [ 570.147158][T12574] System zones: 0-1, 3-12 [ 570.170322][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 570.225813][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.266999][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.397541][T12574] EXT4-fs error (device loop6): ext4_map_blocks:739: inode #3: block 1: comm syz.6.1970: lblock 1 mapped to illegal pblock 1 (length 1) [ 570.413077][T12574] Quota error (device loop6): write_blk: dquota write failed [ 570.420738][T12574] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 570.431076][T12574] EXT4-fs error (device loop6): ext4_acquire_dquot:6209: comm syz.6.1970: Failed to acquire dquot type 0 [ 570.446289][T12574] EXT4-fs error (device loop6): ext4_free_blocks:6218: comm syz.6.1970: Freeing blocks not in datazone - block = 0, count = 4096 [ 570.464569][T12574] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.1970: Invalid inode bitmap blk 0 in block_group 0 [ 570.480751][T12574] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 570.489677][T12574] EXT4-fs (loop6): 1 orphan inode deleted [ 570.495444][T12574] EXT4-fs (loop6): mounted filesystem without journal. Opts: ; norecovery,lazytime,bh,nogrpid,debug,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 570.568242][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.576730][ T6042] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 570.601026][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.612443][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.634412][ T5186] usb 3-1: USB disconnect, device number 6 [ 570.651349][T12574] EXT4-fs error (device loop6): ext4_search_dir:1549: inode #2: block 16: comm syz.6.1970: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 570.702271][ T6042] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 570.719205][ T6042] EXT4-fs error (device loop6): ext4_release_dquot:6245: comm kworker/u4:11: Failed to release dquot type 0 [ 570.721131][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.756270][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.767175][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.850588][T12225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.960958][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 571.081590][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 571.206588][T12225] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.232531][T12225] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.480572][T12225] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.490268][T12225] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.522753][T12598] loop6: detected capacity change from 0 to 40427 [ 571.642625][T12598] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 571.649608][T12598] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 571.725468][T12598] F2FS-fs (loop6): invalid crc value [ 571.832892][T12598] F2FS-fs (loop6): Found nat_bits in checkpoint [ 572.090944][T12598] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 572.098071][T12598] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 572.633303][T12614] loop2: detected capacity change from 0 to 512 [ 573.064134][T12614] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 573.522936][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 573.552989][T12621] device vlan2 entered promiscuous mode [ 573.558564][T12621] device batadv0 entered promiscuous mode [ 573.607057][T10450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.588415][T10450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.788333][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.798664][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 574.895686][T12636] binder_alloc: 12633: binder_alloc_buf, no vma [ 575.062410][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.200995][T11735] Bluetooth: hci3: command 0x0406 tx timeout [ 575.424164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 575.546128][T12646] loop6: detected capacity change from 0 to 256 [ 575.645369][T12646] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 575.791246][T12646] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 576.851411][T12654] loop2: detected capacity change from 0 to 4096 [ 576.887654][T12646] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 576.919657][T12654] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 576.948779][T12654] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 576.959655][T12654] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 576.971788][T12654] ntfs: (device loop2): read_ntfs_boot_sector(): Using backup boot sector. [ 576.998636][T12654] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 577.007798][T12654] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 577.027979][T12654] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 577.041029][T12654] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 577.061441][T12654] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 577.070313][T12654] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 577.101470][T12654] ntfs: volume version 3.1. [ 595.315781][T12783] binder_alloc: 12781: binder_alloc_buf, no vma [ 595.349446][T12786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.155616][T12833] tipc: Started in network mode [ 601.211217][T12833] tipc: Node identity 2a45aab37136, cluster identity 4711 [ 601.218451][T12833] tipc: Enabled bearer , priority 0 [ 601.755346][T12838] device syzkaller0 entered promiscuous mode [ 602.785963][ T1107] tipc: Node number set to 1534306995 [ 602.859102][T12831] tipc: Resetting bearer [ 602.942557][T12831] tipc: Disabling bearer [ 603.273109][T12873] loop2: detected capacity change from 0 to 512 [ 604.475714][T12873] EXT4-fs (loop2): Unrecognized mount option "rootcontext=system_u" or missing value [ 605.410654][T12886] loop8: detected capacity change from 0 to 256 [ 605.460041][T12886] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 605.503933][T12886] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 605.574823][T12887] loop2: detected capacity change from 0 to 4096 [ 605.609497][T12887] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 605.660870][T12886] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 605.708908][T12887] EXT4-fs (loop2): Test dummy encryption mode enabled [ 607.562669][T12887] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 609.873996][T12911] loop0: detected capacity change from 0 to 2048 [ 610.105477][T12911] NILFS (loop0): invalid segment: Inconsistency found [ 610.131321][T12911] NILFS (loop0): trying rollback from an earlier position [ 610.229557][T12911] NILFS (loop0): recovery complete [ 611.380223][T12911] NILFS (loop0): error -4 creating segctord thread [ 612.599072][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2062'. [ 612.620662][T12948] IPVS: Error joining to the multicast group [ 614.631843][T12967] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2071'. [ 615.053969][T12971] wg2 speed is unknown, defaulting to 1000 [ 615.079591][T12971] wg2 speed is unknown, defaulting to 1000 [ 615.094600][T12971] wg2 speed is unknown, defaulting to 1000 [ 615.318085][T12971] infiniband syz2: set active [ 615.322839][T12971] infiniband syz2: added wg2 [ 615.334986][T12971] infiniband syz2: Couldn't open port 1 [ 615.347335][T12601] wg2 speed is unknown, defaulting to 1000 [ 615.357106][T12971] RDS/IB: syz2: added [ 615.361343][T12971] smc: adding ib device syz2 with port count 1 [ 615.367749][T12971] smc: ib device syz2 port 1 has pnetid [ 615.378379][T12971] wg2 speed is unknown, defaulting to 1000 [ 615.403464][ T5180] wg2 speed is unknown, defaulting to 1000 [ 616.015965][T12971] wg2 speed is unknown, defaulting to 1000 [ 616.107018][T12971] wg2 speed is unknown, defaulting to 1000 [ 616.196312][T12971] wg2 speed is unknown, defaulting to 1000 [ 616.396095][T12971] wg2 speed is unknown, defaulting to 1000 [ 616.486126][T12971] wg2 speed is unknown, defaulting to 1000 [ 616.574537][T12971] wg2 speed is unknown, defaulting to 1000 [ 616.673392][T12971] wg2 speed is unknown, defaulting to 1000 [ 616.764208][T12971] wg2 speed is unknown, defaulting to 1000 [ 622.274774][T13023] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2084'. [ 622.319498][T13026] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2085'. [ 623.358964][T13034] loop0: detected capacity change from 0 to 64 [ 623.702527][T13036] loop2: detected capacity change from 0 to 2048 [ 624.008366][T13036] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 624.231561][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.602573][T13033] Set syz1 is full, maxelem 65536 reached [ 625.518753][ T4191] Process accounting resumed [ 625.804903][T13054] loop0: detected capacity change from 0 to 2048 [ 626.026231][T13061] device bridge1 entered promiscuous mode [ 626.805486][T13054] NILFS (loop0): invalid segment: Inconsistency found [ 626.880952][T13054] NILFS (loop0): trying rollback from an earlier position [ 626.938146][T13054] NILFS (loop0): recovery complete [ 626.982604][T13065] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 629.443291][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2100'. [ 631.994638][T13107] loop0: detected capacity change from 0 to 512 [ 632.698949][T13119] overlayfs: failed to clone upperpath [ 632.898550][T13107] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.2106: bad orphan inode 11862016 [ 633.008041][T13107] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 633.036089][T13107] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.266971][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 634.266987][ T26] audit: type=1804 audit(1757642607.224:114): pid=13107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2106" name="/newroot/72/file1/file1" dev="loop0" ino=18 res=1 errno=0 [ 637.155547][T13173] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20003 [ 637.354246][T13157] loop8: detected capacity change from 0 to 40427 [ 638.475680][T13157] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 638.483505][T13157] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 638.498044][T13157] F2FS-fs (loop8): invalid crc value [ 638.606883][T13157] F2FS-fs (loop8): Found nat_bits in checkpoint [ 638.722649][T13195] loop0: detected capacity change from 0 to 64 [ 638.768324][T13157] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 638.775533][T13157] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 639.708340][ T26] audit: type=1800 audit(1757642612.234:115): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2118" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 639.789725][T13195] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 640.016976][T13195] BFS-fs: bfs_fill_super(): Last block not available on loop0: 4139327 [ 641.404839][T12225] attempt to access beyond end of device [ 641.404839][T12225] loop8: rw=2049, want=40968, limit=40427 [ 644.693534][ T26] audit: type=1326 audit(1757642616.644:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 644.847943][ T26] audit: type=1326 audit(1757642616.644:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 644.887037][ T26] audit: type=1326 audit(1757642616.644:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 645.030632][ T26] audit: type=1326 audit(1757642616.644:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 645.160904][ T26] audit: type=1326 audit(1757642616.644:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 645.274344][ T26] audit: type=1326 audit(1757642616.644:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 645.397978][ T26] audit: type=1326 audit(1757642616.644:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 645.499780][ T26] audit: type=1326 audit(1757642616.644:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 645.574013][ T26] audit: type=1326 audit(1757642616.644:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 645.597514][ T26] audit: type=1326 audit(1757642616.644:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 645.648952][ T26] audit: type=1326 audit(1757642616.644:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.2.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 646.578447][T11735] Process accounting resumed [ 648.005983][T13262] loop0: detected capacity change from 0 to 128 [ 650.642970][T13269] kAFS: No cell specified [ 651.542446][T13300] hub 9-0:1.0: USB hub found [ 651.549094][T13300] hub 9-0:1.0: 1 port detected [ 652.397496][T13310] loop0: detected capacity change from 0 to 512 [ 652.831675][T13310] EXT4-fs (loop0): Ignoring removed orlov option [ 652.838163][T13310] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 653.002267][T13310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 653.053495][T13310] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.2154: corrupted in-inode xattr [ 653.131789][T13310] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2154: couldn't read orphan inode 15 (err -117) [ 653.151972][T13310] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 654.059730][T13314] loop8: detected capacity change from 0 to 32768 [ 654.372968][T13314] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 654.464542][T13314] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 654.532474][T13335] loop0: detected capacity change from 0 to 2048 [ 654.625581][T13335] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 656.793598][T12225] ocfs2: Unmounting device (7,8) on (node local) [ 657.249289][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2168'. [ 657.258679][T13362] IPVS: Error joining to the multicast group [ 657.678684][T13365] loop2: detected capacity change from 0 to 256 [ 658.187794][T13364] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 658.196284][T13364] FAT-fs (loop2): Filesystem has been set read-only [ 660.614573][T13396] loop2: detected capacity change from 0 to 8 [ 662.887935][ T4573] Bluetooth: hci0: command 0x0406 tx timeout [ 663.849118][ T4568] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 664.056596][ T4291] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 665.144887][T13433] wg2 speed is unknown, defaulting to 1000 [ 665.960940][ T4291] usb 9-1: Using ep0 maxpacket: 8 [ 666.031144][ T4291] usb 9-1: device descriptor read/all, error -71 [ 666.051646][ T4568] usb 1-1: device descriptor read/all, error -71 [ 669.673156][T13478] loop8: detected capacity change from 0 to 512 [ 671.708772][T13478] EXT4-fs (loop8): mounted filesystem without journal. Opts: sb=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 671.731142][T13478] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.139859][T10450] tipc: Left network mode [ 674.295924][T10450] bond1: (slave ip6gretap1): Removing an active aggregator [ 674.411372][T13520] loop8: detected capacity change from 0 to 512 [ 674.536045][T13520] EXT4-fs (loop8): Unrecognized mount option "rootcontext=system_u" or missing value [ 674.869900][T10450] bond1: (slave ip6gretap1): Releasing backup interface [ 676.322923][T13531] loop8: detected capacity change from 0 to 512 [ 679.786999][T13548] loop8: detected capacity change from 0 to 1024 [ 680.046606][T13568] loop0: detected capacity change from 0 to 128 [ 680.976588][T13568] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 681.035129][T13568] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 681.993667][T13589] loop8: detected capacity change from 0 to 512 [ 683.858204][T13589] EXT4-fs error (device loop8): ext4_orphan_get:1427: comm syz.8.2225: bad orphan inode 11862016 [ 683.897888][T13589] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 683.916253][T13589] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.403968][T13609] loop2: detected capacity change from 0 to 256 [ 684.665518][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 684.665533][ T26] audit: type=1804 audit(1757642658.620:140): pid=13589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2225" name="/newroot/38/file1/file1" dev="loop8" ino=18 res=1 errno=0 [ 685.230578][ T26] audit: type=1800 audit(1757642659.020:141): pid=13609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2230" name="file1" dev="loop2" ino=1048720 res=0 errno=0 [ 685.448330][T13615] loop0: detected capacity change from 0 to 32768 [ 685.587034][T13615] gfs2: fsid=__"_z'˱1 I3wx9: Trying to join cluster "lock_nolock", "__"_z'˱1 I3wx9" [ 685.608376][T13615] gfs2: fsid=__"_z'˱1 I3wx9: Now mounting FS (format 1801)... [ 685.634214][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.660718][T13615] gfs2: fsid=__"_z'˱1 I3wx9.s: journal 0 mapped with 16 extents in 0ms [ 685.812204][T13631] loop8: detected capacity change from 0 to 2048 [ 685.901401][T13615] gfs2: fsid=__"_z'˱1 I3wx9.s: first mount done, others may mount [ 685.925989][T10450] device hsr_slave_0 left promiscuous mode [ 688.458738][T10450] device hsr_slave_1 left promiscuous mode [ 688.773634][T10450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.798606][T13672] loop8: detected capacity change from 0 to 512 [ 690.546311][T10450] device bridge_slave_1 left promiscuous mode [ 690.593156][T10450] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.427487][T13672] EXT4-fs error (device loop8): ext4_orphan_get:1427: comm syz.8.2245: bad orphan inode 11862016 [ 691.747593][T13672] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 691.836120][T10450] device bridge_slave_0 left promiscuous mode [ 691.884481][T10450] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.899369][T13672] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.721887][T10450] bond2 (unregistering): Released all slaves [ 693.735731][T10450] bond1 (unregistering): Released all slaves [ 696.841762][T10450] team0 (unregistering): Port device team_slave_1 removed [ 697.016097][T13746] loop8: detected capacity change from 0 to 512 [ 697.398736][T13751] loop2: detected capacity change from 0 to 1024 [ 697.474918][T10450] team0 (unregistering): Port device team_slave_0 removed [ 697.647180][T10450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.677296][T10450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.800733][T13751] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 697.811504][T13751] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.853203][ T26] audit: type=1800 audit(1757642671.810:142): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2264" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 697.890448][T13746] EXT4-fs error (device loop8): ext4_orphan_get:1427: comm syz.8.2265: bad orphan inode 11862016 [ 697.960729][T13746] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 698.009496][T10450] bond0 (unregistering): Released all slaves [ 698.011125][T13746] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.064830][ T26] audit: type=1804 audit(1757642672.020:143): pid=13746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2265" name="/newroot/43/file1/file1" dev="loop8" ino=18 res=1 errno=0 [ 698.170124][T13764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2269'. [ 698.933264][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2271'. [ 698.942392][T13784] IPVS: Error joining to the multicast group [ 699.958671][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2274'. [ 702.108339][T13801] No such timeout policy "syz1" [ 703.635510][T13815] vivid-000: ================= START STATUS ================= [ 703.644225][T13815] vivid-000: Radio HW Seek Mode: Bounded [ 703.650463][T13815] vivid-000: Radio Programmable HW Seek: false [ 703.656706][T13815] vivid-000: RDS Rx I/O Mode: Block I/O [ 703.662294][T13815] vivid-000: Generate RBDS Instead of RDS: false [ 703.668628][T13815] vivid-000: RDS Reception: true [ 703.673602][T13815] vivid-000: RDS Program Type: 0 inactive [ 703.679335][T13815] vivid-000: RDS PS Name: inactive [ 703.684574][T13815] vivid-000: RDS Radio Text: inactive [ 703.690070][T13815] vivid-000: RDS Traffic Announcement: false inactive [ 703.696870][T13815] vivid-000: RDS Traffic Program: false inactive [ 703.703231][T13815] vivid-000: RDS Music: false inactive [ 703.708700][T13815] vivid-000: ================== END STATUS ================== [ 704.834797][T13828] loop0: detected capacity change from 0 to 512 [ 705.069825][T13833] loop2: detected capacity change from 0 to 512 [ 706.556144][T13828] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.2286: bad orphan inode 11862016 [ 706.582167][T13828] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 706.641659][T13828] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.709149][T13851] bond0 speed is unknown, defaulting to 1000 [ 706.715780][T13851] bond0 speed is unknown, defaulting to 1000 [ 706.722171][T13851] bond0 speed is unknown, defaulting to 1000 [ 706.732129][T13851] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 706.745105][T13851] bond0 speed is unknown, defaulting to 1000 [ 706.751618][T13851] bond0 speed is unknown, defaulting to 1000 [ 707.449818][T13851] bond0 speed is unknown, defaulting to 1000 [ 707.456351][T13851] bond0 speed is unknown, defaulting to 1000 [ 707.463067][T13851] bond0 speed is unknown, defaulting to 1000 [ 707.469493][T13851] bond0 speed is unknown, defaulting to 1000 [ 707.475953][T13851] bond0 speed is unknown, defaulting to 1000 [ 707.482401][T13851] bond0 speed is unknown, defaulting to 1000 [ 707.913701][ T26] audit: type=1804 audit(1757642681.870:144): pid=13828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2286" name="/newroot/108/file1/file1" dev="loop0" ino=18 res=1 errno=0 [ 709.013513][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2300'. [ 709.027931][T13884] IPVS: Error joining to the multicast group [ 711.301014][T13905] overlayfs: failed to clone upperpath [ 712.973631][T13915] wg2 speed is unknown, defaulting to 1000 [ 713.333154][T13915] bond0 speed is unknown, defaulting to 1000 [ 713.433206][T13917] loop8: detected capacity change from 0 to 512 [ 714.383897][T13917] EXT4-fs error (device loop8): ext4_orphan_get:1427: comm syz.8.2306: bad orphan inode 11862016 [ 714.429942][T13917] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 714.441505][T13917] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 714.884632][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2312'. [ 714.901227][T13947] IPVS: Error joining to the multicast group [ 716.203430][ T26] audit: type=1804 audit(1757642690.160:145): pid=13917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2306" name="/newroot/49/file1/file1" dev="loop8" ino=18 res=1 errno=0 [ 716.237873][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2314'. [ 717.543664][T13962] loop2: detected capacity change from 0 to 256 [ 718.692188][T13962] FAT-fs (loop2): Unrecognized mount option "uni_xl" or missing value [ 718.859474][T13976] loop0: detected capacity change from 0 to 256 [ 720.515202][T13976] exfat: Unknown parameter 'iocharse|' [ 721.740592][T13995] loop2: detected capacity change from 0 to 512 [ 722.187767][T13997] xt_socket: unknown flags 0x8 [ 722.259600][T13995] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.2327: bad orphan inode 11862016 [ 722.311392][T13995] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 722.411811][T13995] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 723.738934][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2329'. [ 723.749419][T14015] IPVS: Error joining to the multicast group [ 724.088851][ T26] audit: type=1804 audit(1757642698.040:146): pid=13995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2327" name="/newroot/160/file1/file1" dev="loop2" ino=18 res=1 errno=0 [ 724.252853][T14022] delete_channel: no stack [ 724.264552][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2330'. [ 727.035832][T14034] syz.0.2334 (14034): drop_caches: 2 [ 727.142327][T14038] loop2: detected capacity change from 0 to 1024 [ 727.420096][T14043] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2336'. [ 727.432481][T14043] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2336'. [ 727.441546][T14043] netlink: 'syz.1.2336': attribute type 1 has an invalid length. [ 728.178024][T14038] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 728.731732][T14038] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 729.916436][T14065] loop8: detected capacity change from 0 to 8 [ 733.045155][T14091] netlink: 'syz.1.2349': attribute type 28 has an invalid length. [ 733.230118][T14092] loop8: detected capacity change from 0 to 512 [ 734.283996][T14092] EXT4-fs error (device loop8): ext4_orphan_get:1427: comm syz.8.2345: bad orphan inode 11862016 [ 734.324445][T14092] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 734.509328][T14092] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 734.655303][T14119] loop2: detected capacity change from 0 to 512 [ 734.766970][T14124] siw: device registration error -23 [ 735.428521][T14128] loop0: detected capacity change from 0 to 2048 [ 735.465829][ T26] audit: type=1804 audit(2000000000.790:147): pid=14092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2345" name="/newroot/55/file1/file1" dev="loop8" ino=18 res=1 errno=0 [ 735.686461][T14119] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 736.434128][T14119] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.485496][T14128] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 739.542663][T14167] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 741.883015][T14191] loop8: detected capacity change from 0 to 256 [ 742.472241][T14191] exfat: Unknown parameter 'iocharse|' [ 742.784450][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2381'. [ 742.794700][T14193] IPVS: Error joining to the multicast group [ 743.512497][T14209] netlink: 'syz.6.2371': attribute type 1 has an invalid length. [ 746.244613][T14226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2377'. [ 747.228573][T14235] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 747.940238][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.143339][T14226] loop0: detected capacity change from 0 to 32768 [ 749.555775][T14226] (syz.0.2377,14226,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "localalloc=" or missing value [ 749.567767][T14226] (syz.0.2377,14226,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 750.095480][T14256] input: syz1 as /devices/virtual/input/input13 [ 750.458022][T14260] kernel read not supported for file /eth0 (pid: 14260 comm: syz.6.2386) [ 750.470701][ T26] audit: type=1800 audit(2000000015.458:148): pid=14260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2386" name="eth0" dev="mqueue" ino=67202 res=0 errno=0 [ 750.493907][ T5180] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 751.008488][ T5180] usb 3-1: Using ep0 maxpacket: 32 [ 751.976768][T14268] loop0: detected capacity change from 0 to 256 [ 752.408894][ T5180] usb 3-1: device descriptor read/all, error -71 [ 752.730383][T14268] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 752.835448][T14268] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 752.992917][T14268] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 753.090980][T14283] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2389'. [ 753.100412][T14283] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2389'. [ 753.109442][T14283] netlink: 'syz.2.2389': attribute type 1 has an invalid length. [ 756.819173][T14299] fuse: Unknown parameter '00000000000000000000' [ 757.716493][T14309] hub 8-0:1.0: USB hub found [ 757.804434][T14309] hub 8-0:1.0: 1 port detected [ 758.379025][T14321] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 759.482731][T14329] loop0: detected capacity change from 0 to 1024 [ 759.534412][T14329] EXT4-fs (loop0): Ignoring removed orlov option [ 759.540941][T14329] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 760.917398][T14345] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2404'. [ 760.926536][T14345] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2404'. [ 760.935524][T14345] netlink: 'syz.6.2404': attribute type 1 has an invalid length. [ 761.710230][T14329] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,nodelalloc,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 768.299614][T14409] loop8: detected capacity change from 0 to 1024 [ 769.903307][T14422] netlink: 'syz.0.2420': attribute type 3 has an invalid length. [ 769.911237][T14422] netlink: 'syz.0.2420': attribute type 3 has an invalid length. [ 770.706356][T10450] hfsplus: b-tree write err: -5, ino 4 [ 772.527335][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'. [ 772.536545][T14449] IPVS: Error joining to the multicast group [ 780.798161][T14534] loop8: detected capacity change from 0 to 2048 [ 781.266721][T14534] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 781.669436][T14538] loop2: detected capacity change from 0 to 512 [ 781.766695][T14538] EXT4-fs (loop2): Unrecognized mount option "fsuuid=d 6fef [ 781.766695][T14538] c-153b-9U9a-ec i-50e3f538" or missing value [ 783.508460][T14546] loop0: detected capacity change from 0 to 131072 [ 784.363131][T14566] Error parsing options; rc = [-22] [ 784.385471][T14566] loop8: detected capacity change from 0 to 64 [ 785.761992][T14546] F2FS-fs (loop0): Found nat_bits in checkpoint [ 785.803202][T14566] hfs: get root inode failed [ 785.855265][T14546] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 788.571926][T14617] loop2: detected capacity change from 0 to 16 [ 788.624900][T14617] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 790.430013][T14617] loop2: detected capacity change from 0 to 2048 [ 793.831243][T14653] loop0: detected capacity change from 0 to 2048 [ 794.478260][T14656] loop8: detected capacity change from 0 to 40427 [ 794.513735][T14653] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 794.529540][T14656] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x1ffff [ 794.539228][T14656] F2FS-fs (loop8): invalid crc value [ 794.578446][T14656] F2FS-fs (loop8): Found nat_bits in checkpoint [ 794.580953][T14661] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 795.138085][T14656] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 796.546734][T14681] attempt to access beyond end of device [ 796.546734][T14681] loop8: rw=2049, want=53504, limit=40427 [ 799.181346][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2489'. [ 799.194751][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2489'. [ 799.636820][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2488'. [ 799.646037][T14695] IPVS: Error joining to the multicast group [ 801.288140][T14718] loop2: detected capacity change from 0 to 512 [ 801.516639][T14724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 801.581908][T14724] loop8: detected capacity change from 0 to 1024 [ 802.160785][T14724] EXT4-fs (loop8): Ignoring removed nobh option [ 802.167818][T14724] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 802.178116][T14724] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 802.208047][T14718] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.2497: bad orphan inode 11862016 [ 802.268939][T14718] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 802.306909][T14718] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.368196][ T26] audit: type=1804 audit(2000000064.011:149): pid=14718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2497" name="/newroot/185/file1/file1" dev="loop2" ino=18 res=1 errno=0 [ 803.560385][T14741] loop2: detected capacity change from 0 to 64 [ 803.585062][T14741] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop2 [ 805.247182][T14755] loop0: detected capacity change from 0 to 512 [ 808.368241][T14755] EXT4-fs: error -4 creating inode table initialization thread [ 808.715616][T14755] EXT4-fs (loop0): mount failed [ 811.618003][T14813] loop8: detected capacity change from 0 to 512 [ 813.172680][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.589683][T14813] EXT4-fs (loop8): Unrecognized mount option "rootcontext=system_u" or missing value [ 815.615362][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 815.624465][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2526'. [ 815.651157][T14840] loop0: detected capacity change from 0 to 512 [ 815.897483][T14840] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.2529: bad orphan inode 11862016 [ 815.916674][T14840] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 816.313344][T14840] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.453926][ T26] audit: type=1804 audit(2000000077.193:150): pid=14840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2529" name="/newroot/140/file1/file1" dev="loop0" ino=18 res=1 errno=0 [ 816.516293][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.587015][T14866] loop8: detected capacity change from 0 to 512 [ 818.968286][T14866] EXT4-fs (loop8): Unrecognized mount option "rootcontext=system_u" or missing value [ 819.440796][ C1] hrtimer: interrupt took 38855 ns [ 819.595830][T14883] binder: BC_ATTEMPT_ACQUIRE not supported [ 819.601818][T14883] binder: 14879:14883 ioctl c0306201 2000000001c0 returned -22 [ 819.869220][T14883] block device autoloading is deprecated and will be removed. [ 820.413538][T14897] loop2: detected capacity change from 0 to 64 [ 820.983877][T14903] xt_policy: too many policy elements [ 825.691326][T14935] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 826.422544][T14942] loop2: detected capacity change from 0 to 512 [ 827.307912][T14942] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.2551: bad orphan inode 11862016 [ 827.372785][T14942] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 827.440773][T14964] loop8: detected capacity change from 0 to 512 [ 827.447782][T14942] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.506623][T14964] FAT-fs (loop8): bogus number of FAT sectors [ 827.528496][T14964] FAT-fs (loop8): Can't find a valid FAT filesystem [ 827.789207][ T26] audit: type=1804 audit(2000000087.792:151): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2551" name="/newroot/194/file1/file1" dev="loop2" ino=18 res=1 errno=0 [ 827.933087][T14972] loop8: detected capacity change from 0 to 512 [ 828.002010][T14972] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 828.039281][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.098910][T14958] loop0: detected capacity change from 0 to 32768 [ 828.103664][T14972] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.2566: bg 0: block 5: invalid block bitmap [ 828.136934][T14972] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 828.147230][T14972] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2566: invalid indirect mapped block 3 (level 2) [ 828.193233][ T26] audit: type=1326 audit(2000000088.176:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.2.2567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1b0064ba9 code=0x0 [ 828.267632][T14972] EXT4-fs (loop8): 2 truncates cleaned up [ 828.277201][T14972] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,init_itable=0x0000000000000006,dioread_nolock,grpquota,,errors=continue. Quota mode: writeback. [ 828.291067][T14958] XFS (loop0): Mounting V5 Filesystem [ 828.441620][T14958] XFS (loop0): Starting recovery (logdev: internal) [ 828.498530][T14958] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 828.534296][T14958] XFS (loop0): Unmount and run xfs_repair [ 828.552986][T14958] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 828.560570][T14958] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 828.569557][T14958] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 828.578411][T14958] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 828.587701][T14958] 00000030: 00 00 00 00 05 1b 0d 00 02 00 00 00 00 00 00 01 ................ [ 828.596978][T14958] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 828.606088][T14958] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 828.615183][T14958] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 828.627492][T14958] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 828.641870][T14958] XFS (loop0): log mount/recovery failed: error -74 [ 828.750574][T14995] loop2: detected capacity change from 0 to 8 [ 829.152444][T14958] XFS (loop0): log mount failed [ 829.261073][T14995] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 829.398047][T14993] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 829.409497][T14993] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 829.429736][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 830.011865][T15000] loop8: detected capacity change from 0 to 512 [ 830.116575][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 830.226439][T15000] EXT4-fs (loop8): Unrecognized mount option "rootcontext=system_u" or missing value [ 831.024709][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2575'. [ 831.033996][T15005] IPVS: Error joining to the multicast group [ 831.224156][T15015] loop8: detected capacity change from 0 to 512 [ 831.233644][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 831.292796][T15015] EXT4-fs (loop8): Unrecognized mount option "fsuuid=d 6fef [ 831.292796][T15015] c-153b-9U9a-ec i-50e3f538" or missing value [ 831.967998][T14524] udevd[14524]: incorrect cramfs checksum on /dev/loop2 [ 832.113562][ T26] audit: type=1326 audit(2000000091.843:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.1.2583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c94d26ba9 code=0x0 [ 832.291308][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 832.329974][T15035] futex_wake_op: syz.2.2587 tries to shift op by 32; fix this program [ 832.398274][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 834.261901][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 834.373462][T15065] loop0: detected capacity change from 0 to 2048 [ 834.499126][T15067] overlayfs: failed to clone upperpath [ 835.290106][T15061] loop8: detected capacity change from 0 to 512 [ 835.365271][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 835.513760][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 835.523412][T15065] loop0: p1 p3 p4 [ 835.523412][T15065] p1: [ 835.555592][T15061] EXT4-fs error (device loop8): ext4_orphan_get:1427: comm syz.8.2595: bad orphan inode 11862016 [ 835.615001][T15065] loop0: p4 size 589824 extends beyond EOD, truncated [ 835.635369][T15061] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 835.657944][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 835.689732][T15061] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 836.121686][ T3561] loop0: p1 p3 p4 [ 836.121686][ T3561] p1: [ 836.363992][ T3561] loop0: p4 size 589824 extends beyond EOD, truncated [ 836.494634][ T26] audit: type=1804 audit(2000000095.941:154): pid=15061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2595" name="/newroot/103/file1/file1" dev="loop8" ino=18 res=1 errno=0 [ 836.569826][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.535445][T15096] loop0: detected capacity change from 0 to 4096 [ 837.662089][T15096] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 837.707779][T15096] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 837.727286][T15096] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 837.742784][T15104] loop8: detected capacity change from 0 to 512 [ 837.753638][T15096] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 837.783183][T15096] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 837.807124][T15096] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 837.814982][T15096] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 837.823397][T15096] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 837.831551][T15096] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 837.840076][T15096] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00 [ 838.923160][T14524] udevd[14524]: incorrect cramfs checksum on /dev/loop2 [ 838.962254][T14524] udevd[14524]: incorrect cramfs checksum on /dev/loop2 [ 839.899426][T14524] udevd[14524]: incorrect cramfs checksum on /dev/loop2 [ 840.485732][T15138] xt_policy: too many policy elements [ 841.270169][T15104] EXT4-fs: error -4 creating inode table initialization thread [ 841.377137][T15104] EXT4-fs (loop8): mount failed [ 841.377224][T15142] loop0: detected capacity change from 0 to 128 [ 841.430274][T14547] udevd[14547]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 841.430622][T14524] udevd[14524]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 841.452862][T14550] udevd[14550]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 841.466476][T15142] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 841.611907][T15149] udevd[15149]: incorrect cramfs checksum on /dev/loop2 [ 841.640762][T15142] hpfs: filesystem error: improperly stopped [ 841.654433][T15149] udevd[15149]: incorrect cramfs checksum on /dev/loop2 [ 841.657591][T15142] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 841.715232][T15153] loop8: detected capacity change from 0 to 8 [ 841.729358][T15142] [ 841.731689][T15142] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 841.766771][T15142] hpfs: You really don't want any checks? You are crazy... [ 841.778791][T15142] hpfs: hpfs_map_sector(): read error [ 841.788394][T15142] hpfs: code page support is disabled [ 841.798562][T15142] hpfs: hpfs_map_sector(): read error [ 841.807456][T15142] hpfs: hpfs_map_sector(): read error [ 841.812902][T15142] hpfs: filesystem error: unable to find root dir [ 841.836324][T14547] udevd[14547]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 841.906991][T15153] SQUASHFS error: lzo decompression failed, data probably corrupt [ 841.977718][T14524] udevd[14524]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 842.006530][T15149] udevd[15149]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 842.016775][T15153] SQUASHFS error: Failed to read block 0x91: -5 [ 842.023008][T15153] SQUASHFS error: Unable to read metadata cache entry [8f] [ 842.043126][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 842.055631][T15153] SQUASHFS error: Unable to read inode 0x11f [ 843.001650][T15167] loop8: detected capacity change from 0 to 4096 [ 843.009571][T15167] ntfs: (device loop8): parse_options(): The mft_zone_multiplier option requires an argument. [ 843.123304][T14524] udevd[14524]: incorrect cramfs checksum on /dev/loop2 [ 843.301237][T15173] kAFS: No cell specified [ 843.377784][T15176] loop0: detected capacity change from 0 to 2048 [ 843.417075][T15176] NILFS (loop0): unrecognized mount option "x|$z`" [ 844.950194][T15201] loop0: detected capacity change from 0 to 512 [ 845.041679][ T4249] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 845.146942][T15201] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.2646: bad orphan inode 11862016 [ 845.159586][T15201] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 845.192030][T15201] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 845.415857][ T26] audit: type=1804 audit(2000000104.286:155): pid=15201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2646" name="/newroot/159/file1/file1" dev="loop0" ino=18 res=1 errno=0 [ 845.433957][ T4249] usb 9-1: Using ep0 maxpacket: 8 [ 846.186327][ T4249] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 846.364214][ T4249] usb 9-1: config 179 has no interface number 0 [ 846.371751][ T4249] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 846.593241][ T4249] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 846.739384][ T4249] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 846.905739][ T4249] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 846.982589][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 847.041613][ T4249] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 847.084214][ T4249] usb 9-1: config 179 interface 65 has no altsetting 0 [ 847.195570][ T4249] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 847.204687][ T4249] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.315074][ T4249] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input15 [ 847.772366][ T4249] usb 9-1: USB disconnect, device number 6 [ 847.778475][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 847.789660][ T4249] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 847.809425][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'. [ 847.823046][T15261] IPVS: Error joining to the multicast group [ 847.945852][T15265] overlayfs: failed to clone upperpath [ 848.498911][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 848.652385][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 848.774016][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 848.810671][T15280] netlink: 'syz.0.2678': attribute type 10 has an invalid length. [ 848.882506][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 848.903499][ T26] audit: type=1326 audit(2000000107.550:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.2.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 848.998073][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 849.025226][ T26] audit: type=1326 audit(2000000107.579:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.2.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 849.129020][ T26] audit: type=1326 audit(2000000107.579:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.2.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 849.253225][ T26] audit: type=1326 audit(2000000107.579:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.2.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b0064ba9 code=0x7ffc0000 [ 849.354778][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 849.464388][T15305] loop0: detected capacity change from 0 to 8 [ 849.748825][T15305] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 849.957129][T14524] udevd[14524]: incorrect cramfs checksum on /dev/loop0 [ 850.079362][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 850.125384][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop0 [ 850.157335][T15316] xt_recent: Unsupported userspace flags (000000de) [ 851.619168][T15405] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 852.161833][T15436] loop8: detected capacity change from 0 to 8 [ 852.270151][T15436] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 852.507679][T15436] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 852.518366][T15436] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 852.608230][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 852.656744][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 852.682888][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 852.683186][T14524] udevd[14524]: incorrect cramfs checksum on /dev/loop0 [ 852.832640][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 853.026142][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 853.080696][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 853.823982][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 854.015509][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 854.113422][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 854.803248][T15538] MTD: Couldn't look up '/dev/nullb0': -15 [ 854.909272][T15538] /dev/nullb0: Can't open blockdev [ 857.167553][T15600] device netdevsim0 entered promiscuous mode [ 857.184074][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2816'. [ 857.184171][T15600] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 857.216660][ T4574] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 857.229789][T15596] IPVS: Error joining to the multicast group [ 857.922612][ T4574] usb 9-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=40.bf [ 857.958211][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 857.966119][ T4574] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.990318][ T4574] usb 9-1: Product: syz [ 857.996527][ T4574] usb 9-1: Manufacturer: syz [ 858.009496][ T4574] usb 9-1: SerialNumber: syz [ 858.024974][ T4574] usb 9-1: config 0 descriptor?? [ 858.090429][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 858.100865][ T4574] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input17 [ 858.112992][T15627] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2829'. [ 858.146201][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2829'. [ 858.157607][T15627] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2829'. [ 858.166801][T15627] netlink: 'syz.2.2829': attribute type 2 has an invalid length. [ 858.189878][T15627] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2829'. [ 858.258273][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 858.345955][ T3546] bcm5974 9-1:0.0: could not read from device [ 858.392131][ T4574] usb 9-1: USB disconnect, device number 7 [ 858.392487][ T3546] bcm5974 9-1:0.0: could not read from device [ 858.430795][T14524] udevd[14524]: incorrect cramfs checksum on /dev/loop2 [ 858.521759][T14524] udevd[14524]: incorrect cramfs checksum on /dev/loop2 [ 858.679548][T14524] udevd[14524]: incorrect cramfs checksum on /dev/loop2 [ 858.694505][T15149] udevd[15149]: incorrect cramfs checksum on /dev/loop0 [ 858.810142][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 858.887041][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop0 [ 858.887638][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 859.391931][ T263] nbd_handle_cmd: 2 callbacks suppressed [ 859.391954][ T263] block nbd0: Attempted send on invalid socket [ 859.405002][ T263] print_req_error: 2 callbacks suppressed [ 859.405014][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 860.246900][T15683] netlink: 209820 bytes leftover after parsing attributes in process `syz.8.2857'. [ 860.269553][T15685] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2855'. [ 860.363178][T15690] x_tables: duplicate underflow at hook 4 [ 860.650965][T15712] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2870'. [ 861.864916][T15750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2888'. [ 862.568048][T15789] PM: Enabling pm_trace changes system date and time during resume. [ 862.568048][T15789] PM: Correct system time has to be restored manually after resume. [ 863.408907][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 863.481547][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 863.511641][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop0 [ 863.544177][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 863.606235][T15811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2914'. [ 863.632509][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 863.697572][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 863.736298][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop8 [ 863.796663][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 863.960087][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 863.999970][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop0 [ 866.151896][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2943'. [ 866.543844][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2955'. [ 866.847632][ T4574] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 867.125648][ T4574] usb 1-1: Using ep0 maxpacket: 32 [ 867.264736][ T4574] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 867.290623][ T4574] usb 1-1: config 4 has no interface number 0 [ 867.344511][ T4574] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.371497][ T4574] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.404456][ T4574] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 867.422449][ T4574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.482404][T15919] overlayfs: failed to clone upperpath [ 867.914632][ T4574] hub 1-1:4.128: USB hub found [ 868.034272][ T4574] hub 1-1:4.128: 2 ports detected [ 868.141783][ T4574] hub 1-1:4.128: Using single TT (err -22) [ 868.258820][ T4574] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 868.277276][ T4574] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 868.374192][ T4574] usb 1-1: USB disconnect, device number 6 [ 868.553361][T15937] netdevsim netdevsim6: Firmware load for '../file0' refused, path contains '..' component [ 868.798833][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 868.883451][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 868.940322][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 868.973052][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop0 [ 869.025690][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 869.054443][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop8 [ 869.182729][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 869.195446][T14524] udevd[14524]: incorrect cramfs checksum on /dev/loop2 [ 869.272847][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 869.430841][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 869.594845][ T4262] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 870.503649][ T4262] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 870.520153][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.539138][ T4262] usb 1-1: Product: syz [ 870.546571][ T4262] usb 1-1: Manufacturer: syz [ 870.557009][ T4262] usb 1-1: SerialNumber: syz [ 870.572193][ T4262] usb 1-1: config 0 descriptor?? [ 870.879475][ T4262] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 871.369265][ T4262] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 872.427610][ T4262] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 872.436878][ T4262] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 872.479631][ T4262] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 872.518001][ T4262] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 872.518115][ T4574] usb 1-1: USB disconnect, device number 7 [ 873.064644][T16051] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3020'. [ 874.303941][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 874.577519][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 874.820051][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 874.896699][ T4574] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 874.976422][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 875.086032][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 875.145171][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 875.156229][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop0 [ 875.196152][ T4574] usb 9-1: Using ep0 maxpacket: 16 [ 875.261606][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 875.295650][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop0 [ 875.390205][ T4574] usb 9-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.404372][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 875.416516][ T4574] usb 9-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.447024][ T4574] usb 9-1: config 0 interface 0 has no altsetting 0 [ 875.454333][ T4574] usb 9-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 875.474045][ T4574] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.514941][ T4574] usb 9-1: config 0 descriptor?? [ 876.106988][ T4574] chicony 0003:04F2:1236.0004: unknown main item tag 0x0 [ 876.119357][ T4574] chicony 0003:04F2:1236.0004: unknown main item tag 0x0 [ 876.146165][ T4574] chicony 0003:04F2:1236.0004: unknown main item tag 0x0 [ 876.173576][ T4574] chicony 0003:04F2:1236.0004: unknown main item tag 0x0 [ 876.200220][ T4574] chicony 0003:04F2:1236.0004: unknown main item tag 0x0 [ 876.232205][ T4574] chicony 0003:04F2:1236.0004: unknown main item tag 0x0 [ 876.255801][ T4574] chicony 0003:04F2:1236.0004: unknown main item tag 0x0 [ 876.297975][ T4574] chicony 0003:04F2:1236.0004: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.8-1/input0 [ 876.388330][ T4574] usb 9-1: USB disconnect, device number 8 [ 876.581804][T16140] fido_id[16140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 877.237729][ T4249] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 877.504966][ T4249] usb 9-1: Using ep0 maxpacket: 16 [ 877.740110][ T4249] usb 9-1: too many endpoints for config 0 interface 0 altsetting 64: 255, using maximum allowed: 30 [ 877.772395][ T4249] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 877.802129][ T4249] usb 9-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 877.838780][ T4249] usb 9-1: config 0 interface 0 has no altsetting 0 [ 877.845430][ T4249] usb 9-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 877.954016][ T4249] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.965285][ T4249] usb 9-1: config 0 descriptor?? [ 878.501168][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.576209][ T4249] elecom 0003:056E:00E6.0005: item fetching failed at offset 0/3 [ 878.584298][ T4249] elecom: probe of 0003:056E:00E6.0005 failed with error -22 [ 878.800547][ T4572] usb 9-1: USB disconnect, device number 9 [ 879.054806][ T4574] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 879.471957][ T4574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.494736][ T4574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.526779][ T4574] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 879.569221][ T4574] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 879.592122][ T4574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.628961][ T4574] usb 3-1: config 0 descriptor?? [ 879.768588][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop8 [ 879.808445][ T26] audit: type=1800 audit(2000000136.458:160): pid=16202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3084" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 880.187157][ T4574] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description [ 880.208817][ T4574] plantronics 0003:047F:FFFF.0006: parse failed [ 880.230056][ T4574] plantronics: probe of 0003:047F:FFFF.0006 failed with error -22 [ 880.401432][ T4574] usb 3-1: USB disconnect, device number 9 [ 880.487958][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 880.684136][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 880.770991][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop8 [ 880.849711][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 880.912709][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop8 [ 880.976550][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 881.014843][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop0 [ 881.057976][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 881.101225][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop8 [ 882.027691][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3121'. [ 883.865342][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 883.874505][T16334] IPVS: Error joining to the multicast group [ 884.666661][T12674] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 885.051689][T12674] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 885.064679][T12674] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 885.105069][T12674] usb 9-1: config 220 has an invalid descriptor of length 48, skipping remainder of the config [ 885.115448][T12674] usb 9-1: config 220 has no interface number 2 [ 885.154815][T12674] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 885.197992][T12674] usb 9-1: config 220 interface 0 has no altsetting 0 [ 885.218874][T12674] usb 9-1: config 220 interface 76 has no altsetting 0 [ 885.240540][T12674] usb 9-1: config 220 interface 1 has no altsetting 0 [ 885.333447][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 885.425894][T12674] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 885.434964][T12674] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.459704][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 885.491846][T12674] usb 9-1: Product: syz [ 885.496050][T12674] usb 9-1: Manufacturer: syz [ 885.529339][T12674] usb 9-1: SerialNumber: syz [ 885.580267][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 885.679419][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 885.829894][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 885.919248][T12674] usb 9-1: selecting invalid altsetting 0 [ 885.947375][T12674] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 885.975650][T12674] usb 9-1: No valid video chain found. [ 886.001227][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 886.062192][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 886.069321][T16396] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3169'. [ 886.100268][T12674] usb 9-1: selecting invalid altsetting 0 [ 886.106205][T12674] usbtest: probe of 9-1:220.1 failed with error -22 [ 886.129028][T12674] usb 9-1: USB disconnect, device number 10 [ 886.209815][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 886.308907][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 886.397380][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 887.235716][T16434] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3184'. [ 887.244860][T16434] IPVS: Error joining to the multicast group [ 888.038646][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3200'. [ 888.551521][T16489] syz.8.3208 (16489): /proc/16488/oom_adj is deprecated, please use /proc/16488/oom_score_adj instead. [ 889.046211][T16512] netlink: 'syz.8.3219': attribute type 2 has an invalid length. [ 889.984662][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3246'. [ 890.757820][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 890.785104][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 890.833834][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 890.920737][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 890.993871][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 891.099591][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 891.137991][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 891.215046][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 891.268936][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 891.349933][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 891.740836][T12674] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 892.438219][T12674] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 892.446813][T12674] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.491238][T12674] usb 1-1: config 0 has no interface number 0 [ 892.613811][T16678] Set syz1 is full, maxelem 65536 reached [ 892.673151][T12674] usb 1-1: New USB device found, idVendor=fff8, idProduct=ffff, bcdDevice= b.28 [ 892.691904][T12674] usb 1-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 892.735715][T12674] usb 1-1: Product: syz [ 892.744106][T12674] usb 1-1: Manufacturer: syz [ 892.762316][T12674] usb 1-1: SerialNumber: syz [ 892.775862][T12674] usb 1-1: config 0 descriptor?? [ 893.068797][ T4249] usb 1-1: USB disconnect, device number 8 [ 893.196727][T12674] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 894.229887][T12674] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 894.239686][T12674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.249586][T12674] usb 3-1: config 0 descriptor?? [ 894.281992][T16733] program syz.0.3320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 894.640557][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3328'. [ 894.720330][T16761] program syz.0.3332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 894.761537][T12674] hid-alps 0003:044E:120C.0007: hidraw0: USB HID v0.06 Device [HID 044e:120c] on usb-dummy_hcd.2-1/input0 [ 894.776833][ T26] audit: type=1326 audit(2000000150.463:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16764 comm="syz.0.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11e498ba9 code=0x7ffc0000 [ 894.852894][ T26] audit: type=1326 audit(2000000150.500:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16764 comm="syz.0.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc11e498ba9 code=0x7ffc0000 [ 894.983758][T12674] usb 3-1: USB disconnect, device number 10 [ 895.087094][T16773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3334'. [ 895.096253][T16773] IPVS: Error joining to the multicast group [ 895.181739][T16766] fido_id[16766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 895.223601][ T26] audit: type=1326 audit(2000000150.509:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16764 comm="syz.0.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11e498ba9 code=0x7ffc0000 [ 895.248470][ T26] audit: type=1326 audit(2000000150.509:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16764 comm="syz.0.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc11e498ba9 code=0x7ffc0000 [ 895.287149][ T26] audit: type=1326 audit(2000000150.519:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16764 comm="syz.0.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11e498ba9 code=0x7ffc0000 [ 895.320735][ T26] audit: type=1326 audit(2000000150.519:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16764 comm="syz.0.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fc11e498ba9 code=0x7ffc0000 [ 895.419254][ T26] audit: type=1326 audit(2000000150.519:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16764 comm="syz.0.3333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11e498ba9 code=0x7ffc0000 [ 896.498634][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 896.582245][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 896.947789][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 897.025543][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 897.058090][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop0 [ 897.186666][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 897.331956][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 897.426619][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 897.824649][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 897.887175][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 897.925016][T16844] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3365'. [ 897.960765][T16844] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 900.579597][ T1107] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 900.995899][ T1107] usb 1-1: Using ep0 maxpacket: 8 [ 901.128294][ T1107] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 901.167385][ T1107] usb 1-1: config 179 has no interface number 0 [ 901.184746][ T1107] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 901.828570][ T1107] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 901.840346][ T1107] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 901.851848][ T1107] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 901.855746][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 901.863595][ T1107] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 901.883960][ T1107] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 901.968378][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.994175][T16909] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 901.999994][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop8 [ 902.089974][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 902.144514][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 902.272536][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 902.324459][ T4572] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input18 [ 902.416893][T14524] udevd[14524]: incorrect cramfs checksum on /dev/loop2 [ 902.499152][T12674] usb 1-1: USB disconnect, device number 9 [ 902.517798][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 902.527664][T12674] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 902.556233][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 902.835461][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 902.995815][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 903.092949][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 904.053441][T16988] bridge0: port 3(geneve2) entered blocking state [ 904.076895][T16988] bridge0: port 3(geneve2) entered disabled state [ 904.141593][T16988] device geneve2 entered promiscuous mode [ 904.164314][T16988] bridge0: port 3(geneve2) entered blocking state [ 904.170829][T16988] bridge0: port 3(geneve2) entered forwarding state [ 907.204617][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3455'. [ 907.217788][T17061] IPVS: Error joining to the multicast group [ 907.603463][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 907.662109][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 907.737396][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 907.888622][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 907.989112][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 908.039242][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 908.275680][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 908.301331][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 908.433548][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 908.505725][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop0 [ 909.379605][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'. [ 909.410659][T17131] IPVS: Error joining to the multicast group [ 909.918473][T12674] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 910.353131][T12674] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 910.361979][T12674] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.394494][T12674] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 910.416695][T12674] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.567025][T12674] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 910.576094][T12674] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 910.614702][T12674] usb 9-1: Product: syz [ 910.618901][T12674] usb 9-1: Manufacturer: syz [ 910.686779][T12674] cdc_wdm 9-1:1.0: skipping garbage [ 910.692761][T12674] cdc_wdm 9-1:1.0: skipping garbage [ 910.725369][T12674] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 910.746125][T12674] cdc_wdm 9-1:1.0: Unknown control protocol [ 911.030337][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3504'. [ 911.047342][T17183] IPVS: Error joining to the multicast group [ 911.058426][ C0] cdc_wdm 9-1:1.0: unknown notification 94 received: index 25489 len 13794 [ 911.080041][ C0] cdc_wdm 9-1:1.0: unknown notification 23 received: index 53179 len 38402 [ 911.101179][ C0] cdc_wdm 9-1:1.0: unknown notification 100 received: index 45632 len 5188 [ 911.122569][ C0] cdc_wdm 9-1:1.0: unknown notification 18 received: index 22573 len 63015 [ 911.143945][ C0] cdc_wdm 9-1:1.0: unknown notification 122 received: index 2309 len 27499 [ 911.165404][ C0] cdc_wdm 9-1:1.0: unknown notification 38 received: index 42557 len 30285 [ 911.186704][ C0] cdc_wdm 9-1:1.0: unknown notification 102 received: index 24017 len 55745 [ 911.208075][ C0] cdc_wdm 9-1:1.0: unknown notification 98 received: index 17755 len 18545 [ 911.229450][ C0] cdc_wdm 9-1:1.0: unknown notification 197 received: index 7871 len 8377 [ 911.250927][ C0] cdc_wdm 9-1:1.0: unknown notification 211 received: index 33557 len 36621 [ 911.272209][ C0] cdc_wdm 9-1:1.0: unknown notification 194 received: index 27420 len 12594 [ 911.293592][ C0] cdc_wdm 9-1:1.0: unknown notification 112 received: index 22842 len 3821 [ 911.585465][T12601] usb 9-1: USB disconnect, device number 11 [ 912.106587][T17209] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3515'. [ 912.221050][T17212] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3517'. [ 912.241030][T17212] bridge0: port 3(geneve2) entered disabled state [ 912.247684][T17212] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.980646][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 913.023478][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 913.079519][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 913.126577][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 913.183310][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 913.534301][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 913.580262][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 913.713125][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 913.824236][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 914.044284][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 914.978973][T17276] netlink: 'syz.6.3543': attribute type 1 has an invalid length. [ 914.991451][T17276] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3543'. [ 916.549722][T17329] usb usb8: usbfs: process 17329 (syz.8.3563) did not claim interface 0 before use [ 918.371080][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 918.459999][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 918.497766][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop0 [ 918.554452][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 918.582628][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop8 [ 918.660532][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 918.705125][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 918.748873][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 918.805016][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 918.842729][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop8 [ 919.226270][ T4291] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 919.758027][ T4291] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 919.780001][ T4291] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 919.806878][ T4291] usb 1-1: config 0 interface 0 has no altsetting 0 [ 919.998561][ T4291] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 920.016268][ T4291] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 920.033133][ T4291] usb 1-1: Product: syz [ 920.037434][ T4291] usb 1-1: Manufacturer: syz [ 920.049630][ T4291] usb 1-1: SerialNumber: syz [ 920.057005][ T4291] usb 1-1: config 0 descriptor?? [ 920.115300][ T4291] hub 1-1:0.0: bad descriptor, ignoring hub [ 920.126671][ T4291] hub: probe of 1-1:0.0 failed with error -5 [ 920.138861][ T4291] usb 1-1: selecting invalid altsetting 0 [ 920.250101][ T21] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 920.700262][ T21] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.745498][ T21] usb 9-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 920.851077][ T21] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.894571][T17392] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 920.953840][ T21] usb 9-1: config 0 descriptor?? [ 921.717922][T12601] usb 9-1: USB disconnect, device number 12 [ 922.207373][T12674] usb 1-1: USB disconnect, device number 10 [ 923.808207][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 923.836038][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 923.865651][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 923.901259][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 924.006587][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 924.066394][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 924.199989][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 924.238526][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop2 [ 924.559337][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 924.776729][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop0 [ 926.964966][T17597] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 927.794991][T12674] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 928.187241][T12674] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 928.218165][T12674] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.286488][T12674] usb 9-1: config 0 descriptor?? [ 929.843241][T12674] pegasus: probe of 9-1:0.0 failed with error -71 [ 929.930007][T12674] usb 9-1: USB disconnect, device number 13 [ 930.068663][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 930.191603][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 930.295699][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 931.325890][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 931.352471][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop8 [ 931.522101][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 931.617542][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 931.670972][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 931.871650][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 931.932476][ T26] audit: type=1326 audit(2000000185.059:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.2.3697" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1b0064ba9 code=0x0 [ 931.997142][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop0 [ 932.009108][ T4291] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 932.178044][T17699] netlink: 'syz.0.3702': attribute type 10 has an invalid length. [ 932.187603][T17699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3702'. [ 932.223534][T17699] netlink: 'syz.0.3702': attribute type 10 has an invalid length. [ 932.235874][T17699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3702'. [ 932.284737][T17700] netlink: 'syz.0.3702': attribute type 10 has an invalid length. [ 932.300729][T17700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3702'. [ 932.314496][ T4291] usb 9-1: Using ep0 maxpacket: 16 [ 932.485862][ T4291] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 932.691733][ T4291] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 932.691770][ T4291] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.691789][ T4291] usb 9-1: Product: syz [ 932.691802][ T4291] usb 9-1: Manufacturer: syz [ 932.691815][ T4291] usb 9-1: SerialNumber: syz [ 932.696140][ T4291] usb 9-1: config 0 descriptor?? [ 932.747595][ T4291] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 932.747628][ T4291] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 932.967792][T17687] udc-core: couldn't find an available UDC or it's busy [ 932.967890][T17687] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 933.053462][T17732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3716'. [ 933.211758][T12674] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 933.460808][ T4291] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 933.579792][T12674] usb 3-1: Using ep0 maxpacket: 8 [ 933.917505][ T4291] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 933.990607][ T4291] em28xx 9-1:0.0: board has no eeprom [ 934.229768][ T4291] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 934.237961][ T4291] em28xx 9-1:0.0: dvb set to bulk mode. [ 934.247676][ T4291] usb 9-1: USB disconnect, device number 14 [ 934.255540][ T4291] em28xx 9-1:0.0: Disconnecting em28xx [ 934.264550][T12674] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 934.267860][ T1107] em28xx 9-1:0.0: Binding DVB extension [ 934.312614][T12674] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 934.329402][T12674] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 934.343222][ T1107] em28xx 9-1:0.0: Registering input extension [ 934.346745][T12674] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 934.351059][ T4291] em28xx 9-1:0.0: Closing input extension [ 934.370148][T12674] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 934.379788][T12674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.381402][ T4291] em28xx 9-1:0.0: Freeing device [ 934.552795][T17769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3727'. [ 934.695681][T12674] usb 3-1: GET_CAPABILITIES returned 0 [ 934.708318][T12674] usbtmc 3-1:16.0: can't read capabilities [ 934.946627][T12601] usb 3-1: USB disconnect, device number 11 [ 935.292984][ T26] audit: type=1326 audit(2000000188.170:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17792 comm="syz.1.3738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c94d26ba9 code=0x0 [ 935.532738][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 935.631278][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 935.646466][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3740'. [ 935.683004][T17797] IPVS: Error joining to the multicast group [ 935.707694][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 935.821684][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 935.876073][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 935.951435][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 935.961680][T17816] wg2 speed is unknown, defaulting to 1000 [ 935.992907][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop0 [ 936.033856][T17822] 9pnet: Insufficient options for proto=fd [ 936.086061][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop8 [ 936.142390][T14547] udevd[14547]: incorrect cramfs checksum on /dev/loop2 [ 936.219251][T14523] udevd[14523]: incorrect cramfs checksum on /dev/loop8 [ 936.385034][T17816] bond0 speed is unknown, defaulting to 1000 [ 936.445532][T17834] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3755'. [ 936.929642][T17852] 9pnet: Insufficient options for proto=fd [ 937.084620][ T1107] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 937.227982][T17860] 9pnet: Insufficient options for proto=fd [ 937.317242][T12674] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 937.351830][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 937.491129][ T1107] usb 3-1: config 0 has no interfaces? [ 937.497745][ T1107] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 937.559409][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.576726][ T1107] usb 3-1: config 0 descriptor?? [ 937.631438][T12674] usb 1-1: Using ep0 maxpacket: 16 [ 937.648935][ T26] audit: type=1326 audit(2000000190.339:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.8.3771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d0e542ba9 code=0x0 [ 937.812859][T12674] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 938.021346][T12674] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 938.030662][T12674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.053738][T12674] usb 1-1: Product: syz [ 938.057903][T12674] usb 1-1: Manufacturer: syz [ 938.062476][T12674] usb 1-1: SerialNumber: syz [ 938.087884][T12674] usb 1-1: config 0 descriptor?? [ 938.132435][T12674] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 938.151164][T12674] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 938.352731][T17854] udc-core: couldn't find an available UDC or it's busy [ 938.390847][T17854] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 938.407780][ T4291] usb 3-1: USB disconnect, device number 12 [ 938.909637][T12601] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 938.931465][T12674] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 938.975066][ T4262] ------------[ cut here ]------------ [ 938.981429][ T4262] sysfs group 'power' not found for kobject 'ueagle-atm!eagleII.fw' [ 939.007199][ T4262] WARNING: CPU: 0 PID: 4262 at fs/sysfs/group.c:281 sysfs_remove_group+0x174/0x290 [ 939.017985][ T4262] Modules linked in: [ 939.021967][ T4262] CPU: 0 PID: 4262 Comm: kworker/0:5 Not tainted syzkaller #0 [ 939.056978][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 939.067150][ T4262] Workqueue: events request_firmware_work_func [ 939.078341][ T4262] RIP: 0010:sysfs_remove_group+0x174/0x290 [ 939.084548][ T4262] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 8e cf d0 ff 49 8b 17 48 c7 c7 80 8d 19 8a 48 89 de e8 3c c4 b2 07 <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 56 67 8c ff [ 939.127043][ T4262] RSP: 0018:ffffc900032ff9a0 EFLAGS: 00010246 [ 939.133153][ T4262] RAX: 00c3182e34683a00 RBX: ffffffff8a7bb2a0 RCX: ffff88801d9d0000 [ 939.141743][ T4262] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 939.152417][ T4262] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10172067b0 [ 939.174409][ T4262] R10: ffffed10172067b0 R11: 1ffff110172067af R12: 1ffffffff14f7658 [ 939.189163][ T4262] R13: dffffc0000000000 R14: ffff888068b6d740 R15: ffff88807a718008 [ 939.197629][ T4262] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 939.209527][ T4262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.216333][T12601] usb 9-1: Using ep0 maxpacket: 32 [ 939.221721][ T4262] CR2: 00007f2c94f392f8 CR3: 000000002aeb9000 CR4: 00000000003506f0 [ 939.230406][ T4262] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 939.238792][ T4262] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 939.247284][ T4262] Call Trace: [ 939.250574][ T4262] [ 939.253504][ T4262] ? sysfs_unmerge_group+0x109/0x130 [ 939.259307][ T4262] device_del+0x2ae/0xa70 [ 939.263649][ T4262] ? kill_device+0x160/0x160 [ 939.268296][ T4262] firmware_fallback_sysfs+0x8d1/0xbc0 [ 939.273866][ T4262] _request_firmware+0xc86/0x12b0 [ 939.283702][ T4262] request_firmware_work_func+0xac/0x1b0 [ 939.289432][ T4262] process_one_work+0x863/0x1000 [ 939.294506][ T4262] ? worker_detach_from_pool+0x240/0x240 [ 939.300386][T12674] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 939.308382][T12674] em28xx 1-1:0.0: board has no eeprom [ 939.313956][ T4262] ? lockdep_hardirqs_off+0x70/0x100 [ 939.319612][ T4262] ? _raw_spin_lock_irq+0xab/0xe0 [ 939.325399][ T4262] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 939.331942][ T4262] ? wq_worker_running+0x97/0x170 [ 939.336995][ T4262] worker_thread+0xaa8/0x12a0 [ 939.341690][ T4262] kthread+0x436/0x520 [ 939.345975][ T4262] ? rcu_lock_release+0x20/0x20 [ 939.350835][ T4262] ? kthread_blkcg+0xd0/0xd0 [ 939.355504][ T4262] ret_from_fork+0x1f/0x30 [ 939.360334][ T4262] [ 939.363373][ T4262] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 939.370634][ T4262] CPU: 0 PID: 4262 Comm: kworker/0:5 Not tainted syzkaller #0 [ 939.378079][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 939.388138][ T4262] Workqueue: events request_firmware_work_func [ 939.394328][ T4262] Call Trace: [ 939.397609][ T4262] [ 939.400541][ T4262] dump_stack_lvl+0x168/0x230 [ 939.405228][ T4262] ? show_regs_print_info+0x20/0x20 [ 939.410436][ T4262] ? load_image+0x3b0/0x3b0 [ 939.414956][ T4262] panic+0x2c9/0x7f0 [ 939.418853][ T4262] ? bpf_jit_dump+0xd0/0xd0 [ 939.423370][ T4262] ? ret_from_fork+0x1f/0x30 [ 939.427963][ T4262] ? sysfs_remove_group+0x174/0x290 [ 939.433150][ T4262] __warn+0x248/0x2b0 [ 939.437132][ T4262] ? sysfs_remove_group+0x174/0x290 [ 939.442322][ T4262] report_bug+0x1b7/0x2e0 [ 939.446654][ T4262] handle_bug+0x3a/0x70 [ 939.450791][ T4262] exc_invalid_op+0x16/0x40 [ 939.455274][ T4262] asm_exc_invalid_op+0x16/0x20 [ 939.460104][ T4262] RIP: 0010:sysfs_remove_group+0x174/0x290 [ 939.465895][ T4262] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 8e cf d0 ff 49 8b 17 48 c7 c7 80 8d 19 8a 48 89 de e8 3c c4 b2 07 <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 56 67 8c ff [ 939.485660][ T4262] RSP: 0018:ffffc900032ff9a0 EFLAGS: 00010246 [ 939.491727][ T4262] RAX: 00c3182e34683a00 RBX: ffffffff8a7bb2a0 RCX: ffff88801d9d0000 [ 939.499683][ T4262] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 939.507644][ T4262] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10172067b0 [ 939.515615][ T4262] R10: ffffed10172067b0 R11: 1ffff110172067af R12: 1ffffffff14f7658 [ 939.523569][ T4262] R13: dffffc0000000000 R14: ffff888068b6d740 R15: ffff88807a718008 [ 939.531546][ T4262] ? sysfs_unmerge_group+0x109/0x130 [ 939.536831][ T4262] device_del+0x2ae/0xa70 [ 939.541185][ T4262] ? kill_device+0x160/0x160 [ 939.545761][ T4262] firmware_fallback_sysfs+0x8d1/0xbc0 [ 939.551223][ T4262] _request_firmware+0xc86/0x12b0 [ 939.556250][ T4262] request_firmware_work_func+0xac/0x1b0 [ 939.561869][ T4262] process_one_work+0x863/0x1000 [ 939.566797][ T4262] ? worker_detach_from_pool+0x240/0x240 [ 939.572412][ T4262] ? lockdep_hardirqs_off+0x70/0x100 [ 939.577703][ T4262] ? _raw_spin_lock_irq+0xab/0xe0 [ 939.582727][ T4262] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 939.588104][ T4262] ? wq_worker_running+0x97/0x170 [ 939.593115][ T4262] worker_thread+0xaa8/0x12a0 [ 939.597813][ T4262] kthread+0x436/0x520 [ 939.601867][ T4262] ? rcu_lock_release+0x20/0x20 [ 939.606714][ T4262] ? kthread_blkcg+0xd0/0xd0 [ 939.611297][ T4262] ret_from_fork+0x1f/0x30 [ 939.615702][ T4262] [ 939.618905][ T4262] Kernel Offset: disabled [ 939.623699][ T4262] Rebooting in 86400 seconds..