last executing test programs: 4m51.984798317s ago: executing program 0 (id=1359): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x3, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r6, 0xc8036ab6d6cbef07, 0x4000}, 0x14}}, 0x4000080) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42014) 4m49.995218752s ago: executing program 0 (id=1364): getpid() sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$sysv(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x2000412, &(0x7f0000000180)=ANY=[], 0x1, 0x9ec4, &(0x7f000000b100)="$eJxEunPwJ1e0vf2dZJJMbNvGE9u2bdt+4nzaRmzbtm3bto15a3659777n67uOr1q773Wrupe59wywFsHeNsAbx/gHQO8c4B3DfDuAd4zwHsHeN8A7x/gAwN8cIAPDfDhAT4ywEcH+NgAHx/gEwN8coBPDfDpAT4zwGcH+NwAnx/gCwN8cYAvDfDlAb4ywFcH+NoAXx/gGwN8c4BvDfDtAb4zwHcH+N4A3x/gBwP8cIAfDfDjAX4ywE8H+NkAPx/gFwP8coBfDfDrAX4zwG8H+N0Avx/gDwP8cYA/DfDnAf4ywF8H+NsAfx/gHwP8c4B/DfDvAf4zwH8HOHKAQwEOC3C0AEcPcHiAYwQ4ZoBjBTgiwLEDHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKEACXDjARQJcNMDFAlw8wCUCXDLApQJcOsBlAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4GNNDAjw0wMMCPDzAIwI8MsCjAjw6QAM8JsBjAzwuYPRR3J8Q4IkBnhTgyQEOAgwCDAOMAowDTAJMA8wCzAMsAiwDrAKsA2wCbAPsAoZGYZ4S4KkBnhbg6QGeEeCZAZ4V4NkBnhPguQGeF+D5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBXhfg9QHeEOCNAd4U4M0B3hLgrcGIoaEhvD3AO0bpeOi/uDvAewK8N8D7Arw/wAcCfDDAhwJ8eNQchENDj47i9ov/3nkiwCeD4f8P7+kAnxnVu//C5wN8IcAXA3wpwJcDfCXAVwN8LcDXA3wjwDcDfCvAtwN8J8B3A3wvwPcD/CDADwP8KMCPA/wkwE8D/CzAzwP8IsAvA/wqwK8D/CbAbwP8LsDvA/whwB8D/CnAnwP8JcBfA/wtwN8D/CPAPwP8K8C/A/wnwH8DHBngUIjDQhwtHFU3Dg9xjBDHDHGsEEeEOHaI44Q4bojjhcw+fogThDhhiBOFOHGIk4Q4aYiThTh5iFOEOGWIU4U4dYjThDhtiNOFOP3/4M4Y4kwhzhziLCHOGuJsIc4e4hwhzhniXCHOHeI8Ic4b4nwhzh/iAiEuGOJCIRLiwiEuEuKiIS4W4uIhLhHikiEuFeLSIS4T4rIhLhfi8iGuEOKKIa4U4srhWP9DKa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuNNrQ0Cgedglx1xB3C3H3EPcIcc8Q9wpx7xD3CRlt1Lr9Qtw/xANCPDDEg0I8OMRDQjw0xMNCPDzEI0I8MsSjQjw6REM8JsRjQzwuxONDPCHEE0M8KcSTQxyEGIQYhhiF/7/O0xCzEPMQixDLEKsQ6xCbENsQuxD7EE8J8dQQTwvx9BDPCPHMEM8K8ewQzwnx3BDPC/H8EC8I8cIQLwrx4hAvCfHSEC8L8fIQrwjxyhCvCvHqEK8J8doQrwvx+hBvCPHGEFfdbN6hYUNDQ7eEeGuIt4V4e4h3hHhniHeFeHeI94R4b4j3hXh/iA+E+GCID4X48Ci9D+GjIT4W4uMhPhHikyE+FeLTIT4T4rMhPhfi8yG+EOKLIb4U4sshvhLiqyG+FuLrIb4R4pshvhXi2yG+E+K7Ib4X4vshfhDihyF+FOLHIX4S4qchfhbi5yF+EeKXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIf4W4u8h/hHinyH+FeLfIf4T4r8hjgxxKMJhEY4W4egRDo9wjAjHjHCsCEdEOHaE40Q4boTjRTh+hBNEOGGEE0U4cYSTRDhphJNFOHmEU0Q4ZYRTRTh1hNNEOG2E00U4fYQzRDhjhDNFOHOEs0Q4a4SzRTh7hHNEOGeEc0U4d4TzRDhvhPNFOH+EC0S4YIQLRUiEC0e4SISLRrhYhItHuESES0a4VIRLR7hMhMtGuFyEy0e4QoQrRrhShCtHuEqEq0a4WoSrR7hGhGtGuFaEa0e4ToTrRrhehOtHuEGEG0a4UYQbR7hJhJtGuFmEm0e4RYRbRrhVhFtHuE2E20a4XYTbR7hDhDtGuFOEO0e4S4S7RrhbhLtHuEeEe0a4V4R7R7hPhPtGuF+E+0d4QIQHRnhQhAdHeEiEh0Z4WISHR3hEhEdGeFSER0dohMdEeGyEx0V4fIQnRHhihCdFeHKEgwiDCMMIowjjCJMI0wizCPMIiwjLCKsI6wibCNsIuwj7CE+J8NQIT4vw9AjPiPDMCM+K8OwIz4nw3AjPi/D8CC+I8MIIL4rw4ggvifDSCC+L8PIIr4jwygivivDqCK+J8NoIr4vw+ghviPDGCG+K8OYIb4nG8tYIb4vw9gjviPDOCO+K8O4I74nw3gjvi/D+CB+I8MEIH4rw4QgfifDRCB+L8PEIn4jwyQifivDpCJ+J8NkIn4vw+QhfiPDFCF+K8OUIX4nw1Qhfi/D1CN+I8M0I34rw7QjfifDdCN+L8P0IP4jwwwg/ivDjCD+J8NMIP4vw8wi/iPDLCL+K8OsIv4nw2wi/i/D7CH+I8McIf4rw5wh/ifDXCH+L8PcI/4jwzwj/ivDvCP+J8N8IR0Y4FOOwGEeLcfQYh8c4RoxjxjhWjCNiHDvGcWIcN8bxYhw/xglinDDGiWKcOMZJYpw0xslinDzGKWKcMsapYpw6xmlinDbG6WKcPsYZYpwxxplinDnGWWKcNcbZYpw9xjlinDPGuWKcO8Z5Ypw3xvniTyacP8YFYlwwxoViJMaFY1wkxkVjXCzGxWNcIsYlY1xqzCGXjnGZGJeNcbkYl49xhRhXjHGlGFeOcZUYV41xtRhXj3GNGNeMca0Y145xnRjXjXG9GNePcYMYN4xxoxg3jnGTGDeNcbMYN49xixi3jHGrGLeOcZuYGbeNcbsYt49xhxh3jHGnGHeOcZcYd41xtxh3j3GPGPeMca8Y945xnxj3jXG/GPeP8YAYD4zxoBgPjvGQGA+N8bAYD4/xiBiPjPGoGI+O0RiPifHYGI+L8fgYT4jxxBhPivHkGAcxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jGeEuOpMZ4W4+kxnhHjmTGeFePZMZ4T47kxnhfj+TFeEOOFMV4U48UxXhLjpTFeFuPlMV4R45UxXhXj1TFeE+O1MV4X4/Ux3hDjjTHeFOPNMd4S460x3hbj7THeEeOdMd4V490x3hPjvTHeF+P9MT4Q44MxPhTjwzE+EuOjMT4W4+MxPhHjkzE+FePTMT4T47MxPhfj8zG+EOOLMb4U48sxvhLjqzG+FuPrMb4R45uj+j2Eb8f4TozvxvhejO/H+EGMH8b4UYwfx/hJjJ/G+FmMn8f4RYxfxvhVjF/H+E2M38b4XYzfx/hDjD/G+FOMP8f4S4y/xvhbjL/H+EeMf8b4V4x/x/hPjP/GODLGoQSHJThagqMnODzBMRIcM8GxEhyR4NgJjpPguAmOl+D4CU6Q4IQJTpTgxAlOkuCkCU6W4OQJTpHglAlOleDUCU6T4LQJTpfg9AnOkOCMCc6U4MwJzpLgrAnOluDsCc6R4JwJzpXg3AnOk+C8Cc6X4PwJLpDgggkulCAJLpzgIgkumuBiCS6e4BIJLpngUgkuneAyCS6b4HIJLp/gCgmumOBKCa6c4CoJrprgagmunuAaCa6Z4FoJrp3gOgmum+B6Ca6f4AYJbpjgRglunOAmCW6a4GYJbp7gFglumeBWCW6d4DYJbpvgdglun+AOCe6Y4E4J7pzgLgnumuBuCe6e4B4J7pngXgnuneA+Ce6b4H4J7p/gAQkemOBBCR6c4CEJHprgYQkenuARCR6Z4FEJHp2gCR6T4LEJHpfg8QmekOCJCZ6U4MkJDhIMEgwTjBKME0wSTBPMEswTLBIsE6wSrBNsEmwT7BLsEzwlwVMTPC3B0xM8I8EzEzwrwbMTPCfBcxM8L8HzE7wgwQsTvCjBixO8ZJQOh4aGLkvw8gSvSPDKBK9K8OoEr0nw2gSvS/D6BG9I8MYEb0rw5gRvSfDWBG9L8PYE70jwzgTvSvDuBO9J8N4E70vw/gQfSPDBBB9K8OEEH0nw0QQfS/DxBJ9I8MkEn0rw6QSfSfDZBJ9L8PkEX0jwxQRfSvDlBF9J8NUEX0vw9QTfSPDNBN9K8O0E30nw3QTfS/D9BD9I8MMEP0rw4wQ/SfDTBD9L8PMEv0jwywS/SvDrBL9J8NsEv0vw+wR/SPDHBH9K8OcEf0nw1wR/S/D3BP9I8M8E/0rw7wT/SfDfBEcmOJTisBRHS3H0FIenOEaKY6Y4VoojUhw7xXFSHDfF8VIcP8UJUpwwxYlSnDjFSVKcNMXJUpw8xSlSnDLFqVKcOsVpUpw2xelSnD7FGVKcMcWZUpw5xVlSnDXF2VKcPcU5UpwzxblSnDvFeVKcN8X5Upw/xQVSXDDFhVIkxYVTXCTFRVNcLMXFU1wixSVTXCrFpVNcJsVlU1wuxeVTXCHFFVNcKcWVU1wlxVVTXC3F1VNcI8U1U1wrxbVTXCfFdVNcL8X1U9wgxQ1T3CjFjVPcJMVNU9wsxc1T3CLFLVPcKsWtU9wmxW1TTFLcPsUdUtwxxZ1S3DnFXVLcNcXdUtw9xT1S3DPFvVLcO8V9Utw3xf1S3D/FA1I8MMWDUjw4xUNSPDTFw1I8PMUjUjwyxaNSPDpFUzwmxWNTPC7F41M8IcUTUzwpxZNTHKQYpBimGKUY/0++aYpZinmKRYplilWKdYpNim2KXYp9iqekeGqKp6V4eopnpHhmimeleHaK56R4bornpXh+ihekeGGKF6V4cYqXpHhpipeleHmKV6R4ZYpXpXh1itekeG2K16V4fYo3pHhjijeleHOKt6R4a4q3pXh7inekeGeKd6V4d4r3pHhviveleH86coz/9X0eSvHhFB9J8dEUH0vx8RSfSPHJFJ9K8ekUn0nx2RRHjhw58vkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cMUP0rx4xQ/SfHTFD9L8fMUv0jxyxS/SvHrFL9J8dsUv0vx+xR/SPHHFH9K8ecUf0nx1xR/S/H3FP9I8c8U/0rx7xT/SfHfUfmnOJThsAxHy3D0DIdnOEaGY2Y4VoYjMhw7w3EyHDfD8TIcP8MJMpwww4kynDjDSTKcNMPJMpw8wykynDLDqTKcOsNpMpw2w+kynD7DGTKcMcOZMpw5w1lGx1kznC3D2TOcI8M586GhUfnNneE8Gc6b4XwZzp/hAhkumOFCGZLhwhkukuGiGS6W4eIZLpHhkhkuleHSGS6T4bIZLpfh8hmukOGKGa6U4coZrpLhqhmuluHqGa6R4ZoZrpXh2hmuk+G6Ga6X4foZbpDhhhlulOHGGW6S4aYZbjbq+XFDQ1tkuGWGW2W4dYbbZLhthttluH2GO2S4Y4Y7ZbhzhrtkuGuGu2W4e4Z7ZLhnhntluHeG+2S4b4b7Zbh/hgdkeGCGB2V4cIaHZHhohodleHiGR2R4ZIZHZXh0hmZ4TIbHZnhchsdneEKGJ2Z4UoYnZzjIMMgwzDDKMM4wyTDNMMswz7DIsMywyrDOsMmwzbDLsM/wlAxPzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCijKH/9RsvzfCyDC/P8IoMr8zwqoyRV2d4TYbXZnhdhtdnDB+lkRszvCnDmzO8JcNbM7wtw9szvCPDOzO8K8O7M7wnw3szvC/D+zN8IMMHM3wow4czfCTDRzN8LMPHM3wiwyczfCrDpzN8JsNnM3wuw+czfCHDFzN8KcOXM3wlw1czfC3D1zN8I8M3M3wrw7czfCfDdzN8L8P3M/wgww8z/CjDjzP8JMM/R/4Xn2f4RYZfZvhVhl9n+E32317Edxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R+j8DL8K8O/M/wnw38zHJnhUI7Dchwtx9FzHJ7jGDmOmeNYOY7Icewcx8lx3BzHy3H8HCfIccIcJ8px4hwnyXHSHCfLcfIcp8hxyhynynHqHKfJcdocp8tx+hxnyHHGHGfKceYcZ8lx1hxny3H2HOfIR80/zpXj3DnOk+O8Oc6X4/w5LpDjgjkulCM5LpzjIjkumuNiOS6e4xI5LpnjUjkuneMyOS6b43I5Lp/jCjmumONKOa6c4yo5rprjajmunuMaOa6Z41o5rp3jOjmum+N6Oa6f4wY5bpjjRjlunOMmOW6a42Y5bp7jFjlumeNWOW6d4zY5bpvjdjlun+MOOe6Y40457pzjLjnumuNuOe6e4x457pnjXjnuneM+Oe6b43457p/jATkemONBOR6c4yE5HprjYTkenuMROR6Z41E5Hp2jOR6T47E5Hpfj8TmekOOJOZ6U48k5DnIMcgxzjHKMc0xyTHPMcsxzLHIsc6xyrHNscmxz7HLsczwlx1NzPC3H03M8I8czczwrx7NzPCfHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjxztzvCvHu3O8J8d7c7wvx/tzfCDHB3N8KMeHc3wkx0dzfCzHx3N8Iscnc3wqx6dzfCbHZ3N8Lsfnc3whxxdzfCnHl3N8JcdXc3wtx9dzfCMf8X97S2/n+E6O7+b4Xo7v5/hBjh/+MdKPcvw4x09y/DTHz3L8PMcvcvwyx69y/DrHb3L8Nsfvcvw+xx9y/DHHn3Icmmho6Jccf83xtxx/z/GPHP/M8a8c/87xnxz/zXHkqPUFDitwtAJHL3B4gWMUOGaBYxU4osCxCxynwHELHK/A8QucoMAJC5yowIkLnKTASQucrMDJC5yiwCkLnKrAqQucpsBpC5yuwOkLnKHAGQucqcCZC5ylwFkLnK3A2Quco8A5C5yrwLkLnKfAeQucr8D5C1ygwAULXKhACly4wEUKXLTAxQpcvMAlClyywKUKXLrAZQqGRtW7XIHLF7hCgSsWuFKBKxe4SoGrFrhagasXuEaBaxa4VoFrF7hOgesWuF6B6xe4QYEbFrhRgRsXuEmBmxa4WYGbF7hFgVsWuFWBWxe4TYHbFrhdgdsXuEOBOxa4U4E7F7hLgbsWuFuBuxe4R4F7FrhXgXsXuE+B+xa4X4H7F3hAgQcWeFCBBxd4SIGHFnhYgYcXeETx3zfqyJEjjz+6QAs8psBjCzyuwOMLPKHAEws8qcCTCxwUGBQYFhgVGBeYFJgWmBWYF1gUWBZYFVgX2BTYFtgV2Bd4SoGnFnhagacXeEaBZxZ4VoFnF3hOgecWeF6B5xd4QYEXFnhRgRcXeEmBlxZ4WYGXF3hFgVcWeFWBVxd4TYHXFnhdgdcXeEOBNxZ4U4E3F3hLgbcWeFuBtxd4R4F3FnhXgXcXeE+B9xZ4X4H3F/hAgQ8W+FCBDxf4SIGPFvhYgY8X+ESBTxb4VIFPF/hMgc8W+FyBzxf4QoEvFvhSgS8X+EqBrxb4WoGvF/hGgW8W+FaBbxf4ToHvFvhege8X+EGBHxb4UYEfF/hJgZ8W+FmBnxf4RYFfFvhVgV8X+E2B3xb4XYHfF/hDgT8W+FOBPxf4S4G/Fvhbgb8X+EeBfxb4V4F/F/hPgf+O0kaBQyUOK3G0EkcvcXiJY5Q4ZoljlTiixLFLHKfEcUscr8TxS5ygxAlLnKjEiUucpMRJS5ysxMlLnKLEKUucqsSpS5ymxGlLnK7E6UucocQZS5ypxJlLnKXEWUucrcTZS5yjxDlLnKvEuUucp8R5S5yvxPlLXKDEBUtcqERKXLjERUpctMTFSly8xCVKXLLEpUpcusRlSly2xOVKXL7EFUpcscSVSly5xFVKXLXE1UpcvcQ1SlyzxLVKXLvEdUpct8T1Sly/xA1K3LDEjUrcuMRNSty0xM1K3LzELUrcssStSty6xG1K3LbE7UrcvsQdymHuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5doiUeU+KxJR5X4vElnlDiiSWeVOLJJQ5KDEoMS4xKjEtMSkxLzErMSyxKLEusSqxLbEpsS+xK7Es8pcRTSzytxNNLPKPEM0s8q8SzSzynxHNLPK/E80u8oMQLS7yoxItLvKTES0u8rMTLS7yixCtLvKrEq0u8psRrS7yuxOtLvKHEG0u8qcSbS7ylxFtLvK3E20u8o8Q7S7yrxLtLvKfEe0u8r8T7S3ygxAdLfKjEh0t8pMRHS3ysxMdLfKLEJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxE9L/KzEz0v8osQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEP0v8q8S/S/ynxH9LHFniUIXDKhytwtErHF7hGBWOWeFYFY6ocOwKx6lw3ArHq3D8CieocMIKJ6pw4gonqXDSCiercPIKp6hwygqnqnDqCqepcNoKp6tw+gpnqHDGasTQTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVUuHCFS5S4aIVLlbh4hUuUeGSFS41NHxoVJ3LVLhshctVuHyFK1S4YoUrVbhyhatUuGqFq1W4eoVrVLhmhWtVuHaF61S4boXrVbh+hRtUuGGFG1W4cYWbVLhphZtVuHmFW1S4ZYVbVbh1hdtUuG2F21W4fYU7VLhjhTtVuHOFu1S4a4W7Vbh7hXtUuGeFe1W4d4X7VLhvhftVuH+FB1R4YIUHVXhwhYdUeGiFh1V4eIVHVHhkhUdVeHSFVnhMhcdWeFyFx1d4QoUnVnhShSdXOKgwqDCsMKowrjCpMK0wqzCvsKiwrLCqsB6lkyFsK+wq7Cs8pcJTKzytwtMrPKPCMys8q8KzKzynwnMrPK/C8yu8oMILK7yowosrvKTCSyu8rMLLK7yiwisrvKrCqyu8psJrK7yuwusrvKHCGyu8qcKbK7ylwlsrvK3C2yu8o8I7K7yrwrsrvKfCeyu8r8L7K3ygwgcrfKjChyt8pMJHK3yswscrfKLCJyt8qsKnK3ymwmcrHDnW0NDzFb5Q4YsVvlThyxW+UuGrFb5W4esVvlHhmxW+VeHbFb5T4bsVvlfh+xV+UOGHFX5U4ccVflLhpxV+VuHnFX5R4ZcVflXh1xV+U+G3FX5X4fcV/lDhjxX+VOHPFf5S4a8V/lbh7xX+UeGfFf5V4d8V/lPhv6Pyr3CoxmE1jlbj6DUOr3GMGsescawaR9Q4do3j1DhujePVOH6NE9Q4YY0T1ThxjZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOGONM9U4c42z1DhrjbPVOHuNc9Q4Z41z1Th3jfPUOG+N89U4f40L1LhgjQvVyKgahoaGFqlx0RoXq3HxGpcYdoJL1rhUjUvXuEyNy9a4XI3L17hCjSvWuFKNK9e4So2r1rhajavXuEaNa9a4Vo1r17hOjevWuF6N69e4QY0b1rhRjRvXuEmNm9a4WY2b17hFjVvWuFWNW9e4TY3b1rhdjdvXuEONO9a4U40717hLjbvWuFuNuw8bdsKo/8U9a9yrxr1r3KfGfWvcr8b9azygxgNrPKjGg2s8pMZDazysxsNrPKLGI2s8qsaja7TGY2o8tsbjajy+xhNqPLHGk2o8ucZBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2Np9R4ao2n1Xh6jWfUeGaNZ9V4do3n1HhujefVeH6NF9R4YY0X1XhxjZfUeGmNl9V4eY1X1HhljVfVeHWN19R4bY3X1Xh9jTfUeGONN9V4c4231HhrzUxDQ0PeXuMdNd5Z41013l3jPTXeW+N9Nd5f4wM1PljjQzU+XOMjNT5a42M1Pl7jEzU+WeNTNT5d4zM1PlvjczU+X+MLNb5Y40s1vlzjKzW+WuNrNb5e4xs1vlnjWzW+XeM7Nb5b43s1vl/jBzV+WONHNX5c4yc1flrjZzV+XuMXNX75P7P5dY3f1Phtjd/V+H2NP9T4Y40/1fhzjb/U+GuNv9X4e41/1PhnjX/V+HeN/9T4b40jaxxqcFiDozU4eoPDGxyjwTEbHKvBEQ2O3eA4DY7b4HgNjt/gBA1O2OBEDU7c4CQNTtrgZA1O3uAUDU7Z4FTNyv/nfUzb4HQNTt/gDA3O2OBMDc7c4CwNztrgbA3O3uAcDc7Z4FwNzt3gPA3O2+B8Dc7f4AINLtjgQg3S4MINLtLgog0u1uDiDS7R4JINLtXg0g0u0+CyDS7X4PKjMB/AFRtcqcGVG1ylwVUbXK3B1Rtco8E1G1yrwbUbXKfBdRtcr8H1G9ygwQ0b3KjBjRvcpMFNG9yswc0b3KLBLRvcqsGtG9ymwW0b3K7B7RvcocEdG9ypwZ0b3KXBXRvcrcHdG9yjwT0b3KvBvRvcp8F9G9yvwf0bPKDBAxs8qMGDGzykwUMbPKzBwxs8osEjGzyqwaMbtMFjGjy2weMaPL7BExo8scGTGjy5wUGDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtgyP/+s9sOKXBUxs8rcHTGzyjwf819s9u8JwGz23wvAbPb/CCBi9s8KIGLx6OlzR4aYOXNXh5w8j/OYTsVQ1e3eA1DV7b4HUNXt/gDQ3/e3jbmxu8pcFbG7ytwdsbvKPBOxu8q8G7G7ynwXsbvK/B+xt8oMEHG3yowYcbfKTBRxt8rMHHG3yiwScbfKrBpxt8psFnG3yuwecbfKHBFxt8qcGXG3ylwVcbfK3B1xt8o8E3G3yrwbcbfKfBdxt8r8H3G/ygwQ8b/KjBjxv8pMFPG/yswc8b/KLBLxv8qsGvG/ymwW8b/K7B7xv8ocEfG/ypwZ8b/KXBXxv8rcHfG/yjwT8b/KvBvxv8p8F/hw85chQvLQ5rcbQWR29xeItjtDhmi2O1OGLUdeSE/3W3xfFaHL/FCUaO/H/3E7U4cYuTtDhpi5O1OHmLU7Q4ZYtTtTh1i9O0OG2L07U4fYsztDhjizO1OHOLs7Q4a8toozicvcU5WpyzxblanLvFeVqct8X5Wpy/xQVaXLDFhVqkxYVbXKTFRVtcrMXFW1yixSVbXKrFpVtcpsVlW1yuxeVbXKHFFVtcqcWVW1ylxVVbXK3F1Vtco8U1W1yrxbVbXKfFdVtcr8X1W9ygxQ1b3KjFjVvcpMVNW9ysxc1b3KLFLVvcqsWtW9ymxW1b3K7F7VvcocUdW9ypxZ1b3KXFXVvcrcXdW9yjxT1b3KvFvVvcp8V9W9yvxf1bPKDFA1s8qMWDWzykxUNbPKzFw1s8osUjWzyqxaNbtMVjWjy2xeNaPL7FE1o8scWTWjy5xUGLQYthi1GLcYtJi2mLWYt5i0WLZYtVi3WLTYtti12LfYuntHhqi6e1eHqLZ7R4ZotntXh2i+e0eG6L57V4fosXtHhhixe1eHGLl7R4aYuXtXh5i1e0eGWLV7V4dYvXtHhti9e1eH2LN7R4Y4s3tXhzi7e0eGuLt7V4e4t3tHhni3e1eHeL97R4b4v3tXh/iw+0+GCLD7X4cIuPtPhoi4+1+HiLT7T4ZItPtfh0i8+0+GyLz7X4fIsvtPhiiy+1+HKLr7T4aouvtfh6i2+0+GaLb7X4dovvtPhui++1+H6LH7T4YYsftfhxi5+0+GmLn7X4eYtftPhli1+1+HWL37T4bYvftfh9iz+0+GOLP7X4c4u/tPhri7+1+HuLf7T4Z4t/tfh3i/+0+G+LI1sc6nBYh6N1OHqHwzsco8MxOxyrwxEdjt3hOB2O2+F4HY7f4QQdTtjhRB1O3OEkHU7a4WQdTt7hFB1O2eFUHU7d4TQdTtvhdB1O3+EMHc7Y4UwdztzhLB3O2uFsHc7e4RwdztnhXB3O3eE8Hc7b4Xwdzt/hAh0u2OFCHdLhwh0u0uGiHS7W4eIdLtHhkh0u1eHSHS7T4bIdLtfh8h2u0OGKHa7U4codrtLhqh2u1uHqHa7R4ZodrtXh2h2u0+G6Ha7X4fodbtDhhh1u1OHGHW7S4aYdbtbh5h1u0eGWHW7V4dYdbtPhtsOG3K7D7TvcocMdO9ypw5073KXDXTvcrcPdO9yjwz073KvDvTvcp8N9O9yvw/07PKDDAzs8qMODOzykw0M7PKzDwzs8osMjOzyqw6M7tMNjOjy2w+M6PL7DEzo8scOTOjy5w0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYendHhqh6d1eHqHZ3R4ZodndXh2h+d0eG6H53V4focXdHhhhxd1eHGHl3R4aYeXdXh5h1d0eGWHV3V4dYfXdHhth9d1eH2HN3R4Y4c3dXhzh7d0eGuHt3V4e4d3dHhnh3d1eHeH93R4b4f3dXh/hw90+GCHD3X4cIePdPhoh491+HiHT3T4ZIdPdfh0h890+GyHz3X4fIcvdPhihy91+HKHr3T4aoevdfh6h290+GaHb3X4dofvdPhuh+91+H6HH3T4YYcfdfhxh590+GmHn3X4eYdfdPhlh191+HWH33T4bYffdfh9hz90+GOHP3X4c4e/dPhrh791+HuHf3T4Z4d/dfh3h/90+G+HIzsc6nFYj6P1OHqPw3sco8cxexyrxxE9jt3jOD2O2+N4PY7f4wQ9TtjjRD1O3OMkPU7a42Q9Tt7jFD1O2eNUPU7d4zQ9TtvjdD1O3+MMPc7Y40w9ztzjLD3O2uNsPc7e4xw9ztnjXD3O3eM8Pc7b43w9zt/jAj0u2ONCPdLjwj0u0uOiPS7W4+I9LtHjkj0u1ePSPS7T47I9Ltfj8j2u0OOKPa7U48o9rtLjqj2u1uPqPa7R45o9rtXj2j2u0+O6Pa7X4/o9btDjhj1u1OPGPW7S46Y9btbj5j1u0eOWPW7V49Y9btPjtjPhdj1u3+MOPe7Y40497tzjLj3u2uNuPX+O7HGPHvfsca8e9+5xnx737XG/Hvfv8YAeDxxzaGgUhwf3eEiPh/Z4WI+H93hEj0f2eFSPR/doj8f0eGyPx/V4fI8n9Hhijyf1eHKPgx6DHsMeox7jHpMe0x6zHvMeix7LHqse6x6bHtseux77Hk/p8dQeT+vx9B7P6PHMHs/q8ewez+nx3B7P6/H8Hi/o8cIeL+rx4h4v6fHSHi/r8fIer+jxyh6v6vHqHq/p8doer+vx+h5v6PHGHm/q8eYeb+nx1h5v6/H2Hu/o8c4e7+rx7h7v6fHeHu/r8f4eH+jxwR4f6vHhHh/p8dEeH+vx8R6f6PHJHp/q8eken+nx2R6f6/H5Hl/o8cWh/3h4ucdXeny1x9d6fL3HN3p8s8e3eny7x3d6fLfH93p8v8cPevywx496/LjHT3r8tMfPevy8xy96/LLHr3r8usdvevz2/yPqHKPHurq9m6RpmtS27XbWbmrbtm3MIrWdY+Nf27Zt27aRvKPPfe59v59xxl57/sZe2mOv0fjdaPx+NP4wGn8cjT+Nxp9H4y+j8dfR+Nto/H00/jEa/xyNf43Gv0fjP6NxzGj8V2ODAhwc4JAAxwlwaIDjBjgswPECHB7giADHD3CCACcMcKIAJw5wkgAnDXCyACcPcIoApwxwqgCnDnCaAKcNcLoApw9whgBnDHCmAGcOcJYAZw0Y/u8aZg9wjgDnDHCuAOcOcJ4A5w1wvgDnD3CBABcMcKEAFw5wkQAXDZAAFwtw8QCXCHDJAJcKcOkAlwlw2QCXC3D5AFcIcMUAVwpw5QBHBrhKgKsGuFqAqwe4RoBrBrhWgGsHuE6A6wa4XoDrB7hBgBsGuFGAGwe4SYCbBrhZgJsHuEWAWwa4VYBbB7hNgNsGuF2A2we4Q4A7BrhTgDsHuEuAuwa4W4C7B7hHgHsGuFeAewe4T4D7BrhfgPsHeECABwZ4UIAHB3hIgIcGeFiAhwd4RIBHBnhUMGrQ0QEeE+CxARrgcQEeH+AJAZ4Y4KgATwrw5ABPCfDUAE8L8PQAzwjwzADPCvDsAM8J8NwT/5tpB3hBgBcGeFGAFwd4SYCjAwwCDAOMAowDTAJMA8wCzAMsAiwDrAKsA2wCbAPsAuwDHAjw0gAvC/DyAK8I8MoArwrw6oBx/zfXvy7A6wO8IcAbA7wpwJsDvCXAWwO8LcDbA7wjwDsDvCvAuwO8J8B7A7wvwPsDfCDABwN8KMCHA3wkwEcDfCzAxwN8IsAnA3wqwKcDfCbAZwN8LsDnA3whwBcDfCnAlwN8JcBXA3wtwNcDfCPANwN8K8C3A3wnwHcDfC/A9wP8IMAPA/wowI8D/CTATwP8LMDPA/wiwC8D/CrArwP8JsBvA/wuwO8D/CHAHwP8KcCfA/wlwF8D/C3A3wP8I8A/A/wrwL8D/CfAMQGODXBQiINDHBLiOCEODXHcEIeFOF6Iw0McEeL4IU4Q4oQhThTixCFOEuKkIU4W4uQhThHilCFOFeLUIU4T4rQhThfi9CHOEOKMIc4U4swhzhLirCHOFuLsIc4R4pwhzhXi3CHOE+K8Ic4X4vwhLhDigiEuFOLCIS4S4qIhEuJiIS4e4hIhLhniUiEuHeIyIS4b4nIhLh/iCuGI/6tHrhziyBBXCXHVEFcLcfUQ1whxzRDXCnHtENcJcd0Q1wtx/RA3CHHDEDcKceMQNwlx0xA3C3HzELcIccsQtwpx6xC3CXHbELcLcfsQdwhxxxB3CnHnEHcJcdcQdwtx9xD3CHHPEPcKce8Q9wlx3xD3C3H/EA8I8cAQDwrx4BAPCfHQEA8L8fAQjwjxyBCPCvHoEI8J8dgQDfG4EI8P8YQQTwxxVIgnhXhyiKeEeGqIp4V4eohnhHhmiGeFeHaI54R4bojnhXh+iBeEeGGIF4V4cYiXhDg6xCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EgRAvDfGyEC8P8YoQrwzxqhCvDvGaEK8N8boQrw/xhhBvDPGmEG8O8ZYQbw3xthAHPe84d4R4Z4h3hXh3iPeEeG+I94V4f4gPhPhgiA+F+HCIj4T4aIiPhfh4iE+E+GSIT4X4dIjPhPhsiM+F+HyIL4T4YogvhfhyiK+E+GqIr4X4eohvhPhmiG+F+HaI74T4bojvhf85y/wgxA9D/CjEj0P8JMRPQ/wsxM/DwX4R4pchfhXi1yF+E+K3IX4X4vch/hDijyH+FOLPIf4S4q8h/hbi7yH+EeKfIf4V4t8h/hPimBDH/rs/EQ6OcEiE40Q4NMJxIxwW4XgRDo9wRITjRzhBhBNGOFGEE0c4SYSTRjhZhJNHOEWEU0Y4VYRTRzhNhNNGOF2E00c4Q4QzRjhThDNHOEuEs0Y4W4SzRzhHhHNGOFeEc0c4T4TzRjhfhPNHuECEC0a4UIQLR7hIhItGSISLRbh4hEtEuGSES0W4dITLRLhshMtFuHyEK0S4YoQrRbhyhCMjXCXCVSNcLcLVI1wjwjUjXCvCtSNcJ8J1I1wvwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQ6Ohgw6L8PAIj4jwyAiPivDoCI+J8NgIjfC4CI+P8IQIT4xwVIQnRXhyhKdEeGqEp0V4eoRnRHhmhGdFeHaE50T4V4TnRXh+hBdEeGGEF0V4cYSXRDg6wiDCMMIowjjCJMI0wizCPMIiwjLCKsI6wibCNsIuwj7CgQgvjfCyCC+P8IoIr4zwqgivjvCaCK+N8LoIr4/whghvjPCmCG+O8JYIb43wtghvj/COCO+M8K4I747wngjvjfC+CO+P8IEIH4zwoQgfjvCRCB+N8LFo2H/8xBMRPhnhUxE+HeEzET4b4XMRPh8N+c83L0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRvhZhJ9H+EWEX0b4VYRfR/hNhN9G+F2E30f4Q4Q/RvhThD9H+EuEv0b4W4S/R/hHhH/+l93fEf4T4ZgIx0Y4KMbBMQ6JcZwYh8Y4bozDYhwvxuExjohx/BgniHHCGCeKceIYJ4lx0hgniz8YNHmMU8Q4ZYxTxTh1jNPEOG2M08U4fYwzxDhjjDPFOHOMs8Q4a4yzxTh7jHPEOGeMc8U4d4zzxDhvjPPFOH+MC8S4YIwLxbhwjIvEuGiMxLhYjIvHuESMS8a4VIxLx7hMjMvGuFyMy8e4QowrxrhSjCvHODLGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjw2RmM8LsbjYzwhxhNjHBXjSTGeHOMpMZ4a42kxnh7jGTGeGeNZMZ4d4zkxnhvjeTGeH+MFMV4Y40UxXhzjJTGOjjGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GPcSDGS2O8LMbLY7wixitjvCrGq2O8JsZrY7wuxutjvCHGG2O8KcabY7wlxltjvC3G22O8I8Y7Y7wrxrtjvCfGe2O8L8b7Y3wgxgdjfCjGh2N8JMZHY3wsxsdjfCLGJ2N8KsanY3wmxmdjfC7G52N8IcYXY3wpxpdjfCXGV2N8LcbXY3wjxjdjfCvGt2N8J8Z3Y3wvxvdj/CDGD2P8KMaPY/wkxk9j/CzGz2P8IsYvY/wqxq9j/CbGb2P8LsbvY/whxh9j/CnGn2P8JcZfY/wtxt9j/CPGP2P8K8a/Y/wnxjExjo1xUIKDExyS4DgJDk1w3ASHJThegsMTHJHg+AlOkEz2f7HzxAlOkuCkCU6W4OQJTpHglAlOleDUCU6T4LQJTpfg9AnOkOCMCc6U4MwJzpLgrAnOluDsCc6R4JwJzpXg3AnOk+C8Cc6X4PwJLpDgggkulODCCS6S4KIJkuBiCS6e4BIJLpngUgkuneAyCS6b4HIJLp/gCgmumOBKCa6c4MgEV0lw1QRXS3D1BNdIcM0E10pw7QTXSXDdBNdLcP0EN0hwwwQ3SnDjBDdJcNMEN0tw8wS3SHDLBLdKcOsEt0lw2wS3S3D7BHdIcMcEd0pw5wR3SXDXBHdLcPcE90hwzwT3SnDvBPdJcN8E90tw/wQPSPDABA9K8OAED0nw0AQPS/DwBI9I8MgEj0rw6ASPSfDYBE3wuASPT/CEBE9McFSCJyV4coKnJHhqgqcleHqCZyR4ZoJnJXh2guckeG6C5yV4foIXJCP+o4WLErw4wUsSHJ1gkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn+BAgpcmeFmClyd4RYJXJnhVglcneE2C1yZ4XYLXJ3hDgjcmeFOCNyd4S4K3JnhbgrcneEeCdyZ4V4J3J3hPgvcmeF+C9yf4QIIPJvhQgg8n+EiCjyb4WIKPJ/hEgk8m+FSCTyf4TILPJvhcgs8n+EKCLyb4UoIvJ/hKgq8m+FqCryf4RoJvJvhWgm8n+E6C7yb4XoLvJ/hBgh8m+FGCHyf4SYKfJvhZgp8n+EWCXyb4VYJfJ/hNgt8m+F2C3yf4Q4I/JvhTgj8n+EuCvyb4W4K/J/hHgn8m+FeCfyf4T4JjEhyb4KAUB6c4JMVxUhya4rgpDktxvBSHpzgixfFTnCDFCVOcKMWJU5wkxUlTXHf4oEGTpzhFilOmOFWKU6c4TYrTpjhditOnOEOKM6Y4U4ozpzhLirOmOFuKs6c4x7BBzpniXCnOneI8Kc6b4nwpzp/iAoNwwRQXSnHhFBdJcdEUSXGxFBdPcYkUl0xxqRSXTnGZFJdNcbkUl09xhRRXTHGlFFdOcWSKq6S4aoqrpbh6imukuGaKa6W4dorr/GtjiuuluH6KG6S4YYobpbhxipukuGmKm6W4eYpbpLhliluluHWK26S4bYrbpbh9ijukuGOKO6W4c4q7pLhriruluHuKe6S4Z4p7pbh3ivukuG+K+6W4f4oHpHhgigeleHCKh6R4aIqHpXh4ikekeGSKR6V4dIrHpHhsiqZ4XIrHp3hCiiemOCrFk1I8OcVTUjw1xdNSPD3FM1I8M8WzUjw7xXNSPDfF81I8P8ULUrwwxYtSvDjFS1IcnWKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2Kf4kCKl6bXe1mKl6d4RYpXpnhVileneE2K16Z4XYrXp3hDijemeFOKN6d4S4q3pnhbireneEeKd6Z4V4p3p3hPivemeF+K96f4QIoPpvhQig+n+EiKj6b4WIqPp/hEik+m+FSKT6f4TIrPpvhcis+n+EKKL6b4Uoovp/hKiq+m+FqKr6f4RopvpvhWim+n+E6K76b4Xorvp/hBih+m+FGKH6f4SYqfpvhZip+n+EWKX6b4VYpfp/hNit+m+F2K36f4Q4o/pvhTij+n+EuKv6b4W4q/p/hHin+m+FeKf6f4T4pjUhyb4qAMB2c4JMNxMhya4bgZDstwvAyHZzgiw/EznCDDCTOcKMOJM5wkw0kznCzDyTOcIsMpM5wqw6kznCbDaTOcLsPpM5whwxkznCnDmTOcJcNZM5wtw9kznCPDOTOcK8O5M5wnw3kznC/D+TNcIMMFM1wow4UzXCTDRTMkw8UyXDzDJTJcMsOlMlw6w2UyXDbD5TJcPsMVMlwxw5UyXDnDkRmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDhjhnulOHOGe6S4a4Z7pbh7tmJ7pHhnhnuleHeGe6T4b4Z7pfh/hkekOGBGR6U4cEZHpLhoRkeluHhGR6R4ZEZHpXh0Rkek+GxGZrhcRken+EJGZ6Y4agMT8rw5AxPyfDUDE/L8PQMz8jwzAzPyvDsDM/J8NwMz8vw/AwvyPDCDC/K8OIML8lwdIZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ9hgMZXprhZRlenuEVGV6Z4VUZXp3hNRlem+F1GV6f4Q0Z3pjhTRnenOEtGd6a4W0Z3p7hHRnemeFdGd6d4T0Z3pvhfRnen+EDGT6Y4UMZPpzhIxk+muFjGT6e4RMZPpnhUxk+neEzGT6b4XMZPp/hCxm+mOFLGb6c4SsZvprhaxm+nuEbGb6Z4VsZvp3hOxm+m+F7Gb6f4QcZfpjhRxl+nOEnGX6a4WcZfp7hFxl+meFXGX6d4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/GY7JcGyGg3IcnOOQHMfJcWiO4+Y4LMfx8pEOz3FEjuPnOEGOE+Y4UY4T5zhJjpPmOFmOk+c4RY5T5jhVjlPnOE2O0+Y4XY7T5zhDjjPmOFOOM+c4S46z5jhbjrPnOEeOc+Y4V45z5zhPjvPmOF+O8+e4QI4L5rhQjgvnuEiOi+ZIjovluHiOS+S4ZI5L5bh0jsvkuGyOy+W4fI4r5LhijivluHKOI3NcJcdVc1wtx9VzXCPHNXNcK8e1c1wnx3VzXC/H9XPcIMcNc9wox41z3CTHTXPcLMfNc9wiZ/DQ//aots5xmxy3zXG7HLfPcYccd8xxpxx3znGXHHfNcbccd89xjxz3zHGvHPfOcZ8c981xvxz3z/GAHA/M8aAcD87xkBwPzfGwHA/P8Ygcj8zxqByPzvGYHI/N0RyPy/H4HE/I8cQcR+V4Uo4n53hKjqfmeFqOp+d4Ro5n5nhWjmPHjhl7To7n5nhejufneEGOF+Z4UY4X53hJjqNzDHIMc4xyjHNMckxzzHLMcyxyLHOscqxzbHJsc+xy7HMcyPHSHC/L8fIcr8jxyhyvyvHqHK/J8docr8vx+hxvyPHGHG/K8eYcb8nx1hxvy/H2HO/I8c4c78rx7hzvyfHeHO/L8f4cH8jxwRwfyvHhHB/J8dEcH8vx8RyfyPHJHJ/K8ekcn8nx2Ryfy/H5HF/I8cUcX8rx5RxfyfHVHF/L8fUc38jxzRzfyvHtHN/J8d0c38vx/Rw/yPHDHD/K8eMcP8nx0xw/y/HzHL/I8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/yvHnHH/J8dccf8vx9xz/yPHPHP/K8e8c/8lxzL9McxxU4OAChxQ4ToFDCxy3wGEFjlfg8AJHFDh+gRMUOGGBExU4cYGTFDhpgZMVOHmBUxQ4ZYFTFTh1gdMUOG2B0xU4fYEzFDhjgTMVOHOBsxQ4a4GzFTh7gXMUOGeBcxU4d4HzFDhvgfMVOH+BCxS4YIELFbhwgYsUuGiBFLhYgYsXuESBSxa4VIFLF7hMgcsWuFyByxe4QoErFrhSgSsXOLLAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcuWDw//azdytw9wL3KHDPAvcqcO8C9ylw3wL3Kxj5L68DCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2QAs8rsDjCzyhwBMLHFXgSQWeXOApBZ5a4GkFnl7gGQWeWeBZBZ5d4DkFnlvgeQWeX+AFBV5Y4EUFXlzgJQWOLjAoMCwwKjAuMCkwLTArMC+wKLAssCqwLrApsC2wK7AvcKDASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qWDIzQXeUuCtBd5W4O0F3lHgnQXeVeDdBd5T4L0F3lfg/QU+UOCDBT5U4MMFPlLgowU+VuDjBT5R4JMFPlXg0wU+U+CzBT5X4PMFvlDgiwW+VODLBb5S4KsFvlbg6wW+UeCbBb5V4NsFvlPguwW+V+D7BX5Q4IcFflTgxwV+UuCnBX5W4OcFflHglwV+VeDXBX5T4LcFflfg9wX+UOCPBf5U4M8F/lLgrwX+VuDvBf5R4J8F/lXg3wX+U+CYAscWOKjEwSUOKXGcEoeWOG6Jw0ocr8ThJY4ocfwSJyhxwhInKnHiEicpcdISJytx8hKnKHHKEqcqceoSpylx2hKnK3H6EThDiTOWOFOJM5c4S4mzljhbibOXOEeJc5Y4V4lzlzhPifOWOF+J85e4QIkLlrhQiQuXuEiJi5ZIiYuVuHiJS5S4ZIlLlbh0icuUuGyJy5W4fIkrlLhiiSuVuHKJI0tcpcRVS1ytxNVLXKPENUtcq8S1S1ynxHVLXK/E9UvcoMQNS9yoxI1L3KTETUvcrMTNS9yixC1L3KrErUvcpsRtS9yuxO1L3KHEHUvcqcSdS9ylxF1L3K3E3Uvc418GgwYN2qvEvUvcp8R9S9yvxP1LPKDEA0s8qMSDSzykxENLPKzEw0s8osQjSzyqxKNLPKbEY0u0xONKPL7EE0o8scRRJZ5U4sklnlLiqSWeVuLpJZ5R4pklnlXi2SWeU+K5JZ5X4vklXlDihSVeVOLFJV5S4ugSgxLDEqMS4xKTEtMSsxLzEosSyxKrEusSmxLbErsS+xIHSry0xMtKvLzEK0q8ssSrSry6xGtKvLbE60q8vsQbSryxxJvK/z+v4NYSbyvx9hLvKPHOEu8q8e4S7ynx3hLvK/H+Eh8o8cESHyrx4RIfKfHREh8r8fESnyjxyRKfKvHpEp8p8dkSnxuFz5f4QokvlvhSiS+X+EqJr5b4Womvl/hGiW+W+FaJb5f4Tonvlvheie+X+EGJH5b4UYkfl/hJiZ+W+FmJn5f4RYlflvhViV+X+E2J35b4XTl27P/W438s8acSfy7xlxJ/LfG3En8v8Y8S/yzxrxL/LvGfEseUOLbEQRUOrnBIheNUOLTCcSscVuF4FQ6vcESF41c4QYUTVjhRhRNXOEmFk1Y4WYWTVzhFhVNWOFWFU1c4TYXTVjhdhdNXOEP1P3NYZqpw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QqpcLEKF6/+593YJStcqsKlK1ymwmUrXK7C5StcocIVK1ypwpUrHFnhKhWuWuFqFa5e4RoVrlnhWhWuXeE6Fa5b4XoVrl/hBhVuWOFGFW5c4SYVblrhZhVuXuEWFW5Z4VYVbl3hNhVuW+F2FW5f4Q4V7ljhThXuXOEuFe5a4W4V7l7hHhXuWeFeFe5d4T4V7lvhfhXuX+EBFR5Y4UEVHlzhIRUeWuFhFR5e4REVHlnhURUeXeExFR5boRUeV+HxFZ5Q4YkVjqrwpApPrvCUCk+t8LQKT6/+jfn/R11nVXh2hedUeG6F51V4foUXVHhhhRdVeHGFl1Q4usKgwrDCqMK4wqTCtMKswrzCosKywqrCusKmwrbCrsK+woEKL63wsgovr/CKCq+s8KoKr67wmgqvrfC6Cq+v8IYKb6zwpgpvrvCWCm+t8LYKb6/wjgrvrPCuCu+u8J4K763wvgrvr/CBCh+s8KEKH67wkQofrfCxCh+v8IkKn6zwqQqfrvCZCp+t8LkKn6/whQpfrPClCl+u8JUKX63wtQpfr/CNCt+s8K0K367wnQrfrfC9Ct+v8IMKP6zwowo/rvCTCj+t8LMKP6/wiwq/rPCrCr+u8JsKv63wuwq/r/CHCn+s8KcKf67wlwp/rfC3Cn+v8I8K/6zwrwr/rvCfCsf8y7fCQTUOrnFIjePUOLTGcWscVuN4NQ6vcUSN49c4QY0T1jhRjRPXOEmNk9Y4WY2T1zhFjVPWOFWNU9c4TY3T1jhdjdPXOEONM9Y4U40z1zhLjbPWOFuNs9c4R41z1jhXjXPXOE+N89Y4X43z17hAjQvWuFCNC9e4SI2L1kiNi9W4eI1L1LhkjUvVuHSNy9S4bI3L1bh8jSvUuGKNK9W4co0ja1ylxlVrXK3G1Wtco8Y1a1yrxrVrXKfGdWtcr8b1a9ygxg1r3KjGjWvcpMZNa9ysxs1r3KLGLWvcqsata9ymxm1r3K7G7WvcocYda9ypxp1r3KXGXWvcrcbda9yjxj1r3KvGvWvcp8Z9a9yvxv1rPKDGA2s8qMaDazykxkNrPKzGw2s8osYjazyqxqNrPKbGY2u0xuNqPL7GE2o8scZRNZ5U48k1nlLjqTWeVuPpNZ5R45k1nlXj2TWeU+O5NZ5X4/k1XlDjhTVeVOPFNV5S4+gagxrDeuR//FJcY1JjWmNWY15jUWNZY1VjXWNTY1tjV2Nf40CNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjQ/W+FCND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb/X+EeNf9b4V41/1/hPjWNqHFvjoAYHNzikwXEaHNrguA0Oa3C8Boc3OKLB8RucoMEJG5yowYkbnKTBSRucrMHJG5yiwSkbnKrBqRucpsFpG5yuwekbnKHBGRucqcGZG5ylwVkbnK3B2Ruco8E5G5yrwbkbnKfBeRucr8H5G1ygwQUbXKjBhRtcpMFFG6TBxRpcvMElGlyywaUaXLoZ/7Bs8v+Jj5ZrcPkGV2hwxQZXanDlBkc2uEqDqza4WoOrN7hGg2s2uFaDazcMX6fBdRtcr8H1G9ygwQ0b3KjBjRvcpMFNG9yswc0b3KLBLRvcqsGtG9ymwW0bHDQUt29whwZ3bHCnBnducJcGd21wtwZ3b3CPBvdscK8G925wnwb3bXC/Bvdv8IAGD2zwoAYPbvCQBg9t8LAGD2/wiAaPbPCoBo9u8JgGj23QBo9r8PgGT2jwxAZHNXhSgyc3eEqDpzZ4WoOnN3hGg2c2eFaDZzd4ToPnNnheg+c3eEGDFzZ4UYMXN3hJg6MbDBoMG4wajBtMGkznTswazBssGiwbrBqsG2wabBvsGuwbHGjw0gYva/DyBq9o8MoGr2rw6gavafDaBq9r8PoGb2jwxgZvavDmBm9p8NYGb2vw9gbvaPDOBu9q8O4hgwb9q/l7G7yvwfsbfKDBBxt8qMGHG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8E/G/yrwb8b/KfBMQ2O/VeTLQ5ucUiL47Q4tMVxWxzW4ngtDm9xRIvjtzhBixO2OFGLE7c4SYuTtjhZi5O3OEWLU7Y4VYtTjzfIaVqctsXpWpy+xRlanLHFmVqcucVZWpy1xdlanL3FOVqcs8W5Wpy7xXlanLfF+Vqcv8UFWlywxYVaXLjFRVpctEVaXKzFxVtcosUlW1yqxaVbXKbFZVtcrsXlW1yhxRVbXKnFlVsc2eIqLa7a4motrt7iGi2u2eJaLa7d4jotrtviei2u3+IGLW7Y4kYtbtziJi1u2uJmLW7e4hYtbtniVi1u3eI2LW7b4nYtbt/iDi3u2OJOLe7c4i4t7tribi3u3uIeLe7Z4l4t7t3iPi3u2+J+Le7f4gEtHtjiQS0e3OIhLR7a4mEtHt7iES0e2eJRLR7d4jEtHtuiLR7X4vEtntDiiS2OavGkFk9u8ZQWT23xtBZPb/GMFs9s8awWz27xnBbPbfG8Fs9v8YIWL2zxohYvbvGSFke3GLQYthi1GLeYtJi2mLWYt1i0WLZYtVi32LTYtti12Lc40OKlLV7W4uUtXtHilS1e1eLVLV7T4rUtXtfi9S3e0OKNLd7U4s0t3tLirS3e1uLtLd7R4p0t3tXi3S3e0+K9Ld7X4v0tPtDigy0+1OLDLT7S4qMtPtbi4y0+0eKTLT7V4tMtPtPisy0+1+LzLb7Q4ostvtTiyy2+0uKrLb7W4ustvtHimy2+1eLbLb7T4rstvtfi+y1+0PJvWuxHLX7c4ictftriZy1+3uIX7VC/bPGrFr9u8ZsWv23xuxa/b/GHFn9s8acWf27xlxZ/bfG3Fn9v8Y8W/2zxrxb/bvGfFse0OLbFQR0O7nBIh+N0OLTDcTsc1uF4HQ7vcESH43c4QYcTdjhRhxN3OEmHk3Y4WYeTdzhFh1N2OFWHU3c4TYfTdjhdh9N3OEOHM3Y4U4czdzhLh7N2OFuHs3c4R4dzdjhXh3N3OE+H83Y4X4fzd7hAhwt2uFCHC3e4SIeLdkiHi3W4eIdLdLhk9/9r6st0uGyHy3UM+tfWFTpcscOVOly5w5EdrtLhqh2u1uHqHa7R4ZodrtXh2h2u0+G6Ha7X4fodbtDhhh1u1OHGHW7S4aYdbtbh5h1u0eGWHW7V4dYdbtPhth1u1+H2He7Q4Y4d7tThzh3u0uGuHe7W4e4d7tHhnh3u1eHeHe7T4b4d7tfh/h0e0OGBHR7U4cEdHtLhoR0e1uHhHR7R4ZEdHtXh0R0e0+GxHdrhcR0e3+EJHZ7Y4agOT+rw5A5P6fDUDk/r8PQOz+jwzA7P6vDsDs/p8NwOz+vw/A4v6PDCDi/q8OIOL+lwdIdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9hwMdXtrhZR1e3uEVHV7Z4VUdXt3hNR1e2+F1HV7f4Q0d3tjhTR3e3OEtHd7a4W0d3t7hHR3e2Q3+v7ur93R4b4f3dXh/hw90+GCHD3X4cIePdPhoh491+HiHT3T4ZIdPdfh0h890+GyHz3X4fIcvdPhihy91+HKHr3T4aoevdfh6h290+GaHb3X4dofvdPhuh+91+H6HH3T4YYcfdfhxh590+GmHn3X4eYdfdPhlh191+HWH33T4bYffdfh9hz90+GOHP3X4c4e/dPhrh791+HuHf3T4Z4d/dfh3h/90OKbDsR0O6nFwj0N6HKfHoT2O2+OwHsfrcXiPI3ocv8cJepywx4l6nLjHSXqctMfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1n++//Zepy9xzl6nLPHuXqcu8d5epy3x/l6nL/HBXpcsMeFely4x0V6XLRHelysx8V7XKLHJXtcqsele1ymx2V7XK7H5XtcoccVe1ypx5V7HNnjKj2u2uNqPa7e4xo9rtnjWj2u3eM6Pa7b43o9rt/jBj1u2ONGPW7c4yY9btrjZj1u3uMWPW7Z41Y9bt3jNj1u2+N2PW7f4w497tjjTj3u3OMuPe7a42497t7jHj3u2eNePe7d4z497tvjfj3u3+MBPR7Y40E9HtzjIT0e2uNhPR7e4xE9HtnjUT0e3eMxPR7boz0e1+PxPZ7Q44k9jurxpB5P7vGUHk/t8bQeT+/xjB7P7PGsHs/u8Zwez+3xvB7P7/GCHi/s8aIeL+7xkh5H9xj0GPYY9Rj3mPSY9pj1mPdY9Fj2WPVY99j02PbY9dj3ONDjpf/lc3mPV/R4ZY9X9Xh1j9f0eG2P1/V4fY839Hhjjzf1eHOPt/R4a4+39Xh7j3f0eGePd/V4d4/39Hhvj/f1eH+PD/T4YI8P9fhwj4/0+GiPj/X4eI9P9Phkj0/1+HSPz/T4bI/P9fh8jy/0+GKPL/X4co+v9Phqj6/1+HqPb/T4Zo9v9fh2j+/0+G6P7/X4fo8f9Phhjx/1+HGPn/T4aY+f9fh5j1/0+GWPX/X4dY/f9Phtj9/1+H2PP/T4Y48/9fhzj7/0+GuPv/X4e49/9Phnj3/1+HeP//Q4psexPQ4awMEDOGQAxxnAoQM47gAOG8DxBnD4AI4YwPEHcIIBnHAAJxrAiQdwkgGcdAAnG8DJB3CKAZxyAKcawKkHcJoBnHYAp/t/RL1z8OdJ0Kz7m8XM2ratZ23btm37WcysbVsfG9+1bdu27bmx533Puf1/d0dlZEZ0V1RWBThdgNMHOEOAMwY4U4AzBzhLgLMG/69P/eg5ApwzwLkCnDvAeQKcN8D5Apw/wAUCXDDAhQJcOMBFAiTARQNcLMDFA1wiYIz/4loqwKUDXCbAZQNcLsDlA1whwBUDXCnAlQNcJcBVA1wtwNUDXCPANQNcK8C1A1wnwHUDXC/A9QPcIMANA9wowI0D3CTATQPcLMDNA9wiwC0D3CrArQPcJsBtA9wuwO0D3CHAHQPcKcCdA9wlwF0D3C3A3QPcI8A9A9wrwL0D3CfAfQPcL8D9AzwgwAMDPCjAgwM8JMBDAzwswMMDPCLAIwM8KsCjAzwmwGMDNMDjAjw+wBMCPDHAkQGOCvCkAE8O8JQATw3wtABPD/CMAM8M8KwAzw7wnADPDfC8AM8P8IIALwzwogAvDvCSAC8N8LIALw/wigCvDPCqAK8O8JoArw3wugCvD/CGAG8M8KYAbw7wlgCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AAcB3hrgbQHeHuAdAd4Z4F0B3h3gPQHeG+B9Ad4f4AMBPhjgQwE+HOAjAT4a4GMBPh7gEwE+GeBTAT4d4DMBPhvgcwE+H+ALAb4Y4EsBvhzgKwG+GuBrAb4e4BsBvhngWwG+HeA7Ab4b4HsBvh/gBwF+GOBHAX4c4CcBfjo05GcBfh7gFwF+GeBXAX4d4DcBfhvgdwF+H+APAf4Y4E8B/hzgLwH+GuBvAf4e4B8B/hngXwH+HeA/Af77n+YCHApxWIhjhDhmiGOFOHaIw0McEeI4IY4b4nghjh/iBCFOGOJEIU4c4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCF7/vdunyvEuUOcJ8R5Q5wvxPlDXCDEBUNcKMSFQ1wkREJcNMTFQlw8xCVCXDLEpUJcOsRlQlw2xOVCXD7EFUJcMcSVQlw5xFVCXDXE1UJcPcQ1QlwzxLVCXDvEdUJcN8T1Qlw/xA1C3DDEjULcOMRNQtw0xM1C3DzELULcMsStQtw6xG1C3DbE7ULcPsQdQtwxxJ1C3DnEXULcNcTdQtw9xD1C3DPEvULcO8R9Qtw3xP1C3D/EA0I8MMSDQjw4xENCPDTEw0I8PMQjQjwyxKNCPDrEY0I8NkRDPC7E40M8IcQTQxwZ4qgQTwrx5BBPCfHUEE8L8fQQzwjxzBDPCvHsEM8J8dwQzwvx/BAvCPHCEC8K8eIQLwnx0hAvC/HyEK8I8coQrwrx6hCvCfHaEK8L8foQbwjxxhBvCvHmEG8JMQgxDDEKMQ4xCTENMQsxD7EIsQyxCrEOsQmxDbELsQ9xEOKtId4W4u0h3hHinSHeFeLdId4T4r0h3hfi/SE+EOKDIT4U4sMhPhLioyE+FuLjIT4R4pMhPhUO+XSIz4T4bIjPhfh8iC+E+GKIL4X4coivhPhqiK+F+HqIb4T4Zohvhfh2iO+E+G6I74X4fogfhPhhiB+F+HGIn4T4aYifhfh5iF+E+GWIX4X4dYjfhPhtiN+F+H2IP4T4Y4g/hfhziL+E+GuIv4X4e4h/hPhniH+F+HeI/4T4b4ijQxyKcFiEY0Q4ZoRjRTh2hMMjHBHhOBGOG+F4EY4f4QQRThjhRBFOHOEkEU4a4WQRTh7hFBFOGeFUEU4d4TQRThvhdBFOH+EMEc4Y4UwRzhzhLBHOGuFsEc4e4RwRzhnhXBHOHeE8Ec4b4XwRzh/hAhEuGOFCES4c4SIREuGiES4W4eIRLhHhkhEuFeHSES4T4bIRLhfh8hGuEOGKEa4U4coRrhLhqhGuFuHqEa4R4ZoRrhXh2hGuE+G6Ea4X4foRbhDhhhFuFOHGEW4S4aYRbhbh5hFuEeGWEW4V4dYRbhPhthFuF+H2Ee4Q4Y4R7hThzhHuEuGuEe4W4e4R7jF6tHtGuFeEe0e4T4T7RrhfhPtHeECEB0Z4UIQHR3hIhIdGeFiEh0d4RIRHRnhUhEdHeEyEx0ZohMdFeHyEJ0R4YoQjIxwV4UkRnhzhKRGeGuFpEZ4e4RkRnhnhWRGeHeE5EZ4b4XkRnh/hBRFeGOFFEV4c4SURXhrhZRFeHuEVEV4Z4VURXh3hNRFeG+F1EV4f4Q0R3hjhTRHeHOEtEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYRDiK8NcLbIrw9wjsivDPCuyK8O8J7Irw3wvsivD/CByJ8MMKHInw4wkcifDTCxyJ8PMInInwywqcifDrCZyJ8NsLnInw+whcifDHClyJ8OcJXInw1wtcifD3CNyJ8M8K3Inw7wncifPd/NfZ+hB9E+GGEH0X4cYSfRPhphJ9F+HmEX0T4ZYRfRfh1hN9E+G2E30X4fYQ/RPhjhD9F+HOEv0T4a4S/Rfh7hH9E+GeEf0X4d4T/RPhvhKMjHIpxWIxjxDhmjGPFOHaMw2McEeM4MY4b43gxjh/jBDFOODQ09N++iWOcJMZJY0ZNFuPkMU4R45QxThXj1DFOEzNs6H9SL04/YsgZYpwxxplinDnGWWKcNcbZYpw9xjlinDPGuWKcO8Z5Ypw3xvlinD/GBWJcMMaFYlw4xkViJMZFY1wsxsVjXCLGJWNcKsalY1wmxmVjXC7G5WNcIcYVY1wpxpVjXCXGVWNcLcbVY1wjxjVjXCvGtWNcJ8Z1Y1wvxvVj3CDGDWPcKMaNY9wkxk1j3CzGzWPcIsYtY9wqxq1j3CbGbWPcLsbtY9whxh1j3CnGnWPcJcZdY9wtxt1j3CPGPWPcK8a9Y9wnxn1j3C/G/WM8IMYDYzwoxoNjPCTGQ2M8LMbDYzwixiNjPCrGo2M8JsZjYzTG42I8Pv6feQn/rZExjorxpBhPjvGUGE+N8bQYT4/xjBjPjPGsGM+Oh3tOjOfGeF6M58d4QYwXxnhRjBfHeEmMl8Z4WYyXx3hFjFfGeFWMV8d4TYzXxnhdjNfHeEOMN8Z4U4w3x3hLjMF//BsaGopijGNMYkxjzGLMYyxiLGOsYqxjbGJsY+xi7GMcxHhrjLfFeHuMd8R4Z4x3xXh3jPfEeG+M98V4f4wPxPhgjA/F+HCMj8T4aIyPxfh4jE/E+GSMT8X4dIzPxPhsjM/F+HyML8T4YowvxfhyjK/E+GqMr8X4eoxvxPhmjG/F+HaM78T4bozvxfh+jB/E+GGMH8X4cYyfxPhpjJ/F+HmMX8T4ZYxfxfh1jN/E+G2M38X4fYw/xPhjjD/F+HOMv8T4a4y/xfh7jH/E+GeMf8X4d4z/xPhvjKPHwqEEhyU4RoJjJjhWgmMnODzBEQmOk+C4CY6X4PgJTpDghAlOlODECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpIgCS6a4GIJLp5w3BIJLpngUgkuneAyCS6b4HIJLp/gCgmumOBKCa6c4CoJrprgagmunuAaCa6ZDBtaK8G1E1wnwXUTXC/B9RPcIMENE9wowY0T3CTBTRPcLMHNE9wiwS0T3CrBrRPcJsFtE9wuwe0T3CHBHRPcKcGdE9wlwV0T3C3B3RPcI8E9E9wrwb0T3CfBfRPcL8H9EzwgwQMTPCjBgxM8JMFDEzwswcMTPCLBIxM8KsGjEzwmwWMTNMHjEjw+wRMSPDHBkQmOSvCkBE9O8JQET03wtARPT/CMBM9M8KwEz07wnATPTfC8BM9P8IIEL0zwogQvTvCSBC9N8LIEL0/wigSvTPCqBK9O8JoEr03wugSvT/CGBG9M8KYEb07wlgSDBMMEowTjBJOE0f/bdtA8wSLBMsEqwTrBJsE2wS7BPsFBgrcmeFuCtyd4R4J3JnhXgncneE+C9yZ4X4L3J/hAgg8m+FCCDyf4SIKPJvhYgo8n+ESCTyb4VIJPJ/hMgs8m+FyCzyf4QoIvJvhSgi8n+EqCryb4WoKvJ/hGgm8m+FaCbyf4ToLvJvhegu8n+EGCHyb4UYIfJ/jJ6BP9NMHPEvw8wS8S/DLBrxL8OsFvEvw2we8S/D7BHxL8McGfEvw5wV8S/DXB3xL8PcE/Evwzwb8S/DvBfxL8N8HRCQ6lOCzFMVIcM8WxUhw7xeEpjkhxnBTHTXG8FMdPcYIUJ0xxohQnTnGSFCdNcbIUJ09xihSnTHGqFKdOcZoUp01xuhSnT3GGFGdMcaYUZ05xlhRnTXG2FGdPcY4U50xxrhTnTnGeFOdNcb4U509xgRQXTHGhFBdOcZEUSXHRFBdLcfEUl0hxyRSXSnHpFJdJcdkUl0tx+RRXSHHFFFdKceUUV0kZNjLF1VJcPcU1UlwzxbVSXDvFdVJcN8X1Ulw/xQ1S3DDFjVLcOMVNUtw0xc1S3DzFLVLcMsWtUtw6xW1S3DbF7VLcPsUdUtwxxZ1S3DnFXVLcNcXdUtw9xT1S3DPFvVLcO8V9Utw3xf1S3D/FA1I8MMWDUjw4xUNSPDTFw1I8PMUjUjwyxaNSPDrFY1I8NkVTPC7F41M8IcUTU/wv7lEpnpTiySmekuKpKZ6W4ukpnpHimSmeleLZKZ6T4rkpnpfi+SlekOKFKV6U4sUpXpLipSleluLlKV6R4pUpXpXi1Slek+K1KV6X4vUp3pDijSnelOLN6b4T3JJikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin+IgxVtTvC3F21O8I8U7U7wrxbtTvCfFe1O8L8X7U3wgxQdTfCjFh1N8JMVHU3wsxcdTfCLFJ1N8KsWnU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CxdeejzFL9I8csUv0rx6xS/SfHbFL9L8fsUf0jxxxR/SvHnFH9J8dcUf0vx9xT/SPHPFP9K8e8U/0nx3xRHpziU4bAMx8hwzAzHynDsDIdnOCLDcTIcN8PxMhw/wwkynDDDiTKcOMNJMpw0w8kynDzDKTKcMsOpMpw6w2kynDbD6TKcPsMZMpwxw5kynDnDWTKcNcPZMpw9wzkynDPDuTKcO8N5Mpw3w/kynD/DBTJcMGPUQhkunOEiGZLhohkuluHiGS6R4ZIZLpXh0hkuk+GyGS6X4fIZrpDhihmulOHKGa6S4aoZrpbh6hmukeGaGa6V4doZrpPhuhmul+H6GW6Q4YYZwzbKcOMMN8lw0ww3y3DzDLfIcMsMt8pw6wy3yXDbDLfLcPsMd8hwxwx3ynDnDHfJcNcMd8tw9wz3yHDPDPfKcO8M98lw3wz3y3D/DA/I8MAMD8rw4AwPyfDQDA/L8PAMj8jwyAyPyvDoDI/J8NgMzfC4DI/P8IQMT8xwZIajMjwpw5MzPCXDUzM8LcPTMzwjwzMzPCvDszM8J8NzMzwvw/MzvCDDCzO8KMOLM7wkw0szvCzDyzO8IsMrM7wqw6szvCbDazO8LsPrM7whwxszvCnDmzO8JcMgwzDDKMM4wyTDNMMswzzDIsMywyrDOsMmwzbDLsM+w0GGt2Z4W4a3Z3hHhndmeFeGd2d4T4b3Znhfhvdn+ECGD2b4UIYPZ/hIho9m+FiGj2f4RIZPZvhUhk9n+EyGz2b4XIbPZ/hChi9m+FKGL2f4SoavZvhahq9n+EaGb2b4VoZvZ/hOhu9m+F6G72f4QYYfZvhRhh9n+EmGn2b4WYafZ/hFhl9m+FWGX2f4TYbfZvhdht9n+EOGP2b4U4Y/Z/hLhr9m+FuGv2f4R4Z/ZvhXhn9n+E+G/2Y4OsOhHIflOEaOY+Y4Vo5j5zg8xxE5jpPjuDmOl+P4OU6Q44Q5TpTjxDlOkuOkOU6W4+Q5TpHjlDlOlePUOU6TM928Q0NOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpIjOS6a42I5Lp7jEjkumeNSOS6d4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOW6c4yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40E5HpzjITkemuNhOR6e4xE5HpnjUTkeneMxOR6bozkel+PxOZ6Q44k5jsxxVI4n5XhyjqfkeGqOp+V4eo5n5HhmjmfleHaO5+R4bo7n5Xh+jhfkeGGOF+V4cY6X5HhpjpfleHmOV+R4ZY5X5Xh1jtfkeG2O1+V4fY435HhjjjfleHOOt+QY5BjmGOUY55jkmOaY5ZjnWORY5ljlWOfY5Njm2OXY5zjI8dYcb8vx9hzvyPHOHO/K8e4c78nx3hzvy/H+HB/I8cEcH8rx4RwfyfHRHB/L8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7XyU7+T4bo7v5fh+jh/k+GGOH+X4cY6f5Phpjp/l+HmOX+T4ZY5f5fh1jt/k+G2O3+X4fY4/5Phjjj/l+HOOv+T4a46/5fh7jn/k+GeOf+X4d47/5PhvjqNzHCpwWIFjFDhmgWMVOHaBwwscUeA4BY5b4HgFjl/gBAVOWOBEBU5c4CQFTlrgZAVOXuAUBU5Z4FQFTl3gNAVOW+B0BU5f4AwFzljgTAXOXOAsBc5a4GwFzl7gHAXOWeBcBc5d4DwFzlvgfAXOX+ACBS5Y4EIFLlzgIgVS4KIFLjZ69OgTC1yiwCULXKrApQtcpsBlC1yuwOULXKHAFQtcqcCVC1ylwFULXK3A1Qtco8A1C1yrwLULXKfAdQtcr8D1C9ygwA0L3KjAjQvcpMBNC9yswM0L3KLALQvcqsCtC9ymwG0L3K7A7QvcocAdC9ypwJ0L3KXAXQvcrcDdC9yjwD0L3KvAvQvcp8BRQ0ND+xW4f4EHFHhggQcVeHCBhxR4aIGHFXh4gUcUeGSBRxV4dIHHFHhsgRZ4XIHHF3hCgf9hNfK/sws8qcCTCzylwFMLPK3A0ws8o8AzCzyrwLMLPKfAcws8r8DzC7ygwAsLvKjAiwu8pMBLC7yswMsLvKLAKwu8qsCrC7ymwGsLvK7A6wu8ocAbixH/rzbvlqFhBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF9gUOCry1wNsKvL3AOwq8s8C7Cry7wHsKvLfA+wq8v8AHCnywwIcKfLjARwp8tMDHCny8wCcKfLLApwp8usBnCny2wOcKfL7AFwp8scCXCny5wFcKfLXA1wp8vcA3CnyzwLcKfLvAdwp8t8D3Cny/wA8K/LDAjwr8uMBPCvy0wM8K/LzALwr8ssCvCvy6wG8K/LbA7wr8vsAfCvyxwJ8K/LnAXwr8tcDfCvy9wD8K/LPAvwr8u8B/Cvy3wNEFDpU4rMQxShyzxLFKHLvE4SWOKHGcEsctcbwSxy9xghInLHGiEicucZISJy1xshInL3GKEqcscaoSpy5xmhKnLXG6EqcvcYby//doz1ziLCXOWuJsJc5e4hwlzlniXCXOXeI8Jc5b4nwlzl/iAiUuWOJCJS5c4iIlUuKiJS5W4uIlLlHikiUuVeLSJS5T4rIlLlfi8iWuUOKKJa5U4solrlLiqiWuVuLqJa5R4polrlXi2iWuU+K6Ja5X4volblDihiVuVOLGJW5S4qYlblbi5iVuUeKWJW5V4tYlblPitiVuV+L2Je5Q4o4l7lTiziXuUuKuJe5W4u4l7lHiniXuVeLeJe5T4r4l7lfi/iUeUOKBJR5U4sElHlLioSUeVuLhJR5R4pElHlXi0SUeU+KxJVricSUeX+IJJZ5Y4sgSR5V4Uoknl3hKiaeWeFqJp5d4RolnlnhWiWeXeE6J55Z4Xonnl3hBiReWeFGJF5d4SYmXlnhZiZeXeEWJV5Z4VYlXl3hNideWeF2J15d4Q4k3lnhTiTeXeEuJQYlhiVGJcYlJiWmJWYl5iUWJZfl/a7xH2pTYltiV2Jc4ejTeWuJtJd5e4h0l3lniXSXeXeI9Jd5b4n0l3l/iAyU+WOJDJT5c4iMlPlriYyU+XuITJT5Z4lMlPl3iMyU+W+JzJT5f4gslvljiSyW+XOIrJb5a4mslvl7iGyW+WeJbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX++x9OJQ5VOKzCMSocs8KxKhy7wuEVjqhwnArHrXC8CsevhjtBhRNWOFGFE1c4SYWTVjhZhZNXOEWFU1Y4VYVTVzhNhdNWOF2F01c4Q4UzVjhThTNXOEuFs1Y4W4WzVzjH/94/V4VzVzhPhfNWOF+F81e4QIULVrhQhQtXuEiFVLhohYtVuHiFS1S4ZIVLVbh0hctUuGyFy1W4fIUrVLhihStVuHKFq1S4aoWrVbh6hWtUuGaFa1W4doXrVLhuhetVuH6FG1S4YYUbVbhxhZtUuGmFm1W4eYVbVLhlhVtVuHWF21S4bYXbVbh9hTtUuGOFO1W4c4W7VLhrhbtVuHuFe1S4Z4V7Vbh3hftUuG+F+1W4f4UHVHhghQdVeHCFh1R4aIWHVXh4hUdUeGSFR1V4dIXHVHhshVZ4XIXHV3hChSdWOLLCURWeVOHJFZ5S4akVnlbh6RWeUeGZFZ5V4dkVnlPhuRWeV+H5FV5Q4YUVXlThxcPwkgovrfCyiqH/uHVFhVdWeFWFV1d4TYXXVnhdhddXeEOFN1Z4U4U3V3hLhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2FgwpvrfC2Cm+v8I4K76zwrgrvrvCeCu+t8L4K76/wgQofrPChCh+u8JEKH63wsQofr/CJCp+s8KkKn67wmQqfrfC5Cp+v8IUKX6zwpQpfrvCVCl+t8LUKX6/wjQrfrPCtCt+u8J0K363wvQrfr/CDCj+s8KMKP67wkwo/rfCzCj+v8IsKv6zwqwq/rvCbCr+t8LsKv6/whwp/rPCnCn+u8JcKf63wtwp/r/CPCv+s8K8K/67wnwr//U/vQzhU47Aax6hxzBrHqnHsGofXOKLGcWoct8bxahy/xglqnLDGiWqcuMZJapy0xslqnLzGKWqcssapapy6xmlqnLbG6WqcvsYZapyxxplqnLnGWWqctcbZapy9xjlqnLPGuWqcu8Z5apy3xvlqnL/GBWpcsMaFaly4xkVqpMZFa1ysxsVrXKLGJWtcqsala1ymxmVrXK7G5WtcocYVa1ypxpVrXKXGVWtcrcbVa1yjxjVrXKvGtWtcp8Z1a1yvxvVr3KDGDWvcqMaNa9ykxk1r3KzGzWvcosYta9yqxq1r3KbGbWvcrsbta9yhxh1r3KnGnWvcpcZda9ytXtvda9yjxj1r3KvGvWvcp8Z9a9yvxv1rPKDGA2s8qMaDazykxkNrPKzGw2s8osYjazyqxqNrPKbGY2u0xuNqPL7GE2o8scaRNY6q8aQaT67xlBpPrfG0Gk+v8Ywaz6zxrBrPrvGcGs+t8bwaz6/xghovrPGiGi+u8ZIaL63xshovr/GKGq+s8aoar67xmhqvrfG6Gq+v8YYab6zxphpvrvGWGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7GvsaBzXeWuNtNd5e4x013lnjXTXeXeM9Nd5b43013l/jAzU+WONDNT5c4yM1PlrjYzU+XuMTNT5Z41M1Pl3jMzU+O+2wof+083yNL9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9T4ZY1f1fh1jd/U+G2N39X4fY0/1PhjjT/V+HONv9T4a42/1fh7jX/U+GeNf9X4d43/1PhvjaNrHGpwWINjNDhmg2M1OHaDwxsc0eA4DY7b4HgNjt/gBA1O2OBEDU7c4CQNTtrgZA1O3uAUDU7Z4FQNTt3gNA1O2+B0DU7f4AwNztjgTA3O3OAsDc7a4GwNzt7gHA3O2eBcDc7d4DwNztvgfA3O3+ACDS7Y4EINLtzgIg3S4KINLtbg4g0u0eCSDS7V4NINLtPgsg0u1+DyDa7Q4IoNrtTgyg2u8h8Gw4aGVmtw9QbXaHDNBtdqcO0G12lw3QbXa3D9BjdocMMGN2pw4wY3aXDTBjdrcPMGt2hwywa3anDrBrdpcNsGt2tw+wZ3aHDHBndqcOcGd2lw1wZ3a3D3BvdocM8G92pw7wb3aXDfBvdrcP8GD2jwwAYPavDgBg9p8NAGD2vw8AaPaPDIBo9q8OgGj2nw2AZt8LgGj2/whAZPbHBkg6MaPKnBkxs8pcFTGzytwdMbPKPBMxs8q8GzGzynwXMbPK/B8xu8oMELG7yowYsbvKTBSxu8rMHLG7yiwSsbvKrBqxu8psFrG7yuwesbvKHBGxu8qcGbG4ZGDg0ZNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYNzho8NYGb2vw9gbvaPDOBu9q8O4G72nw3gbva/D+Bh9o8MEGH2rw4QYfafDRBh9r8PEGn2jwyQafavDpBp9p8NkGn2vw+QZfaPDFBl9q8OUGX2nw1QZfa/D1Bt9o8M0G32rw7QbfafDdBt9r8P0GP2jwwwY/avDjBj9p8NMGP2vw8wa/aPDLBr9q8OsGv2nw2wa/a/D7Bn9o8McGf2rw5wZ/afDXBn9r8PcG/2jwzwb/avDvBv9p8N8GRzc41OKwFsdoccwWx2px7BaHt//Hk/x//unjtjhei+O3OE6LE7Y4UYsTtzhJi5O2OFmLk7c4RYtTtjhVi1O3OE2L07Y4XYvTtzhDizO2OFOLM7c4S4uztjhbi7O3OEeLc7Y4V4tz/99RfS3O1+L8LS7Q4oItLtTiwi0u0iItLtriYi0u3uISLS7Z4lItLt3iMi0u2+JyLS7f4gotrtjiSi2u3OIqLa7a4motrt7iGi2u2eJaLa7d4jotrtviei2u3+IGLW7Y4kYtbtziJi1u2uJmLW7e4hYtbtniVi1u3eI2LW7b4nYtbt/iDi3u2OJOLe7c4i4t7tribi3u3uIeLe7Z4oihoaG9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKQdNnRoi4e1eHiLR7R4ZItHtXh0i8e0eGyLtnhci8e3eEKLJ7Y4ssVR7bhDJ7V4countHhqi6e1eHqLZ7R4ZotntXh2i+e0eG6L57V4fosXtHhhixe1eHGLl7R4aYuXtXh5i1e0eGWLV7V4dYvXtHhti9e1eH2LN7R4Y4s3tXhzi7e0GLQYthi1GLeYtJi2mLWYt1i0WLZYtVi32LTYtti12Lc4aPHWFm9r8fYW72jxzhbvavHuFu9p8d4W72vx/hYfaPHBFh9q8eEWH2nx0RYfa/HxFp9o8ckWn2rx6RafafHZFp9r8fkWX2jxxRZfavHlFl9p8dUWX2vx9RbfaPHNFt9q8e0W32nx3Rbfa/H9Fj9o8cMWP2rx4xY/afHTFj9r8fMWv2jxyxa/avHrFr9p8dsWv2vx+xZ/aPHHFn9q8ecWf2nx1xZ/a/H3Fv9o8c8W/2rx7xb/afHfFke3ONThsA7H6HDMDsfqcOwOh3c4osNxOhy3w/E6HL/DCTqcsMOJOpy4w0k6nLTDyTqcvMMpOpyyw6k6nLrDaTqctsPpOpy+wxk6nLHDmbqdxh8awlk6nLXD2TqcvcM5Opyzw7k6nLvDeTqct8P5Opy/wwU6XLDDhTpcuMNFOqTDRTtcrMPFO1yiwyU7XKrDpTtcpsNlO1yuw+U7XKHDFTtcqcOVO1ylw1U7XK3D1Ttco8M1O1yrw7U7XKfDdTtcr8P1O9ygww073KjDjTvcpMNNO9ysw8073KLDLTvcqsOtO9ymw2073K7D7TvcocMdO9ypw5073KXDXTvcrcPdO9yjwz073KvDvcfAfTrct8P9Oty/wwM6PLDDgzo8uMNDOjy0w8M6PLzDIzo8ssOjOjy6w2M6PLZDOzyuw+M7PKHDEzsc2eGoDk/q8OQOT+nw1A5P6/D0Ds/o8MwOz+rw7A7P6fDcDs/r8PwOL+jwwg4v6vDiDi/p8NIOL+vw8g6v6PDKjmH/8erqDq/p8NoOr+vw+g5v6PDGDm/q8OYOb+kw6DDsMOow7jDpMO0w6zDvsOiw7LDqsO6w6bDtsOuw73DQ4a0d3tbh7R3e0eGdHd7V4d0d3tPhvR3e1+H9HT7Q4YMdPtThwx0+0uGjHT7W4eMdPtHhkx0+1eHTHT7T4bMdPtfh8x2+0OGLHb7U4csdvtLhqx2+1uHrHb7R4ZsdvtXh2x2+0+G7Hb7X4fsdftDhhx1+1OHHHX7S4acdftbh5x1+0eGXHX7V4dcdftPhtx1+1+H3Hf7Q4Y8d/tThzx3+0uGvHf7W4e8d/tHhnx3+1eHfHf7T4b8dju5wqMdhPY7R45g9jtXj2D0O73FEj+P0OG6P4/U4fo8T9DhhjxP1OHGPk/Q4aY+T9Th5j1P0OGWPU/U4dY/T9Dhtj9P1OH2PM/Q4Y48z9Thzj7P0OGuPs/U4e49z9Dhnj3P1OHeP86yP8/Y4X4/z97hAjwv2uFCPC/e4SI/0uGiPi/W4eI9L9Lhkj0v1uHSPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0eGyP9nhcj8f3eEKPJ/Y4ssdRPZ7U48k9ntLjqT2e1uPpPZ7R45k9ntXj2T2e0+O5PZ7X4/k9XtDjhT1e1OPFPV7S46U9Xtbj5T1e0eOVPV7V49U9XtPjtT1e1+P1Pd7Q44093tTjzT3e0mPQY9hj1GPcY9Jj2mPWY95j0WPZY9VjPfbQ0H8cbnvseux7HPR4a4+39Xh7j3f0eGePd/V4d/8/3oJ7e7yvx/t7fKDHB3t8qMeHe3ykx0d7fKzHx3t8oscne3yqx6d7fKbHZ3t8rsfne3yhxxd7fKnHl3t8pcdXe3ytx9d7fKPHN3t8q8e3e3ynx3d7fK/H93v8oMcPe/yox497/KTHT3v8rMfPe/yixy97/KrHr3v8psdve/yux+97/KHHH3v8qcefe/ylx197/K3H33v8o8c/e/yrx797/KfHf3sc3ePQAIcNcIwBjjnAsQY49gCHD3DEAMcZ4LgDHG+A4w9wggFOOMCJBjjxACcZ4KQDnGyAkw9wigFOOcCpBjj1AKcZ4LQDnG6A0w9whgHOOMCZBjjzAGcZ4KwDnG2Asw9wjgHOOcC5Bjj3AOcZ4LwDnG+A8w9wgQEuOMCFBrjwABcZIANcdICLDXDxAS4xwCUHuNQAlx7gMv8fTeccPLj1vu3Pot3atq2rtm1za9u82u5ubdvd2oyN2rZtG/vOft/+zn9nJjN5ciPJk5zcCXD5AFcIcMUAVwpw5QBXCXDVAFcLcPUA1whwzQDXCnDtANcJcN0A1wtw/QA3CHDDADcKcOMANwlw0wA3C3DzVQYGxmK5ZYBbBbh1gNsEuG2A2wW4fYA7BDg8wB0D3CnAnQPcJcBdA9wtwN0D3CPAPQPcK8C9A9wnwH0D3C/A/QM8IMADAzwowIMDPCTAQwM8LMDDAzwiwCMDPCrAowM8JsBjAzwuQAM8PsATAjwxwBEBjgxwVIAnBXhygKcEeGqApwV4eoBnBHhmgGcFeHaA5wR4boDnBf8/a3nsuDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrArw6wGsCvDbA6wK8PsAbArwxwNEB3hTgzQHeEuCtAd4W4O0B3hHgnQHeFeDdAd4T4L0B3hfg/QFj/grwwQAfCvDhAIMAw7H8/ldfEmAaYPaf3ooAywCrAOsAmwDbALsA+wAfCfDRAB8L8PEAnwjwyQCfCvDpAJ8J8NkAnwvw+QBfCPDFAF8K8OUAXwnw1QBfC/D1AN8I8M0A3wrw7QDfCfDdAN8L8P3gf+8wZxg8gB8F+HGAnwT4aYCfBfh5gF8E+GWAXwX4dYDfBPhtgN8F+H2APwT4Y4A/BfhzgL8E+GuAvwX4e4B/BPhngGNx+jvAfwL8N8AxAQ6EOCjEwSEOCXFoiOOEOG6Iw0IcL8TxQ5wgxAlDnCjEiUOcJMRJQ5wsxMlDnCLEKUOcKsSpQ5wmxGlDnC7E6UOcIRwYb8aQoWP3N3OIs4Q4a4izhTh7iHOEOGeIc4U4d4jzhDhviPOFOH+IC4S4YIgLhbhwiIuEuGiIi4VIiIuHuESIS4a4VIhLh7hMiMuGuFyIy4e4QogrhrhSiCuHuEqIq4a4Woirh7hGiGuGuFaIa4e4TojrhrheiOuHuEGIG4a4UYgbh7hJiJuGuFmIm4e4RYhbhrhViFuHuE2I24a4XYjbh7hDiMND3DHEnULcOcRdQtw1xN1C3D3EPULcM8S9Qtw7xH1C3DfE/ULcP8QDQjwwxINCPDjEQ0I8NMTDQjw8xCNCPDLEo0I8OsRjQjw2xONCNMTjQzwhxBNDHBHiyBBHhXhSiCeHeEqIp4Z4Woinh3hGiGeGeFaIZ4d4TojnhnheiOeHeEGIF4Z4UYgXh3hJiJeGeFmIl4d4RYhXhnhViFeHeE2I14Z4XYjXh3hDiDeGODrEm0K8OcRbQrw1xNtCvD3EO0K8M8S7Qrw7xHtCvDfE+0K8P8QHQnwwxIdCfDjEIMQwHDNsbH8Zh5iEmIaYhZiHWIRYhliFWIfYhNiG2IXYh/hIiI+G+FiIj4f4RIhPhvhUiE+H+EyIz4b4XIjPh/hCiC+G+FKIL4f4SoivhvhaiK+H+EaIb4b41vgDA2P1/06I74b4Xojvh/hBiB+G+FGIH4f4SYifhvhZiJ+H+EWIX4b4VYhfh/hNiN+G+F2I34f4Q4g/hvhTiD+H+EuIv4b4W4i/h/hHiH+G+FeIf4f4T4j/hjgmxIEIB0U4OMIhEQ6NcJwIx41wWITjRTh+hBNEOGGEE0U4cYSTRDhphJNFOHmEU0Q4ZYRTRTh1hNNEOG2E00U4fYQzRDhjhDNFOHOEs0T4ZYSzRTh7hHNEuOakOFeEc0c4T4TzRjhfhPNHuECEC0a4UIQLR7hIhItGuFiERLh4hEtEuGSES0W4dITLRLhshMtFuHyEK0S4YoQrRbhyhKtEuGqEq0W4eoRrjK0hwrUiXDvCdSJcN8L1Ilw/wg0i3DDCjSLcOMJNItw0ws0i3DzCLSLcMsKtItw6wm0i3DbC7SLcPsIdIhwe4Y4R7hThzhHuEuGuEe4W4e4R7hHhnhHuFeHeEe4T4b4R7hfh/hEeEOGBER4U4cERHhLhoREeFuHhER4R4ZERHhXh0REeE+GxER4XoREeH+EJEZ4Y4YgIR0Y4KsKTIjw5wlMiPDXC0yI8PcIzIjwzwrMiPDvCcyI8N8LzIjw/wgsivDDCi8bqZQAvifDSCC+L8PIIr4jwygivivDqCK+J8NoIr4vw+ghviPDGCEdHeFOEN0d4S4S3RnhbhLdHeEeEd0Z4V4R3R3hPhPdGeF+E90f4QIQPRvhQhA9HGEQYRhhFGEeYRJhGmEWYR1hEWEZYRVhH2ETYRthF2Ef4SISPRvhYhI9H+ESET0b4VIRPR/hMhM9G+FyEz0f4QoQvRvhShC9H+EqEr0b4WoSvR/hGhG9G+FaEb0f4ToTvRvhehO9H+EGEH0b40VifDQwMfBLhpxF+FuHnEYO/+M8rX0X4dYTfRPhthN9F+H2EP0T4Y4Q/RfhzhL9E+GuEv0X4e4R/RPhnhH9F+HeE/0T4b4RjIhyIcVCMg2McEuPQGMeJcdwYh8U4XozjxzhBjBPGOFGME8c4SYyTxjhZjJPHOEWMU8Y4VYxTxzhNjNPGOF2M08c4Q4wzxjhTjDPHOEuMs8Y4W4yzxzhHjHPGOFeMc8c4T4zzxjhfjPPHuECMC8a4UIwLx7hIjIvGuFiMxLh4jEvEuGSMS8W4dIzLxLhsjMvFuHyMK8S4YowrxbhyjKvEuGqMq8W4eoxrxLhmjGvFuHaM68S4bozrxbh+jBvEuGGMG8W4cYybxLhpjJvFuHmMW8S4ZYxbxbh1jNvEuG2M28W4fYw7xDg8xh1j3CnGnWPcJcZdY9wtxt1j3CPGPWPcK8a9Y9wnxn1j3C/G/WM8IMYDYzwoxoNjPCTGQ2M8LMbDxza2MR4Z41ExHh3jMTEeG+NxMRrj8TGeEOOJMY6IcWSMo2I8KcaTYzwlxlNjPC3G02M8I8YzYzwrxrNjPCfGc2M8L8bzY7wgxgtjvCjGi2O8JMZLY7wsxstjvCLGK2O8KsarY7wmxmtjhl8X4/Ux3hDjjTGOjvGmGG+O8ZYYb43xthhvj/GOGO+M8a4Y747xnhjvjfG+GO+PGRgYNOCDMT4U48MxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jE+EuOjMT4W4+MxPhHjkzE+FePTMT4T47MxPhfj8zG+EOOLMb4U48sxvhLjqzG+FuPrMb4R45sxvhXj2zG+E+O7Mb4X4/sxfhDjhzF+FOPHMX4S46cxfhbj5zF+EeOXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzH+EuOvMf4W4+8x/hHjnzH+FePfMf4T478xjolxIMFBCQ5OcEjCsLHzcRIcN8FhCY6X4PgJTpDghAlOlODECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuliAJLp7gEgkumeBSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4JDk9wxwR3SnDnBHdJcNcEd0tw9wT3SHDPBPdKcO8E90lw3wT3S3D/BA9I8MAED0rw4AQPSfDQBA9L8PAEj0jwyASPSvDoBI9J8NgEj0vQBI9P8IQET0xwRIIjExyV4EkJnvx/K7MTPC3B0xM8I8EzEzwrwbMTPCfBcxM8L8HzE7wgwQsTvCjBixO8JMFLE7wswcsTvCLBKxO8KsGrE7wmwWsTvC7B6xO8IcEbExyd4E0J3pzgLQnemuBtCd6e4B0J3pngXQneneA9Cd6b4H0J3p/gAwk+mOBDCT6cYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/gIwk+muBjCT6e4BMJPpngUwk+neAzCT6b4HMJPp/gCwm+mOBLCb6c4CsJvprgawm+nuAbCb6Z4FsJvp3gOwm+m+B7Cb6f4AcJfpjgRwl+nOAnCX6a4GcJfp7gFwl+meBXCX6d4DcJfpvgdwl+n+APCf6Y4E8J/pzgLwn+muBvCf6e4B8J/pngXwn+neA/Cf6b4JgEB1IclOLgFIekODTFcVIcN8VhKY6X4vgpTpDihClOlOLEKU6S4qQpTpbi5ClOkeKUKU6V4tQpTpPitClOl+L0Kc6Q4owpzpTizCnOkuKsKc6W4uwpY69czpniXCnOneI8Kc6b4nwpzp/iAikumOJCKS6c4iIpLpriYimS4uIpLpHikikuleLSKS6T4rIpLpfi8imukOKKKa6U4soprpLiqimuluLqKa6R4poprpXi2imuk+K6Ka6X4vopbpDihilulOLGKW6S4qYpbpbi5ilukeKWKW6V4tYpbpPitilul+L2Ke6Q4vAUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOcZ90iPumuF+K+6d4QIoHpnhQigeneEiKh6Z4WIqHp3hEikemeFSKR6d4TIrHpnhciqZ4fIonpHhiiiNSHJniqBRPSvHkFE9J8dQUT0vx9BTPSPHMFM9K8ewUz0nx3BTPS/H8FC9I8cIUL0rx4hQvSfHSFC9L8fIUr0jxyhSvSvHqFK9J8doUr0vx+hRvSPHGFEeneFOKN6d4S4q3pnhbireneEeKd6Z4V4p3p3hPivemeF+K96f4QIoPpvhQig+nGKQYpuP/73uiOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsVHUnw0xcdSfDzFJ1J8MsWnUnw6xWdSfDbF51J8PsUXUnwxxZdSfDnFV1J8NcXXUnw9xTdSfDPFt1J8O8V3Unw3xfdSfD/FD1L8MMWPUvw4xU9S/DTFz1L8PMUvUvwyxa9S/DrFb1L8NsXvUvx+rM/+O23/lOLPKf6S4q8p/pbi7yn+keKfKf6V4t8p/pPivymOSXEgw0EZDs5wSIZDMxwnw3EzHJbheBmOn+EEGU6Y4UQZTpzhJBlOmuFkGU6e4RQZTpnhVBlOneE0GU6b4XQZTp/hDBnOmOFMGc6c4SwZzprhbBk+luEcGc6Z4VwZzp3hPBnOm+F8Gc6f4QIZLpjhQhkunOEiGS6a4WIZkuHiGS6R4ZIZLpXh0hkuk+GyGS6X4fIZrpDhihmulOHKGa6S4aoZrpbh6hmukU32P82sleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDh8Ax3zHCnDHfOcJcMd81wtwx3z3CPDPfMcK8M985wnwz3zXC/DPfP8IAMD8zwoAwPzvCQ/x7Cj+Xw8AyPyPDIDI/K8OiMQcdkeGyGx2VohsdneEKGJ2Y4IsORGY7K8KQMT87wlAxPzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KpsYOTVGV6T4bUZXpfh9RnekOGNGY7O8KYMb87wlgxvzfC2DG/P8I4M78zwrgzvzvCeDO/N8L6xuA2M+C85Gh/K8OFs0NCxHIYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn2GT6S4aP/6fLxDJ/I8MkMn8rw6QyfyfDZDJ/L8PkMX8jwxQxfyvDlDF/J8NUMX8vw9QzfyPDNDN/K8O0M38nw3Qzfy/D9DD/I8MMMP8rw4ww/yfDTDD/L8PMMv8jwywy/yvDrDL/J8NsMv8vw+wx/yPDHDH/K8OcMf8nw1wx/y/D3DP/I8M8M/8rw7wz/yfDfDMdkOJDjoBwH5zgkx6E5jpPjuDkOy3G8HMfPcYIcJ8xxohwnznGSHCfNGTJZjpPnOEWOU+Y4VY5T5zhNjtPmOF2O0+c4Q44z5jhTjjPnOEuOs+Y4W46z5zhHjnPmOFeOc+c4T47z5jhfjvPnuECOC+a4UI4L57hIjovmuFiO5Lh4jkvkuGSOS+W4dI7L5LhsjsvluHyOK+S4Yo4r5bhyjqvkuGqOq+W4eo5r5LhmjmvluHaO6+S4bo7r5bh+jhvkuGGOG+W4cY6b5LhpjpvluHmOW+S4ZY5b5bh1jtvkuG2O2+W4fY475Dg8xx1z3CnHnXPcJcddc9wtx91z3CPHPXPcK8e9c9wnx31z3C/H/XM8IMcDczwox4NzPCTHQ3M8LMfDczwixyNzPCrHo3M8JsdjczwuR3M8PscTcjwxxxE5jsxxVI4n5XhyjqfkeGqOp+V4eo5n5HhmjmfleHaO5+R4bo7n/aeXC3K8MMeLcrw4x0tyvDTHy3K8PMcrcrwyx6tyvDrHa3K8Nsfrcrw+xxtyvDHH0TnelOPN4wwMjNXkrTneluPtOd6R45053pXj3Tnek+O9Od6X4/05PpDjgzk+lOPDOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY5PpLjozk+luPjOT6R45M5PpXj0zk+k+OzOT6X4/M5vpDjizm+lOPLOb6S46s5vpbj6zm+keObOb6V49s5vpPjuzm+l+P7OX6Q44c5fpTjxzl+kuOnOX6W4+c5fpHjlzl+lePXOX6T47c5fpfj9zn+kOOPOf6U4885/pLjrzn+luPvOf6R4585/pXj3zn+k+O/OY7JcaDAQQUOLnBIgUMLHKfAcQscVuB4BY7/33zCAicqcOICJylw0gInK3DyAqcocMoCpypw6gKnKXDaAqcrcPoCZyhwxgJnKnDmAmcpcNYCZytw9gLnKHDOAucqcO4C5ylw3gLnK3D+AhcocMECFypw4QIXKXDRAhcrkAIXL3CJApcscKkCly5wmQKXLXC5ApcvcIXif33G/9Y0r1zgKgWuWuBqBa5e4BoFrlngWgWuXeA6Ba5b4HoFrl/gBgVuWOBGBW5c4CYFblrgZgVuXuAWBW5Z4FYFbl3gNgVuW+B2BW5f4A4FDi9wx40GBsbivnOBuxS4a4G7Fbh7gXsUuGeBexW4d4H7FLhvgfsVuH+BBxR4YIEHFXhwgYcUeGiBhxV4eIFHFHhkgUcVeHSBxxR4bIHHFWiBxxd4QoEnFjiiwJEFjirwpAJPLvCUAk8t8LQCTy/wjALPLPCsAs8u8JwCzy3wvALPL/CCAi8s8KICLy7wkgIvLfCyAi8v8IoCryzwqgKvLvCaAq8t8LoCry/whgJvLHB0gTcVeHOBtxR4a4G3FXh7gXcUeGeBdxV4d4H3FHhvgfcVeH+BDxT4YIEPFfhwgUGB4X9Ej8U5KTAtMCswL7AosCywKrAusCmwLbArsC/wkQIfLfCxAh8v8IkCnyzwqQKfLvCZAp8t8LkCny/whQJfLPClAl8u8JViiK8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBvxb4W4G/F/hHgX8W+FeBfxf4T4H/FjimwIESB5U4uMQhJQ4tcZwSxy1xWInjlTh+iROUOGGJE5U4cYmTlDhpiZOVOHmJU5Q4ZYlTlTh1idOUOG2J05U4fYkzlDhjiTOVOHOJs5Q4a4mzlbhLiXOUOGeJc5U4d4nzlDhvifOVOH+JC5S4YIkLlbhwiYuUw/53r75YiZS4eIlLlLhkiUuVuHSJy5S4bInLlbh8iSuUuGKJK5W4comrlLhqiauVuHqJa5S4Zolrlbh2ieuUuG6J65W4fokblLhhiRuVuHGJm5S4aYmblbh5iVuUuGU5MPj/siy2KXHbErcrcfsSdyhxeIk7lrhTiTv/d+y7lrhbibuXuEeJe5a4V4l7l7hPifuWuF+J+5d4QIkHlnjQmCEDY7k7pMRDSzysxMNLPKLEI0s8qsSjSzymxGNLPK5ESzy+xBNKPLHEESWOLHFUiSeVeHKJp5R4aomnlXh6iWeUeGaJZ5V4donnlHhuieeVeH6JF5R4YYkXlXhxiZeUeGmJl5V4eYlXlHhliVeVeHWJ15R4bYnXlXh9iTeUeGOJo0u8qcSbS7ylxFtLvK3E20u8o8Q7S7yrxLtLvKfk/9zt/SU+UOKDJT5U4sMlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl9iU+UuKjJT5W4uMlPlHikyU+VeLTJT5T4rMlPlfi8yW+UOKLJb5U4sslvlLiqyW+VuLrJb5R4pslvlXi2yW+U+K7Jb5X4vslflDihyV+VOLHJX5S4qclflbi5yV+UeKXJX5V4tclflPityV+V+L3Jf5Q4o8l/lTizyX+UuKvJf5W4u8l/lHinyX+VeLfJf5T4r8ljilxoMJBFQ6ucEiFQyscp8JxKxxW4XgVjl/hBBVOWOFEFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFVLh4hUuUeGSFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVbjUWv7H+r3DbCrercPsKd6hweIU7VrhThTtXuEuFu1a4W4W7V7hHhXtWuFeFe1e4T4X7VrhfhftXeECFB1Z4UIUHV3hIhYdWeFiFh1d4RIVHVnhUhUdXeEyFx1Z4XIVWeHyFJ1R4YoUjKhxZ4agKT6rw5ApPqfDUCk+r8PQKz6jwzP9zW4XnVHhuhedVeH6FF1R4YYUXVXhxhZdUeGmFl1V4eYVXVHhlhVdVeHWF11R4bYXXVXh9hTdUeGOFoyu8qcKbK7ylwlsrvK3C2yu8o8I7K7yrwrsrvKfCeyu8r8L7K3ygwgcrfKjChysMKgwrjCqMK0wqTCvMKswrLCosK6wqrCtsKmwr7CrsK3ykwkcrfKzCxyt8osInK3yqwqcrfKbCZ6stH3iuwucrfKHCFyt8qcKXK3ylwlcrfK3C1yt8o8I3K3yrwrcrfKfCdyt8r8L3K/ygwg8r/KjCjyv8pMJPK/ysws8r/KLCLyv8qsKvK/ymwm8r/K7C7yv8ocIfK/ypwp8r/KXCXyv8rcLfK/yjwj8r/KvCvyv8p8J/KxxT4UCNg2ocXOOQGofWOE6N49Y4rMbxahy/xglqnLDGiWqcuMZJapy0xslqnLzGKWqcssapapy6xmlqnLbG6WqcvsYZapyxxplqnLnGWWqctcbZapy9xjlqnLPGucbWMjAwME+N89Y4X43z17hAjQvWuFCNC9e4SI2L1rhYjdS4eI1L1LhkjUvVuHSNy9S4bI3L1bh8jSvUuGKNK9W4co2r1LhqjavVuHqNa9S4Zo1r1bh2jevUuG6N69W4fo0b1LhhjRvVuHGNm9S4aY2b1bh5jVvUuGWNW9W4dY3b1LhtjdvVuH2NO9Q4vMYda9ypxp1r3KXGXWvcrcbda9yjxj1r3KvGvWvcp8Z9a9yvxv1rPGBcPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42q0xuNrPKHGE2scUePIGkfVeFKNJ9d4So2n1nhajafXeEaNZ9Z4Vo1n13hOjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Y4usabary5xltqvLXG22q8vcY7aryzxrtqvLvGe2q8t8b7ary/xgdqfLDGh2p8uMagxrDGqMa4xqTGtMasxrzGosayxqrGusamxrbGrsa+xkdqfLTGx2p8vMYnanyyxqdqfLrGZ2p8tsbnany+xhdqfLHGl2p8ucZXany1xtdqfL3GN2p8s8a3any7xndqfLfG92p8v8YPavywxo9q/LjGT2r8tMbPavy8xi9q/LLGr2r8usZvavy2xu9q/L7GH2r8scafavy5xl9q/LXG32r8vcY/avyzxr9q/LvGf2r8t8YxNQ40OKjBwQ0OaXBog+M0OG6Dwxocr8HxG5ygwQkbnKjBiRucpMFJG5yswckbnKLBKRucqsGpG5ymwWkbnK7B6RucocEZG5ypwZkbnKXBWRucrcHZG5yjwTkbnKvBuRucp8F5G5yvwfkbXKDBBRtcqMGFG1ykwUUbXKxBGly8wSUaXLLBpRpcusFlGoYu2+ByDS7f4AoNrtjgSg2u3OAqDa7a4GoNrt7gGg2u2eBaDa7d4DoNrtvgeg2u3+AGDW7Y4EYNbtzgJg1u2uBmDW7e4BYNbtngVg1u3eA2DW7b4HYNbt/gDg0Ob3DHBndqcOcGd2lw1wZ3a3D3BvdocM8G92pw7wb3aXDfBvdrcP8GD2jwwAYPavDgBg9p8NAGD2vw8AaPaPDIBo9q8OgGj2nw2AaPa9AGj2/whAZPbHBEgyMbHNXgSQ2e3OApDZ7a4GkNnt7gGQ2e2eBZDZ7d4DkNntvgeQ2e3+AFDV7Y4EUNXtzgJQ1e2uBlDV7e4BUNXtngVQ1e3TDsmgavbfC6Bq9v8IYGb2xwdIM3NXhzg7c0eGuDtzV4e4N3jOVqAMf2VHc3eE+D9zZ4X4P3N/hAgw82+FCDDzcYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN/hIg482+FiDjzf4RINPNvhUg083+EyDzzb4XIPPN/hCgy82+FKDLzf4SoOvNvhag683+EaDbzb4VoNvN/hOg+82+F6D7zf4QYMfNvhRgx83+EmDnzb4WYOfN/hFg182+FWDXzf4TYPfNvhdg983+EODPzb4U4M/N/hLg782+FuDvzf4R4N/NvhXg383+E+D/zY4psGBFge1OLjFIS0ObXGcFsdtcViL47U4fosTtDhhixO1OHGLk7Q46djtB3DyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrkRYXb3GJFpdscakWl25xmRaXbXG5FpdvcYUWV2xxpf/7I1GLq7a4Wourt7hGi2u2uFaLa7e4Tovrtrhei+u3uEGLG7a4UYsbt7hJi5u2uFmLm7e4RYtbtrhVi1u3uE2L27a4XYvbt7hDi8Nb3LHFnVrcucVdWty1xd1a3L3FPVrcs8W9Wty7xX1a3LfF/Vrcv8UDWjywxYNaPLjFQ1o8tMXDWjy8xSNaPLLFo1o8usVjWjy2xeNatMXjWzyhxRNbHNHiyBZHtXhSiye3eEqLp7Z4Wount3hGi2e2eFaLZ7d4Tovntnhei+e3eEGLF7Z4UYsXt3hJi5e2eFmLl7d4RYtXtnhVi1e3jLqmxWtbvK7F61u8ocUbWxzd4k0t3tziLS3e2uJtLd7e4h0t3tniXS3e3eI9Ld7b4n0t3t/iAy0+2OJDLT7cYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt/iIy0+2uJjLT7e4hMtPtniUy0+3eIzLT7b4nMtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+2eJXLX7d4jctftvidy1+3+IPLf7Y4k8t/tziLy3+2uJvLf7e4h8t/tniXy3+3eI/Lf7b4pgWBzoc1OHgDod0OLTDcToct8NhHY7X4fgdTtDhhB1O1OHEHU7S4aQdTtbh5B1O0eGUHU7V4dQdTtPhtB1O1+H0Hc7Q4YwdztThzB3O0uGsHc7W4ewdztHhnB3O1eHcHc7T4bwdztfh/B0u0OGCHS7U4cIdLtLhoh0u1iEdLt7hEh0u2eFSHS7d4TIdLtvhch0u3+EK3f/P1Bg7Vu4GBlbpcNUOV+tw9Q7X6HDNDtfqcO0O1+lw3Q7X63D9DjfocMMON+pw4w436XDTDjfrcPMOt+hwyw636nDrDrfpcNsOt+tw+w536HB4hzt2uFOHO3e4S4e7drhbh7t3uEeHe3a4V4d7d7hPh/t2uF+H+3d4QIcHdnhQhwd3eEiHh3Z4WIeHd3hEh0d2eFSHR3d4TIfHdnhch3Z4fIcndHhihyM6HNnhqA5P6vDkDk/p8NQOT+vw9A7P6PDMDs/q8OwOz+nw3A7P6/D8Di/o8MIOL+r+l8fpJR1e2uFlHV7e4RUdXtnhVR1e3eE1HV7b4XUdXt/hDR3euMqAozv+L+3FWzq8tcPbOry9wzs6vLPDuzq8u8N7Ory3w/s6vL/DBzp8sMOHOny4w6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77DRzp8tMPHOny8wyc6fLLDpzp8usNnOny2w+c6fL7DFzp8scOXOny5w1c6fLXD1zp8vcM3Onyzw7c6fLvDdzp8t8P3Ony/ww86/LDDjzr8uMNPOvy0w886/LzDLzr8ssOvOvy6w286/LbD7zr8vsMfOvyxw586/LnDXzr8tcPfOvy9wz86/LPDvzr8u8N/Ovy3w9GTDgwM9Diox8E9DulxaI/j9Dhuj8N6HK/H8XucoMcJe5yox4l7nKTHSXucrMfJe5yixyl7nKrHqXucpsdpe5yux+l7nKHHGXucqceZe5ylx1l7nK3H2Xuco8c5e5yrx7l7nKfHeXucr8f5e1ygxwV7XKjHhXtcpMdFe1ysR3pcvMclelyyx6V6XLrHZXpctsflely+xxV6XLHHlXpcucdVely1x9V6XL3HNXpcs8e1ely7x3V6XLfH9Xpcv8cNetywx4163LjHTXrctMfNety8xy163LLHrXrcusdtety2x+163L7HHXoc3uOOPe7U48497tLjrj3u1uPuPe7R45497tXj3j3u0+O+Pe43FPfv8YAeD+zxoB4P7vGQHg8d7//zeHiPR/R4ZI9H9Xh0j8f0eGyPx/Voj8f3eEKPJ/Y4oseRPY7q8aQeT+7xlB5P7fG0Hk/v8Ywez+zxrB7P7vGcHs/t8bwez+/xgh4v7PGiHi/u8ZIeL+3xsh4v7/GKHq/s8aoer+7xmh6v7fG6Hq/v8YYeb+xxdI839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4/39Xh/jw/0+GCPD/X4cI//LwAA//9N4+MR") getresuid(&(0x7f0000000f80), 0x0, &(0x7f0000001000)) pipe2(&(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) chown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x80) 4m47.307776032s ago: executing program 0 (id=1371): openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0xfffffffffffffe43, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x1, &(0x7f0000000180)) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4a0, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x1d0, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 4m46.083863701s ago: executing program 0 (id=1372): io_uring_setup(0x3e45, &(0x7f00000003c0)={0x0, 0xffffffff, 0x40, 0x0, 0x305}) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'pimreg\x00', {0x2, 0x0, @loopback}}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r2, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2d, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4m45.932134932s ago: executing program 0 (id=1373): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c"], 0x124}}, 0x0) 4m45.283763447s ago: executing program 0 (id=1376): socket(0xb, 0x80000, 0x4083) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$uinput(0xffffff9c, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) epoll_create1(0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x169980, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000003c0)) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x80002000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f000086fff4)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000240)) getpid() sendto$inet(r1, &(0x7f0000000700)="ab12bb6929ab1095cfd2d48c5915d65c5958fd4b334ecfcf7d3951358f037de295949345fcc993bda36a12ec", 0x2c, 0x44, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) socket$packet(0x11, 0x3, 0x300) 4m29.827978911s ago: executing program 32 (id=1376): socket(0xb, 0x80000, 0x4083) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$uinput(0xffffff9c, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) epoll_create1(0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x169980, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000003c0)) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x80002000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f000086fff4)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000240)) getpid() sendto$inet(r1, &(0x7f0000000700)="ab12bb6929ab1095cfd2d48c5915d65c5958fd4b334ecfcf7d3951358f037de295949345fcc993bda36a12ec", 0x2c, 0x44, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) socket$packet(0x11, 0x3, 0x300) 2m41.777482517s ago: executing program 2 (id=1621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200408c4}, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x3, 0x8300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x4, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24000040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x421}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000016c0)=ANY=[@ANYBLOB="040e0c790320"], 0xf) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006800010027bd7000ffdbdf25020001000400000008000500", @ANYRES32=r11, @ANYBLOB="287694f0e84c203bff4d00447c27b0b4b0e28d792745ee1150008ffbfda964370311dbb66272218317052e88b2e88b495e5a2eb52778cdd8c1e482f4b715bae2ee55c99253c90f103a5a45d3b2999b4dec8fdb53b2d85d9343e54d6edaf280f5eda02643ebca2dad691de3effb593297e9d9e897a2c2d7bb4b2c2c3d0d707a69d5b434f37e086d634344"], 0x20}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0xb}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) 2m40.311333918s ago: executing program 2 (id=1625): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) kexec_load(0x4, 0x0, 0x0, 0x1) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x40001f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f0000000000)=0x9}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x2) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x34181, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000040), 0x8a140, 0x0) socketpair(0xa, 0x1, 0x100, &(0x7f0000000080)) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x8b517209a4a72aa2) 2m37.798295896s ago: executing program 2 (id=1629): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, r0) socket(0x2a, 0x2, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x80003, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r5, 0xffffffffffffffff, 0x0) 2m35.636079052s ago: executing program 2 (id=1633): sched_setscheduler(0x0, 0x1, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x3, 0x0, &(0x7f0000001180)) tkill(r1, 0xb) syz_open_dev$sg(0x0, 0x0, 0x0) 2m32.710382434s ago: executing program 2 (id=1639): openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffe43, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x1, &(0x7f0000000180)) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 2m30.390339251s ago: executing program 2 (id=1644): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000500)={0x30, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000100)={'IDLETIMER\x00'}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='minix\x00', 0x208000, 0x0) 2m14.377564779s ago: executing program 33 (id=1644): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000500)={0x30, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000100)={'IDLETIMER\x00'}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='minix\x00', 0x208000, 0x0) 2m1.837955252s ago: executing program 4 (id=1697): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x7c5f8f2f92ff25d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0xffffffd3, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301}, 0x14}}, 0x0) recvmmsg(r6, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, 0x0) 1m59.984793625s ago: executing program 4 (id=1700): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x58}}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@private1, 0x4e23, 0xfffe, 0x0, 0x6, 0x2}, {@in=@rand_addr=0x64010102, 0x0, 0x3c}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, {0x0, 0xfffffffffffffffe, 0x3}, {}, 0x70bd29, 0xfffffffd, 0xa, 0x0, 0x0, 0xc8}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x20000050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x40) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1m58.387937747s ago: executing program 4 (id=1702): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000180)=""/227) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m52.704031839s ago: executing program 4 (id=1714): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$igmp6(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 1m52.52472846s ago: executing program 4 (id=1715): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r5, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000000)=0x1, 0x7, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x4, 0x700000002000000, 0x0, 0x2000000}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x411, &(0x7f0000000000)=ANY=[], 0x1, 0xa2e, &(0x7f0000001540)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0xc0186e86, &(0x7f0000000440)={@desc={0x1, 0x4000, @auto="c51c458e580abf28"}}) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind(r9, 0x0, 0x0) 1m51.20151276s ago: executing program 4 (id=1717): openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = epoll_create1(0x0) r1 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0002000}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13f81}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r3, 0x54, 0x0, 0x1, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000006c0)=ANY=[@ANYRES16=r3], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0xcd) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m34.9662798s ago: executing program 34 (id=1717): openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = epoll_create1(0x0) r1 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0002000}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13f81}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r3, 0x54, 0x0, 0x1, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000006c0)=ANY=[@ANYRES16=r3], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0xcd) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22.408862605s ago: executing program 3 (id=1885): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000280)}, 0x9}, {{&(0x7f0000000500)=@qipcrtr, 0x80, 0x0}, 0x2}], 0x2, 0x1, &(0x7f0000001480)={0x77359400}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xbcff, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) 20.861889026s ago: executing program 3 (id=1889): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) socket(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x7fffffff, 0xffffffffffeffffe, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000, 0x651, 0xffff, 0x1000000000000, 0x0, 0x7fffffff, 0x0, 0x1000000000000008, 0xb, 0x0, 0xcc6, 0xfffffffffffffffc, 0x1, 0x80008, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}) 16.17515882s ago: executing program 1 (id=1900): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='smaps_rollup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 13.292699762s ago: executing program 3 (id=1907): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 12.244720929s ago: executing program 3 (id=1910): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000180)=""/227) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 10.90439728s ago: executing program 3 (id=1913): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x2, 0x1000) 9.902000477s ago: executing program 7 (id=1916): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000640)=ANY=[], 0x1, 0xa8b, &(0x7f0000001400)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETNEXTQUOTA(0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) creat(&(0x7f0000000040)='./bus\x00', 0x1c2) mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0xf, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r4}, 0xc) 9.734097688s ago: executing program 5 (id=1917): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) socket(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x7fffffff, 0xffffffffffeffffe, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000, 0x651, 0xffff, 0x1000000000000, 0x0, 0x7fffffff, 0x0, 0x1000000000000008, 0xb, 0x0, 0xcc6, 0xfffffffffffffffc, 0x1, 0x80008, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}) 9.539663259s ago: executing program 1 (id=1918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1900, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) syz_clone(0x11894000, &(0x7f0000000140)="a07ee61202d6d11d656f485f494ac266121c4936c507bd47f1b7bb4521f04cbf35216fa44f", 0x25, &(0x7f0000000040), 0x0, &(0x7f00000001c0)="08ec5d7c49d0cf685de0dbd909f70f60bab24171c87eed46cf55cc5896ecd9328c6fd67a669be663072b9cccdca22859012638649e1486631deaeed29644aa7b33afd9cee1df6cccf0d5620525bc159568656adf50e0bdb2e66710a262") mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x7fffffffffffffff, 0x85, 0x3) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 8.747581745s ago: executing program 6 (id=1919): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') symlinkat(&(0x7f0000000040)='./file2\x00', r3, &(0x7f0000000200)='./file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000200), &(0x7f00000000c0)=[r7], &(0x7f0000000040), 0x0, 0x300}) 7.815817112s ago: executing program 6 (id=1920): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 7.814220182s ago: executing program 7 (id=1921): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x7c5f8f2f92ff25d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0xffffffd3, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301}, 0x14}}, 0x0) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, 0x0) ioctl$PIO_FONTX(r7, 0x4b6c, &(0x7f0000000000)={0x99, 0xd, &(0x7f0000000140)="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"}) 7.671829003s ago: executing program 6 (id=1922): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000500)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000100)={'IDLETIMER\x00'}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0x9}]}, 0x10c}}, 0x0) 7.079681478s ago: executing program 6 (id=1923): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 6.409612803s ago: executing program 7 (id=1924): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x100000000, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x5008, 0x0) r3 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x3ca5, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x6ed3, 0x1f, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r9) sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r10, 0x701}, 0x14}}, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000000c0)) read$msr(r1, &(0x7f0000000100)=""/4096, 0x1000) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x21, 0x0, @private=0xa011102, @dev}, @parameter_prob={0xc, 0x0, 0x0, 0xf3, 0x0, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x1, [{@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x0, [@private]}]}}}}}}}, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x3, 0xfd, {0x1, 0x0, 0x0, 0x3, 0x6, 0x60, 0x1, 0x4, 0x1}}) ioctl$RTC_AIE_OFF(r0, 0x7002) 6.400316433s ago: executing program 1 (id=1925): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x3, 0x300) pipe2$watch_queue(0x0, 0x80) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setregid(0x0, 0x0) setgroups(0x1, &(0x7f0000000000)=[0x0]) 6.316573053s ago: executing program 5 (id=1926): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10030600e0ff020004004788aa", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="4000000012000501000000000000000005001900ff00000028001a00"], 0x40}}, 0x20040810) 4.773867805s ago: executing program 7 (id=1927): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x48000) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x0, 0x300, 0x0, 0x80000300}}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create(0x8) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) unshare(0x2a020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x11a, 0x4, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 4.483177887s ago: executing program 3 (id=1928): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='smaps_rollup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 4.469521117s ago: executing program 1 (id=1929): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x58}}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@private1, 0x4e23, 0xfffe, 0x0, 0x6, 0x2}, {@in=@rand_addr=0x64010102, 0x0, 0x3c}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, {0x0, 0xfffffffffffffffe, 0x3}, {}, 0x70bd29, 0xfffffffd, 0xa, 0x0, 0x0, 0xc8}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x20000050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3.758493192s ago: executing program 5 (id=1930): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') symlinkat(&(0x7f0000000040)='./file2\x00', r3, &(0x7f0000000200)='./file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000200), &(0x7f00000000c0)=[r7], &(0x7f0000000040), 0x0, 0x300}) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) chdir(&(0x7f0000000180)='./file0\x00') 3.467949244s ago: executing program 6 (id=1931): bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod(0x0, 0x8001420, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_emit_ethernet(0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x1c) dup(r4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x29000, 0x1000, 0x0, 0xe30152e225d98ac9}, 0x20) 3.429272595s ago: executing program 1 (id=1932): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000640)=ANY=[], 0x1, 0xa8b, &(0x7f0000001400)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETNEXTQUOTA(0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) creat(&(0x7f0000000040)='./bus\x00', 0x1c2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0xf, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r5, r3}, 0xc) 2.495350981s ago: executing program 5 (id=1933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000780)=@abs, 0x0, 0x800) connect$unix(r0, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_mr_vif\x00') read$FUSE(r1, &(0x7f0000003900)={0x2020}, 0x2020) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000380)=&(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x6b8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 2.492241951s ago: executing program 6 (id=1934): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000500)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000100)={'IDLETIMER\x00'}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0x9}]}, 0x10c}}, 0x0) 1.476720469s ago: executing program 5 (id=1935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1900, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) syz_clone(0x11894000, &(0x7f0000000140)="a07ee61202d6d11d656f485f494ac266121c4936c507bd47f1b7bb4521f04cbf35216fa44f9e45", 0x27, &(0x7f0000000040), 0x0, &(0x7f00000001c0)="08ec5d7c49d0cf685de0dbd909f70f60bab24171c87eed46cf55cc5896ecd9328c6fd67a669be663072b9cccdca22859012638649e1486631deaeed29644aa7b33afd9cee1df6cccf0d5620525bc159568656adf50e0bdb2e66710a262") mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x7fffffffffffffff, 0x85, 0x3) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 1.27542735s ago: executing program 1 (id=1936): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) socket(0x10, 0x3, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x7fffffff, 0xffffffffffeffffe, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000, 0x651, 0xffff, 0x1000000000000, 0x0, 0x7fffffff, 0x0, 0x1000000000000008, 0xb, 0x0, 0xcc6, 0xfffffffffffffffc, 0x1, 0x80008, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}) 1.258635711s ago: executing program 7 (id=1937): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x100000000, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x5008, 0x0) r3 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x3ca5, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x6ed3, 0x1f, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r9) sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r10, 0x701}, 0x14}}, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000000c0)) read$msr(r1, &(0x7f0000000100)=""/4096, 0x1000) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x21, 0x0, @private=0xa011102, @dev}, @parameter_prob={0xc, 0x0, 0x0, 0xf3, 0x0, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x1, [{@empty}, {@private}, {@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x0, [@private]}]}}}}}}}, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x3, 0xfd, {0x1, 0x0, 0x0, 0x3, 0x6, 0x60, 0x1, 0x4, 0x1}}) ioctl$RTC_AIE_OFF(r0, 0x7002) 76.316489ms ago: executing program 5 (id=1938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10084, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xca38, 0x0, 0x0, 0x0, 0x401}}, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_open_dev$sndmidi(0x0, 0x400, 0x10000) 0s ago: executing program 7 (id=1939): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x3, 0x300) pipe2$watch_queue(0x0, 0x80) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setregid(0x0, 0x0) setgroups(0x1, &(0x7f0000000000)=[0x0]) kernel console output (not intermixed with test programs): ncryption mode enabled [ 323.785871][ T6654] Unsupported ieee802154 address type: 0 [ 323.849905][ T6651] EXT4-fs (loop1): Test dummy encryption mode enabled [ 324.153351][ T6651] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 324.154062][ T6651] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.413303][ T26] audit: type=1107 audit(1742299881.338:114): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 324.617531][ T6661] netlink: 'syz.4.722': attribute type 10 has an invalid length. [ 324.955174][ T4209] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 325.887135][ T4209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.043133][ T4209] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 327.065311][ T4209] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 327.074442][ T4209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.091001][ T4209] usb 5-1: config 0 descriptor?? [ 327.124773][ T4209] usb 5-1: can't set config #0, error -71 [ 327.142845][ T4209] usb 5-1: USB disconnect, device number 20 [ 328.584701][ T21] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 328.711555][ T6687] loop0: detected capacity change from 0 to 64 [ 328.755936][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 328.785329][ T6692] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 329.008525][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 329.736725][ T21] usb 4-1: device descriptor read/all, error -71 [ 330.064089][ T6704] Unsupported ieee802154 address type: 0 [ 330.814210][ T6705] loop4: detected capacity change from 0 to 4096 [ 331.302932][ T6713] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 333.211690][ T6711] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 333.228045][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.237457][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.591485][ T6726] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0î„&IØü0‚Ñ(|9Ê’å0%cÞ» [ 334.068059][ T4282] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 334.108371][ T4798] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 334.189163][ T6740] loop2: detected capacity change from 0 to 512 [ 334.298141][ T6740] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 334.338603][ T6740] EXT4-fs (loop2): invalid journal inode [ 334.357450][ T6740] EXT4-fs (loop2): can't get journal size [ 334.394617][ T6740] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 334.405988][ T6743] Unsupported ieee802154 address type: 0 [ 334.415090][ T6740] System zones: 1-12, 13-13 [ 334.446481][ T6740] EXT4-fs (loop2): 1 truncate cleaned up [ 334.452170][ T6740] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback. [ 334.494862][ T4282] usb 5-1: Using ep0 maxpacket: 32 [ 334.505089][ T4798] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.704968][ T4798] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.734783][ T4798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.820243][ T4798] usb 4-1: Product: syz [ 334.824456][ T4798] usb 4-1: Manufacturer: syz [ 335.164148][ T4798] usb 4-1: SerialNumber: syz [ 336.124893][ T4282] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf [ 336.138481][ T4282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.179871][ T4282] usb 5-1: Product: syz [ 336.184673][ T4282] usb 5-1: SerialNumber: syz [ 336.220646][ T4282] usb 5-1: config 0 descriptor?? [ 336.811662][ T4282] usb 5-1: USB disconnect, device number 21 [ 336.830750][ T4798] cdc_ncm 4-1:1.0: bind() failure [ 336.839420][ T4798] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 336.889007][ T4798] cdc_ncm 4-1:1.1: bind() failure [ 336.919137][ T4798] usb 4-1: USB disconnect, device number 14 [ 338.685883][ T6784] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 339.210003][ T6796] loop9: detected capacity change from 0 to 8 [ 339.222481][ T6796] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 339.229014][ T6796] loop9: partition table partially beyond EOD, truncated [ 339.243897][ T6796] loop9: p1 size 81768186 extends beyond EOD, truncated [ 339.294697][ T4798] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 339.313796][ T6089] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 339.320037][ T6089] loop9: partition table partially beyond EOD, truncated [ 339.330045][ T6089] loop9: p1 size 81768186 extends beyond EOD, truncated [ 339.347297][ T6797] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 339.354303][ T6797] loop9: partition table partially beyond EOD, truncated [ 339.367285][ T6797] loop9: p1 size 81768186 extends beyond EOD, truncated [ 339.414741][ T1324] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 339.506734][ T6801] loop2: detected capacity change from 0 to 1024 [ 339.618528][ T6803] sp0: Synchronizing with TNC [ 339.660133][ T6802] [U] è [ 339.664953][ T1324] usb 2-1: Using ep0 maxpacket: 32 [ 339.818553][ T4798] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.829930][ T4798] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 339.839384][ T4798] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 339.853119][ T4798] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 339.862667][ T4798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.489813][ T6789] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 340.546631][ T4798] hub 4-1:1.0: bad descriptor, ignoring hub [ 340.556506][ T4798] hub: probe of 4-1:1.0 failed with error -5 [ 340.563446][ T4798] cdc_wdm 4-1:1.0: skipping garbage [ 340.570054][ T4798] cdc_wdm 4-1:1.0: skipping garbage [ 340.582833][ T4798] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 340.591560][ T4798] cdc_wdm 4-1:1.0: Unknown control protocol [ 340.672626][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 340.863198][ T6789] udc-core: couldn't find an available UDC or it's busy [ 340.901302][ T6789] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 340.909685][ T1324] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf [ 340.955653][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.963735][ T1324] usb 2-1: Product: syz [ 340.975720][ T6817] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 340.994599][ T1324] usb 2-1: SerialNumber: syz [ 341.002262][ T1324] usb 2-1: config 0 descriptor?? [ 342.936586][ T4282] usb 2-1: USB disconnect, device number 10 [ 345.121342][ T6834] loop0: detected capacity change from 0 to 64 [ 345.287406][ T6839] loop1: detected capacity change from 0 to 128 [ 345.509169][ T4282] usb 4-1: USB disconnect, device number 15 [ 345.748379][ T6856] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 346.908235][ T6860] loop2: detected capacity change from 0 to 64 [ 346.921393][ T6862] loop0: detected capacity change from 0 to 128 [ 347.097581][ T6862] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 347.151228][ T6862] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.719748][ T6866] loop3: detected capacity change from 0 to 32768 [ 350.146569][ T6894] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 350.205908][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.213268][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.595098][ T6903] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 355.293594][ T6940] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 358.406360][ T6980] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 358.495769][ T6981] netlink: 'syz.2.824': attribute type 4 has an invalid length. [ 358.501632][ T6983] loop1: detected capacity change from 0 to 1024 [ 358.528160][ T6981] raw_sendmsg: syz.2.824 forgot to set AF_INET. Fix it! [ 358.690146][ T6988] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 361.618624][ T7025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.977800][ T7029] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 366.173512][ T7067] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 372.589585][ T7111] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 373.140144][ T26] audit: type=1326 audit(1742299930.058:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.2.871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4e83e9169 code=0x0 [ 373.931998][ T7131] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 378.694154][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.700590][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.824431][ T7175] loop4: detected capacity change from 0 to 2048 [ 379.944797][ T4174] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 379.984427][ T7175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.352347][ T7182] siw: device registration error -23 [ 380.366592][ T4174] usb 2-1: Using ep0 maxpacket: 32 [ 380.494926][ T4174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.592593][ T4174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.735086][ T4174] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 380.960863][ T4174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.051290][ T4174] usb 2-1: config 0 descriptor?? [ 381.439086][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.893'. [ 381.686508][ T7200] Cannot find del_set index 4 as target [ 381.693161][ T7200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.853142][ T7208] loop1: detected capacity change from 0 to 256 [ 382.859950][ T4174] usbhid 2-1:0.0: can't add hid device: -71 [ 382.882865][ T4174] usbhid: probe of 2-1:0.0 failed with error -71 [ 382.913776][ T4174] usb 2-1: USB disconnect, device number 11 [ 382.959801][ T7208] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 384.395715][ T7221] siw: device registration error -23 [ 386.175691][ T4208] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 386.319005][ T4208] Bluetooth: hci2: Injecting HCI hardware error event [ 386.415536][ T4172] Bluetooth: hci2: hardware error 0x00 [ 387.245817][ T7245] loop3: detected capacity change from 0 to 2048 [ 387.515623][ T7245] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.531679][ T4241] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 389.024764][ T4241] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.059070][ T4241] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 389.070737][ T7261] Cannot find del_set index 4 as target [ 389.077737][ T7261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 389.140188][ T4241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.275058][ T7270] siw: device registration error -23 [ 391.153500][ T4241] usb 2-1: config 0 descriptor?? [ 391.205353][ T4241] usb 2-1: can't set config #0, error -71 [ 391.227044][ T4241] usb 2-1: USB disconnect, device number 12 [ 391.673174][ T7267] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 392.595257][ T7278] loop2: detected capacity change from 0 to 32768 [ 392.835977][ T2238] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 393.351979][ T7278] XFS (loop2): Mounting V5 Filesystem [ 394.392140][ T7292] loop0: detected capacity change from 0 to 32768 [ 394.423155][ T2238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.434435][ T7278] XFS (loop2): Ending clean mount [ 394.447764][ T7292] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.918 (7292) [ 394.455222][ T2238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.482241][ T2238] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 394.504557][ T2238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.516358][ T7278] XFS (loop2): Quotacheck needed: Please wait. [ 394.518046][ T7292] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 394.532656][ T7292] BTRFS info (device loop0): force clearing of disk cache [ 394.539885][ T7292] BTRFS info (device loop0): enabling ssd optimizations [ 394.546899][ T7292] BTRFS info (device loop0): using spread ssd allocation scheme [ 394.554693][ T7292] BTRFS info (device loop0): using free space tree [ 394.561601][ T7292] BTRFS info (device loop0): has skinny extents [ 394.571840][ T2238] usb 2-1: config 0 descriptor?? [ 394.814722][ T2238] usb 2-1: can't set config #0, error -71 [ 394.822956][ T2238] usb 2-1: USB disconnect, device number 13 [ 395.731489][ T7278] XFS (loop2): Quotacheck: Done. [ 395.770316][ T7292] BTRFS info (device loop0): clearing free space tree [ 395.778557][ T7292] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 395.789000][ T7292] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 395.841766][ T7292] BTRFS info (device loop0): creating free space tree [ 395.851726][ T7292] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 395.862814][ T7292] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 396.360929][ T7326] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 396.491209][ T4169] XFS (loop2): Unmounting Filesystem [ 398.646413][ T7346] loop4: detected capacity change from 0 to 1024 [ 398.782265][ T7346] EXT4-fs (loop4): Ignoring removed nobh option [ 398.798242][ T7346] EXT4-fs (loop4): Ignoring removed bh option [ 398.838349][ T7346] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 399.112311][ T7346] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 402.028107][ T7382] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 403.198880][ T7369] loop_set_status: loop4 () has still dirty pages (nrpages=3) [ 406.087072][ T7420] netlink: 44 bytes leftover after parsing attributes in process `syz.2.945'. [ 407.378533][ T26] audit: type=1400 audit(1742299964.288:116): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE81 pid=7423 comm="syz.2.946" [ 407.741197][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.086667][ T7449] loop2: detected capacity change from 0 to 40427 [ 410.252457][ T7449] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 410.260353][ T7449] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 410.285038][ T7449] F2FS-fs (loop2): invalid crc value [ 411.724985][ T26] audit: type=1400 audit(1742299968.628:117): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE81 pid=7453 comm="syz.3.955" [ 412.455573][ T7449] F2FS-fs (loop2): Found nat_bits in checkpoint [ 412.632348][ T7449] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 412.639542][ T7449] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 412.835124][ T7452] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 413.073065][ T7472] attempt to access beyond end of device [ 413.073065][ T7472] loop2: rw=2049, want=78344, limit=40427 [ 413.345816][ T4209] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 414.118612][ T4209] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 414.145547][ T4209] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 415.047189][ T4209] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 415.057130][ T4209] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 415.068546][ T4209] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 415.181811][ T7482] loop1: detected capacity change from 0 to 8 [ 415.344622][ T4209] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 415.353713][ T4209] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 415.444625][ T4209] usb 1-1: Product: syz [ 415.462811][ T7482] SQUASHFS error: zlib decompression failed, data probably corrupt [ 415.475824][ T4209] usb 1-1: Manufacturer: syz [ 415.503918][ T7482] SQUASHFS error: Failed to read block 0x9b: -5 [ 415.530530][ T7482] SQUASHFS error: Unable to read metadata cache entry [99] [ 415.573504][ T7482] SQUASHFS error: Unable to read inode 0x127 [ 415.585459][ T4209] usb 1-1: can't set config #1, error -71 [ 415.611443][ T4209] usb 1-1: USB disconnect, device number 8 [ 420.375597][ T7517] ODEBUG: Out of memory. ODEBUG disabled [ 422.268010][ T7529] netlink: 44 bytes leftover after parsing attributes in process `syz.4.973'. [ 423.185570][ T7540] (syz.2.975,7540,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 423.194700][ T7540] (syz.2.975,7540,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 423.740358][ T7542] loop4: detected capacity change from 0 to 8 [ 425.453014][ T7542] SQUASHFS error: zlib decompression failed, data probably corrupt [ 425.494769][ T7542] SQUASHFS error: Failed to read block 0x9b: -5 [ 425.525270][ T7542] SQUASHFS error: Unable to read metadata cache entry [99] [ 425.580171][ T7542] SQUASHFS error: Unable to read inode 0x127 [ 425.747859][ T7560] loop3: detected capacity change from 0 to 128 [ 425.757776][ T7558] loop1: detected capacity change from 0 to 164 [ 426.948905][ T7560] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 426.984582][ T7558] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 427.104718][ T7570] netlink: 44 bytes leftover after parsing attributes in process `syz.0.986'. [ 428.104730][ T7578] sysv_free_block: trying to free block not in datazone [ 430.345864][ T4180] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 431.610553][ T7592] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 431.715788][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.723239][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.720481][ T7619] netlink: 96 bytes leftover after parsing attributes in process `syz.2.999'. [ 433.708430][ T7622] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1001'. [ 433.773158][ T7627] loop2: detected capacity change from 0 to 164 [ 433.865898][ T7627] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 433.969388][ T7632] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1003'. [ 433.978692][ T7632] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1003'. [ 434.447433][ T7636] (syz.1.1004,7636,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 434.456499][ T7636] (syz.1.1004,7636,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 437.411553][ T7658] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1012'. [ 437.743113][ T7661] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1014'. [ 438.407281][ T7665] loop0: detected capacity change from 0 to 128 [ 438.448165][ T7662] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 438.465045][ T7665] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 438.704588][ T7665] sysv_free_block: trying to free block not in datazone [ 439.031475][ T4166] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 439.214148][ T7675] loop3: detected capacity change from 0 to 512 [ 439.442153][ T7675] EXT4-fs (loop3): Test dummy encryption mode enabled [ 439.484832][ T7675] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 440.073493][ T7675] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 440.135932][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.199753][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.252335][ T7675] EXT4-fs (loop3): 1 truncate cleaned up [ 441.259417][ T7691] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1023'. [ 441.524880][ T7675] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 444.200902][ T7710] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1027'. [ 444.302819][ T7712] loop1: detected capacity change from 0 to 128 [ 444.528680][ T7716] loop2: detected capacity change from 0 to 164 [ 444.607996][ T7712] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 444.912622][ T7716] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 444.923979][ T7719] loop3: detected capacity change from 0 to 8 [ 444.944135][ T7721] sysv_free_block: trying to free block not in datazone [ 445.003338][ T7719] SQUASHFS error: zlib decompression failed, data probably corrupt [ 445.037702][ T7719] SQUASHFS error: Failed to read block 0x9b: -5 [ 445.073437][ T7719] SQUASHFS error: Unable to read metadata cache entry [99] [ 445.089657][ T7719] SQUASHFS error: Unable to read inode 0x127 [ 445.195120][ T4168] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 447.944826][ T7737] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1035'. [ 449.721898][ T7747] loop4: detected capacity change from 0 to 512 [ 450.108560][ T7747] EXT4-fs (loop4): Test dummy encryption mode enabled [ 450.138007][ T7751] unsupported nla_type 39 [ 450.194938][ T7747] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 451.676463][ T7747] EXT4-fs: failed to create workqueue [ 451.739393][ T7747] EXT4-fs (loop4): mount failed [ 452.266315][ T7767] loop3: detected capacity change from 0 to 164 [ 452.358419][ T7767] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 455.991345][ T7793] loop3: detected capacity change from 0 to 128 [ 456.178328][ T7793] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 456.412190][ T7799] loop4: detected capacity change from 0 to 128 [ 456.499944][ T7800] sysv_free_block: trying to free block not in datazone [ 456.521776][ T7799] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 457.232156][ T7799] sysv_free_block: trying to free block not in datazone [ 457.328691][ T4180] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 457.336652][ T4167] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 459.499203][ T7814] loop4: detected capacity change from 0 to 164 [ 459.649645][ T7814] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 461.218122][ T7833] loop4: detected capacity change from 0 to 512 [ 461.337621][ T7833] EXT4-fs (loop4): Test dummy encryption mode enabled [ 461.379954][ T7833] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 461.440241][ T7833] EXT4-fs (loop4): 1 truncate cleaned up [ 461.461411][ T7833] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 463.630085][ T7849] loop0: detected capacity change from 0 to 164 [ 463.642539][ T26] audit: type=1400 audit(1742300020.568:118): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE81 pid=7844 comm="syz.3.1068" [ 463.719861][ T7849] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 466.123539][ T7867] loop0: detected capacity change from 0 to 2048 [ 466.173937][ T7867] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 466.364124][ T7873] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 466.867773][ T7878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.871056][ T7907] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 474.280920][ T7931] loop2: detected capacity change from 0 to 512 [ 474.431572][ T7931] EXT4-fs (loop2): Test dummy encryption mode enabled [ 474.452708][ T7931] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 474.690650][ T7931] EXT4-fs (loop2): 1 truncate cleaned up [ 474.714526][ T7931] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 476.306420][ T7950] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1096'. [ 479.164339][ T7974] loop4: detected capacity change from 0 to 64 [ 479.861651][ T7983] loop1: detected capacity change from 0 to 512 [ 480.320003][ T7983] EXT4-fs (loop1): Test dummy encryption mode enabled [ 480.402272][ T7983] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 480.829921][ T7983] EXT4-fs (loop1): 1 truncate cleaned up [ 480.895463][ T7983] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 481.386535][ T7995] Unsupported ieee802154 address type: 0 [ 481.586792][ T8002] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1110'. [ 484.248952][ T8028] loop3: detected capacity change from 0 to 64 [ 485.750357][ T8039] Cannot find del_set index 4 as target [ 485.757000][ T8039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.499599][ T8046] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 490.279362][ T8077] loop0: detected capacity change from 0 to 2048 [ 490.368823][ T8077] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 490.396573][ T8083] loop3: detected capacity change from 0 to 2048 [ 490.451509][ T8085] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 490.468494][ T8083] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 490.632414][ T8086] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 490.953444][ T8089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.132445][ T8091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.658793][ T8093] loop1: detected capacity change from 0 to 64 [ 494.524940][ T8095] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 495.446935][ T8119] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 496.948335][ T8136] loop3: detected capacity change from 0 to 64 [ 496.957792][ T8133] loop0: detected capacity change from 0 to 512 [ 497.218278][ T8133] EXT4-fs (loop0): Test dummy encryption mode enabled [ 497.226549][ T8133] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 497.583719][ T8133] EXT4-fs (loop0): 1 truncate cleaned up [ 497.593114][ T8133] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 499.118331][ T8157] loop1: detected capacity change from 0 to 128 [ 499.914194][ T8157] FAT-fs (loop1): bogus number of reserved sectors [ 499.924517][ T8157] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 499.966221][ T8157] FAT-fs (loop1): Can't find a valid FAT filesystem [ 499.974085][ T8164] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 500.941617][ T8168] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 501.296736][ T8157] loop1: detected capacity change from 0 to 4096 [ 501.575444][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.742208][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.760819][ T8183] loop3: detected capacity change from 0 to 64 [ 501.838917][ T8157] NILFS (loop1): unrecognized mount option "/dev/userio" [ 501.909336][ T8190] loop2: detected capacity change from 0 to 512 [ 502.463940][ T8190] EXT4-fs (loop2): Test dummy encryption mode enabled [ 502.498992][ T8190] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 503.203283][ T8190] EXT4-fs (loop2): 1 truncate cleaned up [ 503.209183][ T8190] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 506.763015][ T8224] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 507.832015][ T8239] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 507.846811][ T8240] loop4: detected capacity change from 0 to 64 [ 508.451278][ T8245] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1173'. [ 508.865634][ T8251] loop2: detected capacity change from 0 to 128 [ 508.890041][ T8256] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 508.928857][ T8251] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 509.751896][ T8263] sysv_free_block: trying to free block not in datazone [ 510.717886][ T8270] loop4: detected capacity change from 0 to 2048 [ 510.945329][ T8270] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 511.117930][ T8279] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 511.904748][ T8285] xt_CT: You must specify a L4 protocol and not use inversions on it [ 512.863227][ T8296] loop4: detected capacity change from 0 to 64 [ 513.980460][ T8303] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 518.718515][ T8335] loop3: detected capacity change from 0 to 64 [ 518.740363][ T8322] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 518.822696][ T8338] loop4: detected capacity change from 0 to 1024 [ 518.866366][ T8340] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 518.956953][ T8338] EXT4-fs (loop4): Ignoring removed orlov option [ 518.973546][ T8338] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 519.235437][ T8338] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 519.274612][ T4169] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 520.473536][ T8356] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 522.511255][ T8371] siw: device registration error -23 [ 523.111776][ T8373] loop2: detected capacity change from 0 to 128 [ 523.278537][ T8373] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 524.214535][ T8377] Unsupported ieee802154 address type: 0 [ 524.706503][ T8379] sysv_free_block: trying to free block not in datazone [ 525.523935][ T4169] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 525.541000][ T8381] loop3: detected capacity change from 0 to 64 [ 525.856126][ T8383] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 526.606466][ T8389] loop3: detected capacity change from 0 to 512 [ 526.659561][ T8389] EXT4-fs (loop3): Test dummy encryption mode enabled [ 526.676008][ T8393] loop2: detected capacity change from 0 to 512 [ 526.692751][ T8389] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 526.717983][ T8394] netlink: 'syz.1.1214': attribute type 10 has an invalid length. [ 526.768244][ T8393] EXT4-fs (loop2): Test dummy encryption mode enabled [ 526.777634][ T8393] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 526.796559][ T8389] EXT4-fs (loop3): 1 truncate cleaned up [ 526.802439][ T8389] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 526.926555][ T8393] EXT4-fs (loop2): 1 truncate cleaned up [ 526.932228][ T8393] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 527.011369][ T8399] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 527.162970][ T4211] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 529.228920][ T4211] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.260017][ T4211] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 529.303975][ T4211] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 529.330232][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.463795][ T4211] usb 2-1: config 0 descriptor?? [ 529.512342][ T4211] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 529.925355][ T8415] siw: device registration error -23 [ 530.757642][ T4282] usb 2-1: USB disconnect, device number 14 [ 531.223983][ T8413] loop2: detected capacity change from 0 to 512 [ 531.291048][ T8423] loop0: detected capacity change from 0 to 64 [ 531.291123][ T8413] EXT4-fs (loop2): Test dummy encryption mode enabled [ 531.336714][ T8413] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 531.337566][ T8428] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 531.350293][ T8426] fuse: Bad value for 'fd' [ 531.371814][ T8429] Unsupported ieee802154 address type: 0 [ 531.635731][ T8413] EXT4-fs (loop2): 1 truncate cleaned up [ 531.646255][ T8413] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 533.221730][ T8440] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 533.554158][ T8443] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 534.811557][ T8449] loop1: detected capacity change from 0 to 2048 [ 535.053817][ T8449] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 535.426522][ T8457] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 536.061001][ T8459] netlink: 'syz.0.1232': attribute type 10 has an invalid length. [ 536.148945][ T8463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 536.764905][ T7340] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 537.141030][ T8468] fuse: Bad value for 'fd' [ 537.364858][ T7340] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.402315][ T7340] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.477406][ T7340] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 537.677270][ T7340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.487307][ T7340] usb 1-1: config 0 descriptor?? [ 538.527489][ T7340] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 538.543180][ T8480] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 538.901594][ T4282] usb 1-1: USB disconnect, device number 9 [ 538.909992][ T8486] loop1: detected capacity change from 0 to 64 [ 539.112911][ T8489] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 539.728530][ T8497] loop2: detected capacity change from 0 to 2048 [ 539.836739][ T8497] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 540.471098][ T7340] libceph: connect (1)[c::]:6789 error -101 [ 540.513595][ T7340] libceph: mon0 (1)[c::]:6789 connect error [ 540.536937][ T8504] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 540.618125][ T4207] libceph: connect (1)[c::]:6789 error -101 [ 540.624346][ T4207] libceph: mon0 (1)[c::]:6789 connect error [ 540.648832][ T8500] ceph: No mds server is up or the cluster is laggy [ 541.295473][ T8510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 541.332238][ T7340] libceph: connect (1)[c::]:6789 error -101 [ 541.632726][ T7340] libceph: mon0 (1)[c::]:6789 connect error [ 541.741415][ T8513] fuse: Bad value for 'fd' [ 542.818551][ T8521] Cannot find del_set index 4 as target [ 542.845264][ T8521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 544.084384][ T8524] siw: device registration error -23 [ 544.477165][ T8528] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 545.906859][ T4282] libceph: connect (1)[c::]:6789 error -101 [ 545.913029][ T4282] libceph: mon0 (1)[c::]:6789 connect error [ 545.950600][ T8539] loop4: detected capacity change from 0 to 2048 [ 546.044977][ T8539] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 546.131737][ T8542] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 546.209534][ T8544] loop2: detected capacity change from 0 to 8 [ 546.227337][ T4211] libceph: connect (1)[c::]:6789 error -101 [ 546.233815][ T4211] libceph: mon0 (1)[c::]:6789 connect error [ 546.656454][ T8546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 546.874922][ T4211] libceph: connect (1)[c::]:6789 error -101 [ 546.880957][ T4211] libceph: mon0 (1)[c::]:6789 connect error [ 546.896353][ T8538] ceph: No mds server is up or the cluster is laggy [ 547.289343][ T8549] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1255' resets device [ 548.123022][ T8557] loop2: detected capacity change from 0 to 128 [ 548.341224][ T8557] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 548.768640][ T8559] loop0: detected capacity change from 0 to 256 [ 549.170842][ T8564] loop4: detected capacity change from 0 to 2048 [ 549.306622][ T8568] sysv_free_block: trying to free block not in datazone [ 549.964509][ T8564] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 550.047909][ T8559] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 550.102187][ T4169] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 550.134500][ T8573] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 550.227838][ T8575] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 550.499242][ T8578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 551.946544][ T8592] netlink: 'syz.4.1267': attribute type 10 has an invalid length. [ 552.103772][ T8589] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 552.160557][ T8597] loop3: detected capacity change from 0 to 64 [ 552.327139][ T8599] loop1: detected capacity change from 0 to 8 [ 555.321515][ T8620] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 555.862927][ T8626] loop1: detected capacity change from 0 to 512 [ 555.909491][ T8627] device veth1_macvtap left promiscuous mode [ 556.098745][ T8626] EXT4-fs (loop1): Test dummy encryption mode enabled [ 556.248186][ T8626] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 556.543270][ T8626] EXT4-fs (loop1): 1 truncate cleaned up [ 556.561545][ T8626] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 558.881409][ T8641] loop4: detected capacity change from 0 to 2048 [ 560.380160][ T8651] loop3: detected capacity change from 0 to 2048 [ 561.755832][ T8665] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 561.780977][ T8664] netlink: 'syz.4.1288': attribute type 10 has an invalid length. [ 562.309772][ T21] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 562.755673][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.770534][ T21] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 562.795229][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.808930][ T8682] loop1: detected capacity change from 0 to 2048 [ 562.831151][ T21] usb 4-1: config 0 descriptor?? [ 562.871341][ T8682] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 562.897528][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 562.935279][ T8683] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 562.997954][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.004381][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.310878][ T8685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 563.544668][ T21] pwc: recv_control_msg error -32 req 02 val 2b00 [ 563.594707][ T21] pwc: recv_control_msg error -32 req 02 val 2700 [ 563.635635][ T21] pwc: recv_control_msg error -32 req 02 val 2c00 [ 563.704579][ T21] pwc: recv_control_msg error -32 req 04 val 1000 [ 563.744580][ T21] pwc: recv_control_msg error -32 req 04 val 1300 [ 563.795247][ T21] pwc: recv_control_msg error -32 req 04 val 1400 [ 563.834592][ T21] pwc: recv_control_msg error -32 req 02 val 2000 [ 563.876093][ T21] pwc: recv_control_msg error -32 req 02 val 2100 [ 563.914728][ T21] pwc: recv_control_msg error -32 req 04 val 1500 [ 563.965564][ T21] pwc: recv_control_msg error -32 req 02 val 2500 [ 564.004635][ T21] pwc: recv_control_msg error -32 req 02 val 2400 [ 564.060347][ T21] pwc: recv_control_msg error -71 req 02 val 2600 [ 564.094652][ T21] pwc: recv_control_msg error -71 req 02 val 2900 [ 564.124656][ T21] pwc: recv_control_msg error -71 req 02 val 2800 [ 564.146942][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 564.178419][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 564.205452][ T21] pwc: Registered as video103. [ 564.212914][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 564.260390][ T21] usb 4-1: USB disconnect, device number 16 [ 564.816469][ T8695] loop4: detected capacity change from 0 to 2048 [ 564.937374][ T8695] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 565.228598][ T8701] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 565.607711][ T8708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 566.361250][ T8708] syz.4.1296 (8708) used greatest stack depth: 18496 bytes left [ 568.729001][ T8733] loop3: detected capacity change from 0 to 512 [ 568.978328][ T8726] device veth1_macvtap left promiscuous mode [ 569.031641][ T8733] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 569.039400][ T8733] EXT4-fs (loop3): Unrecognized mount option "=" or missing value [ 570.937172][ T8736] netlink: 'syz.4.1307': attribute type 10 has an invalid length. [ 571.392782][ T8741] loop1: detected capacity change from 0 to 128 [ 571.478502][ T8741] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 571.505465][ T8741] sysv_free_block: trying to free block not in datazone [ 571.551277][ T8741] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 572.947621][ T8763] loop0: detected capacity change from 0 to 2048 [ 573.069714][ T8763] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 573.123692][ T8767] loop1: detected capacity change from 0 to 512 [ 573.184840][ T8767] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 573.192781][ T8767] EXT4-fs (loop1): Unrecognized mount option "=" or missing value [ 576.816693][ T8763] NILFS (loop0): error -4 creating segctord thread [ 577.330159][ T8776] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 578.050131][ T8786] loop2: detected capacity change from 0 to 2048 [ 578.187827][ T8783] loop4: detected capacity change from 0 to 2048 [ 578.611591][ T8783] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 578.652552][ T8788] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1321'. [ 578.669603][ T8789] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 579.023161][ T8798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 579.166658][ T8797] loop0: detected capacity change from 0 to 8 [ 580.178909][ T8805] loop2: detected capacity change from 0 to 2048 [ 581.309810][ T8813] loop4: detected capacity change from 0 to 2048 [ 581.370355][ T8813] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 581.442813][ T8816] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 582.931301][ T8818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 583.356704][ T26] audit: type=1800 audit(1742300140.188:119): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1327" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 583.835850][ T8826] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 583.950296][ T8827] loop1: detected capacity change from 0 to 2048 [ 584.089556][ T8822] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 584.230089][ T8837] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1335'. [ 584.248616][ T8827] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 584.452935][ T8839] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 585.084762][ T8842] loop3: detected capacity change from 0 to 512 [ 585.187055][ T8842] EXT4-fs (loop3): Test dummy encryption mode enabled [ 585.238308][ T8847] xt_CT: You must specify a L4 protocol and not use inversions on it [ 586.164861][ T8842] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 586.481141][ T8842] EXT4-fs (loop3): 1 truncate cleaned up [ 586.492343][ T8842] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 586.570802][ T8849] device veth1_macvtap left promiscuous mode [ 586.821307][ T8857] loop1: detected capacity change from 0 to 512 [ 586.876262][ T8857] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 586.884285][ T8857] EXT4-fs (loop1): Unrecognized mount option "=" or missing value [ 588.915618][ T7332] libceph: connect (1)[c::]:6789 error -101 [ 588.998428][ T7332] libceph: mon0 (1)[c::]:6789 connect error [ 589.170150][ T8860] ceph: No mds server is up or the cluster is laggy [ 589.554800][ T7332] libceph: connect (1)[c::]:6789 error -101 [ 589.560862][ T7332] libceph: mon0 (1)[c::]:6789 connect error [ 589.801927][ T8869] loop3: detected capacity change from 0 to 2048 [ 589.992275][ T8869] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 590.834434][ T8877] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 591.231442][ T8883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 591.548532][ T8882] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 592.196435][ T8893] loop3: detected capacity change from 0 to 2048 [ 592.274533][ T4241] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 592.305165][ T8893] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 592.744704][ T4241] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.820550][ T8899] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 592.838377][ T4241] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 593.032925][ T4241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.330448][ T4241] usb 3-1: config 0 descriptor?? [ 593.816895][ T4241] pwc: Askey VC010 type 2 USB webcam detected. [ 594.314628][ T4241] pwc: recv_control_msg error -32 req 02 val 2b00 [ 594.554601][ T4241] pwc: recv_control_msg error -32 req 02 val 2700 [ 594.614575][ T4241] pwc: recv_control_msg error -32 req 02 val 2c00 [ 594.665030][ T4241] pwc: recv_control_msg error -32 req 04 val 1000 [ 594.714543][ T4241] pwc: recv_control_msg error -32 req 04 val 1300 [ 594.764599][ T4241] pwc: recv_control_msg error -32 req 04 val 1400 [ 594.804545][ T4241] pwc: recv_control_msg error -32 req 02 val 2000 [ 594.854561][ T4241] pwc: recv_control_msg error -32 req 02 val 2100 [ 594.904602][ T4241] pwc: recv_control_msg error -32 req 04 val 1500 [ 594.955051][ T4241] pwc: recv_control_msg error -32 req 02 val 2500 [ 595.004592][ T4241] pwc: recv_control_msg error -32 req 02 val 2400 [ 595.274597][ T4241] pwc: recv_control_msg error -71 req 02 val 2900 [ 595.294626][ T4241] pwc: recv_control_msg error -71 req 02 val 2800 [ 595.324657][ T4241] pwc: recv_control_msg error -71 req 04 val 1100 [ 595.354611][ T4241] pwc: recv_control_msg error -71 req 04 val 1200 [ 595.370140][ T4241] pwc: Registered as video103. [ 595.416281][ T4241] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 595.483313][ T4241] usb 3-1: USB disconnect, device number 8 [ 595.680488][ T8914] loop3: detected capacity change from 0 to 1024 [ 595.759920][ T8914] EXT4-fs (loop3): Ignoring removed orlov option [ 595.790470][ T8914] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 595.866559][ T8914] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 596.476850][ T8924] Unsupported ieee802154 address type: 0 [ 596.717428][ T8928] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 598.211492][ T8936] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1361'. [ 599.024200][ T8111] block nbd4: Attempted send on invalid socket [ 599.031786][ T8111] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 599.047355][ T8940] MINIX-fs: unable to read superblock [ 599.299352][ T8942] loop0: detected capacity change from 0 to 128 [ 599.449819][ T8942] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 599.504823][ T8942] sysv_free_block: trying to free block not in datazone [ 599.529305][ T8942] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 600.305919][ T8955] loop1: detected capacity change from 0 to 8 [ 602.721279][ T8970] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 603.429310][ T8967] loop1: detected capacity change from 0 to 2048 [ 603.642033][ T8978] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1373'. [ 603.856421][ T8982] loop3: detected capacity change from 0 to 8 [ 604.802390][ T8986] loop4: detected capacity change from 0 to 2048 [ 606.294952][ T8995] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 607.841939][ T9012] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 608.210537][ T8111] block nbd4: Attempted send on invalid socket [ 608.216981][ T8111] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 608.228047][ T9014] MINIX-fs: unable to read superblock [ 608.428022][ T9016] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 609.284281][ T9023] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1386'. [ 609.469283][ T263] block nbd3: Attempted send on invalid socket [ 609.476682][ T263] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 609.489647][ T9025] MINIX-fs: unable to read superblock [ 609.750407][ T9027] loop1: detected capacity change from 0 to 8 [ 610.476755][ T9033] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 611.963220][ T9043] loop3: detected capacity change from 0 to 2048 [ 613.031226][ T9049] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 613.782828][ T9057] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 614.834678][ T9056] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 617.072905][ T9087] loop1: detected capacity change from 0 to 128 [ 617.339958][ T9089] loop2: detected capacity change from 0 to 2048 [ 617.931043][ T9087] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 618.195176][ T9092] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 618.424565][ T9097] sysv_free_block: trying to free block not in datazone [ 619.273293][ T4168] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 620.697910][ T9125] loop1: detected capacity change from 0 to 2048 [ 620.787628][ T9125] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 621.224535][ T9130] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 622.397680][ T9120] chnl_net:caif_netlink_parms(): no params data found [ 622.547486][ T2238] Bluetooth: hci5: command 0x0409 tx timeout [ 622.558943][ T9138] Unsupported ieee802154 address type: 0 [ 622.583355][ T9140] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 622.975826][ T8985] bond0: (slave syz_tun): Releasing backup interface [ 622.998944][ T9120] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.370294][ T9147] loop1: detected capacity change from 0 to 2048 [ 623.476955][ T9120] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.533420][ T9120] device bridge_slave_0 entered promiscuous mode [ 623.972598][ T9120] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.984532][ T9120] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.992854][ T9120] device bridge_slave_1 entered promiscuous mode [ 624.495015][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.501344][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.594788][ T4241] Bluetooth: hci5: command 0x041b tx timeout [ 624.834061][ T9120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.668930][ T9120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.678297][ T2238] Bluetooth: hci5: command 0x040f tx timeout [ 626.817344][ T9120] team0: Port device team_slave_0 added [ 626.917396][ T9120] team0: Port device team_slave_1 added [ 627.009466][ T9173] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 627.483462][ T9174] loop4: detected capacity change from 0 to 2048 [ 627.516720][ T9120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.523700][ T9120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.674967][ T9179] loop1: detected capacity change from 0 to 8 [ 627.707543][ T9120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.773939][ T9170] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1425'. [ 627.791847][ T9120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.804465][ T9120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.843410][ T9120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.955153][ T9120] device hsr_slave_0 entered promiscuous mode [ 628.692608][ T9185] loop2: detected capacity change from 0 to 2048 [ 629.305272][ T2238] Bluetooth: hci5: command 0x0419 tx timeout [ 629.335334][ T9120] device hsr_slave_1 entered promiscuous mode [ 629.691487][ T9195] Cannot find del_set index 4 as target [ 630.714665][ T9120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 630.735617][ T9120] Cannot create hsr debugfs directory [ 632.175169][ T9214] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 632.191591][ T9209] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 633.031119][ T9224] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1440'. [ 633.133128][ T9228] loop3: detected capacity change from 0 to 512 [ 633.235972][ T9228] EXT4-fs (loop3): Test dummy encryption mode enabled [ 633.246107][ T9228] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 633.441525][ T9228] EXT4-fs (loop3): 1 truncate cleaned up [ 633.447588][ T9228] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 634.063114][ T9247] loop2: detected capacity change from 0 to 2048 [ 635.282392][ T9120] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 635.710200][ T9120] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 635.745538][ T9120] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 635.820392][ T9262] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 635.957553][ T9120] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 636.087483][ T9268] Cannot find del_set index 4 as target [ 636.100864][ T9268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 637.016895][ T9120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.066331][ T9120] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.156040][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 637.183790][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 637.491684][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 637.522553][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 637.550693][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.557896][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.619173][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 637.634217][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 637.643143][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.650390][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.658412][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 637.667857][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 637.689369][ T9277] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1452'. [ 637.774851][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 637.792480][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 637.831120][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 638.183607][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 638.266065][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 638.489599][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 638.523762][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 638.546724][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 638.555441][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 638.564115][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 639.575304][ T9287] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 640.912237][ T9307] loop4: detected capacity change from 0 to 512 [ 640.965878][ T9307] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 640.973378][ T9307] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 642.418807][ T9304] loop3: detected capacity change from 0 to 2048 [ 642.613624][ T9304] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 642.822973][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 642.831086][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 642.847635][ T9120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.705533][ T9327] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 644.447532][ T9346] Cannot find del_set index 4 as target [ 644.454635][ T9346] xt_CT: You must specify a L4 protocol and not use inversions on it [ 644.776144][ T9347] loop1: detected capacity change from 0 to 2048 [ 646.281938][ T4412] device hsr_slave_0 left promiscuous mode [ 646.339176][ T4412] device hsr_slave_1 left promiscuous mode [ 646.399001][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.427290][ T4798] libceph: connect (1)[c::]:6789 error -101 [ 646.433485][ T4798] libceph: mon0 (1)[c::]:6789 connect error [ 646.498891][ T4798] libceph: connect (1)[c::]:6789 error -101 [ 646.514577][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.522039][ T4798] libceph: mon0 (1)[c::]:6789 connect error [ 646.539096][ T4412] device bridge_slave_1 left promiscuous mode [ 646.551516][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.574884][ T9363] ceph: No mds server is up or the cluster is laggy [ 646.579057][ T4412] device bridge_slave_0 left promiscuous mode [ 646.588835][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.792299][ T9377] loop3: detected capacity change from 0 to 128 [ 646.821986][ T9377] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 647.048774][ T4412] team0 (unregistering): Port device team_slave_1 removed [ 647.069715][ T4412] team0 (unregistering): Port device team_slave_0 removed [ 647.089011][ T4412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.864692][ T9379] sysv_free_block: trying to free block not in datazone [ 648.231002][ T4412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.269522][ T4180] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 648.374754][ T4412] bond0 (unregistering): Released all slaves [ 648.395882][ T9384] loop1: detected capacity change from 0 to 1024 [ 648.552944][ T9384] EXT4-fs (loop1): Ignoring removed orlov option [ 648.597245][ T9384] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 648.618943][ T9373] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 648.634918][ T9373] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.642177][ T9373] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.585413][ T9384] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 650.526119][ T26] audit: type=1800 audit(1742300207.458:120): pid=9400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1476" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 650.895948][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 651.102069][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 651.160041][ T9120] device veth0_vlan entered promiscuous mode [ 651.234846][ T9419] Cannot find del_set index 4 as target [ 651.475343][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 651.484006][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 651.698872][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 651.708054][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 651.728713][ T9120] device veth1_vlan entered promiscuous mode [ 651.760247][ T9120] device veth0_macvtap entered promiscuous mode [ 651.770879][ T9120] device veth1_macvtap entered promiscuous mode [ 651.791162][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.803384][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.845818][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.874467][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.893935][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.921305][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.969436][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.014162][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.066907][ T9120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.109147][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 652.223194][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 652.380614][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 652.435894][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 652.497156][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 652.673496][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 652.792515][ T9441] loop4: detected capacity change from 0 to 512 [ 652.818485][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 652.882663][ T9441] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 652.890265][ T9441] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 656.768046][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.812183][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.853848][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.873147][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.883724][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.904162][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.922828][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.942333][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.962098][ T9120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.991139][ T9120] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.029255][ T9120] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.059814][ T9120] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.089559][ T9120] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.229093][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 657.376658][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 657.423342][ T9454] loop1: detected capacity change from 0 to 1024 [ 657.437192][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 657.482515][ T9454] EXT4-fs (loop1): Ignoring removed orlov option [ 657.511705][ T9454] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 658.111142][ T9457] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 658.303081][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.314346][ T9454] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 658.385109][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.456406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 658.477337][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.492909][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.525402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 658.811100][ T9478] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 660.462817][ T9501] loop3: detected capacity change from 0 to 8 [ 661.101561][ T9513] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1498' resets device [ 663.671031][ T9521] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 664.487116][ T9523] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 666.443053][ T26] audit: type=1400 audit(1742300223.068:121): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE81 pid=9529 comm="syz.5.1505" [ 667.118804][ T9534] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 667.144842][ T9528] device veth1_macvtap left promiscuous mode [ 668.013697][ T9551] loop1: detected capacity change from 0 to 2048 [ 669.008219][ T9564] loop2: detected capacity change from 0 to 2048 [ 670.970845][ T9582] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 671.869497][ T9593] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 672.371814][ T9608] loop1: detected capacity change from 0 to 8 [ 673.093720][ T9619] SQUASHFS error: lzo decompression failed, data probably corrupt [ 673.102447][ T9619] SQUASHFS error: Failed to read block 0x71: -5 [ 673.118807][ T9619] SQUASHFS error: lzo decompression failed, data probably corrupt [ 673.127132][ T9619] SQUASHFS error: Failed to read block 0x71: -5 [ 673.284735][ T26] audit: type=1800 audit(1742300230.058:122): pid=9619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1524" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 674.250470][ T9636] Cannot find del_set index 4 as target [ 674.263945][ T9636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 675.574473][ T9642] loop3: detected capacity change from 0 to 128 [ 675.817143][ T9642] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 675.960766][ T9642] sysv_free_block: trying to free block not in datazone [ 676.172193][ T9642] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 679.223470][ T9654] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 679.718482][ T9675] loop2: detected capacity change from 0 to 512 [ 680.289908][ T9684] Cannot find del_set index 4 as target [ 680.296862][ T9684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 681.001464][ T9682] loop1: detected capacity change from 0 to 2048 [ 681.079290][ T9675] EXT4-fs (loop2): Test dummy encryption mode enabled [ 681.114609][ T9675] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 681.233188][ T9675] EXT4-fs (loop2): 1 truncate cleaned up [ 681.233212][ T9675] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 681.240840][ T9691] netlink: 'syz.5.1543': attribute type 10 has an invalid length. [ 681.603969][ T9691] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 682.139044][ T9705] loop1: detected capacity change from 0 to 2048 [ 682.809711][ T9705] NILFS (loop1): unrecognized mount option "" [ 683.202003][ T9709] loop1: detected capacity change from 0 to 64 [ 684.341289][ T9724] fuse: Bad value for 'group_id' [ 685.753815][ T9736] loop1: detected capacity change from 0 to 2048 [ 685.934999][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.944876][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.603011][ T9752] Cannot find del_set index 4 as target [ 686.616434][ T9752] xt_CT: You must specify a L4 protocol and not use inversions on it [ 687.729440][ T9750] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 687.741200][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.748586][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.281526][ T9766] loop1: detected capacity change from 0 to 2048 [ 689.202060][ T9766] NILFS (loop1): unrecognized mount option "" [ 689.411863][ T9771] loop2: detected capacity change from 0 to 64 [ 689.437094][ T9769] netlink: 'syz.3.1559': attribute type 10 has an invalid length. [ 689.784577][ T2283] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 690.614741][ T2283] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.655893][ T2283] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 690.677427][ T2283] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 690.700413][ T9786] fuse: Bad value for 'group_id' [ 690.706795][ T2283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.809781][ T2283] usb 4-1: config 0 descriptor?? [ 690.970420][ T2283] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 691.723058][ T2283] usb 4-1: USB disconnect, device number 17 [ 691.795504][ T9795] loop4: detected capacity change from 0 to 8 [ 692.335335][ T9803] SQUASHFS error: lzo decompression failed, data probably corrupt [ 692.343488][ T9803] SQUASHFS error: Failed to read block 0x71: -5 [ 692.356299][ T9803] SQUASHFS error: lzo decompression failed, data probably corrupt [ 692.364450][ T9803] SQUASHFS error: Failed to read block 0x71: -5 [ 692.405574][ T26] audit: type=1800 audit(1742300249.298:123): pid=9803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1566" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 693.146385][ T9806] loop1: detected capacity change from 0 to 8 [ 693.497543][ T9812] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.1567' resets device [ 694.568618][ T9816] loop4: detected capacity change from 0 to 512 [ 694.588136][ T9816] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 694.595717][ T9816] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 695.490506][ T9817] (syz.3.1569,9817,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 695.499296][ T9817] (syz.3.1569,9817,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 696.676254][ T9823] loop3: detected capacity change from 0 to 64 [ 697.930232][ T26] audit: type=1400 audit(1742300254.258:124): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE81 pid=9828 comm="syz.4.1572" [ 699.768649][ T9852] loop2: detected capacity change from 0 to 8 [ 701.544127][ T9866] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1577' resets device [ 702.964634][ T9869] loop1: detected capacity change from 0 to 128 [ 702.976224][ T9857] ceph: No mds server is up or the cluster is laggy [ 702.983550][ T4241] libceph: connect (1)[c::]:6789 error -101 [ 703.009996][ T9869] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 703.010434][ T4241] libceph: mon0 (1)[c::]:6789 connect error [ 703.025077][ T9869] sysv_free_block: trying to free block not in datazone [ 703.035098][ T9869] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 703.920485][ T9880] loop4: detected capacity change from 0 to 2048 [ 704.361104][ T4211] libceph: connect (1)[c::]:6789 error -101 [ 704.394635][ T4211] libceph: mon0 (1)[c::]:6789 connect error [ 704.504613][ T9880] NILFS (loop4): unrecognized mount option "" [ 704.993216][ T9889] loop2: detected capacity change from 0 to 2048 [ 705.346383][ T9889] NILFS (loop2): unrecognized mount option "" [ 706.007198][ T9890] device veth1_macvtap left promiscuous mode [ 707.515464][ T9903] loop3: detected capacity change from 0 to 2048 [ 709.335824][ T9916] loop3: detected capacity change from 0 to 64 [ 710.994651][ T9938] Cannot find del_set index 4 as target [ 711.008715][ T9938] xt_CT: You must specify a L4 protocol and not use inversions on it [ 712.167312][ T9948] (syz.5.1593,9948,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 712.176445][ T9948] (syz.5.1593,9948,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 714.068949][ T7339] libceph: connect (1)[c::]:6789 error -101 [ 714.075293][ T7339] libceph: mon0 (1)[c::]:6789 connect error [ 714.274387][ T9970] ceph: No mds server is up or the cluster is laggy [ 714.654395][ T7336] libceph: connect (1)[c::]:6789 error -101 [ 714.764541][ T7336] libceph: mon0 (1)[c::]:6789 connect error [ 715.521549][ T7336] libceph: connect (1)[c::]:6789 error -101 [ 715.528227][ T7336] libceph: mon0 (1)[c::]:6789 connect error [ 716.857458][ T9991] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1602'. [ 716.869680][ T7339] libceph: connect (1)[c::]:6789 error -101 [ 716.875902][ T7339] libceph: mon0 (1)[c::]:6789 connect error [ 716.895182][ T9987] ceph: No mds server is up or the cluster is laggy [ 717.301060][T10000] Cannot find del_set index 4 as target [ 717.313909][T10000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 718.827419][T10013] loop2: detected capacity change from 0 to 512 [ 719.489874][T10013] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 719.497976][T10013] EXT4-fs (loop2): Unrecognized mount option "=" or missing value [ 720.967109][T10016] ceph: No mds server is up or the cluster is laggy [ 721.039808][ T4798] libceph: connect (1)[c::]:6789 error -101 [ 721.111389][ T4798] libceph: mon0 (1)[c::]:6789 connect error [ 721.779027][ T7339] libceph: connect (1)[c::]:6789 error -101 [ 721.785559][T10032] loop4: detected capacity change from 0 to 8 [ 721.793036][ T7339] libceph: mon0 (1)[c::]:6789 connect error [ 721.859077][T10033] siw: device registration error -23 [ 724.545741][T10055] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1614'. [ 724.690578][T10060] loop5: detected capacity change from 0 to 8 [ 725.606721][T10071] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.1616' resets device [ 725.638044][T10071] SQUASHFS error: lzo decompression failed, data probably corrupt [ 725.646293][T10071] SQUASHFS error: Failed to read block 0x71: -5 [ 725.654522][T10071] SQUASHFS error: lzo decompression failed, data probably corrupt [ 725.662644][T10071] SQUASHFS error: Failed to read block 0x71: -5 [ 725.700987][ T26] audit: type=1800 audit(1742300282.598:125): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1616" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 726.398343][T10075] loop4: detected capacity change from 0 to 64 [ 727.813274][T10098] siw: device registration error -23 [ 728.623283][ T7340] libceph: connect (1)[c::]:6789 error -101 [ 728.783591][ T7340] libceph: mon0 (1)[c::]:6789 connect error [ 728.857852][T10105] loop5: detected capacity change from 0 to 128 [ 728.888185][T10094] ceph: No mds server is up or the cluster is laggy [ 728.969077][T10105] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 729.278965][ T7340] libceph: connect (1)[c::]:6789 error -101 [ 729.568548][T10120] sysv_free_block: trying to free block not in datazone [ 730.314530][ T7340] libceph: mon0 (1)[c::]:6789 connect error [ 730.541275][ T9120] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 731.273216][T10129] loop3: detected capacity change from 0 to 128 [ 731.296823][T10131] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1627'. [ 731.373411][T10137] loop5: detected capacity change from 0 to 8 [ 731.408095][T10129] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 731.645220][T10141] loop1: detected capacity change from 0 to 2048 [ 732.417083][T10152] sysv_free_block: trying to free block not in datazone [ 733.452787][T10141] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 733.809468][ T4180] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 733.919850][T10160] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 734.120374][ T4211] libceph: connect (1)[c::]:6789 error -101 [ 734.148136][ T4211] libceph: mon0 (1)[c::]:6789 connect error [ 734.251347][T10167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 734.340622][T10158] ceph: No mds server is up or the cluster is laggy [ 734.612855][ T4211] libceph: connect (1)[c::]:6789 error -101 [ 734.644211][ T4211] libceph: mon0 (1)[c::]:6789 connect error [ 735.354312][ T4211] libceph: connect (1)[c::]:6789 error -101 [ 735.365241][ T4211] libceph: mon0 (1)[c::]:6789 connect error [ 736.533512][T10188] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1640'. [ 736.573705][T10190] loop3: detected capacity change from 0 to 64 [ 737.101321][T10200] loop1: detected capacity change from 0 to 2048 [ 742.620939][T10249] loop3: detected capacity change from 0 to 512 [ 742.685291][T10249] EXT4-fs (loop3): Test dummy encryption mode enabled [ 742.692536][T10249] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 742.726058][T10249] EXT4-fs (loop3): 1 truncate cleaned up [ 742.731755][T10249] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 744.360807][ T7340] Bluetooth: hci5: command 0x0406 tx timeout [ 745.793855][T10278] loop1: detected capacity change from 0 to 64 [ 745.813695][T10281] loop5: detected capacity change from 0 to 128 [ 745.864662][T10281] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 746.623655][T10294] sysv_free_block: trying to free block not in datazone [ 747.316392][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.370720][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.421802][ T9120] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 748.347986][T10307] loop5: detected capacity change from 0 to 2048 [ 749.574907][ T4241] libceph: connect (1)[c::]:6789 error -101 [ 749.582171][ T4241] libceph: mon0 (1)[c::]:6789 connect error [ 749.659152][T10332] loop1: detected capacity change from 0 to 2048 [ 749.781811][T10323] ceph: No mds server is up or the cluster is laggy [ 750.072146][ T4241] libceph: connect (1)[c::]:6789 error -101 [ 750.160054][ T4241] libceph: mon0 (1)[c::]:6789 connect error [ 750.610576][T10344] loop4: detected capacity change from 0 to 256 [ 751.067653][T10344] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 756.633722][ T7340] libceph: connect (1)[c::]:6789 error -101 [ 756.644771][ T7340] libceph: mon0 (1)[c::]:6789 connect error [ 756.728897][T10385] loop1: detected capacity change from 0 to 64 [ 756.739309][T10380] ceph: No mds server is up or the cluster is laggy [ 756.914835][ T7340] libceph: connect (1)[c::]:6789 error -101 [ 756.925049][ T7340] libceph: mon0 (1)[c::]:6789 connect error [ 757.713919][ T7340] libceph: connect (1)[c::]:6789 error -101 [ 757.788529][ T7340] libceph: mon0 (1)[c::]:6789 connect error [ 757.898249][T10393] chnl_net:caif_netlink_parms(): no params data found [ 758.010992][T10405] ceph: No mds server is up or the cluster is laggy [ 758.049595][ T7339] libceph: connect (1)[c::]:6789 error -101 [ 758.055935][ T7339] libceph: mon0 (1)[c::]:6789 connect error [ 759.541232][ T7340] libceph: connect (1)[c::]:6789 error -101 [ 759.574641][ T7340] libceph: mon0 (1)[c::]:6789 connect error [ 759.854641][ T7339] Bluetooth: hci0: command 0x0409 tx timeout [ 760.093747][T10413] loop5: detected capacity change from 0 to 8 [ 760.291825][T10393] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.300986][T10393] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.333389][T10393] device bridge_slave_0 entered promiscuous mode [ 760.395497][T10413] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.1682' resets device [ 760.411953][T10393] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.446334][T10393] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.472195][T10393] device bridge_slave_1 entered promiscuous mode [ 760.494559][ T7339] libceph: connect (1)[c::]:6789 error -101 [ 760.504537][ T7339] libceph: mon0 (1)[c::]:6789 connect error [ 760.606453][T10421] ceph: No mds server is up or the cluster is laggy [ 761.066166][ T7340] libceph: connect (1)[c::]:6789 error -101 [ 761.098954][ T7340] libceph: mon0 (1)[c::]:6789 connect error [ 761.231758][T10393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.357057][T10393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.647338][T10393] team0: Port device team_slave_0 added [ 761.700198][T10434] loop1: detected capacity change from 0 to 8 [ 761.726914][T10393] team0: Port device team_slave_1 added [ 761.869460][T10393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.876878][ T7340] Bluetooth: hci0: command 0x041b tx timeout [ 761.893358][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.937065][T10393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.975421][T10393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.982406][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.008310][ C1] vkms_vblank_simulate: vblank timer overrun [ 762.107482][T10393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.369982][T10441] loop5: detected capacity change from 0 to 8 [ 762.490005][T10442] (syz.3.1689,10442,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 762.499117][T10442] (syz.3.1689,10442,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 763.147866][T10393] device hsr_slave_0 entered promiscuous mode [ 763.188703][T10393] device hsr_slave_1 entered promiscuous mode [ 763.256634][T10447] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.1690' resets device [ 763.272492][T10393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 763.287254][T10393] Cannot create hsr debugfs directory [ 764.399490][ T7339] Bluetooth: hci0: command 0x040f tx timeout [ 764.477339][ T8111] block nbd5: Attempted send on invalid socket [ 764.571838][T10393] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 764.574422][ T8111] blk_update_request: I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 764.590027][T10452] MINIX-fs: unable to read superblock [ 764.683798][T10393] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 764.713942][T10393] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 764.788394][T10393] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 766.281517][T10393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.308694][T10393] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.353486][T10393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 766.374564][T10393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 766.418546][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 766.434482][ T4207] Bluetooth: hci0: command 0x0419 tx timeout [ 766.476411][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 766.555064][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 766.976650][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 767.018024][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.025182][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.063796][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 767.112681][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 767.123600][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.130748][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.183204][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 767.216169][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 767.231530][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 767.267843][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 767.285334][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 767.313806][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 767.337050][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 767.439175][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 767.475993][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 767.503420][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 768.782074][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 768.831634][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 768.849606][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 769.186944][T10483] loop1: detected capacity change from 0 to 2048 [ 769.842782][ T263] block nbd2: Possible stuck request ffff8880213f0000: control (read@1024,1024B). Runtime 30 seconds [ 770.640819][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 770.659407][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 770.691689][T10393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.979238][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 772.032417][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 772.158992][T10393] device veth0_vlan entered promiscuous mode [ 772.234042][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 772.251811][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 772.298768][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 772.322424][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 772.415391][T10393] device veth1_vlan entered promiscuous mode [ 772.506370][T10393] device veth0_macvtap entered promiscuous mode [ 772.551823][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 772.569730][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 772.594148][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 772.991847][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 773.138868][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 773.157032][T10393] device veth1_macvtap entered promiscuous mode [ 773.935317][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.957602][T10527] loop3: detected capacity change from 0 to 256 [ 774.000808][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.233532][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.479312][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.884608][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.913293][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.964410][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.990316][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.071782][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.133267][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.185297][T10393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.222086][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 775.298939][T10543] Cannot find del_set index 4 as target [ 775.327554][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 775.518099][T10527] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 775.570264][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.621436][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.688051][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.749481][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.790276][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.852026][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.865933][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.877047][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.887336][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.898562][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.913991][T10393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.946526][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 775.987552][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 776.014115][T10393] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.043837][T10393] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.084394][T10393] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.093144][T10393] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.321528][ T442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.367206][ T442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.399664][ T4540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.408464][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 776.463289][ T4540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.488750][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 776.997975][T10558] loop6: detected capacity change from 0 to 2048 [ 777.538105][T10560] loop4: detected capacity change from 0 to 2048 [ 778.147128][T10565] fuse: Bad value for 'user_id' [ 780.235709][T10572] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 782.180933][T10584] loop6: detected capacity change from 0 to 2048 [ 785.238934][T10601] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1728'. [ 786.483084][T10608] fuse: Bad value for 'fd' [ 786.529192][T10612] loop6: detected capacity change from 0 to 256 [ 786.573749][T10614] loop1: detected capacity change from 0 to 2048 [ 786.582755][T10616] loop5: detected capacity change from 0 to 128 [ 786.600965][T10610] loop3: detected capacity change from 0 to 1024 [ 786.652935][T10610] EXT4-fs (loop3): Ignoring removed orlov option [ 786.662950][T10612] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 786.675593][T10614] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 786.692450][T10610] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 786.701691][T10616] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 786.872857][T10617] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 786.885276][T10610] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 789.108867][T10639] (syz.1.1735,10639,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 789.117745][T10639] (syz.1.1735,10639,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 792.322197][T10650] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1739'. [ 792.351421][T10652] loop1: detected capacity change from 0 to 128 [ 792.469644][T10652] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 792.732756][T10658] fuse: Bad value for 'user_id' [ 792.855185][ T9120] sysv_free_block: trying to free block not in datazone [ 792.884141][ T9120] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 793.933910][T10664] (syz.3.1743,10664,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 793.942899][T10664] (syz.3.1743,10664,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 794.209664][T10671] loop3: detected capacity change from 0 to 256 [ 794.223621][T10668] loop5: detected capacity change from 0 to 1024 [ 794.282547][T10668] EXT4-fs (loop5): Ignoring removed orlov option [ 794.294280][T10668] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 794.363255][T10671] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 794.506269][T10668] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 795.937000][T10678] chnl_net:caif_netlink_parms(): no params data found [ 796.765654][T10678] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.803470][T10678] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.820961][T10678] device bridge_slave_0 entered promiscuous mode [ 796.844045][ T4209] Bluetooth: hci6: command 0x0409 tx timeout [ 796.899499][T10566] bond0: (slave syz_tun): Releasing backup interface [ 796.948652][T10678] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.962021][ T4168] sysv_free_block: trying to free block not in datazone [ 796.969260][T10678] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.979334][ T4168] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 796.990664][T10678] device bridge_slave_1 entered promiscuous mode [ 797.082952][ T4233] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.180325][T10694] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1750'. [ 797.254632][ T4233] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.301058][T10678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.332791][T10678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.372621][T10698] loop1: detected capacity change from 0 to 2048 [ 797.396496][ T4233] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.454204][T10678] team0: Port device team_slave_0 added [ 797.481822][T10678] team0: Port device team_slave_1 added [ 797.497878][T10698] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 797.559760][T10704] loop6: detected capacity change from 0 to 512 [ 797.581642][T10705] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 797.625962][ T4233] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.667308][T10678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.676942][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.781476][T10678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.855719][T10704] EXT4-fs (loop6): Ignoring removed nobh option [ 797.862568][T10678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.869713][T10704] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 797.884413][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.956584][T10678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.961668][T10704] EXT4-fs (loop6): 1 truncate cleaned up [ 798.077476][T10704] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,nobh,max_batch_time=0x0000000000000693,,errors=continue. Quota mode: none. [ 798.145467][T10678] device hsr_slave_0 entered promiscuous mode [ 798.152669][T10678] device hsr_slave_1 entered promiscuous mode [ 798.173507][T10678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.217801][T10678] Cannot create hsr debugfs directory [ 799.134705][ T7339] Bluetooth: hci6: command 0x041b tx timeout [ 799.549262][T10717] fuse: Bad value for 'fd' [ 799.617120][T10678] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 799.658460][T10678] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 799.699240][T10678] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 799.747035][T10678] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 800.629351][ T263] block nbd2: Possible stuck request ffff8880213f0000: control (read@1024,1024B). Runtime 60 seconds [ 801.347920][ T7339] Bluetooth: hci6: command 0x040f tx timeout [ 801.561785][T10743] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1760'. [ 801.847004][T10678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.206270][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 803.221260][T10760] loop3: detected capacity change from 0 to 512 [ 803.346589][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 803.394456][ T4798] Bluetooth: hci6: command 0x0419 tx timeout [ 803.459598][T10678] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.573822][T10760] EXT4-fs (loop3): Test dummy encryption mode enabled [ 804.991176][T10760] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 805.485044][T10760] EXT4-fs (loop3): 1 truncate cleaned up [ 805.593149][T10760] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 805.687589][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 805.737775][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 805.888150][ T4412] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.895354][ T4412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.962506][T10773] fuse: Bad value for 'fd' [ 807.035407][T10777] dccp_invalid_packet: P.Data Offset(243) too large [ 807.293520][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 807.355209][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 807.426602][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.433703][ T4412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.479503][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 807.488714][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 807.498690][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 807.694531][T10678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 807.773954][T10678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 807.801360][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 807.834619][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 808.766942][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.773412][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.953056][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 809.143232][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 809.349423][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 809.439805][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 809.448702][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 809.457656][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 809.466786][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 809.475400][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 810.172321][T10796] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1771'. [ 812.874555][ T4233] device hsr_slave_0 left promiscuous mode [ 813.222456][T10822] fuse: Bad value for 'fd' [ 813.232404][ T4233] device hsr_slave_1 left promiscuous mode [ 813.243226][ T4233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.272730][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.527123][ T4233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.706588][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.154546][ T4233] device bridge_slave_1 left promiscuous mode [ 814.161000][ T4233] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.407168][T10840] loop1: detected capacity change from 0 to 2048 [ 816.542387][ T4233] device bridge_slave_0 left promiscuous mode [ 816.571323][ T4233] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.155017][ T4233] device veth0_macvtap left promiscuous mode [ 817.161587][ T4233] device veth1_vlan left promiscuous mode [ 817.194819][ T4233] device veth0_vlan left promiscuous mode [ 818.020164][T10863] loop6: detected capacity change from 0 to 512 [ 818.081317][T10863] EXT4-fs (loop6): Ignoring removed nobh option [ 818.098054][T10863] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 818.157702][T10863] EXT4-fs (loop6): 1 truncate cleaned up [ 818.163395][T10863] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,nobh,max_batch_time=0x0000000000000693,,errors=continue. Quota mode: none. [ 822.472419][ T4233] team0 (unregistering): Port device team_slave_1 removed [ 822.579587][ T4233] team0 (unregistering): Port device team_slave_0 removed [ 822.635187][ T4233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.691017][ T4233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.863788][ T4233] bond0 (unregistering): Released all slaves [ 822.975282][T10844] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1785'. [ 823.046024][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 823.053642][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 823.099608][T10678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.230589][T10898] loop3: detected capacity change from 0 to 2048 [ 823.535787][T10898] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 823.653657][T10907] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 824.390452][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 824.473358][T10916] loop1: detected capacity change from 0 to 1024 [ 824.485232][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 824.643821][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 824.718665][T10916] EXT4-fs (loop1): Ignoring removed orlov option [ 824.725760][T10916] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 824.734612][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 824.744967][T10678] device veth0_vlan entered promiscuous mode [ 825.189063][T10916] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 825.326157][T10678] device veth1_vlan entered promiscuous mode [ 825.353945][T10926] loop3: detected capacity change from 0 to 64 [ 825.561549][T10678] device veth0_macvtap entered promiscuous mode [ 825.608568][T10678] device veth1_macvtap entered promiscuous mode [ 825.650076][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 825.658754][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 825.666861][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 827.048607][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 827.078894][T10931] loop5: detected capacity change from 0 to 2048 [ 827.085291][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 827.145091][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 827.155828][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 827.172586][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 827.254587][T10931] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 827.256921][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.400051][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.410322][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.421292][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.431474][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.442450][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.453594][T10942] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 827.784943][ T26] audit: type=1400 audit(1742300384.688:126): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE81 pid=10940 comm="syz.1.1801" [ 828.068676][T10947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 828.297307][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.384403][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.449748][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.499242][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.532837][T10678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.562019][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 829.609127][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 829.708441][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.751592][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.799915][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.834126][T10956] loop1: detected capacity change from 0 to 4096 [ 829.850668][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.881023][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.911955][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.941384][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.002868][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.044456][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.069650][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.081524][T10678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.115331][T10954] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1804'. [ 830.218972][T10962] (syz.3.1806,10962,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 830.227883][T10962] (syz.3.1806,10962,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 830.855259][T10678] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.891864][T10678] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.936803][T10678] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.960936][T10678] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.214572][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 831.281344][ T263] block nbd2: Possible stuck request ffff8880213f0000: control (read@1024,1024B). Runtime 90 seconds [ 831.481182][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 833.955019][ T4540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.997188][ T4540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.051638][T10985] loop5: detected capacity change from 0 to 512 [ 834.118869][T10980] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 834.192567][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 834.258019][T10985] EXT4-fs (loop5): Ignoring removed nobh option [ 834.274902][ T442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.305865][T10985] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 834.327705][ T442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.561239][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 835.426045][T10985] EXT4-fs (loop5): 1 truncate cleaned up [ 835.432025][T10985] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,nobh,max_batch_time=0x0000000000000693,,errors=continue. Quota mode: none. [ 835.705736][T11015] loop7: detected capacity change from 0 to 8 [ 835.759343][T11017] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1818'. [ 837.471496][T11026] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.1745' resets device [ 837.956591][ T4211] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 838.324440][ T4211] usb 2-1: Using ep0 maxpacket: 32 [ 839.104457][ T4211] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 839.114367][ T4211] usb 2-1: can't read configurations, error -71 [ 839.136230][T11039] loop7: detected capacity change from 0 to 2048 [ 839.244368][T11039] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 839.376457][T11049] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 841.049763][T11062] loop7: detected capacity change from 0 to 512 [ 841.074553][T11060] loop6: detected capacity change from 0 to 2048 [ 841.261751][T11062] EXT4-fs (loop7): Ignoring removed nobh option [ 841.480581][T11062] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 841.708788][T11062] EXT4-fs (loop7): 1 truncate cleaned up [ 841.818115][T11062] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,nobh,max_batch_time=0x0000000000000693,,errors=continue. Quota mode: none. [ 843.185078][T11081] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1830'. [ 843.954269][T11090] loop5: detected capacity change from 0 to 2048 [ 846.674369][ T4211] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 846.710368][T11116] loop7: detected capacity change from 0 to 512 [ 846.817888][T11116] EXT4-fs (loop7): Ignoring removed nobh option [ 846.832250][T11116] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 846.900155][T11116] EXT4-fs (loop7): 1 truncate cleaned up [ 846.914511][ T4211] usb 7-1: Using ep0 maxpacket: 32 [ 846.932187][T11116] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,nobh,max_batch_time=0x0000000000000693,,errors=continue. Quota mode: none. [ 847.235094][ T4211] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 847.243444][ T4211] usb 7-1: config 0 has no interface number 0 [ 847.260385][ T4211] usb 7-1: config 0 interface 184 has no altsetting 0 [ 849.234480][ T4211] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 849.313876][ T4211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.532531][T11143] loop7: detected capacity change from 0 to 512 [ 849.541610][ T4211] usb 7-1: config 0 descriptor?? [ 849.634976][ T4211] usb 7-1: can't set config #0, error -71 [ 849.689663][T11143] EXT4-fs (loop7): Ignoring removed nobh option [ 849.750279][ T4211] usb 7-1: USB disconnect, device number 2 [ 850.287232][T11143] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 851.368913][T11143] EXT4-fs (loop7): 1 truncate cleaned up [ 851.400694][T11143] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,nobh,max_batch_time=0x0000000000000693,,errors=continue. Quota mode: none. [ 858.120087][T11231] siw: device registration error -23 [ 858.493926][T11230] dccp_invalid_packet: P.Data Offset(243) too large [ 859.142811][T11247] loop5: detected capacity change from 0 to 2048 [ 859.286168][T11247] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 859.387772][T11257] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 862.711025][ T263] block nbd2: Possible stuck request ffff8880213f0000: control (read@1024,1024B). Runtime 120 seconds [ 864.539840][T11337] loop5: detected capacity change from 0 to 1024 [ 864.748458][T11337] EXT4-fs (loop5): Ignoring removed orlov option [ 864.785629][T11337] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 865.253706][T11337] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 866.870251][ T26] audit: type=1800 audit(1742300423.658:127): pid=11358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1881" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 868.920426][T11388] dccp_invalid_packet: P.Data Offset(243) too large [ 870.196882][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.206650][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.874856][T11414] fuse: Bad value for 'rootmode' [ 871.297136][T11423] dccp_invalid_packet: P.Data Offset(243) too large [ 873.354823][T11446] loop7: detected capacity change from 0 to 2048 [ 873.409082][T11446] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 873.665609][T11449] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 875.181674][ T8111] block nbd5: Attempted send on invalid socket [ 875.188190][ T8111] blk_update_request: I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 875.199957][T11458] MINIX-fs: unable to read superblock [ 875.539942][T11462] fuse: Bad value for 'rootmode' [ 877.186255][T11480] dccp_invalid_packet: P.Data Offset(243) too large [ 879.467545][T11512] loop7: detected capacity change from 0 to 2048 [ 879.684138][T11512] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 880.191535][T11519] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 882.557375][ T7336] Bluetooth: hci0: command 0x0406 tx timeout [ 882.965915][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 883.204808][T11561] dccp_invalid_packet: P.Data Offset(243) too large [ 884.415211][ T23] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.491006][ T23] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 884.595503][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.664944][ T23] usb 7-1: config 0 descriptor?? [ 884.872813][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 885.680318][ T23] pwc: send_video_command error -71 [ 885.686041][ T23] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 885.693600][ T23] Philips webcam: probe of 7-1:0.0 failed with error -71 [ 885.702767][ T23] usb 7-1: USB disconnect, device number 3 [ 885.972228][T11583] loop1: detected capacity change from 0 to 2048 [ 886.685059][T11583] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 886.973949][T11599] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 888.363040][T11633] dccp_invalid_packet: P.Data Offset(243) too large [ 889.459665][T11643] trusted_key: encrypted_key: key user:syz not found [ 890.115137][ T27] INFO: task syz.2.1644:10219 blocked for more than 144 seconds. [ 890.193785][ T27] Not tainted 5.15.179-syzkaller #0 [ 890.241261][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 890.291995][ T27] task:syz.2.1644 state:D stack:24664 pid:10219 ppid: 4169 flags:0x00004004 [ 890.301900][ T27] Call Trace: [ 890.305947][ T27] [ 890.308944][ T27] __schedule+0x12c4/0x45b0 [ 890.313602][ T27] ? mark_lock+0x98/0x340 [ 890.324531][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 890.330572][ T27] ? release_firmware_map_entry+0x190/0x190 [ 890.344309][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 890.349565][ T27] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 890.404412][ T27] schedule+0x11b/0x1f0 [ 890.408641][ T27] io_schedule+0x88/0x100 [ 890.413015][ T27] bit_wait_io+0xe/0xc0 [ 890.444347][ T27] __wait_on_bit+0xb9/0x180 [ 890.448920][ T27] ? bit_wait+0xc0/0xc0 [ 890.453150][ T27] out_of_line_wait_on_bit+0x1d0/0x250 [ 890.486768][ T27] ? bit_wait+0xc0/0xc0 [ 890.490985][ T27] ? __wait_on_bit+0x180/0x180 [ 890.509131][ T27] ? submit_bio+0x2dd/0x560 [ 890.513716][ T27] ? bit_waitqueue+0x30/0x30 [ 890.544315][ T27] __bread_gfp+0x2d6/0x390 [ 890.548809][ T27] minix_fill_super+0x125/0x1a80 [ 890.553825][ T27] ? snprintf+0xd6/0x120 [ 890.577612][ T27] ? vscnprintf+0x80/0x80 [ 890.582044][ T27] ? set_blocksize+0x1ec/0x370 [ 890.597753][ T27] mount_bdev+0x2c9/0x3f0 [ 890.615955][ T27] ? minix_mount+0x40/0x40 [ 890.630611][ T27] legacy_get_tree+0xeb/0x180 [ 890.646968][ T27] ? minix_write_failed+0x1a0/0x1a0 [ 890.662695][ T27] vfs_get_tree+0x88/0x270 [ 890.675144][ T27] do_new_mount+0x2ba/0xb40 [ 890.698817][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 890.716104][ T27] ? do_move_mount_old+0x160/0x160 [ 890.734888][ T27] ? path_mount+0x654/0x10a0 [ 890.749636][ T27] ? do_new_mount+0x6/0xb40 [ 890.763364][ T27] __se_sys_mount+0x2d5/0x3c0 [ 890.774342][ T27] ? __x64_sys_mount+0xc0/0xc0 [ 890.783701][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 890.796737][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 890.813329][ T27] ? __x64_sys_mount+0x1c/0xc0 [ 890.828458][ T27] do_syscall_64+0x3b/0xb0 [ 890.841909][ T27] ? clear_bhb_loop+0x15/0x70 [ 890.860831][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 890.872525][ T27] RIP: 0033:0x7fd4e83e9169 [ 890.882659][ T27] RSP: 002b:00007fd4e6210038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 890.904753][ T27] RAX: ffffffffffffffda RBX: 00007fd4e8602160 RCX: 00007fd4e83e9169 [ 890.923228][ T27] RDX: 0000400000000240 RSI: 0000400000000040 RDI: 0000400000000140 [ 890.940491][ T27] RBP: 00007fd4e846a2a0 R08: 0000000000000000 R09: 0000000000000000 [ 890.956614][ T27] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000000 [ 890.975549][ T27] R13: 0000000000000000 R14: 00007fd4e8602160 R15: 00007ffcbe623038 [ 890.992732][ T27] [ 891.002232][ T27] [ 891.002232][ T27] Showing all locks held in the system: [ 891.033686][ T27] 1 lock held by khungtaskd/27: [ 891.062305][ T27] #0: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 891.080869][ T27] 3 locks held by kworker/u4:3/442: [ 891.095683][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 891.130534][ T27] #1: ffff8880b8f27848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x53d/0x810 [ 891.165167][ T27] #2: ffffc9000341fb70 (&x->wait#3){....}-{2:2}, at: do_wait_for_common+0x2e4/0x480 [ 891.197756][ T27] 1 lock held by udevd/3546: [ 891.217871][ T27] #0: ffff8880b8e3a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 891.240446][ T27] 2 locks held by getty/3927: [ 891.250900][ T27] #0: ffff88807f14b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 891.269624][ T27] #1: ffffc900025c62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 891.286720][ T27] 1 lock held by kworker/u4:6/4233: [ 891.299227][ T27] #0: ffff8880b8f3a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 891.320855][ T27] 1 lock held by syz.2.1644/10219: [ 891.338999][ T27] #0: ffff88801fcbe0e0 (&type->s_umount_key#111/1){+.+.}-{3:3}, at: alloc_super+0x210/0x940 [ 891.357360][ T27] [ 891.362104][ T27] ============================================= [ 891.362104][ T27] [ 891.380814][ T27] NMI backtrace for cpu 0 [ 891.385196][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.179-syzkaller #0 [ 891.393196][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 891.403372][ T27] Call Trace: [ 891.406673][ T27] [ 891.409621][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 891.414349][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 891.419996][ T27] ? panic+0x860/0x860 [ 891.424087][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 891.429261][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 891.434240][ T27] ? __wake_up_klogd+0xd5/0x100 [ 891.439143][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 891.445315][ T27] ? _printk+0xd1/0x120 [ 891.449613][ T27] ? panic+0x860/0x860 [ 891.453830][ T27] ? __wake_up_klogd+0xcc/0x100 [ 891.458713][ T27] ? panic+0x860/0x860 [ 891.462810][ T27] ? __rcu_read_unlock+0x92/0x100 [ 891.467916][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 891.474022][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 891.480145][ T27] watchdog+0xe72/0xeb0 [ 891.484349][ T27] kthread+0x3f6/0x4f0 [ 891.488445][ T27] ? hungtask_pm_notify+0x50/0x50 [ 891.493494][ T27] ? kthread_blkcg+0xd0/0xd0 [ 891.498114][ T27] ret_from_fork+0x1f/0x30 [ 891.502567][ T27] [ 891.505678][ C0] vkms_vblank_simulate: vblank timer overrun [ 891.512258][ T27] Sending NMI from CPU 0 to CPUs 1: [ 891.517537][ C1] NMI backtrace for cpu 1 [ 891.517548][ C1] CPU: 1 PID: 442 Comm: kworker/u4:3 Not tainted 5.15.179-syzkaller #0 [ 891.517566][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 891.517576][ C1] Workqueue: bat_events batadv_nc_worker [ 891.517600][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 891.517623][ C1] Code: 1f 84 00 00 00 00 00 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 28 05 8a 0c 48 89 de 5b e9 37 1b 49 00 cc cc cc cc cc cc cc <48> 8b 04 24 65 48 8b 0d f4 d2 81 7e 65 8b 15 f5 d2 81 7e 81 e2 00 [ 891.517643][ C1] RSP: 0018:ffffc9000341fbf0 EFLAGS: 00000202 [ 891.517656][ C1] RAX: 00000000001acf01 RBX: 0000000000000001 RCX: ffff88801f37bb80 [ 891.517669][ C1] RDX: ffff88801f37bb80 RSI: ffffffff8af9fa60 RDI: ffffffff8af9fa20 [ 891.517687][ C1] RBP: 0000000000000001 R08: ffffffff8a1cc3d5 R09: fffffbfff2131e19 [ 891.517699][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000372 [ 891.517710][ C1] R13: dffffc0000000000 R14: ffff88802ab70c80 R15: ffff888147e49c40 [ 891.517723][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 891.517737][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 891.517749][ C1] CR2: 00005640b9fba950 CR3: 00000000641a8000 CR4: 00000000003506e0 [ 891.517764][ C1] Call Trace: [ 891.517769][ C1] [ 891.517775][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 891.517793][ C1] ? read_lock_is_recursive+0x10/0x10 [ 891.517812][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 891.517829][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 891.517855][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 891.517872][ C1] ? nmi_handle+0xf7/0x370 [ 891.517890][ C1] ? audit_tree_destroy_watch+0x20/0x20 [ 891.517909][ C1] ? default_do_nmi+0x62/0x150 [ 891.517928][ C1] ? exc_nmi+0xa8/0x100 [ 891.517946][ C1] ? end_repeat_nmi+0x16/0x31 [ 891.517967][ C1] ? batadv_nc_worker+0x1c5/0x5b0 [ 891.517986][ C1] ? audit_tree_destroy_watch+0x20/0x20 [ 891.518005][ C1] ? audit_tree_destroy_watch+0x20/0x20 [ 891.518025][ C1] ? audit_tree_destroy_watch+0x20/0x20 [ 891.518043][ C1] [ 891.518047][ C1] [ 891.518052][ C1] batadv_nc_worker+0x1d7/0x5b0 [ 891.518074][ C1] process_one_work+0x8a1/0x10c0 [ 891.518102][ C1] ? worker_detach_from_pool+0x260/0x260 [ 891.518122][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 891.518138][ C1] ? kthread_data+0x4e/0xc0 [ 891.518155][ C1] ? wq_worker_running+0x97/0x170 [ 891.518173][ C1] worker_thread+0xaca/0x1280 [ 891.518204][ C1] kthread+0x3f6/0x4f0 [ 891.518219][ C1] ? rcu_lock_release+0x20/0x20 [ 891.518236][ C1] ? kthread_blkcg+0xd0/0xd0 [ 891.518253][ C1] ret_from_fork+0x1f/0x30 [ 891.518278][ C1] [ 891.621940][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 891.624354][ C0] vkms_vblank_simulate: vblank timer overrun [ 891.633199][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.179-syzkaller #0 [ 891.808975][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 891.819051][ T27] Call Trace: [ 891.822351][ T27] [ 891.825301][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 891.830032][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 891.835693][ T27] ? panic+0x860/0x860 [ 891.839915][ T27] panic+0x318/0x860 [ 891.843842][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 891.849593][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 891.855784][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 891.861010][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 891.867111][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 891.873294][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 891.879479][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 891.885669][ T27] watchdog+0xeb0/0xeb0 [ 891.889863][ T27] kthread+0x3f6/0x4f0 [ 891.893964][ T27] ? hungtask_pm_notify+0x50/0x50 [ 891.899016][ T27] ? kthread_blkcg+0xd0/0xd0 [ 891.903640][ T27] ret_from_fork+0x1f/0x30 [ 891.908109][ T27] [ 891.911477][ T27] Kernel Offset: disabled [ 891.915823][ T27] Rebooting in 86400 seconds..