last executing test programs: 12.240603765s ago: executing program 0 (id=1643): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{0x30}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x42}, 0x18) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000440)={[{@space_cache_v2}, {@clear_cache}, {@nodiscard}, {@nobarrier}, {@clear_cache}, {@rescan_uuid_tree}, {@nobarrier}, {@subvol={'subvol', 0x3d, '\xe4/&'}}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0x7}}, {@enospc_debug}]}, 0x3, 0x55a3, &(0x7f0000005640)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x13f5c51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003700)={0x2020}, 0x2020) mount$cgroup(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={[{}, {@none}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x94, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x9}, {0x1, 0x7}, {0x3, 0xa}, {0x0, 0x2}, {0x6, 0x6}, {0x7, 0x2}, {0x5, 0x8}, {0x7, 0x9}, {0x5, 0x6}, {0x4, 0x1}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x3}, {0x3, 0x2}, {0x2, 0x7}, {0x5, 0x2}, {0x5, 0x5}, {0x6}, {0x1, 0x1}, {0x2}, {0x7, 0x9}, {0x5, 0x2}, {0x5, 0x8}, {0x4, 0x4}, {0x0, 0x6}, {0x1, 0x6}, {0x4, 0x6}, {0x4, 0x8}, {0x6, 0x4}, {0x3, 0x9}, {0x0, 0x4}, {0x7, 0x7}, {0x5, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x7, 0x9}, {0x6, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x6, 0x9}, {0x5, 0x4}, {0x2, 0xa}, {0x6}, {0x2, 0x6}, {0x4, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x2}, {0x1, 0x3}, {0x4, 0x6}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0x5}, {0x7, 0x2}, {0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x1, 0x64e, 0x3, 0x0, 0x8, 0x7ff, 0x1]}}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x94}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x27, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00'/17, @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001c000200000005000b0080000000"], 0x3c}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r5) 11.624325728s ago: executing program 1 (id=1644): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000180)=[{}, {r0}], 0x2, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xfffffffffffffd8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2f, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="6b79ae5ef4bffd6583fbfd97e800e23e739bdf810603cf7b136c75f2463faaa305f5b6dfcd00dcb3", 0x28, 0x0, &(0x7f0000000380)={0x11, 0xd, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000480)={'syztnl2\x00', r5, 0x8, 0x700, 0xf66, 0x5, {{0x21, 0x4, 0x0, 0x7, 0x84, 0x67, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @cipso={0x86, 0x15, 0x0, [{0x0, 0xf, "49f3928940009887743bd269d0"}]}, @noop, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x4c, 0x3, [{0x7, 0xb, "04a3bf447b80fe26d8"}, {0x7, 0xf, "b8505815e2c9100f31238401ef"}, {0x5, 0x9, "e306801a9d1f58"}, {0x5, 0xc, "a2412c3990e4959e9dab"}, {0x0, 0xd, "b3fce613b8babf21520ee5"}, {0x7, 0xa, "db6ae5bf2d5a0ec1"}]}, @end, @generic={0x89, 0x3, '`'}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_lru_insertion\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x83, &(0x7f0000000200), 0x8) 11.100812083s ago: executing program 1 (id=1646): socket(0x1e, 0x80005, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x69, 0x4, 0x7d, 0x8, 0xabf, 0x3370, 0x30e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0xbc, 0x65}}]}}]}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3}, 0x48) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd811000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 8.754419763s ago: executing program 2 (id=1653): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x1d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '<'}]}], {0x14}}, 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xb, 0x5b, "f3fbad2e105c6a"}]}, 0x28}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x40, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}]}, 0x40}}, 0x0) write$cgroup_devices(r2, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e031800dd5c980128854d4a828e00000000002f"], 0x22) 8.566430109s ago: executing program 0 (id=1654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xc00, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1, 0x172, &(0x7f0000000240)="$eJzs20tOwlAUxvGvgErw/TaOTEyME6kCCWEmC3ADzghUQixqxAnExLgUd+JO3AAM3IA1lEYDcVBvAzX2/0ugZ/L13g4OPXeAACTWuf9tyVLWrzzPezqQdHkhKRPz5gBMlRdcPzwAyZOm9YGEGlTT/vv/1ZLe3h/r/eCTDTk/DKqpUWFJfZP8s+Vf9zPj+ZykxTDzy8sof6Tx/NIv189N5JdD50fPf3w4nl+RtCppTdK6pA1Jm5K2JG3/sH5jYv29kOsDAAAAABDG8PSZj5qPcIPh6fmq5Tqnhvm5IH9mmJ8P8oWI+aJhfiHI5+u3bsPwHoCpVMz9n47Y/5mI/Q8kWafbu665rnNPQUFB8VXE/csEYNrsh/ad3en2TlrtWtNpOjelcqVSLhULFdsfy+0owzmAP+37pR/3TgAAAAAAAAAAAAAAgKkdSbtxbwIAAADATMzi70RxPyMAAAAAAAAAAAAAAP/dZwAAAP//X2pLFQ==") r3 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) pwritev(r3, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_tables_names\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="10", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b00ff"], 0x110}}, 0x0) pread64(r4, &(0x7f0000000600)=""/9, 0x9, 0x9) 7.868682338s ago: executing program 2 (id=1657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$sock_int(r3, 0x28, 0x6, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000000)=0x209, 0x4) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x0, 0x4800003e, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) 7.669940765s ago: executing program 1 (id=1658): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "9343b30143784bd83a618bfbc699a7868e544f"}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x440, &(0x7f00000001c0)={[{@dioread_lock}, {@noauto_da_alloc}, {@noquota}, {@dioread_nolock}], [{@context={'context', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '(@'}}, {@fsmagic={'fsmagic', 0x3d, 0xed}}]}, 0x5, 0x764, &(0x7f0000000f80)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x10) r5 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04030b00c800ce5dd37d19965fc01aff701b650101000000000000000000be0fd2b9228fdd729d2e844f66b0148e71729157fb7c50a2989575f160fc528c56d6af7f45ea4658fd464746dfe5480edb141a43f8e0cbf9424089c91e71b0eae1f058de8b8efa4cec9ca0f1ce1fd2189440ecf7c7a1ca79d0a7f449ef23b38a000fb4a9cc03497d480803f3f289745f13ee2b113361d0a2835c41d6eee62820f69262d9bbddd19df5a6c802637dd7c23a5964c47ef58a6a6f876a77369466a89b24d2d0c2707ece67afbe4362309e24aa6273df0c2810"], 0xe) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0x2) r6 = dup(r4) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x0, 0x0, [{0xc0010140}]}) 7.669376935s ago: executing program 0 (id=1659): r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x81842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f00000002c0)=ANY=[], 0xffdd) 6.947193207s ago: executing program 2 (id=1661): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@random="8d44bf073aae", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000200)={0x1, 0x101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xc3, &(0x7f0000000540)=""/195}]}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x550c, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)) 5.50919321s ago: executing program 1 (id=1664): syz_open_procfs(0x0, &(0x7f0000000100)='limits\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x70) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000001bc0)={0xa, 0x4, 0x0, @dev, 0x5}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="800037e9220ca1ce", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) r6 = dup(r1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) 5.421118837s ago: executing program 0 (id=1665): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x8, 0x300000}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) eventfd(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 5.121431093s ago: executing program 1 (id=1666): socketpair(0x9, 0x1, 0x40, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000480)={0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2010005, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES64, @ANYRES32], 0x4, 0x9eba, &(0x7f000000b4c0)="$eJxEunPwJ1e0vf2dZDKxbZtPbNu2bfuJ82kbsW3btm3bNuat+eXe++5/urrr9Kq991q7qnudc8sAbx3gbQO8fYB3DPDOAd41wLsHeM8A7x3gfQO8f4APDPDBAT40wIcH+MgAHx3gYwN8fIBPDPDJAT41wKcH+MwAnx3gcwN8foAvDPDFAb40wJcH+MoAXx3gawN8fYBvDPDNAb41wLcH+M4A3x3gewN8f4AfDPDDAX40wI8H+MkAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wL8H+M8A/x3gyAEOBTgswNECHD3A4QGOEeCIAMcMcKwAxw5wnADHDXC8AMcPcIIAJwxwogAnDnCSACcNcLIAJw9wigCnDHCqAKcOcJoApw1wugCnD3CGAGcMcKYAZw5wlgBnDXC2AGcPcI4A5wxwrgDnDnCeAOcNcL4A5w9wgQAXDHChAAlw4QAXCXDRABcLcPEAlwhwyQCXCnDpAJcJcNkAlwtw+QBXCHDFAFcKcOUAVwlw1QBXC3D1ANcIcM0A1wpw7QDXCXDdANcLcP0ANwhwwwA3CnDjADcJcNMANwtw8wC3CHDLALcKcOsAtwlw2wC3C3D7AHcIcMcAdwpw5wB3CXDXAHcLcPcA9whwzwD3CnDvAPcJcN8A9wtw/wAPCPDAAA8K8OBghIcEeGiAhwV4eIBHBHhkgEcFeHSABnhMgMcGeFzA6KO4PyHAEwM8KcCTAxwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgFDI3CPCXAUwM8LcDTAzwjwDMDPCvAswM8J8BzAzwvwPMDvCDACwO8KMCLA7wkwEsDvCzAywO8IsArA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbg7GGhobw9gDvGKXjof/i7gDvCfDeAO8L8P4AHwjwwQAfCvDhUXMQDg09OorbL/5754kAnwyG/z+8pwN8ZlTv/gufD/CFAF8M8KUAXw7wlQBfDfC1AF8P8I0A3wzwrQDfDvCdAN8N8L0A3w/wgwA/DPCjAD8O8JMAPw3wswA/D/CLAL8M8KsAvw7wmwC/DfC7AL8P8IcAfwzwpwB/DvCXAH8N8LcAfw/wjwD/DPCvAP8O8J8A/w1wZIBDIQ4LcbRwVN04PMQxQhwR4pghjhXi2CGOE+K4IY4XMvv4IU4Q4oQhThTixCFOEuKkIU4W4uQhThHilCFOFeLUIU4T4rQhThfi9P+DO2OIM4U4c4izhDhriLOFOHuIc4Q4Z4hzhTh3iPOEOG+I84U4f4gLhLhgiAuFSIgLh7hIiIuGuFiIi4e4RIhLhrhUiEuHuEyIy4a4XIjLh7hCiCuGuFKIK4dj/g+luFqIq4e4RohrhrhWiGuHuE6I64a4Xojrh7hBiBuGuFGIG4e4SYibhrhZiJuHuEWIW4a4VYhbh7hNiNuGuF2I24e4Q4g7hrjTaENDo3jYJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnZLRR6/YLcf8QDwjxwBAPCvHgEA8J8dAQDwvx8BCPCPHIEI8K8egQDfGYEI8N8bgQjw/xhBBPDPGkEE8OcRBiEGIYYhT+/zpPQ8xCzEMsQixDrEKsQ2xCbEPsQuxDPCXEU0M8LcTTQzwjxDNDPCvEs0M8J8RzQzwvxPNDvCDEC0O8KMSLQ7wkxEtDvCzEy0O8IsQrQ7wqxKtDvCbEa0O8LsTrQ7whxBtDXHWzeYeGDY34Px5vC/H2EO8I8c4Q7wrx7hDvCfHeEO8L8f4QHwjxwRAfCvHhUXofwkdDfCzEx0N8IsQnQ3wqxKdDfCbEZ0N8LsTnQ3whxBdDfCnEl0N8JcRXQ3wtxNdDfCPEN0N8K8S3Q3wnxHdDfC/E90P8IMQPQ/woxI9D/CTET0P8LMTPQ/wixC9D/CrEr0P8JsRvQ/wuxO9D/CHEH0P8KcSfQ/wlxF9D/C3E30P8I8Q/Q/wrxL9D/CfEf0McGeJQhMMiHC3C0SMcHuEYEY6IcMwIx4pw7AjHiXDcCMeLcPwIJ4hwwggninDiCCeJcNIIJ4tw8giniHDKCKeKcOoIp4lw2gini3D6CGeIcMYIZ4pw5ghniXDWCGeLcPYI54hwzgjninDuCOeJcN4I54tw/ggXiHDBCBeKkAgXjnCRCBeNcLEIF49wiQiXjHCpCJeOcJkIl41wuQiXj3CFCFeMcKUIV45wlQhXjXC1CFePcI0I14xwrQjXjnCdCNeNcL0I149wgwg3jHCjCDeOcJMIN41wswg3j3CLCLeMcKsIt45wmwi3jXC7CLePcIcId4xwpwh3jnCXCHeNcLcId49wjwj3jHCvCPeOcJ8I941wvwj3j/CACA+M8KAID47wkAgPjfCwCA+P8IgIj4zwqAiPjtAIj4nw2AiPi/D4CE+I8MQIT4rw5AgHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+G5EZ4X4fkRXhDhhRFeFOHFEV4S4aURXhbh5RFeEeGVEV4V4dURXhPhtRFeF+H1Ed4Q4Y0R3hThzRHeEo3prRHeFuHtEd4R4Z0R3hXh3RHeE+G9Ed4X4f0RPhDhgxE+FOHDET4S4aMRPhbh4xE+EeGTET4V4dMRPhPhsxE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZcRfhXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxGOjHAoxmExjhbj6DEOj3GMGEfEOGaMY8U4dozjxDhujOPFOH6ME8Q4YYwTxThxjJPEOGmMk8U4eYxTxDhljFPFOHWM08Q4bYzTxTh9jDPEOGOMM8U4c4yzxDhrjLPFOHuMc8Q4Z4xzxTh3jPPEOG+M88WfTDh/jAvEuGCMC8VIjAvHuEiMi8a4WIyLx7hEjEvGuNSIIZeOcZkYl41xuRiXj3GFGFeMcaUYV45xlRhXjXG1GFePcY0Y14xxrRjXjnGdGNeNcb0Y149xgxg3jHGjGDeOcZMYN41xsxg3j3GLGLeMcasYt45xm5gZt41xuxi3j3GHGHeMcacYd45xlxh3jXG3GHePcY8Y94xxrxj3jnGfGPeNcb8Y94/xgBgPjPGgGA+O8ZAYD43xsBgPj/GIGI+M8agYj47RGI+J8dgYj4vx+BhPiPHEGE+K8eQYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MZ4S46kxnhbj6TGeEeOZMZ4V49kxnhPjuTGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFePVMV4T47UxXhfj9THeEOONMd4U480x3hLjrTHeFuPtMd4R450x3hXj3THeE+O9Md4X4/0xPhDjgzE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjm6P6PYRvx/hOjO/G+F6M78f4QYwfxvhRjB/H+EmMn8b4WYyfx/hFjF/G+FWMX8f4TYzfxvhdjN/H+EOMP8b4U4w/x/hLjL/G+FuMv8f4R4x/xvhXjH/H+E+M/8Y4MsahBIclOFqCoyc4PMExEhyR4JgJjpXg2AmOk+C4CY6X4PgJTpDghAlOlODECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6UIAkunOAiCS6a4GIJLp7gEgkumeBSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkenaAJHpPgsQkel+DxCZ6Q4IkJnpTgyQkOEgwSDBOMEowTTBJME8wSzBMsEiwTrBKsE2wSbBPsEuwTPCXBUxM8LcHTEzwjwTMTPCvBsxM8J8FzEzwvwfMTvCDBCxO8KMGLE7xklA6HhoYuS/DyBK9I8MoEr0rw6gSvSfDaBK9L8PoEb0jwxgRvSvDmBG9J8NYEb0vw9gTvSPDOBO9K8O4E70nw3gTvS/D+BB9I8MEEH0rw4QQfSfDRBB9L8PEEn0jwyQSfSvDpBJ9J8NkEn0vw+QRfSPDFBF9K8OUEX0nw1QRfS/D1BN9I8M0E30rw7QTfSfDdBN9L8P0EP0jwwwQ/SvDjBD9J8NMEP0vw8wS/SPDLBL9K8OsEv0nw2wS/S/D7BH9I8McEf0rw5wR/SfDXBH9L8PcE/0jwzwT/SvDvBP9J8N8ERyY4lOKwFEdLcfQUh6c4RoojUhwzxbFSHDvFcVIcN8XxUhw/xQlSnDDFiVKcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNcXZUpw9xTlSnDPFuVKcO8V5Upw3xflSnD/FBVJcMMWFUiTFhVNcJMVFU1wsxcVTXCLFJVNcKsWlU1wmxWVTXC7F5VNcIcUVU1wpxZVTXCXFVVNcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVNMUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OkVTPCbFY1M8LsXjUzwhxRNTPCnFk1McpBikGKYYpRj/T75pilmKeYpFimWKVYp1ik2KbYpdin2Kp6R4aoqnpXh6imekeGaKZ6V4dornpHhuiueleH6KF6R4YYoXpXhxipekeGmKl6V4eYpXpHhlileleHWK16R4bYrXpXh9ijekeGOKN6V4c4q3pHhrireleHuKd6R4Z4p3pXh3ivekeG+K96V4fzpyjP/1Cx5K8eEUH0nx0RQfS/HxFJ9I8ckUn0rx6RSfSfHZFEeOHDny+RRfSPHFFF9K8eUUX0nx1RRfS/H1FN9I8c0U30rx7RTfSfHdFN9L8f0UP0jxwxQ/SvHjFD9J8dMUP0vx8xS/SPHLFL9K8esUv0nx2xS/S/H7FH9I8ccUf0rx5xR/SfHXFH9L8fcU/0jxzxT/SvHvFP9J8d9R+ac4lOGwDEfLcPQMh2c4RoYjMhwzw7EyHDvDcTIcN8PxMhw/wwkynDDDiTKcOMNJMpw0w8kynDzDKTKcMsOpMpw6w2kynDbD6TKcPsMZMpwxw5kynDnDWUbHWTOcLcPZM5wjwznzoaFR+c2d4TwZzpvhfBnOn+ECGS6Y4UIZkuHCGS6S4aIZLpbh4hkukeGSGS6V4dIZLpPhshkul+HyGa6Q4YoZrpThyhmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluNur5cUNDW2S4ZYZbZbh1httkuG2G22W4fYY7ZLhjhjtluHOGu2S4a4a7Zbh7hntkuGeGe2W4d4b7ZLhvhvtluH+GB2R4YIYHZXhwhodkeGiGh2V4eIZHZHhkhkdleHSGZnhMhsdmeFyGx2d4QoYnZnhShidnOMgwyDDMMMowzjDJMM0wyzDPsMiwzLDKsM6wybDNsMuwz/CUDE/N8LQMT8/wjAzPzPCsDM/O8JwMz83wvAzPz/CCDC/M8KKMof/1Gy/N8LIML8/wigyvzPCqjJFXZ3hNhtdmeF2G12cMH6WRGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw7szvCfDezO8L8P7M3wgwwczfCjDhzN8JMNHM3wsw8czfCLDJzN8KsOnM3wmw2czfC7D5zN8IcMXM3wpw5czfCXDVzN8LcPXM3wjwzczfCvDtzN8J8N3M3wvw/cz/CDDDzP8KMOPM/wkwz9H/hefZ/hFhl9m+FWGX2f4TfbfXsR3GX6f4Q8Z/pjhTxn+nOEvGf6a4W8Z/p7hH6PwMvwrw78z/CfDfzMcmeFQjsNyHC3H0XMcnuMYOY7Iccwcx8px7BzHyXHcHMfLcfwcJ8hxwhwnynHiHCfJcdIcJ8tx8hynyHHKHKfKceocp8lx2hyny3H6HGfIccYcZ8px5hxnyXHWHGfLcfYc58hHzT/OlePcOc6T47w5zpfj/DkukOOCOS6UIzkunOMiOS6a42I5Lp7jEjkumeNSOS6d4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOW6c4yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40E5HpzjITkemuNhOR6e4xE5HpnjUTkenaM5HpPjsTkel+PxOZ6Q44k5npTjyTkOcgxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuxzPCXHU3M8LcfTczwjxzNzPCvHs3M8J8dzczwvx/NzvCDHC3O8KMeLc7wkx0tzvCzHy3O8Iscrc7wqx6tzvCbHa3O8Lsfrc7whxxtzvCnHm3O8Jcdbc7wtx9tzvCPHO3O8K8e7c7wnx3tzvC/H+3N8IMcHc3wox4dzfCTHR3N8LMfHc3wixydzfCrHp3N8Jsdnc3wux+dzfCHHF3N8KceXc3wlx1dzfC3H13N8Ix/r//Yk3s7xnRzfzfG9HN/P8YMcP/xjpB/l+HGOn+T4aY6f5fh5jl/k+GWOX+X4dY7f5Phtjt/l+H2OP+T4Y44/5Tg00dDQLzn+muNvOf6e4x85/pnjXzn+neM/Of6b48hR6wscVuBoBY5e4PACxyhwRIFjFjhWgWMXOE6B4xY4XoHjFzhBgRMWOFGBExc4SYGTFjhZgZMXOEWBUxY4VYFTFzhNgdMWOF2B0xc4Q4EzFjhTgTMXOEuBsxY4W4GzFzhHgXMWOFeBcxc4T4HzFjhfgfMXuECBCxa4UIEUuHCBixS4aIGLFbh4gUsUuGSBSxW4dIHLFAyNqne5ApcvcIUCVyxwpQJXLnCVAlctcLUCVy9wjQLXLHCtAtcucJ0C1y1wvQLXL3CDAjcscKMCNy5wkwI3LXCzAjcvcIsCtyxwqwK3LnCbArctcLsCty9whwJ3LHCnAncucJcCdy1wtwJ3L3CPAvcscK8C9y5wnwL3LXC/Avcv8IACDyzwoAIPLvCQAg8t8LACDy/wiOK/b9SRI0cef3SBFnhMgccWeFyBxxd4QoEnFnhSgScXOCgwKDAsMCowLjApMC0wKzAvsCiwLLAqsC6wKbAtsCuwL/CUAk8t8LQCTy/wjALPLPCsAs8u8JwCzy3wvALPL/CCAi8s8KICLy7wkgIvLfCyAi8v8IoCryzwqgKvLvCaAq8t8LoCry/whgJvLPCmAm8u8JYCby3wtgJvL/COAu8s8K4C7y7wngLvLfC+Au8v8IECHyzwoQIfLvCRAh8t8LECHy/wiQKfLPCpAp8u8JkCny3wuQKfL/CFAl8s8KUCXy7wlQJfLfC1Al8v8I0C3yzwrQLfLvCdAt8t8L0C3y/wgwI/LPCjAj8u8JMCPy3wswI/L/CLAr8s8KsCvy7wmwK/LfC7Ar8v8IcCfyzwpwJ/LvCXAn8t8LcCfy/wjwL/LPCvAv8u8J8C/x2ljQKHShxW4mgljl7i8BLHKHFEiWOWOFaJY5c4TonjljheieOXOEGJE5Y4UYkTlzhJiZOWOFmJk5c4RYlTljhViVOXOE2J05Y4XYnTlzhDiTOWOFOJM5c4S4mzljhbibOXOEeJc5Y4V4lzlzhPifOWOF+J85e4QIkLlrhQiZS4cImLlLhoiYuVuHiJS5S4ZIlLlbh0icuUuGyJy5W4fIkrlLhiiSuVuHKJq5S4aomrlbh6iWuUuGaJa5W4donrlLhuieuVuH6JG5S4YYkblbhxiZuUuGmJm5W4eYlblLhliVuVuHWJ25S4bYnblbh9iTuUw9yxxJ1K3LnEXUrctcTdSty9xD1K3LPEvUrcu8R9Sty3xP1K3L/EA0o8sMSDSjy4xENKPLTEw0o8vMQjSjyyxKNKPLpESzymxGNLPK7E40s8ocQTSzypxJNLHJQYlBiWGJUYl5iUmJaYlZiXWJRYlliVWJfYlNiW2JXYl3hKiaeWeFqJp5d4RolnlnhWiWeXeE6J55Z4Xonnl3hBiReWeFGJF5d4SYmXlnhZiZeXeEWJV5Z4VYlXl3hNideWeF2J15d4Q4k3lnhTiTeXeEuJt5Z4W4m3l3hHiXeWeFeJd5d4T4n3lnhfifeX+ECJD5b4UIkPl/hIiY+W+FiJj5f4RIlPlvhUiU+X+EyJz5b4XInPl/hCiS+W+FKJL5f4Somvlvhaia+X+EaJb5b4Volvl/hOie+W+F6J75f4QYkflvhRiR+X+EmJn5b4WYmfl/hFiV+W+FWJX5f4TYnflvhdid+X+EOJP5b4U4k/l/hLib+W+FuJv5f4R4l/lvhXiX+X+E+J/5Y4ssShCodVOFqFo1c4vMIxKhxR4ZgVjlXh2BWOU+G4FY5X4fgVTlDhhBVOVOHEFU5S4aQVTlbh5BVOUeGUFU5V4dQVTlPhtBVOV+H0Fc5Q4YzVWEMzVThzhbNUOGuFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1VIhQtXuEiFi1a4WIWLV7hEhUtWuNTQ8KFRdS5T4bIVLlfh8hWuUOGKFa5U4coVrlLhqhWuVuHqFa5R4ZoVrlXh2hWuU+G6Fa5X4foVblDhhhVuVOHGFW5S4aYVblbh5hVuUeGWFW5V4dYVblPhthVuV+H2Fe5Q4Y4V7lThzhXuUuGuFe5W4e4V7lHhnhXuVeHeFe5T4b4V7lfh/hUeUOGBFR5U4cEVHlLhoRUeVuHhFR5R4ZEVHlXh0RVa4TEVHlvhcRUeX+EJFZ5Y4UkVnlzhoMKgwrDCqMK4wqTCtMKswrzCosKywqrCepROhrCtsKuwr/CUCk+t8LQKT6/wjArPrPCsCs+u8JwKz63wvArPr/CCCi+s8KIKL67wkgovrfCyCi+v8IoKr6zwqgqvrvCaCq+t8LoKr6/whgpvrPCmCm+u8JYKb63wtgpvr/COCu+s8K4K767wngrvrfC+Cu+v8IEKH6zwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn61w5JhDQ89X+EKFL1b4UoUvV/hKha9W+FqFr1f4RoVvVvhWhW9X+E6F71b4XoXvV/hBhR9W+FGFH1f4SYWfVvhZhZ9X+EWFX1b4VYVfV/hNhd9W+F2F31f4Q4U/VvhThT9X+EuFv1b4W4W/V/hHhX9W+FeFf1f4T4X/jsq/wqEah9U4Wo2j1zi8xjFqHFHjmDWOVePYNY5T47g1jlfj+DVOUOOENU5U48Q1TlLjpDVOVuPkNU5R45Q1TlXj1DVOU+O0NU5X4/Q1zlDjjDXOVOPMNc5S46w1zlbj7DXOUeOcNc5V49w1zlPjvDXOV+P8NS5Q44I1LlQjo2oYGhpapMZFa1ysxsVrXGLYCS5Z41I1Ll3jMjUuW+NyNS5f4wo1rljjSjWuXOMqNa5a42o1rl7jGjWuWeNaNa5d4zo1rlvjejWuX+MGNW5Y40Y1blzjJjVuWuNmNW5e4xY1blnjVjVuXeM2NW5b43Y1bl/jDjXuWONONe5c4y417lrjbjXuPmzYCaP+F/esca8a965xnxr3rXG/Gvev8YAaD6zxoBoPrvGQGg+t8bAaD6/xiBqPrPGoGo+u0RqPqfHYGo+r8fgaT6jxxBpPqvHkGgc1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY19jWeUuOpNZ5W4+k1nlHjmTWeVePZNZ5T47k1nlfj+TVeUOOFNV5U48U1XlLjpTVeVuPlNV5R45U1XlXj1TVeU+O1NV5X4/U13lDjjTXeVOPNNd5S4601Mw0NDXl7jXfUeGeNd9V4d4331HhvjffVeH+ND9T4YI0P1fhwjY/U+GiNj9X4eI1P1PhkjU/V+HSNz9T4bI3P1fh8jS/U+GKNL9X4co2v1Phqja/V+HqNb9T4Zo1v1fh2je/U+G6N79X4fo0f1PhhjR/V+HGNn9T4aY2f1fh5jV/U+OX/zObXNX5T47c1flfj9zX+UOOPNf5U4881/lLjrzX+VuPvNf5R4581/lXj3zX+U+O/NY6scajBYQ2O1uDoDQ5vcIwGRzQ4ZoNjNTh2g+M0OG6D4zU4foMTNDhhgxM1OHGDkzQ4aYOTNTh5g1M0OGWDUzUr/5/3MW2D0zU4fYMzNDhjgzM1OHODszQ4a4OzNTh7g3M0OGeDczU4d4PzNDhvg/M1OH+DCzS4YIMLNUiDCze4SIOLNrhYg4s3uESDSza4VINLN7hMg8s2uFyDy4/CfABXbHClBlducJUGV21wtQZXb3CNBtdscK0G125wnQbXbXC9BtdvcIMGN2xwowY3bnCTBjdtcLMGN29wiwa3bHCrBrducJsGt21wuwa3b3CHBndscKcGVxzCXRrctcHdGty9wT0a3LPBvRrcu8F9Gty3wf0a3L/BAxo8sMGDGjy4wUMaPLTBwxo8vMEjGjyywaMaPLpBGzymwWMbPK7B4xs8ocETGzypwZMbHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg2OPKv/8yGUxo8tcHTGjy9wTMa/F9j/+wGz2nw3AbPa/D8Bi9o8MIGL2rw4uF4SYOXNnhZg5c3jPyfQ8he1eDVDV7T4LUNXtfg9Q3e0PC/h7e9ucFbGry1wdsavL3BOxq8s8G7Gry7wXsavLfB+xq8v8EHGnywwYcafLjBRxp8tMHHGny8wScafLLBpxp8usFnGny2wecafL7BFxp8scGXGny5wVcafLXB1xp8vcE3GnyzwbcafLvBdxp8t8H3Gny/wQ8a/LDBjxr8uMFPGvy0wc8a/LzBLxr8ssGvGvy6wW8a/LbB7xr8vsEfGvyxwZ8a/LnBXxr8tcHfGvy9wT8a/LPBvxr8u8F/Gvx3+JAjR/HS4rAWR2tx9BaHtzhGiyNaHLPFsUZdR074X3dbHK/F8VucYOTI/3c/UYsTtzhJi5O2OFmLk7c4RYtTtjhVi1O3OE2L07Y4XYvTtzhDizO2OFOLM7c4S4uztow2isPZW5yjxTlbnKvFuVucp8V5W5yvxflbXKDFBVtcqEVaXLjFRVpctMXFWly8xSVaXLLFpVpcusVlWly2xeVaXL7FFVpcscWVWly5xVVaXLXF1VpcvcU1WlyzxbVaXLvFdVpct8X1Wly/xQ1a3LDFjVrcuMVNWty0xc1a3LzFLVrcssWtWty6xW1a3LbF7VrcvsUdWtyxxZ1a3LnFXVrctcXdWty9xT1a3LPFvVrcu8V9Wty3xf1a3L/FA1o8sMWDWjy4xUNaPLTFw1o8vMUjWjyyxaNaPLpFWzymxWNbPK7F41s8ocUTWzypxZNbHLQYtBi2GLUYt5i0mLaYtZi3WLRYtli1WLfYtNi22LXYt3hKi6e2eFqLp7d4RotntnhWi2e3eE6L57Z4Xovnt3hBixe2eFGLF7d4SYuXtnhZi5e3eEWLV7Z4VYtXt3hNi9e2eF2L17d4Q4s3tnhTize3eEuLt7Z4W4u3t3hHi3e2eFeLd7d4T4v3tnhfi/e3+ECLD7b4UIsPt/hIi4+2+FiLj7f4RItPtvhUi0+3+EyLz7b4XIvPt/hCiy+2+FKLL7f4Souvtvhai6+3+EaLb7b4Votvt/hOi++2+F6L77f4QYsftvhRix+3+EmLn7b4WYuft/hFi1+2+FWLX7f4TYvftvhdi9+3+EOLP7b4U4s/t/hLi7+2+FuLv7f4R4t/tvhXi3+3+E+L/7Y4ssWhDod1OFqHo3c4vMMxOhzR4ZgdjtXh2B2O0+G4HY7X4fgdTtDhhB1O1OHEHU7S4aQdTtbh5B1O0eGUHU7V4dQdTtPhtB1O1+H0Hc7Q4YwdztThzB3O0uGsHc7W4ewdztHhnB3O1eHcHc7T4bwdztfh/B0u0OGCHS7UIR0u3OEiHS7a4WIdLt7hEh0u2eFSHS7d4TIdLtvhch0u3+EKHa7Y4UodrtzhKh2u2uFqHa7e4RodrtnhWh2u3eE6Ha7b4Xodrt/hBh1u2OFGHW7c4SYdbtrhZh1u3uEWHW7Z4VYdbt3hNh1uO2zI7TrcvsMdOtyxw5063LnDXTrctcPdOty9wz063LPDvTrcu8N9Oty3w/063L/DAzo8sMODOjy4w0M6PLTDwzo8vMMjOjyyw6M6PLpDOzymw2M7PK7D4zs8ocMTOzypw5M7HHQYdBh2GHUYd5h0mHaYdZh3WHRYdlh1WHfYdNh22HXYd3hKh6d2eFqHp3d4RodndnhWh2d3eE6H53Z4Xofnd3hBhxd2eFGHF3d4SYeXdnhZh5d3eEWHV3Z4VYdXd3hNh9d2eF2H13d4Q4c3dnhThzd3eEuHt3Z4W4e3d3hHh3d2eFeHd3d4T4f3dnhfh/d3+ECHD3b4UIcPd/hIh492+FiHj3f4RIdPdvhUh093+EyHz3b4XIfPd/hChy92+FKHL3f4Soevdvhah693+EaHb3b4Vodvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHv3f4R4d/dvhXh393+E+H/3Y4ssOhHof1OFqPo/c4vMcxehzR45g9jtXj2D2O0+O4PY7X4/g9TtDjhD1O1OPEPU7S46Q9Ttbj5D1O0eOUPU7V49Q9TtPjtD1O1+P0Pc7Q44w9ztTjzD3O0uOsPc7W4+w9ztHjnD3O1ePcPc7T47w9ztfj/D0u0OOCPS7UIz0u3OMiPS7a42I9Lt7jEj0u2eNSPS7d4zI9Ltvjcj0u3+MKPa7Y40o9rtzjKj2u2uNqPa7e4xo9rtnjWj2u3eM6Pa7b43o9rt/jBj1u2ONGPW7c4yY9btrjZj1u3uMWPW7Z41Y9bt3jNj1uOxNu1+P2Pe7Q44497tTjzj3u0uOuPe7W8+fIHvfocc8e9+px7x736XHfHvfrcf8eD+jxwBFDQ6M4PLjHQ3o8tMfDejy8xyN6PLLHo3o8ukd7PKbHY3s8rsfjezyhxxN7PKnHk3sc9Bj0GPYY9Rj3mPSY9pj1mPdY9Fj2WPVY99j02PbY9dj3eEqPp/Z4Wo+n93hGj2f2eFaPZ/d4To/n9nhej+f3eEGPF/Z4UY8X93hJj5f2eFmPl/d4RY9X9nhVj1f3eE2P1/Z4XY/X93hDjzf2eFOPN/d4S4+39nhbj7f3eEePd/Z4V49393hPj/f2eF+P9/f4QI8P9vhQjw/3+EiPj/b4WI+P9/hEj0/2+FSPT/f4TI/P9vhcj8/3+EKPLw79x8PLPb7S46s9vtbj6z2+0eObPb7V49s9vtPjuz2+1+P7PX7Q44c9ftTjxz1+0uOnPX7W4+c9ftHjlz1+1ePXPX7T47c9ftfj9/8fUeccPdjRbO1RJjOxbTt5Ymdi27ZtPLHNOTZ+sW3btm0bM9/Ke997v//POqur915dtXf16hqNP4zGH0fjT6Px59H4y2j8dTT+Nhp/H41/jMY/R+Nfo/Hv0fjPaBwzGv/l2KAABwc4JMChAQ4LcJwAhwc4boAjAhwZ4HgBjh/gBAFOGOBEAU4c4CQBThrgZAFOHuAUAU4Z4FQBTh3gNAFOG+B0AU4f4AwBzhjgTAHOHOAsASP+XcNsAc4e4BwBzhngXAHOHeA8Ac4b4HwBzh/gAgEuGOBCAS4c4CIBEuCiAS4W4OIBLhHgkgEuFeDSAS4T4LIBLhfg8gGuEOCKAa4U4KgAVw5wlQBXDXC1AFcPcI0A1wxwrQDXDnCdANcNcL0A1w9wgwA3DHCjADcOcJMANw1wswA3D3CLALcMcKsAtw5wmwC3DXC7ALcPcIcAdwxwpwB3DnCXAHcNcLcAdw9wjwD3DHCvAPcOcJ8A9w1wvwD3D/CAAA8M8KAADw7wkAAPDfCwAA8P8IgAjwxOHHRUgEcHeEyABnhsgMcFeHyAJwR4YoAnBXhygKcEeGqApwV4eoBnBHhmgGcFeHaA5wR47gn/VdoBXhDghQFeFODFAV4S4OgAgwDDAKMA4wCTANMAswDzAIsAywCrAOsAmwDbALsA+wAHArw0wMsCvDzAKwK8MsCrArw6YJz/1frXBXh9gDcEeGOANwV4c4C3BHhrgLcFeHuAdwR4Z4B3BXh3gPcEeG+A9wV4f4APBPhggA8F+HCAjwT4aICPBfh4gE8E+GSATwX4dIDPBPhsgM8F+HyALwT4YoAvBfhygK8E+GqArwX4eoBvBPhmgG8F+HaA7wT4boDvBfh+gB8E+GGAHwX4cYCfBPhpgJ8F+HmAXwT4ZYBfBfh1gN8E+G2A3wX4fYA/BPhjgD8F+HOAvwT4a4C/Bfh7gH8E+GeAfwX4d4D/BDgmwLEBDgpxcIhDQhwa4rAQxwlxeIjjhjgixJEhjhfi+CFOEOKEIU4U4sQhThLipCFOFuLkIU4R4pQhThXi1CFOE+K0IU4X4vQhzhDijCHOFOLMIc4S4qwhzhbi7CHOEeKcIc4V4twhzhPivCHOF+L8IS4Q4oIhLhTiwiEuEiIhLhriYiEuHuISIS4Z4lIhLh3iMiEuG+JyIS4fjvw/P3KlEEeFuHKIq4S4aoirhbh6iGuEuGaIa4W4dojrhLhuiOuFuH6IG4S4YYgbhbhxiJuEuGmIm4W4eYhbhLhliFuFuHWI24S4bYjbhbh9iDuEuGOIO4W4c4i7hLhriLuFuHuIe4S4Z4h7hbh3iPuEuG+I+4W4f4gHhHhgiAeFeHCIh4R4aIiHhXh4iEeEeGSIR4V4dIjHhGiIx4Z4XIjHh3hCiCeGeFKIJ4d4SoinhnhaiKeHeEaIZ4Z4Vohnh3hOiOeGeF6I54d4QYgXhnhRiBeHeEmIo0MMQgxDjEKMQ0xCTEPMQsxDLEIsQ6xCrENsQmxD7ELsQxwI8dIQLwvx8hCvCPHKEK8K8eoQrwnx2hCvC/H6EG8I8cYQbwrx5hBvCfHWEG8LcdDzDr0jxDtDvCvEu0O8J8R7Q7wvxPtDfCDEB0N8KMSHQ3wkxEdDfCzEx0N8IsQnQ3wqxKdDfCbEZ0N8LsTnQ3whxBdDfCnEl0N8JcRXQ3wtxNdDfCPEN0N8K8S3Q3wnxHdDfC/8z1nmByF+GOJHIX4c4ichfhriZyF+Hg72ixC/DPGrEL8O8ZsQvw3xuxC/D/GHEH8M8acQfw7xlxB/DfG3EH8P8Y8Q/wzxrxD/DvGfEMeEOPbf/YlwcIRDIhwa4bAIx4lweITjRjgiwpERjhfh+BFOEOGEEU4U4cQRThLhpBFOFuHkEU4R4ZQRThXh1BFOE+G0EU4X4fQRzhDhjBHOFOHMEc4S4awRzhbh7BHOEeGcEc4V4dwRzhPhvBHOF+H8ES4Q4YIRLhThwhEuEiERLhrhYhEuHuESES4Z4VIRLh3hMhEuG+FyES4f4QoRrhjhShGOinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I14lw3QjXi3D9CDeIcMMIN4pw4wg3iXDTCDeLcPMIt4hwywi3inDrCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICI+K8OgIj4nQCI+N8LgIj4/whAhPjPCkCE+O8JQIT43wtAhPj/CMCM+M8KwIz47wnAj/ivC8CM+P8IIIL4zwoggvjvCSCEdHGEQYRhhFGEeYRJhGmEWYR1hEWEZYRVhH2ETYRthF2Ec4EOGlEV4W4eURXhHhlRFeFeHVEV4T4bURXhfh9RHeEOGNEd4U4c0R3hLhrRHeFuHtEd4R4Z0R3hXh3RHeE+G9Ed4X4f0RPhDhgxE+FOHDET4S4aMRPhYN/0+eeCLCJyN8KsKnI3wmwmcjfC7C56Mh//nmxQhfivDlCF+J8NUIX4vw9QjfiPDNCN+K8O0I34nw3Qjfi/D9CD+I8MMIP4rw4wg/ifDTCD+L8PMIv4jwywi/ivDrCL+J8NsIv4vw+wh/iPDHCH+K8OcIf4nw1wh/i/D3CP+I8M//Yvd3hP9EOCbCsREOinFwjENiHBrjsBjHiXF4jOPGOCLGkTGOF+P4MU4Q44QxThTjxDFOEuOk8QeDJotx8hiniHHKGKeKceoYp4lx2hini3H6GGeIccYYZ4px5hhniXHWGGeLcfYY54hxzhjninHuGOeJcd4Y54tx/hgXiHHBGBeKceEYF4mRGBeNcbEYF49xiRiXjHGpGJeOcZkYl41xuRiXj3GFGFeMcaUYR8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO8S4Y4w7xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxXh0jMfEaIzHxnhcjMfHeEKMJ8Z4Uownx3hKjKfGeFqMp8d4RoxnxnhWjGfHeE6M58Z4Xoznx3hBjBfGeFGMF8d4SYyjYwxiDGOMYoxjTGJMY8xizGMsYixjrGKsY2xibGPsYuxjHIjx0hgvi/HyGK+I8coYr4rx6hivifHaGK+L8foYb4jxxhhvivHmGG+J8dYYb4vx9hjviPHOGO+K8e4Y74nx3hjvi/H+GB+I8cEYH4rx4RgfifHRGB+L8fEYn4jxyRifivHpGJ+J8dkYn4vx+RhfiPHFGF+K8eUYX4nx1Rhfi/H1GN+I8c0Y34rx7RjfifHdGN+L8f0YP4jxwxg/ivHjGD+J8dMYP4vx8xi/iPHLGL+K8esYv4nx2xi/i/H7GH+I8ccYf4rx5xh/ifHXGH+L8fcY/4jxzxj/ivHvGP+JcUyMY2MclODgBIckODTBYQmOk+DwBMdNcESCIxMcL8Hxk0n/r3aeKMGJE5wkwUkTnCzByROcIsEpE5wqwakTnCbBaROcLsHpE5whwRkTnCnBmROcJcFZE5wtwdkTnCPBOROcK8G5E5wnwXkTnC/B+RNcIMEFE1wowYUTXCRBElw0wcUSXDzBJRJcMsGlElw6wWUSXDbB5RJcPsEVElwxwZUSHJXgygmukuCqCa6W4OoJrpHgmgmuleDaCa6T4LoJrpfg+glukOCGCW6U4MYJbpLgpgluluDmCW6R4JYJbpXg1gluk+C2CW6X4PYJ7pDgjgnulODOCe6S4K4J7pbg7gnukeCeCe6V4N4J7pPgvgnul+D+CR6Q4IEJHpTgwQkekuChCR6W4OEJHpHgkQkeleDRCR6ToAkem+BxCR6f4AkJnpjgSQmenOApCZ6a4GkJnp7gGQmemeBZCZ6d4DkJnpvgeQmen+AFycj/cOGiBC9O8JIERycYJBgmGCUYJ5gkmCaYJZgnWCRYJlglWCfYJNgm2CXYJziQ4KUJXpbg5QlekeCVCV6V4NUJXpPgtQlel+D1Cd6Q4I0J3pTgzQnekuCtCd6W4O0J3pHgnQneleDdCd6T4L0J3pfg/Qk+kOCDCT6U4MMJPpLgowk+luDjCT6R4JMJPpXg0wk+k+CzCT6X4PMJvpDgiwm+lODLCb6S4KsJvpbg6wm+keCbCb6V4NsJvpPguwm+l+D7CX6Q4IcJfpTgxwl+kuCnCX6W4OcJfpHglwl+leDXCX6T4LcJfpfg9wn+kOCPCf6U4M8J/pLgrwn+luDvCf6R4J8J/pXg3wn+k+CYBMcmOCjFwSkOSXFoisNSHCfF4SmOm+KIFEemOF6K46c4QYoTpjhRihOnOEmK64wYNGiyFCdPcYoUp0xxqhSnTnGaFKdNcboUp09xhhRnTHGmFGdOcZYUZ01xthRnHz7IOVKcM8W5Upw7xXlSnDfF+VKcfxAukOKCKS6U4sIpLpIiKS6a4mIpLp7iEikumeJSKS6d4jIpLpviciknLZ/iCimumOJKKY5KceUUV0lx1RRXS3H1FNdIcc0U10px7X9jTHHdFNdLcf0UN0hxwxQ3SnHjFDdJcdMUN0tx8xS3SHHLFLdKcesUt0lx2xS3S3H7FHdIcccUd0px5xR3SXHXFHdLcfcU90hxzxT3SnHvFPdJcd8U90tx/xQPSPHAP/CgFA9O8ZAUD03xsBQPT/GIFI9M8agUj07xmBRN8dgUj0vx+BRPSPHEFE9K8eQUT0nx1BRPS/H0FM9I8cwUz0rx7BTPSfHcFM9L8fwUL0jxwhQvSvHiFC9JcXSKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYoDKV6aXu9lKV6e4hUpXpniVSleneI1KV6b4nUpXp/iDSnemOJNKd6c4i0p3pribSnenuIdKd6Z4l0p3p3iPSnem+J9Kd6f4gMpPpjiQyk+nOIjKT6a4mMpPp7iEyk+meJTKT6d4jMpPpvicyk+n+ILKb6Y4kspvpziKym+muJrKb6e4hspvpniWym+neI7Kb6b4nspvp/iByl+mOJHKX6c4icpfpriZyl+nuIXKX6Z4lcpfp3iNyl+m+J3KX6f4g8p/pjiTyn+nOIvKf6a4m8p/p7iHyn+meJfKf6d4j8pjklxbIqDMhyc4ZAMh2Y4LMNxMhye4bgZjshwZIbjZTh+hhNkOGGGE2U4cYaTZDhphpNlOHmGU2Q4ZYZTZTh1htNkOG2G02U4fYYzZDhjhjNlOHOGs2Q4a4azZTh7hnNkOGeGc2U4d4bzZDhvhvNlOH+GC2S4YIYLZbhwhotkSIaLZrhYhotnuESGS2a4VIZLZ7hMhstmuFyGy2e4QoYrZrhShqMyXDnDVTJcNcPVMlw9wzUyXDPDtTJcO8N1Mlw3w/UyXD/DDTLcMMONMtw4w00y3DTDzTLcPMMtMtwyw60y3DrDbTLcNsPtMtw+wx0y3DHDnTLcOcNdMtw1w92yE9w9wz0y3DPDvTLcO8N9Mtw3w/0y3D/DAzI8MMODMjw4w0MyPDTDwzI8PMMjMjwyw6MyPDrDYzI0w2MzPC7D4zM8IcMTMzwpw5MzPCXDUzM8LcPTMzwjwzMzPCvDszM8J8NzMzwvw/MzvCDDCzO8KMOLM7wkw9EZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ9hkOZHhphpdleHmGV2R4ZYZXZXh1htdkeG2G12V4fYY3ZHhjhjdleHOGt2R4a4a3ZXh7hndkeGeGd2V4d4b3ZHhvhvdleH+GD2T4YIYPZfhwho9k+GiGj2X4eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYafZfh5hl9k+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZPhnhn9l+HeG/2Q4JsOxGQ7KcXCOQ3IcmuOwHMfJcXiO4+ajHJHjyBzHy3H8HCfIccIcJ8px4hwnyXHSHCfLcfIcp8hxyhynynHqHKfJcdocp8tx+hxnyHHGHGfKceYcZ8lx1hxny3H2HOfIcc4c58px7hznyXHeHOfLcf4cF8hxwRwXynHhHBfJkRwXzXGxHBfPcYkcl8xxqRyXznGZHJfNcbkcl89xhRxXzHGlHEfluHKOq+S4ao6r5bh6jmvkuGaOa+W4do7r5LhujuvluH6OG+S4YY4b5bhxjpvkuGmOm+W4ec7gYf/tUW2V49Y5bpPjtjlul+P2Oe6Q44457pTjzjnukuOuOe6W4+457pHjnjnulePeOe6T47457pfj/jkekOOBOR6U48E5HpLjoTkeluPhOR6R45E5HpXj0Tkek6M5HpvjcTken+MJOZ6Y40k5npzjKTmemuNpOZ6e4xk5npnjWTmOHTtm7Dk5npvjeTmen+MFOV6Y40U5XpzjJTmOzjHIMcwxyjHOMckxzTHLMc+xyLHMscqxzrHJsc2xy7HPcSDHS3O8LMfLc7wixytzvCrHq3O8Jsdrc7wux+tzvCHHG3O8Kcebc7wlx1tzvC3H23O8I8c7c7wrx7tzvCfHe3O8L8f7c3wgxwdzfCjHh3N8JMdHc3wsx8dzfCLHJ3N8Ksenc3wmx2dzfC7H53N8IccXc3wpx5dzfCXHV3N8LcfXc3wjxzdzfCvHt3N8J8d3c3wvx/dz/CDHD3P8KMePc/wkx09z/CzHz3P8Iscvc/wqx69z/CbHb3P8Lsfvc/whxx9z/CnHn3P8Jcdfc/wtx99z/CPHP3P8K8e/c/wnxzH/YprjoAIHFzikwKEFDitwnAKHFzhugSMKHFngeAWOX+AEBU5Y4EQFTlzgJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBVLgogUuVuDiBS5R4JIFLlXg0gUuU+CyBS5X4PIFrlDgigWuVOCoAlcucJUCVy1wtQJXL3CNAtcscK0C1y5wnQLXLXC9AtcvcIMCNyxwowI3LnCTAjctcLMCNy9wiwK3LHCrArcucJsCty1wuwK3L3CHAncscKeCwf/bz961wN0K3L3APQrcs8C9Cty7wH0K3Ldg1L947V/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQVa4LEFHlfg8QWeUOCJBZ5U4MkFnlLgqQWeVuDpBZ5R4JkFnlXg2QWeU+C5BZ5X4PkFXlDghQVeVODFBV5S4OgCgwLDAqMC4wKTAtMCswLzAosCywKrAusCmwLbArsC+wIHCry0wMsKvLzAKwq8ssCrCry6wGsKvLbA6wq8vsAbCryxwJsKhtxc4C0F3lrgbQXeXuAdBd5Z4F0F3l3gPQXeW+B9Bd5f4AMFPljgQwU+XOAjBT5a4GMFPl7gEwU+WeBTBT5d4DMFPlvgcwU+X+ALBb5Y4EsFvlzgKwW+WuBrBb5e4BsFvlngWwW+XeA7Bb5b4HsFvl/gBwV+WOBHBX5c4CcFflrgZwV+XuAXBX5Z4FcFfl3gNwV+W+B3BX5f4A8F/ljgTwX+XOAvBf5a4G8F/l7gHwX+WeBfBf5d4D8FjilwbIGDShxc4pASh5Y4rMRxShxe4rgljihxZInjlTh+iROUOGGJE5U4cYmTlDhpiZOVOHmJU5Q4ZYlTlTh1idOUOG2J043E6UucocQZS5ypxJlLnKXEWUucrcTZS5yjxDlLnKvEuUucp8R5S5yvxPlLXKDEBUtcqMSFS1ykREpctMTFSly8xCVKXLLEpUpcusRlSly2xOVKXL7EFUpcscSVShxV4solrlLiqiWuVuLqJa5R4polrlXi2iWuU+K6Ja5X4volblDihiVuVOLGJW5S4qYlblbi5iVuUeKWJW5V4tYlblPitiVuV+LYobhDiTuWuFOJO5e4S4m7lrhbibv/i8GgQYP2LHGvEvcucZ8S9y1xvxL3L/GAEg8s8aASDy7xkBIPLfGwEg8v8YgSjyzxqBKPLvGYEi3x2BKPK/H4Ek8o8cQSTyrx5BJPKfHUEk8r8fQSzyjxzBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLylxdIlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl9iQMlXlriZSVeXuIVJV5Z4lUlXl3iNSVeW+J1JV5f4g0l3ljiTeX/n1dwa4m3lXh7iXeUeGeJd5V4d4n3lHhvifeVeH+JD5T4YIkPlfhwiY+U+GiJj5X4eIlPlPhkiU+V+HSJz5T4bInPnYjPl/hCiS+W+FKJL5f4Somvlvhaia+X+EaJb5b4Volvl/hOie+W+F6J75f4QYkflvhRiR+X+EmJn5b4WYmfl/hFiV+W+FWJX5f4TYnflvhdOXbs//rxP5b4U4k/l/hLib+W+FuJv5f4R4l/lvhXiX+X+E+JY/7lYYmDKhxc4ZAKh1Y4rMJxKhxe4bgVjqhwZIXjVTh+hRNUOGGFE1U4cYWTVDhphZNVOHmFU1Q4ZYVTVTh1hdNUOG2F01U4ffU/c1hmrHCmCmeucJYKZ61wtgpnr3COCuescK4K565wngrnrXC+CuevcIEKF6xwoQoXrnCRCqlw0QoXq/7n3dglKlyywqUqXLrCZSpctsLlKly+whUqXLHClSocVeHKFa5S4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHhlhVuVeHWFW5T4bYVblfh9hXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlOhFR5b4XEVHl/hCRWeWOFJFZ5c4SkVnlrhaRWeXuEZFZ5Z4VkVnl3hORWeW+F5FZ5f4QUVXljhRRVeXOElFY6uMKgwrDCqMK4wqTCtMKswr7CosKywqrCusKmwrbCrsK9woMJLK7yswssrvKLCKyu8qsKrK7ymwmsrvK7C6yu8ocIbK7ypwpsrvKXCWyu8rcLbK7yjwjsrvKvCuyu8p8J7K7yvwvsrfKDCByt8qMKHK3ykwkcrfKzCxyt8osInK3yqwqcrfKbCZyt8rsLnK3yhwhcrfKnClyt8pcJXK3ytwtcrfKPCNyt8q8K3K3ynwncrfK/C9yv8oMIPK/yowo8r/KTCTyv8rMLPK/yiwi8r/KrCryv8psJvK/yuwu8r/KHCHyv8qcKfK/ylwl8r/K3C3yv8o8I/K/yrwr8r/KfCMRWOrXBQjYNrHFLj0BqH1ThOjcNrHLfGETWOrHG8GsevcYIaJ6xxohonrnGSGietcbIaJ69xihqnrHGqGqeucZoap61xuhqnr3GGGmescaYaZ65xlhpnrXG2GmevcY4a56xxrhrnrnGeGuetcb4a569xgRoXrHGhGheucZEaqXHRGhercfEal6hxyRqXqnHpGpepcdkal6tx+RpXqHHFGleqcVSNK9e4So2r1rhajavXuEaNa9a4Vo1r17hOjevWuF6N69e4QY0b1rhRjRvXuEmNm9a4WY2b17hFjVvWuFWNW9e4TY3b1rhdjdvXuEONO9a4U40717hLjbvWuFuNu9e4R4171rhXjXvXuE+N+9a4X43713hAjQfWeFCNB9d4SI2H1nhYjYfXeESNR9Z4VI1H13hMjdZ4bI3H1Xh8jSfUeGKNJ9V4co2n1HhqjafVeHqNZ9R4Zo1n1Xh2jefUeG6N59V4fo0X1HhhjRfVeHGNl9Q4usagxrAe9Z+8FNeY1JjWmNWY11jUWNZY1VjX2NTY1tjV2Nc4UOOlNV5W4+U1XlHjlTVeVePVNV5T47U1Xlfj9TXeUOONNd5U48013lLjrTXeVuPtNd5R45013lXj3TXeU+O9Nd5X4/01PlDjgzU+VOPDNT5S46M1Plbj4zU+UeOTNT5V49M1PlPjszU+V+PzNb5Q44s1vlTjyzW+UuOrNb5W4+s1vlHjmzW+VePbNb5T47s1vlfj+zV+UOOHNX5U48c1flLjpzV+VuPnNX5R45c1flXj1zV+U+O3NX5X4/c1/lDjjzX+VOPPNf5S4681/lbj7zX+UeOfNf5V4981/lPjmBrH1jiowcENDmlwaIPDGhynweENjtvgiAZHNjheg+M3OEGDEzY4UYMTNzhJg5M2OFmDkzc4RYNTNjhVg1M3OE2D0zY4XYPTNzhDgzM2OFODMzc4S4OzNjhbg7M3OEeDczY4V4NzNzhPg/M2OF+D8ze4QIMLNrhQgws3uEiDNLhog4s1uHiDSzS4ZINLNeMdmk32P/XRsg0u1+DyDa7Q4IoNrtTgqAZXbnCVBldtcLUGV29wjQbXbHCthhFrN7hOg+s2uF6D6ze4QYMbNrhRgxs3uEmDmza4WYObN7hFg1s2uFWDWze4TYODhuF2DW7f4A4N7tjgTg3u3OAuDe7a4G4N7t7gHg3u2eBeDe7d4D4N7tvgfg3u3+ABDR7Y4EENHtzgIQ0e2uBhDR7e4BENHtngUQ0e3eAxDdrgsQ0e1+DxDZ7Q4IkNntTgyQ2e0uCpDZ7W4OkNntHgmQ2e1eDZDZ7T4LkNntfg+Q1e0OCFDV7U4MUNXtLg6AaDBsMGowbjBpMG07kSswbzBosGywarBusGmwbbBrsG+wYHGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsavLPBuxq8e8igQf9y/t4G72vw/gYfaPDBBh9q8OEGH2nw0QYfa/DxBp9o8MkGn2rw6QafafDZBp9r8PkGX2jwxQZfavDlBl9p8NUGX2vw9QbfaPDNBt9q8O0G32nw3Qbfa/D9Bj9o8MMGP2rw4wY/afDTBj9r8PMGv2jwywa/avDrBr9p8NsGv2vw+wZ/aPDHBn9q8OcGf2nw1wZ/a/D3Bv9o8M8G/2rw7wb/aXBMg2P/5WSLg1sc0uLQFoe1OE6Lw1sct8URLY5scbwWx29xghYnbHGiFiducZIWJ21xshYnb3GKFqdscapxBzl1i9O0OG2L07U4fYsztDhjizO1OHOLs7Q4a4uztTh7i3O0OGeLc7U4d4vztDhvi/O1OH+LC7S4YIsLtbhwi4u0SIuLtrhYi4u3uESLS7a4VItLt7hMi8u2uFyLy7e4QosrtrhSi6NaXLnFVVpctcXVWly9xTVaXLPFtVpcu8V1Wly3xfVaXL/FDVrcsMWNWty4xU1a3LTFzVrcvMUtWtyyxa1a3LrFbVrctsXtWty+xR1a3LHFnVrcucVdWty1xd1a3L3FPVrcs8W9Wty7xX1a3LfF/Vrcv8UDWjywxYNaPLjFQ1o8tMXDWjy8xSNaPLLFo1o8usVjWrTFY1s8rsXjWzyhxRNbPKnFk1s8pcVTWzytxdNbPKPFM1s8q8WzWzynxXNbPK/F81u8oMULW7yoxYtbvKTF0S0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32LQ60eGmLl7V4eYtXtHhli1e1eHWL17R4bYvXtXh9ize0eGOLN7V4c4u3tHhri7e1eHuLd7R4Z4t3tXh3i/e0eG+L97V4f4sPtPhgiw+1+HCLj7T4aIuPtfh4i0+0+GSLT7X4dIvPtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0/CuL/ajFj1v8pMVPW/ysxc9b/KId5pctftXi1y1+0+K3LX7X4vct/tDijy3+1OLPLf7S4q8t/tbi7y3+0eKfLf7V4t8t/tPimBbHtjiow8EdDulwaIfDOhynw+EdjtvhiA5Hdjheh+N3OEGHE3Y4UYcTdzhJh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHM3c4S4ezdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHdLhoh4t1uHiHS3T/31NfusNlOly2Y9C/sS7f4QodrtjhSh2O6nDlDlfpcNUOV+tw9Q7X6HDNDtfqcO0O1+lw3Q7X63D9DjfocMMON+pw4w436XDTDjfrcPMOt+hwyw636nDrDrfpcNsOt+tw+w536HDHDnfqcOcOd+lw1w5363D3DvfocM8O9+pw7w736XDfDvfrcP8OD+jwwA4P6vDgDg/p8NAOD+vw8A6P6PDIDo/q8OgOj+nQDo/t8LgOj+/whA5P7PCkDk/u8JQOT+3wtA5P7/CMDs/s8KwOz+7wnA7P7fC8Ds/v8IIOL+zwog4v7vCSDkd3GHQYdhh1GHeYdJh2mHWYd1h0WHZYdVh32HTYdth12Hc40OGlHV7W4eUdXtHhlR1e1eHVHV7T4bUdXtfh9R3e0OGNHd7U4c0d3tLhrR3e1uHtHd7R4Z3d4P+7u3pPh/d2eF+H93f4QIcPdvhQhw93+EiHj3b4WIePd/hEh092+FSHT3f4TIfPdvhch893+EKHL3b4Uocvd/hKh692+FqHr3f4RodvdvhWh293+E6H73b4Xofvd/hBhx92+FGHH3f4SYefdvhZh593+EWHX3b4VYdfd/hNh992+F2H33f4Q4c/dvhThz93+EuHv3b4W4e/d/hHh392+FeHf3f4T4djOhzb4aAeB/c4pMehPQ7rcZweh/c4bo8jehzZ43g9jt/jBD1O2ONEPU7c4yQ9TtrjZD1O3uMUPU7Z41Q9Tt3jND1O2+N0PU7f4ww9ztjjTD3O/N//z9rjbD3O3uMcPc7Z41w9zt3jPD3O2+N8Pc7f4wI9LtjjQj0u3OMiPdLjoj0u1uPiPS7R45I9LtXj0j0u0+OyPS7X4/I9rtDjij2u1OOoHlfucZUeV+1xtR5X73GNHtfsca0e1+5xnR7X7XG9HtfvcYMeN+xxox437nGTHjftcbMeN+9xix637HGrHrfucZset+1xux6373GHHnfscaced+5xlx537XG3HnfvcY8e9+xxrx737nGfHvftcb8e9+/xgB4P7PGgHg/u8ZAeD+3xsB4P7/GIHo/s8agej+7xmB7t8dgej+vx+B5P6PHEHk/q8eQeT+nx1B5P6/H0Hs/o8cwez+rx7B7P6fHcHs/r8fweL+jxwh4v6vHiHi/pcXSPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12PfY8DPV76X3wu7/GKHq/s8aoer+7xmh6v7fG6Hq/v8YYeb+zxph5v7vGWHm/t8bYeb+/xjh7v7PGuHu/u8Z4e7+3xvh7v7/GBHh/s8aEeH+7xkR4f7fGxHh/v8Yken+zxqR6f7vGZHp/t8bken+/xhR5f7PGlHl/u8ZUeX+3xtR5f7/GNHt/s8a0e3+7xnR7f7fG9Ht/v8YMeP+zxox4/7vGTHj/t8bMeP+/xix6/7PGrHr/u8Zsev+3xux6/7/GHHn/s8acef+7xlx5/7fG3Hn/v8Y8e/+zxrx7/7vGfHsf0OLbHQQM4eACHDODQARw2gOMM4PABHHcARwzgyAEcbwDHH8AJBnDCAZxoACcewEkGcNIBnGwAJx/AKQZwygGcagCnHsBpBnDa/0fUOQZ/ngPf+jeLmbVtW8/atm3b9rOYWdu2Pja+a9u2bdtza+//Iu+Trj51TlXSyUkHOF2A0wc4Q4AzBjhTgDMHOEuAswb/75/60XMEOGeAcwU4d4DzBDhvgPMFOH+ACwS4YIALBbhwgIsESICLBrhYgIsHuETAGP/ltVSASwe4TIDLBrhcgMsHuEKAKwa4UoArB7hKgKsGuFqAqwe4RoBrBrhWgGsHuE6A6wa4XoDrB7hBgBsGuFGAGwe4SYCbBrhZgJsHuEWAWwa4VYBbB7hNgNsGuF2A2we4Q4A7BrhTgDsHuEuAuwa4W4C7B7hHgHsGuFeAewe4T4D7BrhfgPsHeECABwZ4UIAHB3hIgIcGeFiAhwd4RIBHBnhUgEcHeEyAxwZogMcFeHyAJwR4YoAjAxwV4EkBnhzgKQGeGuBpAZ4e4BkBnhngWQGeHeA5AZ4b4HkBnh/gBQFeGOBFAV4c4CUBXhrgZQFeHuAVAV4Z4FUBXh3gNQFeG+B1AV4f4A0B3hjgTQHeHOAtAQYBhgFGAcYBJgGmAWYB5gEWAZYBVgHWATYBtgF2AfYBDgK8NcDbArw9wDsCvDPAuwK8O8B7Arw3wPsCvD/ABwJ8MMCHAnw4wEcCfDTAxwJ8PMAnAnwywKcCfDrAZwJ8NsDnAnw+wBcCfDHAlwJ8OcBXAnw1wNcCfD3ANwJ8M8C3Anw7wHcCfDfA9wJ8P8APAvwwwI8C/DjATwL8dGjIzwL8PMAvAvwywK8C/DrAbwL8NsDvAvw+wB8C/DHAnwL8OcBfAvw1wN8C/D3APwL8M8C/Avw7wH8C/Pc/zQU4FOKwEMcIccwQxwpx7BCHhzgixHFCHDfE8UIcP8QJQpwwxIlCnDjESUKcNMTJQpw8xClCnDLEqUKcOsRpQpw2xOlCnD7EGUKcMcSZQpw5xFlCnDXE2UKcPcQ5Qvb8b98+V4hzhzhPiPOGOF+I84e4QIgLhrhQiAuHuEiIhLhoiIuFuHiIS4S4ZIhLhbh0iMuEuGyIy4W4fIgrhLhiiCuFuHKIq4S4aoirhbh6iGuEuGaIa4W4dojrhLhuiOuFuH6IG4S4YYgbhbhxiJuEuGmIm4W4eYhbhLhliFuFuHWI24S4bYjbhbh9iDuEuGOIO4W4c4i7hLhriLuFuHuIe4S4Z4h7hbh3iPuEuG+I+4W4f4gHhHhgiAeFeHCIh4R4aIiHhXh4iEeEeGSIR4V4dIjHhHhsiIZ4XIjHh3hCiCeGODLEUSGeFOLJIZ4S4qkhnhbi6SGeEeKZIZ4V4tkhnhPiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNId4U4s0h3hJiEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH+IgxFtDvC3E20O8I8Q7Q7wrxLtDvCfEe0O8L8T7Q3wgxAdDfCjEh0N8JMRHQ3wsxMdDfCLEJ0N8Khzy6RCfCfHZEJ8L8fkQXwjxxRBfCvHlEF8J8dUQXwvx9RDfCPHNEN8K8e0Q3wnx3RDfC/H9ED8I8cMQPwrx4xA/CfHTED8L8fMQvwjxyxC/CvHrEL8J8dsQvwvx+xB/CPHHEH8K8ecQfwnx1xB/C/H3EP8I8c8Q/wrx7xD/CfHfEEeHOBThsAjHiHDMCMeKcOwIh0c4IsJxIhw3wvEiHD/CCSKcMMKJIpw4wkkinDTCySKcPMIpIpwywqkinDrCaSKcNsLpIpw+whkinDHCmSKcOcJZIpw1wtkinD3COSKcM8K5Ipw7wnkinDfC+SKcP8IFIlwwwoUiXDjCRSIkwkUjXCzCxSNcIsIlI1wqwqUjXCbCZSNcLsLlI1whwhUjXCnClSNcJcJVI1wtwtUjXCPCNSNcK8K1I1wnwnUjXC/C9SPcIMINI9wowo0j3CTCTSPcLMLNI9wiwi0j3CrCrSPcJsJtI9wuwu0j3CHCHSPcKcKdI9wlwl0j3C3C3SPcY/Ro94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjdAIj4vw+AhPiPDECEdGOCrCkyI8OcJTIjw1wtMiPD3CMyI8M8KzIjw7wnMiPDfC8yI8P8ILIrwwwosivDjCSyK8NMLLIrw8wisivDLCqyK8OsJrIrw2wusivD7CGyK8McKbIrw5wlsiDCIMI4wijCNMIkwjzCLMIywiLCOsIqwjbCJsI+wi7CMcRHhrhLdFeHuEd0R4Z4R3RXh3hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRfh4hE9E+GSET0X4dITPRPhshM9F+HyEL0T4YoQvRfhyhK9E+GqEr0X4eoRvRPhmhG9F+HaE70T47v/R2PsRfhDhhxF+FOHHEX4S4acRfhbh5xF+EeGXEX4V4dcRfhPhtxF+F+H3Ef4Q4Y8R/hThzxH+EuGvEf4W4e8R/hHhnxH+FeHfEf4T4b8Rjo5wKMZhMY4R45gxjhXj2DEOj3FEjOPEOG6M48U4fowTxDjh0NDQf/MmjnGSGCeNGTVZjJPHOEWMU8Y4VYxTxzhNzLCh/ym9OP2IIWeIccYYZ4px5hhniXHWGGeLcfYY54hxzhjninHuGOeJcd4Y54tx/hgXiHHBGBeKceEYF4mRGBeNcbEYF49xiRiXjHGpGJeOcZkYl41xuRiXj3GFGFeMcaUYV45xlRhXjXG1GFePcY0Y14xxrRjXjnGdGNeNcb0Y149xgxg3jHGjGDeOcZMYN41xsxg3j3GLGLeMcasYt45xmxi3jXG7GLePcYcYd4xxpxh3jnGXGHeNcbcYd49xjxj3jHGvGPeOcZ8Y941xvxj3j/GAGA+M8aAYD47xkBgPjfGwGA+P8YgYj4zxqBiPjvGYGI+N0RiPi/H4+H/6Jfw3RsY4KsaTYjw5xlNiPDXG02I8PcYzYjwzxrNiPDse7jkxnhvjeTGeH+MFMV4Y40UxXhzjJTFeGuNlMV4e4xUxXhnjVTFeHeM1MV4b43UxXh/jDTHeGONNMd4c4y0xBv/xb2hoKIoxjjGJMY0xizGPsYixjLGKsY6xibGNsYuxj3EQ460x3hbj7THeEeOdMd4V490x3hPjvTHeF+P9MT4Q44MxPhTjwzE+EuOjMT4W4+MxPhHjkzE+FePTMT4T47MxPhfj8zG+EOOLMb4U48sxvhLjqzG+FuPrMb4R45sxvhXj2zG+E+O7Mb4X4/sxfhDjhzF+FOPHMX4S46cxfhbj5zF+EeOXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzH+EuOvMf4W4+8x/hHjnzH+FePfMf4T478xjh4LhxIcluAYCY6Z4FgJjp3g8ARHJDhOguMmOF6C4yc4QYITJjhRghMnOEmCkyY4WYKTJzhFglMmOFWCUyc4TYLTJjhdgtMnOEOCMyY4U4IzJzhLgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIIkuGiCiyW4eMJxSyS4ZIJLJbh0gsskuGyCyyW4fIIrJLhigisluHKCqyS4aoKrJbh6gmskuGYybGitBNdOcJ0E101wvQTXT3CDBDdMcKMEN05wkwQ3TXCzBDdPcIsEt0xwqwS3TnCbBLdNcLsEt09whwR3THCnBHdOcJcEd01wtwR3T3CPBPdMcK8E905wnwT3TXC/BPdP8IAED0zwoAQPTvCQBA9N8LAED0/wiASPTPCoBI9O8JgEj03QBI9L8PgET0jwxARHJjgqwZMSPDnBUxI8NcHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbEgwSDBOMEowTTJL/f5+TJ1gkWCZYJVgn2CTYJtgl2Cc4SPDWBG9L8PYE70jwzgTvSvDuBO9J8N4E70vw/gQfSPDBBB9K8OEEH0nw0QQfS/DxBJ9I8MkEn0rw6QSfSfDZBJ9L8PkEX0jwxQRfSvDlBF9J8NUEX0vw9QTfSPDNBN9K8O0E30nw3QTfS/D9BD9I8MMEP0rw4wQ/GX2inyb4WYKfJ/hFgl8m+FWCXyf4TYLfJvhdgt8n+EOCPyb4U4I/J/hLgr8m+FuCvyf4R4J/JvhXgn8n+E+C/yY4OsGhFIelOEaKY6Y4Vopjpzg8xREpjpPiuCmOl+L4KU6Q4oQpTpTixClOkuKkKU6W4uQpTpHilClOleLUKU6T4rQpTpfi9CnOkOKMKc6U4swpzpLirCnOluLsKc6R4pwpzpXi3CnOk+K8Kc6X4vwpLpDigikulOLCKS6SIikumuJiKS6e4hIpLpniUikuneIyKS6b4nIpLp/iCimumOJKKa6c4iopw0amuFqKq6e4RoprprhWimunuE6K66a4Xorrp7hBihumuFGKG6e4SYqbprhZipunuEWKW6a4VYpbp7hNitumuF2K26e4Q4o7prhTijunuEuKu6a4W4q7p7hHinumuFeKe6e4T4r7prhfivuneECKB6Z4UIoHp3hIioemeFiKh6d4RIpHpnhUikeneEyKx6ZoiseleHyKJ6R4Yor/5T0qxZNSPDnFU1I8NcXTUjw9xTNSPDPFs1I8O8VzUjw3xfNSPD/FC1K8MMWLUrw4xUtSvDTFy1K8PMUrUrwyxatSvDrFa1K8NsXrUrw+xRtSvDHFm1K8Od13gltSDFIMU4xSjFNMUkxTzFLMUyxSLFOsUqxTbFJsU+xS7FMcpHhrireleHuKd6R4Z4p3pXh3ivekeG+K96V4f4oPpPhgig+l+HCKj6T4aIqPpfh4ik+k+GSKT6X4dIrPpPhsis+l+HyKL6T4Yoovpfhyiq+k+GqKr6X4eopvpPhmim+l+HaK76T4borvpfh+ih+k+GGKH6X4cYqfpPhpip+lKw99nuIXKX6Z4lcpfp3iNyl+m+J3KX6f4g8p/pjiTyn+nOIvKf6a4m8p/p7iHyn+meJfKf6d4j8p/pvi6BSHMhyW4RgZjpnhWBmOneHwDEdkOE6G42Y4XobjZzhBhhNmOFGGE2c4SYaTZjhZhpNnOEWGU2Y4VYZTZzhNhtNmOF2G02c4Q4YzZjhThjNnOEuGs2Y4W4azZzhHhnNmOFeGc2c4T4bzZjhfhvNnuECGC2aMWijDhTNcJEMyXDTDxTJcPMMlMlwyw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwwY9hGGW6c4SYZbprhZhlunuEWGW6Z4VYZbp3hNhlum+F2GW6f4Q4Z7pjhThnunOEuGe6a4W4Z7p7hHhnumeFeGe6d4T4Z7pvhfhnun+EBGR6Y4UEZHpzhIRkemuFhGR6e4REZHpnhURkeneExGR6boRkel+HxGZ6Q4YkZjsxwVIYnZXhyhqdkeGqGp2V4eoZnZHhmhmdleHaG52R4bobnZXh+hhdkeGGGF2V4cYaXZHhphpdleHmGV2R4ZYZXZXh1htdkeG2G12V4fYY3ZHhjhjdleHOGt2QYZBhmGGUYZ5hkmGaYZZhnWGRYZlhlWGfYZNhm2GXYZzjI8NYMb8vw9gzvyPDODO/K8O4M78nw3gzvy/D+DB/I8MEMH8rw4QwfyfDRDB/L8PEMn8jwyQyfyvDpDJ/J8NkMn8vw+QxfyPDFDF/K8OUMX8nw1Qxfy/D1DN/I8M0M38rw7QzfyfDdDN/L8P0MP8jwwww/yvDjDD/J8NMMP8vw8wy/yPDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8jwzwz/yvDvDP/J8N8MR2c4lOOwHMfIccwcx8px7ByH5zgix3FyHDfH8XIcP8cJcpwwx4lynDjHSXKcNMfJcpw8xylynDLHqXKcOsdpcqabd2jI6XKcPscZcpwxx5lynDnHWXKcNcfZcpw9xzlynDPHuXKcO8d5cpw3x/lynD/HBXJcMMeFclw4x0VyJMdFc1wsx8VzXCLHJXNcKselc1wmx2VzXC7H5XNcIccVc1wpx5VzXCXHVXNcLcfVc1wjxzVzXCvHtXNcJ8d1c1wvx/Vz3CDHDXPcKMeNc9wkx01z3CzHzXPcIsctc9wqx61z3CbHbXPcLsftc9whxx1z3CnHnXPcJcddc9wtx91z3CPHPXPcK8e9c9wnx31z3C/H/XM8IMcDczwox4NzPCTHQ3M8LMfDczwixyNzPCrHo3M8JsdjczTH43I8PscTcjwxx5E5jsrxpBxPzvGUHE/N8bQcT8/xjBzPzPGsHM/O8Zwcz83xvBzPz/GCHC/M8aIcL87xkhwvzfGyHC/P8Yocr8zxqhyvzvGaHK/N8bocr8/xhhxvzPGmHG/O8ZYcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+xwHOd6a42053p7jHTnemeNdOd6d4z053pvjfTnen+MDOT6Y40M5PpzjIzk+muNjOT6e4xM5PpnjUzk+neMzOT6b43M5Pp/jCzm+mONLOb6c4ys5vprjazm+nuMbOb6Z41s5vp2P8p0c383xvRzfz/GDHD/M8aMcP87xkxw/zfGzHD/P8Yscv8zxqxy/zvGbHL/N8bscv8/xhxx/zPGnHH/O8Zccf83xtxx/z/GPHP/M8a8c/87xnxz/zXF0jkMFDitwjALHLHCsAscucHiBIwocp8BxCxyvwPELnKDACQucqMCJC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKRACly0wMVGjx59YoFLFLhkgUsVuHSByxS4bIHLFbh8gSsUuGKBKxW4coGrFLhqgasVuHqBaxS4ZoFrFbh2gesUuG6B6xW4foEbFLhhgRsVuHGBmxS4aYGbFbh5gVsUuGWBWxW4dYHbFLhtgdsVuH2BOxS4Y4E7FbhzgbsUuGuBuxW4e4F7FLhngXsVuHeB+xQ4amhoaL8C9y/wgAIPLPCgAg8u8JACDy3wsAIPL/CIAo8s8KgCjy7wmAKPLdACjyvw+AJPKPA/rEb+t3aBJxV4coGnFHhqgacVeHqBZxR4ZoFnFXh2gecUeG6B5xV4foEXFHhhgRcVeHGBlxR4aYGXFXh5gVcUeGWBVxV4dYHXFHhtgdcVeH2BNxR4YzHi/73Nu2VomEGBYYFRgXGBSYFpgVmBeYFFgWWBVYF1gU2BbYFdgX2BgwJvLfC2Am8v8I4C7yzwrgLvLvCeAu8t8L4C7y/wgQIfLPChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyzwqwK/LvCbAr8t8LsCvy/whwJ/LPCnAn8u8JcCfy3wtwJ/L/CPAv8s8K8C/y7wnwL/LXB0gUMlDitxjBLHLHGsEscucXiJI0ocp8RxSxyvxPFLnKDECUucqMSJS5ykxElLnKzEyUucosQpS5yqxKlLnKbEaUucrsTpS5yh/P8e7ZlLnKXEWUucrcTZS5yjxDlLnKvEuUucp8R5S5yvxPlLXKDEBUtcqMSFS1ykREpctMTFSly8xCVKXLLEpUpcusRlSly2xOVKXL7EFUpcscSVSly5xFVKXLXE1UpcvcQ1SlyzxLVKXLvEdUpct8T1Sly/xA1K3LDEjUrcuMRNSty0xM1K3LzEI878nwS3KnHrErcpcdsStytx+xJ3KHHHEncqcecSdylx1xJ3K3H3Evcocc8S9ypx7xL3KXHfEvcrcf8SDyjxwBIPKvHgEg8p8dASDyvx8P/il3hkiUeVeHSJx5R4bImWeFyJx5d4QoknljiyxFElnlTiySWeUuKpJZ5W4uklnlHimSWeVeLZJZ5T4rklnlfi+SVeUOKFJV5U4sUlXlLipSVeVuLlJV5R4pUlXlXi1SVeU+K1JV5X4vUl3lDijSXeVOLNJd5SYlBiWGJUYlxiUmJaYlZiXmJRYln+35rgSJsS2xK7EvsSR4/GW0u8rcTbS7yjxDtLvKvEu0u8p8R7S7yvxPtLfKDEB0t8qMSHS3ykxEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9L/KrEr0v8psRvS/yuxO9L/KHEH0v8qcSfS/ylxF9L/K3E30v8o8Q/S/yrxL9L/KfEf//DqcShCodVOEaFY1Y4VoVjVzi8whEVjlPhuBWOV+H41XAnqHDCCieqcOIKJ6lw0gonq3DyCqeocMoKp6pw6gqnqXDaCqercPoKZ6hwxgpnqnDmCmepcNYKZ6tw9grn+D/x56pw7grnqXDeCuercP4KF6hwwQoXqnDhChepkAoXrXCxChevcIkKl6xwqQqXrnCZCpetcLkKl69whQpXrHClCleucJUKV61wtQpXr3CNCtescK0K165wnQrXrXC9CtevcIMKN6xwowo3rnCTCjetcLMKN69wiwq3rHCrCreucJsKt61wuwq3r3CHCnescKcKd65wlwp3rXC3CnevcI8K96xwrwr3rnCfCvetcL8K96/wgAoPrPCgCg+u8JAKD63wsAoPr/CICo+s8KgKj67wmAqPrdAKj6vw+ApPqPDECkdWOKrCkyo8ucJTKjy1wtMqPL3CMyo8s8KzKjy7wnMqPLfC8yo8v8ILKrywwosqvLjCSyq8tMLLKob+49YVFV5Z4VUVXl3hNRVeW+F1FV5f4Q0V3ljhTRXeXOEtFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYVDiq8tcLbKry9wjsqvLPCuyq8u8J7Kry3wvsqvL/CByp8sMKHKny4wkcqfLTCxyp8vMInKnyywqcqfLrCZyp8tsLnKny+whcqfLHClyp8ucJXKny1wtcqfL3CNyp8s8K3Kny7wncqfLfC9yp8v8IPKvywwo8q/LjCTyr8tMLPKvy8wi8q/LLCryr8usJvKvy2wu8q/L7CHyr8scKfKvy5wl8q/LXC3yr8vcI/Kvyzwr8q/LvCfyr89z+9D+FQjcNqHKPGMWscq8axaxxe44gax6lx3BrHq3H8GieoccIaJ6px4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepkRoXrXGxGhevcYkal6xxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3em13r3GPGvesca8a965xnxr3rXG/Gvev8YAaD6zxoBoPrvGQGg+t8bAaD6/xiBqPrPGoGo+u8Zgaj63RGo+r8fgaT6jxxBpH1jiqxpNqPLnGU2o8tcbTajy9xjNqPLPGs2o8u8Zzajy3xvNqPL/GC2q8sMaLary4xktqvLTGy2q8vMYraryyxqtqvLrGa2q8tsbrary+xhtqvLHGm2q8ucZbagxqDGuMaoxrTGpMa8xqzGssaixrrGqsa2xqbGvsauxrHNR4a4231Xh7jXfUeGeNd9V4d4331HhvjffVeH+ND9T4YI0P1fhwjY/U+GiNj9X4eI1P1PhkjU/V+HSNz9T47LTDhv7TzvM1vlDjizW+VOPLNb5S46s1vlbj6zW+UeObNb5V49s1vlPjuzW+V+P7NX5Q44c1flTjxzV+UuOnNX5W4+c1flHjlzV+VePXNX5T47c1flfj9zX+UOOPNf5U4881/lLjrzX+VuPvNf5R4581/lXj3zX+U+O/NY6ucajBYQ2O0eCYDY7V4NgNDm9wRIPjNDhug+M1OH6DEzQ4YYMTNThxg5M0OGmDkzU4eYNTNDhlg1M1OHWD0zQ4bYPTNTh9gzM0OGODMzU4c4OzNDhrg7M1OHuDczQ4Z4NzNTh3g/M0OG+D8zU4f4MLNLhggws1uHCDizRIg4s2uFiDize4RINLNrhUg0s3uEyDyza4XIPLN7hCgys2uFKDKze4yn8YDBsaWq3B1Rtco8E1G1yrwbUbXKfBdRtcr8H1G9ygwQ0b3KjBjRvcpMFNG9yswc0b3KLBLRvcqsGtG9ymwW0b3K7B7RvcocEdG9ypwZ0b3KXBXRvcrcHdG9yjwT0b3KvBvRvcp8F9G9yvwf0bPKDBAxs8qMGDGzykwUMbPKzBwxs8osEjGzyqwaMbPKbBYxu0weMaPL7BExo8scGRDY5q8KQGT27wlAZPbfC0Bk9v8IwGz2zwrAbPbvCcBs9t8LwGz2/wggYvbPCiBi9u8JIGL23wsgYvb/CKBq9s8KoGr27wmgavbfC6Bq9v8IYGb2zwpgZvbhgaOTRk0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg3+CgwVsbvK3B2xu8o8E7G7yrwbsbvKfBexu8r8H7G3ygwQcbfKjBhxt8pMFHG3yswccbfKLBJxt8qsGnG3ymwWcbfK7B5xt8ocEXG3ypwZcbfKXBVxt8rcHXG3yjwTcbfKvBtxt8p8F3G3yvwfcb/KDBDxv8qMGPG/ykwU8b/KzBzxv8osEvG/yqwa8b/KbBbxv8rsHvG/yhwR8b/KnBnxv8pcFfG/ytwd8b/KPBPxv8q8G/G/ynwX8bHN3gUIvDWhyjxTFbHKvFsVsc3v5vT/L/PqeP2+J4LY7f4jgtTtjiRC1O3OIkLU7a4mQtTt7iFC1O2eJULU7d4jQtTtvidC1O3+IMLc7Y4kwtztziLC3O2uJsLc7e4hwtztniXC3O/X9b9bU4X4vzt7hAiwu2uFCLC7e4SIu0uGiLi7W4eItLtLhki0u1uHSLy7S4bIvLtbh8iyu0uGKLK7W4courtLhqi6u1uHqLa7S4Zotrtbh2i+u0uG6L67W4fosbtLhhixu1uHGLm7S4aYubtbh5i1u0uGWLW7W4dYvbtLhti9u1uH2LO7S4Y4s7tbhzi7u0uGuLu7W4e4t7tLhniyOGhob2bnGfFvdtcb8W92/xgBYPbPGgFg9u8ZB22NChLR7W4uEtHtHikS0e1eLRLR7T4rEt2uJxLR7f4gktntjiyBZHteMOndTiyS2e0uKpLZ7W4uktntHimS2e1eLZLZ7T4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7SYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt/ioMVbW7ytxdtbvKPFO1u8q8W7W7ynxXtbvK/F+1t8oMUHW3yoxYdbfKTFR1t8rMXHW3yixSdbfKrFp1t8psVnW3yuxedbfKHFF1t8qcWXW3ylxVdbfK3F11t8o8U3W3yrxbdbfKfFd1t8r8X3W/ygxQ9b/KjFj1v8pMVPW/ysxc9b/KLFL1v8qsWvW/ymxW9b/K7F71v8ocUfW/ypxZ9b/KXFX1v8rcXfW/yjxT9b/KvFv1v8p8V/Wxzd4lCHwzoco8MxOxyrw7E7HN7hiA7H6XDcDsfrcPwOJ+hwwg4n6nDiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+p2Gn9oCGfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g7n63D+DhfocMEOF+pw4Q4X6ZAOF+1wsQ4X73CJDpfscKkOl+5wmQ6X7XC5DpfvcIUOV+xwpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3QDo/r8PgOT+jwxA5Hdjiqw5M6PLnDUzo8tcPTOjy9wzM6PLPDszo8u8NzOjy3w/M6PL/DCzq8sMOLOry4w0s6vLTDyzq8vMMrOryyY9h/vLq6w2s6vLbD6zq8vsMbOryxw5s6vLnDWzoMOgw7jDqMO0w6TDvMOsw7LDosO6w6rDtsOmw77DrsOxx0eGuHt3V4e4d3dHhnh3d1eHeH93R4b4f3dXh/hw90+GCHD3X4cIePdPhoh491+HiHT3T4ZIdPdfh0h890+GyHz3X4fIcvdPhihy91+HKHr3T4aoevdfh6h290+GaHb3X4dofvdPhuh+91+H6HH3T4YYcfdfhxh590+GmHn3X4eYdfdPhlh191+HWH33T4bYffdfh9hz90+GOHP3X4c4e/dPhrh791+HuHf3T4Z4d/dfh3h/90+G+Hozsc6nFYj2P0OGaPY/U4do/DexzR4zg9jtvjeD2O3+MEPU7Y40Q9TtzjJD1O2uNkPU7e4xQ9TtnjVD1O3eM0PU7b43Q9Tt/jDD3O2ONMPc7c4yw9ztrjbD3O3uMcPc7Z41w9zt3jPOvjvD3O1+P8PS7Q44I9LtTjwj0u0iM9LtrjYj0u3uMSPS7Z41I9Lt3jMj0u2+NyPS7f4wo9rtjjSj2u3OMqPa7a42o9rt7jGj2u2eNaPa7d4zo9rtvjej2u3+MGPW7Y40Y9btzjJj1u2uNmPW7e4xY9btnjVj1u3eM2PW7b43Y9bt/jDj3u2ONOPe7c4y497trjbj3u3uMePe7Z41497t3jPj3u2+N+Pe7f4wE9HtjjQT0e3OMhPR7a42E9Ht7jET0e2eNRPR7d4zE9HtujPR7X4/E9ntDjiT2O7HFUjyf1eHKPp/R4ao+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Bj0GPYY9Rj3mPSY9pj1mPdY9Fj2WPVYjz009B+H2x67HvseBz3e2uNtPd7e4x093tnjXT3e3f+Pt+DeHu/r8f4eH+jxwR4f6vHhHh/p8dEeH+vx8R6f6PHJHp/q8eken+nx2R6f6/H5Hl/o8cUeX+rx5R5f6fHVHl/r8fUe3+jxzR7f6vHtHt/p8d0e3+vx/R4/6PHDHj/q8eMeP+nx0x4/6/HzHr/o8csev+rx6x6/6fHbHr/r8fsef+jxxx5/6vHnHn/p8dcef+vx9x7/6PHPHv/q8e8e/+nx3x5H9zg0wGEDHGOAYw5wrAGOPcDhAxwxwHEGOO4Axxvg+AOcYIATDnCiAU48wEkGOOkAJxvg5AOcYoBTDnCqAU49wGkGOO0Apxvg9AOcYYAzDnCmAc48wFkGOOsAZxvg7AOcY4BzDnCuAc49wHkGOO8A5xvg/ANcYIALDnChAS48wEUGyAAXHeBiA1x8gEsMcMkBLjXApQe4zACXHeByA/xfNJ1j3BjH3oafoE1t29ZV27aZ2javtklq225qc23Utm3byPvLec+Zb/NpZ2/s7n925p4VA1wpwJUDXCXAVQNcLcDVA1wjwDUDXCvAtQNcJ8B1A1wvwPUD3CDADQPcKMCNA9wkwE0D3CzAzVcZGBiL5ZYBbhXg1gFuE+C2AW4X4PYB7hDg8AB3DHCnAHcOcJcAdw1wtwB3D3CPAPcMcK8A9w5wnwD3DXC/APcP8IAADwzwoAAPDvCQAA8N8LAADw/wiACPDPCoAI8O8JgAjw3wuAAN8PgATwjwxABHBDgywFEBnhTgyQGeEuCpAZ4W4OkBnhHgmQGeFeDZAZ4T4LkBnhf8f9by2HZhgBcFeHGAlwR4aYCXBXh5gFcEeGWAVwV4dYDXBHhtgNcFeH2ANwR4Y4CjA7wpwJsDvCXAWwO8LcDbA7wjwDsDvCvAuwO8J8B7A7wvwPsDxvwV4IMBPhTgwwEGAYZj+f3v+JIA0wCz/+qtCLAMsAqwDrAJsA2wC7AP8JEAHw3wsQAfD/CJAJ8M8KkAnw7wmQCfDfC5AJ8P8IUAXwzwpQBfDvCVAF8N8LUAXw/wjQDfDPCtAN8O8J0A3w3wvQDfD/7zD3OGwQP4UYAfB/hJgJ8G+FmAnwf4RYBfBvhVgF8H+E2A3wb4XYDfB/hDgD8G+FOAPwf4S4C/BvhbgL8H+EeAfwY4Fqe/A/wnwH8DHBPgQIiDQhwc4pAQh4Y4TojjhjgsxPFCHD/ECUKcMMSJQpw4xElCnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBnCgfFmDBk69nozhzhLiLOGOFuIs4c4R4hzhjhXiHOHOE+I84Y4X4jzh7hAiAuGuFCIC4e4SIiLhrhYiIS4eIhLhLhkiEuFuHSIy4S4bIjLhbh8iCuEuGKIK4W4coirhLhqiKuFuHqIa4S4Zohrhbh2iOuEuG6I64W4fogbhLhhiBuFuHGIm4S4aYibhbh5iFuEuGWIW4W4dYjbhLhtiNuFuH2IO4Q4PMQdQ9wpxJ1D3CXEXUPcLcTdQ9wjxD1D3CvEvUPcJ8R9Q9wvxP1DPCDEA0M8KMSDQzwkxENDPCzEw0M8IsQjQzwqxKNDPCbEY0M8LkRDPD7EE0I8McQRIY4McVSIJ4V4coinhHhqiKeFeHqIZ4R4ZohnhXh2iOeEeG6I54V4fogXhHhhiBeFeHGIl4R4aYiXhXh5iFeEeGWIV4V4dYjXhHhtiNeFeH2IN4R4Y4ijQ7wpxJtDvCXEW0O8LcTbQ7wjxDtDvCvEu0O8J8R7Q7wvxPtDfCDEB0N8KMSHQwxCDMMxw8bWl3GISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2Ij4T4aIiPhfh4iE+E+GSIT4X4dIjPhPhsiM+F+HyIL4T4YogvhfhyiK+E+GqIr4X4eohvhPhmiG+NPzAwVv/vhPhuiO+F+H6IH4T4YYgfhfhxiJ+E+GmIn4X4eYhfhPhliF+F+HWI34T4bYjfhfh9iD+E+GOIP4X4c4i/hPhriL+F+HuIf4T4Z4h/hfh3iP+E+G+IY0IciHBQhIMjHBLh0AjHiXDcCIdFOF6E40c4QYQTRjhRhBNHOEmEk0Y4WYSTRzhFhFNGOFWEU0c4TYTTRjhdhNNHOEOEM0Y4U4QzRzhLhF9GOFuEs0c4R4RrTopzRTh3hPNEOG+E80U4f4QLRLhghAtFuHCEi0S4aIQDg/9/d/HiES4R4ZIRLhXh0hEuE+GyES4X4fIRrhDhihGuFOHKEa4S4aoRrhbh6hGuMXYMEa4V4doRrhPhuhGuF+H6EW4Q4YYRbhThxhFuEuGmEW4W4eYRbhHhlhFuFeHWEW4T4bYRbhfh9hHuEOHwCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjfC4CI3w+AhPiPDECEdEODLCURGeFOHJEZ4S4akRnhbh6RGeEeGZEZ4V4dkRnhPhuRGeF+H5EV4Q4YURXjRWLwN4SYSXRnhZhJdHeEWEV0Z4VYRXR3hNhNdGeF2E10d4Q4Q3Rjg6wpsivDnCWyK8NcLbIrw9wjsivDPCuyK8O8J7Irw3wvsivD/CByJ8MMKHInw4wiDCMMIowjjCJMI0wizCPMIiwjLCKsI6wibCNsIuwj7CRyJ8NMLHInw8wicifDLCpyJ8OsJnInw2wucifD7CFyJ8McKXInw5wlcifDXC1yJ8PcI3InwzwrcifDvCdyJ8N8L3Inw/wg8i/DDCj8b6bGBg4JMIP43wswg/jxj8xX+98lWEX0f4TYTfRvhdhN9H+EOEP0b4U4Q/R/hLhL9G+FuEv0f4R4R/RvhXhH9H+E+E/0Y4Zqx/YhwU4+AYh8Q4NMZxYhw3xmExjhfj+DFOEOOEMU4U48QxThLjpDFOFuPkMU4R45QxThXj1DFOE+O0MU4X4/QxzhDjjDHOFOPMMc4S46wxzhbj7DHOEeOcMc4V49wxzhPjvDHOF+P8MS4Q44IxLhTjwjEuEuOiMS4WIzEuHuMSMS4Z41IxLh3jMjEuG+NyMS4f4woxrhjjSjGuHOMqMa4a42oxrh7jGjGuGeNaMa4d4zoxrhvjejGuH+MGMW4Y40YxbhzjJjFuGuNmMW4e4xYxbhnjVjFuHeM2MW4b43Yxbh/jDjEOj3HHGHeKcecYd4lx1xh3i3H3GPeIcc8Y94px7xj3iXHfGPeLcf8YD4jxwBgPivHgGA+J8dAYD4vx8LGFbYxHxnhUjEfHeEyMx8Z4XIzGeHyMJ8R4YowjYhwZ46gYT4rx5BhPifHUGE+L8fQYz4jxzBjPivHsGM+J8dwYz4vx/BgviPHCGC+K8eIYL4nx0hgvi/HyGK+I8coYr4rx6hivifHamOHXxXh9jDfEeGOMo2O8KcabY7wlxltjvC3G22O8I8Y7Y7wrxrtjvCfGe2O8L8b7YwYGBg34YIwPxfhwjEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2Mj8T4aIyPxfh4jE/E+GSMT8X4dIzPxPhsjM/F+HyML8T4YowvxfhyjK/E+GqMr8X4eoxvxPhmjG/F+HaM78T4bozvxfh+jB/E+GGMH8X4cYyfxPhpjJ/F+HmMX8T4ZYxfxfh1jN/E+G2M38X4fYw/xPhjjD/F+HOMv8T4a4y/xfh7jH/E+GeMf8X4d4z/xPhvjGNiHEhwUIKDExySMGxsf5wEx01wWILjJTh+ghMkOGGCEyU4cYKTJDhpgpMlOHmCUyQ4ZYJTJTh1gtMkOG2C0yU4fYIzJDhjgjMlOHOCsyQ4a4KzJTh7gnMkOGeCcyU4d4LzJDhvgvMlOH+CCyS4YIILJbhwgoskuGiCiyVIgosnuESCSya4VIJLJ7hMgssmuFyCyye4QoIrJrhSgisnuEqCqya4WoKrJ7hGgmsmuFaCaye4ToLrJrhegusnuEGCGya4UYIbJ7hJgpsmuFmCmye4RYJbJrhVglsnuE2C2ya4XYLbJ7hDgsMT3DHBnRLcOcFdEtw1wd0S3D3BPRLcM8G9Etw7wX0S3DfB/RLcP8EDEjwwwYMSPDjBQxI8NMHDEjw8wSMSPDLBoxI8OsFjEjw2weMSNMHjEzwhwRMTHJHgyARHJXhSgif/b2V2gqcleHqCZyR4ZoJnJXh2guckeG6C5yV4foIXJHhhghcleHGClyR4aYKXJXh5glckeGWCVyV4dYLXJHhtgtcleH2CNyR4Y4KjE7wpwZsTvCXBWxO8LcHbE7wjwTsTvCvBuxO8J8F7E7wvwfsTfCDBBxN8KMGHEwwSDBOMEowTTBJME8wSzBMsEiwTrBKsE2wSbBPsEuwTfCTBRxN8LMHHE3wiwScTfCrBpxN8JsFnE3wuwecTfCHBFxN8KcGXE3wlwVcTfC3B1xN8I8E3E3wrwbcTfCfBdxN8L8H3E/wgwQ8T/CjBjxP8JMFPE/wswc8T/CLBLxP8KsGvE/wmwW8T/C7B7xP8IcEfE/wpwZ8T/CXBXxP8LcHfE/wjwT8T/CvBvxP8J8F/ExyT4ECKg1IcnOKQFIemOE6K46Y4LMXxUhw/xQlSnDDFiVKcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNcXZUpw9ZeybyzlTnCvFuVOcJ8V5U5wvxflTXCDFBVNcKMWFU1wkxUVTXCxFUlw8xSVSXDLFpVJcOsVlUlw2xeVSXD7FFVJcMcWVUlw5xVVSXDXF1VJcPcU1UlwzxbVSXDvFdVJcN8X1Ulw/xQ1S3DDFjVLcOMVNUtw0xc1S3DzFLVLcMsWtUtw6xW1S3DbF7VLcPsUdUhye4o4p7pTizinukuKuKe6W4u4p7pHininuleLeKe6TDnHfFPdLcf8UD0jxwBQPSvHgFA9J8dAUD0vx8BSPSPHIFI9K8egUj0nx2BSPS9EUj0/xhBRPTHFEiiNTHJXiSSmenOIpKZ6a4mkpnp7iGSmemeJZKZ6d4jkpnpvieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSleneI1KV6b4nUpXp/iDSnemOLoFG9K8eYUb0nx1hRvS/H2FO9I8c4U70rx7hTvSfHeFO9L8f4UH0jxwRQfSvHhFIMUw3T8/+wnilNMUkxTzFLMUyxSLFOsUqxTbFJsU+xS7FN8JMVHU3wsxcdTfCLFJ1N8KsWnU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1P8IsUvU/wqxa9T/CbFb1P8LsXvx/rsv4/tn1L8OcVfUvw1xd9S/D3FP1L8M8W/Uvw7xX9S/DfFMSkOZDgow8EZDslwaIbjZDhuhsMyHC/D8TOcIMMJM5wow4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3DxzKcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTNcJMNFM1wsQzJcPMMlMlwyw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNbLJ/qOZtTJcO8N1Mlw3w/UyXD/DDTLcMMONMtw4w00y3DTDzTLcPMMtMtwyw60y3DrDbTLcNsPtMtw+wx0yHJ7hjhnulOHOGe6S4a4Z7pbh7hnukeGeGe6V4d4Z7pPhvhnul+H+GR6Q4YEZHpThwRke8t9J+LEcHp7hERkemeFRGR6dMeiYDI/N8LgMzfD4DE/I8MQMR2Q4MsNRGZ6U4ckZnpLhqRmeluHpGZ6R4ZkZnpXh2Rmek+G5GZ6X4fkZXpDhhRlelOHFGV6S4aUZXpbh5RlekeGVGV6VDYy8OsNrMrw2w+syvD7DGzK8McPRGd6U4c0Z3pLhrRneluHtGd6R4Z0Z3pXh3Rnek+G9Gd43FreBEf9NjsaHMnw4GzR0LIdhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYaPZPjof3X5eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYafZfh5hl9k+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZPhnhn9l+HeG/2T4b4ZjMhzIcVCOg3MckuPQHMfJcdwch+U4Xo7j5zhBjhPmOFGOE+c4SY6T5gyZLMfJc5wixylznCrHqXOcJsdpc5wux+lznCHHGXOcKceZc5wlx1lznC3H2XOcI8c5c5wrx7lznCfHeXOcL8f5c1wgxwVzXCjHhXNcJMdFc1wsR3JcPMclclwyx6VyXDrHZXJcNsflclw+xxVyXDHHlXJcOcdVclw1x9VyXD3HNXJcM8e1clw7x3VyXDfH9XJcP8cNctwwx41y3DjHTXLcNMfNctw8xy1y3DLHrXLcOsdtctw2x+1y3D7HHXIcnuOOOe6U48457pLjrjnuluPuOe6R45457pXj3jnuk+O+Oe6X4/45HpDjgTkelOPBOR6S46E5Hpbj4TkekeOROR6V49E5HpPjsTkel6M5Hp/jCTmemOOIHEfmOCrHk3I8OcdTcjw1x9NyPD3HM3I8M8ezcjw7x3NyPDfH8/6rlwtyvDDHi3K8OMdLcrw0x8tyvDzHK3K8Msercrw6x2tyvDbH63K8Pscbcrwxx9E53pTjzeMMDIzV5K053pbj7TnekeOdOd6V49053pPjvTnel+P9OT6Q44M5PpTjwzkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn2OT6S46M5Ppbj4zk+keOTOT6V49M5PpPjszk+l+PzOb6Q44s5vpTjyzm+kuOrOb6W4+s5vpHjmzm+lePbOb6T47s5vpfj+zl+kOOHOX6U48c5fpLjpzl+luPnOX6R45c5fpXj1zl+k+O3OX6X4/c5/pDjjzn+lOPPOf6S4685/pbj7zn+keOfOf6V4985/pPjvzmOyXGgwEEFDi5wSIFDCxynwHELHFbgeAWO/9/+hAVOVODEBU5S4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4IwFzlTgzAXOUuCsBc5W4OwFzlHgnAXOVeDcBc5T4LwFzlfg/AUuUOCCBS5U4MIFLlLgogUuViAFLl7gEgUuWeBSBS5d4DIFLlvgcgUuX+AKxX/qjP+saV65wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdChxe4I4bDQyMxX3nAncpcNcCdytw9wL3KHDPAvcqcO8C9ylw3wL3K3D/Ag8o8MACDyrw4AIPKfDQAg8r8PACjyjwyAKPKvDoAo8p8NgCjyvQAo8v8IQCTyxwRIEjCxxV4EkFnlzgKQWeWuBpBZ5e4BkFnlngWQWeXeA5BZ5b4HkFnl/gBQVeWOBFBV5c4CUFXlrgZQVeXuAVBV5Z4FUFXl3gNQVeW+B1BV5f4A0F3ljg6AJvKvDmAm8p8NYCbyvw9gLvKPDOAu8q8O4C7ynw3gLvK/D+Ah8o8MECHyrw4QKDAsP/Ej0W56TAtMCswLzAosCywKrAusCmwLbArsC+wEcKfLTAxwp8vMAnCnyywKcKfLrAZwp8tsDnCny+wBcKfLHAlwp8ucBXiiG+WuBrBb5e4BsFvlngWwW+XeA7Bb5b4HsFvl/gBwV+WOBHBX5c4CcFflrgZwV+XuAXBX5Z4FcFfl3gNwV+W+B3BX5f4A8F/ljgTwX+XOAvBf5a4G8F/l7gHwX+WeBfBf5d4D8F/lvgmAIHShxU4uASh5Q4tMRxShy3xGEljlfi+CVOUOKEJU5U4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbiLiXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlTiwiUuUg77z7f6YiVS4uIlLlHikiUuVeLSJS5T4rIlLlfi8iWuUOKKJa5U4solrlLiqiWuVuLqJa5R4polrlXi2iWuU+K6Ja5X4volblDihiVuVOLGJW5S4qYlblbi5iVuUeKW5cDg/2VZbFPitiVuV+L2Je5Q4vASdyxxpxJ3/u+971ribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQWOGDIzl7pASDy3xsBIPL/GIEo8s8agSjy7xmBKPLfG4Ei3x+BJPKPHEEkeUOLLEUSWeVOLJJZ5S4qklnlbi6SWeUeKZJZ5V4tklnlPiuSWeV+L5JV5Q4oUlXlTixSVeUuKlJV5W4uUlXlHilSVeVeLVJV5T4rUlXlfi9SXeUOKNJY4u8aYSby7xlhJvLfG2Em8v8Y4S7yzxrhLvLvGekv+52/tLfKDEB0t8qMSHSwxKDEuMSoxLTEpMS8xKzEssSixLrEqsS2xKbEvsSuxLfKTER0t8rMTHS3yixCdLfKrEp0t8psRnS3yuxOdLfKHEF0t8qcSXS3ylxFdLfK3E10t8o8Q3S3yrxLdLfKfEd0t8r8T3S/ygxA9L/KjEj0v8pMRPS/ysxM9L/KLEL0v8qsSvS/ymxG9L/K7E70v8ocQfS/ypxJ9L/KXEX0v8rcTfS/yjxD9L/KvEv0v8p8R/SxxT4kCFgyocXOGQCodWOE6F41Y4rMLxKhy/wgkqnLDCiSqcuMJJKpy0wskqnLzCKSqcssKpKpy6wmkqnLbC6SqcvsIZKpyxwpkqnLnCWSqctcLZKpy9wjkqnLPCuSqcu8J5Kpy3wvkqnL/CBSpcsMKFKly4wkUqXLTCxSqkwsUrXKLCJStcqsKlK1ymwmUrXK7C5StcocIVK1ypwpUrXKXCVStcrcLVK1yjwjUrXKvCtStcp8J1K1yvwvUr3KDCDSvcqMKNK9ykwk0r3KzCzSvcosItK9xqLH5j/V/hthVuV+H2Fe5Q4fAKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IgKj6zwqAqPrvCYCo+t8LgKrfD4Ck+o8MQKR1Q4ssJRFZ5U4ckVnlLhqRWeVuHpFZ5R4Zn/c1uF51R4boXnVXh+hRdUeGGFF1V4cYWXVHhphZdVeHmFV1R4ZYVXVXh1hddUeG2F11V4fYU3VHhjhaMrvKnCmyu8pcJbK7ytwtsrvKPCOyu8q8K7K7ynwnsrvK/C+6v/nzt+sMKHKny4wqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7CRyp8tMLHKny8wicqfLLCpyp8usJnKny22vKB5yp8vsIXKnyxwpcqfLnCVyp8tcLXKny9wjcqfLPCtyp8u8J3Kny3wvcqfL/CDyr8sMKPKvy4wk8q/LTCzyr8vMIvKvyywq8q/LrCbyr8tsLvKvy+wh8q/LHCnyr8ucJfKvy1wt8q/L3CPyr8s8K/Kvy7wn8q/LfCMRUO1DioxsE1DqlxaI3j1DhujcNqHK/G8WucoMYJa5yoxolrnKTGSWucrMbJa5yixilrnKrGqWucpsZpa5yuxulrnKHGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysRmpcvMYlalyyxqVqXLrGZWpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWocXuOONe5U48417lLjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HjAuHljjQTUeXOMhNR5a42E1Hl7jETUeWeNRNR5d4zE1HlvjcTVa4/E1nlDjiTWOqHFkjaNqPKnGk2s8pcZTazytxtNrPKPGM2s8q8azazynxnNrPK/G82u8oMYLa7yoxotrvKTGS2u8rMbLa7yixitrvKrGq2u8psZra7yuxutrvKHGG2scXeNNNd5c4y013lrjbTXeXuMdNd5Z41013l3jPTXeW+N9Nd5f4wM1PljjQzU+XGNQY1hjVGNcY1JjWmNWY15jUWNZY1VjXWNTY1tjV2Nf4yM1PlrjYzU+XuMTNT5Z41M1Pl3jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e4xc1flnjVzV+XeM3NX5b43c1fl/jDzX+WONPNf5c4y81/lrjbzX+XuMfNf5Z4181/l3jPzX+W+OYGgcaHNTg4AaHNDi0wXEaHLfBYQ2O1+D4DU7Q4IQNTtTgxA1O0uCkDU7W4OQNTtHglA1O1eDUDU7T4LQNTtfg9A3O0OCMDc7U4MwNztLgrA3O1uDsDc7R4JwNztXg3A3O0+C8Dc7X4PwNLtDggg0u1ODCDS7S4KINLtYgDS7e4BINLtngUg0u3eAyDUOXbXC5BpdvcIUGV2xwpQZXbnCVBldtcLUGV29wjQbXbHCtBtducJ0G121wvQbXb3CDBjdscKMGN25wkwY3bXCzBjdvcIsGt2xwqwa3bnCbBrdtcLsGt29whwaHN7hjgzs1uHODuzS4a4O7Nbh7g3s0uGeDezW4d4P7NLhvg/s1uH+DBzR4YIMHNXhwg4c0eGiDhzV4eINHNHhkg0c1eHSDxzR4bIPHNWiDxzd4QoMnNjiiwZENjmrwpAZPbvCUBk9t8LQGT2/wjAbPbPCsBs9u8JwGz23wvAbPb/CCBi9s8KIGL27wkgYvbfCyBi9v8IoGr2zwqgavbhh2TYPXNnhdg9c3eEODNzY4usGbGry5wVsavLXB2xq8vcE7xnI1gGNrqrsbvKfBexu8r8H7G3ygwQcbfKjBhxsMGgwbjBqMG0waTBvMGswbLBosG6warBtsGmwb7BrsG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8E/G/yrwb8b/KfBfxsc0+BAi4NaHNzikBaHtjhOi+O2OKzF8Vocv8UJWpywxYlanLjFSVqctMXJWpy8xSlanLLFqVqcusVpWpy2xelanL7FGVqcscWZWpy5xVlanLXF2VqcvcU5WpyzxblanLvFeVqct8X5Wpy/xQVaXLDFhVpcuMVFWly0xcVapMXFW1yixSVbXKrFpVtcpsVlW1yuxeVbXKHFFVtc6X8nErW4aourtbh6i2u0uGaLa7W4dovrtLhui+u1uH6LG7S4YYsbtbhxi5u0uGmLm7W4eYtbtLhli1u1uHWL27S4bYvbtbh9izu0OLzFHVvcqcWdW9ylxV1b3K3F3Vvco8U9W9yrxb1b3KfFfVvcr8X9WzygxQNbPKjFg1s8pMVDWzysxcNbPKLFI1s8qsWjWzymxWNbPK5FWzy+xRNaPLHFES2ObHFUiye1eHKLp7R4aountXh6i2e0eGaLZ7V4dovntHhui+e1eH6LF7R4YYsXtXhxi5e0eGmLl7V4eYtXtHhli1e1eHXLqGtavLbF61q8vsUbWryxxdEt3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0t3tfi/S0+0OKDLT7U4sMtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i0+0uKjLT7W4uMtPtHiky0+1eLTLT7T4rMtPtfi8y2+0OKLLb7U4sstvtLiqy2+1uLrLb7R4pstvtXi2y2+0+K7Lb7X4vstftDihy1+1OLHLX7S4qctftbi5y1+0eKXLX7V4tctftPity1+1+L3Lf7Q4o8t/tTizy3+0uKvLf7W4u8t/tHiny3+1eLfLf7T4r8tjmlxoMNBHQ7ucEiHQzscp8NxOxzW4Xgdjt/hBB1O2OFEHU7c4SQdTtrhZB1O3uEUHU7Z4VQdTt3hNB1O2+F0HU7f4QwdztjhTB3O3OEsHc7a4Wwdzt7hHB3O2eFcHc7d4TwdztvhfB3O3+ECHS7Y4UIdLtzhIh0u2uFiHdLh4h0u0eGSHS7V4dIdLtPhsh0u1+HyHa7Q/X+mxti2cjcwsEqHq3a4Woerd7hGh2t2uFaHa3e4Tofrdrheh+t3uEGHG3a4UYcbd7hJh5t2uFmHm3e4RYdbdrhVh1t3uE2H23a4XYfbd7hDh8M73LHDnTrcucNdOty1w9063L3DPTrcs8O9Oty7w3063LfD/Trcv8MDOjyww4M6PLjDQzo8tMPDOjy8wyM6PLLDozo8usNjOjy2w+M6tMPjOzyhwxM7HNHhyA5HdXhShyd3eEqHp3Z4WoenjwWqwzM7PKvDszs8p8NzOzyvw/M7vKDDCzu8qMOLO7ykw0s7vKzDyzu8osMrO7yqw6s7vKbDazu8rsPrO7yhwxtXGXB0x//SXrylw1s7vK3D2zu8o8M7O7yrw7s7vKfDezu8r8P7O3ygwwc7fKjDhzsMOgw7jDqMO0w6TDvMOsw7LDosO6w6rDtsOmw77DrsO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzscPenAwECPg3oc3OOQHof2OE6P4/Y4rMfxehy/xwl6nLDHiXqcuMdJepy0x8l6nLzHKXqcssepepy6x2l6nLbH6XqcvscZepyxx5l6nLnHWXqctcfZepy9xzl6nLPHuXqcu8d5epy3x/l6nL/HBXpcsMeFely4x0V6XLTHxXqkx8V7XKLHJXtcqsele1ymx2V7XK7H5XtcoccVe1ypx5V7XKXHVXtcrcfVe1yjxzV7XKvHtXtcp8d1e1yvx/V73KDHDXvcqMeNe9ykx0173KzHzXvcoscte9yqx6173KbHbXvcrsfte9yhx+E97tjjTj3u3OMuPe7a42497t7jHj3u2eNePe7d4z497tvjfkNx/x4P6PHAHg/q8eAeD+nx0PH+n8fDezyixyN7PKrHo3s8psdjezyuR3s8vscTejyxxxE9juxxVI8n9Xhyj6f0eGqPp/V4eo9n9Hhmj2f1eHaP5/R4bo/n9Xh+jxf0eGGPF/V4cY+X9Hhpj5f1eHmPV/R4ZY9X9Xh1j9f0eG2P1/V4fY839Hhjj6N7vKnHm3u8pcdbe7ytx9t7vKPHO3u8q8e7e7ynx3t7vK/H+3t8oMcHe3yox4d7/L8AAAD//3fC3Ko=") clock_adjtime(0x0, &(0x7f00000002c0)={0x3f9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x100, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = creat(0x0, 0x0) tee(0xffffffffffffffff, r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x449, 0x0, &(0x7f0000000140)="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"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x6f4}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="7c4e032a4f1498e6468e67360e829b2b154cf1f70662e00b73cc5d3924c73da8c922a6225aa09c718949fe40b26d256468dfc0fa", 0x34}, {&(0x7f0000000140)="54f07efd295c82e02e4a96a9d828239862d7544bb8211f2b2dc8994b9c336f2784a6b86293a20e1e9463d76d5505c61eef55733af0dca1c2361386b415df06820749da20c978fada", 0x48}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f0000000040), 0x3, 0x51e, &(0x7f0000000680)="$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") lstat(&(0x7f0000000240)='./file2\x00', 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x38) 4.663738992s ago: executing program 3 (id=1667): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x2c}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000015c0)={0x53, 0x0, 0x4, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340)="93ed1d49", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x2, 0x443, &(0x7f0000000940)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x112, 0x3, 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[], 0xa7) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="840000001ba073ee5b4ba056f5a86035", @ANYRES16=r5, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r6, @ANYBLOB="6600330050000000080211000000080211000000ffffffffffff000000000000000000006400000001000301000406000000000000060200002d1a000000000000000000000000000000000000000000000000000072060303030303037107000000000000000000"], 0x84}}, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 4.196021122s ago: executing program 0 (id=1670): socket$inet_udp(0x2, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x2, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000f80)=0x15) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x4d68f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) sendto$packet(r1, &(0x7f0000000080)="8001c83a9c9e2e7312074a27202a", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) capset(0x0, 0x0) syz_emit_vhci(0x0, 0xf8) r5 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x90\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0x78) 4.0962293s ago: executing program 1 (id=1671): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x17b, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x125440, 0x0) read(r0, &(0x7f0000000000), 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10) r3 = syz_io_uring_setup(0x38b2, &(0x7f0000000440)={0x0, 0x31e5}, &(0x7f00000000c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x8, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = socket(0x15, 0x5, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r5, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100000a38a74030088000a0f0000000010902120001000000000904"], 0x0) write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[], 0x9cf) 4.076719212s ago: executing program 0 (id=1672): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20000400) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fstat(r0, &(0x7f0000000740)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x3, &(0x7f00000003c0)={{r2}, 0x0, 0x0}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0xa0003b40, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r4 = creat(0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) getpeername$inet(r4, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f00000004c0)) link(&(0x7f00000006c0)='./bus/file0\x00', &(0x7f0000000700)='./bus\x00') syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab82a4403d1b1093c800010203010902240001000000000904000002fb5a840009050f0053a300000009050b"], 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) 3.340025705s ago: executing program 3 (id=1673): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), 0xffffffffffffffff) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000540)=""/111, &(0x7f00000005c0)=0x6f) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000005f00)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0x7, 0x8, {{0x13, 0x4, 0x1, 0x3, 0x4c, 0x67, 0x0, 0x80, 0x4, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0xf, 0x6d, [@dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010101, @remote]}, @timestamp={0x44, 0x14, 0x9d, 0x0, 0x9, [0x6, 0x101, 0x4, 0x5]}, @timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x4, [{@private=0xa010101, 0x400}, {@multicast2, 0x200}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe0, r2, 0x200, 0x70bd2d, 0x1, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8021}, 0x1) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r10, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000005f00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000e0000002000018008000100", @ANYRES32=r11, @ANYBLOB="140002006d616376746170300040000000000000"], 0x34}}, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000500)={'syztnl0\x00', &(0x7f00000003c0)={'gretap0\x00', r11, 0x40, 0x10, 0x8e9a, 0x8, {{0x3b, 0x4, 0x3, 0x19, 0xec, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@generic={0xc2, 0x7, "f6f4c67076"}, @lsrr={0x83, 0x23, 0x1f, [@broadcast, @remote, @dev={0xac, 0x14, 0x14, 0xb8}, @loopback, @private=0xa010100, @private=0xa010101, @broadcast, @rand_addr=0x64010101]}, @cipso={0x86, 0x70, 0xffffffffffffffff, [{0x1, 0x8, "ff4729b0f1bf"}, {0x0, 0xd, "acf209358f2f859ca2d8ef"}, {0x0, 0x11, "d2c5ae91e49fee1f960490dfc37937"}, {0x5, 0x11, "feca7ea2297868a42ac124dc249538"}, {0x2, 0x12, "d83c7062cd07ba8aa4cd7e0ec7c742c0"}, {0x6d0c79fb91d40d4e, 0xb, "de24567cb66f29ddbb"}, {0x5, 0x10, "75f5a6db0e40fc6d630df9ee65df"}, {0x5, 0x6, "69d1dd2a"}]}, @rr={0x7, 0x7, 0xa8, [@rand_addr=0x64010102]}, @ssrr={0x89, 0xf, 0xe3, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @generic={0x88, 0xf, "8285a14db59efff66f86a6dd14"}, @timestamp_prespec={0x44, 0xc, 0x8, 0x3, 0x6, [{@empty, 0xffffc706}]}, @cipso={0x86, 0xa, 0x1, [{0x6, 0x4, "b061"}]}]}}}}}) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x7, 0x1, @vifc_lcl_addr=@private=0xa010100, @empty}, 0x10) setsockopt$inet6_IPV6_PKTINFO(r0, 0x10d, 0x4, 0x0, 0x0) 3.291673149s ago: executing program 4 (id=1674): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000001c0)=0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0xb700, 0x0, 0xe0, 0x3b}]}) set_mempolicy(0x1, &(0x7f0000000040)=0x100, 0xbd1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1000}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) setresuid(0xee01, 0xee01, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000040)=0x0, &(0x7f0000000000)) r3 = geteuid() setresuid(0xee01, r3, r2) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0x5) 3.259018881s ago: executing program 4 (id=1675): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1410, 0x6964cf48694fdc75, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4d}]}, 0x20}}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f050e00e6e8120006001e0089e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0xb01}, 0x14}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) fchdir(r4) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r9, &(0x7f0000000040)=""/104, 0x4d) getdents(r9, 0x0, 0x0) 3.089281136s ago: executing program 4 (id=1676): socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2, 0x100000}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x90) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[]) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="e8000000150001"], 0xe8}}, 0x0) openat$mixer(0xffffff9c, 0x0, 0x0, 0x0) 3.04774277s ago: executing program 3 (id=1677): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r10) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 2.676257341s ago: executing program 3 (id=1678): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000380)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x200}]}}}]}, 0x40}}, 0x0) 2.326347541s ago: executing program 2 (id=1679): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r1, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblcr\x00'}, 0x2c) read(r1, &(0x7f0000001b00)=""/194, 0xc2) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7fff0000) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x10, 0x3, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0xfd, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x10e0, 0x5}, {}, {}, @queue}, {0x0, 0x9, 0x0, 0x0, @time={0xfffffffc}, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"e1e2b45b88ecb9fca672830f"}}], 0x70) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="93f74b1d965f3733501911cb7be0357e7b75ecc5b061586a9b96c7b4e56a014c39ee587a49f2daa5e9ddd7d908d919ac1d8b7f384d1a5714e6d6cf2c678e3f415b8814d522", 0x45}], 0x1}}], 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge0\x00'}) 2.245950448s ago: executing program 4 (id=1680): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1}}], 0x8) bind$can_raw(r2, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x0, 0x0, 0x1}}], 0x8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000180)=""/197, 0x3}, {0x0}], 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_SYNTH_INFO(r6, 0xc08c5102, &(0x7f0000000280)={"10a1a78fb27204f42f9f8fe4de8430c6e8e09d2a2d1347f04e70126485e7", 0x1, 0x2, 0x401, 0x7, 0x8, 0xc2ce, 0xff9, 0x2, [0x4, 0x80, 0x100, 0x1, 0x7, 0x0, 0x5, 0x0, 0x1, 0x7, 0xffffffe5, 0x4, 0x3, 0x7, 0x5, 0x9, 0x3, 0x8, 0x1f]}) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa}]]}, 0x28}}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r11, 0x6, 0x14, &(0x7f00000004c0)=0xfffffffe, 0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x40, r7, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x62}}}}, [@NL80211_ATTR_FRAME_MATCH={0x16, 0x5b, "27845675f98a08003c756000edf002000000"}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 2.167304105s ago: executing program 2 (id=1681): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0xa5, 0x6, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x10, 0x80, 0x9, 0xffff}}) r2 = syz_open_procfs(0x0, &(0x7f0000002700)='net/ip_mr_cache\x00') pread64(r2, &(0x7f0000000000)=""/12, 0xfffffc64, 0x6) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x240000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x14, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0xfffffffc, 0x81, &(0x7f00000004c0)=""/129, 0x1f00, 0x28, '\x00', r1, 0x0, r2, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r0, r0], 0x0, 0x10, 0x5d9}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='lp\x00', 0x3) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)='I', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001d80)="fe", 0x1}], 0x1}}], 0x2, 0x4008095) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 2.076940202s ago: executing program 4 (id=1682): syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f0000000dc0)="cc", 0x1}, {&(0x7f0000000140)="1a", 0x1}, {&(0x7f0000000700)="e6", 0x1}, {&(0x7f00000009c0)='A', 0x1}, {&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000ac0)='=', 0x1}, {&(0x7f0000000e00)="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", 0x201}], 0x7, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0xdf7, 0x2, 0x0, 0x5, 0x1ff, 0x7f}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8bf527", 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200000007400000000000000000000005"], 0x38}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) 2.076527502s ago: executing program 2 (id=1683): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7a}, [@func], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0xf, 0x12}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x7f, 0x18}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x5, 0x8, 0xfb, 0x20, 0x7}, 0x3a, &(0x7f0000000200)={0x5, 0xf, 0x3a, 0x3, [@generic={0x2b, 0x10, 0x1, "2b91851fa35a83ddc4751973d2b4a21bc52346e09ab67288ca5450207a8abaed86842456c156d622"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0xa, 0x378}]}, 0x1, [{0xd4, &(0x7f0000000500)=@string={0xd4, 0x3, "28adac658816b1bfbaff7732c15d0502698deabcfdcb25ad21f505afd330bc810b9f5110993529c58d5e78cf179b4602e95920a90bcc0ace9cf001024c6399272ebd4606636979881bdb81a51e1eab6c756c64ec899825abafc8fa4cad7b31be4ce3d4613ca46f0c659f24ab2faa465dc78e0b5ccc8eb955f778ff3067ffe6d0b9414035914cca54685021665f8c37f477a07aa2a774bde56b8779498a1f211c686900e469aa303f0a1cb50d24382eeabf828b6c0206235d5daf412817f3a146d9638a15e06d7a251679c1d04f27856b7005"}}]}) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x40, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.028075246s ago: executing program 4 (id=1684): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x4, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80086303, &(0x7f0000000000)) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 1.655300128s ago: executing program 3 (id=1685): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x3, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = timerfd_create(0x7, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x100, '\x00', 0x0, r8, 0x5, 0x3, 0x5}, 0x48) 0s ago: executing program 3 (id=1686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010067656e6576650000200002801400070082"], 0x50}, 0x1, 0x2}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001100)=ANY=[@ANYBLOB="a40200002b0001"], 0x2a4}], 0x1}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000174614"], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socketpair(0x0, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) kernel console output (not intermixed with test programs): an entered promiscuous mode [ 510.191472][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 510.215643][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 510.232448][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 510.252012][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 510.262674][ T3615] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 510.279553][ T9168] device veth0_macvtap entered promiscuous mode [ 510.302788][ T3615] usb 5-1: config 0 has no interface number 0 [ 510.324601][ T9168] device veth1_macvtap entered promiscuous mode [ 510.329210][ T3615] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 510.374130][ T3615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.402131][ T3615] usb 5-1: config 0 descriptor?? [ 510.437594][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.484819][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.511905][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.534155][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.544629][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.555446][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.565991][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.576810][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.588608][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.599207][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.609947][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.620276][ T3615] viperboard 5-1:0.143: version 0.00 found at bus 005 address 017 [ 510.629104][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.659427][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.679029][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.693931][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.720855][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.746519][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.763380][ T3615] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 510.771131][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.782136][ T3615] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 510.790056][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.801878][ T9467] ALSA: seq fatal error: cannot create timer (-22) [ 510.835611][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.870576][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 510.883008][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 510.916042][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 510.939383][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 510.947780][ T9467] ALSA: seq fatal error: cannot create timer (-22) [ 510.955310][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 510.966330][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 511.007196][ T7303] usb 5-1: USB disconnect, device number 17 [ 511.080696][ T9168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.113780][ T9168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.390811][ T9168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.613819][ T9168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.488852][ T9497] syz.1.1287[9497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.488941][ T9497] syz.1.1287[9497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.537022][ T3942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.594917][ T3942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.653487][ T9497] loop1: detected capacity change from 0 to 16 [ 512.683889][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 512.699013][ T3941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.711206][ T3941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.725893][ T9497] erofs: Unknown parameter '18446744073709551615i(툵Fp' [ 512.775138][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 512.923283][ T9513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.970518][ T9496] loop4: detected capacity change from 0 to 4096 [ 513.039591][ T9517] loop1: detected capacity change from 0 to 1024 [ 513.063236][ T9496] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 513.137757][ T9496] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 513.154772][ T9496] ntfs3: loop4: Failed to load $MFT. [ 513.164210][ T9517] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: none. [ 514.455423][ T9529] loop0: detected capacity change from 0 to 128 [ 516.347221][ T9542] : renamed from bond0 [ 516.400331][ C1] eth0: bad gso: type: 1, size: 1408 [ 516.476517][ C1] eth0: bad gso: type: 1, size: 1408 [ 516.538068][ T9551] loop4: detected capacity change from 0 to 2048 [ 516.611335][ T9551] loop4: p2 p3 p7 [ 517.052769][ T9571] UBIFS error (pid: 9571): cannot open "/dev/sg0", error -22 [ 517.264171][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'. [ 517.284459][ T9572] netlink: 'syz.1.1307': attribute type 1 has an invalid length. [ 517.597627][ T9342] udevd[9342]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 517.612782][ T9373] udevd[9373]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 517.667225][ T3580] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 517.673760][ T9549] udevd[9549]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 517.758508][ T9342] udevd[9342]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 517.769620][ T26] audit: type=1326 audit(1724385658.885:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 517.793460][ T9373] udevd[9373]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 517.808547][ T9549] udevd[9549]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 517.857028][ T26] audit: type=1326 audit(1724385658.980:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 517.946466][ T9580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1309'. [ 517.949474][ T26] audit: type=1326 audit(1724385658.980:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 517.973622][ T9580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1309'. [ 518.007828][ T26] audit: type=1326 audit(1724385658.980:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 518.083327][ T9586] loop4: detected capacity change from 0 to 1024 [ 518.096745][ T26] audit: type=1326 audit(1724385658.980:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 518.115980][ T9583] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 518.155250][ T9583] kvm: pic: non byte read [ 518.160452][ T9583] kvm: pic: level sensitive irq not supported [ 518.160636][ T9583] kvm: pic: non byte read [ 518.168683][ T26] audit: type=1326 audit(1724385658.980:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 518.172270][ T9583] kvm: pic: level sensitive irq not supported [ 518.194545][ T9583] kvm: pic: non byte read [ 518.201845][ T26] audit: type=1326 audit(1724385658.980:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 518.229973][ T9583] kvm: pic: non byte read [ 518.236325][ T26] audit: type=1326 audit(1724385658.980:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 518.243992][ T9583] kvm: pic: non byte read [ 518.260843][ T26] audit: type=1326 audit(1724385658.980:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 518.289686][ T9583] kvm: pic: non byte read [ 518.353302][ T9583] kvm: pic: level sensitive irq not supported [ 518.353362][ T9583] kvm: pic: non byte read [ 518.367604][ T26] audit: type=1326 audit(1724385658.980:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 518.400033][ T3615] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 518.424364][ T9583] kvm: pic: single mode not supported [ 518.424480][ T9583] kvm: pic: non byte read [ 518.436494][ T9583] kvm: pic: level sensitive irq not supported [ 518.436787][ T9583] kvm: pic: non byte read [ 518.456361][ T9583] kvm: pic: non byte read [ 518.462603][ T9583] kvm: pic: level sensitive irq not supported [ 518.462951][ T9583] kvm: pic: level sensitive irq not supported [ 518.489931][ T9583] kvm: pic: single mode not supported [ 518.503108][ T9583] kvm: pic: single mode not supported [ 518.520278][ T9583] kvm: pic: single mode not supported [ 518.553716][ T9583] kvm: pic: single mode not supported [ 518.574452][ T9583] kvm: pic: single mode not supported [ 518.582009][ T9583] kvm: pic: single mode not supported [ 518.600764][ T9583] kvm: pic: single mode not supported [ 518.616172][ T9583] kvm: pic: single mode not supported [ 518.628308][ T9583] kvm: pic: single mode not supported [ 518.676518][ T3615] usb 4-1: Using ep0 maxpacket: 8 [ 518.819467][ T3615] usb 4-1: config 0 has no interfaces? [ 518.825489][ T3615] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 518.861604][ T3615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.883912][ T3615] usb 4-1: config 0 descriptor?? [ 518.898419][ T9602] netlink: 'syz.2.1315': attribute type 10 has an invalid length. [ 518.908283][ T9602] device hsr0 entered promiscuous mode [ 518.917460][ T9602] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 518.929912][ T9602] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 518.940246][ T9602] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 518.952703][ T9602] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 519.083756][ T9604] 9pnet_virtio: no channels available for device syz [ 519.108821][ T9605] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan1, syncid = 0, id = 0 [ 520.008314][ T8484] usb 4-1: USB disconnect, device number 14 [ 520.049039][ C1] eth0: bad gso: type: 1, size: 1408 [ 520.111417][ T9616] netlink: 'syz.3.1320': attribute type 9 has an invalid length. [ 520.156259][ T9618] loop4: detected capacity change from 0 to 256 [ 520.285079][ C1] eth0: bad gso: type: 1, size: 1408 [ 520.457269][ T3580] block nbd4: Receive control failed (result -107) [ 520.562115][ T9627] nbd4: detected capacity change from 0 to 15960 [ 520.575912][ T1058] block nbd4: Dead connection, failed to find a fallback [ 520.585483][ T1058] block nbd4: shutting down sockets [ 520.591867][ T1058] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.604368][ T1058] Buffer I/O error on dev nbd4, logical block 0, async page read [ 520.617121][ T1058] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.628051][ T1058] Buffer I/O error on dev nbd4, logical block 0, async page read [ 520.636272][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.647250][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 520.655701][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.666598][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 520.675333][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.686213][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 520.687350][ T9598] loop1: detected capacity change from 0 to 32768 [ 520.706040][ T1058] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.717062][ T1058] Buffer I/O error on dev nbd4, logical block 0, async page read [ 520.725083][ T1058] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.736194][ T1058] Buffer I/O error on dev nbd4, logical block 0, async page read [ 520.744107][ T1058] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.755522][ T1058] Buffer I/O error on dev nbd4, logical block 0, async page read [ 520.763301][ T9549] ldm_validate_partition_table(): Disk read failed. [ 520.770194][ T1058] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.781595][ T1058] Buffer I/O error on dev nbd4, logical block 0, async page read [ 520.791419][ T1058] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.803136][ T1058] Buffer I/O error on dev nbd4, logical block 0, async page read [ 520.818190][ T9549] Dev nbd4: unable to read RDB block 0 [ 520.850104][ T9549] nbd4: unable to read partition table [ 520.880221][ T9633] syz.2.1326 sent an empty control message without MSG_MORE. [ 520.892733][ T9549] ldm_validate_partition_table(): Disk read failed. [ 520.900147][ T9549] Dev nbd4: unable to read RDB block 0 [ 520.906210][ T9549] nbd4: unable to read partition table [ 520.909684][ T9598] XFS: ikeep mount option is deprecated. [ 520.964555][ T9598] XFS: noikeep mount option is deprecated. [ 521.058565][ T9640] loop4: detected capacity change from 0 to 256 [ 521.184821][ T9640] exFAT-fs (loop4): error, invalid access to FAT bad cluster (entry 0x00000005) [ 521.210310][ T9598] XFS (loop1): Mounting V5 Filesystem [ 521.264214][ T9640] exFAT-fs (loop4): failed to load alloc-bitmap [ 521.264270][ T9640] exFAT-fs (loop4): failed to recognize exfat type [ 521.309799][ T9598] XFS (loop1): log mount failed [ 521.564266][ C1] eth0: bad gso: type: 1, size: 1408 [ 522.008598][ T9659] loop3: detected capacity change from 0 to 256 [ 522.043340][ T9660] loop2: detected capacity change from 0 to 8 [ 522.151945][ T9659] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 522.199857][ T9660] SQUASHFS error: Unable to read inode 0x11f [ 522.250115][ T9659] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 529.153026][ T9685] loop1: detected capacity change from 0 to 1024 [ 530.272838][ C1] eth0: bad gso: type: 1, size: 1408 [ 530.284050][ C1] eth0: bad gso: type: 1, size: 1408 [ 530.317904][ T9696] loop4: detected capacity change from 0 to 8192 [ 530.472564][ T9696] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 532.589412][ T9720] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 532.671168][ T9721] loop1: detected capacity change from 0 to 128 [ 533.270897][ T9721] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 533.320421][ T9721] sysv_free_block: trying to free block not in datazone [ 533.428246][ T9736] sysv_count_free_blocks: free block count was -2041545929, correcting to 9 [ 533.456873][ C1] eth0: bad gso: type: 1, size: 1408 [ 533.549106][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 533.549124][ T26] audit: type=1804 audit(1724385675.455:250): pid=9721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1351" name="/newroot/219/file0" dev="loop1" ino=2 res=1 errno=0 [ 533.562815][ T9743] loop0: detected capacity change from 0 to 1024 [ 533.644381][ T26] audit: type=1804 audit(1724385675.550:251): pid=9721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1351" name="/newroot/219/file0" dev="loop1" ino=2 res=1 errno=0 [ 534.005390][ T8484] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 534.507288][ T26] audit: type=1326 audit(1724385676.463:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed14436e79 code=0x7ffc0000 [ 534.536771][ T26] audit: type=1326 audit(1724385676.494:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed14436e79 code=0x7ffc0000 [ 534.560903][ T9750] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 534.577835][ T9736] sysv_count_free_inodes: unable to read inode table [ 534.591040][ T26] audit: type=1326 audit(1724385676.505:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fed14436e79 code=0x7ffc0000 [ 534.719602][ T26] audit: type=1326 audit(1724385676.631:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed14436e79 code=0x7ffc0000 [ 534.743409][ T5082] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 534.760168][ T26] audit: type=1326 audit(1724385676.631:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed14436e79 code=0x7ffc0000 [ 534.876528][ T8484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 534.900433][ T8484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 534.907814][ T9765] binder: 9764:9765 ioctl c0306201 0 returned -14 [ 534.928576][ T8484] usb 4-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=dd.34 [ 534.944569][ T8484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.960796][ T8484] usb 4-1: config 0 descriptor?? [ 534.981494][ T9746] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 535.021778][ T8484] option 4-1:0.0: GSM modem (1-port) converter detected [ 535.114416][ T7303] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 535.219651][ T8484] usb 4-1: USB disconnect, device number 15 [ 535.238913][ T8484] option 4-1:0.0: device disconnected [ 535.336697][ T9771] loop1: detected capacity change from 0 to 40427 [ 535.352981][ T7303] usb 5-1: Using ep0 maxpacket: 8 [ 535.428795][ T9771] F2FS-fs (loop1): Found nat_bits in checkpoint [ 535.445501][ T7] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 535.482708][ T9771] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 535.522146][ T9771] syz.1.1363[9771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 535.522208][ T9771] syz.1.1363[9771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 535.554153][ T5082] attempt to access beyond end of device [ 535.554153][ T5082] loop1: rw=2049, want=45104, limit=40427 [ 535.629041][ T7303] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 535.638765][ T7303] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 535.646772][ T7303] usb 5-1: Product: syz [ 535.651102][ T7303] usb 5-1: Manufacturer: syz [ 535.655730][ T7303] usb 5-1: SerialNumber: syz [ 535.666084][ T7303] usb 5-1: config 0 descriptor?? [ 535.716608][ T7303] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 535.867225][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 535.899713][ T9763] ucma_write: process 116 (syz.4.1362) changed security contexts after opening file descriptor, this is not allowed. [ 535.924047][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.967857][ T9787] loop1: detected capacity change from 0 to 512 [ 535.986768][ T7] usb 3-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 536.006353][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.039841][ T9784] loop3: detected capacity change from 0 to 1024 [ 536.041645][ T7] usb 3-1: config 0 descriptor?? [ 536.142626][ T9784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.305378][ T7303] gspca_zc3xx: reg_r err -71 [ 536.310836][ T7303] gspca_zc3xx: probe of 5-1:0.0 failed with error -71 [ 536.364752][ T7303] usb 5-1: USB disconnect, device number 18 [ 536.463879][ T9789] loop1: detected capacity change from 0 to 128 [ 537.810414][ T9793] loop0: detected capacity change from 0 to 24 [ 537.814198][ T7] wacom 0003:056A:0018.000F: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 537.891842][ T7] wacom 0003:056A:0018.000F: hidraw0: USB HID v0.00 Device [HID 056a:0018] on usb-dummy_hcd.2-1/input0 [ 537.913083][ T7] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0018.000F/input/input23 [ 537.942659][ T26] audit: type=1800 audit(1724385680.062:257): pid=9784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1367" name="bus" dev="loop3" ino=861 res=0 errno=0 [ 538.075225][ T7] usb 3-1: USB disconnect, device number 14 [ 538.206120][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.717228][ T8483] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 538.769415][ T8483] Bluetooth: hci4: Injecting HCI hardware error event [ 539.138685][ T3580] Bluetooth: hci4: hardware error 0x00 [ 539.179176][ T9806] netlink: 'syz.1.1373': attribute type 3 has an invalid length. [ 539.235353][ T9806] netlink: 'syz.1.1373': attribute type 3 has an invalid length. [ 539.859161][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 540.084670][ T9809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1373'. [ 540.285452][ T9823] loop0: detected capacity change from 0 to 256 [ 540.349170][ T9822] loop3: detected capacity change from 0 to 1024 [ 540.395416][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 540.401887][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 540.479974][ T7303] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 540.488032][ T26] audit: type=1800 audit(1724385682.728:258): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1378" name="bus" dev="loop0" ino=1048668 res=0 errno=0 [ 540.705274][ T9829] hfsplus: catalog searching failed [ 540.809923][ T9828] hfsplus: xattr searching failed [ 540.851390][ T7303] usb 5-1: Using ep0 maxpacket: 8 [ 540.857140][ T26] audit: type=1800 audit(1724385683.116:259): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1372" name="bus" dev="loop3" ino=4 res=0 errno=0 [ 540.965842][ T7303] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 540.985190][ T7303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.014178][ T7303] usb 5-1: config 0 descriptor?? [ 541.084739][ T1404] hfsplus: b-tree write err: -5, ino 3 [ 541.101164][ T5615] hfsplus: node 4:3 still has 1 user(s)! [ 541.290550][ T9838] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1381'. [ 541.322081][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1376'. [ 541.399325][ T9814] device dummy0 entered promiscuous mode [ 541.424642][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1376'. [ 541.924085][ T9841] device dummy0 left promiscuous mode [ 541.966289][ T9825] loop1: detected capacity change from 0 to 40427 [ 542.042524][ T7] usb 5-1: USB disconnect, device number 19 [ 542.130103][ T9825] F2FS-fs (loop1): Found nat_bits in checkpoint [ 542.251612][ T9850] loop0: detected capacity change from 0 to 164 [ 542.320076][ T9825] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 542.373172][ T9850] isofs: isofs_export_get_parent(): child directory not normalized! [ 542.397502][ T26] audit: type=1800 audit(1724385684.742:260): pid=9825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1379" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 543.939596][ T9858] input: syz0 as /devices/virtual/input/input26 [ 544.211339][ T4550] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 544.222340][ T4550] Bluetooth: hci2: Injecting HCI hardware error event [ 544.229914][ T3581] Bluetooth: hci2: hardware error 0x00 [ 544.436733][ T5082] attempt to access beyond end of device [ 544.436733][ T5082] loop1: rw=2049, want=45104, limit=40427 [ 544.531348][ T9874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1392'. [ 544.604991][ T9876] loop0: detected capacity change from 0 to 8 [ 544.621624][ T9874] tipc: Enabling of bearer rejected, failed to enable media [ 544.693473][ T9876] unable to read xattr id index table [ 544.748361][ T3615] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 545.083851][ T6141] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 545.169640][ T3615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.206210][ T3615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.219284][ T3615] usb 3-1: New USB device found, idVendor=04e7, idProduct=0830, bcdDevice= 0.00 [ 545.264129][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.302513][ T9891] tipc: Enabling of bearer rejected, media not registered [ 546.333926][ T3615] usb 3-1: config 0 descriptor?? [ 546.387826][ T6141] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 546.407298][ T6141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.438734][ T6141] usb 4-1: config 0 descriptor?? [ 547.450130][ T6141] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 547.466715][ T3615] hid-generic 0003:04E7:0830.0010: item fetching failed at offset 5/7 [ 547.475955][ T6141] asix: probe of 4-1:0.0 failed with error -71 [ 547.482434][ T3615] hid-generic: probe of 0003:04E7:0830.0010 failed with error -22 [ 547.538096][ T6141] usb 4-1: USB disconnect, device number 16 [ 548.274584][ T4550] usb 3-1: USB disconnect, device number 15 [ 548.656665][ T9913] loop4: detected capacity change from 0 to 4096 [ 548.743569][ T9913] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 548.862620][ T9913] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 548.882694][ T9913] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 548.885472][ T9916] loop3: detected capacity change from 0 to 1024 [ 548.895806][ T9906] loop0: detected capacity change from 0 to 32768 [ 548.905162][ T9913] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 548.918923][ T9913] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 548.977957][ T9913] ntfs: volume version 3.1. [ 549.052586][ T9913] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1405'. [ 549.146954][ T9916] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 549.216003][ T9923] overlayfs: upper fs needs to support d_type. [ 549.223037][ T9923] overlayfs: upper fs does not support tmpfile. [ 549.235674][ T9923] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 549.332997][ T4550] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 549.589800][ T4550] usb 3-1: Using ep0 maxpacket: 32 [ 549.601652][ T9090] non-latin1 character 0x2e66 found in JFS file name [ 549.616462][ T9090] mount with iocharset=utf8 to access [ 549.777535][ T9932] tipc: Enabling of bearer rejected, failed to enable media [ 549.874152][ T4550] usb 3-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71 [ 549.890221][ T4550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.900573][ T4550] usb 3-1: Product: syz [ 549.905293][ T4550] usb 3-1: Manufacturer: syz [ 549.910035][ T4550] usb 3-1: SerialNumber: syz [ 549.965205][ T9941] loop3: detected capacity change from 0 to 64 [ 549.978122][ T4550] usb 3-1: config 0 descriptor?? [ 550.032896][ T4550] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 550.088423][ T4550] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 550.123592][ T4550] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 550.131975][ T4550] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 550.191034][ T4550] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 550.205675][ T4550] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 550.214894][ T4550] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 550.246494][ T4550] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 550.269459][ T3623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.316796][ T4550] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 550.327294][ T9943] loop4: detected capacity change from 0 to 2048 [ 550.349194][ T4550] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 550.401325][ T4550] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 550.410034][ T4550] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 550.499795][ T4550] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 550.510955][ T4550] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 550.571857][ T4550] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 550.750978][ T4550] usb 3-1: USB disconnect, device number 16 [ 550.853709][ T4550] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 551.072914][ T5615] hfs: node 4:3 still has 1 user(s)! [ 551.097007][ T3623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.269098][ T9943] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 551.339546][ T4550] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 551.443897][ T4550] keyspan 3-1:0.0: device disconnected [ 551.610566][ T3623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.702435][ T9960] nfs: Unknown parameter '0000000000000000000700000000000000000000212' [ 552.158811][ T4550] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 552.280898][ T9964] loop1: detected capacity change from 0 to 128 [ 552.343990][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.412836][ T3623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.503488][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.517674][ T9968] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 552.524238][ T9968] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 552.596804][ T9968] vhci_hcd vhci_hcd.0: Device attached [ 552.619924][ T4550] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 552.639370][ T4550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.682651][ T9968] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 552.708378][ T4550] usb 3-1: config 0 descriptor?? [ 552.877490][ T9969] vhci_hcd: connection closed [ 552.877794][ T2724] usb 17-1: new high-speed USB device number 3 using vhci_hcd [ 552.914926][ T3691] vhci_hcd: stop threads [ 552.919272][ T3691] vhci_hcd: release socket [ 552.935943][ T3691] vhci_hcd: disconnect device [ 552.968717][ T4550] snd-usb-hiface: probe of 3-1:0.0 failed with error -22 [ 553.203025][ T9957] chnl_net:caif_netlink_parms(): no params data found [ 553.409764][ T9957] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.417286][ T9957] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.472523][ T3615] usb 3-1: USB disconnect, device number 17 [ 553.490471][ T9957] device bridge_slave_0 entered promiscuous mode [ 553.571633][ T9999] loop4: detected capacity change from 0 to 1024 [ 553.578431][ T9957] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.592149][ T9957] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.692528][T10002] loop3: detected capacity change from 0 to 256 [ 553.843196][ T9999] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 553.891415][ T9957] device bridge_slave_1 entered promiscuous mode [ 553.966601][T10002] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d) [ 553.988921][T10002] exFAT-fs (loop3): error, invalid access to FAT bad cluster (entry 0x00000005) [ 553.998173][T10002] exFAT-fs (loop3): Filesystem has been set read-only [ 554.005146][T10002] exFAT-fs (loop3): failed to initialize root inode [ 554.254937][ T2988] Bluetooth: hci3: command 0x0409 tx timeout [ 554.493087][ T9957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.528677][T10009] tipc: Started in network mode [ 554.544265][T10009] tipc: Node identity 000000000000003a0000400000000001, cluster identity 4711 [ 554.556873][T10009] tipc: Enabling of bearer rejected, failed to enable media [ 554.562942][T10014] loop3: detected capacity change from 0 to 4096 [ 554.588311][ T9957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.622359][T10014] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 554.731965][ T9957] team0: Port device team_slave_0 added [ 554.754954][T10014] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 554.788680][ T9957] team0: Port device team_slave_1 added [ 554.794970][T10014] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 554.820056][T10014] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 554.821060][ T2988] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 554.841340][T10014] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 554.914567][ T9957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.923574][T10014] ntfs: volume version 3.1. [ 554.930346][ T9957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.978584][ T9957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.045332][ T9957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.064554][ T9957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.091202][ T9957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.123791][T10014] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1425'. [ 555.334461][ T2988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.346518][ T2988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.357233][ T2988] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 555.366666][ T2988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.372047][ T9957] device hsr_slave_0 entered promiscuous mode [ 555.389215][ T2988] usb 5-1: config 0 descriptor?? [ 555.401903][ T9957] device hsr_slave_1 entered promiscuous mode [ 555.447453][ T9957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.812506][ T9957] Cannot create hsr debugfs directory [ 556.185657][ T6141] Bluetooth: hci3: command 0x041b tx timeout [ 556.407865][ T3623] device hsr_slave_0 left promiscuous mode [ 556.415573][ T13] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 556.426437][ T3623] device hsr_slave_1 left promiscuous mode [ 556.433323][ T3623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.441386][ T3623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.449362][ T3623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.459458][ T3623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.474547][ T3623] device bridge_slave_1 left promiscuous mode [ 556.506190][ T3623] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.642753][ T3623] device bridge_slave_0 left promiscuous mode [ 556.770457][ T3623] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.080177][ T3623] device veth1_macvtap left promiscuous mode [ 557.101887][ T3623] device veth0_macvtap left promiscuous mode [ 557.127522][ T3623] device veth1_vlan left promiscuous mode [ 557.139381][ T3623] device veth0_vlan left promiscuous mode [ 557.233965][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 557.241729][ T2988] usbhid 5-1:0.0: can't add hid device: -71 [ 557.247693][ T2988] usbhid: probe of 5-1:0.0 failed with error -71 [ 557.264681][ T2988] usb 5-1: USB disconnect, device number 20 [ 557.362568][ T3623] team0 (unregistering): Port device team_slave_1 removed [ 557.380426][ T3623] team0 (unregistering): Port device team_slave_0 removed [ 557.392171][ T3623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.409780][ T3623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.479050][ T3623] bond0 (unregistering): Released all slaves [ 557.549617][ T13] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 557.558780][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.567408][ T13] usb 3-1: Product: syz [ 557.571583][ T13] usb 3-1: Manufacturer: syz [ 557.576260][ T13] usb 3-1: SerialNumber: syz [ 557.582857][ T13] usb 3-1: config 0 descriptor?? [ 557.624726][ T13] appledisplay 3-1:0.0: Could not find int-in endpoint [ 557.640146][ T13] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 557.712514][T10066] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1442'. [ 557.747063][T10068] loop1: detected capacity change from 0 to 1024 [ 557.767248][T10066] device gretap0 entered promiscuous mode [ 557.784964][ T2724] vhci_hcd: vhci_device speed not set [ 557.794540][T10071] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1442'. [ 557.811152][T10071] 0X: renamed from gretap0 [ 557.866661][ T3615] usb 3-1: USB disconnect, device number 18 [ 557.879529][T10071] device 00X left promiscuous mode [ 557.901562][T10071] A link change request failed with some changes committed already. Interface 00X may have been left with an inconsistent configuration, please check. [ 557.950954][T10068] hfsplus: xattr searching failed [ 557.964251][ T26] audit: type=1800 audit(1724385701.071:261): pid=10068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1433" name="bus" dev="loop1" ino=4 res=0 errno=0 [ 557.996545][T10079] hfsplus: catalog searching failed [ 558.023576][T10066] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1442'. [ 558.034679][T10066] device 00X entered promiscuous mode [ 558.069038][T10076] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1442'. [ 558.086588][T10076] 1X: renamed from 00X [ 558.100952][T10076] device 01X left promiscuous mode [ 558.111305][T10076] A link change request failed with some changes committed already. Interface 01X may have been left with an inconsistent configuration, please check. [ 558.181915][ T3615] Bluetooth: hci3: command 0x040f tx timeout [ 558.383552][ T3691] hfsplus: b-tree write err: -5, ino 3 [ 558.484833][ T5082] hfsplus: node 4:3 still has 1 user(s)! [ 558.527657][ T2988] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 558.768742][ T2988] usb 3-1: Using ep0 maxpacket: 8 [ 558.880579][ T2988] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 558.897543][ T2988] usb 3-1: config 0 has no interface number 0 [ 558.932672][ T2988] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 559.001154][ T2988] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 559.055511][ T2988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.165028][ T2988] usb 3-1: config 0 descriptor?? [ 559.227664][T10098] netlink: 'syz.1.1437': attribute type 10 has an invalid length. [ 559.254790][ T2988] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 559.331081][ T2988] usb 3-1: USB disconnect, device number 19 [ 559.348285][ T2988] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 559.356732][T10098] team0: Port device wlan1 added [ 559.609320][ T9957] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 559.653552][ T9957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 559.702043][ T9957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 559.772659][ T9957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 560.120794][ T9957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.147953][ T3615] Bluetooth: hci3: command 0x0419 tx timeout [ 560.206470][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 560.226552][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 560.269989][ T9957] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.319950][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 560.341636][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 560.397890][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.405106][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.481797][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 560.502454][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 560.521827][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 560.558485][ T1404] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.565703][ T1404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.604287][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 560.643956][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 560.672388][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 560.692526][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 560.708148][T10106] loop3: detected capacity change from 0 to 40427 [ 560.726999][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 560.774422][T10106] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 560.796265][T10106] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 560.816189][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 560.837423][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 560.880725][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 560.906959][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 560.915808][T10106] F2FS-fs (loop3): Found nat_bits in checkpoint [ 560.953931][ T9957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 560.976419][ T9957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 560.994617][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 561.018978][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 561.093804][T10106] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 561.161381][T10106] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 561.421063][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 561.450127][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 561.508788][ T9957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.660265][T10152] loop1: detected capacity change from 0 to 32768 [ 561.757009][T10152] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1446 (10152) [ 561.799970][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 561.809049][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 561.874982][T10152] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 561.884255][T10152] BTRFS info (device loop1): setting nodatacow, compression disabled [ 561.893022][T10152] BTRFS info (device loop1): enabling auto defrag [ 561.899749][T10152] BTRFS info (device loop1): setting datacow [ 561.906243][T10152] BTRFS info (device loop1): use no compression [ 561.912516][T10152] BTRFS info (device loop1): force clearing of disk cache [ 561.919612][T10152] BTRFS info (device loop1): turning off barriers [ 561.926132][T10152] BTRFS info (device loop1): disabling tree log [ 561.932425][T10152] BTRFS info (device loop1): using free space tree [ 561.938904][T10152] BTRFS info (device loop1): has skinny extents [ 561.988265][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 562.015289][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 562.074592][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 562.905346][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 563.056870][ T9957] device veth0_vlan entered promiscuous mode [ 563.074677][T10177] netlink: 'syz.4.1448': attribute type 1 has an invalid length. [ 563.082431][T10177] netlink: 'syz.4.1448': attribute type 4 has an invalid length. [ 563.094969][T10152] BTRFS info (device loop1): clearing free space tree [ 563.102856][T10152] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 563.111165][T10177] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.1448'. [ 563.113585][T10152] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 563.153319][T10152] BTRFS info (device loop1): creating free space tree [ 563.162581][T10152] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 563.172230][T10152] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 563.196154][T10189] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1450'. [ 563.219254][ T9957] device veth1_vlan entered promiscuous mode [ 563.254539][ T4550] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 563.334559][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 563.345806][T10193] BTRFS info (device loop1): space_info 5 has 106496 free, is not full [ 563.355252][T10193] BTRFS info (device loop1): space_info total=3276800, used=53248, pinned=0, reserved=12288, may_use=3104768, readonly=0 zone_unusable=0 [ 563.369448][T10193] BTRFS info (device loop1): global_block_rsv: size 851968 reserved 851968 [ 563.378834][T10193] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 563.386469][T10193] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 [ 563.394113][T10193] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 [ 563.401924][T10193] BTRFS info (device loop1): delayed_refs_rsv: size 393216 reserved 393216 [ 563.423471][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 563.464776][ T9957] device veth0_macvtap entered promiscuous mode [ 563.487542][ T9957] device veth1_macvtap entered promiscuous mode [ 563.502392][T10195] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 563.535958][ T9957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.584839][ T9957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.621005][ T3659] BTRFS info (device loop1): space_info 5 has 139264 free, is not full [ 563.630292][ T3659] BTRFS info (device loop1): space_info total=3276800, used=53248, pinned=0, reserved=16384, may_use=3067904, readonly=0 zone_unusable=0 [ 563.644476][ T3659] BTRFS info (device loop1): global_block_rsv: size 851968 reserved 851968 [ 563.653907][ T3659] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 563.661561][ T3659] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 [ 563.669297][ T3659] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 [ 563.677108][ T3659] BTRFS info (device loop1): delayed_refs_rsv: size 524288 reserved 389120 [ 563.693009][ T4550] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 563.713937][ T9957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.730841][ T4550] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.744894][ T9957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.766337][ T9957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.783442][ T9957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.803555][ T9957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.830348][ T9957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.855384][ T9957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.870046][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 563.894958][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 563.912240][ T4550] usb 5-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 563.927424][ T4550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.936956][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 563.965977][ T4550] usb 5-1: Product: syz [ 563.971612][ T1404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 563.986325][ T4550] usb 5-1: Manufacturer: syz [ 563.997736][ T4550] usb 5-1: SerialNumber: syz [ 564.089882][ T9957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.133122][ T9957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.143741][ T9957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.162186][ T4550] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input27 [ 564.162680][ T9957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.464703][ T3013] bcm5974 5-1:1.0: could not read from device [ 564.614775][ T9957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.697522][ T9957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.707867][ T9957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.718930][ T9957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.729235][ T9957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.740159][ T9957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.797748][T10217] loop3: detected capacity change from 0 to 512 [ 564.853075][ T9957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.866405][ T4550] usb 5-1: USB disconnect, device number 21 [ 564.884605][T10217] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 564.904849][ T9957] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.973904][ T9957] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.059927][ T9957] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.070473][T10217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 565.112789][T10217] System zones: 1-12 [ 565.117674][T10217] EXT4-fs (loop3): orphan cleanup on readonly fs [ 565.150960][T10217] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.1455: Inode bitmap for bg 0 marked uninitialized [ 565.151338][ T9957] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.152738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 565.153328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 565.154476][T10217] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 565.161695][T10224] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1457'. [ 565.163588][T10224] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1457'. [ 565.163698][T10224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1457'. [ 565.184050][T10222] loop2: detected capacity change from 0 to 512 [ 565.222585][T10217] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 5: comm syz.3.1455: lblock 0 mapped to illegal pblock 5 (length 1) [ 565.230477][T10217] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1455: error -117 reading directory block [ 565.232502][T10217] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 5: comm syz.3.1455: lblock 0 mapped to illegal pblock 5 (length 1) [ 565.234123][T10217] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1455: error -117 reading directory block [ 565.234703][T10217] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 5: comm syz.3.1455: lblock 0 mapped to illegal pblock 5 (length 1) [ 565.252935][T10217] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1455: error -117 reading directory block [ 565.254482][T10217] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 5: comm syz.3.1455: lblock 0 mapped to illegal pblock 5 (length 1) [ 565.321170][T10217] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1455: error -117 reading directory block [ 565.444704][ T3611] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 565.556730][ T3611] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 566.460522][T10228] EXT4-fs error (device loop3): ext4_remount:5854: comm syz.3.1455: Abort forced by user [ 566.594414][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.620754][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.658738][T10250] loop1: detected capacity change from 0 to 2048 [ 566.680581][ T3659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.693997][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 566.715339][ T3659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.737807][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 566.772995][T10250] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 566.795926][T10228] EXT4-fs (loop3): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,. Quota mode: none. [ 566.881178][T10263] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 566.892063][T10217] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1455: dx entry: limit 0 != root limit 125 [ 566.938967][T10250] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=139 [ 567.063533][T10217] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1455: Corrupt directory, running e2fsck is recommended [ 567.318500][T10273] xt_hashlimit: size too large, truncated to 1048576 [ 569.955101][T10250] Remounting filesystem read-only [ 570.298994][T10288] Unsupported ieee802154 address type: 0 [ 571.065855][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1466'. [ 571.149559][T10300] loop3: detected capacity change from 0 to 512 [ 572.015681][T10300] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 572.316916][T10300] UDF-fs: Scanning with blocksize 512 failed [ 572.372559][T10300] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 572.429671][T10300] UDF-fs: Scanning with blocksize 1024 failed [ 572.439260][T10300] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 572.441004][T10318] netlink: 'syz.4.1472': attribute type 2 has an invalid length. [ 572.455807][T10316] loop2: detected capacity change from 0 to 256 [ 572.463496][T10300] UDF-fs: Scanning with blocksize 2048 failed [ 572.472819][T10318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1472'. [ 572.484900][T10300] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 572.660786][T10322] device wireguard0 entered promiscuous mode [ 573.028168][T10300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 573.436483][ T26] audit: type=1800 audit(1724385717.316:262): pid=10300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1467" name="file1" dev="loop3" ino=26 res=0 errno=0 [ 573.746064][ T7] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 575.628187][T10363] loop1: detected capacity change from 0 to 256 [ 575.833771][T10363] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 575.875998][T10376] loop0: detected capacity change from 0 to 256 [ 577.519403][ T4550] Bluetooth: hci3: command 0x0411 tx timeout [ 578.245117][T10363] Core dump to core aborted: cannot preserve file permissions [ 578.387542][T10397] syz.3.1487[10397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.387628][T10397] syz.3.1487[10397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.761443][ T3942] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.029656][ T3942] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.967877][ T3942] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.760660][ T4550] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 582.794464][ T3942] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.830316][T10452] loop2: detected capacity change from 0 to 8192 [ 582.956096][T10452] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 582.970698][T10452] REISERFS (device loop2): using ordered data mode [ 582.982090][T10452] reiserfs: using flush barriers [ 583.073979][T10457] loop4: detected capacity change from 0 to 512 [ 583.085561][T10452] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 583.123358][ T4550] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 583.142796][T10461] block nbd3: shutting down sockets [ 583.167585][ T4550] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 583.178242][T10452] REISERFS (device loop2): checking transaction log (loop2) [ 583.226852][T10452] REISERFS (device loop2): Using r5 hash to sort names [ 583.227175][ T4550] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 583.244357][T10452] REISERFS (device loop2): using 3.5.x disk format [ 583.265841][ T4550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.269497][T10452] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 583.310599][T10457] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 583.322954][T10457] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038 (0x7fffffff) [ 583.333845][T10449] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 583.974564][T10481] syz.4.1502[10481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 583.974656][T10481] syz.4.1502[10481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 584.079355][ T2724] Bluetooth: hci3: command 0x0409 tx timeout [ 584.166758][T10433] chnl_net:caif_netlink_parms(): no params data found [ 588.804277][ T3669] Bluetooth: hci3: command 0x041b tx timeout [ 588.978815][T10433] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.024763][ T8483] usb 2-1: USB disconnect, device number 18 [ 589.071763][T10433] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.442529][T10433] device bridge_slave_0 entered promiscuous mode [ 589.630464][T10433] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.640979][T10433] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.675822][T10433] device bridge_slave_1 entered promiscuous mode [ 590.691331][T10433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.794266][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 590.999409][T10433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.188478][ T8483] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 591.305953][T10541] loop4: detected capacity change from 0 to 128 [ 591.396679][T10433] team0: Port device team_slave_0 added [ 591.406096][T10433] team0: Port device team_slave_1 added [ 591.496705][T10433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.508353][T10433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.576203][T10433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.604019][ T8483] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 591.631084][ T8483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.671474][ T8483] usb 2-1: config 0 descriptor?? [ 591.703014][T10433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.716942][T10433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.826051][T10433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.946271][T10433] device hsr_slave_0 entered promiscuous mode [ 591.956879][T10433] device hsr_slave_1 entered promiscuous mode [ 592.202807][ T3942] device hsr_slave_0 left promiscuous mode [ 592.215017][ T3942] device hsr_slave_1 left promiscuous mode [ 592.243518][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.266146][ T3942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.288718][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.337116][ T3942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.357396][ T3942] device bridge_slave_1 left promiscuous mode [ 592.365761][T10573] loop3: detected capacity change from 0 to 256 [ 592.366281][ T3942] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.409106][ T3942] device bridge_slave_0 left promiscuous mode [ 592.424027][T10573] exfat: Unknown parameter 'S9_S{>9{{11~{; Rj: Sw' [ 592.432852][ T3942] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.499059][ T3942] device veth1_macvtap left promiscuous mode [ 592.527068][ T3942] device veth0_macvtap left promiscuous mode [ 592.558066][ T3942] device veth1_vlan left promiscuous mode [ 592.575676][ T3942] device veth0_vlan left promiscuous mode [ 592.598762][T10578] loop3: detected capacity change from 0 to 16 [ 592.766448][T10231] Bluetooth: hci3: command 0x0419 tx timeout [ 593.124369][T10562] loop4: detected capacity change from 0 to 32768 [ 593.189650][T10562] XFS: attr2 mount option is deprecated. [ 593.200684][T10562] XFS: ikeep mount option is deprecated. [ 593.283807][T10582] loop2: detected capacity change from 0 to 1024 [ 593.408635][ T3942] team0 (unregistering): Port device team_slave_1 removed [ 593.429714][ T3942] team0 (unregistering): Port device team_slave_0 removed [ 593.453480][ T3942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.510809][ T3942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.546355][T10582] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 593.565757][T10582] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038 (0x7fffffff) [ 594.197500][T10562] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 594.303801][ T3942] bond0 (unregistering): Released all slaves [ 594.644035][ T8483] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 594.909834][ T8483] asix: probe of 2-1:0.0 failed with error -71 [ 595.227105][T10231] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 595.254399][ T8483] usb 2-1: USB disconnect, device number 19 [ 595.403030][ T26] audit: type=1326 audit(1724385740.361:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80943b7e79 code=0x7ffc0000 [ 595.511925][T10603] loop1: detected capacity change from 0 to 512 [ 595.563125][T10604] loop2: detected capacity change from 0 to 512 [ 595.571660][ T26] audit: type=1326 audit(1724385740.361:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80943b7e79 code=0x7ffc0000 [ 595.663403][T10231] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 595.768923][ T26] audit: type=1326 audit(1724385740.361:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f80943b7e79 code=0x7ffc0000 [ 595.848796][ T26] audit: type=1326 audit(1724385740.361:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80943b7e79 code=0x7ffc0000 [ 595.875456][ T26] audit: type=1326 audit(1724385740.361:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80943b7e79 code=0x7ffc0000 [ 595.898485][T10231] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 595.910462][T10604] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 595.918076][T10231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.937460][T10604] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038 (0x7fffffff) [ 596.013735][ T26] audit: type=1326 audit(1724385740.361:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f80943b7e79 code=0x7ffc0000 [ 596.037842][ T26] audit: type=1326 audit(1724385740.361:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80943b7e79 code=0x7ffc0000 [ 596.184470][ T26] audit: type=1326 audit(1724385740.361:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80943b7e79 code=0x7ffc0000 [ 596.228659][T10613] loop4: detected capacity change from 0 to 40427 [ 596.236658][T10231] usb 4-1: Product: syz [ 596.240855][T10231] usb 4-1: Manufacturer: syz [ 596.245546][T10231] usb 4-1: SerialNumber: syz [ 596.255626][T10231] usb 4-1: config 0 descriptor?? [ 596.260876][ T26] audit: type=1326 audit(1724385740.361:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f80943b7e79 code=0x7ffc0000 [ 596.283656][T10592] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 596.312861][T10613] F2FS-fs (loop4): invalid crc value [ 596.319383][ T26] audit: type=1326 audit(1724385740.361:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80943b7e79 code=0x7ffc0000 [ 596.453700][T10613] F2FS-fs (loop4): Found nat_bits in checkpoint [ 596.502203][T10613] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 596.622914][ C1] vkms_vblank_simulate: vblank timer overrun [ 596.702395][T10231] usb 4-1: USB disconnect, device number 18 [ 597.154069][T10639] udevd[10639]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.344936][ T8805] attempt to access beyond end of device [ 597.344936][ T8805] loop4: rw=2051, want=45064, limit=40427 [ 597.356990][ T8805] attempt to access beyond end of device [ 597.356990][ T8805] loop4: rw=2051, want=131072, limit=40427 [ 597.384155][ T8805] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 597.384201][ T8805] F2FS-fs (loop4): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 597.410058][T10633] netlink: 'syz.1.1529': attribute type 10 has an invalid length. [ 597.434077][T10633] device hsr0 entered promiscuous mode [ 597.452933][T10633] : (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 597.466445][T10633] : (slave hsr0): The slave device specified does not support setting the MAC address [ 597.477108][T10633] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 597.489826][T10633] : (slave hsr0): Error -22 calling dev_set_mtu [ 597.754795][T10648] loop3: detected capacity change from 0 to 256 [ 598.648739][T10433] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 598.674307][T10433] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 598.740594][T10433] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 598.806449][T10433] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 598.835903][T10663] loop4: detected capacity change from 0 to 512 [ 598.943225][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.949547][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.969611][T10663] EXT4-fs (loop4): Unrecognized mount option "hash" or missing value [ 599.022176][T10667] loop1: detected capacity change from 0 to 128 [ 599.145753][T10433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.263096][T10433] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.263532][T10667] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 599.312526][T10667] ext4 filesystem being mounted at /255/mnt supports timestamps until 2038 (0x7fffffff) [ 599.332132][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 599.340017][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 599.477583][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 599.503716][T10667] syz.1.1536 (pid 10667) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 599.548143][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 599.610284][ T3941] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.617439][ T3941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.695401][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 599.748527][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 599.793976][ T3941] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.801187][ T3941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.248564][T10667] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 600.380410][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 600.421815][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 600.476034][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 600.514145][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 600.592164][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 600.680290][T10433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 600.728649][T10433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.785459][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 600.807099][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 600.836750][ C1] eth0: bad gso: type: 1, size: 1408 [ 600.870440][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 600.899683][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 600.943437][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 600.984849][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.033627][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.061898][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 601.101427][T10713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1545'. [ 601.320461][T10718] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.1547'. [ 601.643904][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'. [ 602.340404][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.424939][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 602.706738][T10433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.859520][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 602.905881][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 603.050970][T10755] loop4: detected capacity change from 0 to 256 [ 603.181616][T10755] exfat: Unknown parameter 'S9_S{>9{{11~{; Rj: Sw' [ 603.626006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 603.655524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 603.727837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 603.868508][T10755] loop4: detected capacity change from 0 to 16 [ 604.067165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 604.264413][T10433] device veth0_vlan entered promiscuous mode [ 604.689365][T10433] device veth1_vlan entered promiscuous mode [ 604.720194][T10769] loop3: detected capacity change from 0 to 64 [ 604.779398][T10770] loop1: detected capacity change from 0 to 512 [ 604.859046][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 604.905103][T10755] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 604.927836][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 604.966512][T10433] device veth0_macvtap entered promiscuous mode [ 605.007647][T10433] device veth1_macvtap entered promiscuous mode [ 605.036196][T10770] EXT4-fs (loop1): Invalid log block size: 8388352 [ 605.129713][T10433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.197169][T10433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.230707][T10433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.245113][T10433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.248880][ T4550] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 605.265216][T10433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.279244][T10783] loop4: detected capacity change from 0 to 512 [ 605.288445][T10433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.308425][T10433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.340491][T10433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.355329][T10433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.370493][T10781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1556'. [ 605.382404][ T3669] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 605.435846][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 605.444916][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 605.458580][T10783] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1556: bad orphan inode 15 [ 605.458757][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 605.478048][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 605.478078][T10783] ext4_test_bit(bit=14, block=5) = 0 [ 605.488898][T10433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.502718][T10433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.514631][T10433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.525509][T10433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.535361][T10433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.540235][T10783] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 605.545809][T10433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.545836][T10433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.545849][T10433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.545869][T10433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.571639][ T4550] usb 4-1: Using ep0 maxpacket: 32 [ 605.601501][ T3669] usb 2-1: device descriptor read/64, error -71 [ 605.629804][T10433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.640008][T10781] EXT4-fs error (device loop4): __ext4_new_inode:1072: comm syz.4.1556: reserved inode found cleared - inode=1 [ 605.653591][T10433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.674774][T10786] netlink: 'syz.2.1557': attribute type 9 has an invalid length. [ 605.715969][ T4550] usb 4-1: config 7 has an invalid interface number: 231 but max is 3 [ 605.750480][T10783] cgroup: No subsys list or none specified [ 605.753915][ T4550] usb 4-1: config 7 has an invalid interface number: 71 but max is 3 [ 605.791876][ T4550] usb 4-1: config 7 has an invalid interface number: 255 but max is 3 [ 605.815324][T10433] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.826470][ T4550] usb 4-1: config 7 has an invalid interface number: 218 but max is 3 [ 605.828813][T10433] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.854782][ T4550] usb 4-1: config 7 has no interface number 0 [ 605.855900][T10433] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.868331][ T4550] usb 4-1: config 7 has no interface number 1 [ 605.891232][T10433] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.899931][ T4550] usb 4-1: config 7 has no interface number 2 [ 605.899956][ T4550] usb 4-1: config 7 has no interface number 3 [ 605.900005][ T4550] usb 4-1: config 7 interface 231 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 605.900026][ T4550] usb 4-1: config 7 interface 231 altsetting 0 endpoint 0xC has an invalid bInterval 217, changing to 11 [ 605.900057][ T4550] usb 4-1: config 7 interface 231 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 605.900076][ T4550] usb 4-1: config 7 interface 231 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 605.944086][ T3669] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 605.971153][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 605.994871][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 606.049650][ T4550] usb 4-1: config 7 interface 231 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 606.066374][ T4550] usb 4-1: config 7 interface 231 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 606.083998][ T4550] usb 4-1: config 7 interface 231 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 606.095220][ T4550] usb 4-1: config 7 interface 231 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 606.112297][ T4550] usb 4-1: config 7 interface 231 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 606.123063][ T4550] usb 4-1: config 7 interface 231 altsetting 0 endpoint 0xA has invalid maxpacket 1056, setting to 64 [ 606.140884][ T4550] usb 4-1: config 7 interface 231 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 606.151955][ T4550] usb 4-1: config 7 interface 231 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 606.163661][ T3669] usb 2-1: device descriptor read/64, error -71 [ 606.189987][ T4550] usb 4-1: config 7 interface 231 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 606.201323][ T4550] usb 4-1: config 7 interface 71 altsetting 241 has a duplicate endpoint with address 0x4, skipping [ 606.212578][ T4550] usb 4-1: config 7 interface 71 altsetting 241 has an invalid endpoint with address 0x0, skipping [ 606.223677][ T4550] usb 4-1: config 7 interface 71 altsetting 241 has a duplicate endpoint with address 0xC, skipping [ 606.234823][ T4550] usb 4-1: config 7 interface 71 altsetting 241 has a duplicate endpoint with address 0xD, skipping [ 606.250916][ T4550] usb 4-1: config 7 interface 255 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 606.262793][ T4550] usb 4-1: config 7 interface 255 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 606.273619][ T4550] usb 4-1: config 7 interface 255 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 606.284430][ T4550] usb 4-1: config 7 interface 255 altsetting 8 has an invalid endpoint with address 0x56, skipping [ 606.287230][ T3669] usb usb2-port1: attempt power cycle [ 606.295287][ T4550] usb 4-1: config 7 interface 255 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 606.313089][ T4550] usb 4-1: config 7 interface 255 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 606.334056][ T4550] usb 4-1: config 7 interface 255 altsetting 8 has a duplicate endpoint with address 0x8E, skipping [ 606.345271][ T4550] usb 4-1: config 7 interface 255 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 606.363568][ T4550] usb 4-1: config 7 interface 255 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 606.377050][ T4550] usb 4-1: config 7 interface 255 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 606.387890][ T4550] usb 4-1: config 7 interface 255 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 606.400317][ T4550] usb 4-1: config 7 interface 255 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 606.411701][ T4550] usb 4-1: config 7 interface 255 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 606.422491][ T4550] usb 4-1: config 7 interface 255 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 606.435797][ T4550] usb 4-1: config 7 interface 218 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 606.447223][ T4550] usb 4-1: config 7 interface 71 has no altsetting 0 [ 606.454021][ T4550] usb 4-1: config 7 interface 255 has no altsetting 0 [ 606.460918][ T4550] usb 4-1: config 7 interface 218 has no altsetting 0 [ 606.627388][ T3650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.675148][ T4550] usb 4-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=71.c0 [ 606.686766][ T3650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.700825][ T4550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.715902][ T3669] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 606.738815][ T4550] usb 4-1: Product: syz [ 606.743217][ T4550] usb 4-1: Manufacturer: 㖙䲠᫲ꄳﰍ⡞䜷뗿Ꭓៀ栔ጲ쌓냵ᑻ随釾똻尀尿泵䛏啓렳鵿碻䙀㬓箧繳딅뎛౦嘠䤖Ꟶ됆嬴ㅡ쭩涪᳚詙㪼䍸퓙燆㺚ⷜ艘輞뇊葊ꮰ뼚薣羧뱎ꁭ深診甇렱꿭湓딩웆鴧Ꞿ銐ḛꗫ軠韸ᣁ [ 606.774211][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.792213][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 606.800894][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.832372][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 606.869766][ T3669] usb 2-1: device descriptor read/8, error -71 [ 606.885223][ T4550] usb 4-1: SerialNumber: syz [ 606.939555][T10769] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 607.208464][ T7302] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 607.352488][ T4550] keyspan 4-1:7.231: Keyspan 4 port adapter converter detected [ 607.407448][ T4550] keyspan 4-1:7.231: found no endpoint descriptor for endpoint 87 [ 607.506984][ T7302] usb 5-1: Using ep0 maxpacket: 16 [ 607.537663][ T4550] keyspan 4-1:7.231: unsupported endpoint type 0 [ 607.621820][ T7302] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 607.703937][ T3669] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 607.735984][ T4550] keyspan 4-1:7.231: found no endpoint descriptor for endpoint 81 [ 607.762297][ T4550] keyspan 4-1:7.231: unsupported endpoint type 1 [ 607.769803][ T7302] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 607.783542][ T3669] usb 2-1: device descriptor read/8, error -71 [ 607.785053][ T7302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.798311][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 607.818076][ T4550] keyspan 4-1:7.231: found no endpoint descriptor for endpoint 82 [ 607.917068][ T3669] usb usb2-port1: unable to enumerate USB device [ 607.957138][ T4550] keyspan 4-1:7.231: found no endpoint descriptor for endpoint 2 [ 607.970531][ T7302] usb 5-1: config 0 descriptor?? [ 607.980042][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 607.992015][ T4550] keyspan 4-1:7.231: found no endpoint descriptor for endpoint 83 [ 608.000267][ T4550] keyspan 4-1:7.231: unsupported endpoint type 0 [ 608.011661][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 608.042067][ T7302] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 608.074292][T10838] xt_hashlimit: invalid rate [ 608.418054][T10838] loop1: detected capacity change from 0 to 8192 [ 608.714284][ T4550] keyspan 4-1:7.231: found no endpoint descriptor for endpoint 84 [ 608.728326][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 608.739297][T10838] REISERFS warning (device loop1): jmacd-7 reiserfs_fill_super: resize option for remount only [ 608.780114][T10231] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 609.490401][ T3013] bcm5974 5-1:0.0: could not read from device [ 609.567008][ T4550] keyspan 4-1:7.71: Keyspan 4 port adapter converter detected [ 609.575860][ T4550] keyspan 4-1:7.71: found no endpoint descriptor for endpoint 87 [ 609.594761][ T4550] keyspan 4-1:7.71: found no endpoint descriptor for endpoint 7 [ 609.612094][ T4550] keyspan 4-1:7.71: found no endpoint descriptor for endpoint 81 [ 609.695414][ T4550] keyspan 4-1:7.71: found no endpoint descriptor for endpoint 1 [ 609.725187][T10813] bcm5974 5-1:0.0: could not read from device [ 609.728606][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 609.750500][T10231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.769617][ T7302] usb 5-1: USB disconnect, device number 22 [ 609.770418][T10231] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 609.784767][ T4550] keyspan 4-1:7.71: found no endpoint descriptor for endpoint 82 [ 609.793385][ T3013] bcm5974 5-1:0.0: could not read from device [ 609.820510][T10231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.827726][ T4550] keyspan 4-1:7.71: found no endpoint descriptor for endpoint 2 [ 609.862876][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 609.897560][ T4550] keyspan 4-1:7.71: found no endpoint descriptor for endpoint 83 [ 609.922928][ T4550] keyspan 4-1:7.71: found no endpoint descriptor for endpoint 3 [ 609.948838][T10231] usb 3-1: config 0 descriptor?? [ 609.973911][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 609.991524][ T4550] keyspan 4-1:7.71: found no endpoint descriptor for endpoint 84 [ 610.012285][ T4550] keyspan 4-1:7.71: found no endpoint descriptor for endpoint 4 [ 610.031153][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 610.080100][ T4550] keyspan 4-1:7.255: Keyspan 4 port adapter converter detected [ 610.088044][ T4550] keyspan 4-1:7.255: found no endpoint descriptor for endpoint 87 [ 610.096113][ T4550] keyspan 4-1:7.255: found no endpoint descriptor for endpoint 7 [ 610.104919][ T4550] keyspan 4-1:7.255: found no endpoint descriptor for endpoint 81 [ 610.113168][ T4550] keyspan 4-1:7.255: found no endpoint descriptor for endpoint 1 [ 610.122091][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB8 [ 610.131469][ T4550] keyspan 4-1:7.255: found no endpoint descriptor for endpoint 82 [ 610.140133][ T4550] keyspan 4-1:7.255: unsupported endpoint type 0 [ 610.147878][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB9 [ 610.158089][ T4550] keyspan 4-1:7.255: found no endpoint descriptor for endpoint 83 [ 610.166148][ T4550] keyspan 4-1:7.255: found no endpoint descriptor for endpoint 3 [ 610.174703][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB10 [ 610.184071][ T4550] keyspan 4-1:7.255: found no endpoint descriptor for endpoint 84 [ 610.194199][ T4550] keyspan 4-1:7.255: found no endpoint descriptor for endpoint 4 [ 610.202671][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB11 [ 610.253800][ T4550] keyspan 4-1:7.218: Keyspan 4 port adapter converter detected [ 610.264208][ T4550] keyspan 4-1:7.218: found no endpoint descriptor for endpoint 87 [ 610.272748][ T4550] keyspan 4-1:7.218: found no endpoint descriptor for endpoint 7 [ 610.282152][ T4550] keyspan 4-1:7.218: found no endpoint descriptor for endpoint 81 [ 610.290628][ T4550] keyspan 4-1:7.218: found no endpoint descriptor for endpoint 1 [ 610.295126][T10864] binder: 10863:10864 ioctl 4018620d 0 returned -22 [ 610.299890][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB12 [ 610.315372][ T4550] keyspan 4-1:7.218: found no endpoint descriptor for endpoint 82 [ 610.324489][T10864] loop1: detected capacity change from 0 to 8 [ 610.330834][ T4550] keyspan 4-1:7.218: found no endpoint descriptor for endpoint 2 [ 610.350012][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB13 [ 610.361515][ T4550] keyspan 4-1:7.218: found no endpoint descriptor for endpoint 83 [ 610.369963][ T4550] keyspan 4-1:7.218: found no endpoint descriptor for endpoint 3 [ 610.399033][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB14 [ 610.425183][T10231] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 610.441604][T10231] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 610.449619][ T4550] keyspan 4-1:7.218: found no endpoint descriptor for endpoint 84 [ 610.457538][T10231] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 610.457569][T10231] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 610.457590][T10231] corsair 0003:1B1C:1B3E.0012: unknown main item tag 0x0 [ 610.467415][T10231] corsair 0003:1B1C:1B3E.0012: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 610.497077][ T4550] keyspan 4-1:7.218: found no endpoint descriptor for endpoint 4 [ 610.693336][ T4550] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB15 [ 610.722303][ T4550] usb 4-1: USB disconnect, device number 19 [ 610.871335][ T4550] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 610.959203][ T4550] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 611.117338][ T2724] usb 3-1: USB disconnect, device number 20 [ 611.126095][ T4550] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 611.214282][ T3669] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 611.301238][ C1] eth0: bad gso: type: 1, size: 1408 [ 611.352047][ T4550] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 611.424135][ T4550] keyspan 4-1:7.231: device disconnected [ 611.470869][ T3669] usb 2-1: Using ep0 maxpacket: 8 [ 611.623337][ T3669] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 611.627985][ T7302] Bluetooth: hci3: command 0x0411 tx timeout [ 611.646233][ T4550] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 611.669215][T10884] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1572'. [ 611.678981][ T3669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.681468][T10884] afs: Unknown parameter '00000000000000000000011' [ 611.820587][ T4550] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 611.927112][ T4550] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 612.178255][ T3669] usb 2-1: config 0 descriptor?? [ 612.208391][ T4550] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 612.225809][ T4550] keyspan 4-1:7.71: device disconnected [ 612.236407][ T4550] keyspan_4 ttyUSB8: Keyspan 4 port adapter converter now disconnected from ttyUSB8 [ 612.303556][ T4550] keyspan_4 ttyUSB9: Keyspan 4 port adapter converter now disconnected from ttyUSB9 [ 612.319564][ T4550] keyspan_4 ttyUSB10: Keyspan 4 port adapter converter now disconnected from ttyUSB10 [ 612.331700][ T4550] keyspan_4 ttyUSB11: Keyspan 4 port adapter converter now disconnected from ttyUSB11 [ 612.341810][ T4550] keyspan 4-1:7.255: device disconnected [ 612.350476][ T4550] keyspan_4 ttyUSB12: Keyspan 4 port adapter converter now disconnected from ttyUSB12 [ 612.363995][ T4550] keyspan_4 ttyUSB13: Keyspan 4 port adapter converter now disconnected from ttyUSB13 [ 612.376322][ T4550] keyspan_4 ttyUSB14: Keyspan 4 port adapter converter now disconnected from ttyUSB14 [ 612.413459][T10896] netlink: 'syz.3.1575': attribute type 2 has an invalid length. [ 612.421744][ T4550] keyspan_4 ttyUSB15: Keyspan 4 port adapter converter now disconnected from ttyUSB15 [ 612.458505][ T4550] keyspan 4-1:7.218: device disconnected [ 612.509140][T10898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1575'. [ 613.289188][ T3669] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 613.305623][ T3669] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 613.347254][T10918] loop0: detected capacity change from 0 to 256 [ 613.356286][ T3669] asix: probe of 2-1:0.0 failed with error -71 [ 613.375669][ T3669] usb 2-1: USB disconnect, device number 24 [ 613.519646][T10918] exfat: Unknown parameter 'S9_S{>9{{11~{; Rj: Sw' [ 613.529378][ T4550] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 614.139959][T10924] loop0: detected capacity change from 0 to 16 [ 614.370326][ T3691] tipc: Left network mode [ 614.376770][T10930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1582'. [ 615.014965][T10930] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1582'. [ 615.053224][T10930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1582'. [ 615.091215][ T4550] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 615.096593][T10918] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 615.112144][ T4550] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 615.143611][ T4550] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 615.153667][ T4550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.217795][T10917] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 615.308856][ T3691] batman_adv: batadv0: Removing interface: ip6gretap1 [ 616.120491][ T7302] usb 4-1: USB disconnect, device number 20 [ 616.208522][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 616.208537][ T26] audit: type=1326 audit(1724385762.201:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 616.279341][T10952] loop3: detected capacity change from 0 to 512 [ 616.334273][T10958] netlink: 'syz.2.1589': attribute type 2 has an invalid length. [ 616.349451][ T26] audit: type=1326 audit(1724385762.201:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 616.499480][T10958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1589'. [ 616.657396][ T26] audit: type=1326 audit(1724385762.201:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 617.029698][T10876] udevd[10876]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.051327][ T26] audit: type=1326 audit(1724385762.201:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 617.206666][ T26] audit: type=1326 audit(1724385762.201:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 620.053202][ T26] audit: type=1326 audit(1724385762.222:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 620.075504][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.170003][ T26] audit: type=1326 audit(1724385762.222:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 620.219850][ T26] audit: type=1326 audit(1724385762.222:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 620.354196][ T26] audit: type=1326 audit(1724385762.222:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 620.376461][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.382852][ T26] audit: type=1326 audit(1724385762.222:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 620.405172][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.156291][ T26] audit: type=1326 audit(1724385762.222:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 621.189606][ T26] audit: type=1326 audit(1724385762.222:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 621.221807][ T26] audit: type=1326 audit(1724385762.222:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 621.294656][T10993] device vlan2 entered promiscuous mode [ 621.310674][ T26] audit: type=1326 audit(1724385762.222:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 621.368479][ T26] audit: type=1326 audit(1724385762.222:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 621.398180][T10999] netlink: 'syz.4.1602': attribute type 4 has an invalid length. [ 621.400169][ T26] audit: type=1326 audit(1724385762.222:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 621.412609][T10999] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1602'. [ 621.435450][ T26] audit: type=1326 audit(1724385762.222:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 621.464397][ T26] audit: type=1326 audit(1724385762.222:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 621.471560][T10999] ipt_REJECT: ECHOREPLY no longer supported. [ 621.508878][ T3691] IPVS: stopping backup sync thread 7671 ... [ 621.520010][ T26] audit: type=1326 audit(1724385762.222:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 621.557414][ T26] audit: type=1326 audit(1724385762.222:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.3.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f073e79 code=0x7ffc0000 [ 621.613066][ T3691] team0: Port device CTY< removed [ 621.627436][ T3611] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 623.706458][ T3611] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 623.757583][ T3611] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 623.967751][ T3611] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 624.370196][ T3611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.399589][ T3691] device hsr_slave_0 left promiscuous mode [ 624.415441][ T3691] device hsr_slave_1 left promiscuous mode [ 624.429412][ T3611] usb 3-1: can't set config #27, error -71 [ 624.439817][ T3611] usb 3-1: USB disconnect, device number 21 [ 624.473940][T11042] loop0: detected capacity change from 0 to 2048 [ 624.550122][T11042] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 624.633292][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.646044][T11042] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 624.678890][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.689399][T11042] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 624.703931][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.716472][T11042] UDF-fs: Scanning with blocksize 512 failed [ 624.718570][T11041] loop1: detected capacity change from 0 to 40427 [ 624.722863][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.744140][ T3691] device bridge_slave_1 left promiscuous mode [ 624.745705][T11042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 624.750397][ T3691] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.771348][ T3691] device bridge_slave_0 left promiscuous mode [ 624.791189][T11041] F2FS-fs (loop1): invalid crc value [ 624.805497][ T3691] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.884003][ T3691] device veth1_macvtap left promiscuous mode [ 624.894781][ T3691] device veth0_macvtap left promiscuous mode [ 624.905018][ T3691] device veth1_vlan left promiscuous mode [ 624.915021][ T3691] device veth0_vlan left promiscuous mode [ 624.984885][T11041] F2FS-fs (loop1): Found nat_bits in checkpoint [ 625.491388][T11041] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 625.568735][ T3691] bond1 (unregistering): Released all slaves [ 625.925979][ T3581] Bluetooth: hci3: link tx timeout [ 625.935683][ T3581] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 626.277012][ T3691] team0 (unregistering): Port device team_slave_1 removed [ 626.323925][ T3691] team0 (unregistering): Port device team_slave_0 removed [ 626.335223][ T5082] attempt to access beyond end of device [ 626.335223][ T5082] loop1: rw=2051, want=45064, limit=40427 [ 626.359424][ T3691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.379203][ T5082] attempt to access beyond end of device [ 626.379203][ T5082] loop1: rw=2051, want=131072, limit=40427 [ 626.396300][ T3691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.428784][ T5082] F2FS-fs (loop1): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 626.428828][ T5082] F2FS-fs (loop1): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 626.442844][T11058] delete_channel: no stack [ 626.669812][ T3691] bond0 (unregistering): Released all slaves [ 626.857386][T11076] Cannot find add_set index 0 as target [ 627.163377][T11036] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.400621][T11086] netlink: 'syz.1.1620': attribute type 2 has an invalid length. [ 627.566930][T11086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1620'. [ 628.708933][T11097] binder: 11087:11097 ioctl 4018620d 0 returned -22 [ 629.081453][T11104] loop1: detected capacity change from 0 to 16 [ 629.103903][ T3669] Bluetooth: hci3: command 0x0406 tx timeout [ 629.133710][T11104] erofs: (device loop1): mounted with root inode @ nid 36. [ 629.170944][T11104] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 629.225583][ T6141] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 629.274880][T11104] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -5 in[46, 4050] out[1851] [ 629.294201][T11104] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 629.371614][T11107] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 629.434405][T11107] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -5 in[46, 4050] out[1851] [ 629.453179][T11107] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 630.004009][T11119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.154473][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.927287][ T6141] usb 4-1: device descriptor read/all, error -71 [ 632.105588][T11148] loop3: detected capacity change from 0 to 1024 [ 632.860036][T11148] EXT4-fs (loop3): Test dummy encryption mode enabled [ 632.976809][T11148] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 633.002739][ C1] vkms_vblank_simulate: vblank timer overrun [ 633.601444][ C1] vkms_vblank_simulate: vblank timer overrun [ 633.621766][T11160] netlink: 664 bytes leftover after parsing attributes in process `syz.2.1638'. [ 633.633640][T11162] loop1: detected capacity change from 0 to 1 [ 633.682044][T11162] attempt to access beyond end of device [ 633.682044][T11162] loop1: rw=2048, want=8, limit=1 [ 633.729816][T11162] SQUASHFS error: Failed to read block 0x0: -5 [ 633.746485][T11162] unable to read squashfs_super_block [ 633.779932][T11168] binder: 11163:11168 ioctl 4018620d 0 returned -22 [ 633.815388][T11167] netlink: 'syz.0.1641': attribute type 1 has an invalid length. [ 633.830994][T11168] loop3: detected capacity change from 0 to 8 [ 633.915454][T11170] loop2: detected capacity change from 0 to 64 [ 634.765181][T11170] MINIX-fs: bad superblock [ 635.062169][ T7302] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 635.386447][ T7302] usb 4-1: Using ep0 maxpacket: 8 [ 635.501136][ T7302] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 635.532154][ T7302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.580937][ T7302] usb 4-1: config 0 descriptor?? [ 635.605417][ T7303] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 635.834197][ T7303] usb 2-1: Using ep0 maxpacket: 8 [ 635.921621][T11193] loop4: detected capacity change from 0 to 64 [ 635.947200][T11177] loop0: detected capacity change from 0 to 32768 [ 635.958024][ T7303] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 636.002291][ T7303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.022590][ T7303] usb 2-1: config 0 descriptor?? [ 636.052241][T11177] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1643 (11177) [ 636.244486][T11177] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 636.272995][T11177] BTRFS info (device loop0): force clearing of disk cache [ 636.404804][T11195] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1649'. [ 636.429356][T11177] BTRFS info (device loop0): turning off barriers [ 636.454448][T11177] BTRFS error (device loop0): support for check_integrity* not compiled in! [ 636.912183][ T7302] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 636.944421][ T8805] hfs: node 4:3 still has 1 user(s)! [ 636.949734][T11177] BTRFS error (device loop0): open_ctree failed [ 636.966874][ T7302] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 637.008054][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 637.008071][ T26] audit: type=1400 audit(1724385784.021:327): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11200 comm="syz.2.1651" [ 637.067880][ T7302] asix: probe of 4-1:0.0 failed with error -71 [ 637.523221][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'. [ 637.531408][ T7302] usb 4-1: USB disconnect, device number 23 [ 637.572161][T11187] device dummy0 entered promiscuous mode [ 637.613091][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'. [ 637.680705][T11207] device dummy0 left promiscuous mode [ 637.709403][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 637.750789][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1652'. [ 637.761350][ T7303] usb 2-1: USB disconnect, device number 25 [ 637.782410][T11213] device geneve2 entered promiscuous mode [ 637.966263][T11220] loop3: detected capacity change from 0 to 2048 [ 638.043429][T11223] loop0: detected capacity change from 0 to 64 [ 638.090953][T11222] loop4: detected capacity change from 0 to 512 [ 638.116130][T11220] loop3: p1 < > p4 [ 638.338164][T11220] loop3: p4 size 8388608 extends beyond EOD, truncated [ 638.685312][T11222] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 638.699545][T11222] EXT4-fs (loop4): orphan cleanup on readonly fs [ 638.700058][T11222] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 638.700087][T11222] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 638.984227][T11222] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1655: bg 0: block 40: padding at end of block bitmap is not set [ 639.013318][T11222] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 639.055037][T11222] EXT4-fs (loop4): 1 truncate cleaned up [ 639.055325][T11222] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 640.696382][T11245] syz.0.1659[11245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 640.696480][T11245] syz.0.1659[11245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 640.766182][ T3611] Bluetooth: hci3: command 0x1407 tx timeout [ 640.818030][T11251] loop3: detected capacity change from 0 to 2048 [ 641.048672][T11251] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 641.066704][T11261] loop4: detected capacity change from 0 to 512 [ 641.085045][T11251] ext4 filesystem being mounted at /251/bus supports timestamps until 2038 (0x7fffffff) [ 641.092944][T11261] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 641.194332][T11261] EXT4-fs (loop4): 1 truncate cleaned up [ 641.215767][T11261] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 641.245933][ T7303] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 641.328347][T11272] loop1: detected capacity change from 0 to 128 [ 641.416861][T11272] VFS: unable to find oldfs superblock on device loop1 [ 641.474645][ T7303] usb 3-1: Using ep0 maxpacket: 8 [ 641.501972][T11261] team0 (unregistering): Port device team_slave_0 removed [ 641.586299][T11272] loop1: detected capacity change from 0 to 512 [ 641.594948][T11261] team0 (unregistering): Port device team_slave_1 removed [ 641.732719][T11272] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 641.740650][T11272] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 641.751012][ T7303] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 641.760694][ T7303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.769679][ T7303] usb 3-1: Product: syz [ 641.780429][ T7303] usb 3-1: Manufacturer: syz [ 641.785293][ T7303] usb 3-1: SerialNumber: syz [ 641.794337][ T7303] usb 3-1: config 0 descriptor?? [ 641.884417][T11272] System zones: 0-1, 15-15, 18-18, 34-34 [ 641.896531][T11272] EXT4-fs (loop1): orphan cleanup on readonly fs [ 641.913642][T11272] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 641.970875][T11272] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 642.009521][T11272] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 642.042937][T11272] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1666: bad orphan inode 16 [ 642.059322][ T7303] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 642.074101][T11281] loop3: detected capacity change from 0 to 512 [ 642.115536][T11272] ext4_test_bit(bit=15, block=18) = 1 [ 642.141671][T11272] is_bad_inode(inode)=0 [ 642.182594][T11272] NEXT_ORPHAN(inode)=0 [ 642.186840][T11272] max_ino=32 [ 642.190367][T11272] i_nlink=2 [ 642.193560][T11272] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 642.217044][T11272] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 642.325265][T11281] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 642.361706][T11281] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 642.422321][T11294] autofs4:pid:11294:autofs_fill_super: called with bogus options [ 642.549266][T11281] EXT4-fs (loop3): 1 truncate cleaned up [ 642.714169][T11281] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 642.908362][T11297] loop1: detected capacity change from 0 to 16 [ 643.023775][T11297] erofs: (device loop1): mounted with root inode @ nid 36. [ 643.031337][ T7303] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 643.046220][ T7303] usb 3-1: USB disconnect, device number 22 [ 643.082980][ T26] audit: type=1800 audit(1724386046.405:328): pid=11297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1671" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 643.125633][T11302] netlink: 'syz.4.1675': attribute type 3 has an invalid length. [ 643.222942][T11306] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 643.405747][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 644.060029][T11315] loop3: detected capacity change from 0 to 1024 [ 644.098654][ T26] audit: type=1326 audit(1724386047.475:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1eab0e79 code=0x7ffc0000 [ 644.150156][T11315] EXT4-fs (loop3): Test dummy encryption mode enabled [ 644.181091][ T7302] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 644.188883][T11315] EXT4-fs (loop3): Ignoring removed orlov option [ 644.231287][T11315] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 644.243901][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 644.286101][ T26] audit: type=1326 audit(1724386047.475:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf1eab0e79 code=0x7ffc0000 [ 644.341021][T11329] loop4: detected capacity change from 0 to 64 [ 644.381128][ T26] audit: type=1326 audit(1724386047.475:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1eab0e79 code=0x7ffc0000 [ 644.434434][ T26] audit: type=1326 audit(1724386047.475:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1eab0e79 code=0x7ffc0000 [ 644.463049][ T26] audit: type=1326 audit(1724386047.475:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf1eab0e79 code=0x7ffc0000 [ 644.485418][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.492301][ T26] audit: type=1326 audit(1724386047.475:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1eab0e79 code=0x7ffc0000 [ 644.514678][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.521371][ T26] audit: type=1326 audit(1724386047.475:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1eab0e79 code=0x7ffc0000 [ 644.543889][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.551065][ T26] audit: type=1326 audit(1724386047.475:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf1eaaf810 code=0x7ffc0000 [ 644.700072][ T7302] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=f0.a0 [ 644.712130][ T7302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.729312][ T3669] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 644.733369][ T7302] usb 2-1: config 0 descriptor?? [ 644.776476][ T7302] kl5kusb105 2-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 644.786005][ T7302] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 645.425241][ T3669] usb 3-1: Using ep0 maxpacket: 32 [ 645.658108][ T3669] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 645.673596][ T3669] usb 3-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.689309][ T3669] usb 3-1: config 1 interface 0 has no altsetting 0 [ 645.877198][ T3669] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 645.890991][ T3669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.902452][ T3669] usb 3-1: Product: syz [ 645.911001][ T3669] usb 3-1: Manufacturer: syz [ 645.918391][ T3669] usb 3-1: SerialNumber: syz [ 645.982246][T11330] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 645.994438][T11330] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 646.195601][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'. [ 646.218436][T11326] netlink: 'syz.2.1683': attribute type 4 has an invalid length. [ 646.379208][ T3669] usb 3-1: USB disconnect, device number 23 [ 646.448022][ T6141] usb 2-1: USB disconnect, device number 26 [ 646.486755][ T6141] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 646.510383][ T6141] kl5kusb105 2-1:0.0: device disconnected [ 745.419966][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 745.426594][ C1] rcu: 1-...!: (1 GPs behind) idle=c45/1/0x4000000000000000 softirq=41763/41764 fqs=482 [ 745.438972][ C1] (t=10500 jiffies g=54377 q=1166) [ 745.444265][ C1] rcu: rcu_preempt kthread starved for 9390 jiffies! g54377 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 745.455345][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 745.465287][ C1] rcu: RCU grace-period kthread stack dump: [ 745.471150][ C1] task:rcu_preempt state:R running task stack:26752 pid: 15 ppid: 2 flags:0x00004000 [ 745.481897][ C1] Call Trace: [ 745.485189][ C1] [ 745.488120][ C1] __schedule+0x12c4/0x45b0 [ 745.492609][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 745.498508][ C1] ? release_firmware_map_entry+0x190/0x190 [ 745.504385][ C1] ? mod_timer_pending+0x20/0x20 [ 745.509303][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 745.514656][ C1] schedule+0x11b/0x1f0 [ 745.518839][ C1] schedule_timeout+0x1b9/0x300 [ 745.523672][ C1] ? console_conditional_schedule+0x40/0x40 [ 745.529540][ C1] ? update_process_times+0x200/0x200 [ 745.534895][ C1] ? prepare_to_swait_event+0x321/0x340 [ 745.540440][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 745.545287][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 745.551419][ C1] ? rcu_gp_init+0x1140/0x1140 [ 745.556182][ C1] ? finish_swait+0xc5/0x1d0 [ 745.560748][ C1] rcu_gp_kthread+0xa4/0x360 [ 745.565338][ C1] ? _raw_spin_unlock+0x40/0x40 [ 745.570171][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 745.575256][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 745.581128][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 745.586127][ C1] kthread+0x3f6/0x4f0 [ 745.590191][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 745.595278][ C1] ? kthread_blkcg+0xd0/0xd0 [ 745.599852][ C1] ret_from_fork+0x1f/0x30 [ 745.604256][ C1] [ 745.607272][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 745.613567][ C1] Sending NMI from CPU 1 to CPUs 0: [ 745.618766][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340 [ 745.619748][ C1] NMI backtrace for cpu 1 [ 745.632718][ C1] CPU: 1 PID: 11333 Comm: syz.4.1684 Not tainted 5.15.165-syzkaller #0 [ 745.640932][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 745.650963][ C1] Call Trace: [ 745.654218][ C1] [ 745.657043][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 745.661702][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 745.667313][ C1] ? panic+0x860/0x860 [ 745.671360][ C1] ? read_lock_is_recursive+0x10/0x10 [ 745.676712][ C1] nmi_cpu_backtrace+0x46a/0x4a0 [ 745.681630][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 745.687759][ C1] ? try_to_wake_up+0x844/0x1300 [ 745.692683][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 745.698123][ C1] ? _raw_spin_lock+0x40/0x40 [ 745.702774][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 745.708816][ C1] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 745.714810][ C1] rcu_dump_cpu_stacks+0x223/0x390 [ 745.719940][ C1] print_cpu_stall+0x320/0x600 [ 745.724706][ C1] rcu_sched_clock_irq+0x8d9/0x1150 [ 745.730054][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 745.734921][ C1] ? hrtimer_run_queues+0x163/0x450 [ 745.740125][ C1] ? account_process_tick+0x232/0x3a0 [ 745.745480][ C1] update_process_times+0x196/0x200 [ 745.750658][ C1] tick_sched_timer+0x386/0x550 [ 745.755483][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 745.761032][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 745.766217][ C1] ? hrtimer_interrupt+0x980/0x980 [ 745.771303][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 745.777481][ C1] hrtimer_interrupt+0x392/0x980 [ 745.782450][ C1] __sysvec_apic_timer_interrupt+0x139/0x470 [ 745.788428][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 745.794056][ C1] [ 745.796965][ C1] [ 745.799872][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 745.805833][ C1] RIP: 0010:unwind_next_frame+0x515/0x1fa0 [ 745.811624][ C1] Code: e9 bc 11 00 00 49 89 fc 49 89 fe 48 89 e8 4c 29 f0 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 46 48 89 d8 <48> c1 e8 03 0f b6 04 10 84 c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 [ 745.831209][ C1] RSP: 0018:ffffc90002f55ec8 EFLAGS: 00000206 [ 745.837258][ C1] RAX: ffffffff8dff0744 RBX: ffffffff8dff0744 RCX: 0000000000000006 [ 745.845208][ C1] RDX: dffffc0000000000 RSI: ffffffff8e6b2dac RDI: ffffffff8dff0738 [ 745.853162][ C1] RBP: ffffffff8dff0750 R08: 0000000000000007 R09: ffffc90002f56070 [ 745.861132][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8dff0738 [ 745.869091][ C1] R13: ffffffff81d4a740 R14: ffffffff8dff0738 R15: ffffc90002f55f80 [ 745.877054][ C1] ? __x64_sys_open+0x220/0x270 [ 745.881895][ C1] ? unwind_next_frame+0xbb/0x1fa0 [ 745.886992][ C1] ? __x64_sys_open+0x221/0x270 [ 745.891830][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 745.896833][ C1] arch_stack_walk+0x10d/0x140 [ 745.901585][ C1] ? __x64_sys_open+0x221/0x270 [ 745.906436][ C1] stack_trace_save+0x113/0x1c0 [ 745.911271][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 745.916386][ C1] ? kmem_cache_free+0x91/0x1f0 [ 745.921214][ C1] kasan_set_track+0x4b/0x80 [ 745.925780][ C1] ? kasan_set_track+0x4b/0x80 [ 745.930520][ C1] ? kasan_set_free_info+0x1f/0x40 [ 745.935604][ C1] ? ____kasan_slab_free+0xd8/0x120 [ 745.940777][ C1] ? slab_free_freelist_hook+0xdd/0x160 [ 745.946301][ C1] ? kmem_cache_free+0x91/0x1f0 [ 745.951128][ C1] ? free_buffer_head+0x45/0xb0 [ 745.955956][ C1] ? try_to_free_buffers+0x464/0x5a0 [ 745.961238][ C1] ? shrink_page_list+0x2dfe/0x7540 [ 745.966413][ C1] ? shrink_lruvec+0x14ae/0x2b90 [ 745.971323][ C1] ? shrink_node+0x10b3/0x26d0 [ 745.976061][ C1] ? do_try_to_free_pages+0x697/0x17b0 [ 745.981499][ C1] ? try_to_free_mem_cgroup_pages+0x44c/0xa60 [ 745.987544][ C1] ? try_charge_memcg+0x4f4/0x1530 [ 745.992636][ C1] ? obj_cgroup_charge_pages+0xab/0x1d0 [ 745.998161][ C1] ? obj_cgroup_charge+0x19e/0x390 [ 746.003248][ C1] ? slab_pre_alloc_hook+0xa6/0xc0 [ 746.008340][ C1] ? kmem_cache_alloc+0x3f/0x280 [ 746.013254][ C1] ? alloc_buffer_head+0x20/0xf0 [ 746.018172][ C1] ? alloc_page_buffers+0x3a3/0x660 [ 746.023353][ C1] ? __getblk_gfp+0x4b4/0xaf0 [ 746.028008][ C1] ? __bread_gfp+0x2a/0x390 [ 746.032490][ C1] ? bfs_find_entry+0x1c3/0x3f0 [ 746.037320][ C1] ? bfs_lookup+0x147/0x270 [ 746.041799][ C1] ? path_openat+0x111d/0x2f20 [ 746.046549][ C1] ? do_filp_open+0x21c/0x460 [ 746.051202][ C1] ? do_sys_openat2+0x13b/0x4f0 [ 746.056048][ C1] ? __x64_sys_open+0x221/0x270 [ 746.060889][ C1] ? kasan_quarantine_put+0xd4/0x220 [ 746.066151][ C1] kasan_set_free_info+0x1f/0x40 [ 746.071068][ C1] ____kasan_slab_free+0xd8/0x120 [ 746.076071][ C1] slab_free_freelist_hook+0xdd/0x160 [ 746.081451][ C1] ? free_buffer_head+0x45/0xb0 [ 746.086293][ C1] kmem_cache_free+0x91/0x1f0 [ 746.090963][ C1] free_buffer_head+0x45/0xb0 [ 746.095622][ C1] try_to_free_buffers+0x464/0x5a0 [ 746.100737][ C1] ? sync_dirty_buffer+0x20/0x20 [ 746.105651][ C1] ? buffer_check_dirty_writeback+0x499/0x5c0 [ 746.111697][ C1] ? try_to_release_page+0x2b7/0x360 [ 746.116961][ C1] shrink_page_list+0x2dfe/0x7540 [ 746.122012][ C1] ? reclaim_clean_pages_from_list+0xc40/0xc40 [ 746.128163][ C1] ? isolate_lru_pages+0x137e/0x1630 [ 746.133461][ C1] ? mark_lock+0x98/0x340 [ 746.137776][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 746.142960][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 746.148138][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 746.153318][ C1] shrink_lruvec+0x14ae/0x2b90 [ 746.158061][ C1] ? rcu_lock_release+0x5/0x20 [ 746.162822][ C1] ? mem_cgroup_shrink_node+0x8e0/0x8e0 [ 746.168357][ C1] ? __might_sleep+0xc0/0xc0 [ 746.172950][ C1] ? mem_cgroup_iter+0x3b4/0x520 [ 746.177868][ C1] shrink_node+0x10b3/0x26d0 [ 746.182463][ C1] do_try_to_free_pages+0x697/0x17b0 [ 746.187741][ C1] ? try_to_free_pages+0xfd0/0xfd0 [ 746.192835][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 746.198824][ C1] try_to_free_mem_cgroup_pages+0x44c/0xa60 [ 746.204698][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 746.209875][ C1] ? shrink_lruvec+0x2b90/0x2b90 [ 746.214819][ C1] ? psi_task_switch+0x810/0x810 [ 746.219737][ C1] ? cgroup_file_notify+0x10d/0x190 [ 746.224918][ C1] try_charge_memcg+0x4f4/0x1530 [ 746.229845][ C1] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 746.235631][ C1] ? rcu_lock_acquire+0x30/0x30 [ 746.240462][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 746.245465][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 746.250476][ C1] obj_cgroup_charge_pages+0xab/0x1d0 [ 746.255833][ C1] ? __memcg_kmem_charge_page+0x3a0/0x3a0 [ 746.261536][ C1] ? rcu_lock_acquire+0x30/0x30 [ 746.266371][ C1] obj_cgroup_charge+0x19e/0x390 [ 746.271295][ C1] ? mod_objcg_mlstate+0x330/0x330 [ 746.276392][ C1] slab_pre_alloc_hook+0xa6/0xc0 [ 746.281343][ C1] ? alloc_buffer_head+0x20/0xf0 [ 746.286264][ C1] kmem_cache_alloc+0x3f/0x280 [ 746.291010][ C1] alloc_buffer_head+0x20/0xf0 [ 746.295754][ C1] alloc_page_buffers+0x3a3/0x660 [ 746.300764][ C1] __getblk_gfp+0x4b4/0xaf0 [ 746.305256][ C1] __bread_gfp+0x2a/0x390 [ 746.309569][ C1] bfs_find_entry+0x1c3/0x3f0 [ 746.314233][ C1] bfs_lookup+0x147/0x270 [ 746.318544][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 746.324165][ C1] ? bfs_readdir+0x440/0x440 [ 746.328739][ C1] ? path_openat+0x100a/0x2f20 [ 746.333500][ C1] ? bfs_readdir+0x440/0x440 [ 746.338085][ C1] path_openat+0x111d/0x2f20 [ 746.342687][ C1] ? do_filp_open+0x460/0x460 [ 746.347349][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 746.352997][ C1] do_filp_open+0x21c/0x460 [ 746.357483][ C1] ? vfs_tmpfile+0x2e0/0x2e0 [ 746.362066][ C1] ? _raw_spin_unlock+0x24/0x40 [ 746.366893][ C1] ? alloc_fd+0x598/0x630 [ 746.371217][ C1] do_sys_openat2+0x13b/0x4f0 [ 746.375900][ C1] ? do_sys_open+0x220/0x220 [ 746.380479][ C1] __x64_sys_open+0x221/0x270 [ 746.385141][ C1] ? do_sys_openat2+0x4f0/0x4f0 [ 746.389976][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 746.395948][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 746.401152][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 746.407130][ C1] do_syscall_64+0x3b/0xb0 [ 746.411530][ C1] ? clear_bhb_loop+0x15/0x70 [ 746.416193][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 746.422067][ C1] RIP: 0033:0x7fc37c5f0e79 [ 746.426466][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.446049][ C1] RSP: 002b:00007fc37aa2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 746.454443][ C1] RAX: ffffffffffffffda RBX: 00007fc37c78d130 RCX: 00007fc37c5f0e79 [ 746.462392][ C1] RDX: 0000000000000000 RSI: 000000000014927e RDI: 0000000020000180 [ 746.470345][ C1] RBP: 00007fc37c65e93e R08: 0000000000000000 R09: 0000000000000000 [ 746.478303][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.486275][ C1] R13: 0000000000000000 R14: 00007fc37c78d130 R15: 00007fff710ef438 [ 746.494265][ C1] [ 746.497301][ C1] vkms_vblank_simulate: vblank timer overrun