last executing test programs: 5m22.483399751s ago: executing program 3 (id=40): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc1400e8034788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m22.258062617s ago: executing program 3 (id=41): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$ITER_CREATE(0xb, &(0x7f00000006c0), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000008c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000a80)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000c40)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 5m22.025187853s ago: executing program 3 (id=43): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)='y', 0x1}, {&(0x7f0000000300)="90", 0x1}], 0x2}}], 0x1, 0x4008845) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)='\"', 0x1}], 0x1}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x7ffff004) 5m21.770265239s ago: executing program 3 (id=45): r0 = syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x400, &(0x7f0000000500)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000540)="$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") r1 = creat(&(0x7f0000000a00)='./bus\x00', 0x182) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount(&(0x7f0000002540)=@loop={'/dev/loop', 0x0}, &(0x7f0000002580)='./bus\x00', 0x0, 0x1084, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='./bus\x00', 0x8840, 0xa2) r3 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f0000002640)='?', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) openat(0xffffffffffffff9c, 0x0, 0x2002, 0xa) fallocate(r1, 0x0, 0x0, 0x2000402) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x44, "5c76276f6c86622447091e9940a5f2781ad01612b415e66ee2f69b275061f3ca96d04070418e9da4558e5466889627a54ee74f275d8be40c5075f649bed3977847c88e80"}}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40) 5m19.443277866s ago: executing program 3 (id=53): syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x0, 0x2}, {0x7}}}}, 0xf) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x4, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043b0aaaaaaaaaaa109ab7c6ea344eacfd6c36b22e02bf9c57c802bbc066b48214d66a5f375555548b4fa8556a6bf32f0096baa1450d0df309cef49f5554968c5a521165bf4d39fc0300000000000000712a4246d8facd539f00831110b6d1b5a43830a48d6284ff80994408d950fe2a1fbfbd63519eeaad2a9a1376541f94eb0f66d3"], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r1, &(0x7f0000002400)={0x2020}, 0x2020) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) 5m18.146808728s ago: executing program 3 (id=58): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(0x0, 0x4) fcntl$setstatus(r1, 0x4, 0x6000) pwrite64(0xffffffffffffffff, &(0x7f0000001080)='2', 0xfdef, 0xfecc) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 5m17.942840693s ago: executing program 32 (id=58): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(0x0, 0x4) fcntl$setstatus(r1, 0x4, 0x6000) pwrite64(0xffffffffffffffff, &(0x7f0000001080)='2', 0xfdef, 0xfecc) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 3m51.053261444s ago: executing program 0 (id=349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004500001400000000"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) set_mempolicy(0x5, 0x0, 0x6) msgsnd(0x0, &(0x7f0000000680)=ANY=[], 0x3f9, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 3m49.493762432s ago: executing program 0 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0xffffffff, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) 3m48.474425867s ago: executing program 0 (id=352): io_uring_enter(0xffffffffffffffff, 0x52e6, 0x4e38, 0xd8, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x40, 0xffffffff) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000800)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000880), 0x651, 0x0) recvmmsg(r1, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x6) r3 = io_uring_setup(0x36c2, &(0x7f0000000940)={0x0, 0xb2d1, 0x1, 0x1, 0x383}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000009c0), 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2818082, &(0x7f00000001c0)={[{@shortname_winnt}, {@uni_xlateno}, {@shortname_win95}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_win95}, {@numtail}, {@uni_xlateno}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@uni_xlate}, {@uni_xlateno}]}, 0x3f, 0x2bd, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m44.166332612s ago: executing program 4 (id=368): r0 = syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, 0x0) write$binfmt_elf32(r1, &(0x7f0000004000)=ANY=[], 0x1358) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000002a00)='environ\x00') syz_mount_image$exfat(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14fe, &(0x7f0000003f80)="$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") fdatasync(r1) 3m43.765554072s ago: executing program 0 (id=369): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000900)={[{@noinit_itable}, {@jqfmt_vfsv1}]}, 0xc1, 0x7eb, &(0x7f0000001fc0)="$eJzs3ctrG9sdAODfyA/ZTlq7UGiTlaHQGkLkOnWTFrpI6aIUGgi06yZGVkxq2QqWHGJjiLModFNoSxeFdpN1H+mi0G0f2/afKHdxSQj3Oubmri66zEjyU1L8loO/D8ZzzsyZOefMOTNzrBmkAC6s8fRPLuJKRPw6iRhtLk8iYiAL9UfcbqR7u7FWTKck6vWffJRkaf5+aXtfSXN+qRn5akT8+xcR13J7cx1uzsulpWZosrbwaLK6snr94cLMXGmutHhzanr6xq1v37q5f6uj+uR/q5df/eaH3/jr7f74yotf/SeJ23G5uW5zY614zN3vMx7jzWMykB7CXX5w0pn1WNLrAnAk6anZ1zjL40qMRl8W6uC4JyAAcC48jYg6AHDBJO7/AHDBtD4H2NxYK7am3n4icbZefz8ihhr1bz3fbKzpbz6zG8qeg45sJruejCQRMXYC+Y9HxB//8bM/p1Mc8jlk4qkbcAzrzyLi/tj45kZ+z/U/Sa9/g+/eQ77jmm9226ze2G58z+KLdv+BXvpnOv75zv7x39WtocVQ9nfP+Gco3+bcPYp3n/+5lx02PcC16d3S8d/3drzbtj3+23ppbayvGftCNuYbSB48LJfSa9sXI2IiBvJpfCpL2n48NvHmszed8t85/vv4tz//U5p/Ot9OkXvZn4964728RlvMztRmTqLuqdfPIq72t6t/sjX+TTqMf+923OvupvnRd3/5h04p0/qn9W1N++t/uurPI77etv232zLp+n7iZNYdJludoo2/ffD7kU75b7d/Ppun+bf+FzgLafuPdK//WBqqrqzOz5TLpaXq4fP47/PRf3Vat7P/t69/1v93Sfv/YPLTLNzqaU9marWlqYjB5Mf7l9/Y3rYVb6VP6z/xtfbnf6f+n2u+G3t/K9Zd/6vBvzR31bb+mfVO9e82wjq+tP6zh2r/VqB1NLaXVOvNbfYkfvF2vq9T/gdr/+ksNNFccpDr386Sdgsc6aABAAAAAAAAAAAAAAAAAAAAAAAAwCHlIuJyJLnCVjiXKxQav+H95RjJlSvV2rUHleXF2ch+K3ssBnKtr7oc3fF9qFPN78NvxW/siX8rIr4UEb/LD2fxQrFSnu115QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dLu3/9/ms4Khca6D/O9Lh0AcGqGel0AAODMuf8DwMVzuPv/8KmVAwA4O4f+/7+enE5BAIAzc+D7//3TLQcAcHY8/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCU3b1zJ53qn26sFdP47OOV5fnK4+uzpep8YWG5WChWlh4V5iqVuXKpUKwsdNzRemNWrlQeTcfi8pPJWqlam6yurN5bqCwv1u49XJiZK90rDZxZzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg4Korq/Mz5XJpSaBLYLg0fB6KcY4C/XEuirEvsP7/gaxfd00cY+9N5x/skiY5ybyG9y7ZeZUY7sm1CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB98HkAAAD//yofFO0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write$cgroup_int(r1, &(0x7f00000000c0)=0x8, 0x12) connect$pppoe(r1, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='\"', 0x1, 0xe7c) 3m42.599194011s ago: executing program 4 (id=374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x99ee, 0x1, 0x0, 0x4001cb, 0x0, r1}, 0x0, 0x0, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000200)={0x0, 0xf0, 0xe, 0x6}, 0x10) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 3m42.478961404s ago: executing program 0 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000340)=""/102392, 0x18ff8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000019340), 0x42, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000019380), 0x2) r4 = memfd_create(&(0x7f00000193c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000019400)={r4, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3m41.664838824s ago: executing program 4 (id=379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x1, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a371039dbee9", 0xfa}], 0x1}, 0x20000885) 3m41.598201576s ago: executing program 0 (id=380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0xfffffffe, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0xc, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x42, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xfff3}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x4, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 3m40.810396785s ago: executing program 33 (id=380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0xfffffffe, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0xc, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x42, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xfff3}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x4, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 3m38.806639814s ago: executing program 4 (id=388): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 3m38.435922483s ago: executing program 4 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x989680}, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x0, 0x1}, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004840), 0x0, 0x40) r4 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x20800) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000200)={0xe09, 0x1, 0x1, 0xf, &(0x7f0000000000)=[{}]}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) 3m37.568674455s ago: executing program 4 (id=393): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) unshare(0x24020400) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 3m36.568532339s ago: executing program 34 (id=393): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) unshare(0x24020400) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 12.417245766s ago: executing program 7 (id=1295): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) sendmmsg$inet(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000017c0)="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", 0x223}], 0x1}}], 0x1, 0x4000840) 11.879755959s ago: executing program 7 (id=1296): setns(0xc9, 0x0) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)={[{@nodiscard}]}, 0x1, 0x97b4, &(0x7f000001c6c0)="$eJzs3QWYZnXhsP9ZdpcuARXBQEBBVFrSoASRUFJQkC6lBFRAUlAEFFAMxABEuru7u7u7u/t/LburuN4gvv/f++LP+76va3fmOXOeM+f5fk7MzJl5nuUWXGq+gYExB4Y3xcCoPTb7Getv8vDig444eaXHp1lkgrlGTB5xh0lH3Jx00Ii3ow0MDIw2Yjkjpo3z4LHHjTYw5M3pf2+cscYeNN7AwMwjbs4z4u3sw99M/NDI+d4YpVFXdNDfbg7aafi/N5tg2KcY9s6se7w478DAwIRvuf+wu8z4Tw9U2nLzLrTg363+5jbMauiI99/6b/Th/ya+Z2Bg4jsHePt467yD3oOHNOxzTnjTdZtP/x587v91LTfvQguP4j9sXxw8Ytrsw/bxUfdBY6Nu5yccdPiTI4bwze1tYGDYIe4f9pX/FS0374KLDrz9cX7g4jlefuKNN4+b4zw5MDDOUwMD4zw9MDDOMwMD4zw7MDDOc++1S/3/a975Zplv2P4+8vYI9pHb8oQjt4sX37JdPD/3J44bGBgYY/g847w+/Hwx7hQjzwlVVVX1n928880yP5z/xxz1/P/Wrwsfvm63Zzr/V1VV/e9t4Xnnm2XYeXyU8/+473T+n2r7oQsN/9n/PLMPv9fr7+2DqKqqqn+rBRfG8/+E73T+X/O2wTt2/q+qqvrf25KLvXn+H3eU8/8k73T+Hzr5eHePmG/k1w2vvWWRb/7+2Ijpr7xl+uC3TH/5LdOHvmU5b51/9LdMf/Et08ccGBjnwRHTX/375HGeHHaff17OOM///fdxJh3ylukvvGX66G+Z/uKIdRo2fYy3TH/tLfOP+ffp4w77b4oRn/eldxjqqqqq/5iWnGXB+Qfe8nv2IyaP/MV+/L3Q899Y+vn3an2rqqqqqqqq6t/v9cdOPv3vf/P90YG3/O3q3/6GdcTPBQYdeeaVV75nK/qf0aB//nnINu/1Ov3/bZjzmAdPMTCw/jLv9arUe9D/mr9Vr/8r5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4t7m+v/f/v5/h4uW+/KIWec8+7DRFvn7PScdWGfEe4/Nfsb667wH6/4e9N96/X9gnUEDAyN8Jxxmufi8Sy497cDAwCKjHXb2bAN/+9gcwz4290SD3/xjzoGBad/8f+ikb7PkEa+y8OaLO0zyt2Uc+ebyF35jn8GDRlmJt/S+4/fbb+3lXph11LfTvP3j+NvrS7ww8X5TjPxbltFGmWnMt7nzyOWPfCyjOo9Y92mHrfsMm6y34Qwbb7b5Z9dZb5W11lhrjfVnmXn2meeYfcY555xlhjXXWXeNGYf//zZjNvylKwa/mzEbd9Qxe2zet47ZqI/t7cbsn1/V4x8W8eYSD5h9ygtHjtmQf3PMBr/zmE2xzohPNOnA0IGV3xyaQQMDkw4ZOrDpsBszjTEwMOnQEfNOOmzez0802sDAbn9/oINGPNno8HkGbTNsnv+w1y2Zc8SIbDlyvlGfZ33UFf1Xr1tyy3wHTjnK65b83+r/6Pz/T15zDPrbQI18AYQR8wz3eo9fZ+Kf1neKIW+e5N5ufd/heXHejLavIXPMsdX/1PPi0PqO+w7r+w7P4/e26zvvKl88cvii/sfWd5Rj3aLDP/hujnUD73ysG0z3X+Oyj4x6rFvk7VfxH/bjkWM0xigzvd2x7sYlTtxm2PIH3vlYt+g6I5484O/HutEGBiYdPPJYN+zAN/rQgd2G3Zh52I0xhg4cOOzGLG/eGGvgzGE3pl9tg3VXH/Tm0wyMWO6Mw5Y7z0SD3nTfZrrpdn9j9zfeGDJiXZ4f5x/XdcT2McVbz+fzTjR8MEfed+Ryh806crkzbj78Y6OPWO4L/8ZyR96X1vfFFYZ/bIwRy31xlOUOfYfljrzvP+0P0w76h19UhePNe/q6RrT/jvkO6/sOz8ON29uwaXttsutl/wPPwz3o7dZ3yDuv79u9bsjbru92e8618//U84bTdnbjNMO3lTFHbGev/Rvb78j7jnocG/5EIMMP+2O+m+PYFP90HNt28GijDPZberuv2VaH+Ye/P+nflnbb9ld+auTYDx1luf/qa7a3PJZBcBybcJTv5wZtvffAIBrz3fYctOrr/2LMhw784/cWI8d85H3faczHeDdj/uF3HvN3+3XytFMN//jQUdb/rWO+38Bsp4wc89FHWe6/GvMx3vnc8c9jPjAwlMb8yXuHj9s7HU/fbsxH3nfkmA/7PHNPNGRg2Df5U48Y89HfzZhP+j+znY8N8w9/f42/TZr7wbtOHznmo47xvxrz0f/NMd/qzr9t51O/+bEpRxsYffSBTVfZZJONZhr+/8ibMw//n49FJ14wfJzf6Vz6dkYj7/tO+8WQd2M04bsyGvSvjCYb8nZGf9+1zttzkdP+T49FQ/5dozP5WLTp0cPH7Z2+Lnq7MR95XzoPTvKW+4/6feg7PH8WPqZh09adfPl9Ri5yxN3ey+fPGvn97v/K588a+TPJdUY9yNe7rZ//u8vfXf7u8neXv7i3uf4/xcjr//fustSKI77pHPrgshPc9V6v73vcf/X1/xG+/3D9/64Jln1w2LdWIz72jtdnh8/zH3l9dvbhbyZ+aOR8o14fHHVF/9X12Rdu+cos/4+uz/4fNXJffRffF3f8d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yt7m+v/M478PYCpFjt9kREXQocusMUyu7/X6/se9199/X+E7z9c/999mS0WGG3gbx97x+v/w+dxXP/fafD8+/4nX/8fua92/b/+Rfm7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7i3uf4/z8jfA7hmhn32H/n7APs/OP3S7/X6vsf9t17/7/X/vXX8d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbcf1/YJSXSfx62wUG1///d/c2/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/838scs/svlj1n8l88fs/h/M3/M4v+t/DGL/wr5Yxb/FfPHLP7fzh+z+K+UP2bxX/nd+l/6r59f/L8pi/8q7f+YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/zv5Yxb/7+aPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL//fyxyz+G+WPWfw3zh+z+G+SP2bx/37+mMX/B/ljFv8f5o9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/j/DGL/3b5Yxb/7fPHLP4/yR+z+P80f8ziv0P+mMX/Z/ljFv8d88cs/jvlj1n8d84fs/j/PH/M4v+L/DGL/y75Yxb/XfPHLP675Y9Z/H+ZP2bx/1X+mMV/9/wxi/+v88cs/r/JH7P4/zZ/zOL/u/wxi/8e+WMW/9/nj1n898wfs/j/IX/M4v/H/DGL/5/yxyz+f84fs/jvlT9m8d87f8ziv0/+mMX/L/ljFv9988cs/n/NH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMG/zEHBgYuzh8z+A/rkvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/qM2cngU/s/kj1n2/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfNJA/ZvEflD9m8R8tf8ziPzh/zOI/JH/M4j80f8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/9+WPWfwnyh+z+E+cP2bxnyR/zOL//vwxi/8H8scs/h/MH7P4T5o/ZvH/UP6YxX+y/DGL/+T5Yxb/D+ePWfw/kj9m8f9o/pjF/2P5Yxb/KfLHLP4fzx+z+E+ZP2bxnyp/zOI/df6Yxf8T+WMW/0/mj1n8p8kfs/hPmz9m8f9U/pjFf7r8MYv/p/PHLP6fyR+z+H82f8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/1z+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP5fzh+z+C+YP2bxXyh/zOL/lfwxi//C+WMW/6/mj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMX/a/ljFv+v549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv9v5I9Z/JfLH7P4L58/ZvH/Zv6Yxf9b+WMW/xXyxyz+K+aPWfy/nT9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/3fyxyz+380fs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/+/lj1n8N8ofs/hvnD9m8d8kf8zi//38MYv/D/LHLP4/zB+z+G+aP2bx3yx/zOK/ef6Yxf9H+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6Yxf/H+WMW/+3yxyz+2+ePWfx/kj9m8f9p/pjFf4f8MYv/z/LHLP475o9Z/HfKH7P475w/ZvH/ef6Yxf8X+WMW/13yxyz+u+aPWfx3yx+z+P8yf8zi/6v8MYv/7vljFv9f549Z/H+TP2bx/23+mMX/d/ljFv898scs/r/PH7P475k/ZvH/Q/6Yxf+P+WMW/z/lj1n8/5w/ZvHfK3/M4r93/pjFf5/8MYv/X/LHLP775o9Z/P+aP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxif+b79r833gX81j8Bwn9300W/9Hyxyz+g/PHLP5D8scs/kPzxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvF/X/6YxX+i/DGL/8T5Yxb/SfLHLP7vzx+z+H8gf8zi/8H8MYv/pPljFv8P5Y9Z/CfLH7P4T54/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvGfIn/M4v/x/DGL/5T5Yxb/qfLHLP5T549Z/D+RP2bx/2T+mMV/mvwxi/+07+A/2f+L9foPzeL/qfZ/zOI/Xf6Yxf/T+WMW/8/kj1n8P5s/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/Ln/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/y/nj1n8F8wfs/gvlD9m8f9K/pjFf+H8MYv/V/PHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4v+1/DGL/9fzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/zfyxyz+y+WPWfyXzx+z+H8zf8zi/638MYv/CvljFv8V88cs/t/OH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/O/ljFv/v5o9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/9/LHLP4b5Y9Z/DfOH7P4b5I/ZvH/fv6Yxf8H+WMW/x/mj1n8N80fs/hvlj9m8d88f8zi/6P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8zi/+P8MYv/dvljFv/t88cs/j/JH7P4/zR/zOK/Q/6Yxf9n+WMW/x3zxyz+O+WPWfx3zh+z+P88f8zi/4v8MYv/LvljFv9d88cs/rvlj1n8f5k/ZvH/Vf6YxX/3/DGL/6/zxyz+v8kfs/j/Nn/M4v+7/DGL/x75Yxb/3+ePWfz3zB+z+P8hf8zi/8f8MYv/n/LHLP5/zh+z+O+VP2bx3zt/zOK/T/6Yxf8v+WMW/33zxyz+f80fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjEf/BA/pjFf1D+mMV/tPwxi//g/DGL/5D8MYv/0Pwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/N+XP2bxnyh/zOI/cf6YxX+S/DGL//vzxyz+H8gfs/h/MH/M4j9p/pjF/0P5Yxb/yfLHLP6T549Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/KfIH7P4fzx/zOI/Zf6YxX+q/DGL/9T5Yxb/T+SPWfw/mT9m8Z8mf8ziP23+mMX/U/ljFv/p8scs/p/OH7P4fyZ/zOL/2fwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf9z+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzl/zOK/YP6YxX+h/DGL/1fyxyz+C+ePWfy/mj9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/6/lj1n8v54/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv9l8scs/svmj1n8v5E/ZvFfLn/M4r98/pjF/5v5Yxb/b+WPWfxXyB+z+K+YP2bx/3b+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7fyR+z+H83f8ziv27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfy/lz9m8d8of8ziv3H+mMV/k/wxi//388cs/j/IH7P4/zB/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/H+ePWfy3yx+z+G+fP2bx/0n+mMX/p/ljFv8d8scs/j/LH7P475g/ZvHfKX/M4r9z/pjF/+f5Yxb/X+SPWfx3yR+z+O+aP2bx3y1/zOL/y/wxi/+v8scs/rvnj1n8f50/ZvH/Tf6Yxf+3+WMW/9/lj1n898gfs/j/Pn/M4r9n/pjF/w/5Yxb/P+aPWfz/lD9m8f9z/pjFf6/8MYv/3vljFv998scs/n/JH7P475s/ZvH/a/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf7Yf63/kH+YOvi6/LH/Wv9R9v/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9v/tb9y87D432EF/hdZ/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP6bw3/a9W53/9BT+AwODn2n/xyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4v/ms8Hm/89Z/Aflj1n8R8sfs/gPzh+z+A/JH7P4D80fs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6Yxf99/8pfunFY/CfyEr9jFv+J88cs/pPkj1n8358/ZvH/QP6Yxf+D+WMW/0nzxyz+H8ofs/hPJvMf8i7ns/hPLvN/t1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8p8gfs/h/PH/M4j9l/pjFf6r8MYv/1PljFv9P5I9Z/D+ZP2bxnyZ/zOI/bf6Yxf9T+WMW/+nyxyz+n84fs/h/Jn/M4v/Z/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjF/3P5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/OX/M4r9g/pjFf6H8MYv/V/LHLP4L549Z/L+aP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/r+WPWfy/nj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfy/kT9m8V8uf8ziv3z+mMX/m/ljFv9v5Y9Z/FfIH7P4r5g/ZvH/dv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/t/JH7P4fzd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/L+XP2bx3yh/zOK/cf6YxX+T/DGL//fzxyz+P8gfs/j/MH/M4r9p/pjFf7P8MYv/5vljFv8f5Y9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv8f549Z/LfLH7P4b58/ZvH/Sf6Yxf+n+WMW/x3yxyz+P8sfs/jvmD9m8d8pf8ziv3P+mMX/5/ljFv9f5I9Z/HfJH7P475o/ZvHfLX/M4v/L/DGL/6/yxyz+u+ePWfx/nT9m8f9N/pjF/7f5Yxb/3+WPWfz3yB+z+P8+f8ziv2f+mMX/D/ljFv8/5o9Z/P+UP2bx/3P+mMV/r/wxi//e+WMW/33yxyz+f8kfs/jvmz9m8f9r/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHJP5DB/LHLP6D8scs/qPlj1n8B+ePWfyH5I9Z/Ifmj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Lf1f/mNN974f7Nq/4lZ/Mdp/8cs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMX/ffljFv+J8scs/hPnj1n8J8kfs/i/P3/M4v+B/DGL/wfzxyz+k+aPWfw/lD9m8Z8sf8ziP3n+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMV/ivwxi//H88cs/lPmj1n8p8ofs/hPnT9m8f9E/pjF/5P5Yxb/afLHLP7T5o9Z/D+VP2bxny5/zOL/6fwxi/9n8scs/p/NH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8P5c/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+X88cs/gvmj1n8F8ofs/h/JX/M4r9w/pjF/6v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvH/Wv6Yxf/r+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6Yxf8b+WMW/+Xyxyz+y+ePWfy/mT9m8f9W/pjFf4X8MYv/ivljFv9v549Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi/538MYv/d/PHLP7r5o9Z/NfLH/vv9h995NSh6+eP/Xf7/62hG+SPWfw3zB+z+H8vf8ziv1H+mMV/4/wxi/8m+WMW/+/nj1n8f5A/ZvH/Yf6YxX/T/DGL/2b5Yxb/zfPHLP4/yh+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP4/zh+z+G+XP2bx3z5/zOL/k/wxi/9P88cs/jvkj1n8f5Y/ZvHfMX/M4r9T/pjFf+f8MYv/z/PHLP6/yB+z+O+SP2bx3zV/zOK/W/6Yxf+X+WMW/1/lj1n8d88fs/j/On/M4v+b/DGL/2/zxyz+v8sfs/jvkT9m8f99/pjFf8/8MYv/H/LHLP5/zB+z+P8pf8zi/+f8MYv/XvljFv+988cs/vvkj1n8/5I/ZvHfN3/M4v/X/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP43iPxH+zfmtfjfKPL/d7L435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPSfxHH8gfs/gPyh+z+I+WP2bxH5w/ZvEfkj9m8R+aP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/+/LHLP4T5Y9Z/CfOH7P4T5I/ZvF/f/6Yxf8D+WMW/w/mj1n8J80fs/h/KH/M4j9Z/pjFf/L8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/FPljFv+P549Z/KfMH7P4T5U/ZvGfOn/M4v+J/DGL/yfzxyz+0+SPWfynzR+z+H8qf8ziP13+mMX/0/ljFv/P5I9Z/D+bP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fy5/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8v549Z/BfMH7P4L5Q/ZvH/Sv6YxX/h/DGL/1fzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOL/tfwxi//X88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/838scs/svlj1n8l88fs/h/M3/M4v+t/DGL/wr5Yxb/FfPHLP7fzh+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/zv5Yxb/7+aPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL//fyxyz+G+WPWfw3zh+z+G+SP2bx/37+mMX/B/ljFv8f5o9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/j/DGL/3b5Yxb/7fPHLP4/yR+z+P80f+y/0n/QkDfffav/Dvlj/5X+I959q//P8scs/jvmj1n8d8ofs/jvnD9m8f95/pjF/xf5Yxb/XfLHLP675o9Z/HfLH7P4/zJ/zOL/q/wxi//u+WMW/1/nj1n8f5M/ZvH/bf6Yxf93+WMW/z3yxyz+v88fs/jvmT9m8f9D/pjF/4/5Yxb/P+WPWfz/nD9m8d8rf8ziv3f+mMV/n/wxi/9f8scs/vvmj1n8/5o/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGJ/xgD+WMW/0H5Yxb/0fLHLP6D88cs/kPyxyz+Q/PHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8X9f/pjFf6L8MYv/xPljFv9J8scs/u/PH7P4fyB/zOL/wfwxi/+k+WMW/w/lj1n8J8sfs/hPnj9m8f9w/pjF/yP5Yxb/j+aPWfw/lj9m8Z8if8zi//H8MYv/lPljFv+p8scs/lPnj1n8P5E/ZvH/ZP6YxX+a/DGL/7T5Yxb/T+WPWfynyx+z+H86f8zi/5n8MYv/Z/PHLP7T549Z/GfIH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/P5Y9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/+X8MYv/gvljFv+F8scs/l/JH7P4L5w/ZvH/av6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/L+WP2bx/3r+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bx/0b+mMV/ufwxi//y+WMW/2/mj1n8v5U/ZvFfIX/M4r9i/pjF/9v5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/h/J3/M4v/d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvH/Xv6YxX+j/DGL/8b5Yxb/TfLHLP7fzx+z+P8gf8zi/8P8MYv/pvljFv/N8scs/pvnj1n8f5Q/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8f5w/ZvHfLn/M4r99/pjF/yf5Yxb/n+aPWfx3yB+z+P8sf8ziv2P+mMV/p/wxi//O+WMW/5/nj1n8f5E/ZvHfJX/M4r9r/pjFf7f8MYv/L/PHLP6/yh+z+O+eP2bx/3X+mMX/N/ljFv/f5o9Z/H+XP2bx3yN/zOL/+/wxi/+e+WMW/z/kj1n8/5g/ZvH/U/6Yxf/P+WMW/73yxyz+e+ePWfz3yR+z+P8lf8ziv2/+mMX/r/ljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH5P4jzmQP2bxH5Q/ZvEfLX/M4j84f8ziPyR/zOI/NH/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW//flj1n8J8ofs/hPnD9m8Z8kf+y/0H908n9//th/oT/u/x/IH7P4fzB/zOI/6Tv6vzH4//6K/Wdm8f9Q+z9m8Z8sf8ziP3n+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMV/ivwxi//H88cs/lPmj1n8p8ofs/hPnT9m8f9E/pjF/5P5Yxb/afLHLP7T5o9Z/D+VP2bxny5/zOL/6fwxi/9n8scs/p/NH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8P5c/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+X88cs/gvmj1n8F8ofs/h/JX/M4r9w/pjF/6v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvH/Wv6Yxf/r+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6Yxf8b+WMW/+Xyxyz+y+ePWfy/mT9m8f9W/pjFf4X8MYv/ivljFv9v549Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6ib/f+OBWvzXMPn/G1n818wfs/ivlT9m8V87f8ziv07+mMX/O/ljFv/v5o9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/9/LHLP4b5Y9Z/DfOH7P4b5I/ZvH/fv6Yxf8H+WMW/x/mj1n8N80fs/hvlj9m8d88f8zi/6P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8zi/+P8MYv/dvljFv/t88cs/j/JH7P4/zR/zOK/Q/6Yxf9n+WMW/x3zxyz+O+WPWfx3zh+z+P88f8zi/4v8MYv/LvljFv9d88cs/rvlj1n8f5k/ZvH/Vf6YxX/3/DGL/6/zxyz+v8kfs/j/Nn/M4v+7/DGL/x75Yxb/3+ePWfz3zB+z+P8hf8zi/8f8MYv/n/LHLP5/zh+z+O+VP2bx3zt/zOK/T/6Yxf8v+WMW/33zxyz+f80fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjEf6yB/DGL/6D8MYv/aPljFv/B+WMW/yH5Yxb/ofljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+L8vf8ziP1H+mMV/4vwxi/8k+WMW//fnj1n8P5A/ZvH/YP6YxX/S/DGL/4fyxyz+k+WPWfwnzx+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+E+RP2bx/3j+mMV/yvwxi/9U+WMW/6nzxyz+n8gfs/h/Mn/M4j9N/pjFf9r8MYv/p/LHLP7T5Y9Z/D+dP2bx/0z+mMX/s/ljFv/p88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi//n8scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi//n88cs/l/IH7P4fzF/zOL/pfwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/3L+mMV/wfwxi/9C+WMW/6/kj1n8F84fs/h/NX/M4r9I/pjFf9H8MYv/YvljFv/F88cs/l/LH7P4fz1/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4fyN/zOK/XP6YxX/5/DGL/zfzxyz+38ofs/ivkD9m8V8xf8zi/+38MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfy/kz9m8f9u/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/h/L3/M4r9R/pjFf+P8MYv/JvljFv/v549Z/H+QP2bx/2H+mMV/0/wxi/9m+WMW/83zxyz+P8ofs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+P84fs/hvlz9m8d8+f8zi/5P8MYv/T/PHLP475I9Z/H+WP2bx3zF/zOK/U/6YxX/n/DGL/8/zxyz+v8gfs/jvkj9m8d81f8ziv1v+mMX/l/ljFv9f5Y9Z/HfPH7P4/zp/zOL/m/wxi/9v88cs/r/LH7P475E/ZvH/ff6YxX/P/DGL/x/yxyz+f8wfs/j/KX/M4v/n/DGL/175Yxb/vfPHLP775I9Z/P+SP2bx3zd/zOL/1/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj0n8xx7IH7P4D8ofs/iPlj9m8R+cP2bxH5I/ZvEfmj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL//vyxyz+E+WPWfwnzh+z+E+SP2bxf3/+mMX/A/ljFv8P5o9Z/CfNH7P4fyh/zOI/Wf6YxX/y/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/xT5Yxb/j+ePWfynzB+z+E+VP2bxnzp/zOL/ifwxi/8n88cs/tPkj1n8p80fs/h/Kn/M4j9d/pjF/9P5Yxb/z+SPWfw/mz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H8uf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/L+ePWfwXzB+z+C+UP2bx/0r+mMV/4fwxi/9X88cs/ovkj1n8F80fs/gvlj9m8V88f8zi/7X8MYv/1/PHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/N/LHLP7L5Y9Z/JfPH7P4fzN/zOL/rfwxi/8K+WMW/xXzxyz+384fs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf87+WMW/+/mj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi//38scs/hvlj1n8N84fs/hvkj9m8f9+/pjF/wf5Yxb/H+aPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL/4/wxi/92+WMW/+3zxyz+P8kfs/j/NH/M4r9D/pjF/2f5Yxb/HfPHLP475Y9Z/HfOH7P4/zx/zOL/i/wxi/8u+WMW/13zxyz+u+WPWfx/mT9m8f9V/pjFf/f8MYv/r/PHLP6/yR+z+P82f8zi/7v8MYv/HvljFv/f549Z/PfMH7P4/yF/zOL/x/wxi/+f8scs/n/OH7P475U/ZvHfO3/M4r9P/pjF/y/5Yxb/ffPHLP5/zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/nIH8MYv/oPwxi/9o+WMW/8H5Yxb/IfljFv+h+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4vy9/zOI/Uf6YxX/i/DGL/yT5Yxb/9+ePWfw/kD9m8f9g/pjFf9L8MYv/h/LHLP6T5Y9Z/CfPH7P4fzh/zOL/kfwxi/9H88cs/h/LH7P4T5E/ZvH/eP6YxX/K/DGL/1T5Yxb/qfPHLP6fyB+z+H8yf8ziP03+mMV/2vwxi/+n8scs/tPlj1n8P50/ZvH/TP6Yxf+z+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/+fyxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvH/cv6YxX/B/DGL/0L5Yxb/r+SPWfwXzh+z+H81f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+X8sfs/h/PX/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/h/I3/M4r9c/pjFf/n8MYv/N/PHLP7fyh+z+K+QP2bxXzF/zOL/7fwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/L+TP2bx/27+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+H8vf8ziv1H+mMV/4/wxi/8m+WMW/+/nj1n8f5A/ZvH/Yf6YxX/T/DGL/2b5Yxb/zfPHLP4/yh+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP4/zh+z+G+XP2bx3z5/zOL/k/wxi/9P88cs/jvkj1n8f5Y/ZvHfMX/M4r9T/pjFf+f8MYv/z/PHLP6/yB+z+O+SP2bx3zV/zOK/W/6Yxf+X+WMW/1/lj1n8d88fs/j/On/M4v+b/DGL/2/zxyz+v8sfs/jvkT9m8f99/pjFf8/8MYv/H/LHLP5/zB+z+P8pf8zi/+f8MYv/XvljFv+988cs/vvkj1n8/5I/ZvHfN3/M4v/X/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPSfzHHcgfs/gPyh+z+I+WP2bxH5w/ZvEfkj9m8R+aP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/+/LHLP4T5Y9Z/CfOH7P4T5I/ZvF/f/6Yxf8D+WMW/w/mj1n8J80fs/h/KH/M4j9Z/pjFf/L8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/FPljFv+P549Z/KfMH7P4T5U/ZvGfOn/M4v+J/DGL/yfzxyz+0+SPWfynzR+z+H8qf8ziP13+mMX/0/ljFv/P5I9Z/D+bP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fy5/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8v549Z/BfMH7P4L5Q/ZvH/Sv6YxX/h/DGL/1fzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOL/tfwxi//X88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/838scs/svlj1n8l88fs/h/M3/M4v+t/DGL/wr5Yxb/FfPHLP7fzh+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/zv5Yxb/7+aPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL//fyxyz+G+WPWfw3zh+z+G+SP2bx/37+mMX/B/ljFv8f5o9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/j/DGL/3b5Yxb/7fPHLP4/yR+z+P80f8ziv0P+mMX/Z/ljFv8d88cs/jvlj1n8d84fs/j/PH/M4v+L/DGL/y75Yxb/XfPHLP675Y9Z/H+ZP2bx/1X+mMV/9/wxi/+v88cs/r/JH7P4/zZ/zOL/u/wxi/8e+WMW/9/nj1n898wfs/j/IX/M4v/H/DGL/5/yxyz+f84fs/jvlT9m8d87f8ziv0/+mMX/L/ljFv9988cs/n/NH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+8gfwxi/+g/DGL/2j5Yxb/wfljFv8h+WMW/6H5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/i/L3/M4j9R/pjFf+L8MYv/JPljFv/3549Z/D+QP2bx/2D+mMV/0vwxi/+H8scs/pPlj1n8J88fs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/hPkT9m8f94/pjFf8r8MYv/VPljFv+p88cs/p/IH7P4fzJ/zOI/Tf6YxX/a/DGL/6fyxyz+0+WPWfw/nT9m8f9M/pjF/7P5Yxb/6fPHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/5/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/5/PHLP5fyB+z+H8xf8zi/6X8MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9y/pjFf8H8MYv/QvljFv+v5I9Z/BfOH7P4fzV/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5fyx+z+H89f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+H8jf8ziv1z+mMV/+fwxi/8388cs/t/KH7P4r5A/ZvFfMX/M4v/t/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8v5M/ZvH/bv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4fy9/zOK/Uf6YxX/j/DGL/yb5Yxb/7+ePWfx/kD9m8f9h/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/j/OH7P4b5c/ZvHfPn/M4v+T/DGL/0/zxyz+O+SPWfx/lj9m8d8xf8ziv1P+mMV/5/wxi//P88cs/r/IH7P475I/ZvHfNX/M4r9b/pjF/5f5Yxb/X+WPWfx3zx+z+P86f8zi/5v8MYv/b/PHLP6/yx+z+O+RP2bx/33+mMV/z/wxi/8f8scs/n/MH7P4/yl/zOL/5/wxi/9e+WMW/73zxyz+++SPWfz/kj9m8d83f8zi/9f8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9J/McfyB+z+A/KH7P4j5Y/ZvEfnD9m8R+SP2bxH5o/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi//78scs/hPlj1n8J84fs/hPkj9m8X9//pjF/wP5Yxb/D+aPWfwnzR+z+H8of8ziP1n+mMV/8vwxi/+H88cs/h/JH7P4fzR/zOL/sfwxi/8U+WMW/4/nj1n8p8wfs/hPlT9m8Z86f8zi/4n8MYv/J/PHLP7T5I9Z/KfNH7P4fyp/zOI/Xf6Yxf/T+WMW/8/kj1n8P5s/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/Ln/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/y/nj1n8F8wfs/gvlD9m8f9K/pjFf+H8MYv/V/PHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4v+1/DGL/9fzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/zfyxyz+y+WPWfyXzx+z+H8zf8zi/638MYv/CvljFv8V88cs/t/OH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/O/ljFv/v5o9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/9/LHLP4b5Y9Z/DfOH7P4b5I/ZvH/fv6Yxf8H+WMW/x/mj1n8N80fs/hvlj9m8d88f8zi/6P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8zi/+P8MYv/dvljFv/t88cs/j/JH7P4/zR/zOK/Q/6Yxf9n+WMW/x3zxyz+O+WPWfx3zh+z+P88f8zi/4v8MYv/LvljFv9d88cs/rvlj1n8f5k/ZvH/Vf6YxX/3/DGL/6/zxyz+v8kfs/j/Nn/M4v+7/DGL/x75Yxb/3+ePWfz3zB+z+P8hf8zi/8f8MYv/n/LHLP5/zh+z+O+VP2bx3zt/zOK/T/6Yxf8v+WMW/33zxyz+f80fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b/e5D9oYGCbdzurxP8Gk/+/kcX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjEf4KB/DGL/6D8MYv/aPljFv/B+WMW/yH5Yxb/ofljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzP//Y48eDAAwECCAPWrbtm3btm3btm3btm3btm0vcBP0khUStfwP6z9q+R/Of9TyP7z/qOV/BP9Ry/+I/qOW/5H8Ry3/I/uPWv5H8R+1/I/qP2r5H81/1PI/uv+o5X8M/1HL/5j+o5b/sfxHLf9j+49a/sfxH7X8j+s/avkfz3/U8j++/6jlfwL/Ucv/hP6jlv+J/Ect/xP7j1r+J/EftfxP6j9q+Z/Mf9TyP7n/qOV/Cv9Ry/+U/qOW/6n8Ry3/U/uPWv6n8R+1/E/rP2r5n85/1PI/vf+o5X8G/1HL/4z+o5b/mfxHLf8z+49a/mfxH7X8z+o/avmfzX/U8j+7/6jlfw7/Ucv/nP6jlv+5/Ect/3P7j1r+5/EftfzP6z9q+Z/Pf9TyP7//qOV/Af9Ry/+C/qOW/4X8Ry3/C/uPWv4X8R+1/C/qP2r5X8x/1PK/uP+o5X8J/1HL/5L+o5b/pfxHLf9L+49a/pfxH7X8L+s/avlfzn/U8r+8/6jlfwX/Ucv/iv6jlv+V/Ect/yv7j1r+V/Eftfyv6j9q+V/Nf9Tyv7r/qOV/Df9Ry/+a/qOW/7X8Ry3/a/uPWv7X8R+1/K/rP2r5X89/1PK/vv+o5X8D/1HL/4b+o5b/jfxHLf8b+49a/jfxH7X8b+o/avnfzH/U8r+5/6jlfwv/Ucv/lv6jlv+t/Ect/1v7j1r+t/Eftfxv6z9q+d/Of9Tyv73/qOV/B/9Ry/+O/qOW/538Ry3/O/uPWv538R+1/O/qP2r5381/1PK/u/+o5X8P/1HL/57+o5b/vfxHLf97+49a/vfxH7X87+s/avnfz3/U8r+//6jl/wD/Ucv/gf6jlv+D/Ect/wf7j1r+D/Eftfwf6j9q+T/Mf9Tyf7j/qOX/CP9Ry/+R/qOW/6P8Ry3/R/uPWv6P8R+1/B/rP2r5P85/1PJ/vP+o5f8E/1HL/4n+o5b/k/xHLf8n+49a/k/xH7X8n+o/avk/zX/U8n+6/6jl/wz/Ucv/mf6jlv+z/Ect/2f7j1r+z/Eftfyf6z9q+T/Pf9Tyf77/qOX/Av9Ry/+F/qOW/4v8Ry3/F/uPWv4v8R+1/F/qP2r5v8x/1PJ/uf+o5f8K/1HL/5X+o5b/q/xHLf9X+49a/q/xH7X8X+s/avm/zn/U8n+9/6jl/wb/Ucv/jf6jlv+b/Ect/zf7j1r+b/Eftfzf6j9q+b/Nf9Tyf7v/qOX/Dv9Ry/+d/qOW/7v8Ry3/d/uPWv7v8R+1/N/rP2r5v89/1PJ/v/+o5f8B/1HL/4P+o5b/h/xHLf8P+49a/h/xH7X8P+o/avl/zH/U8v+4/6jl/wn/Ucv/k/6jlv+n/Ect/0/7j1r+n/Eftfw/6z9q+X/Of9Ty/7z/qOX/Bf9Ry/+L/qOW/5f8Ry3/L/uPWv5f8R+1/L/qP2r5f81/1PL/uv+o5f8N/1HL/5v+o5b/t/xHLf9v+49a/t/xH7X8v+s/avl/z3/U8v++/6jl/wP/Ucv/h/6jlv+P/Ect/x/7j1r+P/Eftfx/6j9q+f/Mf9Ty/7n/qOX/C/9Ry/+X/qOW/6/8Ry3/X/uPWv6/8R+1/H/rP2r5/85/1PL/vf+o5f8H/1HL/4/+o5b/n/xHLf8/+49a/n/xH7X8/+o/avn/zX/U8v+7/6jl/w//Ucv/n/6jlv+//Ect/3/7j0r+h/mP/6jl/7/+o5b///mPWv7/7z9q+R/Af9TyP6D/qOV/IP9Ry//A/qOW/0H8Ry3/g/qPWv4H8x+1/A/uP2r5H8J/1PI/pP+o5X8o/1HL/9D+o3/dPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+wb/8xXtcFHMc/9xPBAhTStxQ/gvJQg+OHcfwombUaJ+sY6ZqupTA4UQM1uBU/jI5NW3+wiYs1azpp7Wa2WGM6RxKlpYu5Md2klZZNyhnD4bQttB/r2pf7fo+7r8eN7/t6v/mDx+OPu+/nc7w+B2xPPp8bdwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKS0acvWr65ev75zoxdeeOFF/4tz/S8TkNrp6M/17wQAAAAAAAAAAAAAADiTHD9OdK7/jAAAAAAAcL5p77j2REPdoFMNAw8mH+489f7qd2+8rafnyYsq78sfXj7EJesHHvT29vbuOPDmsvLhqKIoSp9tfPn4gupx6frd+1f+oe8oFCfafnVn1/GOup89dctbLcvHLW46dbapWHXr7es759QXRWhoKjaXDubWFUVobip2lQ7mlQ5GNRU/Lh3MP3Uwuni6dDB7zV3r15ZOvO9Tw3mnvaO7aBhUbDHoX4OB/Xfvf+S9yvthLlm5WmNR7v/Szz+zq+pjFWfov3L9UFfdf81/QOCMauv/8e7K+2Eu+b77/8S/br9uqI+duf/K9UO9/iGdIZ7/BzVa/dxf9fw/bYhL9u8PTW97tNT/toeff6h8qvFsnv9PXz80VPdfP+j5v/Qc31h5/h9VFKFphH8dcF5p79hxYrj7//D9N06q2tQN7P/g8h88V+p/asfExvKpphr7bxzm/l+3/enBv1egNu0dP+ytuv/X0H/RMsQl+/uf1jPh3VL/14z/9+sDPlZL/03V/bd2bbi7ddOWrbNu37B6Xee6zjvnz2ubt7BtzqJF81tPPRL0vR3h3wqcH0Z2/y/GVG3qiqKzf//Lo8eWlPrfdOTY5vKpC2rsv3nY+/9r7v8wpOn1RXNzsXl1V9fGuX1vK4fz+t72/bIh+q/h6/8ZM8u/rPJ1d+kL8v79gQVFT6n/na/csKV8qrnG/kcN1/+3Tn9eIMII7/9rqzaD+r/ixXtfLfW/7+03ry+fqvXr/wuG7X+P+z+MRHtH1Tf8/J+V+j958mDkN9uE0f7/D9LJ0f8r9T99Mm4dxugf0snR/wP3jBrq+wTOQrhQ/5BOjv43PbTmhbh1+ID+IZ0c/S/8y6Gb4tbhg/qHdHL0P/GSl/8Wtw5j9Q/p5Oj/lts2fi1uHcbpH9LJ0f+xe5+9J24dxusf0snR/4/+ddfxuHW4SP+QTo7+7x+7/Ya4dbhY/5BOjv6fvft3v45bhwn6h3Ry9H/5rn2z4tZhov4hnRz9b3hr0oG4dfiQ/iGdHP1fO+nCyJ/TDZfoH9LJ0f+YtXu+G7cOl+of0snRf9fe2X+OW4egf0jnbPsfHXn9Uv9LX7pvWdw6XKZ/SCfH/X9Cy+6TceswSf+QTo7+b7xp6aq4dfiw/iGdHP0/9fMv3x+3Dh/RP6STo/93fvv2ZXHrMFn/kE6O/l+df/TRuHWYon9IJ0f/3/vCdXPj1mGq/iGdHP0/fnznL+LWYZr+IZ0c/b+3u+XKuHX4qP4hnRz9H1m1YHfcOkzXP6STo/9HpjxcH7cOM/QP6eTo/5v//eeJuHX4mP4hnRz9L+j+4ra4dfi4/iGdHP1P6vrsc3HrcLn+IZ0c/a8cc+z6uHVo0T+kk6P/1t/cOiVuHWbqH9LJ0f/ag4e/E7cOV+gf0snR/7L2Py2IW4cr9Q/p5Oi/oe0be+LW4Sr9Qzo5+j/6+wkr4tbhE/qHdHL0/5PH9r8ctw6z9A/p5Oj/2195bF3cOszWP6STo//DM+rfiVuHVv1DOjn63/rCE/+JW4c5+od0cvQ/d9/UO+LWYa7+IZ0c/U/+3NgjceswT/+QTo7+v7Sk5zNx6zBf/5BOjv6f+OMze+PW4Wr9Qzo5+u/tuWNJ3Dp8Uv+QTo7+X1q57b64dVigf0gnR/8Ptr44IW4d2vQP6eTo/403br45bh0W6h/SydH/3gf/cShuHRbpH9LJ0f+O9a9/PW4dFusf0snR//MXr3gtbh2W6B/SydH/zL9fNS5uHT6lf0gnR/9rdnZ/P24dPq1/SCdH/ys2P9AStw7X6B/SydF/Y/PifXHrsFT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/I8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBDAAAAIAwf+s82g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADATwEAAP//I99lvw==") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x11, 0x10, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x3a, 0x1c9, '\x00', [@generic={0x12, 0xe47, "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"}]}], "ab00204cf3b5df7b000000000000000000000027f3075f84cad8be538e28acd24184307d343e5ab1044a798cd61b0210f9ba068bc128235e47de0a4044027444dbfa69f591578171c6ef1441997a89878970ab74bd4396e0d599d725fae76f74447a5b278e1e9465b46d8799331429de1d5c66e585dfb7cd62166049037eb70c"}}}}}}, 0xfce) 9.208648574s ago: executing program 7 (id=1310): prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) eventfd(0x5f0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x9, {0x0, 0xfffff88f, 0x200000e7}, {0x0, 0x0, 0x3, 0x3}, {0xfdfb, 0x3}}) 8.918496092s ago: executing program 7 (id=1314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000380)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x0, 0x5, 0xffffffffffff258f, 0x7, 0xe0a}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 8.598747679s ago: executing program 7 (id=1319): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 7.958303325s ago: executing program 7 (id=1323): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0', 0x3) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='none', 0x4) 7.246175532s ago: executing program 6 (id=1333): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(0xffffffffffffffff, 0x800c6f40, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x1a9d81eaa3301f14) 4.275086135s ago: executing program 6 (id=1357): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r1 = userfaultfd(0x801) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4.114755429s ago: executing program 6 (id=1361): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000980)=ANY=[], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3.932492194s ago: executing program 6 (id=1364): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01270a0b"], 0x2a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716fa", 0x3e}], 0x1, 0x0, 0x6b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904000005ff000000070581024000010705010240000107058302400001070503"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) 2.797069562s ago: executing program 5 (id=1370): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0\x00', 0x1}, 0x14) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, {@remote, 0x5000, 0x0, 0x1}}, 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x1, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x1234, 0x5000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}, {"00112233445566778899"}}}}}}, 0x0) 2.651626455s ago: executing program 5 (id=1372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x80000007, 0x7, 0xcb, 0x4b, 0x7b, 0x5a, 0x80, 0x9, 0x3, 0x44, 0x7, 0x2, 0x1ff}, {0x42d, 0x8, 0x39, 0x8, 0x9, 0xd3, 0xcc, 0x4, 0xa, 0x76, 0x6, 0x48, 0x9}, {0x294a, 0x4, 0x9b, 0x0, 0x2d, 0x1, 0x81, 0xfb, 0x3, 0x4, 0xfe, 0xf9}], 0xb}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.514467578s ago: executing program 5 (id=1374): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) setns(0xc9, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0xfffd}], 0x1}}], 0x1, 0x8015) close_range(r0, 0xffffffffffffffff, 0x0) 2.471774819s ago: executing program 1 (id=1375): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001"], 0x38}}, 0x2000a080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xa1ffffff, 0x0, 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 1.972375122s ago: executing program 1 (id=1376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="f7790066baa00066b86b4266afe2e239000f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d90f20d835080000000f22d8", 0x49}], 0xaaaaaaaaaaaaa5c, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x6, 0x6, 0x1, 0x25, 0x80000, 0x7f, 0x44233, 0x1, 0x81, 0x4, 0x4, 0x3, 0xd, 0xc, 0x0, 0xfffffdfffffffffd], 0x1ff8, 0x1c4f02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.790393356s ago: executing program 1 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) rename(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000140)='./bus\x00') r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f00000008c0)={&(0x7f0000000240)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4085}, 0x80) r6 = dup3(r3, r5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) 1.717031818s ago: executing program 2 (id=1379): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000780)=[@text16={0x10, 0x0}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.590462671s ago: executing program 5 (id=1380): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x50, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000540)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) 1.522546253s ago: executing program 5 (id=1381): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r5, r3, 0x4}, 0x5) 1.255177379s ago: executing program 2 (id=1382): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000001240)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[], 0x1, 0x120c, &(0x7f0000003680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 886.409878ms ago: executing program 6 (id=1383): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) sendto$inet6(r0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0) 884.529728ms ago: executing program 1 (id=1384): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='+p', 0x2) syz_usb_connect(0x5, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303"], 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) 706.438193ms ago: executing program 5 (id=1385): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000080)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x5437, 0x0) 563.503157ms ago: executing program 2 (id=1386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000980)="b2", 0x1, 0x24000045, &(0x7f0000000400)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='scalable', 0x8) sendto$inet6(r0, &(0x7f0000000580)='.', 0xfffffffffffffd3a, 0x801, 0x0, 0x0) 500.303488ms ago: executing program 2 (id=1387): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000240)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4085}, 0x80) r2 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 448.345079ms ago: executing program 2 (id=1388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0xbf860000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000200bbbbbbbbbbbbaaaaaaaaaabb86dd6d042000000811ff000000000000000000000000000000014f191b590008907881eff0e63fa832677d0c493bb2e0d10ae7"], 0x42) 306.466252ms ago: executing program 2 (id=1389): openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0xe0e02, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xa7) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000880)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 304.729523ms ago: executing program 1 (id=1390): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7a}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000006c0)='7', 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 259.621264ms ago: executing program 1 (id=1391): syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d00000524060001052402000600060624"], 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 0s ago: executing program 6 (id=1392): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 00246 ORIG_RAX: 000000000000002d [ 73.699730][ T4369] RAX: ffffffffffffffda RBX: 00007f5536ff8090 RCX: 00007f5536d702d9 [ 73.707709][ T4369] RDX: fffffffffffffd0b RSI: 0000200000000080 RDI: 0000000000000003 [ 73.715865][ T4369] RBP: 00007f5536e07888 R08: 0000000000000000 R09: fffffffffffffd25 [ 73.723836][ T4369] R10: 0000000000000720 R11: 0000000000000246 R12: 0000000000000000 [ 73.731803][ T4369] R13: 00007f5536ff8128 R14: 00007f5536ff8090 R15: 00007ffcf5125508 [ 73.739777][ T4369] [ 73.805964][ T4348] attempt to access beyond end of device [ 73.805964][ T4348] loop1: rw=2049, want=45104, limit=40427 [ 74.750235][ T4377] device syzkaller0 entered promiscuous mode [ 75.340240][ T4398] device syzkaller0 entered promiscuous mode [ 76.011940][ T4410] loop3: detected capacity change from 0 to 512 [ 76.065229][ T4410] EXT4-fs (loop3): Ignoring removed bh option [ 76.143247][ T4410] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 76.290743][ T4416] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.299818][ T4416] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.309399][ T4416] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.318232][ T4416] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.658555][ T4410] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,abort,bh,delalloc,jqfmt=vfsold,noquota,,errors=continue. Quota mode: writeback. [ 76.767371][ T4410] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.974058][ T4410] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 23: comm syz.3.45: lblock 5 mapped to illegal pblock 23 (length 1) [ 77.037043][ T4410] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 77.059974][ T4410] EXT4-fs error (device loop3): ext4_write_dquot:6216: comm syz.3.45: Failed to commit dquot type 0 [ 77.733776][ T4410] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #4: block 29: comm syz.3.45: lblock 5 mapped to illegal pblock 29 (length 1) [ 77.827738][ T4410] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 77.835903][ T4410] EXT4-fs error (device loop3): ext4_write_dquot:6216: comm syz.3.45: Failed to commit dquot type 1 [ 77.931044][ T4410] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.45: Invalid inode table block 1061109567 in block_group 0 [ 78.033485][ T4430] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.45: Invalid inode table block 1061109567 in block_group 0 [ 78.055081][ T4430] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 78.061506][ T4410] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 78.103497][ T4410] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #18: comm syz.3.45: mark_inode_dirty error [ 78.136702][ T4410] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.45: Invalid block bitmap block 1061109567 in block_group 0 [ 78.184867][ T4410] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 78.227920][ T4410] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 78.305720][ T4188] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 78.504655][ T4446] loop0: detected capacity change from 0 to 512 [ 78.574706][ T4446] EXT4-fs (loop0): Ignoring removed oldalloc option [ 78.780456][ T4446] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.54: iget: bad i_size value: 38620345925642 [ 78.861940][ T4452] loop4: detected capacity change from 0 to 65 [ 78.946790][ T4452] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 79.152121][ T4446] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.54: couldn't read orphan inode 15 (err -117) [ 79.317285][ T4446] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,norecovery,auto_da_alloc,abort,auto_da_alloc=0x0000000000000001,oldalloc,block_validity,,errors=continue. Quota mode: writeback. [ 79.455686][ T4446] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.54: bg 0: block 5: invalid block bitmap [ 79.502505][ T4446] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 79.522840][ T4446] EXT4-fs (loop0): This should not happen!! Data will be lost [ 79.522840][ T4446] [ 79.557200][ T4446] EXT4-fs (loop0): Total free blocks count 0 [ 79.597151][ T4446] EXT4-fs (loop0): Free/Dirty block details [ 79.623956][ T4446] EXT4-fs (loop0): free_blocks=0 [ 79.647101][ T4446] EXT4-fs (loop0): dirty_blocks=65 [ 79.652294][ T4446] EXT4-fs (loop0): Block reservation details [ 79.695755][ T4418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.717197][ T4446] EXT4-fs (loop0): i_reserved_data_blocks=65 [ 79.858281][ T4418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.975239][ T4418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.055960][ T4459] loop4: detected capacity change from 0 to 32768 [ 80.085976][ T4418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.131058][ T4459] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.57 (4459) [ 80.199239][ T4459] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 80.251123][ T4459] BTRFS info (device loop4): turning on async discard [ 80.283543][ T4459] BTRFS info (device loop4): using free space tree [ 80.306494][ T4459] BTRFS info (device loop4): has skinny extents [ 81.567534][ T4459] BTRFS info (device loop4): enabling ssd optimizations [ 81.740479][ T26] audit: type=1804 audit(1791950033.692:3): pid=4459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.57" name="/newroot/13/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 81.794288][ T4462] chnl_net:caif_netlink_parms(): no params data found [ 81.855900][ T26] audit: type=1804 audit(1791950033.772:4): pid=4459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.57" name="/newroot/13/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 81.858373][ T4507] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 81.914730][ T4507] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 83.230494][ T4462] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.301751][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 83.346724][ T4462] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.355162][ T4462] device bridge_slave_0 entered promiscuous mode [ 83.424378][ T4462] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.467162][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.475278][ T4462] device bridge_slave_1 entered promiscuous mode [ 83.552112][ T4551] loop2: detected capacity change from 0 to 512 [ 83.629072][ T4551] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.676410][ T4462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.716122][ T4551] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 83.761544][ T4556] FAULT_INJECTION: forcing a failure. [ 83.761544][ T4556] name failslab, interval 1, probability 0, space 0, times 0 [ 83.774698][ T4556] CPU: 0 PID: 4556 Comm: syz.4.67 Not tainted syzkaller #0 [ 83.775286][ T4462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.781906][ T4556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.781941][ T4556] Call Trace: [ 83.781949][ T4556] [ 83.781956][ T4556] dump_stack_lvl+0x188/0x250 [ 83.781981][ T4556] ? lock_chain_count+0x20/0x20 [ 83.782002][ T4556] ? show_regs_print_info+0x20/0x20 [ 83.782020][ T4556] ? load_image+0x410/0x410 [ 83.782038][ T4556] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 83.782057][ T4556] ? lockdep_hardirqs_on+0x94/0x140 [ 83.782077][ T4556] ? ktime_get+0x7b/0x270 [ 83.782092][ T4556] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 83.782113][ T4556] should_fail+0x383/0x4b0 [ 83.782143][ T4556] should_failslab+0x5/0x20 [ 83.816739][ T4551] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.72: corrupted inode contents [ 83.817026][ T4556] slab_pre_alloc_hook+0x51/0xc0 [ 83.817055][ T4556] kmem_cache_alloc_node+0x47/0x2c0 [ 83.817071][ T4556] ? __alloc_skb+0xf4/0x750 [ 83.817093][ T4556] __alloc_skb+0xf4/0x750 [ 83.817108][ T4556] ? skb_release_data+0x18b/0x830 [ 83.817136][ T4556] __tcp_send_ack+0x9d/0x5d0 [ 83.817156][ T4556] ? tcp_cleanup_rbuf+0x24f/0x560 [ 83.817175][ T4556] tcp_recvmsg_locked+0xe3f/0x2690 [ 83.817223][ T4556] ? tcp_recvmsg+0x760/0x760 [ 83.872744][ T4551] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #11: comm syz.2.72: mark_inode_dirty error [ 83.874704][ T4556] ? __local_bh_enable_ip+0x136/0x1c0 [ 83.874740][ T4556] tcp_recvmsg+0x22a/0x760 [ 83.874762][ T4556] ? rcu_lock_release+0x9/0x20 [ 83.931053][ T4551] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.72: invalid indirect mapped block 1 (level 1) [ 83.934011][ T4556] ? tcp_recv_timestamp+0x720/0x720 [ 83.957765][ T4556] ? aa_sk_perm+0x7dc/0x910 [ 83.962314][ T4556] inet_recvmsg+0x146/0x200 [ 83.966841][ T4556] ? __fget_files+0x402/0x470 [ 83.971536][ T4556] ? inet_sendpage+0x2e0/0x2e0 [ 83.976322][ T4556] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 83.981624][ T4556] ? security_socket_recvmsg+0x85/0xb0 [ 83.984417][ T4551] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.72: corrupted inode contents [ 83.987104][ T4556] __sys_recvfrom+0x396/0x510 [ 83.987148][ T4556] ? __ia32_sys_send+0xb0/0xb0 [ 83.987187][ T4556] ? lock_chain_count+0x20/0x20 [ 83.987211][ T4556] __x64_sys_recvfrom+0xda/0xf0 [ 83.987232][ T4556] do_syscall_64+0x4c/0xa0 [ 83.987250][ T4556] ? clear_bhb_loop+0x30/0x80 [ 83.987269][ T4556] ? clear_bhb_loop+0x30/0x80 [ 83.987289][ T4556] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.987308][ T4556] RIP: 0033:0x7f7fc81032d9 [ 83.987326][ T4556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.987339][ T4556] RSP: 002b:00007f7fc633a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 83.987358][ T4556] RAX: ffffffffffffffda RBX: 00007f7fc838b090 RCX: 00007f7fc81032d9 [ 83.987370][ T4556] RDX: fffffffffffffd0b RSI: 0000200000000080 RDI: 0000000000000003 [ 83.987379][ T4556] RBP: 00007f7fc819a888 R08: 0000000000000000 R09: fffffffffffffd25 [ 84.013130][ T4462] team0: Port device team_slave_0 added [ 84.013468][ T4556] R10: 0000000000000720 R11: 0000000000000246 R12: 0000000000000000 [ 84.013484][ T4556] R13: 00007f7fc838b128 R14: 00007f7fc838b090 R15: 00007ffd641c8b58 [ 84.013509][ T4556] [ 84.049736][ T4462] team0: Port device team_slave_1 added [ 84.107533][ T4551] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 84.214634][ T4551] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.72: corrupted inode contents [ 84.243868][ T4551] EXT4-fs error (device loop2): ext4_truncate:4286: inode #11: comm syz.2.72: mark_inode_dirty error [ 84.275373][ T4551] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 84.297395][ T4551] EXT4-fs (loop2): 1 truncate cleaned up [ 84.303111][ T4551] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.408802][ T4551] EXT4-fs error (device loop2): ext4_find_dest_de:2117: inode #2: block 13: comm syz.2.72: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 86.505398][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 86.617021][ T4561] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.625782][ T4561] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.711977][ T1324] cfg80211: failed to load regulatory.db [ 87.082059][ T4561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.112156][ T4561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.347601][ C0] bridge0: port 3(syz_tun) entered learning state [ 87.412163][ T4561] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.414119][ T4620] loop0: detected capacity change from 0 to 128 [ 87.425354][ T4561] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.439989][ T4561] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.450566][ T4561] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.462932][ T4620] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.477267][ T4620] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.684284][ T4462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.700567][ T4462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.727286][ T4462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.741974][ T4462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.763699][ T4462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.851582][ T4462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.607502][ T4542] Bluetooth: hci4: command 0x040f tx timeout [ 88.612592][ T4462] device hsr_slave_0 entered promiscuous mode [ 88.644413][ T4462] device hsr_slave_1 entered promiscuous mode [ 88.657648][ T4462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.673511][ T4462] Cannot create hsr debugfs directory [ 88.706771][ T4646] jffs2: notice: (4646) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 88.834577][ T4653] overlayfs: failed to resolve './file2': -2 [ 89.196505][ T4418] device hsr_slave_0 left promiscuous mode [ 89.215103][ T4418] device hsr_slave_1 left promiscuous mode [ 89.366663][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.380634][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.066968][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 90.086960][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 90.355550][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.393279][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.457302][ T4418] device bridge_slave_1 left promiscuous mode [ 90.503365][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.717092][ T4542] Bluetooth: hci4: command 0x0419 tx timeout [ 91.175819][ T4418] device bridge_slave_0 left promiscuous mode [ 91.183888][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.713320][ T4418] device veth1_macvtap left promiscuous mode [ 91.773416][ T4418] device veth0_macvtap left promiscuous mode [ 91.830808][ T4418] device veth1_vlan left promiscuous mode [ 91.892457][ T4418] device veth0_vlan left promiscuous mode [ 92.168688][ T4728] loop2: detected capacity change from 0 to 512 [ 92.205644][ T4728] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.248586][ T4728] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 92.262366][ T4728] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 92.272948][ T4418] team0 (unregistering): Port device team_slave_1 removed [ 92.288452][ T4728] System zones: 0-2, 18-18, 34-35 [ 92.305616][ T4728] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.306703][ T4418] team0 (unregistering): Port device team_slave_0 removed [ 92.322496][ T4728] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 92.359945][ T4418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.384254][ T4418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.437174][ T4726] mmap: syz.1.104 (4726) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 92.552083][ T4418] bond0 (unregistering): Released all slaves [ 93.456040][ T4462] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.471556][ T4744] binder_alloc: 4743: binder_alloc_buf size 65536 failed, no address space [ 93.518175][ T4462] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.532884][ T4744] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 93.555320][ T4462] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.580425][ T4462] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.789315][ T4462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.848979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.868560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.915773][ T4462] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.959087][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.999126][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.034266][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.041408][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.046946][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 95.059374][ T1324] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.077739][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.164355][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.177655][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.266950][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 95.276937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 95.286940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 95.296937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 95.306939][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 95.316938][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 95.324924][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.326949][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 95.332975][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.349993][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.367843][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.379726][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.404795][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.417349][ T1324] usb 3-1: Using ep0 maxpacket: 32 [ 95.505581][ T26] audit: type=1326 audit(1791950047.452:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.1.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11d20f2d9 code=0x7ffc0000 [ 95.555460][ T26] audit: type=1326 audit(1791950047.492:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.1.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb11d20f2d9 code=0x7ffc0000 [ 95.580936][ T1324] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 95.592956][ T1324] usb 3-1: config 0 has no interface number 0 [ 95.635573][ T1324] usb 3-1: config 0 interface 12 has no altsetting 0 [ 95.713548][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.937850][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.939280][ T26] audit: type=1326 audit(1791950047.722:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.1.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11d20f2d9 code=0x7ffc0000 [ 95.969888][ T26] audit: type=1326 audit(1791950047.722:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.1.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11d20f2d9 code=0x7ffc0000 [ 95.977231][ T1324] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 96.003009][ T26] audit: type=1326 audit(1791950047.912:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4786 comm="syz.1.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb11d1cfb0e code=0x7ffc0000 [ 96.015890][ T4462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.038615][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.065865][ T4462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.084524][ T1324] usb 3-1: Product: syz [ 96.089624][ T1324] usb 3-1: Manufacturer: syz [ 96.094238][ T1324] usb 3-1: SerialNumber: syz [ 96.109950][ T1324] usb 3-1: config 0 descriptor?? [ 96.166104][ T26] audit: type=1326 audit(1791950048.062:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4786 comm="syz.1.117" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb11d20f2d9 code=0x7ffc0000 [ 96.192966][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.228185][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.246287][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.257395][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.266205][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.302706][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.466897][ C0] sched: RT throttling activated [ 98.502619][ T4812] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 99.307752][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.315349][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.350319][ T4462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.361569][ T4828] resource sanity check: requesting [mem 0xfe800000-0xfe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 99.457347][ T4828] caller generic_access_phys+0x1f0/0x380 mapping multiple BARs [ 100.327264][ T1324] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 100.337036][ T1324] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 100.381365][ T1324] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 100.406868][ T1324] f81534: probe of 3-1:0.12 failed with error -71 [ 100.436759][ T1324] usb 3-1: USB disconnect, device number 2 [ 100.535457][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 100.786652][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.843323][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.930826][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 102.937503][ C0] bridge0: topology change detected, propagating [ 102.967078][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.997568][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.018412][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.052755][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.082977][ T4462] device veth0_vlan entered promiscuous mode [ 103.112138][ T4881] netlink: 44 bytes leftover after parsing attributes in process `syz.4.137'. [ 103.160560][ T4881] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.167885][ T4881] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.180257][ T4885] loop0: detected capacity change from 0 to 512 [ 103.276269][ T4885] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.293347][ T4462] device veth1_vlan entered promiscuous mode [ 103.392011][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.418095][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.463019][ T4462] device veth0_macvtap entered promiscuous mode [ 103.505376][ T4462] device veth1_macvtap entered promiscuous mode [ 103.549596][ T4462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.580638][ T4462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.612546][ T4462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.647002][ T4462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.656846][ T4462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.687048][ T4462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.715495][ T4462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.750883][ T4462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.778058][ T4462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.797048][ T4462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.818099][ T4462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.847635][ T4462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.867640][ T4462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.888230][ T4462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.896373][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.913196][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.943048][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.952194][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.986085][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.024833][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.053569][ T4462] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.077579][ T4462] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.086351][ T4462] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.100519][ T4462] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.267707][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.275565][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.323614][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.339144][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.353119][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.390141][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.131948][ T4231] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.264900][ T4951] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 107.404879][ T4932] loop4: detected capacity change from 0 to 40427 [ 107.446776][ T4932] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 107.479124][ T4932] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 107.611913][ T4932] F2FS-fs (loop4): invalid crc value [ 107.787721][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.353043][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.364250][ T4231] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 108.373464][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.381693][ T4932] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.394484][ T4231] usb 3-1: config 0 descriptor?? [ 110.838959][ T4231] hid-led: probe of 0003:27B8:01ED.0001 failed with error -71 [ 110.859163][ T5002] loop5: detected capacity change from 0 to 1024 [ 110.996822][ T4231] usb 3-1: USB disconnect, device number 3 [ 112.245431][ T5002] EXT4-fs (loop5): mounted filesystem without journal. Opts: dax=never,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,errors=remount-ro,stripe=0x0000000000000005,lazytime,init_itable,. Quota mode: none. [ 112.804953][ T26] audit: type=1800 audit(1791950064.752:11): pid=5023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.161" name="addr_trtype" dev="configfs" ino=36051 res=0 errno=0 [ 113.722799][ T5035] process 'syz.5.166' launched './file1' with NULL argv: empty string added [ 113.730274][ T5032] device syzkaller0 entered promiscuous mode [ 113.750843][ T26] audit: type=1800 audit(1791950064.862:12): pid=5017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.161" name="addr_traddr" dev="configfs" ino=36056 res=0 errno=0 [ 113.762400][ T5031] nvmet: transport type 0 not supported [ 113.820866][ T26] audit: type=1800 audit(1791950065.662:13): pid=5017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.161" name="addr_trsvcid" dev="configfs" ino=36064 res=0 errno=0 [ 113.976702][ T5046] device syzkaller0 entered promiscuous mode [ 114.413191][ T5072] ODEBUG: Out of memory. ODEBUG disabled [ 116.460975][ T5078] loop4: detected capacity change from 0 to 1024 [ 117.320441][ T5078] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 118.175254][ T5085] tipc: Started in network mode [ 118.478735][ T5085] tipc: Node identity 4, cluster identity 4711 [ 118.484942][ T5085] tipc: Node number set to 4 [ 118.676156][ T5099] overlayfs: failed to clone upperpath [ 119.933833][ T4262] tipc: Subscription rejected, illegal request [ 120.052668][ T5128] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.089965][ T5128] comedi comedi1: pc212e: I/O port conflict (0x1010164,32) [ 121.922723][ T5171] device syzkaller0 entered promiscuous mode [ 121.958687][ T5171] tipc: Started in network mode [ 121.971558][ T5171] tipc: Node identity 7a89108a9d73, cluster identity 4711 [ 121.989277][ T5171] tipc: Enabled bearer , priority 0 [ 121.998197][ T5169] tipc: Resetting bearer [ 122.020102][ T5175] fuse: Bad value for 'fd' [ 122.059879][ T5169] tipc: Disabling bearer [ 123.150423][ T4231] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.219668][ T5199] binder: 5195:5199 ioctl c0306201 2000000005c0 returned -14 [ 123.243851][ T5199] binder_alloc: 5195: pid 5195 spamming oneway? 2 buffers allocated for a total size of 5120 [ 123.255777][ T5199] binder_alloc: 5195: pid 5195 spamming oneway? 3 buffers allocated for a total size of 5128 [ 123.266613][ T4542] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.598383][ T4231] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 123.617644][ T4231] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 123.646508][ T4231] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 123.680378][ T4542] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.696651][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.712644][ T4542] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 123.779197][ T4231] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 123.807308][ T4231] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 123.937161][ T4542] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.950739][ T4542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.973647][ T4542] usb 1-1: Product: syz [ 123.989433][ T4542] usb 1-1: Manufacturer: syz [ 124.000441][ T4542] usb 1-1: SerialNumber: syz [ 124.129611][ T4542] cdc_mbim 1-1:1.0: skipping garbage [ 124.167430][ T5215] ip_tables: iptables: counters copy to user failed while replacing table [ 124.254929][ T5218] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.268667][ T5170] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 124.317121][ T5170] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 124.331096][ T5177] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 124.351351][ T4231] usb 3-1: USB disconnect, device number 4 [ 124.358472][ T5170] SPCP8x5 ttyUSB0: failed to set control lines: -71 [ 124.382763][ T4231] SPCP8x5 ttyUSB0: failed to set control lines: -19 [ 124.423268][ T4231] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 124.455250][ T4231] spcp8x5 3-1:1.0: device disconnected [ 125.099687][ T5177] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 125.147131][ T4542] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 125.163466][ T4542] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 125.312184][ T4542] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 2e:06:aa:c0:44:28 [ 125.312656][ T5234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 125.772208][ T4232] usb 1-1: USB disconnect, device number 3 [ 125.919113][ T4232] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 126.309693][ T5254] fuse: Bad value for 'fd' [ 126.332253][ T5254] FAULT_INJECTION: forcing a failure. [ 126.332253][ T5254] name failslab, interval 1, probability 0, space 0, times 0 [ 126.370322][ T5254] CPU: 0 PID: 5254 Comm: syz.2.213 Not tainted syzkaller #0 [ 126.377671][ T5254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.387859][ T5254] Call Trace: [ 126.391151][ T5254] [ 126.394103][ T5254] dump_stack_lvl+0x188/0x250 [ 126.398823][ T5254] ? show_regs_print_info+0x20/0x20 [ 126.404048][ T5254] ? load_image+0x410/0x410 [ 126.408575][ T5254] ? __lock_acquire+0x7d40/0x7d40 [ 126.413627][ T5254] should_fail+0x383/0x4b0 [ 126.418073][ T5254] should_failslab+0x5/0x20 [ 126.422600][ T5254] slab_pre_alloc_hook+0x51/0xc0 [ 126.427561][ T5254] kmem_cache_alloc_trace+0x47/0x290 [ 126.432864][ T5254] ? __list_lru_init+0x535/0xac0 [ 126.437827][ T5254] __list_lru_init+0x535/0xac0 [ 126.442628][ T5254] alloc_super+0x787/0x970 [ 126.447067][ T5254] ? kill_mtd_super+0x60/0x60 [ 126.451772][ T5254] sget_fc+0x2d4/0x6f0 [ 126.455870][ T5254] ? mtd_test_super+0x1d0/0x1d0 [ 126.460754][ T5254] ? jffs2_reconfigure+0x310/0x310 [ 126.465877][ T5254] mtd_get_sb+0x5a/0x2b0 [ 126.470142][ T5254] ? mtd_get_sb_by_nr+0x7c/0xa0 [ 126.475009][ T5254] get_tree_mtd+0x5e2/0x760 [ 126.479527][ T5254] ? jffs2_reconfigure+0x310/0x310 [ 126.484643][ T5254] ? mtd_proc_show+0x270/0x270 [ 126.489418][ T5254] ? apparmor_capable+0x12c/0x190 [ 126.494451][ T5254] ? bpf_lsm_capable+0x5/0x10 [ 126.499137][ T5254] ? security_capable+0x85/0xb0 [ 126.504011][ T5254] vfs_get_tree+0x88/0x270 [ 126.508455][ T5254] do_new_mount+0x247/0xa40 [ 126.513204][ T5254] __se_sys_mount+0x2e3/0x3d0 [ 126.518033][ T5254] ? __x64_sys_mount+0xc0/0xc0 [ 126.522822][ T5254] ? lockdep_hardirqs_on+0x94/0x140 [ 126.528043][ T5254] ? __x64_sys_mount+0x1c/0xc0 [ 126.532830][ T5254] do_syscall_64+0x4c/0xa0 [ 126.537260][ T5254] ? clear_bhb_loop+0x30/0x80 [ 126.541951][ T5254] ? clear_bhb_loop+0x30/0x80 [ 126.546639][ T5254] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.552544][ T5254] RIP: 0033:0x7f5536d702d9 [ 126.556969][ T5254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.576584][ T5254] RSP: 002b:00007f5534fc8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.585032][ T5254] RAX: ffffffffffffffda RBX: 00007f5536ff7fa0 RCX: 00007f5536d702d9 [ 126.593105][ T5254] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 00002000000000c0 [ 126.601091][ T5254] RBP: 00007f5536e07888 R08: 0000000000000000 R09: 0000000000000000 [ 126.609077][ T5254] R10: 0000000000800004 R11: 0000000000000246 R12: 0000000000000000 [ 126.617066][ T5254] R13: 00007f5536ff8038 R14: 00007f5536ff7fa0 R15: 00007ffcf5125508 [ 126.625092][ T5254] [ 127.593772][ T5264] device syzkaller0 entered promiscuous mode [ 127.816452][ T5270] ip_tables: iptables: counters copy to user failed while replacing table [ 128.492603][ T4199] Bluetooth: Wrong link type (-22) [ 128.885092][ T5279] loop2: detected capacity change from 0 to 512 [ 130.020941][ T5288] device syzkaller0 entered promiscuous mode [ 130.060471][ T5290] fuse: Unknown parameter '0000000000000000000000500000000000000000000005' [ 130.576264][ T5300] netlink: 792 bytes leftover after parsing attributes in process `syz.2.228'. [ 131.347722][ T5317] loop0: detected capacity change from 0 to 32768 [ 131.495199][ T5317] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 131.574915][ T5330] device ip6gretap0 entered promiscuous mode [ 131.700863][ T5330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 131.747091][ T5330] device ip6gretap0 left promiscuous mode [ 132.091816][ T5317] syz.0.233 (5317) used greatest stack depth: 18240 bytes left [ 132.282265][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 133.542126][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.548462][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.626947][ C1] net_ratelimit: 38 callbacks suppressed [ 134.946784][ T5392] loop5: detected capacity change from 0 to 256 [ 136.664141][ T5417] device syzkaller0 entered promiscuous mode [ 136.997009][ T4542] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 137.967112][ T4542] usb 5-1: Using ep0 maxpacket: 16 [ 138.097896][ T4542] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.121736][ T4542] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.397224][ T4542] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.414890][ T4542] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.433893][ T4542] usb 5-1: Product: syz [ 138.467385][ T4542] usb 5-1: can't set config #1, error -71 [ 138.486547][ T4542] usb 5-1: USB disconnect, device number 2 [ 139.730773][ C1] net_ratelimit: 38 callbacks suppressed [ 140.526961][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.141913][ T5476] loop0: detected capacity change from 0 to 256 [ 141.564468][ T5476] xt_TCPMSS: Only works on TCP SYN packets [ 141.892391][ T5487] device syzkaller0 entered promiscuous mode [ 142.047722][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 142.126195][ T5494] loop0: detected capacity change from 0 to 4096 [ 142.142369][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.187575][ T13] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 142.218932][ T5494] EXT4-fs (loop0): Test dummy encryption mode enabled [ 142.319174][ T5494] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nombcache,,errors=continue. Quota mode: writeback. [ 142.497146][ T13] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 142.517131][ T13] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 142.529348][ T13] usb 5-1: Product: syz [ 142.551269][ T13] usb 5-1: Manufacturer: syz [ 142.588112][ T13] usb 5-1: SerialNumber: syz [ 142.650238][ T13] usb 5-1: config 0 descriptor?? [ 142.707214][ T5464] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 142.737946][ T13] hub 5-1:0.0: bad descriptor, ignoring hub [ 142.743899][ T13] hub: probe of 5-1:0.0 failed with error -5 [ 143.213028][ T5525] loop5: detected capacity change from 0 to 128 [ 144.114850][ T5494] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 144.140757][ T5525] EXT4-fs (loop5): Test dummy encryption mode enabled [ 144.173628][ T5525] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 144.277610][ T5525] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.826960][ C0] net_ratelimit: 41 callbacks suppressed [ 145.784920][ T4546] usb 5-1: USB disconnect, device number 3 [ 145.944637][ T5549] futex_wake_op: syz.1.274 tries to shift op by 144; fix this program [ 145.990631][ T5541] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 147.220182][ T5584] loop5: detected capacity change from 0 to 128 [ 147.721536][ T5599] loop0: detected capacity change from 0 to 128 [ 148.154698][ T5599] FAT-fs (loop0): Directory bread(block 32) failed [ 148.176313][ T5599] FAT-fs (loop0): Directory bread(block 33) failed [ 148.205044][ T5599] FAT-fs (loop0): Directory bread(block 34) failed [ 148.268607][ T5599] FAT-fs (loop0): Directory bread(block 35) failed [ 148.303389][ T5599] FAT-fs (loop0): Directory bread(block 36) failed [ 148.406634][ T5599] FAT-fs (loop0): Directory bread(block 37) failed [ 148.417208][ T5605] netlink: 32 bytes leftover after parsing attributes in process `syz.2.287'. [ 148.426653][ T5599] FAT-fs (loop0): Directory bread(block 38) failed [ 148.480606][ T5607] loop5: detected capacity change from 0 to 512 [ 148.516290][ T5599] FAT-fs (loop0): Directory bread(block 39) failed [ 148.536143][ T5607] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 148.603638][ T5599] FAT-fs (loop0): Directory bread(block 40) failed [ 148.700122][ T5607] EXT4-fs (loop5): 1 truncate cleaned up [ 148.705837][ T5607] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 148.721123][ T5599] FAT-fs (loop0): Directory bread(block 41) failed [ 148.845365][ T26] audit: type=1800 audit(1791950356.796:14): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.288" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 150.225953][ C0] net_ratelimit: 47 callbacks suppressed [ 152.685760][ T4232] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 153.770653][ T4232] usb 6-1: Using ep0 maxpacket: 32 [ 153.895737][ T4232] usb 6-1: config 0 has no interfaces? [ 154.725732][ T4232] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 154.753813][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.848382][ T4232] usb 6-1: Product: syz [ 154.892921][ T4232] usb 6-1: config 0 descriptor?? [ 154.935664][ T4232] usb 6-1: can't set config #0, error -71 [ 154.986449][ T4232] usb 6-1: USB disconnect, device number 2 [ 155.141837][ T5718] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 155.438814][ T5699] loop4: detected capacity change from 0 to 32768 [ 155.745265][ C1] net_ratelimit: 49 callbacks suppressed [ 157.134699][ T5718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.367867][ T5722] device macvlan2 entered promiscuous mode [ 157.907132][ T5722] device bond1 entered promiscuous mode [ 157.971428][ T5722] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.101132][ T5722] team0: Port device macvlan2 added [ 158.513511][ T5756] loop0: detected capacity change from 0 to 32768 [ 158.800690][ T5756] XFS (loop0): Mounting V5 Filesystem [ 158.973767][ T5756] XFS (loop0): Ending clean mount [ 158.986106][ T5756] XFS (loop0): Quotacheck needed: Please wait. [ 159.248391][ T5756] XFS (loop0): Quotacheck: Done. [ 159.614548][ T26] audit: type=1800 audit(1791950367.567:15): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.320" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 160.021542][ T4184] XFS (loop0): Unmounting Filesystem [ 160.954663][ C0] net_ratelimit: 37 callbacks suppressed [ 161.114370][ T5787] block device autoloading is deprecated and will be removed. [ 163.646132][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 163.771824][ T26] audit: type=1326 audit(1791950371.728:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.0.326" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbe35ae2d9 code=0x0 [ 164.321404][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.340'. [ 164.345086][ T5845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.340'. [ 165.994030][ C0] net_ratelimit: 39 callbacks suppressed [ 168.784869][ T5890] tipc: Started in network mode [ 168.790516][ T5890] tipc: Node identity 4, cluster identity 4711 [ 168.796760][ T5890] tipc: Node number set to 4 [ 170.850527][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 171.343366][ C1] net_ratelimit: 46 callbacks suppressed [ 172.040631][ T5933] loop4: detected capacity change from 0 to 512 [ 172.174568][ T5936] loop5: detected capacity change from 0 to 512 [ 172.763382][ T5936] EXT4-fs (loop5): Unrecognized mount option "data=writeback.journal_async_commit" or missing value [ 173.586414][ T5952] loop4: detected capacity change from 0 to 256 [ 173.963902][ T5952] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 174.129816][ T5958] loop5: detected capacity change from 0 to 512 [ 174.156316][ T26] audit: type=1800 audit(1791950382.119:17): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.368" name="file1" dev="loop4" ino=1048642 res=0 errno=0 [ 174.180667][ T5960] loop0: detected capacity change from 0 to 2048 [ 174.250595][ T5958] EXT4-fs (loop5): Ignoring removed bh option [ 174.315079][ T5958] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 174.362784][ T5958] EXT4-fs (loop5): 1 truncate cleaned up [ 174.392103][ T5958] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 174.437208][ T5960] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 174.477944][ T5971] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 174.501200][ T5960] FAULT_INJECTION: forcing a failure. [ 174.501200][ T5960] name failslab, interval 1, probability 0, space 0, times 0 [ 174.515524][ T5960] CPU: 0 PID: 5960 Comm: syz.0.369 Not tainted syzkaller #0 [ 174.522836][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.522878][ T5960] Call Trace: [ 174.522885][ T5960] [ 174.522893][ T5960] dump_stack_lvl+0x188/0x250 [ 174.522921][ T5960] ? show_regs_print_info+0x20/0x20 [ 174.522939][ T5960] ? load_image+0x410/0x410 [ 174.522958][ T5960] ? __might_sleep+0xf0/0xf0 [ 174.522978][ T5960] ? __lock_acquire+0x7d40/0x7d40 [ 174.523004][ T5960] should_fail+0x383/0x4b0 [ 174.523029][ T5960] should_failslab+0x5/0x20 [ 174.523048][ T5960] slab_pre_alloc_hook+0x51/0xc0 [ 174.523075][ T5960] ? ext4_init_io_end+0x25/0x120 [ 174.523097][ T5960] kmem_cache_alloc+0x3d/0x280 [ 174.523115][ T5960] ? kmem_cache_free+0x14c/0x210 [ 174.523136][ T5960] ext4_init_io_end+0x25/0x120 [ 174.523156][ T5960] ext4_writepages+0xa69/0x2d40 [ 174.523183][ T5960] ? __lock_acquire+0x13b3/0x7d40 [ 174.523212][ T5960] ? mark_lock+0x94/0x320 [ 174.523237][ T5960] ? ext4_readpage+0x2e0/0x2e0 [ 174.523257][ T5960] ? verify_lock_unused+0x140/0x140 [ 174.563494][ T5960] ? __lock_acquire+0x7d40/0x7d40 [ 174.582230][ T5960] ? do_raw_spin_lock+0x128/0x2f0 [ 174.582264][ T5960] ? do_raw_spin_unlock+0x11d/0x230 [ 174.582279][ T5960] ? ext4_readpage+0x2e0/0x2e0 [ 174.582298][ T5960] do_writepages+0x493/0x700 [ 174.582324][ T5960] ? filemap_fdatawrite_wbc+0x1e0/0x240 [ 174.582343][ T5960] ? __writepage+0x130/0x130 [ 174.656070][ T5960] ? __lock_acquire+0x7d40/0x7d40 [ 174.661094][ T5960] ? __rwlock_init+0x140/0x140 [ 174.665843][ T5960] ? generic_write_end+0x24d/0x3d0 [ 174.670945][ T5960] ? do_raw_spin_unlock+0x11d/0x230 [ 174.676136][ T5960] filemap_fdatawrite_wbc+0x1eb/0x240 [ 174.681508][ T5960] file_write_and_wait_range+0x14d/0x220 [ 174.687135][ T5960] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 174.692507][ T5960] ? grab_cache_page_write_begin+0xa0/0xa0 [ 174.698305][ T5960] ? rwsem_write_trylock+0x135/0x1c0 [ 174.703593][ T5960] ext4_sync_file+0x20e/0xb10 [ 174.708271][ T5960] ext4_buffered_write_iter+0x32b/0x3a0 [ 174.713815][ T5960] ext4_file_write_iter+0x73f/0x1720 [ 174.719132][ T5960] ? rcu_read_lock_any_held+0xb0/0x130 [ 174.724586][ T5960] ? ext4_file_read_iter+0x6f0/0x6f0 [ 174.729869][ T5960] ? end_current_label_crit_section+0x14b/0x170 [ 174.736104][ T5960] ? memset+0x1e/0x40 [ 174.740077][ T5960] ? iov_iter_init+0xb4/0x170 [ 174.744748][ T5960] vfs_write+0x748/0xd70 [ 174.748992][ T5960] ? file_end_write+0x250/0x250 [ 174.753837][ T5960] ? __fget_files+0x402/0x470 [ 174.758510][ T5960] ? __fdget+0x18b/0x210 [ 174.762745][ T5960] ? __x64_sys_pwrite64+0xf3/0x220 [ 174.767849][ T5960] __x64_sys_pwrite64+0x197/0x220 [ 174.772878][ T5960] ? ksys_pwrite64+0x1c0/0x1c0 [ 174.777643][ T5960] ? lockdep_hardirqs_on+0x94/0x140 [ 174.782837][ T5960] do_syscall_64+0x4c/0xa0 [ 174.787245][ T5960] ? clear_bhb_loop+0x30/0x80 [ 174.791913][ T5960] ? clear_bhb_loop+0x30/0x80 [ 174.796581][ T5960] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.802474][ T5960] RIP: 0033:0x7fdbe35ae2d9 [ 174.806880][ T5960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.826475][ T5960] RSP: 002b:00007fdbe1806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 174.834881][ T5960] RAX: ffffffffffffffda RBX: 00007fdbe3835fa0 RCX: 00007fdbe35ae2d9 [ 174.842844][ T5960] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 174.850828][ T5960] RBP: 00007fdbe3645888 R08: 0000000000000000 R09: 0000000000000000 [ 174.858792][ T5960] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 174.866752][ T5960] R13: 00007fdbe3836038 R14: 00007fdbe3835fa0 R15: 00007ffdf9844f58 [ 174.874727][ T5960] [ 174.917535][ T5960] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 174.944963][ T5958] overlayfs: upper fs needs to support d_type. [ 175.015795][ T5958] overlayfs: Failed to create volatile/dirty file. [ 175.017348][ T5960] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 175.098651][ T5960] EXT4-fs (loop0): This should not happen!! Data will be lost [ 175.098651][ T5960] [ 175.098672][ T5960] EXT4-fs (loop0): Total free blocks count 0 [ 175.098685][ T5960] EXT4-fs (loop0): Free/Dirty block details [ 175.098751][ T5960] EXT4-fs (loop0): free_blocks=2415919104 [ 175.129365][ T5960] EXT4-fs (loop0): dirty_blocks=16 [ 175.143556][ T5960] EXT4-fs (loop0): Block reservation details [ 175.162977][ T5960] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 175.223250][ T4184] EXT4-fs error (device loop0): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 11 [ 175.272255][ T4184] EXT4-fs error (device loop0): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 11 [ 175.859901][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.001733][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.178420][ T5992] gadgetfs: bound to dummy_udc driver [ 176.382752][ C0] net_ratelimit: 48 callbacks suppressed [ 176.755629][ T5996] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 176.841065][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.884106][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.978839][ T6004] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 177.021013][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.035715][ T6004] loop5: detected capacity change from 0 to 512 [ 177.072693][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.093093][ T6010] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 178.484113][ T4284] rpcbind: server 127.0.0.1 not responding, timed out [ 178.754372][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.803171][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.903431][ T6017] device syzkaller0 entered promiscuous mode [ 178.992243][ T6025] loop4: detected capacity change from 0 to 64 [ 179.281894][ T4186] BFS-fs: bfs_iget(): Bad inode number loop4:0000fe02 [ 179.315856][ T4186] BFS-fs: bfs_iget(): Bad inode number loop4:0000fe02 [ 179.502181][ T6042] wlan0 speed is unknown, defaulting to 1000 [ 179.699509][ T9] tipc: Left network mode [ 179.699525][ T6042] wlan0 speed is unknown, defaulting to 1000 [ 179.716539][ T6042] wlan0 speed is unknown, defaulting to 1000 [ 179.792047][ T6042] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 179.900995][ T6042] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 180.291748][ T6042] wlan0 speed is unknown, defaulting to 1000 [ 180.496435][ T6042] wlan0 speed is unknown, defaulting to 1000 [ 180.597144][ T6042] wlan0 speed is unknown, defaulting to 1000 [ 180.613161][ T6042] wlan0 speed is unknown, defaulting to 1000 [ 180.625681][ T6042] wlan0 speed is unknown, defaulting to 1000 [ 180.639792][ T6042] wlan0 speed is unknown, defaulting to 1000 [ 180.792387][ T4546] Bluetooth: hci0: command 0x0409 tx timeout [ 181.136758][ T6011] chnl_net:caif_netlink_parms(): no params data found [ 181.254038][ T6070] loop5: detected capacity change from 0 to 128 [ 181.432148][ C0] net_ratelimit: 31 callbacks suppressed [ 181.450741][ T6076] overlayfs: failed to clone upperpath [ 182.005799][ T6070] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.343181][ T6070] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 182.735591][ T6070] syz.5.399 (pid 6070) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 183.189956][ T4546] Bluetooth: hci0: command 0x041b tx timeout [ 183.341169][ T6086] wlan0 speed is unknown, defaulting to 1000 [ 183.500208][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.534900][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.567381][ T6011] device bridge_slave_0 entered promiscuous mode [ 183.610735][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.658914][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.709199][ T6011] device bridge_slave_1 entered promiscuous mode [ 183.899299][ T6113] xt_l2tp: wrong L2TP version: 0 [ 183.979766][ T6011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.086317][ T6011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.364846][ T6011] team0: Port device team_slave_0 added [ 184.878419][ T6011] team0: Port device team_slave_1 added [ 185.051034][ T4546] Bluetooth: hci2: command 0x0409 tx timeout [ 185.187618][ T9] device hsr_slave_0 left promiscuous mode [ 185.231816][ T9] device hsr_slave_1 left promiscuous mode [ 185.257090][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.265474][ T4546] Bluetooth: hci0: command 0x040f tx timeout [ 185.296394][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.355113][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.387909][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.927954][ T9] device bridge_slave_1 left promiscuous mode [ 185.934225][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.972246][ T9] device bridge_slave_0 left promiscuous mode [ 185.978500][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.052055][ T9] device bond1 left promiscuous mode [ 186.061718][ T4542] Bluetooth: hci1: command 0x0406 tx timeout [ 186.067964][ T4542] Bluetooth: hci3: command 0x0406 tx timeout [ 186.093587][ T9] device veth1_macvtap left promiscuous mode [ 186.116465][ T9] device veth0_macvtap left promiscuous mode [ 186.142394][ T9] device veth1_vlan left promiscuous mode [ 186.171612][ T9] device veth0_vlan left promiscuous mode [ 187.021483][ C1] net_ratelimit: 44 callbacks suppressed [ 187.101597][ T4541] Bluetooth: hci2: command 0x041b tx timeout [ 187.351962][ T4541] Bluetooth: hci0: command 0x0419 tx timeout [ 187.565274][ T9] team0 (unregistering): Port device macvlan2 removed [ 187.633678][ T9] bond1 (unregistering): Released all slaves [ 189.191377][ T4541] Bluetooth: hci2: command 0x040f tx timeout [ 189.950837][ T9] team0 (unregistering): Port device team_slave_1 removed [ 190.052312][ T9] team0 (unregistering): Port device team_slave_0 removed [ 190.239433][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.462712][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.113601][ T9] bond0 (unregistering): Released all slaves [ 191.260980][ T4541] Bluetooth: hci2: command 0x0419 tx timeout [ 191.451268][ T6086] chnl_net:caif_netlink_parms(): no params data found [ 191.763454][ T6188] overlayfs: failed to clone upperpath [ 191.867619][ T6189] SET target dimension over the limit! [ 192.310832][ C0] net_ratelimit: 38 callbacks suppressed [ 192.471310][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.478405][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.796468][ T6011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.131546][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.138511][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.165599][ T6011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.281151][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.287799][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.213625][ T6011] device hsr_slave_0 entered promiscuous mode [ 196.342390][ T6011] device hsr_slave_1 entered promiscuous mode [ 196.407181][ T6011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.445349][ T6011] Cannot create hsr debugfs directory [ 197.420372][ C1] net_ratelimit: 25 callbacks suppressed [ 197.756472][ T4193] Bluetooth: Wrong link type (-22) [ 200.221395][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.281527][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.313745][ T6086] device bridge_slave_0 entered promiscuous mode [ 200.387316][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.452511][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.501682][ T6086] device bridge_slave_1 entered promiscuous mode [ 200.760712][ T6086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.854128][ T6086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.915255][ T6323] overlayfs: failed to clone upperpath [ 201.127210][ T6086] team0: Port device team_slave_0 added [ 201.169168][ T6086] team0: Port device team_slave_1 added [ 201.386253][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.411553][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.510773][ T6086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.560808][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.567793][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.719495][ T6086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.061567][ T6086] device hsr_slave_0 entered promiscuous mode [ 202.206013][ T6086] device hsr_slave_1 entered promiscuous mode [ 202.308804][ T6086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.329676][ T6086] Cannot create hsr debugfs directory [ 202.375704][ T6375] bridge0: port 3(syz_tun) entered blocking state [ 202.392784][ T6375] bridge0: port 3(syz_tun) entered disabled state [ 202.452080][ T6375] device syz_tun entered promiscuous mode [ 202.526708][ T6011] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.815542][ T6011] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.978277][ T6011] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 203.038175][ T6011] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 203.259503][ C1] net_ratelimit: 37 callbacks suppressed [ 203.631098][ T6011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.744614][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.764362][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.813104][ T6011] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.870647][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.892264][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.936737][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.943853][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.044090][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.067629][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.106866][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.138603][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.145730][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.202463][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.283705][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.324246][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.373197][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.426394][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.456536][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.483949][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.495220][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.504147][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.520371][ T6419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.474'. [ 204.587086][ T6425] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 205.240123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.248722][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.324894][ T6011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.354450][ T6086] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 205.403164][ T6086] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 205.479946][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.478'. [ 205.570120][ T6086] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 205.641541][ T6086] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 206.051463][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.063900][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.101366][ T6011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.184904][ T6086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.290014][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.310598][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.347158][ T6086] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.471671][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.492661][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.529606][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.536731][ T4262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.554654][ T4232] Bluetooth: hci4: command 0x0406 tx timeout [ 206.609665][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.666414][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.705781][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.712918][ T4262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.769588][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.831209][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.860726][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.910375][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.965666][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.027373][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.080149][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.098620][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.139371][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.177049][ T6086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.209252][ T6086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.273864][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.342237][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.369386][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.409275][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.418409][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.448431][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.470741][ T6476] netlink: 40 bytes leftover after parsing attributes in process `syz.5.486'. [ 207.539664][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.625913][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.673444][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.744661][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.787011][ T6490] tipc: Failed to remove unknown binding: 66,0,0/0:3299555842/3299555844 [ 207.816812][ T6490] tipc: Failed to remove unknown binding: 66,0,0/0:3299555842/3299555843 [ 207.844643][ T6491] tipc: Failed to remove unknown binding: 66,0,0/0:3299555842/3299555844 [ 207.884759][ T6491] tipc: Failed to remove unknown binding: 66,0,0/0:3299555842/3299555843 [ 207.941600][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.983316][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.000418][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.045982][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.104366][ T6011] device veth0_vlan entered promiscuous mode [ 208.126784][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.172360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.233778][ T6086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.278333][ T6011] device veth1_vlan entered promiscuous mode [ 208.298948][ C0] net_ratelimit: 30 callbacks suppressed [ 208.365497][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.390469][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.445904][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.465083][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.497769][ T6011] device veth0_macvtap entered promiscuous mode [ 208.538399][ T6011] device veth1_macvtap entered promiscuous mode [ 208.692544][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.724026][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.786650][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.982839][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.162041][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.380517][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.410555][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.561093][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.571323][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.597069][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.606331][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.663764][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.711984][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.728720][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.764504][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.795300][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.819179][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.856845][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.879629][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.915815][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.989901][ T6011] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.031837][ T6011] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.066448][ T6011] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.103909][ T6011] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.197104][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.207405][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.309619][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.318144][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.353974][ T6086] device veth0_vlan entered promiscuous mode [ 210.404942][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.420221][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.455380][ T6086] device veth1_vlan entered promiscuous mode [ 210.508168][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.536047][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.593243][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.604578][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.621876][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.639967][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.672646][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.712796][ T6086] device veth0_macvtap entered promiscuous mode [ 210.837132][ T6086] device veth1_macvtap entered promiscuous mode [ 210.900819][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.932175][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.959003][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.003683][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.042681][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.075874][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.116355][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.147440][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.188164][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.209557][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.228671][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.266385][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.275529][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.304569][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.322129][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.342239][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.363944][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.393665][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.418004][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.442372][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.463098][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.485118][ T6086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.509061][ T6086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.533289][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.584591][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.606249][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.629253][ T6086] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.648187][ T6086] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.667211][ T6086] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.676727][ T6086] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.047623][ T9] device hsr_slave_0 left promiscuous mode [ 212.070066][ T9] device hsr_slave_1 left promiscuous mode [ 212.135112][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.135166][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.249275][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.265126][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.305918][ T9] device bridge_slave_1 left promiscuous mode [ 212.330324][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.359175][ T9] device bridge_slave_0 left promiscuous mode [ 212.365413][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.442777][ T9] device veth1_macvtap left promiscuous mode [ 212.477355][ T9] device veth0_macvtap left promiscuous mode [ 212.483629][ T9] device veth1_vlan left promiscuous mode [ 212.520109][ T9] device veth0_vlan left promiscuous mode [ 213.218498][ T9] team0 (unregistering): Port device team_slave_1 removed [ 213.282225][ T9] team0 (unregistering): Port device team_slave_0 removed [ 213.338289][ C1] net_ratelimit: 106 callbacks suppressed [ 213.399583][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.439190][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.254359][ T9] bond0 (unregistering): Released all slaves [ 214.397384][ T4374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.423467][ T4374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.474776][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.509690][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.381'. [ 214.521005][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.669477][ T6590] bond0: (slave bond_slave_1): Releasing backup interface [ 214.893214][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.972007][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.235266][ T6615] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.244055][ T6615] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.252877][ T6615] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.261822][ T6615] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.078158][ T4541] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 216.348331][ T4541] usb 7-1: Using ep0 maxpacket: 32 [ 216.371424][ T6648] tipc: Failed to remove unknown binding: 66,0,0/0:4079510309/4079510311 [ 216.447970][ T6648] tipc: Failed to remove unknown binding: 66,0,0/0:4079510309/4079510310 [ 216.479498][ T6648] tipc: Failed to remove unknown binding: 66,0,0/0:4079510309/4079510311 [ 216.488429][ T4541] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 216.503264][ T4541] usb 7-1: config 0 has no interface number 0 [ 216.510444][ T6648] tipc: Failed to remove unknown binding: 66,0,0/0:4079510309/4079510310 [ 216.538780][ T4541] usb 7-1: config 0 interface 12 has no altsetting 0 [ 216.719513][ T4541] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 216.955362][ T4541] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.079461][ T6654] netlink: 40 bytes leftover after parsing attributes in process `syz.7.517'. [ 217.213099][ T4541] usb 7-1: Product: syz [ 217.335206][ T4541] usb 7-1: Manufacturer: syz [ 217.528494][ T4541] usb 7-1: SerialNumber: syz [ 217.553702][ T4541] usb 7-1: config 0 descriptor?? [ 218.377697][ C1] net_ratelimit: 57 callbacks suppressed [ 220.980635][ T6714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.532'. [ 221.025419][ T26] audit: type=1326 audit(1791950428.985:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.6.530" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03bc6a2d9 code=0x7ffc0000 [ 221.113115][ T26] audit: type=1326 audit(1791950429.015:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.6.530" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03bc6a2d9 code=0x7ffc0000 [ 221.167685][ T4541] f81534 7-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 221.178728][ T4541] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 221.228619][ T4541] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 221.256825][ T26] audit: type=1326 audit(1791950429.025:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.6.530" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa03bc6a2d9 code=0x7ffc0000 [ 221.277350][ T4541] f81534: probe of 7-1:0.12 failed with error -71 [ 221.348789][ T4541] usb 7-1: USB disconnect, device number 2 [ 221.495469][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.536'. [ 221.521649][ T26] audit: type=1326 audit(1791950429.025:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.6.530" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03bc6a2d9 code=0x7ffc0000 [ 222.193567][ T26] audit: type=1326 audit(1791950429.025:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.6.530" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03bc6a2d9 code=0x7ffc0000 [ 222.234529][ T26] audit: type=1326 audit(1791950429.045:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.6.530" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa03bc6a2d9 code=0x7ffc0000 [ 222.417229][ T26] audit: type=1326 audit(1791950429.045:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.6.530" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03bc6a2d9 code=0x7ffc0000 [ 222.515137][ T26] audit: type=1326 audit(1791950429.045:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.6.530" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03bc6a2d9 code=0x7ffc0000 [ 222.546884][ T26] audit: type=1326 audit(1791950429.045:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.6.530" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa03bc6a2d9 code=0x7ffc0000 [ 222.652082][ T26] audit: type=1326 audit(1791950429.045:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.6.530" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03bc6a2d9 code=0x7ffc0000 [ 223.112682][ T6757] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 223.602042][ C1] net_ratelimit: 49 callbacks suppressed [ 223.805517][ T6764] kvm: apic: phys broadcast and lowest prio [ 224.317001][ T1324] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 224.567055][ T1324] usb 7-1: Using ep0 maxpacket: 32 [ 224.687886][ T1324] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.889283][ T1324] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.962532][ T6795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.553'. [ 224.979468][ T1324] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 225.030016][ T1324] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.073556][ T6790] loop7: detected capacity change from 0 to 4096 [ 225.083892][ T6799] jffs2: notice: (6799) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 225.133135][ T1324] usb 7-1: config 0 descriptor?? [ 225.188255][ T1324] hub 7-1:0.0: USB hub found [ 225.407097][ T1324] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 225.626893][ T6790] ntfs3: loop7: Failed to load $Extend. [ 225.850258][ T1324] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0 [ 226.020075][ T1324] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 226.731700][ T4618] usb 7-1: USB disconnect, device number 3 [ 226.930651][ T6827] fido_id[6827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 227.093681][ T6086] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 227.132213][ T6086] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 227.249719][ T4618] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 228.100401][ T4618] usb 7-1: Using ep0 maxpacket: 32 [ 228.171744][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.5.567'. [ 228.181227][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.5.567'. [ 228.190114][ T6849] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 228.326810][ T4618] usb 7-1: device descriptor read/all, error -71 [ 228.786745][ C0] net_ratelimit: 39 callbacks suppressed [ 229.368407][ T6873] loop6: detected capacity change from 0 to 512 [ 229.437919][ T6873] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 229.658179][ T6873] EXT4-fs (loop6): 1 truncate cleaned up [ 229.663880][ T6873] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 230.616591][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 230.616668][ T26] audit: type=1800 audit(1791950438.486:43): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.573" name="file3" dev="loop6" ino=16 res=0 errno=0 [ 231.323655][ T6896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.373027][ T6898] jffs2: notice: (6898) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 231.643346][ T6912] loop6: detected capacity change from 0 to 2048 [ 231.700770][ T6912] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.612389][ T6937] bridge0: port 3(netdevsim0) entered blocking state [ 233.619439][ T6937] bridge0: port 3(netdevsim0) entered disabled state [ 233.637560][ T6937] device netdevsim0 entered promiscuous mode [ 233.645459][ T6937] bridge0: port 3(netdevsim0) entered blocking state [ 233.652915][ T6937] bridge0: port 3(netdevsim0) entered forwarding state [ 233.807550][ C0] net_ratelimit: 45 callbacks suppressed [ 237.923819][ T6989] No such timeout policy "syz1" [ 238.855256][ C1] net_ratelimit: 39 callbacks suppressed [ 239.585517][ T7016] IPVS: fo: FWM 3 0x00000003 - no destination available [ 241.231367][ T7048] fuse: Bad value for 'fd' [ 241.239895][ T7046] Cannot find add_set index 1 as target [ 244.193527][ C1] net_ratelimit: 59 callbacks suppressed [ 244.823015][ T7085] ip_tables: iptables: counters copy to user failed while replacing table [ 245.448320][ T26] audit: type=1326 audit(1791950453.248:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7075 comm="syz.7.621" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0946432d9 code=0x0 [ 247.466163][ T7109] netlink: 40 bytes leftover after parsing attributes in process `syz.6.629'. [ 248.523887][ T7127] loop6: detected capacity change from 0 to 1024 [ 248.780302][ T7127] hfsplus: extend alloc file! (8192,512,393216) [ 249.254037][ C0] net_ratelimit: 48 callbacks suppressed [ 251.629763][ T7166] loop6: detected capacity change from 0 to 32768 [ 252.454442][ T7166] XFS (loop6): Mounting V5 Filesystem [ 252.580088][ T7166] XFS (loop6): Ending clean mount [ 252.592567][ T7166] XFS (loop6): Quotacheck needed: Please wait. [ 252.775127][ T7166] XFS (loop6): Quotacheck: Done. [ 253.596345][ T7203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.646'. [ 253.612100][ T7203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.646'. [ 254.231374][ T6011] XFS (loop6): Unmounting Filesystem [ 254.258546][ T7209] tmpfs: Unknown parameter 'usrquota))9c>Pcqt9`' [ 254.299836][ C0] net_ratelimit: 50 callbacks suppressed [ 255.674783][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.681147][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.964262][ T7255] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 259.704151][ C1] net_ratelimit: 29 callbacks suppressed [ 259.743050][ T4286] tipc: Subscription rejected, illegal request [ 261.564165][ T7319] overlayfs: failed to clone upperpath [ 261.978050][ T7328] loop6: detected capacity change from 0 to 2048 [ 262.084281][ T7328] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.666943][ C1] net_ratelimit: 41 callbacks suppressed [ 264.777894][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.679'. [ 265.422395][ T7383] device lo entered promiscuous mode [ 265.465572][ T7383] device tunl0 entered promiscuous mode [ 265.534429][ T7383] device gre0 entered promiscuous mode [ 267.221054][ T7383] device gretap0 entered promiscuous mode [ 267.491987][ T7383] device erspan0 entered promiscuous mode [ 267.542031][ T7383] device ip_vti0 entered promiscuous mode [ 267.717359][ T7383] device ip6_vti0 entered promiscuous mode [ 268.379152][ T7412] CIFS: Attempting to mount \\127.0.0.1\share [ 268.511645][ T7383] device sit0 entered promiscuous mode [ 268.615862][ T7425] overlayfs: failed to clone upperpath [ 268.930545][ T7383] device ip6tnl0 entered promiscuous mode [ 268.958763][ T7412] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 269.066599][ T7412] CIFS: VFS: Error connecting to socket. Aborting operation. [ 269.074401][ T7412] CIFS: VFS: cifs_mount failed w/return code = -4 [ 269.246816][ T7383] device ip6gre0 entered promiscuous mode [ 269.848382][ T7383] device syz_tun entered promiscuous mode [ 269.882613][ C1] net_ratelimit: 31 callbacks suppressed [ 270.015409][ T7383] device ip6gretap0 entered promiscuous mode [ 270.079322][ T7383] bridge0: port 3(netdevsim0) entered disabled state [ 270.086207][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.094264][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.140219][ T7383] device bridge0 entered promiscuous mode [ 270.206875][ T7383] device vcan0 entered promiscuous mode [ 270.362953][ T7383] device bond0 entered promiscuous mode [ 270.376759][ T7383] device bond_slave_0 entered promiscuous mode [ 271.052271][ T7383] device team0 entered promiscuous mode [ 271.072196][ T7383] device team_slave_0 entered promiscuous mode [ 271.104703][ T7383] device team_slave_1 entered promiscuous mode [ 271.269647][ T7383] device dummy0 entered promiscuous mode [ 272.249153][ T7383] device nlmon0 entered promiscuous mode [ 272.263216][ T7383] device caif0 entered promiscuous mode [ 272.276506][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.704'. [ 272.937741][ T7383] device batadv0 entered promiscuous mode [ 273.013042][ T7383] device vxcan0 entered promiscuous mode [ 273.032803][ T7383] device vxcan1 entered promiscuous mode [ 273.055444][ T7383] device veth0 entered promiscuous mode [ 273.226488][ T7383] device veth1 entered promiscuous mode [ 274.427797][ T7383] device wg0 entered promiscuous mode [ 274.561332][ T7383] device wg1 entered promiscuous mode [ 274.610814][ T7383] device wg2 entered promiscuous mode [ 274.643350][ T7383] device veth0_to_bridge entered promiscuous mode [ 274.691725][ T7474] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 274.763410][ T7383] device veth1_to_bridge entered promiscuous mode [ 274.832569][ T7383] device veth0_to_bond entered promiscuous mode [ 274.905378][ T7383] device veth0_to_team entered promiscuous mode [ 274.968853][ T7383] device veth1_to_team entered promiscuous mode [ 275.024830][ T7383] device veth0_to_batadv entered promiscuous mode [ 275.042516][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.074450][ T7383] device batadv_slave_0 entered promiscuous mode [ 275.113637][ T7383] device veth1_to_batadv entered promiscuous mode [ 275.140624][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.392156][ T7383] device batadv_slave_1 entered promiscuous mode [ 275.442669][ T7383] device xfrm0 entered promiscuous mode [ 275.446185][ C1] net_ratelimit: 66 callbacks suppressed [ 275.493916][ T7383] device veth0_to_hsr entered promiscuous mode [ 275.554752][ T7383] device veth1_to_hsr entered promiscuous mode [ 275.639364][ T7383] device hsr0 entered promiscuous mode [ 275.677323][ T7383] device veth1_virt_wifi entered promiscuous mode [ 275.725327][ T7383] device veth0_virt_wifi entered promiscuous mode [ 275.746913][ T7383] device virt_wifi0 entered promiscuous mode [ 275.826901][ T7383] device vlan0 entered promiscuous mode [ 275.840331][ T7383] device vlan1 entered promiscuous mode [ 275.847569][ T7383] device macvlan0 entered promiscuous mode [ 275.867285][ T7383] device macvlan1 entered promiscuous mode [ 275.879401][ T7383] device ipvlan0 entered promiscuous mode [ 275.888214][ T7383] device ipvlan1 entered promiscuous mode [ 275.926513][ T7383] device macvtap0 entered promiscuous mode [ 275.944582][ T7383] device macsec0 entered promiscuous mode [ 275.976839][ T7383] device geneve0 entered promiscuous mode [ 275.987338][ T7383] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.000602][ T7383] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.012816][ T7383] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.029857][ T7383] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.039357][ T7383] device geneve1 entered promiscuous mode [ 276.067664][ T7383] device netdevsim1 entered promiscuous mode [ 276.081564][ T7383] device netdevsim2 entered promiscuous mode [ 276.097146][ T7383] device netdevsim3 entered promiscuous mode [ 276.115695][ T7383] device wlan0 entered promiscuous mode [ 276.130455][ T7383] device wlan1 entered promiscuous mode [ 276.637771][ T7498] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 278.183704][ T7521] SET target dimension over the limit! [ 279.562858][ T7531] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 279.627080][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'. [ 279.794308][ T7541] netlink: 36 bytes leftover after parsing attributes in process `syz.5.727'. [ 281.008914][ C1] net_ratelimit: 32 callbacks suppressed [ 281.445730][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880605d5400: rx timeout, send abort [ 281.923893][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880605d4000: rx timeout, send abort [ 281.932854][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880605d5400: abort rx timeout. Force session deactivation [ 282.908765][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880605d4000: abort rx timeout. Force session deactivation [ 285.370487][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.7.737'. [ 286.085734][ C1] net_ratelimit: 15 callbacks suppressed [ 289.272189][ T7639] overlayfs: failed to clone upperpath [ 290.584311][ T7666] fuse: Unknown parameter 'fd0x0000000000000004' [ 291.437706][ C1] net_ratelimit: 32 callbacks suppressed [ 296.574916][ C1] net_ratelimit: 32 callbacks suppressed [ 296.616937][ T26] audit: type=1326 audit(1791951274.248:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.7.769" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0946432d9 code=0x7ffc0000 [ 296.670777][ T26] audit: type=1326 audit(1791951274.279:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.7.769" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0946432d9 code=0x7ffc0000 [ 296.771621][ T26] audit: type=1326 audit(1791951274.279:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.7.769" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0946432d9 code=0x7ffc0000 [ 296.811816][ T26] audit: type=1326 audit(1791951274.279:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.7.769" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0946432d9 code=0x7ffc0000 [ 297.378750][ T26] audit: type=1326 audit(1791951274.279:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.7.769" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb0946432d9 code=0x7ffc0000 [ 297.538271][ T26] audit: type=1326 audit(1791951274.279:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.7.769" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0946432d9 code=0x7ffc0000 [ 297.883709][ T26] audit: type=1326 audit(1791951274.279:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.7.769" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0946432d9 code=0x7ffc0000 [ 298.050195][ T26] audit: type=1326 audit(1791951274.279:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.7.769" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0946432d9 code=0x7ffc0000 [ 298.085922][ T26] audit: type=1326 audit(1791951274.279:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.7.769" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0946432d9 code=0x7ffc0000 [ 298.171645][ T26] audit: type=1326 audit(1791951274.279:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.7.769" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0946432d9 code=0x7ffc0000 [ 298.248391][ T7754] xt_TCPMSS: Only works on TCP SYN packets [ 299.240945][ T7777] netem: change failed [ 301.736099][ C1] net_ratelimit: 25 callbacks suppressed [ 301.873387][ T26] kauditd_printk_skb: 65 callbacks suppressed [ 301.873398][ T26] audit: type=1326 audit(1791951535.769:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.7.781" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0946432d9 code=0x0 [ 301.904589][ T4542] Bluetooth: hci0: command 0x0406 tx timeout [ 303.789273][ T7840] No source specified [ 303.820914][ T7840] using random self ethernet address [ 303.826672][ T7840] using random host ethernet address [ 303.853072][ T7840] Need at least one configuration in g1. [ 303.860894][ T7840] udc dummy_udc.0: failed to start g1: -22 [ 305.102738][ T13] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 306.350639][ T7843] binder: 7842:7843 ioctl c018620c 200000000900 returned -1 [ 307.363274][ T4542] Bluetooth: hci2: command 0x0406 tx timeout [ 307.374981][ C1] net_ratelimit: 37 callbacks suppressed [ 307.534537][ T13] usb 7-1: unable to get BOS descriptor or descriptor too short [ 307.669968][ T13] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 308.440828][ T13] usb 7-1: can't read configurations, error -71 [ 310.055992][ T7889] tipc: Started in network mode [ 310.060952][ T7889] tipc: Node identity 4, cluster identity 4711 [ 310.067115][ T7889] tipc: Node number set to 4 [ 312.184504][ C0] net_ratelimit: 27 callbacks suppressed [ 312.749225][ T7951] tipc: Started in network mode [ 312.754197][ T7951] tipc: Node identity 4, cluster identity 4711 [ 312.760816][ T7951] tipc: Node number set to 4 [ 313.392889][ T7965] capability: warning: `syz.1.823' uses 32-bit capabilities (legacy support in use) [ 314.574207][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.580638][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.608186][ T7988] tipc: Cannot configure node identity twice [ 316.190712][ T8009] loop6: detected capacity change from 0 to 32768 [ 316.287962][ T8009] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.841 (8009) [ 317.200499][ C1] net_ratelimit: 40 callbacks suppressed [ 317.221399][ T8009] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 317.267749][ T8009] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 317.316200][ T8009] BTRFS info (device loop6): use zstd compression, level 3 [ 317.337424][ T8009] BTRFS info (device loop6): using free space tree [ 317.343980][ T8009] BTRFS info (device loop6): has skinny extents [ 317.755603][ T8009] BTRFS error (device loop6): open_ctree failed: -12 [ 318.026123][ T8060] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by udevd (8060) [ 319.417038][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'. [ 321.908965][ T8190] X.509: Got cert with pkey (16) and sig (15) algorithm OIDs [ 322.232614][ T8187] tipc: Started in network mode [ 322.237582][ C1] net_ratelimit: 29 callbacks suppressed [ 322.243433][ T8187] tipc: Node identity 4, cluster identity 4711 [ 322.249595][ T8187] tipc: Node number set to 4 [ 322.781728][ T8215] [U]  [ 323.105347][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.905'. [ 324.190932][ T8236] netlink: 'syz.5.910': attribute type 1 has an invalid length. [ 324.859323][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.7.922'. [ 324.872288][ T8275] device macsec0 entered promiscuous mode [ 327.151524][ C0] net_ratelimit: 24 callbacks suppressed [ 327.187732][ T8295] capability: warning: `syz.1.927' uses deprecated v2 capabilities in a way that may be insecure [ 330.145529][ T8353] loop6: detected capacity change from 0 to 32768 [ 330.379451][ T8370] jffs2: notice: (8370) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 330.416599][ T8353] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 330.475987][ T8353] BTRFS info (device loop6): use zlib compression, level 3 [ 330.506359][ T8353] BTRFS info (device loop6): using free space tree [ 330.536590][ T8353] BTRFS info (device loop6): has skinny extents [ 330.702727][ T8353] BTRFS info (device loop6): enabling ssd optimizations [ 330.736639][ T26] audit: type=1800 audit(1791951566.059:121): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.940" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 332.519009][ C1] net_ratelimit: 32 callbacks suppressed [ 333.261626][ T8458] ip_tables: iptables: counters copy to user failed while replacing table [ 334.707013][ T8479] loop6: detected capacity change from 0 to 1024 [ 334.771828][ T8479] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 334.803871][ T8479] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 334.824814][ T8479] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #3: comm syz.6.972: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 334.910559][ T8479] EXT4-fs (loop6): no journal found [ 334.938430][ T8479] EXT4-fs (loop6): can't get journal size [ 334.957050][ T8479] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 335.838780][ T8486] tipc: Cannot configure node identity twice [ 337.357744][ C1] net_ratelimit: 43 callbacks suppressed [ 337.848103][ T8518] IPv6: Can't replace route, no match found [ 337.968617][ T8522] loop6: detected capacity change from 0 to 128 [ 338.115592][ T8522] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 338.163916][ T8522] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.876679][ T8535] loop6: detected capacity change from 0 to 64 [ 338.899752][ T8535] hfs: uid requires an argument [ 339.041375][ T8535] hfs: unable to parse mount options [ 339.627863][ T8547] loop6: detected capacity change from 0 to 1024 [ 339.779692][ T8550] kAFS: No cell specified [ 339.826758][ T8547] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 339.903937][ T8547] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.746765][ T8558] tipc: Cannot configure node identity twice [ 340.864936][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 341.971719][ T8585] Cannot find set identified by id 0 to match [ 342.774846][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 342.881864][ C1] net_ratelimit: 23 callbacks suppressed [ 342.904779][ T8615] loop6: detected capacity change from 0 to 2048 [ 343.063433][ T8615] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,errors=remount-ro,noinit_itable,barrier,quota,delalloc,. Quota mode: writeback. [ 343.088271][ T8615] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.345104][ T8622] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 344.451625][ T8622] EXT4-fs (loop6): Remounting filesystem read-only [ 347.716156][ C1] net_ratelimit: 27 callbacks suppressed [ 349.577153][ T8706] loop7: detected capacity change from 0 to 7 [ 349.678584][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.689947][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 349.700186][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.711093][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 349.714633][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.730503][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 349.769171][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.780142][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 349.818574][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.829524][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 349.867226][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.878199][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 349.919282][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.930238][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 349.941072][ T8706] ldm_validate_partition_table(): Disk read failed. [ 349.980697][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.991664][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 350.083958][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 350.094905][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 350.103001][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 350.113968][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 350.177637][ T8706] Dev loop7: unable to read RDB block 0 [ 350.188769][ T8706] loop7: unable to read partition table [ 350.209979][ T8706] loop7: partition table beyond EOD, truncated [ 350.232318][ T8706] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`4FLQk݊5) failed (rc=-5) [ 351.891442][ T8758] overlayfs: failed to clone upperpath [ 352.040234][ T8761] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1064'. [ 352.118631][ T8761] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1064'. [ 352.559778][ C1] net_ratelimit: 31 callbacks suppressed [ 352.624769][ T8778] bridge0: port 3(netdevsim0) entered blocking state [ 352.631578][ T8778] bridge0: port 3(netdevsim0) entered disabled state [ 352.639556][ T8778] device netdevsim0 entered promiscuous mode [ 352.646201][ T8778] bridge0: port 3(netdevsim0) entered blocking state [ 352.652944][ T8778] bridge0: port 3(netdevsim0) entered forwarding state [ 353.686842][ T8798] loop6: detected capacity change from 0 to 1024 [ 354.545355][ T8816] jffs2: notice: (8816) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 357.306910][ T8849] overlayfs: failed to clone upperpath [ 357.359498][ C1] net_ratelimit: 35 callbacks suppressed [ 358.525941][ T8888] jffs2: notice: (8888) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 362.608080][ C0] net_ratelimit: 45 callbacks suppressed [ 362.707117][ T8966] jffs2: notice: (8966) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 363.625045][ T8981] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1142'. [ 363.849157][ T8985] wlan0 speed is unknown, defaulting to 1000 [ 364.721125][ T9008] jffs2: notice: (9008) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 366.493040][ T8429] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 367.493441][ C0] net_ratelimit: 29 callbacks suppressed [ 367.627090][ T8429] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 367.654585][ T8429] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.679361][ T8429] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 367.688536][ T8429] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.979319][ T8429] usb 7-1: usb_control_msg returned -32 [ 367.985035][ T8429] usbtmc 7-1:16.0: can't read capabilities [ 368.254190][ T9107] overlayfs: failed to clone upperpath [ 368.580634][ T1324] usb 7-1: USB disconnect, device number 8 [ 369.378266][ T9116] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 369.415162][ T9116] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 370.857079][ T9149] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 370.890061][ T9149] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 372.328824][ C0] net_ratelimit: 45 callbacks suppressed [ 372.528388][ T9197] loop6: detected capacity change from 0 to 256 [ 372.621553][ T9197] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 372.683530][ T9197] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 372.767309][ T9197] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 373.058447][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.064791][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.607051][ T9240] FAULT_INJECTION: forcing a failure. [ 374.607051][ T9240] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 374.685547][ T9240] CPU: 0 PID: 9240 Comm: syz.6.1235 Not tainted syzkaller #0 [ 374.693100][ T9240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.703317][ T9240] Call Trace: [ 374.706658][ T9240] [ 374.709706][ T9240] dump_stack_lvl+0x188/0x250 [ 374.714451][ T9240] ? show_regs_print_info+0x20/0x20 [ 374.714471][ T9240] ? load_image+0x410/0x410 [ 374.714496][ T9240] ? __lock_acquire+0x7d40/0x7d40 [ 374.724184][ T9240] should_fail+0x383/0x4b0 [ 374.733670][ T9240] _copy_from_iter+0x415/0x1160 [ 374.738570][ T9240] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 374.743956][ T9240] ? __virt_addr_valid+0x3c6/0x470 [ 374.749160][ T9240] ? __phys_addr_symbol+0x2b/0x70 [ 374.754198][ T9240] ? __check_object_size+0x30c/0x410 [ 374.759590][ T9240] netlink_sendmsg+0x758/0xbe0 [ 374.759689][ T9240] ? netlink_getsockopt+0x570/0x570 [ 374.769633][ T9240] ? aa_sock_msg_perm+0x94/0x150 [ 374.769735][ T9240] ? apparmor_socket_sendmsg+0x88/0x230 [ 374.780185][ T9240] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 374.785632][ T9240] ? security_socket_sendmsg+0x7c/0xa0 [ 374.791197][ T9240] sock_write_iter+0x2a6/0x3a0 [ 374.796058][ T9240] ? sock_read_iter+0x380/0x380 [ 374.800953][ T9240] do_iter_readv_writev+0x47d/0x5f0 [ 374.806262][ T9240] ? aa_path_link+0x8a0/0x8a0 [ 374.810965][ T9240] ? generic_file_rw_checks+0x280/0x280 [ 374.816540][ T9240] ? common_file_perm+0x171/0x1c0 [ 374.821582][ T9240] ? fsnotify_perm+0x5d/0x560 [ 374.826277][ T9240] ? security_file_permission+0x75/0xa0 [ 374.831850][ T9240] do_iter_write+0x1f8/0x7a0 [ 374.836458][ T9240] ? import_iovec+0x6f/0xa0 [ 374.840981][ T9240] do_writev+0x281/0x480 [ 374.845257][ T9240] ? do_readv+0x460/0x460 [ 374.849616][ T9240] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 374.855622][ T9240] ? lock_chain_count+0x20/0x20 [ 374.860583][ T9240] ? lockdep_hardirqs_on+0x94/0x140 [ 374.865903][ T9240] do_syscall_64+0x4c/0xa0 [ 374.870334][ T9240] ? clear_bhb_loop+0x30/0x80 [ 374.875135][ T9240] ? clear_bhb_loop+0x30/0x80 [ 374.879837][ T9240] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 374.885775][ T9240] RIP: 0033:0x7fa03bc6a2d9 [ 374.890227][ T9240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.909948][ T9240] RSP: 002b:00007fa039ec2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 374.918465][ T9240] RAX: ffffffffffffffda RBX: 00007fa03bef1fa0 RCX: 00007fa03bc6a2d9 [ 374.926454][ T9240] RDX: 0000000000000003 RSI: 0000200000000580 RDI: 0000000000000003 [ 374.934428][ T9240] RBP: 00007fa03bd01888 R08: 0000000000000000 R09: 0000000000000000 [ 374.934441][ T9240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.934450][ T9240] R13: 00007fa03bef2038 R14: 00007fa03bef1fa0 R15: 00007ffcd9c6e788 [ 374.934474][ T9240] [ 375.185883][ T9258] overlayfs: failed to clone upperpath [ 375.922503][ T9279] FAULT_INJECTION: forcing a failure. [ 375.922503][ T9279] name failslab, interval 1, probability 0, space 0, times 0 [ 375.988844][ T9279] CPU: 0 PID: 9279 Comm: syz.7.1244 Not tainted syzkaller #0 [ 375.996273][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.006334][ T9279] Call Trace: [ 376.009618][ T9279] [ 376.012558][ T9279] dump_stack_lvl+0x188/0x250 [ 376.017253][ T9279] ? show_regs_print_info+0x20/0x20 [ 376.022467][ T9279] ? load_image+0x410/0x410 [ 376.026985][ T9279] ? __might_sleep+0xf0/0xf0 [ 376.031698][ T9279] ? __lock_acquire+0x7d40/0x7d40 [ 376.036752][ T9279] should_fail+0x383/0x4b0 [ 376.041194][ T9279] should_failslab+0x5/0x20 [ 376.045784][ T9279] slab_pre_alloc_hook+0x51/0xc0 [ 376.050764][ T9279] kmem_cache_alloc_trace+0x47/0x290 [ 376.050791][ T9279] ? io_sqe_files_register+0x26d/0xa00 [ 376.062216][ T9279] io_sqe_files_register+0x26d/0xa00 [ 376.067518][ T9279] ? io_sqe_buffers_unregister+0xf0/0xf0 [ 376.067549][ T9279] __se_sys_io_uring_register+0x55f/0xe40 [ 376.078883][ T9279] ? lockdep_hardirqs_on+0x94/0x140 [ 376.078912][ T9279] do_syscall_64+0x4c/0xa0 [ 376.088495][ T9279] ? clear_bhb_loop+0x30/0x80 [ 376.088518][ T9279] ? clear_bhb_loop+0x30/0x80 [ 376.097841][ T9279] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.097866][ T9279] RIP: 0033:0x7fb0946432d9 [ 376.108154][ T9279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.127757][ T9279] RSP: 002b:00007fb09289b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 376.127790][ T9279] RAX: ffffffffffffffda RBX: 00007fb0948cafa0 RCX: 00007fb0946432d9 [ 376.127803][ T9279] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000003 [ 376.144158][ T9279] RBP: 00007fb0946da888 R08: 0000000000000000 R09: 0000000000000000 [ 376.144173][ T9279] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 376.144183][ T9279] R13: 00007fb0948cb038 R14: 00007fb0948cafa0 R15: 00007ffdfb45d2c8 [ 376.144209][ T9279] [ 376.375106][ T9286] overlayfs: failed to clone upperpath [ 377.627447][ C1] net_ratelimit: 38 callbacks suppressed [ 378.377113][ T9308] bridge0: port 4(syz_tun) entered blocking state [ 378.422174][ T9308] bridge0: port 4(syz_tun) entered disabled state [ 378.464547][ T9308] device syz_tun entered promiscuous mode [ 378.529114][ T9308] bridge0: port 4(syz_tun) entered blocking state [ 378.535720][ T9308] bridge0: port 4(syz_tun) entered forwarding state [ 379.813853][ T9299] loop6: detected capacity change from 0 to 32768 [ 380.128275][ T9299] XFS (loop6): Mounting V5 Filesystem [ 380.276775][ T9299] XFS (loop6): Ending clean mount [ 380.336298][ T6011] XFS (loop6): Unmounting Filesystem [ 382.537579][ C0] net_ratelimit: 35 callbacks suppressed [ 384.977145][ T9388] loop6: detected capacity change from 0 to 32768 [ 385.225253][ T9388] XFS (loop6): Mounting V5 Filesystem [ 385.394356][ T9388] XFS (loop6): Ending clean mount [ 386.138797][ T6011] XFS (loop6): Unmounting Filesystem [ 387.351899][ T9447] overlayfs: failed to clone upperpath [ 387.609007][ C0] net_ratelimit: 24 callbacks suppressed [ 387.861094][ T9466] netlink: 'syz.6.1309': attribute type 29 has an invalid length. [ 387.896324][ T9466] netlink: 'syz.6.1309': attribute type 29 has an invalid length. [ 388.339123][ T9466] netlink: 'syz.6.1309': attribute type 29 has an invalid length. [ 388.701040][ T9470] netlink: 'syz.6.1309': attribute type 29 has an invalid length. [ 389.659859][ T9500] loop6: detected capacity change from 0 to 4096 [ 389.680275][ T9504] overlayfs: failed to clone upperpath [ 389.731666][ T9500] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 389.830142][ T9512] device gre1 entered promiscuous mode [ 389.835994][ T9512] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 389.866271][ T9508] x86/PAT: syz.7.1319:9508 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 390.033370][ T9500] EXT4-fs (loop6): Test dummy encryption mode enabled [ 390.045972][ T9500] EXT4-fs (loop6): Ignoring removed orlov option [ 390.129850][ T9500] EXT4-fs (loop6): mounted filesystem without journal. Opts: mblk_io_submit,nouid32,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,grpid,orlov,nobarrier,,errors=continue. Quota mode: writeback. [ 391.466448][ T8430] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 391.838094][ T8430] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.867431][ T8430] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 391.893647][ T8430] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 391.927518][ T8430] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 391.951405][ T8430] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.485359][ C1] net_ratelimit: 32 callbacks suppressed [ 392.933244][ T8430] cxacru 7-1:1.0: send of cm 0x91 failed (-71) [ 392.940257][ T8430] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 392.990962][ T8430] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 393.022146][ T8430] cxacru: probe of 7-1:1.0 failed with error -71 [ 393.054658][ T9588] Set syz1 is full, maxelem 256 reached [ 393.088091][ T8430] usb 7-1: USB disconnect, device number 9 [ 393.247191][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1355'. [ 393.680554][ T9611] Illegal XDP return value 4294967274, expect packet loss! [ 394.057168][ T4303] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 394.568406][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1366'. [ 394.577504][ T4303] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.588080][ T4303] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 394.598934][ T4303] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 394.619446][ T4303] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 394.640552][ T4303] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 250 [ 394.660566][ T4303] usb 7-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 394.838363][ T4303] usb 7-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 394.857962][ T4303] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.892667][ T4303] usb 7-1: Product: syz [ 394.901679][ T4303] usb 7-1: Manufacturer: syz [ 394.924354][ T4303] usb 7-1: SerialNumber: syz [ 394.981156][ T9617] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 394.994762][ T9617] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 395.008450][ T9638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1371'. [ 395.034770][ T9617] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 395.062999][ T9617] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 395.097247][ T4303] keyspan 7-1:1.0: Keyspan 1 port adapter converter detected [ 395.128712][ T4303] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 395.178836][ T4303] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 82 [ 395.197928][ T4303] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 395.221758][ T4303] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 395.288608][ T9648] netlink: 'syz.1.1375': attribute type 1 has an invalid length. [ 395.339369][ T9648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1375'. [ 395.503350][ T9650] bridge0: port 3(syz_tun) entered blocking state [ 395.509912][ T9650] bridge0: port 3(syz_tun) entered listening state [ 395.551446][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.577180][ T9650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.597020][ T9650] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.720451][ T8429] usb 7-1: USB disconnect, device number 10 [ 395.759618][ T8429] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 395.791139][ T8429] keyspan 7-1:1.0: device disconnected [ 395.815565][ T8430] Bluetooth: hci0: command 0x0a27 tx timeout [ 397.371672][ C0] net_ratelimit: 29 callbacks suppressed [ 397.732157][ T9692] ------------[ cut here ]------------ [ 397.738232][ T9692] WARNING: CPU: 1 PID: 9692 at kernel/trace/trace.c:2448 trace_find_cmdline+0x2e3/0x350 [ 397.748489][ T9692] Modules linked in: [ 397.752403][ T9692] CPU: 1 PID: 9692 Comm: syz.6.1392 Not tainted syzkaller #0 [ 397.759881][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.770205][ T9692] RIP: 0010:trace_find_cmdline+0x2e3/0x350 [ 397.776097][ T9692] Code: 44 89 7c 24 40 48 c7 c7 20 5f 16 97 44 89 fe e8 13 f8 00 00 e9 0d fe ff ff e8 99 a1 fc ff e8 44 fb 83 ff eb a5 e8 8d a1 fc ff <0f> 0b ba 06 00 00 00 48 8b 7c 24 10 48 c7 c6 40 4c 2f 8a e9 26 ff [ 397.795806][ T9692] RSP: 0018:ffffc90002fbfa20 EFLAGS: 00010283 [ 397.801930][ T9692] RAX: ffffffff817c81d3 RBX: ffff88805bde0000 RCX: 0000000000080000 [ 397.809955][ T9692] RDX: ffffc900128d7000 RSI: 0000000000003a84 RDI: 0000000000003a85 [ 397.817954][ T9692] RBP: ffffc90002fbfad0 R08: 0000000000000003 R09: 0000000000000004 [ 397.825987][ T9692] R10: dffffc0000000000 R11: fffff520005f7f4c R12: dffffc0000000000 [ 397.834072][ T9692] R13: 1ffff920005f7f48 R14: 00000000e8000000 R15: 0000000000000000 [ 397.842094][ T9692] FS: 00007fa039ec26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 397.851804][ T9692] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.858435][ T9692] CR2: 00007fa03bb2ffc0 CR3: 0000000076570000 CR4: 00000000003506e0 [ 397.866426][ T9692] Call Trace: [ 397.869797][ T9692] [ 397.872744][ T9692] ? tracing_stop_tr+0x240/0x240 [ 397.877751][ T9692] ? ring_buffer_event_length+0x31e/0x3a0 [ 397.883513][ T9692] trace_print_context+0xf9/0x4d0 [ 397.888667][ T9692] ? trace_find_mark+0x120/0x120 [ 397.893617][ T9692] print_trace_fmt+0x403/0x780 [ 397.893685][ T9692] ? print_trace_line+0x382/0x690 [ 397.893710][ T9692] tracing_read_pipe+0x52f/0xae0 [ 397.893739][ T9692] ? s_show+0x300/0x300 [ 397.904128][ T9692] vfs_read+0x2ff/0xd50 [ 397.904174][ T9692] ? __lock_acquire+0x7d40/0x7d40 [ 397.913287][ T9692] ? kernel_read+0x1e0/0x1e0 [ 397.922461][ T9692] ? mutex_lock_nested+0x17/0x20 [ 397.931964][ T9692] ? __fdget_pos+0x2bf/0x370 [ 397.936657][ T9692] ? ksys_read+0x70/0x260 [ 397.941015][ T9692] ksys_read+0x153/0x260 [ 397.945344][ T9692] ? vfs_write+0xd70/0xd70 [ 397.949773][ T9692] ? lockdep_hardirqs_on+0x94/0x140 [ 397.955049][ T9692] do_syscall_64+0x4c/0xa0 [ 397.959486][ T9692] ? clear_bhb_loop+0x30/0x80 [ 397.964249][ T9692] ? clear_bhb_loop+0x30/0x80 [ 397.968944][ T9692] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 397.974913][ T9692] RIP: 0033:0x7fa03bc6a2d9 [ 397.979340][ T9692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.999014][ T9692] RSP: 002b:00007fa039ec2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.007512][ T9692] RAX: ffffffffffffffda RBX: 00007fa03bef1fa0 RCX: 00007fa03bc6a2d9 [ 398.015558][ T9692] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000004 [ 398.023673][ T9692] RBP: 00007fa03bd01888 R08: 0000000000000000 R09: 0000000000000000 [ 398.031715][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.039755][ T9692] R13: 00007fa03bef2038 R14: 00007fa03bef1fa0 R15: 00007ffcd9c6e788 [ 398.039789][ T9692] [ 398.050808][ T9692] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 398.058089][ T9692] CPU: 1 PID: 9692 Comm: syz.6.1392 Not tainted syzkaller #0 [ 398.065554][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.075617][ T9692] Call Trace: [ 398.078904][ T9692] [ 398.081845][ T9692] dump_stack_lvl+0x188/0x250 [ 398.086538][ T9692] ? show_regs_print_info+0x20/0x20 [ 398.091755][ T9692] ? load_image+0x410/0x410 [ 398.096284][ T9692] panic+0x2f8/0x850 [ 398.100197][ T9692] ? bpf_jit_dump+0xd0/0xd0 [ 398.104737][ T9692] ? trace_find_cmdline+0x2e3/0x350 [ 398.109701][ T9686] kcov: kcov_task_exit: t = ffff888028938000, kcov->t = ffff888028938000 [ 398.109949][ T9692] __warn+0x248/0x2b0 [ 398.122315][ T9692] ? trace_find_cmdline+0x2e3/0x350 [ 398.127528][ T9692] report_bug+0x1b9/0x2e0 [ 398.131944][ T9692] handle_bug+0x3a/0x70 [ 398.136111][ T9692] exc_invalid_op+0x16/0x40 [ 398.137970][ T9697] kcov: kcov_start: t = ffff8880298d0000, size = 524288, area = ffffc900144dc000 [ 398.140626][ T9692] asm_exc_invalid_op+0x16/0x20 [ 398.151983][ T9690] kcov: kcov_task_exit: t = ffff88802b0abb80, kcov->t = ffff88802b0abb80 [ 398.154556][ T9692] RIP: 0010:trace_find_cmdline+0x2e3/0x350 [ 398.168743][ T9692] Code: 44 89 7c 24 40 48 c7 c7 20 5f 16 97 44 89 fe e8 13 f8 00 00 e9 0d fe ff ff e8 99 a1 fc ff e8 44 fb 83 ff eb a5 e8 8d a1 fc ff <0f> 0b ba 06 00 00 00 48 8b 7c 24 10 48 c7 c6 40 4c 2f 8a e9 26 ff [ 398.173736][ T4172] nf_conntrack: normal packet for ffff8880241f8300 [ 398.188446][ T9692] RSP: 0018:ffffc90002fbfa20 EFLAGS: 00010283 [ 398.188471][ T9692] RAX: ffffffff817c81d3 RBX: ffff88805bde0000 RCX: 0000000000080000 [ 398.188483][ T9692] RDX: ffffc900128d7000 RSI: 0000000000003a84 RDI: 0000000000003a85 [ 398.188494][ T9692] RBP: ffffc90002fbfad0 R08: 0000000000000003 R09: 0000000000000004 [ 398.188504][ T9692] R10: dffffc0000000000 R11: fffff520005f7f4c R12: dffffc0000000000 [ 398.188517][ T9692] R13: 1ffff920005f7f48 R14: 00000000e8000000 R15: 0000000000000000 [ 398.188537][ T9692] ? trace_find_cmdline+0x2e3/0x350 [ 398.188570][ T9692] ? tracing_stop_tr+0x240/0x240 [ 398.188589][ T9692] ? ring_buffer_event_length+0x31e/0x3a0 [ 398.188613][ T9692] trace_print_context+0xf9/0x4d0 [ 398.188636][ T9692] ? trace_find_mark+0x120/0x120 [ 398.188662][ T9692] print_trace_fmt+0x403/0x780 [ 398.188684][ T9692] ? print_trace_line+0x382/0x690 [ 398.188705][ T9692] tracing_read_pipe+0x52f/0xae0 [ 398.240211][ T4172] tcp_in_window: START [ 398.241083][ T9692] ? s_show+0x300/0x300 [ 398.246296][ T4172] tcp_in_window: [ 398.251180][ T9692] vfs_read+0x2ff/0xd50 [ 398.251205][ T9692] ? __lock_acquire+0x7d40/0x7d40 [ 398.251230][ T9692] ? kernel_read+0x1e0/0x1e0 [ 398.257014][ T4172] seq=997574538 ack=1886179564+(0) sack=1886179564+(0) win=10322 end=997580170 [ 398.262037][ T9692] ? mutex_lock_nested+0x17/0x20 [ 398.262057][ T9692] ? __fdget_pos+0x2bf/0x370 [ 398.267003][ T4172] tcp_in_window: sender end=997574538 maxend=1000002346 maxwin=1321216 scale=7 receiver end=1886179564 maxend=1887500780 maxwin=2428160 scale=7 [ 398.271730][ T9692] ? ksys_read+0x70/0x260 [ 398.276764][ T4172] tcp_in_window: [ 398.281661][ T9692] ksys_read+0x153/0x260 [ 398.285720][ T4172] seq=997574538 ack=1886179564+(0) sack=1886179564+(0) win=10322 end=997580170 [ 398.289869][ T9692] ? vfs_write+0xd70/0xd70 [ 398.289892][ T9692] ? lockdep_hardirqs_on+0x94/0x140 [ 398.293507][ T4172] tcp_in_window: sender end=997574538 maxend=1000002346 maxwin=1321216 scale=7 receiver end=1886179564 maxend=1887500780 maxwin=2428160 scale=7 [ 398.297646][ T9692] do_syscall_64+0x4c/0xa0 [ 398.297668][ T9692] ? clear_bhb_loop+0x30/0x80 [ 398.302678][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1 [ 398.307246][ T9692] ? clear_bhb_loop+0x30/0x80 [ 398.307271][ T9692] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 398.307293][ T9692] RIP: 0033:0x7fa03bc6a2d9 [ 398.316765][ T4172] tcp_in_window: res=1 sender end=997580170 maxend=1000002346 maxwin=1321216 receiver end=1886179564 maxend=1887500780 maxwin=2428160 [ 398.321653][ T9692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.326255][ T4172] tcp_conntracks: [ 398.340776][ T9692] RSP: 002b:00007fa039ec2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.340800][ T9692] RAX: ffffffffffffffda RBX: 00007fa03bef1fa0 RCX: 00007fa03bc6a2d9 [ 398.340811][ T9692] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000004 [ 398.340821][ T9692] RBP: 00007fa03bd01888 R08: 0000000000000000 R09: 0000000000000000 [ 398.340827][ C0] virtqueue callback for ffff88801eddc500 (ffffffff84450960) [ 398.340831][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.340844][ T9692] R13: 00007fa03bef2038 R14: 00007fa03bef1fa0 R15: 00007ffcd9c6e788 [ 398.340871][ T9692] [ 398.340899][ C0] virtqueue interrupt with no work for ffff88801eddc400 [ 398.340911][ C0] virtqueue interrupt with no work for ffff88801eddc300 [ 398.341185][ T9692] Kernel Offset: disabled [ 398.529427][ T9692] Rebooting in 86400 seconds..