last executing test programs: 25m27.324028662s ago: executing program 0 (id=333): r0 = socket$inet(0x2, 0x3, 0x7f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000dbffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4d) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) 25m26.448974937s ago: executing program 0 (id=337): socket$netlink(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0x6) 25m16.567779255s ago: executing program 0 (id=354): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7ef", 0x37}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e345", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000a40)}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 25m16.356361416s ago: executing program 0 (id=355): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000002100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0xffffff13) mount$9p_fd(0x0, 0x0, 0x0, 0x2000001, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000001}) 25m12.833934877s ago: executing program 0 (id=361): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) tkill(r1, 0xb) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) 25m10.757734559s ago: executing program 0 (id=367): pipe2(0x0, 0x4800) sendmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a40)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x4040044) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x687, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 25m9.785128375s ago: executing program 32 (id=367): pipe2(0x0, 0x4800) sendmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a40)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x4040044) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x687, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 24m1.586894404s ago: executing program 2 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x97a4, &(0x7f0000012f40)="$eJzs3QeYJHWhcP1ZYMkZVERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQMk555xzzjnnnHPOfM+yu4rrAb3ve98P7z3nPM/uTFdX11T/f11VM1M93UvMvegcAwOjDwxt8oERu+XOORbcaIc5rthnxz1PmXzM8ScbNnnYDSYZdnGSQcM+jjQwMDDSsOUMmzbWoyeeNNLAKO9O/3tjjTHmoHEGBqYddnG2YR9nHPphoseGz/fOCI24ooP+dnHQdkP/vdt4Q77EkE+WuvnCcwYGBsZ/z+2H3GTqf7qj0paYfZ65/271N7chVoOHff7ef6MO/TfRAwMDE907wI+P98476EO4S0O+5vg7PDj6Oh/C1/4f1xKzzzPvCP5DtsWRh02bccg2PuI2aGzEx/nNK8+y+7AhfPfxNjAwZBf3D9vK/4iWmH3u+Qfefz8/8PCY457xzrv7zbGeHRgY67mBgbGeHxgY64WBgbFeHBgY66UP26X+75p9junmGLK9D788jH34Y3l8elzss9qLew8MDIw2dJ6x3h56vBh78uHHhKqqqvrPbvY5ppsTjv+jf9Dxf8utZr+1439VVdX/3OadfY7phhzHRzj+j/1Bx//v33jj6kN/9z/bjENv9faHeyeqqqrqv9Tc8+Lxf/wPOv6Pt/31+3f8r6qq+p/bIgu8e/wfe4Tj/8QfdPxffb47Lxs23/DvG956zyLfff7YsOlvvGf6yO+Z/vp7pg9+z3LeO/+o75n+6numjz4wMNajw6a/+ffJYz075Db/vJyxXv7783EmGeU90195z/RR3zP91WHrNGT6aO+Z/tZ75h/979PHHvLf5MO+7msfMNRVVVX/MS0y3dxzDrznefbDJg9/Yj8+L/SYY7a668Na36qqqqqqqqr6r/f2U6ef/fe/+f7UwHv+dvVvf8M67PcCg44999prP7QV/c9o0D//PmTzD3ud/m8b4jz64ZMPDKy5+Ie9KvUh9D/mb9Xr/0n5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+49zn//7e//x+498vbD5t15knvvG/Rv99ykoFVh312y51zLLjqh7DuH0L/W8//D6w6aGBgmO/4QywXnH2RxaYcGBhY9L47J51h4G/XzTTkulkmHPndP+YcGJjy3f8HT/I+Sx72LgvvvrnDxH9bxrHvLn/ed/YbedAIK/GeZj3n/oNWWeKV6Uf8+MX3vx9/e3+JJV/eb4rhf8sy0ggzjf4+Nx6+/OH3ZUTnYes+5ZB1n2r9Ndaear2NNv7aqmsst/KKK6+45rTTTjP9dDNMP+03Zp5qpVVXX3Hqof+/z5gNfeuKkf+dMRt7xDF7avb3jtmI922Ckw/CMfvnd/X4h0W8u8TzZn348uFjNsq/OWbDv97IHzxmk6867AtNMjB4YNl3h2bQwMAkowwe2HDIhWlGGxiYZPCweScZMu+3JhxpYGCHv9/RQcNebHToPIM2HzLPf9j7lsw8bEQ2GT7fiK+zPuKK/qv3LTlh7J3vHOF9S/5f9X90/P8nr5kG/W2ghr8BwrB5hnp9yO8z8U/rO/ko7x7k3m99P+B1cd6NHl9rrPLY4v9dr4tD6zv2B6zvB7yO3/uu75TTPLPH0EX9t63vCPu6+Yde+e/s6wY+eF83Mt1+xasmG3FfN9/7r+I/bMfDx2i0EWZ6v33dDvOdt9mQ5Q988L5u/lWHvXjA3/d1Iw0MTDLy8H3dkB3fqIMHdhhyYdohF0YbPHDokAvTvXthjIFzh1z4+vJrrb7CoHdfZmDYcqcestzZJhw0dAO66aBVRtv5nXdGGbYuL4/1j+s67PEx+XuP57NPOGwwh912+HKHzDp8ua9uPfS6UYct95X/wnKH35bWd5Kzhl432rDlvjrCcgd/wHKH3/aftocpB/3DE1Vhf/Ohvq8Rbb+jf8D6fsDrcOPj7V33KZZ5+L/hdbgHvd/6jvLB6/t+7xvyvuv7+OVP7Pvf9brh9Di7d5+hj5XRhz3O3vovPH6H33bE/djQFwIZutsf/d/Zj03+T/uxLUYeaYTBfk/v933uCjD/sC3ib0tb4cBXVh0+9oNHWO6/+j73PfdlEOzHxh/h57lBm+07MIjG/NHVX9jg7Z0+eMwHD/zjzxbDx3z4bT9ozEf7d8b8kx885iN+n/x+Yz7l54ZeP3iE9X/vmC+862w3DR/zUUdY7r8a89E++Njxz2M+MDCYxnyHSYeO2wftT99vzIffdviYD/k6s0w4ysBcAwMDUwwb81H/nTGf5L/ncT4mzD/08xX/NunZGRb66vAxH3GM/9WYj/pfHPNN7/3b43yKd6/77EgDo446sOFy66+/7jRD/x9+cdqh//O+6NkVho7zBx1L389o+G0/aLsY5d8xGv/fMhr0r4wmHeX9jP6+aY180CLP/Z/ui0b5rxqdy/uiU+cZOm4f9H3R+4358NvScXDi99x+xJ9DP+D1s/A+vTs+820z/Oe9/4TXzxr+8+7/yNfPGv47yVVH3MnXv1u//3eXv7v83eXvLn9x73P+f/Lh5//fGfuAjw77oXPwVTPdOtuHvb4fcv+rz/8P8/2H8/+z3TrTVUN+tBp23Qeenx06z3/k+dkZh36Y6LHh8414fnDEFf1X52f32WX9q/5/Oj/7f9TwbfXf+Lm4/b+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Puc/596+PMAHlpswR8MOxE6eJNpjtrkw17fD7n/1ef/h/n+w/n/TY6aZpORBv523Qee/x86j+P8//0LbLb0f/L5/+Hbauf/61+Uv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe5/z/7MNfx7AEbPO9fnhzwe4Ydv99viw1/dD7n/r+f/e/99b+393+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uGHn/wdGeJvEhXpcYHD+/3927+O/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/H+YP2bx/1H+mMV/ifwxi/+S+WMW/x/nj1n8f5I/ZvFfKn/M4r90/pjFf5n8MYv/T/PHLP7L5o9Z/JfLH7P4/yx/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvH/ef6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv9f5I9Z/H+ZP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/X+WPWfx/nT9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+v8kfs/hvmT9m8f9t/pjFf6v8MYv/7/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/7/DGL/x/yxyz+2+ePWfz/mD9m8f9T/pjFf4f8MYv/jvljFv8/549Z/HfKH7P475w/ZvHfJX/M4v+X/DGL/1/zxyz+u+aPWfx3yx+z+O+eP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6DBvLHLP6D8scs/iPlj1n8R84fs/iPkj9m8R+cP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/h/JH/M4v/R/DGL/8fyxyz+k+SPWfw/nj9m8Z80f8zi/4n8MYv/J/PHLP6T5Y9Z/D+VP2bx/3T+mMV/8vwxi/9n8scs/p/NH7P4fy5/zOI/Rf6Yxf/z+WMW/y/kj1n8v5g/ZvGfMn/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/zfyxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOL/zfwxi/8s+WMW/2/lj1n8Z80fs/h/O3/M4v+d/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4fzd/zOI/V/6YxX/u/DGL/zz5Yxb/7+WPWfznzR+z+H8/f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+P8gfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+P8wfs/j/KH/M4r9E/pjFf8n8MYv/j/PHLP4/yR+z+C+VP2bxXzp/zOK/TP6Yxf+n+WMW/2Xzxyz+y+WPWfx/lj9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+P88f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/y/yxyz+v8wfs/hvkD9m8d8wf8ziv1H+mMV/4/wxi/+v8scs/r/OH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv/f5I9Z/LfMH7P4/zZ/zOK/Vf6Yxf93+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/33+mMX/D/ljFv/t88cs/n/MH7P4/yl/zOK/Q/6YxX/H/DGL/5/zxyz+O+WPWfx3zh+z+O+SP2bx/0v+mMX/r/ljFv9d88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/sf53/fux/Uf7Y/zr/99n+L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzv+9bTH8E4v/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/O/ljEv93P83/n7P4D8ofs/iPlD9m8R85f8ziP0r+mMV/cP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8zi/5H8MYv/R/PHLP4fyx+z+E+SP2bx/3j+mMV/0vwxi/8n8scs/p/MH7P4T5Y/ZvH/VP6Yxf/T+WMW/8nzxyz+n8kfs/h/Nn/M4v+5/DGL/xT5Yxb/z+ePWfy/kD9m8f9i/pjFf8r8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+E+VP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP7fyB+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/zfzxyz+s+SPWfy/lT9m8Z81f8zi/+38MYv/d/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4v/d/DGL/1z5Yxb/ufPHLP7z5I9Z/L+XP2bxnzd/zOL//fwxi/98+WMW//nzxyz+C+SPWfwXzB+z+P8gf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+P8wf8zi/6P8MYv/EvljFv8l88cs/j/OH7P4/yR/zOK/VP6YxX/p/DGL/zL5Yxb/n+aPWfyXzR+z+C+XP2bx/1n+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOL/8/wxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP6/yB+z+P8yf8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+v8ofs/j/On/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8f5M/ZvHfMn/M4v/b/DGL/1b5Yxb/3+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/3+WMW/z/kj1n8t88fs/j/MX/M4v+n/DGL/w75Yxb/HfPHLP5/zh+z+O+UP2bx3zl/zOK/S/6Yxf8v+WMW/7/mj1n8d80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPSfxHHsgfs/gPyh+z+I+UP2bxHzl/zOI/Sv6YxX9w/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94Fv/B/7XZLf7jW/z/i1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/I/ljFv+P5o9Z/D+WP2bxnyR/zOL/8fwxi/+k+WMW/0/kj1n8P5k/ZvGfLH/M4v+p/DGL/6fzxyz+k+ePWfw/kz9m8f9s/pjF/3P5Yxb/KfLHLP6fzx+z+H8hf8zi/8X8MYv/lPljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/L+RP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/b+aPWfxnyR+z+H8rf8ziP2v+mMX/2/ljFv/v5I9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjF/7v5Yxb/ufLHLP5z549Z/OfJH7P4fy9/zOI/b/6Yxf/7+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bx/0H+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bx/2H+mMX/R/ljFv8l8scs/kvmj1n8f5w/ZvH/Sf6YxX+p/DGL/9L5Yxb/ZfLHLP4/zR+z+C+bP2bxXy5/zOL/s/wxi//y+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6Yxf/n+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/H+RP2bx/2X+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfx/lT9m8f91/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/j/Jn/M4r9l/pjF/7f5Yxb/rfLHLP6/yx+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/+/zxyz+f8gfs/hvnz9m8f9j/pjF/0/5Yxb/HfLHLP475o9Z/P+cP2bx3yl/zOK/c/6YxX+X/DGL/1/yxyz+f80fs/jvmj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n+4yv+d8f7dOS3+R6j8//0s/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/TOI/ykD+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+SPWfw/mj9m8f9Y/pjFf5L8MYv/x/PHLP6T5o9Z/D+RP2bx/2T+mMV/svwxi/+n8scs/p/OH7P4T54/ZvH/TP6Yxf+z+Q9ty3+8aPH/XP6YxX+K/DGL/+fzxyz+X8gfs/h/MX/M4j9l/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfynyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/b+SPWfxnyB+z+M+YP2bxnyl/zOI/c/6Yxf+b+WMW/1nyxyz+38ofs/jPmj9m8f92/pjF/zv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvH/bv6YxX+u/DGL/9z5Yxb/efLHLP7fyx+z+M+bP2bx/37+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfx/kD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfx/mD9m8f9R/pjFf4n8MYv/kvljFv8f549Z/H+SP2bxXyp/zOK/dP6YxX+Z/DGL/0/zxyz+y+aPWfyXyx+z+P8sf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bx/3n+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/X+SPWfx/mT9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/1/lj1n8f50/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/r/JH7P4b5k/ZvH/bf6YxX+r/DGL/+/yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/+/wxi/8f8scs/tvnj1n8/5g/ZvH/U/6YxX+H/DGL/475Yxb/P+ePWfx3yh+z+O+cP2bx30XtP8b7XmPx/4va//2z+P81f8ziv2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX8/qf9o/+J6i//+Uv9/lcX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aPzai/ygf9gr93/Y+/oflj1m2/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjEf/BA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/kj1n8P5o/ZvH/WP6YxX+S/DGL/8fzxyz+k+aPWfw/kT9m8f9k/pjFf7L8MYv/p/LHLP6fzh+z+E+eP2bx/0z+mMX/s/ljFv/P5Y9Z/KfIH7P4fz5/zOL/hfwxi/8X88cs/lPmj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvH/Rv6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/L+ZP2bxnyV/zOL/rfwxi/+s+WMW/2/nj1n8v5M/ZvGfLX/M4j97/pjFf478MYv/nPljFv/v5o9Z/OfKH7P4z50/ZvGfJ3/M4v+9/DGL/7z5Yxb/7+ePWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf8H+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6Yxf+H+WMW/x/lj1n8l8gfs/gvmT9m8f9x/pjF/yf5Yxb/pfLHLP5L549Z/JfJH7P4/zR/zOK/bP6YxX+5/DGL/8/yxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/n+ePWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Rf6Yxf+X+WMW/w3yxyz+G+aPWfw3yh+z+G+cP2bx/1X+mMX/1/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8zi/5v8MYv/lvljFv/f5o9Z/LfKH7P4/y5/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP6/zx+z+P8hf8ziv33+mMX/j/ljFv8/5Y9Z/HfIH7P475g/ZvH/c/6YxX+n/DGL/875Yxb/XfLHLP5/yR+z+P81f8ziv2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/TOI/6kD+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+SPWfw/mj9m8f9Y/pjFf5L8MYv/x/PHLP6T5o9Z/D+RP2bx/2T+mMV/svwxi/+n8scs/p/OH7P4T54/ZvH/TP6Yxf+z+WMW/8/lj1n8p8gfs/h/Pn/M4v+F/DGL/xfzxyz+U+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf6r8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8f9G/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8v5k/ZvGfJX/M4v+t/DGL/6z5Yxb/b+ePWfy/kz9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/+/mj1n858ofs/jPnT9m8Z8nf8zi/738MYv/vPljFv/v549Z/OfLH7P4z58/ZvFfIH/M4r9g/pjF/wf5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjF/4f5Yxb/H+WPWfyXyB+z+C+ZP2bx/3H+mMX/J/ljFv+l8scs/kvnj1n8l8kfs/j/NH/M4r9s/pjFf7n8MYv/z/LHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+f549Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8f9F/pjF/5f5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvH/Vf6Yxf/X+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOL/m/wxi/+W+WMW/9/mj1n8t8ofs/j/Ln/M4r91/pjFf5v8MYv/tvljFv/t8scs/r/PH7P4/yF/zOK/ff6Yxf+P+WMW/z/lj1n8d8gfs/jvmD9m8f9z/pjFf6f8MYv/zvljFv9d8scs/n/JH7P4/zV/zOK/a/6YxX+3/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4j/aQP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv+P5I9Z/D+aP2bx/1j+mMV/kvwxi//H88cs/pPmj1n8P5E/ZvH/ZP6YxX+y/DGL/6fyxyz+n84fs/hPnj9m8f9M/pjF/7P5Yxb/z+WPWfynyB+z+H8+f8zi/4X8MYv/F/PHLP5T5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/qvwxi//U+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bx/0b+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfy/mT9m8Z8lf8zi/638MYv/rPljFv9v549Z/L+TP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/7+aPWfznyh+z+M+dP2bxnyd/zOL/vfwxi/+8+WMW/+/nj1n858sfs/jPnz9m8V8gf8ziv2D+mMX/B/ljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMX/h/ljFv8f5Y9Z/JfIH7P4L5k/ZvH/cf6Yxf8n+WMW/6Xyxyz+S+ePWfyXyR+z+P80f8ziv2z+mMV/ufwxi//P8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/5/nj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx/0X+mMX/l/ljFv8N8scs/hvmj1n8N8ofs/hvnD9m8f9V/pjF/9f5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4v+b/DGL/5b5Yxb/3+aPWfy3yh+z+P8uf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+v88fs/j/IX/M4r99/pjF/4/5Yxb/P+WPWfx3yB+z+O+YP2bx/3P+mMV/p/wxi//O+WMW/13yxyz+f8kfs/j/NX/M4r9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP/pA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP6HY/53N3v86i/9EYv8PyuI/cf6Yxf8j+WMW/4/mj1n8P5Y/ZvGfJH/M4v/x/DGL/6T5Yxb/T+SPWfw/mT9m8Z8sf8zi/6n8MYv/p/PHLP6T549Z/D+TP2bx/2z+mMX/c/ljFv8p8scs/p/PH7P4fyF/zOL/xfwxi/+U+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8v5E/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv9v5o9Z/GfJH7P4fyt/zOI/a/6Yxf/b+WMW/+/kj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMX/u/ljFv+58scs/nPnj1n858kfs/h/L3/M4j9v/pjF//v5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/Qf6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvH/Yf6Yxf9H+WMW/yXyxyz+S+aPWfx/nD9m8f9J/pjFf6n8MYv/0vljFv9l8scs/j/NH7P4L5s/ZvFfLn/M4v+z/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+f5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8f5E/ZvH/Zf6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/H+VP2bx/3X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+P8mf8ziv2X+mMX/t/ljFv+t8scs/r/LH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/7/PHLP5/yB+z+G+fP2bx/2P+mMX/T/ljFv8d8scs/jvmj1n8/5w/ZvHfKX/M4r9z/pjFf5f8MYv/X/LHLP5/zR+z+O+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JHxt0y0gDAv8xBvLHJNv/GIPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8kf8zi/9H8MYv/x/LHLP6T5I9Z/D+eP2bxnzR/zOL/ifwxi/8n88cs/pPlj1n8P5U/ZvH/dP6YxX/y/DGL/2fyxyz+n80fs/h/Ln/M4j9F/pjF//P5Yxb/L+SPWfy/mD9m8Z8yf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/N/LHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4v/N/DGL/yz5Yxb/b+WPWfxnzR+z+H87f8zi/538MYv/bPljFv/Z88cs/nPkj1n858wfs/h/N3/M4j9X/pjFf+78MYv/PPljFv/v5Y9Z/OfNH7P4fz9/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4/yB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP4/zB+z+P8of8ziv0T+mMV/yfwxi/+P88cs/j/JH7P4L5U/ZvFfOn/M4r9M/pjF/6f5Yxb/ZfPHLP7L5Y9Z/H+WP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4/zx/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/L/LHLP6/zB+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/6/yxyz+v84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/9/kj1n8t8wfs/j/Nn/M4r9V/pjF/3f5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvH/ff6Yxf8P+WMW/+3zxyz+f8wfs/j/KX/M4r9D/pjFf8f8MYv/n/PHLP475Y9Z/HfOH7P475I/ZvH/S/6Yxf+v+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+2D/6j/S/1v/o/DHL9n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/zIH8MYv/oPwxi/9I+WMW/5Hzxyz+o+SPWfwH549Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+H8kfs/h/NH/M4v+x/DGL/yT5Yxb/j+ePWfwnzR+z+H8if8zi/8n8MYv/ZPljFv9P5Y9Z/D+dP2bxnzx/zOL/mfwxi/9n88cs/p/LH7P4T5E/ZvH/fP6Yxf8L+WMW/y/mj1n8p8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/1T5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v+N/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4fzN/zOI/S/6Yxf9b+WMW/1nzxyz+384fs/h/J3/M4j9b/pjFf/b8MYv/HPljFv8588cs/t/NH7P4z5U/ZvGfO3/M4j9P/pjF/3v5Yxb/efPHLP7fzx+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/w/yxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/w/zxyz+P8ofs/gvkT9m8V8yf8zi/+P8MYv/T/LHLP5L5Y9Z/JfOH7P4L5M/ZvH/af6YxX/Z/DGL/3L5Yxb/n+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4/zx+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v+L/DGL/y/zxyz+G+SPWfw3lPmP9m/OZ/HfSOb/72bx3zh/zOL/q/wxi/+v88cs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMX/N/ljFv8t88cs/r/NH7P4b5U/ZvH/Xf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/H+fP2bx/0P+mMV/+/wxi/8f88cs/n/KH7P475A/ZvHfMX/M4v/n/DGL/075Yxb/nfPHLP675I9Z/P+SP2bx/2v+mMV/1/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH+sgfwxi/+g/DGL/0j5Yxb/kfPHLP6j5I9Z/Afnj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP4fyR+z+H80f8zi/7H8MYv/JPljFv+P549Z/CfNH7P4fyJ/zOL/yfwxi/9k+WMW/0/lj1n8P50/ZvGfPH/M4v+Z/DGL/2fzxyz+n8sfs/hPkT9m8f98/pjF/wv5Yxb/L+aPWfynzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/438MYv/DPljFv8Z88cs/jPlj1n8Z84fs/h/M3/M4j9L/pjF/1v5Yxb/WfPHLP7fzh+z+H8nf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+380fs/jPlT9m8Z87f8ziP0/+mMX/e/ljFv9588cs/t/PH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/D/LHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/D/PHLP4/yh+z+C+RP2bxXzJ/zOL/4/wxi/9P8scs/kvlj1n8l84fs/gvkz9m8f9p/pjFf9n8MYv/cvljFv+f5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/j/PH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4v8MYv/L/PHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v+r/DGL/6/zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6Yxf83+WMW/y3zxyz+v80fs/hvlT9m8f9d/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8f58/ZvH/Q/6YxX/7/DGL/x/zxyz+f8ofs/jvkD9m8d8xf8zi/+f8MYv/TvljFv+d88cs/rvkj1n8/5I/ZvH/a/6YxX/X/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjEf+yB/DGL/6D8MYv/SPljFv+R88cs/qPkj1n8B+ePWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/h/JH7P4f/R9/d9+5513/v9ZtQ+lLcf8wKst/h9r+8cs/pPkj1n8P54/ZvGfNH/M4v+J/DGL/yfzxyz+k+WPWfw/lT9m8f90/pjFf/L8MYv/Z/LHLP6fzR+z+H8uf8ziP0X+mMX/8/ljFv8v5I9Z/L+YP2bxnzJ/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/838scs/jPkj1n8Z8wfs/jPlD9m8Z85f8zi/838MYv/LPljFv9v5Y9Z/GfNH7P4fzt/zOL/nfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+H83f8ziP1f+mMV/7vwxi/88+WMW/+/lj1n8580fs/h/P3/M4j9f/pjFf/78MYv/AvljFv8F88cs/j/IH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/j/MH7P4/yh/zOK/RP6YxX/J/DGL/4/zxyz+P8kfs/gvlT9m8V86f8ziv0z+mMX/p/ljFv9l88cs/svlj1n8f5Y/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/j/PH/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8v8scs/r/MH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/r/LHLP6/zh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/3+SPWfy3zB+z+P82f8ziv1X+mMX/d/ljFv+t88cs/tvkj1n8t80fs/hvlz9m8f99/pjF/w/5Yxb/7fPHLP5/zB+z+P8pf8ziv0P+mMV/x/wxi/+f88cs/jvlj1n8d84fs/jvkj9m8f9L/pjF/6/5Yxb/XfPHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/kMaNOIYWPwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxH2cgf8ziPyh/zOI/Uv6YxX/k/DGL/yj5Yxb/wfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/0fyxyz+H80fs/h/LH/M4j9J/pjF/+P5Yxb/SfPHLP6fyB+z+H8yf8ziP1n+mMX/U/ljFv9P549Z/CfPH7P4fyZ/zOL/2fwxi//n8scs/lPkj1n8P58/ZvH/Qv6Yxf+L+WMW/ynzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/h/I3/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/t/MH7P4z5I/ZvH/Vv6YxX/W/DGL/7fzxyz+38kfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9388cs/nPlj1n8584fs/jPkz9m8f9e/pjFf978MYv/9/PHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v+D/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4v/D/DGL/4/yxyz+S+SPWfyXzB+z+P84f8zi/5P8MYv/UvljFv+l88cs/svkj1n8f5o/ZvFfNn/M4r9c/pjF/2f5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/z/PHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+1/6T/6/9v1+g/N4r9O2z9m8V83f8ziv17+mMV//fwxi/8v8scs/r/MH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/r/LHLP6/zh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/3+SPWfy3zB+z+P82f8ziv1X+mMX/d/ljFv+t88cs/tvkj1n8t80fs/hvlz9m8f99/pjF/w/5Yxb/7fPHLP5/zB+z+P8pf8ziv0P+mMV/x/wxi/+f88cs/jvlj1n8d84fs/jvkj9m8f9L/pjF/6/5Yxb/XfPHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/O/ljEv9xB/LHLP6D8scs/iPlj1n8R84fs/iPkj9m8R+cP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/h/JH/M4v/R/DGL/8fyxyz+k+SPWfw/nj9m8Z80f8zi/4n8MYv/J/PHLP6T5Y9Z/D+VP2bx/3T+mMV/8vwxi/9n8scs/p/NH7P4fy5/zOI/Rf6Yxf/z+WMW/y/kj1n8v5g/ZvGfMn/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/zfyxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOL/zfwxi/8s+WMW/2/lj1n8Z80fs/h/O3/M4v+d/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4fzd/zOI/V/6YxX/u/DGL/zz5Yxb/7+WPWfznzR+z+H8/f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+P8gfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+P8wfs/j/KH/M4r9E/pjFf8n8MYv/j/PHLP4/yR+z+C+VP2bxXzp/zOK/TP6Yxf+n+WMW/2Xzxyz+y+WPWfx/lj9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+P88f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/y/yxyz+v8wfs/hvkD9m8d8wf8ziv1H+mMV/4/wxi/+v8scs/r/OH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv/f5I9Z/LfMH7P4/zZ/zOK/Vf6Yxf93+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/33+mMX/D/ljFv/t88cs/n/MH7P4/yl/zOK/Q/6YxX/H/DGL/5/zxyz+O+WPWfx3zh+z+O+SP2bx/0v+mMX/r/ljFv9d88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMX/7fwxi/87+WMS//EG8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wn/P/boaQkUw4AC4G1728bJTGzbtm3btm3btm3btm3bNt4z5wtydn9h/Uct/8P6j1r+h/MftfwP7z9q+R/Bf9TyP6L/qOV/JP9Ry//I/qOW/1H8Ry3/o/qPWv5H8x+1/I/uP2r5H8N/1PI/pv+o5X8s/1HL/9j+o5b/cfxHLf/j+o9a/sfzH7X8j+8/avmfwH/U8j+h/6jlfyL/Ucv/xP6jlv9J/Ect/5P6j1r+J/MftfxP7j9q+Z/Cf9TyP6X/qOV/Kv9Ry//U/qOW/2n8Ry3/0/qPWv6n8x+1/E/vP2r5n8F/1PI/o/+o5X8m/1HL/8z+o5b/WfxHLf+z+o9a/mfzH7X8z+4/avmfw3/U8j+n/6jlfy7/Ucv/3P6jlv95/Ect//P6j1r+5/MftfzP7z9q+V/Af9Tyv6D/qOV/If9Ry//C/qOW/0X8Ry3/i/qPWv4X8x+1/C/uP2r5X8J/1PK/pP+o5X8p/1HL/9L+o5b/ZfxHLf/L+o9a/pfzH7X8L+8/avlfwX/U8r+i/6jlfyX/Ucv/yv6jlv9V/Ect/6v6j1r+V/Mftfyv7j9q+V/Df9Tyv6b/qOV/Lf9Ry//a/qOW/3X8Ry3/6/qPWv7X8x+1/K/vP2r538B/1PK/of+o5X8j/1HL/8b+o5b/TfxHLf+b+o9a/jfzH7X8b+4/avnfwn/U8r+l/6jlfyv/Ucv/1v6jlv9t/Ect/9v6j1r+t/Mftfxv7z9q+d/Bf9Tyv6P/qOV/J/9Ry//O/qOW/138Ry3/u/qPWv538x+1/O/uP2r538N/1PK/p/+o5X8v/1HL/97+o5b/ffxHLf/7+o9a/vfzH7X87+8/avk/wH/U8n+g/6jl/yD/Ucv/wf6jlv9D/Ect/4f6j1r+D/Mftfwf7j9q+T/Cf9Tyf6T/qOX/KP9Ry//R/qOW/2P8Ry3/x/qPWv6P8x+1/B/vP2r5P8F/1PJ/ov+o5f8k/1HL/8n+o5b/U/xHLf+n+o9a/k/zH7X8n+4/avk/w3/U8n+m/6jl/yz/Ucv/2f6jlv9z/Ect/+f6j1r+z/Mftfyf7z9q+b/Af9Tyf6H/qOX/Iv9Ry//F/qOW/0v8Ry3/l/qPWv4v8x+1/F/uP2r5v8J/1PJ/pf+o5f8q/1HL/9X+o5b/a/xHLf/X+o9a/q/zH7X8X+8/avm/wX/U8n+j/6jl/yb/Ucv/zf6jlv9b/Ect/7f6j1r+b/Mftfzf7j9q+b/Df9Tyf6f/qOX/Lv9Ry//d/qOW/3v8Ry3/9/qPWv7v8x+1/N/vP2r5f8B/1PL/oP+o5f8h/1HL/8P+o5b/R/xHLf+P+o9a/h/zH7X8P+4/avl/wn/U8v+k/6jl/yn/Ucv/0/6jlv9n/Ect/8/6j1r+n/Mftfw/7z9q+X/Bf9Ty/6L/qOX/Jf9Ry//L/qOW/1f8Ry3/r/qPWv5f8x+1/L/uP2r5f8N/1PL/pv+o5f8t/1HL/9v+o5b/d/xHLf/v+o9a/t/zH7X8v+8/avn/wH/U8v+h/6jl/yP/Ucv/x/6jlv9P/Ect/5/6/7uBA4r+P/Mftfx/7j9q+f/Cf9Ty/6X/qOX/K/9Ry//X/qOW/2/8Ry3/3/qPWv6/8x+1/H/vP2r5/8F/1PL/o/+o5f8n/1HL/8/+o5b/X/xHLf+/+o9a/n/zH7X8/+4/avn/w3/U8v+n/6jkf5gB/qOW/3/5j1r+/+0/avn/j/+o5X+g/6jl/7/+o5b///mPWv7/7z9q+R/Ef9TyP6j/qOV/MP9Ry//g/qOW/yH8Ry3/Q/qPWv6H8h+1/A/tP/rH/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAX+zdbWxeZeHH8dO13dOf/bs5h9eQwWDTTVzZ2pXJYPOhPhZM1bEYMIFsYWVUCnMPwQ3UalBiMIbJSBBRt6mbQGLMeDFMQFhJVOJUNE5EQxyCuoipYSIjGpeau+1d2ntts171uvZin8+L9j6n/E63Jd+dU7ZmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApbd52yw1rOzraNnnhhRdeDLw41b8zAam9Fv2p/pEAAAAAAAAAAAAAAAAjyfHtRKf65wgAAAAAAKebltZ3dVdXDTlVPfhgzs/bet83vXrl9Xuef3xl+X3/hy8f5pITBh/09PT0vNTcNbP/cFJRFKXPNr3/eHLluHT9zq7Lt/cdheK3zza3btvefHDnV77+8Nyp0+fU9p6tLdZc197RtmRCUYTq2mJr6aChqijCxNpie+mgsXQwqba4v3SwtPdgSnGgdHDhtRs61pVOnPCp4bTT0vrZonpIscWQ3w0G99/ZtWlX+f0olyxfrabo77+u+Yd7Kz5WNkL/5euHqsr+x/wTBEY0tv5vX1h+P8olT7j/P9pet2q4j43cf/n6YYL+IZ1hnv+HNNr7vL9n/4wRnv/nDnPJgf1P/7Kyq9T/Tb98ob7/VM3JPP+XPl/fUaiu7H/CkOf/0nN8Tfn5f1JRhNpx/nLAaaWl9XPdo93/K7sf2n/NWRWbqsH9H121p7rU/+G7Hnh//6nak+p/4PqhZpT7f9VnDgz9sQJj09K6u6fi/j+G/osFw1xyoP/5u49dVer/jJ1H9g362Fj6r63sf/GWGz+xePO2W+rbb1y7vm19202NjQ1NS5c1NV60fHHvI0Hf23H+qsDpYXz3/2JqxaaqKNoG9os+vOylUv8Hz/3H3/pPTR5j/xNHvf8/5/4Pwzp/QjFxYrF17ZYtmxr63pYPG/ve9v1nw/R/4tf/I/Y/r/z/Actfd5e+IB/Y/+adX/1Iqf97J616oP/UxDH2P2m0/jtf+7xAhHHe/9dVbIb03/7qd9aV+v/TK8cP9Z8a69f/k0ftf5f7P4xHS2vFX/j5Hyv1v/pfh4f7c4KTEKb48z9IJ0f/W6f94ptx6zBV/5BOjv6Xbm6L/Mu24f/0D+nk6P9XO6qOxK3DGfqHdHL0/7XuBzfGrcM0/UM6OfrfP/uRp+LW4f/1D+nk6P/4+ulXxa1Dnf4hnRz9X/alvavj1mG6/iGdHP1XvTLtibh1mKF/SCdH//VVZ38qbh1ep39IJ0f/13U+/GLcOszUP6STo//P7/x15PfphNfrH9LJ0f9Tf9y6I24dZukf0snR/wuz2uvj1uFM/UM6Ofq//4YnHolbhzfoH9LJ0f/T3/rgsbh1CPqHdHL0/41nj6yJW4fZ+od0cvS/b+GxP8Stw1n6h3Ry9P/vj179gbh1eKP+IZ0c/Yf9y78btw5n6x/SydH/FU/e1RC3DnP0D+nk6L9zxW13xq3DOfqHdHL039S8cHbcOpyrf0gnR/8z/vz3u+PWYa7+IZ0c/X/svvdW/rvfJymcp39IJ0f/N29Y/WjcOpyvf0gnR/8rZ/RcELcO8/QP6eTo//DR+34Utw7z9Q/p5Oj/7juXXBG3Dm/SP6STo/8f3Hped9w6vFn/kE6O/l+uvePWuHVYoH9IJ0f/X/5ZzbK4dViof0gnR/8/fuj7u+LW4S36h3Ry9P/i+x47J24dLtA/pJOj/90Xz/pi3Dq8Vf+QTo7+3/3MxvVx67BI/5BOjv4n7/390bh1qNc/pJOj//mrDn4obh0u1D+kk6P/DYvW/C5uHRbrH9LJ0f8zB54+FLcOS/QP6eTof8djn26OW4cG/UM6Ofp//LKO/8StQ6P+IZ0c/f+z6Scfj1uHpfqHdHL0f+ahb38hbh2a9A/p5Oj/6gcnz4xbh4v0D+nk6H/jNbO/F7cOy/QP6eTo/5K5D10atw5v0z+kk6P/9/x1xc1x63Cx/iGdHP3X3XPPc3HrsFz/kE6O/udde/s1cetwif4hnRz9Xz+n/sm4dbhU/5BOjv7vON6yIG4dVugf0snRf9dtz++LW4eV+od0cvTf/cmX6+LW4e36h3Ry9L93ypX3xq3DO/QPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2UHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8FAAA//81CtIG") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r3, &(0x7f0000000080)="cc", 0x1, 0x200980) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe0000000) 23m58.75249269s ago: executing program 2 (id=512): r0 = socket$inet6(0xa, 0x3, 0x6) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) 23m57.408239868s ago: executing program 2 (id=515): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x4, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)) 23m55.137734792s ago: executing program 2 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendfile(r3, r4, 0x0, 0x200002) 23m53.72206378s ago: executing program 2 (id=520): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioperm(0x0, 0x2, 0x7e) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xd9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) 23m49.958742672s ago: executing program 2 (id=525): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r2, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) recvmmsg(r2, &(0x7f000000e280), 0x58a, 0x42, 0x0) 23m34.311747824s ago: executing program 33 (id=525): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r2, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) recvmmsg(r2, &(0x7f000000e280), 0x58a, 0x42, 0x0) 12m6.161941755s ago: executing program 4 (id=1809): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d8fd8149af9faf44ad5b7b6ad1c94490d970e81143918946b559ce53bffdfdc795aac1209898e5826eda1962cf6e3c4c0ade52151923a70cb6eacfc"], 0x1, 0x177, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rEaIx0dlFE0mAwdIWNTo4MDto4r+4SaQStIiBDsLmp3D2EzgTFxI/hg7q5IKbk0NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8Wx7un+8uU8lrHcA4kkjI+Ue9X6Mp9a2Jl8xNee3q3Hy6bbVXlwfXEwB8/+vPjwFo53V4Mvf9t3cn5bgJrae3oCEj9Q4EDKn3oGFbagcCu1IfKroa1BvGQdl1jP2qWwyEGQQrCHYQcoP765wJFJX9CeV6vdE8KriuU/tBMax/nbyGFWV/6vvq9sZU+mdBgyV1DgIbUi8h0e1N1BLl/FOx/vr6L5+fgoLir4m+P/kXAinFn2KKf2S9ykm23mjOlSuFklNyjm07t2jOm+aCnQ2NKIqf+N9o6E9jyvojH9TGRRynBc+rWVHs5XYU33PceOh/GtKzUS7knEr4PZgUM8GQ1mVOCCGEEEIIIYQQQggh3840RPgXdAj2elj9GgAA//+j/Hgy") chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa0) read$FUSE(r0, 0x0, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) socket$rds(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x23, 0x5, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x6799, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 12m5.148625321s ago: executing program 1 (id=1813): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x33afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 12m4.237623546s ago: executing program 4 (id=1814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r4, 0xffffffffffffffff, 0x0) 12m2.038529959s ago: executing program 1 (id=1817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0xed6, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 12m0.33345296s ago: executing program 4 (id=1821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r4, 0xffffffffffffffff, 0x0) 11m58.371947471s ago: executing program 4 (id=1822): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c00030000000000050000002800"], 0x1c0}, 0x1, 0xba01}, 0x20048050) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000001180)='./file0\x00', 0x8) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x3, 0x2}) 11m57.133447438s ago: executing program 4 (id=1825): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x33afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 11m57.092708649s ago: executing program 1 (id=1826): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x70bd28, 0x25dfdbfe, {0x2}, [@NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x8000) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000000c00)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "ccf90776c32f30ba1f359976f081aa2b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x203}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000004}, 0x8000) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000002640)={@local, @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0xcf, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f00000002c0)=0x3f7, 0x4) recvmmsg(r5, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/43, 0x2b}}], 0x1, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="d80000001b00010000"], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) 11m56.052642885s ago: executing program 4 (id=1827): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x194, 0x30, 0x1, 0x1}, 0x194}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'veth0_to_hsr\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7d7d800]}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000004200)=""/4087, &(0x7f00000003c0)=0xfffffffffffffe9f) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 11m55.378646119s ago: executing program 1 (id=1828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_settings={0xb592, 0x6, @cisco=0x0}}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) ioctl$sock_proto_private(r5, 0x8b24, &(0x7f0000000080)) 11m53.353118961s ago: executing program 1 (id=1830): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fstat(0xffffffffffffffff, 0x0) getgid() openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40084146, 0x0) setregid(0xee00, 0x0) 11m50.993882524s ago: executing program 1 (id=1833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) 11m40.920961235s ago: executing program 34 (id=1827): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x194, 0x30, 0x1, 0x1}, 0x194}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'veth0_to_hsr\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7d7d800]}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000004200)=""/4087, &(0x7f00000003c0)=0xfffffffffffffe9f) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 11m35.862910004s ago: executing program 35 (id=1833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) 13.777775617s ago: executing program 7 (id=3090): removexattr(&(0x7f00000004c0)='./file0\x00', 0x0) set_mempolicy(0x2002, 0x0, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) dup3(r2, r0, 0x80000) 12.809882273s ago: executing program 6 (id=3092): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp6(0xa, 0x2, 0x73) landlock_create_ruleset(0x0, 0x0, 0x3) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 12.271127326s ago: executing program 7 (id=3094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x41) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x44080) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "9a8427ef255ae9e4", "083421b1e961f73df0f82e94a9f869d3", "d2819647", "d567c111341c4a3f"}, 0x28) recvmmsg(r3, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2002}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 10.598032157s ago: executing program 6 (id=3096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000018000000", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB='\x00\x00\x00'], 0x48) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x5}) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000040)={0xffffffffffffff85, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x19) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0, 0xd}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x0, @win={{0x24000, 0x1, 0x401, 0x40}, 0x3, 0x8, &(0x7f00000000c0)={{0x4, 0x42a, 0xfffffff1, 0x3}}, 0x6, &(0x7f0000000140)="9b9855ed78f36d989656acbf23aa2a91d2e89029b9e9b4108580517c85478a6b9c033e0aaa3ca8ecd0457b4f1944b49ee761cc72380b399eb79f69d239e0cdf3676a40d79b26f072ea113ea7127940bb3a123ed1bf9b780c3a89e557c01b6d97d84266b76fa5b224d41a0a977c181581807ef4b71757c231a2ccaee842cd5ea74b13cf579a183df6fce7c0a0eda4325da7734ffcdaef3a3b775590cd04ad83b542e7ebe5b8a0ec2424c1c81f605afbd2fc43c31575a467c7466527852044283a14770c705e789c245c059265a79106bd580f15fe1c82dbda7b5d228e25", 0x8c}}) 9.336251774s ago: executing program 6 (id=3098): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$netlink(0x10, 0x3, 0x0) 9.057934355s ago: executing program 5 (id=3099): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000003040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x5800) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f00000000c0), 0x2, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000060000000600000008000300", @ANYRES32, @ANYBLOB="080005000900"], 0x24}}, 0x0) 8.813694007s ago: executing program 3 (id=3100): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000600)="b9e3d623f21cc5d89d25bdc1a53cabd3b7659b93c8b7587205b0db09d83af2078a88c43acfc10e90c799a1ea70373b41e73f802c22f4729a241f9f7fcb887258c006600142e7cd3abd4560ed53cb823401be395f22", 0x55}], 0x4}], 0x1, 0x40800) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 8.002510501s ago: executing program 7 (id=3101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)={{r1}, {@void, @actul_num={@void, 0xfff, 0x45}}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x428}}}, 0x7) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000180)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 7.850559723s ago: executing program 3 (id=3102): removexattr(&(0x7f00000004c0)='./file0\x00', 0x0) set_mempolicy(0x2002, 0x0, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) dup3(r2, r0, 0x80000) 6.879887189s ago: executing program 3 (id=3103): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000000106b1d0101400001020301090293000301000000090400000001010000"], 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) accept4(r1, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @loopback}, &(0x7f0000000340)=0x80, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card3/oss_mixer\x00', 0x242, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dmm32at\x00', [0x9e1, 0x2565, 0xfffffffe, 0x0, 0xa, 0x0, 0x4, 0x10, 0x10001005, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x7, 0xfffffffe, 0x8, 0x3, 0x9, 0x4, 0x100, 0x1003, 0x27, 0x8000a, 0x5, 0x1, 0xb0cc, 0x7df, 0x9, 0x400007, 0x1]}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80201) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_init(0x4, 0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mbind(&(0x7f00009f4000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000000c0)=0x6, 0x6a0e, 0x4) sendfile(r4, r4, 0x0, 0x200000) 6.67511253s ago: executing program 5 (id=3104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcc657405ba8b63ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) r4 = eventfd2(0x0, 0x0) writev(r4, 0x0, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x80000) write(r6, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r6) 6.445811651s ago: executing program 6 (id=3105): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") setxattr$system_posix_acl(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000002b40)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [], {0x10, 0x3}}, 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x80105014, 0xf2ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r6, &(0x7f0000001580), 0x49249249249256f, 0x40484) 6.431669431s ago: executing program 7 (id=3106): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000003040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x5800) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f00000000c0), 0x2, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB], 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000060000000600000008000300", @ANYRES32, @ANYBLOB="080005000900"], 0x24}}, 0x0) 5.656891276s ago: executing program 5 (id=3107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) fcntl$setownex(r3, 0xf, 0x0) socket$netlink(0x10, 0x3, 0x4) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000440)={0x2a, 0x6, 0x0, {0x2, 0x5, 0x1, 0x0, '\x00'}}, 0x2a) 2.492349635s ago: executing program 6 (id=3108): creat(&(0x7f0000000040)='./file0\x00', 0x140) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x48010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x3df1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x70bd27, 0x0, {0xff}}, 0x14}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004050, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}], [], 0x6b}}) 2.489181595s ago: executing program 3 (id=3109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r4, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20) 2.437887175s ago: executing program 5 (id=3110): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000003d80), 0xffffffffffffffff) io_uring_setup(0x7d95, &(0x7f0000000940)={0x0, 0xdf07, 0x40, 0x1, 0x91}) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004000) recvmmsg(r3, &(0x7f00000047c0), 0x0, 0x60002000, 0x0) 2.424213065s ago: executing program 7 (id=3111): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b9104006"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 1.488249861s ago: executing program 3 (id=3112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) openat$adsp1(0xffffffffffffff9c, 0x0, 0xe0480, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x2}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r6, 0x0, 0x6}, 0xc) 1.472163251s ago: executing program 5 (id=3113): r0 = semget$private(0x0, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x7, 0xff, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f96551", 0x0, 0x2f, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}]}}}}}}}, 0x0) r5 = socket(0x2b, 0x80801, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {0xff}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffe}}}, {{@ipv6={@local, @private2, [0x0, 0x0, 0xffffff00], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88, 0x0, 0x0, 0x42}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) semop(r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 142.480709ms ago: executing program 5 (id=3114): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$netlink(0x10, 0x3, 0x0) 138.669359ms ago: executing program 3 (id=3115): socket(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x9], 0x1c, 0x0, 0x0, [{}]}, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x8) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24082}, 0xa800) getsockopt$sock_buf(r2, 0x1, 0x3d, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000080), 0x12) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 582.59µs ago: executing program 6 (id=3116): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80d00, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6, {0x8}}, './bus\x00'}) 0s ago: executing program 7 (id=3117): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_usb_connect(0x3, 0x36, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) kernel console output (not intermixed with test programs): has an invalid length. [ 717.117644][T11226] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 717.654690][ T28] audit: type=1326 audit(3909954771.393:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb257d8f6c9 code=0x7ffc0000 [ 717.958498][ T28] audit: type=1326 audit(3909954771.403:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb257d8f6c9 code=0x7ffc0000 [ 717.982216][ T28] audit: type=1326 audit(3909954771.423:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb257d8f6c9 code=0x7ffc0000 [ 718.000574][T11239] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 718.034035][ T28] audit: type=1326 audit(3909954771.423:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb257d8f6c9 code=0x7ffc0000 [ 718.068207][ T28] audit: type=1326 audit(3909954771.433:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb257d8f6c9 code=0x7ffc0000 [ 718.125553][ T28] audit: type=1326 audit(3909954771.443:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb257d8f6c9 code=0x7ffc0000 [ 718.152947][ T28] audit: type=1326 audit(3909954771.443:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb257d8f6c9 code=0x7ffc0000 [ 718.177206][ T28] audit: type=1326 audit(3909954771.443:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fb257d8f6c9 code=0x7ffc0000 [ 718.201813][ T28] audit: type=1326 audit(3909954771.453:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb257d8f6c9 code=0x7ffc0000 [ 718.233030][ T28] audit: type=1326 audit(3909954771.463:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb257d8f6c9 code=0x7ffc0000 [ 718.944772][T11249] netlink: 'syz.1.1169': attribute type 3 has an invalid length. [ 718.952820][T11249] netlink: 558 bytes leftover after parsing attributes in process `syz.1.1169'. [ 721.897910][T11267] loop1: detected capacity change from 0 to 1024 [ 725.679851][T11300] loop5: detected capacity change from 0 to 2048 [ 725.797925][T11307] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 726.076823][T11300] NILFS (loop5): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 726.255569][T11300] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=16) [ 726.326208][T11300] Remounting filesystem read-only [ 726.345942][T11300] NILFS (loop5): error -5 truncating bmap (ino=16) [ 726.550032][T11300] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 726.668063][T11300] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 726.722280][T11300] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 726.776740][T11300] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 726.806943][T11300] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 726.834640][T11300] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 726.877143][T11300] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 726.960589][T11300] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 726.975530][T11300] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 726.989765][T11300] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 726.998825][T11300] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 727.712127][T11331] loop1: detected capacity change from 0 to 512 [ 727.885782][T11333] overlayfs: failed to clone upperpath [ 727.952815][T11331] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 3: comm syz.1.1195: lblock 0 mapped to illegal pblock 3 (length 1) [ 727.975334][T11331] EXT4-fs (loop1): Remounting filesystem read-only [ 727.981958][T11331] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.1195: error -117 reading directory block [ 727.995238][T11331] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 728.004917][T11331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.186065][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.352850][T11337] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 728.361616][T11337] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 729.841168][T11355] : renamed from bond_slave_0 [ 731.669774][T11364] loop4: detected capacity change from 0 to 2048 [ 731.765019][T11365] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 731.976474][T11364] NILFS (loop4): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 732.009926][T11364] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16) [ 732.084609][T11364] Remounting filesystem read-only [ 732.099416][T11364] NILFS (loop4): error -5 truncating bmap (ino=16) [ 732.678513][T11372] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 732.744641][T11372] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 732.805218][T11372] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 732.861272][T11372] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 732.870634][T11372] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 732.895704][T11372] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 732.907465][T11372] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 732.914214][T11372] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 732.923597][T11372] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 732.935006][T11372] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 732.942374][T11372] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 735.516909][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1203'. [ 739.365140][T11442] netlink: 'syz.5.1220': attribute type 1 has an invalid length. [ 739.664238][T11442] bond2: entered promiscuous mode [ 739.688871][T11442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 739.948189][T11442] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1220'. [ 740.194464][T11442] bond2: entered allmulticast mode [ 740.295883][T11442] bridge5: entered promiscuous mode [ 740.324063][T11442] bridge5: entered allmulticast mode [ 740.365730][T11442] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 741.534139][T11464] vlan2: entered allmulticast mode [ 741.540177][T11464] bridge_slave_0: entered allmulticast mode [ 748.160592][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.987532][T11567] --map-set only usable from mangle table [ 762.574997][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1252'. [ 762.586322][T11597] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1252'. [ 763.677852][T11612] netlink: 'syz.1.1255': attribute type 1 has an invalid length. [ 763.714385][T11612] bond8: entered promiscuous mode [ 763.724683][T11612] 8021q: adding VLAN 0 to HW filter on device bond8 [ 764.443927][T11621] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 764.489646][T11612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1255'. [ 764.506831][T11612] bond8: entered allmulticast mode [ 764.789528][T11612] bridge6: entered promiscuous mode [ 764.818214][T11612] bridge6: entered allmulticast mode [ 765.035510][T11612] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 767.570495][T11634] bond6: entered promiscuous mode [ 767.603797][T11634] 8021q: adding VLAN 0 to HW filter on device bond6 [ 767.636146][T11637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1259'. [ 767.865464][T11637] bond6: entered allmulticast mode [ 768.170163][T11634] bridge7: entered promiscuous mode [ 768.197211][T11634] bridge7: entered allmulticast mode [ 768.203261][T11634] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 768.271183][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1263'. [ 773.683751][T11691] bond9: entered promiscuous mode [ 773.833294][T11691] 8021q: adding VLAN 0 to HW filter on device bond9 [ 773.854910][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1273'. [ 773.874334][T11694] bond9: entered allmulticast mode [ 774.685735][T11691] bridge9: entered promiscuous mode [ 774.707027][T11691] bridge9: entered allmulticast mode [ 774.730627][T11691] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 776.063229][T11714] bond7: entered promiscuous mode [ 776.068707][T11714] 8021q: adding VLAN 0 to HW filter on device bond7 [ 776.219874][T11714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1286'. [ 776.238055][T11714] bond7: entered allmulticast mode [ 776.292166][T11714] bridge8: entered promiscuous mode [ 776.304501][T11714] bridge8: entered allmulticast mode [ 776.423299][T11714] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 779.949797][T11742] loop1: detected capacity change from 0 to 4096 [ 780.015296][T11742] EXT4-fs: Mount option(s) incompatible with ext3 [ 781.060312][T11761] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 781.206056][T11761] bond9: entered promiscuous mode [ 781.211485][T11761] 8021q: adding VLAN 0 to HW filter on device bond9 [ 781.276182][T11764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1288'. [ 781.301782][T11764] bond9: entered allmulticast mode [ 781.369340][T11761] bridge7: entered promiscuous mode [ 781.385608][T11761] bridge7: entered allmulticast mode [ 781.391665][T11761] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 781.749959][T11771] loop1: detected capacity change from 0 to 256 [ 781.907522][T11771] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 781.943995][T11771] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 781.982765][T11771] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d9089, utbl_chksum : 0xe619d30d) [ 782.018455][T11771] exfat filesystem being mounted at /340/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 784.258134][T11793] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1296'. [ 784.411698][T11799] netlink: 'syz.3.1298': attribute type 1 has an invalid length. [ 785.133731][T11799] bond8: entered promiscuous mode [ 785.152894][T11799] 8021q: adding VLAN 0 to HW filter on device bond8 [ 785.179036][T11802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1298'. [ 785.210890][T11802] bond8: entered allmulticast mode [ 785.641225][T11799] bridge9: entered promiscuous mode [ 785.663124][T11799] bridge9: entered allmulticast mode [ 785.675058][T11799] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 791.289910][T11849] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1312'. [ 791.299699][T11849] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1312'. [ 791.308878][T11849] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1312'. [ 791.320143][T11849] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1312'. [ 791.329235][T11849] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1312'. [ 791.338284][T11849] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1312'. [ 796.343273][T11919] syz.3.1330 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 804.888783][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1347'. [ 804.919703][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1347'. [ 805.674066][T11998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.683571][T11998] bond0: entered promiscuous mode [ 805.693105][T11998] team0: Failed to send options change via netlink (err -105) [ 805.700937][T11998] team0: Port device bond0 added [ 805.958257][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1352'. [ 805.970106][T12003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1352'. [ 809.077341][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.160912][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 809.356297][T12020] dummy0: entered promiscuous mode [ 809.362362][T12020] macvtap2: entered promiscuous mode [ 809.368252][T12020] macvtap2: entered allmulticast mode [ 809.373966][T12020] dummy0: entered allmulticast mode [ 809.384857][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 809.438770][T12025] dummy0: left allmulticast mode [ 809.468254][T12025] dummy0: left promiscuous mode [ 810.009420][T12032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1360'. [ 810.233010][T12032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1360'. [ 812.455801][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1365'. [ 812.467158][T12049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1365'. [ 813.682950][T12058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1369'. [ 813.697485][T12058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1369'. [ 814.901109][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 814.917015][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 816.196781][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1378'. [ 816.210041][T12091] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1378'. [ 816.580317][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 816.592913][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 816.603393][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 816.613984][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 816.624407][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 817.214972][ T5842] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 817.283911][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 817.296460][T12103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1382'. [ 817.525865][ T5842] usb 2-1: device descriptor read/64, error -71 [ 817.692857][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1384'. [ 818.692459][T12118] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 819.075697][ T5842] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 819.475687][ T5842] usb 2-1: device descriptor read/64, error -71 [ 819.688396][ T5842] usb usb2-port1: attempt power cycle [ 822.139224][T12145] __nla_validate_parse: 1 callbacks suppressed [ 822.139238][T12145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'. [ 822.588583][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1403'. [ 823.840207][T12179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1399'. [ 823.925478][T12179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1399'. [ 827.049879][T12205] netlink: 'syz.1.1408': attribute type 1 has an invalid length. [ 827.649745][T12205] veth7: entered promiscuous mode [ 827.660468][T12205] bond10: (slave veth7): Enslaving as a backup interface with a down link [ 827.841388][T12206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1408'. [ 828.472407][T12206] 8021q: adding VLAN 0 to HW filter on device bond10 [ 829.064453][T12217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1411'. [ 829.126721][T12217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1411'. [ 830.811814][T12229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1413'. [ 832.342356][T10638] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 833.061354][T12250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1419'. [ 833.081063][T12250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1419'. [ 833.752679][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1424'. [ 833.767449][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1424'. [ 833.854148][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1425'. [ 835.645469][T12285] overlayfs: failed to clone upperpath [ 837.421106][T12300] loop1: detected capacity change from 0 to 64 [ 838.591440][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1437'. [ 838.622768][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1437'. [ 846.454217][T12348] No such timeout policy "syz0" [ 854.422981][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 855.125340][T12393] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 855.188053][T12393] bond9: entered promiscuous mode [ 855.239485][T12393] 8021q: adding VLAN 0 to HW filter on device bond9 [ 855.324951][T12395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1456'. [ 855.558469][T12393] bond9: (slave bridge11): making interface the new active one [ 855.591966][T12393] bridge11: entered promiscuous mode [ 855.694517][T12393] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 861.925666][T12451] netlink: 'syz.5.1468': attribute type 1 has an invalid length. [ 862.019366][T12451] bond3: entered promiscuous mode [ 862.180126][T12451] 8021q: adding VLAN 0 to HW filter on device bond3 [ 862.188007][T12455] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1468'. [ 863.003443][T12451] bond3: (slave bridge7): making interface the new active one [ 863.044952][T12451] bridge7: entered promiscuous mode [ 863.051625][T12451] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 863.131156][T12457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1469'. [ 870.425563][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.723870][T12533] netlink: 'syz.1.1487': attribute type 1 has an invalid length. [ 871.810134][T12533] bond11: entered promiscuous mode [ 871.855861][T12533] 8021q: adding VLAN 0 to HW filter on device bond11 [ 871.863696][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1487'. [ 872.132979][T12535] bond11: (slave bridge8): making interface the new active one [ 873.263703][T12535] bridge8: entered promiscuous mode [ 873.286759][T12535] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 873.697277][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1489'. [ 875.035795][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 875.046626][T12557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1492'. [ 878.405457][T12589] netlink: 'syz.5.1500': attribute type 1 has an invalid length. [ 878.532619][T12589] bond4: entered promiscuous mode [ 878.565120][T12589] 8021q: adding VLAN 0 to HW filter on device bond4 [ 878.954754][T12591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1500'. [ 880.936466][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1501'. [ 880.955217][T12605] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1509'. [ 881.643166][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1503'. [ 881.833280][T12607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1503'. [ 887.464764][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1513'. [ 888.143382][T12647] netlink: 'syz.4.1515': attribute type 1 has an invalid length. [ 888.224433][T12647] bond10: entered promiscuous mode [ 888.230084][T12647] 8021q: adding VLAN 0 to HW filter on device bond10 [ 888.249302][T12654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1515'. [ 889.337480][T12647] bond10: (slave bridge10): making interface the new active one [ 889.363072][T12647] bridge10: entered promiscuous mode [ 889.390910][T12647] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 889.457473][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1518'. [ 889.515875][T12666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1518'. [ 889.570438][T12670] loop1: detected capacity change from 0 to 64 [ 891.857001][T12689] netlink: 'syz.3.1524': attribute type 1 has an invalid length. [ 893.019945][T12693] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 893.727360][T12694] veth3: entered promiscuous mode [ 893.776959][T12694] bond10: (slave veth3): Enslaving as a backup interface with a down link [ 893.826421][T12689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1524'. [ 893.896712][ T34] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 893.911136][T12689] 8021q: adding VLAN 0 to HW filter on device bond10 [ 894.068978][ T34] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 894.119766][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1528'. [ 894.147779][T12704] IPVS: Error joining to the multicast group [ 894.177756][T12706] netlink: 'syz.3.1529': attribute type 1 has an invalid length. [ 894.293919][T12706] bond11: entered promiscuous mode [ 894.331088][T12706] 8021q: adding VLAN 0 to HW filter on device bond11 [ 894.362057][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1529'. [ 894.393655][T12711] netlink: 'syz.5.1530': attribute type 1 has an invalid length. [ 894.497811][T12711] bond5: entered promiscuous mode [ 894.503212][T12711] 8021q: adding VLAN 0 to HW filter on device bond5 [ 894.578721][T12708] bond11: (slave bridge12): making interface the new active one [ 894.599155][T12708] bridge12: entered promiscuous mode [ 894.620603][T12708] bond11: (slave bridge12): Enslaving as an active interface with an up link [ 894.700397][T12711] bond5: (slave bridge8): making interface the new active one [ 894.739557][T12711] bridge8: entered promiscuous mode [ 894.755639][T12711] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 895.025383][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1532'. [ 895.087656][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1532'. [ 897.895900][T12758] ip6erspan0: entered promiscuous mode [ 897.972058][T12763] netlink: 'syz.1.1540': attribute type 1 has an invalid length. [ 898.009405][T12763] bond12: entered promiscuous mode [ 898.015324][T12763] 8021q: adding VLAN 0 to HW filter on device bond12 [ 898.358802][T12763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1540'. [ 898.442242][T12763] bond12: (slave bridge9): making interface the new active one [ 898.650140][T12763] bridge9: entered promiscuous mode [ 898.658447][T12763] bond12: (slave bridge9): Enslaving as an active interface with an up link [ 902.797137][T12811] overlayfs: failed to clone upperpath [ 904.693634][T12816] netlink: 'syz.5.1553': attribute type 1 has an invalid length. [ 905.165672][T12816] bond6: entered promiscuous mode [ 905.188499][T12816] 8021q: adding VLAN 0 to HW filter on device bond6 [ 905.214554][T12820] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1553'. [ 905.339590][T12816] bond6: (slave bridge9): making interface the new active one [ 905.353665][T12816] bridge9: entered promiscuous mode [ 905.365061][T12816] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 906.654434][T12845] loop1: detected capacity change from 0 to 2048 [ 907.759242][T12845] NILFS (loop1): invalid segment: Magic number mismatch [ 907.766844][T12845] NILFS (loop1): trying rollback from an earlier position [ 907.793907][T12845] NILFS (loop1): recovery complete [ 907.802122][T12856] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 912.526127][T12890] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1567'. [ 912.600346][T12896] netlink: 'syz.4.1569': attribute type 1 has an invalid length. [ 912.703396][T12896] bond11: entered promiscuous mode [ 912.710485][T12896] 8021q: adding VLAN 0 to HW filter on device bond11 [ 912.804216][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1569'. [ 912.999273][T12896] bond11: (slave bridge11): making interface the new active one [ 913.022725][T12896] bridge11: entered promiscuous mode [ 913.056621][T12896] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 917.575669][T12952] netlink: 'syz.5.1580': attribute type 1 has an invalid length. [ 917.630247][T12952] bond7: entered promiscuous mode [ 917.645072][T12952] 8021q: adding VLAN 0 to HW filter on device bond7 [ 917.657259][T12955] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1580'. [ 919.149429][T12952] bond7: (slave bridge10): making interface the new active one [ 919.248971][T12952] bridge10: entered promiscuous mode [ 919.336116][T12952] bond7: (slave bridge10): Enslaving as an active interface with an up link [ 926.656728][T13067] loop1: detected capacity change from 0 to 8 [ 926.697624][T13067] SQUASHFS error: Failed to allocate lzo workspace [ 926.730364][T13067] squashfs image failed sanity check [ 933.291074][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.148586][T13156] overlayfs: failed to clone upperpath [ 940.035263][T13180] netlink: 'syz.4.1620': attribute type 1 has an invalid length. [ 940.393779][T13180] bond12: entered promiscuous mode [ 940.425025][T13180] 8021q: adding VLAN 0 to HW filter on device bond12 [ 940.546507][T13189] bond12: (slave bridge12): making interface the new active one [ 940.565829][T13189] bridge12: entered promiscuous mode [ 940.602145][T13189] bond12: (slave bridge12): Enslaving as an active interface with an up link [ 941.743645][T13204] netlink: 'syz.4.1634': attribute type 1 has an invalid length. [ 943.831998][T13204] bond13: entered promiscuous mode [ 943.993631][T13204] 8021q: adding VLAN 0 to HW filter on device bond13 [ 944.196657][T13216] loop1: detected capacity change from 0 to 1024 [ 944.245791][T13216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.288395][T13214] bond13: (slave bridge13): making interface the new active one [ 944.313519][T13214] bridge13: entered promiscuous mode [ 944.342213][T13214] bond13: (slave bridge13): Enslaving as an active interface with an up link [ 944.485656][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.080420][T13226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1629'. [ 951.080875][T13253] netlink: 'syz.4.1638': attribute type 1 has an invalid length. [ 951.377799][T13253] bond14: entered promiscuous mode [ 951.383270][T13253] 8021q: adding VLAN 0 to HW filter on device bond14 [ 951.448638][T13253] bond14: (slave bridge14): making interface the new active one [ 951.867627][T13253] bridge14: entered promiscuous mode [ 951.972541][T13253] bond14: (slave bridge14): Enslaving as an active interface with an up link [ 952.400491][T13267] netlink: 'syz.5.1640': attribute type 1 has an invalid length. [ 952.720010][T13279] delete_channel: no stack [ 953.260190][T13268] bond8: (slave veth3): Enslaving as an active interface with a down link [ 953.391326][T13273] delete_channel: no stack [ 953.479612][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1640'. [ 953.591705][T13267] bond8 (unregistering): (slave veth3): Releasing active interface [ 953.678638][T13267] bond8 (unregistering): Released all slaves [ 959.370287][T13313] netlink: 'syz.5.1651': attribute type 1 has an invalid length. [ 959.430965][T13313] bond8: entered promiscuous mode [ 959.436418][T13313] 8021q: adding VLAN 0 to HW filter on device bond8 [ 959.508425][T13313] bond8: (slave bridge11): making interface the new active one [ 959.517039][T13313] bridge11: entered promiscuous mode [ 959.523621][T13313] bond8: (slave bridge11): Enslaving as an active interface with an up link [ 960.951364][T13330] kAFS: No cell specified [ 964.082753][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1663'. [ 965.787214][T13381] Process accounting resumed [ 977.473895][T13498] loop1: detected capacity change from 0 to 512 [ 977.620566][T13498] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.1686: corrupted in-inode xattr: invalid ea_ino [ 977.699676][T13498] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1686: couldn't read orphan inode 15 (err -117) [ 977.999303][T13498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.831602][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.803251][T13553] netlink: 'syz.3.1697': attribute type 1 has an invalid length. [ 983.962247][T13553] bond12: entered promiscuous mode [ 983.968288][T13553] 8021q: adding VLAN 0 to HW filter on device bond12 [ 984.137211][T13558] bond12: (slave bridge13): making interface the new active one [ 984.148776][T13558] bridge13: entered promiscuous mode [ 984.156364][T13558] bond12: (slave bridge13): Enslaving as an active interface with an up link [ 984.886163][T13563] ip6t_REJECT: ECHOREPLY is not supported [ 986.665588][T13590] netlink: 'syz.1.1705': attribute type 1 has an invalid length. [ 987.408896][T13590] bond13: entered promiscuous mode [ 987.414343][T13590] 8021q: adding VLAN 0 to HW filter on device bond13 [ 987.544089][T13590] bond13: (slave bridge10): making interface the new active one [ 987.577291][T13590] bridge10: entered promiscuous mode [ 987.638802][T13601] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 988.090953][T13590] bond13: (slave bridge10): Enslaving as an active interface with an up link [ 989.117464][T13609] netlink: 'syz.1.1708': attribute type 1 has an invalid length. [ 989.156124][T13609] bond14: entered promiscuous mode [ 989.163401][T13609] 8021q: adding VLAN 0 to HW filter on device bond14 [ 989.233004][T13609] bond14: (slave bridge11): making interface the new active one [ 989.251598][T13609] bridge11: entered promiscuous mode [ 989.261714][T13609] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 993.309798][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.648436][T13654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1715'. [ 996.433273][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1720'. [ 996.771526][T13698] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1724'. [ 999.364155][T13714] netlink: 'syz.4.1735': attribute type 1 has an invalid length. [ 999.456753][T13714] bond15: entered promiscuous mode [ 999.462256][T13714] 8021q: adding VLAN 0 to HW filter on device bond15 [ 999.470335][T13717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1735'. [ 1000.172256][T13714] bond15: (slave bridge15): making interface the new active one [ 1000.182423][T13714] bridge15: entered promiscuous mode [ 1000.278564][T13714] bond15: (slave bridge15): Enslaving as an active interface with an up link [ 1000.423219][T13730] netlink: 'syz.5.1731': attribute type 1 has an invalid length. [ 1000.994208][T13730] bond9: entered promiscuous mode [ 1001.001147][T13730] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1001.045152][T13738] tipc: Enabling of bearer rejected, failed to enable media [ 1001.073716][T13730] bond9: (slave bridge12): making interface the new active one [ 1001.619577][T13730] bridge12: entered promiscuous mode [ 1001.635289][T13730] bond9: (slave bridge12): Enslaving as an active interface with an up link [ 1003.095856][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1737'. [ 1004.093356][T13777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1740'. [ 1004.610847][T13774] loop1: detected capacity change from 0 to 2048 [ 1004.665697][T13774] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 1005.793371][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 1005.845400][T13782] macvtap3: entered promiscuous mode [ 1005.859691][T13782] bond0: entered promiscuous mode [ 1005.874271][T13782] syz_tun: entered promiscuous mode [ 1005.887446][T13782] macvtap3: entered allmulticast mode [ 1005.901830][T13782] bond0: entered allmulticast mode [ 1005.911008][T13782] syz_tun: entered allmulticast mode [ 1005.919820][T13782] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1005.946189][T13783] bond0: left allmulticast mode [ 1005.964138][T13783] syz_tun: left allmulticast mode [ 1005.984409][T13783] bond0: left promiscuous mode [ 1005.994024][T13783] syz_tun: left promiscuous mode [ 1006.051935][T13785] netlink: 'syz.5.1742': attribute type 1 has an invalid length. [ 1006.116329][T13785] bond10: entered promiscuous mode [ 1006.121979][T13785] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1006.130670][T13786] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1742'. [ 1006.932706][T13785] bond10: (slave bridge13): making interface the new active one [ 1006.952107][T13785] bridge13: entered promiscuous mode [ 1006.972391][T13785] bond10: (slave bridge13): Enslaving as an active interface with an up link [ 1007.218974][T13802] loop1: detected capacity change from 0 to 16 [ 1007.244334][T13803] netlink: 'syz.5.1745': attribute type 1 has an invalid length. [ 1007.269109][T13802] erofs: (device loop1): mounted with root inode @ nid 36. [ 1007.305780][T13803] bond11: entered promiscuous mode [ 1007.311267][T13803] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1007.991092][T13803] bond11: (slave bridge14): making interface the new active one [ 1008.059829][T13803] bridge14: entered promiscuous mode [ 1008.268528][T13803] bond11: (slave bridge14): Enslaving as an active interface with an up link [ 1010.875597][T13833] netlink: 'syz.1.1754': attribute type 1 has an invalid length. [ 1010.945604][T13833] bond15: entered promiscuous mode [ 1010.964994][T13833] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1012.043999][T13848] bond15: (slave bridge12): making interface the new active one [ 1012.102515][T13848] bridge12: entered promiscuous mode [ 1012.166683][T13848] bond15: (slave bridge12): Enslaving as an active interface with an up link [ 1012.659833][T13856] netlink: 'syz.1.1759': attribute type 1 has an invalid length. [ 1013.588543][T13856] bond16: entered promiscuous mode [ 1013.619229][T13856] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1013.635930][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 1013.762307][T13863] bond16: (slave bridge13): making interface the new active one [ 1013.770407][T13863] bridge13: entered promiscuous mode [ 1013.780596][T13863] bond16: (slave bridge13): Enslaving as an active interface with an up link [ 1014.065985][T13873] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1015.178699][T13877] netlink: 341 bytes leftover after parsing attributes in process `syz.1.1761'. [ 1017.332527][T13899] netlink: 'syz.1.1767': attribute type 1 has an invalid length. [ 1017.693437][T13899] bond17: entered promiscuous mode [ 1017.710028][T13899] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1017.719583][T13908] netlink: 'syz.5.1770': attribute type 1 has an invalid length. [ 1019.381227][T13908] bond12: entered promiscuous mode [ 1019.400981][T13908] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1019.676435][T13899] bond17: (slave bridge14): making interface the new active one [ 1019.704738][T13899] bridge14: entered promiscuous mode [ 1019.720876][T13899] bond17: (slave bridge14): Enslaving as an active interface with an up link [ 1019.745871][T13911] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1770'. [ 1019.888196][T13913] bond12: (slave bridge15): making interface the new active one [ 1019.986219][T13913] bridge15: entered promiscuous mode [ 1020.053807][T13913] bond12: (slave bridge15): Enslaving as an active interface with an up link [ 1023.751101][T13953] netlink: 'syz.5.1781': attribute type 1 has an invalid length. [ 1023.891785][T13953] bond13: entered promiscuous mode [ 1023.901626][T13953] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1023.963958][T13959] netlink: 'syz.1.1782': attribute type 1 has an invalid length. [ 1024.002771][T13959] bond18: entered promiscuous mode [ 1024.015555][T13959] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1024.042232][T13953] bond13: (slave bridge16): making interface the new active one [ 1024.050695][T13953] bridge16: entered promiscuous mode [ 1024.057399][T13953] bond13: (slave bridge16): Enslaving as an active interface with an up link [ 1024.143555][T13959] bond18: (slave bridge15): making interface the new active one [ 1024.162308][T13959] bridge15: entered promiscuous mode [ 1024.173078][T13959] bond18: (slave bridge15): Enslaving as an active interface with an up link [ 1024.454331][T13966] loop1: detected capacity change from 0 to 128 [ 1024.498397][T13966] vfat filesystem being mounted at /451/bus supports timestamps until 2107-12-31 (0x10391447e) [ 1026.952715][T13982] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1789'. [ 1027.734702][T13990] loop1: detected capacity change from 0 to 8 [ 1028.392371][T13990] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1028.400512][T13990] SQUASHFS error: Failed to read block 0x82: -5 [ 1028.406878][T13990] SQUASHFS error: Unable to read metadata cache entry [80] [ 1028.414092][T13990] SQUASHFS error: Unable to read inode 0x11f [ 1028.466703][T13992] netlink: 'syz.3.1793': attribute type 1 has an invalid length. [ 1028.614475][T13992] bond13: entered promiscuous mode [ 1028.620142][T13992] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1028.927123][T13992] bond13: (slave bridge14): making interface the new active one [ 1028.958147][T13992] bridge14: entered promiscuous mode [ 1028.965545][T13992] bond13: (slave bridge14): Enslaving as an active interface with an up link [ 1033.509611][T14040] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1801'. [ 1033.899923][ T5842] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 1034.304420][ T5842] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1034.333718][ T5842] usb 2-1: config 0 has no interface number 0 [ 1035.385661][T14054] set match dimension is over the limit! [ 1035.975126][ T5842] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1035.986217][ T5842] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1035.997014][ T5842] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1036.006136][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.026521][ T5842] usb 2-1: config 0 descriptor?? [ 1036.110776][ T5842] usb 2-1: can't set config #0, error -71 [ 1036.121177][ T5842] usb 2-1: USB disconnect, device number 7 [ 1036.265388][T14064] overlayfs: failed to clone upperpath [ 1036.612090][T14063] loop1: detected capacity change from 0 to 2048 [ 1044.550556][T14120] netlink: 344 bytes leftover after parsing attributes in process `syz.4.1822'. [ 1044.559803][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 1045.305609][T14124] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1823'. [ 1045.345163][T14124] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1823'. [ 1045.710970][T14130] loop1: detected capacity change from 0 to 4096 [ 1046.528288][T14130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.857455][T14130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1826'. [ 1047.092974][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.342960][T14151] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1059.689180][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1066.984256][T14233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1066.996910][T14233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1067.181876][T14233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1067.232337][T14233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1067.246806][T14233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1067.259436][T14233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1068.012078][T14240] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1850'. [ 1068.047355][T14240] netlink: 'syz.3.1850': attribute type 5 has an invalid length. [ 1068.175529][T14243] netlink: 'syz.3.1850': attribute type 10 has an invalid length. [ 1068.258557][T14243] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.532840][T14243] bond0: (slave team0): Enslaving as an active interface with an up link [ 1068.760747][T10638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1068.790281][T10638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1068.875233][T10638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1068.896281][T10638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1068.906857][T10638] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1069.023929][T10638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1069.394989][T10638] Bluetooth: hci1: command tx timeout [ 1070.485639][T14261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1852'. [ 1070.624358][T14262] bond14: (slave gretap1): Enslaving as an active interface with an up link [ 1070.684931][T14264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1852'. [ 1070.717067][T14264] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1070.733893][T14229] chnl_net:caif_netlink_parms(): no params data found [ 1071.154812][T10638] Bluetooth: hci3: command tx timeout [ 1071.444696][T10638] Bluetooth: hci1: command tx timeout [ 1072.384773][T14277] netlink: 'syz.3.1855': attribute type 1 has an invalid length. [ 1072.643396][T14277] bond15: entered promiscuous mode [ 1072.649791][T14277] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1072.667606][T14280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1855'. [ 1072.756174][T14229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.763465][T14229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.779140][T14229] bridge_slave_0: entered allmulticast mode [ 1072.787362][T14229] bridge_slave_0: entered promiscuous mode [ 1072.796806][T14229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.803997][T14229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.811439][T14229] bridge_slave_1: entered allmulticast mode [ 1072.819016][T14229] bridge_slave_1: entered promiscuous mode [ 1072.849359][T14285] bond15: (slave bridge15): making interface the new active one [ 1072.857156][T14285] bridge15: entered promiscuous mode [ 1072.863726][T14285] bond15: (slave bridge15): Enslaving as an active interface with an up link [ 1073.061431][T14229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.253329][T14291] trusted_key: syz.5.1856 sent an empty control message without MSG_MORE. [ 1073.562188][T14233] Bluetooth: hci1: command tx timeout [ 1073.568639][T10638] Bluetooth: hci3: command tx timeout [ 1074.006768][T14229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1074.285735][T14229] team0: Port device team_slave_0 added [ 1074.308812][T14229] team0: Port device team_slave_1 added [ 1075.647883][T10638] Bluetooth: hci1: command tx timeout [ 1075.700997][T10638] Bluetooth: hci3: command tx timeout [ 1075.852463][T14229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.863818][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1075.897529][T14229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.913451][T14247] chnl_net:caif_netlink_parms(): no params data found [ 1075.942767][T14229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.957253][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1075.990605][T14229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.127620][T14229] hsr_slave_0: entered promiscuous mode [ 1076.168276][T14229] hsr_slave_1: entered promiscuous mode [ 1076.203689][T14229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1076.231440][T14229] Cannot create hsr debugfs directory [ 1076.932430][T14247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.947933][T14247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.959466][T14247] bridge_slave_0: entered allmulticast mode [ 1076.971589][T14247] bridge_slave_0: entered promiscuous mode [ 1077.024175][T14247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.032506][T14247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.039916][T14247] bridge_slave_1: entered allmulticast mode [ 1077.166346][T14247] bridge_slave_1: entered promiscuous mode [ 1077.263737][T14247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.289991][T14247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.784707][T10638] Bluetooth: hci3: command tx timeout [ 1078.199584][T14247] team0: Port device team_slave_0 added [ 1078.243559][T14247] team0: Port device team_slave_1 added [ 1078.996671][T14247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.013968][T14247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.093125][T14247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.106920][T14247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.113915][T14247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.141255][T14247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.213585][T14229] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1079.261380][T14229] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1079.289491][T14229] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1079.323914][T14247] hsr_slave_0: entered promiscuous mode [ 1079.342140][T14247] hsr_slave_1: entered promiscuous mode [ 1079.362927][T14247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1079.390089][T14247] Cannot create hsr debugfs directory [ 1079.414950][T14229] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1080.579045][T14229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.393580][T14229] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.420615][T12993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.429201][T12993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.447595][T12993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.454807][T12993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.578735][T14247] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1081.600381][T14247] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1081.834307][T14247] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1081.978266][T14247] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1083.208571][T14247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.471628][T14247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.170466][T13001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.177729][T13001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.249779][T13007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.256971][T13007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.273110][T14229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.871032][T14408] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1088.624346][T14229] veth0_vlan: entered promiscuous mode [ 1089.479566][T14229] veth1_vlan: entered promiscuous mode [ 1089.493422][T14247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.356896][T14424] overlayfs: failed to clone lowerpath [ 1090.640404][T14229] veth0_macvtap: entered promiscuous mode [ 1090.651925][T14229] veth1_macvtap: entered promiscuous mode [ 1090.671520][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.015626][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.050942][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.071940][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.261653][T14229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.298305][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.349544][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.373529][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.384401][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.396728][T14229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.530404][T14229] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.576932][T14229] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.664996][T14229] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.772210][T14229] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.730426][T12983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.804464][T12983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.114668][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.133464][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.567579][T14247] veth0_vlan: entered promiscuous mode [ 1094.582716][T14247] veth1_vlan: entered promiscuous mode [ 1095.441721][T14247] veth0_macvtap: entered promiscuous mode [ 1095.468681][T14247] veth1_macvtap: entered promiscuous mode [ 1095.683780][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'. [ 1096.028707][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.163774][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.285689][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.411148][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.619871][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.923852][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.215346][T14247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.272650][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.372975][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.405030][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.434951][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.476111][T14247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.508014][T14247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.542903][T14247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.554142][T14476] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 1098.278477][T14476] bond16: entered promiscuous mode [ 1098.304428][T14476] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1098.350708][T14247] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.414007][T14247] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.434807][T14247] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.443583][T14247] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.661434][T14483] bond16: (slave bridge17): making interface the new active one [ 1098.669828][T14483] bridge17: entered promiscuous mode [ 1099.518064][T14483] bond16: (slave bridge17): Enslaving as an active interface with an up link [ 1099.654672][T14491] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1894'. [ 1099.684680][T14491] netlink: 'syz.6.1894': attribute type 5 has an invalid length. [ 1099.709160][T14491] netlink: 'syz.6.1894': attribute type 10 has an invalid length. [ 1099.774361][T14491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.796194][T14491] bond0: (slave team0): Enslaving as an active interface with an up link [ 1099.997611][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.031609][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.768298][T12989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.791504][T12989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.372181][T14522] netlink: 'syz.3.1902': attribute type 1 has an invalid length. [ 1104.336364][T14522] bond17: entered promiscuous mode [ 1104.344766][T14522] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1104.359855][T14528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1902'. [ 1104.501686][T14522] bond17: (slave bridge18): making interface the new active one [ 1104.511567][T14522] bridge18: entered promiscuous mode [ 1104.518836][T14522] bond17: (slave bridge18): Enslaving as an active interface with an up link [ 1108.720016][T14576] netlink: 'syz.5.1914': attribute type 1 has an invalid length. [ 1108.845784][T14576] bond14: entered promiscuous mode [ 1108.868989][T14576] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1108.915901][T14577] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1914'. [ 1109.003494][T14576] bond14: (slave bridge18): making interface the new active one [ 1109.086677][T14576] bridge18: entered promiscuous mode [ 1109.093539][T14576] bond14: (slave bridge18): Enslaving as an active interface with an up link [ 1112.815594][T14614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1924'. [ 1112.855383][T14614] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1924'. [ 1115.560722][T14631] netlink: 'syz.7.1928': attribute type 1 has an invalid length. [ 1115.793503][T14631] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1928'. [ 1116.172719][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.319540][T14673] loop6: detected capacity change from 0 to 128 [ 1121.404319][T14673] vfat filesystem being mounted at /14/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 1125.065597][T14698] lo speed is unknown, defaulting to 1000 [ 1125.071788][T14698] lo speed is unknown, defaulting to 1000 [ 1125.116240][T14698] lo speed is unknown, defaulting to 1000 [ 1125.130317][T14698] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1125.146042][T14698] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1125.275431][T14698] lo speed is unknown, defaulting to 1000 [ 1125.283350][T14698] lo speed is unknown, defaulting to 1000 [ 1125.294382][T14698] lo speed is unknown, defaulting to 1000 [ 1125.301707][T14698] lo speed is unknown, defaulting to 1000 [ 1125.309020][T14698] lo speed is unknown, defaulting to 1000 [ 1125.317839][T14698] lo speed is unknown, defaulting to 1000 [ 1125.550426][T14703] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1125.564906][T14703] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1126.578552][T14703] loop6: detected capacity change from 0 to 32768 [ 1126.696771][T14703] jfs filesystem being mounted at /16/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1126.796331][T14721] netlink: 856 bytes leftover after parsing attributes in process `syz.5.1949'. [ 1126.933379][T14720] netlink: 'syz.3.1950': attribute type 1 has an invalid length. [ 1127.376500][ T28] audit: type=1800 audit(3909955181.253:166): pid=14703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1944" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 1127.431208][T14720] bond18: entered promiscuous mode [ 1127.466055][T14720] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1127.477188][T14725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1950'. [ 1129.328146][T14720] bond18: (slave bridge19): making interface the new active one [ 1129.384194][T14720] bridge19: entered promiscuous mode [ 1129.412336][T14720] bond18: (slave bridge19): Enslaving as an active interface with an up link [ 1130.273840][T14744] tipc: Started in network mode [ 1130.278843][T14744] tipc: Node identity 4, cluster identity 4711 [ 1130.285125][T14744] tipc: Node number set to 4 [ 1130.295866][T14745] siw: device registration error -23 [ 1133.434874][ T28] audit: type=1326 audit(3909955187.293:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14751 comm="syz.5.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7fc00000 [ 1133.513109][ T28] audit: type=1326 audit(3909955187.293:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14751 comm="syz.5.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f713bd8f6c9 code=0x7fc00000 [ 1133.573518][ T28] audit: type=1326 audit(3909955187.293:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14751 comm="syz.5.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7fc00000 [ 1134.080551][ T28] audit: type=1326 audit(3909955187.293:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14751 comm="syz.5.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7fc00000 [ 1134.129947][ T28] audit: type=1326 audit(3909955187.293:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14751 comm="syz.5.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7fc00000 [ 1134.390755][ T28] audit: type=1326 audit(3909955187.293:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14751 comm="syz.5.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7fc00000 [ 1134.823564][ T28] audit: type=1326 audit(3909955187.293:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14751 comm="syz.5.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7fc00000 [ 1134.879969][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1963'. [ 1135.061821][T14778] batadv0: entered promiscuous mode [ 1135.073127][T14778] macvtap1: entered promiscuous mode [ 1135.074694][ T28] audit: type=1326 audit(3909955187.293:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14751 comm="syz.5.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7fc00000 [ 1135.081938][T14778] macvtap1: entered allmulticast mode [ 1135.150683][T14778] batadv0: entered allmulticast mode [ 1135.155077][ T28] audit: type=1326 audit(3909955187.293:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14751 comm="syz.5.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7fc00000 [ 1135.180767][T14778] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1135.214146][ T28] audit: type=1326 audit(3909955187.293:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14751 comm="syz.5.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7fc00000 [ 1135.505285][T14780] batadv0: left allmulticast mode [ 1135.510885][T14780] batadv0: left promiscuous mode [ 1135.545816][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1964'. [ 1141.080967][T14834] befs: (nullb0): invalid magic header [ 1141.097678][ T5842] IPVS: starting estimator thread 0... [ 1141.725462][T14841] IPVS: using max 18 ests per chain, 43200 per kthread [ 1152.958003][T10638] Bluetooth: Unexpected continuation frame (len 16) [ 1158.159383][T14961] loop7: detected capacity change from 0 to 1024 [ 1158.273594][T14961] hfsplus: unable to find HFS+ superblock [ 1163.142414][T15000] netlink: 'syz.5.2013': attribute type 1 has an invalid length. [ 1163.206413][T15000] bond15: entered promiscuous mode [ 1163.211918][T15000] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1163.405706][T15000] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2013'. [ 1163.453103][T15000] bond15: (slave bridge19): making interface the new active one [ 1163.467237][T15000] bridge19: entered promiscuous mode [ 1163.475350][T15000] bond15: (slave bridge19): Enslaving as an active interface with an up link [ 1165.412558][T15026] tipc: Started in network mode [ 1165.417565][T15026] tipc: Node identity 4, cluster identity 4711 [ 1165.423748][T15026] tipc: Node number set to 4 [ 1177.642906][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1190.514183][T10638] Bluetooth: hci1: command 0x0406 tx timeout [ 1191.610715][T15184] loop7: detected capacity change from 0 to 2048 [ 1191.827645][T15184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1192.859976][ T7153] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm kworker/u4:14: bg 0: block 234: padding at end of block bitmap is not set [ 1193.855903][ T7153] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 390 with error 28 [ 1193.915833][ T7153] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1193.915833][ T7153] [ 1193.954649][ T7153] EXT4-fs (loop7): Total free blocks count 0 [ 1193.960714][ T7153] EXT4-fs (loop7): Free/Dirty block details [ 1194.000070][ T7153] EXT4-fs (loop7): free_blocks=0 [ 1194.024675][ T7153] EXT4-fs (loop7): dirty_blocks=400 [ 1194.029953][ T7153] EXT4-fs (loop7): Block reservation details [ 1194.054551][ T7153] EXT4-fs (loop7): i_reserved_data_blocks=25 [ 1194.104359][T14247] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.200051][T14233] Bluetooth: hci3: command 0x0406 tx timeout [ 1199.891197][T15241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2063'. [ 1203.204820][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1212.570663][T15333] loop6: detected capacity change from 0 to 1024 [ 1213.585656][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1214.389976][T15341] netlink: 'syz.6.2087': attribute type 1 has an invalid length. [ 1214.627351][T15347] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1214.639735][T15347] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1214.715039][T15348] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2087'. [ 1214.749988][T15348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1214.978959][T15341] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 1215.835537][T15341] macvlan2: entered promiscuous mode [ 1215.867764][T15341] macvlan2: entered allmulticast mode [ 1215.932828][T15341] bond1: entered promiscuous mode [ 1215.947031][T15341] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1216.075746][T15341] bond1: left promiscuous mode [ 1216.267016][T15363] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.001025][T15404] lo speed is unknown, defaulting to 1000 [ 1229.627068][T15442] loop6: detected capacity change from 0 to 8 [ 1230.350542][T15449] SQUASHFS error: Failed to read block 0x8f: -5 [ 1234.978394][T15467] lo speed is unknown, defaulting to 1000 [ 1239.151212][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.588396][T15517] netlink: set zone limit has 8 unknown bytes [ 1243.665167][T15517] 9pnet_fd: Insufficient options for proto=fd [ 1245.429166][T15523] netlink: 'syz.3.2130': attribute type 1 has an invalid length. [ 1245.534072][T15523] bond19: entered promiscuous mode [ 1245.674954][T15523] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1245.702288][T15526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2130'. [ 1245.734902][T15526] bond19: entered allmulticast mode [ 1253.794860][T10638] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1254.536216][T15575] netlink: 'syz.3.2143': attribute type 1 has an invalid length. [ 1255.449747][T15575] bond20: entered promiscuous mode [ 1255.473744][T15575] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1255.515124][T15576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2143'. [ 1255.544328][T15576] bond20: entered allmulticast mode [ 1260.151341][T15628] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 1260.239174][T15628] bond21: entered promiscuous mode [ 1260.245165][T15628] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1260.540308][T15628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2156'. [ 1260.638528][T15628] bond21: entered allmulticast mode [ 1261.593123][T15639] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2158'. [ 1261.809201][T15639] lo speed is unknown, defaulting to 1000 [ 1265.185928][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 1265.185976][ T28] audit: type=1800 audit(3909955318.433:219): pid=15667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2164" name="bus" dev="overlay" ino=366 res=0 errno=0 [ 1274.511010][T15740] netlink: 'syz.3.2183': attribute type 1 has an invalid length. [ 1275.233902][T15740] bond22: entered promiscuous mode [ 1275.255338][T15740] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1275.273455][T15745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2183'. [ 1275.375150][T15745] bond22: entered allmulticast mode [ 1275.690250][T15751] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1278.085672][T15764] tipc: New replicast peer: 255.255.255.255 [ 1278.092760][T15764] tipc: Enabled bearer , priority 10 [ 1278.411728][T15766] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2189'. [ 1278.421699][T15766] tipc: Disabling bearer [ 1281.443607][T15781] netlink: 'syz.6.2193': attribute type 21 has an invalid length. [ 1281.464862][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2193'. [ 1281.506379][T15781] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1281.817277][T15789] bridge_slave_0: left allmulticast mode [ 1281.823214][T15789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.943541][T15789] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1282.545466][T15796] netlink: 'syz.5.2199': attribute type 1 has an invalid length. [ 1282.641275][T15796] bond16: entered promiscuous mode [ 1282.673202][T15796] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1283.375747][T15799] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2199'. [ 1283.633477][T15799] bond16: entered allmulticast mode [ 1285.342138][T15820] loop6: detected capacity change from 0 to 128 [ 1285.350302][T15820] ext4: Unknown parameter 'obj_role' [ 1285.450367][T15524] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1286.007506][T15829] nbd: must specify an index to disconnect [ 1287.817923][T15839] loop6: detected capacity change from 0 to 8 [ 1288.467910][T15841] SQUASHFS error: Failed to read block 0x8f: -5 [ 1289.229189][T15854] netlink: 'syz.6.2213': attribute type 1 has an invalid length. [ 1289.757842][T15862] orangefs_mount: mount request failed with -4 [ 1289.936675][T15854] bond2: entered promiscuous mode [ 1289.943977][T15854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1290.591450][T15866] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2213'. [ 1298.699810][T15921] loop7: detected capacity change from 0 to 2048 [ 1299.377803][ T28] audit: type=1107 audit(3909955352.723:220): pid=15917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I' [ 1299.671600][T15921] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.716458][T15921] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1299.762978][T15921] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2230'. [ 1300.496033][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.817847][T12983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.438397][T14247] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.337951][T15957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1303.887549][T15965] tipc: Enabling of bearer rejected, already enabled [ 1304.482671][T15970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2226'. [ 1304.492118][T15970] tipc: Disabling bearer [ 1305.138313][T15974] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2249'. [ 1311.243121][T16024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2253'. [ 1315.865792][T16053] 9p filesystem being mounted at /92/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1317.658201][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2264'. [ 1319.470461][T16082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2257'. [ 1319.675315][T16082] batadv0: entered promiscuous mode [ 1319.786963][T16082] macvtap2: entered promiscuous mode [ 1319.814657][T16082] macvtap2: entered allmulticast mode [ 1319.820148][T16082] batadv0: entered allmulticast mode [ 1319.866161][T16082] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1319.918333][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2257'. [ 1319.985798][T16083] batadv0: left allmulticast mode [ 1320.009734][T16083] batadv0: left promiscuous mode [ 1322.303742][T16096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2271'. [ 1324.580460][T16110] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2274'. [ 1325.958528][T16119] loop7: detected capacity change from 0 to 2048 [ 1325.987746][T16119] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1327.017324][T16121] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1330.734988][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2282'. [ 1332.203836][T16152] netlink: 'syz.3.2285': attribute type 1 has an invalid length. [ 1332.287785][T16152] bond23: entered promiscuous mode [ 1332.293283][T16152] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1332.376484][T16152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2285'. [ 1332.441512][T16152] bond23: entered allmulticast mode [ 1332.608578][T16156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2284'. [ 1336.708497][T16192] loop6: detected capacity change from 0 to 164 [ 1336.776167][T16192] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1339.673346][T16207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2297'. [ 1343.433408][T16244] loop6: detected capacity change from 0 to 4096 [ 1343.814847][T16244] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1347.582883][T16271] loop7: detected capacity change from 0 to 128 [ 1347.594204][T16271] EXT4-fs: Ignoring removed nobh option [ 1348.465579][T16271] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1348.489244][T16271] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1349.129529][T14247] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1349.895345][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2317'. [ 1355.926786][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2328'. [ 1361.925568][T16371] loop7: detected capacity change from 0 to 256 [ 1361.932621][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.518357][T16371] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1362.638746][T16371] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1362.662298][T16371] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1362.685917][T16371] exfat filesystem being mounted at /94/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1364.007140][T16386] tipc: Enabling of bearer rejected, failed to enable media [ 1364.937253][T16395] loop6: detected capacity change from 0 to 64 [ 1365.227312][T16400] netlink: 'syz.5.2342': attribute type 1 has an invalid length. [ 1365.235301][T16400] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.2342'. [ 1366.994866][T16415] loop7: detected capacity change from 0 to 4096 [ 1367.970815][T16415] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1369.226832][T16431] loop6: detected capacity change from 0 to 256 [ 1369.249069][T16431] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1369.283944][T16431] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1369.340435][T16431] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1369.380215][T16431] exfat filesystem being mounted at /118/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1370.862927][T16444] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1370.871707][T16444] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1370.880222][T16444] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1375.695453][T16494] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2364'. [ 1381.836973][T16536] loop6: detected capacity change from 0 to 4096 [ 1382.232712][T16536] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1390.970740][T16601] loop6: detected capacity change from 0 to 2048 [ 1390.986630][T16601] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1391.020475][T16601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1396.206718][T16649] netlink: 'syz.5.2402': attribute type 10 has an invalid length. [ 1396.469364][T16649] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 1396.526401][T16649] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1398.164180][T16668] loop6: detected capacity change from 0 to 512 [ 1398.197479][T16668] EXT4-fs: Ignoring removed mblk_io_submit option [ 1398.236541][T16668] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1398.260559][T16668] EXT4-fs (loop6): DAX unsupported by block device. [ 1399.542528][T16681] loop7: detected capacity change from 0 to 1024 [ 1400.082325][T16685] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1414.291403][T16798] x_tables: duplicate underflow at hook 3 [ 1415.192673][T16805] loop7: detected capacity change from 0 to 512 [ 1415.291468][T16805] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1415.308283][T16805] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1418.029643][T14247] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1420.500279][T16852] IPVS: Error connecting to the multicast addr [ 1420.511532][T16852] pim6reg: entered allmulticast mode [ 1423.688525][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1425.364372][ C1] hrtimer: interrupt took 49436 ns [ 1428.685081][T16927] openvswitch: netlink: Message has 16 unknown bytes. [ 1431.246245][T16962] sctp: [Deprecated]: syz.3.2476 (pid 16962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1431.246245][T16962] Use struct sctp_sack_info instead [ 1434.652387][T16981] kthread_run failed with err -4 [ 1434.932947][T16989] fuse: Bad value for 'fd' [ 1436.741267][T14233] Bluetooth: hci3: command 0x0406 tx timeout [ 1444.847445][T17060] loop6: detected capacity change from 0 to 512 [ 1448.422088][T17060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1448.578673][T17060] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1448.761512][T14229] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1450.604734][T17104] overlayfs: failed to clone upperpath [ 1454.328148][T17106] loop7: detected capacity change from 0 to 512 [ 1454.373086][T17106] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1454.442699][T17106] EXT4-fs error (device loop7): __ext4_fill_super:5497: inode #2: comm syz.7.2511: inode has both inline data and extents flags [ 1455.000826][T17106] EXT4-fs (loop7): Remounting filesystem read-only [ 1455.012605][T17106] EXT4-fs (loop7): get root inode failed [ 1455.018632][T17106] EXT4-fs (loop7): mount failed [ 1461.488308][T17173] syz_tun: entered allmulticast mode [ 1461.517721][T17173] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2526'. [ 1462.345782][T17173] syz_tun (unregistering): left allmulticast mode [ 1464.823664][T17205] sctp: [Deprecated]: syz.6.2530 (pid 17205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1464.823664][T17205] Use struct sctp_sack_info instead [ 1465.723020][T17215] netlink: 'syz.5.2536': attribute type 10 has an invalid length. [ 1466.788093][T17227] overlayfs: failed to clone upperpath [ 1467.426989][T14233] Bluetooth: Wrong link type (-71) [ 1468.950929][T17251] sctp: [Deprecated]: syz.5.2545 (pid 17251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1468.950929][T17251] Use struct sctp_sack_info instead [ 1469.683458][T17255] loop7: detected capacity change from 0 to 1024 [ 1470.973368][T17259] syz_tun: entered allmulticast mode [ 1473.475865][T17289] netlink: 'syz.7.2558': attribute type 10 has an invalid length. [ 1473.932590][T17289] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1474.364583][T17301] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1474.441811][T17300] syz.3.2562(17300): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1477.720483][T17338] overlayfs: missing 'lowerdir' [ 1477.885312][T17337] xt_socket: unknown flags 0x50 [ 1478.733375][T17343] netlink: 'syz.3.2570': attribute type 10 has an invalid length. [ 1478.764958][T17343] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1479.721539][T17359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1482.518981][T17370] loop7: detected capacity change from 0 to 32768 [ 1482.553865][T17370] (syz.7.2577,17370,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "heartbeat=n" or missing value [ 1482.571597][T17370] (syz.7.2577,17370,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1484.810931][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.408297][T17414] netlink: 'syz.6.2584': attribute type 10 has an invalid length. [ 1485.439612][T17414] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1490.978305][T17458] wg1: entered promiscuous mode [ 1490.983218][T17458] wg1: entered allmulticast mode [ 1491.783295][T17461] netlink: 'syz.6.2599': attribute type 10 has an invalid length. [ 1491.801381][T17467] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 1492.564843][T17469] bridge_slave_1: left allmulticast mode [ 1492.598375][T17469] bridge_slave_1: left promiscuous mode [ 1492.604170][T17469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.825646][T17469] bond0: (slave bond_slave_0): Releasing backup interface [ 1493.419758][T17469] bond0: (slave bond_slave_1): Releasing backup interface [ 1493.673624][T17469] team0: Port device team_slave_0 removed [ 1493.715259][T17469] team0: Port device team_slave_1 removed [ 1493.721938][T17469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1493.733150][T17469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.750945][T17469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1493.784788][T17469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1494.229269][T17469] bond0: (slave wlan1): Releasing backup interface [ 1494.353192][T17492] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1505.708850][T17590] overlayfs: failed to clone upperpath [ 1507.517951][T17603] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1509.115030][T17617] syz_tun: entered allmulticast mode [ 1509.125785][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2634'. [ 1509.318023][T17617] syz_tun (unregistering): left allmulticast mode [ 1509.332310][T17617] bond0: (slave syz_tun): Releasing backup interface [ 1509.339424][T17617] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1514.674990][T17668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1514.681861][T17668] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1514.687873][T17668] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1514.776659][T17668] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1514.782747][T17668] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1514.799579][T17668] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1514.805930][T17668] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1514.963639][T17674] lo speed is unknown, defaulting to 1000 [ 1516.774585][T14233] Bluetooth: hci4: command 0x0406 tx timeout [ 1516.781386][T14233] Bluetooth: hci2: command 0x0406 tx timeout [ 1516.804680][T14233] Bluetooth: hci1: command 0x0406 tx timeout [ 1516.884465][T17684] Bluetooth: hci3: command 0x0406 tx timeout [ 1518.805628][T17684] Bluetooth: hci4: command 0x0406 tx timeout [ 1519.004820][T17684] Bluetooth: hci1: command 0x0406 tx timeout [ 1519.004829][T10638] Bluetooth: hci3: command 0x0406 tx timeout [ 1519.055296][ C1] af_packet: tpacket_rcv: packet too big, clamped from 102 to 4294967272. macoff=96 [ 1519.117907][T17707] "syz.5.2653" (17707) uses obsolete ecb(arc4) skcipher [ 1519.920777][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2652'. [ 1521.614953][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2654'. [ 1524.491258][T17740] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2659'. [ 1524.911728][T17749] loop7: detected capacity change from 0 to 256 [ 1524.969351][T17749] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1525.036676][T17749] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1525.088682][T17749] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1525.185611][T17749] exfat filesystem being mounted at /164/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1530.826187][T17811] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1530.838131][T17811] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1531.105178][T17808] (null): rxe_set_mtu: Set mtu to 1024 [ 1531.111931][T17808] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 1532.679304][T17807] loop7: detected capacity change from 0 to 2048 [ 1532.798382][T17807] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1534.751211][T17839] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1541.799696][T17886] netlink: 'syz.6.2694': attribute type 1 has an invalid length. [ 1544.238247][T17903] loop6: detected capacity change from 0 to 256 [ 1544.276070][T17903] vfat filesystem being mounted at /201/bus supports timestamps until 2107-12-31 (0x10391447e) [ 1546.250397][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.039949][T17932] overlayfs: failed to clone upperpath [ 1547.352328][T17935] netlink: 'syz.5.2705': attribute type 1 has an invalid length. [ 1548.006986][T17942] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1548.023010][ T28] audit: type=1326 audit(3909955601.823:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7ffc0000 [ 1548.055083][ T28] audit: type=1326 audit(3909955601.823:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7ffc0000 [ 1548.078382][ T28] audit: type=1326 audit(3909955601.863:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f713bd8f6c9 code=0x7ffc0000 [ 1548.100971][ T28] audit: type=1326 audit(3909955601.863:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7ffc0000 [ 1548.123577][ T28] audit: type=1326 audit(3909955601.863:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7ffc0000 [ 1548.147016][ T28] audit: type=1326 audit(3909955601.873:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f713bd8f6c9 code=0x7ffc0000 [ 1548.326318][ T28] audit: type=1326 audit(3909955601.873:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7ffc0000 [ 1548.624359][ T28] audit: type=1326 audit(3909955601.873:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7ffc0000 [ 1549.387501][ T28] audit: type=1326 audit(3909955601.873:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f713bd8f6c9 code=0x7ffc0000 [ 1549.501809][ T28] audit: type=1326 audit(3909955601.873:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17933 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713bd8f6c9 code=0x7ffc0000 [ 1550.180054][T17954] loop7: detected capacity change from 0 to 8 [ 1550.209728][T17955] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1550.219995][T17955] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1550.276055][T17954] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1550.284003][T17954] SQUASHFS error: Failed to read block 0x91: -5 [ 1550.290422][T17954] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1550.297722][T17954] SQUASHFS error: Unable to read inode 0x11f [ 1555.731990][T17986] loop6: detected capacity change from 0 to 512 [ 1555.886117][T17986] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1555.928736][T17986] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e01c, mo2=0082] [ 1555.984666][T17986] System zones: 1-12 [ 1555.988895][T17986] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1556.006981][T17986] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.2715: bg 0: block 361: padding at end of block bitmap is not set [ 1556.033413][T17986] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 1556.046415][T17986] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.2715: attempt to clear invalid blocks 33619980 len 1 [ 1556.064901][T17986] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2715: invalid indirect mapped block 1811939328 (level 0) [ 1556.104405][T17986] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2715: invalid indirect mapped block 2 (level 2) [ 1556.739849][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2720'. [ 1556.748205][T17986] EXT4-fs (loop6): 1 truncate cleaned up [ 1556.753923][T17999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1556.765713][T17999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.779549][T17999] vlan2: entered promiscuous mode [ 1556.784922][T17999] dummy0: entered promiscuous mode [ 1556.808164][T17986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1557.067994][T14229] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1557.077662][T18004] xt_ecn: cannot match TCP bits for non-tcp packets [ 1559.813028][T18021] 9pnet_virtio: no channels available for device syz [ 1560.766948][T18032] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1561.001074][T16733] IPVS: starting estimator thread 0... [ 1561.134834][T18034] IPVS: using max 19 ests per chain, 45600 per kthread [ 1572.211005][T18110] loop7: detected capacity change from 0 to 512 [ 1572.388117][T18110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1573.076928][T18110] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1573.199261][T18110] EXT4-fs (loop7): 1 truncate cleaned up [ 1573.255050][T18110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1574.241108][T14247] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1574.656097][T18136] loop7: detected capacity change from 0 to 128 [ 1574.699567][T18136] vfat filesystem being mounted at /190/bus supports timestamps until 2107-12-31 (0x10391447e) [ 1577.763217][T18165] loop6: detected capacity change from 0 to 512 [ 1577.807328][T18165] EXT4-fs: Ignoring removed orlov option [ 1577.855237][T18165] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1577.910864][T18167] loop7: detected capacity change from 0 to 1024 [ 1577.928693][T18167] EXT4-fs: Ignoring removed bh option [ 1577.934192][T18167] EXT4-fs: Ignoring removed nobh option [ 1577.944800][T18165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1577.968160][T18167] EXT4-fs: Ignoring removed bh option [ 1577.982010][T18165] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2249: inode #15: comm syz.6.2759: corrupted in-inode xattr: e_value size too large [ 1578.028813][T18165] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2759: couldn't read orphan inode 15 (err -117) [ 1578.047904][T18167] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1578.104060][T18165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1578.150925][T18167] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1580.357760][T18182] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4031: comm syz.7.2760: Allocating blocks 497-513 which overlap fs metadata [ 1580.827274][T18182] EXT4-fs (loop7): pa ffff888077a77e80: logic 256, phys. 385, len 8 [ 1580.835816][T18182] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 1580.928427][T14229] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1581.222303][T14247] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1585.515790][T18204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2768'. [ 1586.892442][T18229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1587.873250][T18246] dvmrp1: entered allmulticast mode [ 1588.881359][T18253] loop7: detected capacity change from 0 to 512 [ 1588.939058][T18253] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1589.141061][T18253] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2778: iget: bogus i_mode (5) [ 1589.219076][T18253] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2778: couldn't read orphan inode 15 (err -117) [ 1589.237531][T18253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1589.255120][T18253] ext2 filesystem being mounted at /196/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1591.687581][T14247] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.179211][T18289] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1593.915600][T18290] vxcan3: entered promiscuous mode [ 1593.920879][T18290] vxcan3: entered allmulticast mode [ 1595.046100][T17684] Bluetooth: hci3: command 0x0406 tx timeout [ 1597.758070][T18314] loop7: detected capacity change from 0 to 1024 [ 1597.785404][T18314] EXT4-fs: Ignoring removed bh option [ 1597.822310][T18314] EXT4-fs: Ignoring removed nobh option [ 1597.856552][T18314] EXT4-fs: Ignoring removed bh option [ 1597.906600][T18312] netlink: 'syz.5.2791': attribute type 6 has an invalid length. [ 1597.921006][T18314] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1597.949592][T18318] loop6: detected capacity change from 0 to 512 [ 1598.658520][T18318] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1598.661085][T18314] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1598.704905][T18318] EXT4-fs (loop6): mount failed [ 1601.678825][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1601.678840][ T28] audit: type=1800 audit(3909955655.543:245): pid=18330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2792" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 1601.957752][T14247] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1602.206749][T18343] (null): rxe_set_mtu: Set mtu to 1024 [ 1602.221315][T18343] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 1603.291924][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2800'. [ 1603.866849][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2799'. [ 1609.146838][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1609.822447][T18391] pimreg: entered allmulticast mode [ 1610.905752][T18395] vxcan3: entered promiscuous mode [ 1611.001556][T18395] vxcan3: entered allmulticast mode [ 1614.839122][T18431] xt_CT: No such helper "snmp" [ 1616.414054][T18446] pimreg: entered allmulticast mode [ 1617.115162][T18454] loop6: detected capacity change from 0 to 40427 [ 1617.147837][T18454] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1617.155976][T18454] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1617.167585][T18454] F2FS-fs (loop6): invalid crc value [ 1617.198968][T18454] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1617.254822][T18454] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1617.261938][T18454] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1618.058909][ T28] audit: type=1326 audit(3909955671.903:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18467 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1991d8f6c9 code=0x7ffc0000 [ 1618.081578][ T28] audit: type=1326 audit(3909955671.903:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18467 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1991d8f6c9 code=0x7ffc0000 [ 1618.147807][ T28] audit: type=1326 audit(3909955671.903:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18467 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1991d8f6c9 code=0x7ffc0000 [ 1618.291656][ T28] audit: type=1326 audit(3909955671.903:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18467 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1991d8f6c9 code=0x7ffc0000 [ 1618.784174][ T28] audit: type=1326 audit(3909955671.903:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18467 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1991d8f6c9 code=0x7ffc0000 [ 1619.012503][ T28] audit: type=1326 audit(3909955671.903:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18467 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1991d8f6c9 code=0x7ffc0000 [ 1619.070011][ T28] audit: type=1326 audit(3909955671.903:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18467 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1991d8f6c9 code=0x7ffc0000 [ 1619.268511][ T28] audit: type=1326 audit(3909955671.903:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18467 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1991d8f6c9 code=0x7ffc0000 [ 1619.305064][ T28] audit: type=1326 audit(3909955671.903:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18467 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1991d8f6c9 code=0x7ffc0000 [ 1619.327785][ T28] audit: type=1326 audit(3909955671.903:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18467 comm="syz.7.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1991d8f6c9 code=0x7ffc0000 [ 1619.358239][T18468] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2826'. [ 1620.842347][T18490] loop7: detected capacity change from 0 to 4096 [ 1620.903552][T18490] ntfs3: loop7: Failed to initialize $Extend/$ObjId. [ 1622.072103][T18511] loop6: detected capacity change from 0 to 1024 [ 1623.047274][T18531] loop7: detected capacity change from 0 to 1024 [ 1623.091192][T18531] EXT4-fs: Ignoring removed orlov option [ 1623.122958][T18531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1623.163067][T18531] EXT4-fs: Mount option(s) incompatible with ext2 [ 1623.664348][T18543] loop7: detected capacity change from 0 to 256 [ 1624.230106][T18543] vfat filesystem being mounted at /208/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1624.331169][T18542] xt_CT: No such helper "snmp" [ 1626.407674][T18558] loop7: detected capacity change from 0 to 128 [ 1626.445612][T18558] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1626.492494][T18558] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1627.371068][T14247] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1630.143166][T18609] overlayfs: failed to clone lowerpath [ 1630.636259][T18620] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.2849'. [ 1631.303342][T18622] loop6: detected capacity change from 0 to 1024 [ 1631.325292][T18622] EXT4-fs: Ignoring removed orlov option [ 1631.330985][T18622] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1631.392667][T18622] EXT4-fs: Mount option(s) incompatible with ext2 [ 1632.108424][T18633] xt_CT: No such helper "snmp" [ 1633.057690][T18648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2855'. [ 1634.049871][T18663] syz.6.2858: attempt to access beyond end of device [ 1634.049871][T18663] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1634.065100][T18663] syz.6.2858: attempt to access beyond end of device [ 1634.065100][T18663] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1637.609223][T18688] overlayfs: failed to clone upperpath [ 1639.629359][T18692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2865'. [ 1640.493707][T18710] loop7: detected capacity change from 0 to 40427 [ 1640.559054][T18710] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1640.566942][T18710] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1640.588121][T18710] F2FS-fs (loop7): invalid crc value [ 1640.624346][T18710] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1640.762882][T18710] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1640.770160][T18710] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1642.837968][T18736] xt_TCPMSS: Only works on TCP SYN packets [ 1645.936567][T18769] gfs2: not a GFS2 filesystem [ 1646.339915][T18773] loop7: detected capacity change from 0 to 128 [ 1646.347666][T18773] FAT-fs (loop7): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 1646.699877][T18778] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2880'. [ 1647.142287][T18447] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1648.136441][T18788] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1648.143032][T18788] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1648.151542][T18788] vhci_hcd vhci_hcd.0: Device attached [ 1648.253777][T18790] vhci_hcd: connection closed [ 1648.259813][ T11] vhci_hcd: stop threads [ 1648.347403][ T11] vhci_hcd: release socket [ 1648.351997][ T11] vhci_hcd: disconnect device [ 1649.453489][ T8] usb usb46-port1: attempt power cycle [ 1650.180660][ T8] usb usb46-port1: unable to enumerate USB device [ 1652.676272][T18821] loop7: detected capacity change from 0 to 128 [ 1652.788597][T18821] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1652.843981][T18821] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1652.875760][ C1] vkms_vblank_simulate: vblank timer overrun [ 1653.245262][T18833] "syz.7.2892" (18833) uses obsolete ecb(arc4) skcipher [ 1654.042905][T14247] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1654.053481][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2894'. [ 1656.488369][T18850] overlayfs: bad index found (index=index/00fb2100012276acab2ec74aa68c555e670203f0364bc981a7b404000000000000, ftype=2000, origin ftype=a000). [ 1657.321495][T18855] loop7: detected capacity change from 0 to 1024 [ 1657.360020][T18855] EXT4-fs: Ignoring removed orlov option [ 1657.375352][T18855] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1657.385219][T18855] EXT4-fs: Mount option(s) incompatible with ext2 [ 1657.867674][T18861] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2901'. [ 1658.818420][T18863] xt_CT: No such helper "snmp" [ 1660.274304][T18877] xt_CT: No such helper "snmp" [ 1660.529247][T18879] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.2907'. [ 1660.572964][T18869] loop7: detected capacity change from 0 to 8192 [ 1660.632169][T18869] vfat filesystem being mounted at /227/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 1660.901742][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 1660.901758][ T28] audit: type=1800 audit(3909955714.773:317): pid=18887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2903" name="file2" dev="loop7" ino=1048657 res=0 errno=0 [ 1662.213995][T18908] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1662.998917][T18912] loop6: detected capacity change from 0 to 256 [ 1663.036480][T18912] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1663.173481][T18912] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1663.209082][T18912] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1663.244005][T18912] exfat filesystem being mounted at /245/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1664.231632][T18924] loop6: detected capacity change from 0 to 1024 [ 1664.239415][T18924] EXT4-fs: Ignoring removed orlov option [ 1664.247281][T18924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1664.261216][T18924] EXT4-fs: Mount option(s) incompatible with ext2 [ 1665.862693][T18928] xt_CT: No such helper "snmp" [ 1667.202644][T18945] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.2920'. [ 1669.128755][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.226054][T18965] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1670.317514][T18982] xt_CT: No such helper "snmp" [ 1671.987044][T18989] xt_CT: No such helper "snmp" [ 1676.335613][T19036] xt_CT: No such helper "snmp" [ 1676.680703][T19045] sctp: [Deprecated]: syz.7.2956 (pid 19045) Use of int in max_burst socket option. [ 1676.680703][T19045] Use struct sctp_assoc_value instead [ 1678.599466][T19061] overlayfs: failed to clone lowerpath [ 1678.653163][T19060] overlayfs: failed to clone lowerpath [ 1680.066178][T19076] loop6: detected capacity change from 0 to 1024 [ 1680.085526][T19076] EXT4-fs: Ignoring removed orlov option [ 1681.242387][T19076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1681.290453][T19076] EXT4-fs: Mount option(s) incompatible with ext2 [ 1681.816952][T19087] xt_CT: No such helper "snmp" [ 1683.280942][T19107] loop7: detected capacity change from 0 to 1024 [ 1683.297126][T19107] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1684.161865][T19107] JBD2: no valid journal superblock found [ 1684.169420][T19107] EXT4-fs (loop7): Could not load journal inode [ 1684.604658][T18447] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1685.637896][ T5891] IPVS: starting estimator thread 0... [ 1685.864584][T19117] IPVS: using max 23 ests per chain, 55200 per kthread [ 1687.842136][T19130] loop7: detected capacity change from 0 to 512 [ 1687.876369][T19130] EXT4-fs: Ignoring removed nobh option [ 1687.960593][T19132] loop6: detected capacity change from 0 to 1024 [ 1687.999831][T19132] EXT4-fs: Ignoring removed orlov option [ 1688.008879][T19132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1688.063190][T19130] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2970: iget: bad i_size value: 38620345925642 [ 1688.076869][T19132] EXT4-fs: Mount option(s) incompatible with ext2 [ 1688.105172][T19130] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2970: couldn't read orphan inode 15 (err -117) [ 1688.142148][T19130] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1689.066655][T19140] xt_CT: No such helper "snmp" [ 1689.170956][T19136] EXT4-fs error (device loop7): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1689.447645][T14247] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1690.517063][T19157] netlink: 'syz.5.2976': attribute type 5 has an invalid length. [ 1692.246160][T19170] loop7: detected capacity change from 0 to 512 [ 1692.323125][T19170] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2980: inode has both inline data and extents flags [ 1692.403551][T19176] loop6: detected capacity change from 0 to 512 [ 1692.412208][T19170] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2980: couldn't read orphan inode 15 (err -117) [ 1692.415389][T19176] EXT4-fs: Ignoring removed nobh option [ 1692.451237][T19170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1692.472924][T19176] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2981: iget: bad i_size value: 38620345925642 [ 1693.913603][T19176] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2981: couldn't read orphan inode 15 (err -117) [ 1693.993622][T19176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1694.372878][T14247] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1695.384264][T19193] xt_CT: No such helper "snmp" [ 1695.634629][T19174] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1695.719240][T14229] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1696.027310][T19205] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1696.700068][T19207] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.2988' sets config #0 [ 1696.725991][T19207] loop7: detected capacity change from 0 to 16 [ 1696.734118][T19207] erofs: (device loop7): mounted with root inode @ nid 36. [ 1697.064139][T19217] loop7: detected capacity change from 0 to 1024 [ 1697.296573][T19217] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1697.334530][T19217] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1698.820808][T19236] loop6: detected capacity change from 0 to 1024 [ 1698.833703][T19236] EXT4-fs: Ignoring removed orlov option [ 1698.851060][T19236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1698.865236][T19236] EXT4-fs: Mount option(s) incompatible with ext2 [ 1699.146127][T14247] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1699.369308][T19242] loop6: detected capacity change from 0 to 256 [ 1699.418054][T19242] vfat filesystem being mounted at /260/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1699.727084][T19240] xt_CT: No such helper "snmp" [ 1700.972263][T19247] xt_CT: No such helper "snmp" [ 1702.027145][T19264] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1703.403058][T19276] loop6: detected capacity change from 0 to 512 [ 1703.463655][T19276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1703.534857][T19276] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1704.398164][T14229] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1704.774556][T19301] loop6: detected capacity change from 0 to 1024 [ 1704.813666][T19301] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1706.555168][T19316] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3010'. [ 1706.568227][T14229] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1706.942313][T19321] loop6: detected capacity change from 0 to 512 [ 1706.982172][T19321] EXT4-fs: Ignoring removed nobh option [ 1707.074939][T19321] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3020: iget: bad i_size value: 38620345925642 [ 1707.190838][T19326] bridge0: port 1(syz_tun) entered blocking state [ 1707.200917][T19326] bridge0: port 1(syz_tun) entered disabled state [ 1707.238663][T19326] syz_tun: entered promiscuous mode [ 1707.638701][T19321] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3020: couldn't read orphan inode 15 (err -117) [ 1707.671919][T19321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1708.375167][T19335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3013'. [ 1708.651665][T14229] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1708.825220][T16050] IPVS: starting estimator thread 0... [ 1708.924952][T19343] IPVS: using max 19 ests per chain, 45600 per kthread [ 1710.326466][T19360] loop7: detected capacity change from 0 to 1024 [ 1710.342890][T19360] EXT4-fs: Ignoring removed orlov option [ 1710.349310][T19360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1710.386959][T19360] EXT4-fs: Mount option(s) incompatible with ext2 [ 1710.448010][T19362] loop6: detected capacity change from 0 to 512 [ 1710.555192][T19362] EXT4-fs: Ignoring removed nobh option [ 1711.426091][T19362] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3024: iget: bad i_size value: 38620345925642 [ 1711.468832][T19362] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3024: couldn't read orphan inode 15 (err -117) [ 1711.625548][T19362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1712.598441][T19380] loop7: detected capacity change from 0 to 256 [ 1714.076734][T19380] vfat filesystem being mounted at /251/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1714.100088][T14229] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.386343][T19388] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3029'. [ 1714.434878][T19388] vlan2: entered promiscuous mode [ 1714.444328][T19388] batadv0: entered promiscuous mode [ 1716.233681][T19401] loop6: detected capacity change from 0 to 8192 [ 1716.734250][T19401] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿ" or missing value [ 1718.276475][T19419] wg1: entered promiscuous mode [ 1718.281648][T19419] wg1: entered allmulticast mode [ 1724.323393][T19477] wg1: entered promiscuous mode [ 1724.328878][T19477] wg1: entered allmulticast mode [ 1725.074279][ T28] audit: type=1107 audit(3909955778.943:318): pid=19478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1725.092060][T19485] loop7: detected capacity change from 0 to 1024 [ 1725.147886][T19485] EXT4-fs: Ignoring removed orlov option [ 1725.188311][T19486] loop6: detected capacity change from 0 to 512 [ 1725.203707][T19486] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1725.265663][T19486] vfat filesystem being mounted at /276/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1725.309871][T19486] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1725.716694][T19485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1725.788177][T19485] EXT4-fs: Mount option(s) incompatible with ext2 [ 1725.936966][T18447] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1726.965612][T19492] loop7: detected capacity change from 0 to 256 [ 1726.997487][T19492] vfat filesystem being mounted at /258/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1728.180914][T19503] xt_CT: No such helper "snmp" [ 1730.385017][T19523] xt_CT: No such helper "snmp" [ 1730.574297][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1732.317837][T19539] loop7: detected capacity change from 0 to 512 [ 1732.332708][T19539] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1732.357960][T19539] vfat filesystem being mounted at /260/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1732.405625][T19537] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1733.588834][T19553] loop6: detected capacity change from 0 to 1024 [ 1733.596438][T19553] EXT4-fs: Ignoring removed orlov option [ 1733.602119][T19553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1733.721796][T19553] EXT4-fs: Mount option(s) incompatible with ext2 [ 1733.741351][T19555] loop7: detected capacity change from 0 to 2048 [ 1733.965135][T19556] overlayfs: failed to clone lowerpath [ 1734.859905][T19558] xt_CT: No such helper "snmp" [ 1735.021797][T19555] NILFS (loop7): invalid segment: Inconsistency found [ 1735.054770][T19555] NILFS (loop7): trying rollback from an earlier position [ 1735.111165][T19555] NILFS (loop7): recovery complete [ 1735.148421][T19565] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1737.150033][T19576] xt_socket: unknown flags 0x50 [ 1737.201790][T19576] overlayfs: missing 'lowerdir' [ 1738.801543][T19594] loop6: detected capacity change from 0 to 1024 [ 1739.235234][T19594] EXT4-fs: Ignoring removed orlov option [ 1739.282274][T19594] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1739.293386][T19594] EXT4-fs: Mount option(s) incompatible with ext2 [ 1739.787195][T19600] loop6: detected capacity change from 0 to 256 [ 1740.323078][T19600] vfat filesystem being mounted at /281/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1740.445000][T19599] xt_CT: No such helper "snmp" [ 1740.534947][T19605] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1741.126525][T19607] bond0: (slave team0): Releasing backup interface [ 1741.212411][T19607] bond0: (slave wlan1): Releasing backup interface [ 1741.348351][T19607] bond6: (slave bridge7): Releasing backup interface [ 1741.577154][T19607] bridge7: left promiscuous mode [ 1741.737618][T19607] bridge7: left allmulticast mode [ 1741.994844][T19607] bond7: (slave bridge8): Releasing backup interface [ 1742.060651][T19607] bridge8: left promiscuous mode [ 1742.145056][T19607] bridge8: left allmulticast mode [ 1742.199458][T19607] bond8: (slave bridge9): Releasing backup interface [ 1742.259016][T19618] loop6: detected capacity change from 0 to 512 [ 1742.358937][T19618] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1742.532505][T19618] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3082: iget: bogus i_mode (5) [ 1742.661589][T19618] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3082: couldn't read orphan inode 15 (err -117) [ 1742.761410][T19607] bridge9: left promiscuous mode [ 1742.823202][T19607] bridge9: left allmulticast mode [ 1742.830561][T19618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1742.966360][T19618] ext2 filesystem being mounted at /283/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1743.103150][T19607] bond9: (slave bridge11): Releasing backup interface [ 1743.222050][T19607] bridge11: left promiscuous mode [ 1743.301870][T19607] bond10: (slave ip6gretap1): Removing an active aggregator [ 1745.369020][T19607] bond10: (slave ip6gretap1): Releasing backup interface [ 1745.434372][T19607] bond10: (slave ip6gretap1): the permanent HWaddr of slave - 16:06:5a:97:6c:5f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1745.473332][T19607] bond10: (slave veth3): Releasing backup interface [ 1745.572773][T19631] netlink: 'syz.7.3085': attribute type 1 has an invalid length. [ 1745.580817][T19631] netlink: 'syz.7.3085': attribute type 2 has an invalid length. [ 1746.479976][T19607] bond11: (slave bridge12): Releasing backup interface [ 1746.490727][T19607] bridge12: left promiscuous mode [ 1746.835223][T19607] bond12: (slave bridge13): Releasing backup interface [ 1746.842149][T19607] bridge13: left promiscuous mode [ 1747.389288][T19607] bond13: (slave bridge14): Releasing backup interface [ 1747.415176][T19607] bridge14: left promiscuous mode [ 1747.573959][T19607] bond14: (slave gretap1): Releasing backup interface [ 1747.833455][T19607] bond15: (slave bridge15): Releasing backup interface [ 1747.841842][T19607] bridge15: left promiscuous mode [ 1748.372067][T19607] bond16: (slave bridge17): Releasing backup interface [ 1748.379901][T19607] bridge17: left promiscuous mode [ 1748.401329][T19607] bond17: (slave bridge18): Releasing backup interface [ 1748.408515][T19607] bridge18: left promiscuous mode [ 1748.429027][T19607] bond18: (slave bridge19): Releasing backup interface [ 1748.436367][T19607] bridge19: left promiscuous mode [ 1748.464013][T19609] netlink: 'syz.3.3080': attribute type 10 has an invalid length. [ 1748.472465][T19609] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1748.480231][T19609] bond0: (slave wlan1): refused to change device type [ 1749.592251][T14229] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1753.352595][T19687] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 1753.541078][T19687] bond0: (slave team0): Releasing backup interface [ 1754.435690][T19687] bridge_slave_0: left allmulticast mode [ 1754.441394][T19687] bridge_slave_0: left promiscuous mode [ 1754.454028][T19687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1754.476108][T19687] bridge_slave_1: left allmulticast mode [ 1754.481780][T19687] bridge_slave_1: left promiscuous mode [ 1754.502910][T19687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1754.516091][T19687] bond0: (slave bond_slave_0): Releasing backup interface [ 1754.569184][T19687] bond0: (slave bond_slave_1): Releasing backup interface [ 1754.632183][T19687] team0: Port device team_slave_0 removed [ 1754.681335][T19687] team0: Port device team_slave_1 removed [ 1754.698696][T19687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1754.793834][T19687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1754.803167][T19687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1754.810781][T19687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1754.828069][T19687] bond0: (slave wlan1): Releasing backup interface [ 1754.840337][T19687] bond1: (slave bridge1): Releasing active interface [ 1755.462402][T19690] netlink: 'syz.6.3098': attribute type 10 has an invalid length. [ 1755.524457][T19690] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 1755.600564][T19690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1755.613424][T19690] bond0: (slave wlan1): Opening slave failed [ 1756.655224][T19722] loop6: detected capacity change from 0 to 128 [ 1756.749934][T19724] loop7: detected capacity change from 0 to 512 [ 1756.766018][T19724] EXT4-fs: Ignoring removed nobh option [ 1756.773713][T19722] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1756.794314][T19722] ext4 filesystem being mounted at /287/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1759.388588][T19731] "syz.6.3105" (19731) uses obsolete ecb(arc4) skcipher [ 1759.395395][T19724] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3106: iget: bad i_size value: 38620345925642 [ 1759.692288][T19724] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3106: couldn't read orphan inode 15 (err -117) [ 1759.867089][T19724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1759.869166][T14229] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1759.991424][T14247] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1761.825267][T19754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1762.388383][T19759] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 1762.408658][T19759] ------------[ cut here ]------------ [ 1762.415028][T19759] WARNING: CPU: 0 PID: 19759 at net/mac80211/chan.c:2022 ieee80211_link_release_channel+0x154/0x180 [ 1762.426039][T19759] Modules linked in: [ 1762.429967][T19759] CPU: 0 PID: 19759 Comm: syz.5.3114 Not tainted syzkaller #0 [ 1762.437853][T19759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1762.448042][T19759] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 1762.455037][T19759] Code: 7c 2d 00 00 74 08 48 89 df e8 68 39 e9 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 41 b1 83 00 e8 fc dd 91 f7 <0f> 0b eb c5 48 c7 c1 1c c2 4a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1762.475198][T19759] RSP: 0018:ffffc90003417978 EFLAGS: 00010283 [ 1762.481316][T19759] RAX: ffffffff89f3b194 RBX: ffff88805c271598 RCX: 0000000000080000 [ 1762.489612][T19759] RDX: ffffc90018c11000 RSI: 0000000000015629 RDI: 000000000001562a [ 1762.497715][T19759] RBP: 0000000000000000 R08: ffffffff8e4a8d6f R09: 1ffffffff1c951ad [ 1762.506021][T19759] R10: dffffc0000000000 R11: fffffbfff1c951ae R12: ffff88805c272c08 [ 1762.514067][T19759] R13: 1ffff1100b84e2b3 R14: ffff88805c2723c0 R15: dffffc0000000000 [ 1762.522125][T19759] FS: 00007f713cc706c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1762.531154][T19759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1762.538054][T19759] CR2: 0000001b2f51bff8 CR3: 0000000064ec7000 CR4: 00000000003506f0 [ 1762.546084][T19759] Call Trace: [ 1762.549397][T19759] [ 1762.552361][T19759] ieee80211_if_change_type+0x211/0xa70 [ 1762.558098][T19759] ? do_raw_spin_unlock+0x121/0x230 [ 1762.563345][T19759] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 1762.570576][T19759] ? cfg80211_mlme_purge_registrations+0x1d4/0x210 [ 1762.577173][T19759] ieee80211_change_iface+0x5c/0x4c0 [ 1762.582536][T19759] cfg80211_change_iface+0x812/0xf30 [ 1762.587997][T19759] cfg80211_wext_siwmode+0x1de/0x2a0 [ 1762.593389][T19759] ? cfg80211_wext_giwname+0x30/0x30 [ 1762.599028][T19759] ? apparmor_capable+0x137/0x1a0 [ 1762.604135][T19759] ? cfg80211_wext_giwname+0x30/0x30 [ 1762.609533][T19759] ioctl_standard_call+0xd8/0x2b0 [ 1762.614662][T19759] ? cfg80211_wext_giwname+0x30/0x30 [ 1762.619982][T19759] wext_ioctl_dispatch+0x1cb/0x5f0 [ 1762.625449][T19759] ? wext_ioctl_dispatch+0x5f0/0x5f0 [ 1762.630783][T19759] ? iw_handler_get_private+0x1f0/0x1f0 [ 1762.636463][T19759] ? wext_handle_ioctl+0x1c0/0x1c0 [ 1762.641768][T19759] ? __might_fault+0xaa/0x120 [ 1762.646560][T19759] ? __might_fault+0xc6/0x120 [ 1762.651277][T19759] ? __might_fault+0xaa/0x120 [ 1762.656323][T19759] wext_handle_ioctl+0x108/0x1c0 [ 1762.661306][T19759] ? call_commit_handler+0xf0/0xf0 [ 1762.666533][T19759] sock_ioctl+0x160/0x7a0 [ 1762.670963][T19759] ? sock_poll+0x3d0/0x3d0 [ 1762.675498][T19759] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1762.680481][T19759] ? security_file_ioctl+0x80/0xa0 [ 1762.685979][T19759] ? sock_poll+0x3d0/0x3d0 [ 1762.690434][T19759] __se_sys_ioctl+0xfd/0x170 [ 1762.695147][T19759] do_syscall_64+0x55/0xb0 [ 1762.699682][T19759] ? clear_bhb_loop+0x40/0x90 [ 1762.704488][T19759] ? clear_bhb_loop+0x40/0x90 [ 1762.709206][T19759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1762.715476][T19759] RIP: 0033:0x7f713bd8f6c9 [ 1762.719943][T19759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1762.739654][T19759] RSP: 002b:00007f713cc70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1762.748500][T19759] RAX: ffffffffffffffda RBX: 00007f713bfe5fa0 RCX: 00007f713bd8f6c9 [ 1762.756559][T19759] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000006 [ 1762.764613][T19759] RBP: 00007f713be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1762.772619][T19759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1762.781016][T19759] R13: 00007f713bfe6038 R14: 00007f713bfe5fa0 R15: 00007ffd28277418 [ 1762.789125][T19759] [ 1762.792185][T19759] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1762.799487][T19759] CPU: 0 PID: 19759 Comm: syz.5.3114 Not tainted syzkaller #0 [ 1762.806966][T19759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1762.817043][T19759] Call Trace: [ 1762.820347][T19759] [ 1762.823307][T19759] dump_stack_lvl+0x16c/0x230 [ 1762.828039][T19759] ? show_regs_print_info+0x20/0x20 [ 1762.833281][T19759] ? load_image+0x3b0/0x3b0 [ 1762.837864][T19759] panic+0x2c0/0x710 [ 1762.841882][T19759] ? bpf_jit_dump+0xd0/0xd0 [ 1762.846417][T19759] __warn+0x2e0/0x470 [ 1762.850434][T19759] ? ieee80211_link_release_channel+0x154/0x180 [ 1762.856712][T19759] ? ieee80211_link_release_channel+0x154/0x180 [ 1762.862978][T19759] report_bug+0x2be/0x4f0 [ 1762.867402][T19759] ? ieee80211_link_release_channel+0x154/0x180 [ 1762.873666][T19759] ? ieee80211_link_release_channel+0x154/0x180 [ 1762.879920][T19759] ? ieee80211_link_release_channel+0x156/0x180 [ 1762.886205][T19759] handle_bug+0xcf/0x120 [ 1762.890464][T19759] exc_invalid_op+0x1a/0x50 [ 1762.894992][T19759] asm_exc_invalid_op+0x1a/0x20 [ 1762.899850][T19759] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 1762.906713][T19759] Code: 7c 2d 00 00 74 08 48 89 df e8 68 39 e9 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 41 b1 83 00 e8 fc dd 91 f7 <0f> 0b eb c5 48 c7 c1 1c c2 4a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1762.926321][T19759] RSP: 0018:ffffc90003417978 EFLAGS: 00010283 [ 1762.932391][T19759] RAX: ffffffff89f3b194 RBX: ffff88805c271598 RCX: 0000000000080000 [ 1762.940362][T19759] RDX: ffffc90018c11000 RSI: 0000000000015629 RDI: 000000000001562a [ 1762.948345][T19759] RBP: 0000000000000000 R08: ffffffff8e4a8d6f R09: 1ffffffff1c951ad [ 1762.956322][T19759] R10: dffffc0000000000 R11: fffffbfff1c951ae R12: ffff88805c272c08 [ 1762.964300][T19759] R13: 1ffff1100b84e2b3 R14: ffff88805c2723c0 R15: dffffc0000000000 [ 1762.972282][T19759] ? ieee80211_link_release_channel+0x154/0x180 [ 1762.978553][T19759] ? ieee80211_link_release_channel+0x154/0x180 [ 1762.984823][T19759] ieee80211_if_change_type+0x211/0xa70 [ 1762.990397][T19759] ? do_raw_spin_unlock+0x121/0x230 [ 1762.995602][T19759] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 1763.002282][T19759] ? cfg80211_mlme_purge_registrations+0x1d4/0x210 [ 1763.008856][T19759] ieee80211_change_iface+0x5c/0x4c0 [ 1763.014174][T19759] cfg80211_change_iface+0x812/0xf30 [ 1763.019499][T19759] cfg80211_wext_siwmode+0x1de/0x2a0 [ 1763.024801][T19759] ? cfg80211_wext_giwname+0x30/0x30 [ 1763.030120][T19759] ? apparmor_capable+0x137/0x1a0 [ 1763.035147][T19759] ? cfg80211_wext_giwname+0x30/0x30 [ 1763.040431][T19759] ioctl_standard_call+0xd8/0x2b0 [ 1763.045459][T19759] ? cfg80211_wext_giwname+0x30/0x30 [ 1763.050759][T19759] wext_ioctl_dispatch+0x1cb/0x5f0 [ 1763.055967][T19759] ? wext_ioctl_dispatch+0x5f0/0x5f0 [ 1763.061268][T19759] ? iw_handler_get_private+0x1f0/0x1f0 [ 1763.066815][T19759] ? wext_handle_ioctl+0x1c0/0x1c0 [ 1763.071930][T19759] ? __might_fault+0xaa/0x120 [ 1763.076604][T19759] ? __might_fault+0xc6/0x120 [ 1763.081280][T19759] ? __might_fault+0xaa/0x120 [ 1763.085963][T19759] wext_handle_ioctl+0x108/0x1c0 [ 1763.090906][T19759] ? call_commit_handler+0xf0/0xf0 [ 1763.096039][T19759] sock_ioctl+0x160/0x7a0 [ 1763.100383][T19759] ? sock_poll+0x3d0/0x3d0 [ 1763.104812][T19759] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1763.109749][T19759] ? security_file_ioctl+0x80/0xa0 [ 1763.114865][T19759] ? sock_poll+0x3d0/0x3d0 [ 1763.119294][T19759] __se_sys_ioctl+0xfd/0x170 [ 1763.123905][T19759] do_syscall_64+0x55/0xb0 [ 1763.128347][T19759] ? clear_bhb_loop+0x40/0x90 [ 1763.133050][T19759] ? clear_bhb_loop+0x40/0x90 [ 1763.137734][T19759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1763.143639][T19759] RIP: 0033:0x7f713bd8f6c9 [ 1763.148067][T19759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1763.167688][T19759] RSP: 002b:00007f713cc70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.176113][T19759] RAX: ffffffffffffffda RBX: 00007f713bfe5fa0 RCX: 00007f713bd8f6c9 [ 1763.184086][T19759] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000006 [ 1763.192065][T19759] RBP: 00007f713be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1763.200038][T19759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1763.208009][T19759] R13: 00007f713bfe6038 R14: 00007f713bfe5fa0 R15: 00007ffd28277418 [ 1763.216001][T19759] [ 1763.219367][T19759] Kernel Offset: disabled [ 1763.223839][T19759] Rebooting in 86400 seconds..