last executing test programs: 28m32.269569585s ago: executing program 32 (id=127): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 19m16.392133396s ago: executing program 33 (id=1219): open(0x0, 0x60840, 0x1d2) syz_open_procfs(0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 17m0.888753231s ago: executing program 34 (id=1483): userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000e9, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) brk(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x18) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x2010880, &(0x7f0000000140)=ANY=[@ANYBLOB="646973636172643d3078303030303030303030303030303030312c6572726f72733d636f6e74696e75652c696f636861727365743d63703837342c696e746567726974792c696f636861727365743d63703836322c6e6f646973636172642c696f636861727365743d637038363600646973636172643d3078303030303030303030303030383030302c7559e75a52f06d61736b3d3078376666666666666666666666666666662c756d61736b3d3078303030303030303030303030303030352c6572726f72733d72656d6f756e742d726f2c696f636861727365743d69736f383835392d31332c6e6f696e746567726974792c64697363"], 0x1, 0x618a, &(0x7f0000007600)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288Szk92uU8c7a8/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vB2udiLj287RgJeIz0YvoRiyV9WpELK2u5PX7EfFc7DXHsxExWIgob7/3z9MRr0bER09F7OxurpeLLx6yH9/9499/98Mn3vrbHwbn//unO73XJq139+6v/vPne0fbZgAAAGiboiiKTvqYfyZ9vu823SkAYCby63+R5OWnvv71P9/6yzz1R61Wq9XqGdRVxXj3qkVEbFVvU75ncDgeAE6Yrfi46S7QIPm3Wj8inmi6E8Bc6zTdAY7Fzu7meifl26m+Hqzut+dzQUby3+o8uL5j0nSa+jkms3p8bUcvnpnQn6UZ9WGe5Py79fyv7bcP03rHnf+sTMp/uH/pU+vk/Hv1/GtOT/7dsfm3Vc6//0j59+QPAAAAAABzLP///0rDx38Xjr4ph/JJx39XZ9QHAAAAAAAAAHjcjjr+3wPG/wMAAIC5VX5WL/3mqYNlk76LrVx+tRPxZG19oGXSxTLLTfcDAAAAAAAAAAAAANqkv38O79VOxCAinlxeLoqi/Kmq14/qqLc/6dq+/dBmTT/JAwDAvo+eql3L34lYjIir6bv+BsvLy0WxuLRcLBdLC/n97HBhsViqfK7N03LZwvAQb4j7w6L8ZYuV21VN+7w8rb3++8r7Gha9Q3TsMRmkv+aE5obCBoBk/9VoxyvSKVMUT0968wEj7P+n0EqsNP24Yv41/TAFAAAAjl9RFEUnfZ33mXTMv9t0pwCAmciv//XjAkequxPaIx7P71er1Wq1Wv2p6qpivHvVIiK2qrcp3zMYjh8ATpit+LjpLtAg+bdaPyKea7oTwFzrNN0BjsXO7uZ6J+Xbqb4epPHd87kgI/lvdfZul28/bjpN/RyTWT2+tqMXz0zoz7Mz6sM8yfl36/lf228fpvWOO/9ZmZT/cO+SufbJ+ffq+decnvy7Y/Nvq5x//5Hy78kfAAAAAADmWP7//xXHf/MmAwAAAAAAAMCJs7O7uZ6ve83H/z83Zj3Xf55OOf/Oo+a/lOblf6Ll/Lu1/L9cW69Xmb//5sH+/+/dzfXf3/nXZ/P0sPkv5JlOemR10iOik+6p00/To2zdw7YHvWF5T4NOt9dP5/wUg3fiRtyMjbgwsm43/T0O2tdG2sueDkbaL4609x9qvzTSPkjfO1As5fZzsR4/iZvx9l572bYwZfsXp7QXU9pz/j3P/62U8+9Xfsr8l1N7pzYt3f+w+9B+X52Ou583bnz+lxeOf3Om2o7eg22rKrfvbAP92fubPDGMn93euHXu7vU7d26tRZqMLL0YafKY5fwHez8LB8//L+y35+f96v56/8PhI+c/L7ajPzH/Fyrz5fa+NOO+NSHnP0w/Of+3U/v4/f8k5z95/3+5gf4AAAAAAAAAAAAAAADAJymKYu8S0Tci4nK6/qepazMBgNnKr/9Fkper1Wq1Wq0+fXVVMd7r1SIi/lq9Tfme4RfjfhkAMM/+FxH/aLoTNEb+LZa/76+cvth0Z4CZuv3+Bz+6fvPmxq3bTfcEAAAAAAAAAPi08vifq5Xxn1+MiJXaeiPjv74Zq0cd/7OfZx4MMPqYB/qeYLs77HUrw40/H3vjc5+bNP732Xh4/O88Jm6vuh0TDKa0D6e0L0xpXxy79CCtsRd6VOT8n6+Md17mf6Y2/Hobxn+tj3nfBjn/s5XHc5n/l2rrVfMvfjt3+W8ddsXt6I7kf/7Oez89f/v9D1658d71dzfe3fjxpbW1C5cuX75y5cr5d27c3Liw/+/x9HoO5Pzz2NfOA22XnH/OXP7tkvP/Qqrl3y45/y+mWv7tkvPP7/fk3y45//zZR/7tkvN/KdXyb5ec/1dSLf922dndXCjzfznV8m+XvP9/NdXyb5ec/yupln+75PzPpVr+7ZLzP5/qQ+Tv6+FPkZx/PsJl/2+XnP9aquXfLjn/i6mWf7vk/C+lWv7tkvN/NdXyb5ec/9dSLf92yflfTrX82yXn//VUHzL/aac9c0Lk/K+k2v7fLjn/b6Ra/u2S8/9mquXfLjn/11It/3bJ+X8r1fJvl5z/t1Mt/3bJ+X8n1fJvl5z/66mWf7scfP+/GTNmzOSZpp+ZAAAAAAAAAAAAAIC6WZxO3PQ2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2Lu3GLnu+g7gZ/Zirx1CDITgpIasHWOMs2TXl/hC62JCuDRAKZAE6AXb9a7Ngm947RIokk0DJRJGRRUV6UNbQKiNVFVYFQ+0ojQPVS9PpX2gLxVVJaRGlUEBFamtaLaaOf//3zOzszO73rE9e/6fj2T/dmfOzDlz5szsftf+7gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2eY3zXy2VhRF/U/jrw1F8aL6x+vGNzQue/2t3kIAAABgpf6v8ffzd6QLDi3hRk3L/N2r/vEb8/Pz88X7h39v9Ivz8+mK8aIYXVsUjeuiK//+gVrzMsGTxVhtqOnzoR6rH+5x/UiP60d7XL+mx/Vre1w/1uP6BTtggXXlz2Mad7a18eGGcpcWdxajjeu2drjVk7W1Q0PxZzkNtcZt5kePF7PFyWKmmGpZvly21lj+W5vr63pbEdc11LSuTfUj5EefPBa3oRb28daWdV27z+gHbyzGf/yjTx774/NX7+40e+6Glvsrt3P7lvp2fjpcUm5rrVib9knczqGm7dzU4TkZbtnOWuN29Y/bt/P5JW7n8LXNvKnan/OxYqjx8Xca+2mk+cd6aT9tCpf9931FUVy6ttntyyxYVzFUrG+5ZOja8zNWHpH1+6gfSi8tRpZ1nG5ewnFan9NbW4/T9tdEfP43h9uNLLINzU/TDz61ZsHzvtzjNKo/6sVeK+3HYL9fK4NyDMbj4juNB/1Ux2Nwa3j8n9y2+DHY8djpcAymx910DG7pdQwOrRlubHN6EmqN21w7Bne2LD/cWFOtMZ/b1v0YnDx/6uzk3Mc/8brZU0dPzJyYOb17586p3Xv37t+/f/L47MmZqfLv69zbg299MZReA1vCvouvgde0Ldt8qM5/pX+vw7Eur8MNbcv2+3U40v7gajfnBbnwmC5fG4/Wd/rY5aFikddY4/nZsfLXYXrcTa/DkabXYcevKR1ehyNLeB3Wlzm7Y2nfs4w0/em0DTfqa8GGpmOw/fuR9mOw39+PDMoxOBaOi3/dsfjXgk1he5+aWO73I8MLjsH0cMN7T/2S9P3+2P7G6HRc3lO/4rY1xYW5mXMPPHH0/PlzO4swboqXNR0r7cfr+qbHVCw4XoeWfbwemn3VU/d0uHxD2Fdjr6v/Nbboc1VfZs8D3Z+rxle3zvuz5dJdRRh9drP3Z6ev5vX9mbJkl/1ZX+bTkyv/Xjzl0qb339FF3n9j7n+hXF+6qyeHR0fK1+9w2jujLe/HrU/VSOO9q9ZY9/OTS3s/Hg1/bvb78Z1d3o83ti3b7/fj0fYHF9+Pa71+2rEy7c/nWDhOTk51fz+uL7Nx13KPyZGu78f3hVkL+/+1ISmkXNR07Cx23KZ1jYyMhsc1EtfQepzubll+NGSz+rqe2XV9x+n2+8r7Gk6P7pqbdZyOty3b7+M0vV8tdpzWev307fq0P59j4bi4c3f347S+zLN7Vv7euS5+2PTeuabXMTg6vKa+zaPpICzf7+fXxWPwgeJYcaY4WUw3rl3TOJ5qjXVNPLi0Y3BN+HOz3ys3djkGt7ct2+9jMH0dW+zYq40sfPB90P58joXj4ukHux+D9WUe3tff7123h0vSMk3fu7b/fG2xn3nd07abbuTPvOrb+Tf7uv9str7Myf3LzZnd99P94ZLbOuyn9tfvYq+p6eLm7KeNYTuv7l98P9W3p77MFw8s8Xg6VBTFxY8+1Ph5b/j3lT+/8N1vtPy7S6d/07n40Yd+ePvxv13O9gOw+r1QjvXl17qmf5layr//AwAAAKtCzP1DYSbyPwAAAFRGzP3xf4Un8j8AAABURsz9I2EmmeT/jQ9fnX3hYpGa+fNBvD7thkfK5WLHdSp8Pj5/Tf3yh74285O/vLi0dQ8VRfHTR36z4/IbH4nbVRoP23nlza2XL7zhxSWt/8hj15Zr7q9/Odx/fDxLPQw6VXCniqL41h2fb6xn/AOXG/PZR4405nsuPfVkfZnnD5Sfx9s/97Jy+T8I5d9Dx4+23P65sB++H+bU2zvvj3i7r19+7aZ9j19bX7xdbcuLGw/76Q+W9xt/T84XniyXj/t5se3/q8898/X68k+8uvP2XxzqvP3PhPv9Wpj/88py+ebnoP55vN1nwvbH9cXbPfDVb3fc/iufLZc/+5ZyuSNhxvVvD59vfcvV2eb99UTtaMvjKt5aLhfXP/Xd32lcH+8v3n/79o8dvtyyP9qPj2f/ubyfybbl4+VxPdFftK2/fj/Nx2dc/zO/faRlP/da/5X3PPfK+v22r//+tuWG227f/hub/vAzn++4vrg9h/7sbMvjOfTu8DoO63/6g+F4DNf/75XPt6w3OvLu1vefuPyXN1xseTzR235crv/KG0405n+M/+T3b3vR7S++dG993xXFd95b3l+v9Z/4ozMt2/+Vu3Y0no94fezot69/MXH95z42cfrM3IXZ6aa92vjdOe8ot2ft2Lr19e29I7y3tn9++Mz5D82cG58anyqK8er+Cr3r9tUwf1iOS8u9/Y7HwvN5z5e+tX7bP30uXv4vj5aXX357+XXrNWG5L4TLN5TP33xthet/evNdjdd37dny85Yeex9s2vqf+5e0YHj87d8XxOP97Ms/1NgP9esaXzfi63qF2/+96fJ+vhn263z4zcxb7rq2vubl4+9GuPze8vW+4v0X3ubi8/on4fl+5/fL+4/bFR/v98L3Md/e2Pp+F4+Pb14car//xm/xuBTeT4pL5fVxqbi/Lz9/V8fNi7+HpLh0d+Pz3033c/eyHuZi5j4+N3ly9vSFJybPz8ydn5z7+CcOnzpz4fT5w43f5Xn4w71uf+39aX3j/Wl6Zu+eYmpdURRniqmb8IZ1Y7a//tHStv/sY8em901tm545fvTC8fOPnZ05d+LY3Nyxmem5bUePH5/5WK/bz04f3LnrwO59uyZOzE4f3H/gwO4DE7Onz9Q3o9yoHvZOfWTi9LnDjZvMHdxzYOeDD+6Zmjh1Znrm4L6pqYkLvW7f+No0Ub/1b0ycmzl59PzsqZmJudlPzBzceWDv3l09fxvgqbPH58Ynz104PXlhbubcZPlYxs83Lq5/7et1e6pp7t/K72fb1cpfxFe86/696fez1n3tU4veVblI2y8QvRp+F80/vOTs/qV8HnP/aJhJJvkfAAAAchBz/5owE/kfAAAAKiPm/rVhJvI/AAAAVEbM/WNhJpnkf/1//f+l9f/L6/X/8+r/n/1o2Std7f3/2J/X/8/DLe7/r3j9fej/39vtSv3/HvT/b2l/fkWGbv326//r/7PQoPX/Y+5fVxRZ5n8AAADIQcz968NM5H8AAACojJj7bwszkf8BAACgMmLuf1GYSSb5X/9/Sf3/Xb0KV9Xv/zv/v/5/sTr7//HJ0f/PxrL7948/2vJpBfr/Xen/96D/v3r7/wOw/fr/+v+0G130mlvV/4+5//Ywk0zyPwAAAOQg5v4Xh5nI/wAAAFAZMfffEWYi/wMAAEBlxNy/Icwkk/yv/+/8//r/+v+V7v+v9Pz/TRuj/786OP9/d/r/PVx3/39M/3819v9H+7v9g93/77n5+v/cEIN2/v+Y+18SZpJJ/gcAAIAcxNz/0jAT+R8AAAAqI+b+l4WZyP8AAABQGTH33xlmkkn+1//X/9f/1//X/++8/t7n/y8/0v8fLPr/3en/9+D8/3n1//u8/YPd/+/3+f9H39x+e/1/Ohm0/n/M/S8PM8kk/wMAAEAOYu6/K8xE/gcAAIDKiLn/FWEm8j8AAABURsz9G8NMMsn/+v/6//r/+v/6/53X37v/X9L/Hyz6/93p//eg/6//r/+/tP5/h29+9f/pZND6/zH33x1mkkn+BwAAgBzE3H9PmIn8DwAAAJURc//PhJnI/wAAAFAZMfdvCjPJJP9vfPjq419qfKT/X+j/6/9n0P+/f43+v/5/ten/d6f/34P+v/6//v8Sz/+/0HL6/2t73RmVMWj9/5j7Xxlmkkn+BwAAgBzE3P+qMBP5HwAAACoj5v57w0zkfwAAAKiMmPvHw0xWX/5/39B13Mj5/6vV///Tv3763kL/X/+/x/or2v+Ph4H+f+b0/7vT/+9B/1//X///pvT/yceg9f9j7t8cZrL68j8AAACwiJj7t4SZyP8AAABQGTH33xdmIv8DAABAZcTcvzXMJJP8r/9frf5/pP+v/99t/RXt/yf6/3nT/++g6UW6Svr/4/r/+v+rcfur0f+P3/3q/9Mfg9b/j7n/1WEmmeR/AAAAyEHM/dvCTOR/AAAAqIyY+18TZiL/AwAAQGXE3L89zCST/K//r/+v/6//r//fef36/6uT/n93y+3/r3H+f/1//f/M+v/O/09/DVr/P+b+14aZZJL/AQAAIAcx9+8IM5H/AQAAoDLi/98s/9+r/A8AAABVFHP/RJhJJvl/Bf3/+WH9/0T/v3X7B7X/X9P/1//X/688/f/uVsn5//X/B6j/X79c/1//X/+f6zVo/f+Y+18XZpJJ/gcAAIAcxNz/QJiJ/A8AAACVEXP/ZJiJ/A8AAACVEXP/VJhJJvnf+f+z6/+vzbn/7/z/+v/6/9Wn/9+d/n8P+v/O/1+1/n9R6P9zSw1a/z/m/p1hJpnkfwAAAMhBzP27wkzkfwAAAKiMmPt3h5nI/wAAAFAZMffvCTPJJP/r/2fX/8/6/P/6//r/+v/Vp//fnf5/D/r/+v9V6/87/z+32KD1/2PufzDMJJP8DwAAADmIuX9vmIn8DwAAAJURc/++MJOQ/zv9v24AAABgdYm5f3+YSSb//q//X5H+/2/9fcu69f/1/7utvz/9/3X6/2Hq/w+Wivb/218W103/vwf9f/1//X/9f/pq0Pr/MfcfCDPJJP8DAABADmLuf32YifwPAAAAlRFz/8+Gmcj/AAAAUBkx9/9cmEkm+V//vyL9/zb6//r/3dbv/P/6/1VW0f5/31Sq/z+k/6//P1jbr/+v/89CN77/Hz9aWv8/5v6DYSaZ5H8AAADIQcz9Px9mIv8DAABAZcTc/4YwE/kfAAAAKiPm/kNhJpnkf/1//X/9f/3/G9P/f0PRbhD7//WDR/+/WvT/u6tU/9/5//X/B2z79f/1/1lo0M7/H3P/G8NMMsn/AAAAkIOY+x8KM5H/AQAAoDJi7n9TmIn8DwAAAJURc//DYSaZ5H/9f/1//X/9f+f/77x+/f/VSf+/O/3/HvT/9f/1//X/6atB6//H3P/mMJNM8j8AAADkIOb+t4SZyP8AAABQGTH3vzXMRP4HAACAyoi5/21hJpnkf/1//X/9f/1//f/O69f/X530/7vT/+9B/1//X/9f/5++GrT+f8z9vxBmkkn+BwAAgBzE3P9ImIn8DwAAAJURc//bw0zkfwAAAKiMmPvfEWaSSf7X/9f/1//X/9f/77x+/f/VSf+/O/3/HvT/9f/1//X/6atB6//H3P/OMJNM8j8AAADkIOb+Xwwzkf8BAACgMmLuf1eYifwPAAAAlRFz/y+FmWSS//X/9f8Hq/8/f7H5dvr/+v9Fv/r/9Rvp/2dB/787/f8eOvT/1+r/6//r/+v/c90Grf8fc/+7w0wyyf8AAACQg5j73xNmIv8DAABAZcTc/94wE/kfAAAAKiPm/kfDTDLJ//r/Wfb/00MevP6/8//r/zv/v/7/yuj/d6f/34Pz/+v/6//r/9NXg9b/j7n/sTCTTPI/AAAA5CDm/sfDTOR/AAAAqIyY+98XZiL/AwAAQGXE3P/+MJNM8r/+f5b9/wE+/3/V+v8jLcdHTv3/sabnMx2X+v/6/zeB/n93+v896P+H/nwxpP8/gP3/cDSvW+T2+v8MokHr/8fc/4Ewk0zyPwAAAOQg5v5fDjOR/wEAAKAyYu7/lTAT+R8AAAAqI+b+Xw0zyST/6//r/+v/O/+/8/93Xr/+/+qk/9+d/n8P+v/O/z/I/f8e9P8ZRIPW/4+5/9fCTBYNfj/8ryU8TAAAAGCAxNz/wTCTTP79HwAAAHIQc//hMBP5HwAAACoj5v4jYSaZ5H/9//b+fzyjqv6//v+q6/+P6P+X9P/z1r/+/ytuLwr9f/1//X/9f/1//X9WYtD6/zH3Hw0zyST/AwAAQA5i7v/1MBP5HwAAACoj5v5jYSbyPwAAAFRGzP3TYSaZ5H/9f+f/71f//6f6/7e6/+/8/4H+f96c/787/f8e9P/1//X/9f/pq0Hr/8fcPxNmkkn+BwAAgApLPw6Ouf94mIn8DwAAAJURc/+JMBP5HwAAACoj5v4PhZlkkv/1//X/nf//VvT/R1qW1/8v6f/r//eD/n93+v896P/r/+v/6//TV4PW/4+5fzbMJJP8DwAAADmIuf/DYSbyPwAAAFRGzP0fCTOR/wEAAKAyYu4/GWaSSf7X/9f/z73/XyuKS87/r//faf36/6uT/n93+v896P/r/+v/6//TV4PW/4+5/1SYSSb5HwAAAHIQc//p/2fvPp7suqo9jl+MLamZwJ/AmBFDGJkJc6bMqGJMkUwOtskZTMZkk3POyeScMyaYnKOJhipRbq21rO57+xxJfXTvOXt/PpP1pOd2d9v9HvVD9a0dt9j/AAAA0Izc/feNW+x/AAAAaEbu/vvFLZ3sf/2//r/3/n+1k/f/D/71+v8z9P/6/yms9feXnt/HH9n/3/kuV9xL/6//1/8P0v/r//X/HDa3/j93//3jlk72PwAAAPQgd/8D4hb7HwAAAJqRu/+BcYv9DwAAAM3I3X9F3NLJ/tf/6//1//r/A/3/9fp//f+yef9/mP5/hP5f/6//1/8zqbn1/7n7HxS3dLL/AQAAoAe5+x8ct9j/AAAA0Izc/Q+JW+x/AAAAaEbu/ofGLZ3sf/2//l//v5T+/4T3/w99P/p//f8m+v9h+v8R+n/9v/5f/8+k5tb/5+5/WNzSyf4HAACAHuTuf3jcYv8DAABAM3L3PyJusf8BAACgGbn7Hxm3dLL/9f/6f/3/Uvr/Lb3/r//X/y/cdatb/3+C/n+d/n/ESP+/Wun/h5xzP7/521vO138E/b/+n3Vz6/9z9z8qbrnbanXiQr9JAAAAYFZy9z86bunkz/8BAACgB7n7r4xb7H8AAABoRu7+q+KWTva//l//r//X/+v/N39+/f8ynVt/f/LIj9f/hyP7/zvd4T737rf/9/7/MO//6//1/xw2t/4/d//VcUsn+x8AAAB6kLv/MXGL/Q8AAADNyN3/2LjF/gcAAIBm5O5/XNzSyf7X/7fW/9/2wMed1f/v1y76f/2//l//37rj9vf6/9D1+/979Uv9v/5f/6//53jm1v/n7n983NLJ/gcAAIAe5O5/Qtxi/wMAAEAzcvc/MW6x/wEAAKAZufufFLd0sv/1/631/wc/zvv/+v9Nn1//r/9vmf5/mP5/RCvv/1/gT82u+/nj2vXXr//X/7Nubv1/7v4nxy2d7H8AAADoQe7+p8Qt9j8AAAA0I3f/U+MW+x8AAACakbv/aXFLJ/tf/6//X0b/n59B/6//v/j9f9L/L5P+f5j+f0Qr/f8F2nU/v/SvX/+v/2fd3Pr/3P1Pj1s62f8AAADQg9z9z4hb7H8AAABoRu7+Z8Yt9j8AAAA0I3f/s+KWTva//l//v4z+3/v/+n/v/+v/z43+f5j+f4T+X/+v/9f/M6m59f+5+6+JWzrZ/wAAANCD3P3PjlvsfwAAAGhG7v7nxC32PwAAADQjd/9z45ZO9r/+X/+v/9f/6/83f379/zLp/4fp/0fo//X/+n/9P5OaUf9/1kedWj0vbulk/wMAAEAPcvc/P26x/wEAAKAZuftfELfY/wAAANCM3P0vjFs62f/6/9n0//s5X1v9/95qtbrg/v/u+v9l9/97Z/37rJ9L/b/+fwv0/8P0/yP0//p//b/+n0nNqP/f/3Xu/hfFLZ3sfwAAAOhB7v5r4xb7HwAAAJqRu//FcYv9DwAAAM3I3f+SuKWT/a//n03/v6+t/t/7/4d/Pnrq/73/v07/vx36/2H6/xH6f/2//l//z6Tm1v/n7n9p3HTisgv+FgEAAICZyd3/srilkz//BwAAgB7k7n953GL/AwAAwEJds/Y7uftfEbd0sv/1/9P2/yfO+j39v/7/8M+H/l//r/+/+PT/w/T/I/T/+n/9v/6fSc2t/8/d/8q4pZP9DwAAAD3I3X9d3GL/AwAAQDNy978qbrH/AQAAoBm5+18dt3Sy//X/3v/X/+v/9f+bP7/+f5n0/8P0/yP0//r/3fb/J2/9H/X/tOE8+v/Tp09fedH7/9z9r4lbOtn/AAAA0IPc/a+NW+x/AAAAaEbu/tfFLfY/AAAANCN3/+vjlk72v/7/YvT/Z2rFWff/+aO+rP7/qtVK/6//1//r/4fp/4fp/0fo//X/3v/X/zOpub3/n7v/DXFLJ/sfAAAAepC7/41xi/0PAAAAzcjd/6a4xf4HAACAZuTuf3Pc0sn+1/97/39B/b/3//X/B76fhfX/N6/0/1uxiP5/7+jPP/f+/2r9v/5/QHf9/z3ueuCX+n/9P+vm1v/n7n9L3NLJ/gcAAIAe5O5/a9xi/wMAAEAzcve/LW6x/wEAAKAZufvfHjdd2sn+1//r//X/+n/9/+bPv+X3/0+sViv9/wQW0f8PmHv/7/1//f+Q7vr/Q/T/+n/Wza3/z93/jrilk/0PAAAAPcjd/864xf4HAACAZuTuf1fcYv8DAABAM3L3vztu6WT/6//1//p//X/z/f/Vi+j/vf8/Ef3/MP3/CP2//l//r/9nK3bV/+fuf0/c0sn+BwAAgB7k7n9v3GL/AwAAQDNy978vbrH/AQAAoBm5+98ft3Sy//X/+v/z6f/z69T/t9X/n5xd/3/qwN+vk/f/9f8T0f8P0/+P0P/r//X/1+j/mdLc3v/P3f+BuKWT/Q8AAAA9yN3/wbj1X93a/wAAANCM3P0filvsfwAAAGhG7v4Pxy2d7H/9v/7f+//6/+bf/9f/d0X/P0z/P0L/r//X/3v/n0nNrf/P3f+RuKWT/Q8AAAA9yN3/0bjF/gcAAIBm5O7/WNxi/wMAAEAzcvdfH7d0sv/1//p//b/+X/9/5t+h/r8N+v9h2+n/9/T/+v/q528T/1eg/9f/j308bZpb/5+7/+NxSyf7HwAAAHqQu/8TcYv9DwAAAM3I3f/JuMX+BwAAgEW6dMPv5e7/VNzSyf7X/+v/9f/6f/3/5s+v/18m/f8w7/8f5XbXnv0r/f+59vN3PPCrpb3/f/g/v/T/+n+mN7f+P3f/p+OWTvY/AAAA9CB3/2fiFvsfAAAAmpG7/7Nxi/0PAAAAzcjd/7m4pZP9r//X/zfT/9/yRej/9f/6/+7p/4fp/0d4/3+n7+cv/evX/+v/WTe3/j93/+fjlk72PwAAAPQgd/8X4hb7HwAAAJqRu/+LcYv9DwAAAM3Y3/0Zl3W4//X/O+v/9//++n/v/+v/9f/6/2np/4fp/0fo//X/+n/9P5OaW///pf2POrX6ctzSyf4HAACAHuTu/0rcYv8DAABAM3L3fzVusf8BAACgGbn7vxa3dLL/9f/e/19G/3/69Okr9f/6/4Pfz639/436f4r+f5j+f4T+X/+v/9f/M6m59f+5+78et3Sy/wEAAKAHufu/EbfY/wAAANCM3P3fjFvsfwAAAGhG7v5vxS2d7H/9/wz6/1P6f+//6/9X3v/X/09E/7/ZXlz9/4gW+/9T5/7t77qfP65df/36f/0/6+bW/+fu/3bc0sn+BwAAgB7k7v9O3LK2/2/Y4lcFAAAATCl3/3fjFn/+DwAAAM3I3f+9uKWT/a//317/f8s/u17e/99bbf769f/6f/2//v9i0/8P0/+PaLH/Pw+77ueX/vXr//X/rJtb/5+7//txy8Hhd9n5fZcAAADAnOTu/0Hc0smf/wMAAEAPcvffELfY/wAAANCM3P0/jFs62f/6/xm8/99g/7+d9/9P6f/1/1P2/5fo/9ug/x+m/x+h/9f/6/8n6v/zp1n/37u59f+5+38Ut3Sy/wEAAKAHuft/HLfY/wAAANCM3P0/iVvsfwAAAGhG7v4b45az9v+mtrsV+n/9/3L7f+//6/+9/6//X6f/3xv8355r/39ydbz+P+n/9f/6/177f+//c8bc+v/c/T+NW/z5PwAAACzOZUf8fu7+n8Ut9j8AAAA0I3f/z+MW+x8AAACakbv/F3HLTZfs6kvaKv2//l//r//X/2/+/Pr/ZdL/D/P+/wj9/xT9/OX6/zb6/9VK/8/xza3/z93/y7jFn/8DAABAM3L3/ypusf8BAACgGbn7fx232P8AAADQjNz9v4lbOtn/+n/9/zH7//00U/9/hv7/DP3/Zvr/7dD/D9P/j9D/e/9f/+/9fyY1t/4/d/9v45ZO9j8AAAD0IHf/7+IW+x8AAACakbv/93GL/Q8AAADNyN3/h7ilk/2/s/4//lHr/3fb/1/i/f99+n/9/6bPr/9fJv3/MP3/CP2//l//r/9nUnPr/3P3/zFu6WT/AwAAQA9y9/8pbrH/AQAAoBm5+/8ct9j/AAAA0Izc/X+JWzrZ/97/77v/n+D9f/2//l//r/+fFf3/MP3/ZvUvSv+v/9f/6/+Z1Nz6/9z9f41bOtn/AAAA0IPc/X+LW+x/AAAAaEbu/pviFvsfAAAAmpG7/+9xSyf7X/+v/9f/6//1/5s/v/5/mfT/w3bZ/9/z9uOf1vv/O+//80vQ/+v/9f9MYm79f+7+f8Qtnex/AAAA6EHu/n/GLfY/AAAANCN3/7/iFvsfAAAAmpG7/99xSyf7f6T/P1l/of5/kP7/4Nev/9/886H/1//r/y8+/f8w7/+P0P97/1//r/9nUnPr/3P3/ydu6WT/AwAAQA9y998ct9j/AAAA0Izc/f+NW+x/AAAAaEbu/v/FLZ3sf+//L6n/v1z/r//X/+v/9f8j9P/D9P8j9P/6f/2//p9Jza3/z93//wAAAP//HKdWTw==") r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x3, 0x0) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000480)=r0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="38000000100003040000000008000000000000004f929b1ecc4c66e4b89d1e2a88e8db51986ebe056cd152f1e65c57c4ff7ff0791c15e48437ec8d4ea68f11968f29c6fa897ff24a0ff57e86f17c6d997462b213816d732974429084f9084e7e3385f5ef65ec5998c9fc4180d1adeeeee6d4e25d31e0183ada27090000000000000077adb9272e2fd2dac0b57e2be734cc61a55fbb27015a0ad93260c81ceabb42a125690c85", @ANYRES8=r1], 0x38}}, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 16m52.505413031s ago: executing program 35 (id=1498): r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000400)='io#harsetY\\\b\x17T=-\x01\xcb\xdenAb\x87\xac\xe8$\xdb4\xde\x01\xaeR\x19\xb3\xcc\x89G\xf9\xe2\xc5\xeae\xd2\xc9\xdb\xb4EDOC\xe6y\xc8 \xa0\x87\x82xO\xacMjL\xe6\\\x83\xef^\x032\'\'^\xeb\xbf\xbdy\xe1\x8e\x01\xcc\x0e\xfc\xa3\"\xf1d\xce\x05\xe1%\x95\x1d\x88\xeb\xde\xd7\x82Nz\x06k\xcen\v\xce\x193\x05\xbe\xf6\x00\x16R\x83j^\xf4\xaf\xbeq{\x92q\xc9\x96$\xb7\xc7\x8f\xce\x05J\x927\x01\xdf\xc6\'\x9c\xcb\xad\xfa\xd3\x9a\xb6\x02\x97%\x03|\x94^N\x19Q^}\x97\xa9\xdb\x83\xd2\x95\xe8\x03\xecR\xdc\x00\x00', 0x0) io_getevents(0x0, 0x2, 0x2, &(0x7f0000000140)=[{}, {}], 0x0) pselect6(0x0, 0x0, &(0x7f0000000440)={0x6, 0xce, 0xbe6, 0x9, 0xaf1, 0x1, 0xffffffffffffffc0, 0x91}, &(0x7f0000000480)={0xe, 0x10001, 0x8, 0x411be5a5, 0x2, 0x0, 0x9a, 0x8}, 0x0, 0x0) ioperm(0x0, 0x44, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0xfffffffffffffdd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 16m52.417510602s ago: executing program 5 (id=1517): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x50, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r5, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0xc}, {0x0, 0x24}], 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 16m50.337336225s ago: executing program 5 (id=1521): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10000000001) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450d001c006600000011907800000040e0cf00a00001004e204e20000890784657a17a7cce8ae80000000000000099c73d06000000b1a41627"], 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xa45) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"1322030de361dd494234901b30ca190b6505c85c0e8c361eb4b7a5331d24bb0d", r7}) prctl$PR_SET_TIMERSLACK(0x1d, 0x3ff00000000) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 16m48.888177027s ago: executing program 5 (id=1522): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10000000001) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450d001c006600000011907800000040e0cf00a00001004e204e20000890784657a17a7cce8ae80000000000000099c73d06000000b1a41627"], 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r7, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xa45) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000180)={"1322030de361dd494234901b30ca190b6505c85c0e8c361eb4b7a5331d24bb0d", r8}) prctl$PR_SET_TIMERSLACK(0x1d, 0x3ff00000000) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 16m47.889911312s ago: executing program 5 (id=1523): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000900)={[{@cruft}, {@check_relaxed, 0x0}, {}, {}, {@map_acorn}, {@mode={'mode', 0x3d, 0x3}, 0x41}, {@session={'session', 0x3d, 0x2b}}, {}, {@unhide}, {@unhide}, {}, {@check_strict}, {@check_relaxed}]}, 0x2, 0x699, &(0x7f0000000140)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16m47.43313205s ago: executing program 5 (id=1528): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRESHEX, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00a,\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES16, @ANYBLOB="0900000004000000080000000800000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="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"], 0x0, 0x2af, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x80) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000600)={0x7, 0x401, 0x1, 'queue1\x00', 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xff}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000080)) timer_create(0x0, 0x0, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r6}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 16m46.666629711s ago: executing program 5 (id=1530): r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000400)='io#harsetY\\\b\x17T=-\x01\xcb\xdenAb\x87\xac\xe8$\xdb4\xde\x01\xaeR\x19\xb3\xcc\x89G\xf9\xe2\xc5\xeae\xd2\xc9\xdb\xb4EDOC\xe6y\xc8 \xa0\x87\x82xO\xacMjL\xe6\\\x83\xef^\x032\'\'^\xeb\xbf\xbdy\xe1\x8e\x01\xcc\x0e\xfc\xa3\"\xf1d\xce\x05\xe1%\x95\x1d\x88\xeb\xde\xd7\x82Nz\x06k\xcen\v\xce\x193\x05\xbe\xf6\x00\x16R\x83j^\xf4\xaf\xbeq{\x92q\xc9\x96$\xb7\xc7\x8f\xce\x05J\x927\x01\xdf\xc6\'\x9c\xcb\xad\xfa\xd3\x9a\xb6\x02\x97%\x03|\x94^N\x19Q^}\x97\xa9\xdb\x83\xd2\x95\xe8\x03\xecR\xdc\x00\x00', 0x0) io_getevents(0x0, 0x2, 0x2, &(0x7f0000000140)=[{}, {}], 0x0) pselect6(0x0, 0x0, &(0x7f0000000440)={0x6, 0xce, 0xbe6, 0x9, 0xaf1, 0x1, 0xffffffffffffffc0, 0x91}, &(0x7f0000000480)={0xe, 0x10001, 0x8, 0x411be5a5, 0x2, 0x0, 0x9a, 0x8}, 0x0, 0x0) ioperm(0x0, 0x44, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0xfffffffffffffdd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) socket$inet6(0xa, 0x2, 0x0) 16m30.044319048s ago: executing program 36 (id=1530): r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000400)='io#harsetY\\\b\x17T=-\x01\xcb\xdenAb\x87\xac\xe8$\xdb4\xde\x01\xaeR\x19\xb3\xcc\x89G\xf9\xe2\xc5\xeae\xd2\xc9\xdb\xb4EDOC\xe6y\xc8 \xa0\x87\x82xO\xacMjL\xe6\\\x83\xef^\x032\'\'^\xeb\xbf\xbdy\xe1\x8e\x01\xcc\x0e\xfc\xa3\"\xf1d\xce\x05\xe1%\x95\x1d\x88\xeb\xde\xd7\x82Nz\x06k\xcen\v\xce\x193\x05\xbe\xf6\x00\x16R\x83j^\xf4\xaf\xbeq{\x92q\xc9\x96$\xb7\xc7\x8f\xce\x05J\x927\x01\xdf\xc6\'\x9c\xcb\xad\xfa\xd3\x9a\xb6\x02\x97%\x03|\x94^N\x19Q^}\x97\xa9\xdb\x83\xd2\x95\xe8\x03\xecR\xdc\x00\x00', 0x0) io_getevents(0x0, 0x2, 0x2, &(0x7f0000000140)=[{}, {}], 0x0) pselect6(0x0, 0x0, &(0x7f0000000440)={0x6, 0xce, 0xbe6, 0x9, 0xaf1, 0x1, 0xffffffffffffffc0, 0x91}, &(0x7f0000000480)={0xe, 0x10001, 0x8, 0x411be5a5, 0x2, 0x0, 0x9a, 0x8}, 0x0, 0x0) ioperm(0x0, 0x44, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0xfffffffffffffdd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) socket$inet6(0xa, 0x2, 0x0) 5m57.39431979s ago: executing program 1 (id=2778): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7067000000000400000000000100000000100002050001487c8cc0bcbe9bbad36734a51875244bffa5fdfa5a5a3ebe4f1ef7acc8e5baf4a471aa390582823d5f7542729faefda6cb"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(r4, 0x0, 0x607a9e0a432a4785) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = socket$nl_rdma(0x10, 0x3, 0x14) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f00000005c0)={0x1, 0xfffffff3}) mount$9p_rdma(&(0x7f00000002c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1000401, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e23,timeout=0x0000000000000004,timeout=0x0000000000000002,sq=0x0000000000000401,sq=0x000000007fffffff,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7065726d69745f646972650300000000000000000000743d756e636f6e666d6e65645f752c7569643e197cddbb056672c09d84f2ca4da843e9a26aefda24f56292c9", @ANYRESDEC=0x0, @ANYBLOB=',smackfsroot=\'#,mask=^MAY_APPEND,defcontext=user_u,\x00']) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000ccaf4d59a528b90f30a391ac1778a957ec6cf18d3d5651ca6b6700b6b3a4afc099b68c0031e249c008e0ee7d206ee8"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r6, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) 5m52.968032688s ago: executing program 1 (id=2785): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7067000000000400000000000100000000100002050001487c8cc0bcbe9bbad36734a51875244bffa5fdfa5a5a3ebe4f1ef7acc8e5baf4a471aa390582823d5f7542729faefda6cb"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, 0x0, 0x607a9e0a432a4785) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = socket$nl_rdma(0x10, 0x3, 0x14) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f00000005c0)={0x1, 0xfffffff3}) mount$9p_rdma(&(0x7f00000002c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1000401, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e23,timeout=0x0000000000000004,timeout=0x0000000000000002,sq=0x0000000000000401,sq=0x000000007fffffff,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7065726d69745f646972650300000000000000000000743d756e636f6e666d6e65645f752c7569643e197cddbb056672c09d84f2ca4da843e9a26aefda24f56292c9", @ANYRESDEC=0x0, @ANYBLOB=',smackfsroot=\'#,mask=^MAY_APPEND,defcontext=user_u,\x00']) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000ccaf4d59a528b90f30a391ac1778a957ec6cf18d3d5651ca6b6700b6b3a4afc099b68c0031e249c008e0ee7d206ee8"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r6, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) 5m51.447812811s ago: executing program 1 (id=2787): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7067000000000400000000000100000000100002050001487c8cc0bcbe9bbad36734a51875244bffa5fdfa5a5a3ebe4f1ef7acc8e5baf4a471aa390582823d5f7542729faefda6cb"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(0xffffffffffffffff, 0x0, 0x607a9e0a432a4785) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$nl_rdma(0x10, 0x3, 0x14) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f00000005c0)={0x1, 0xfffffff3}) mount$9p_rdma(&(0x7f00000002c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1000401, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e23,timeout=0x0000000000000004,timeout=0x0000000000000002,sq=0x0000000000000401,sq=0x000000007fffffff,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7065726d69745f646972650300000000000000000000743d756e636f6e666d6e65645f752c7569643e197cddbb056672c09d84f2ca4da843e9a26aefda24f56292c9", @ANYRESDEC=0x0, @ANYBLOB=',smackfsroot=\'#,mask=^MAY_APPEND,defcontext=user_u,\x00']) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000ccaf4d59a528b90f30a391ac1778a957ec6cf18d3d5651ca6b6700b6b3a4afc099b68c0031e249c008e0ee7d206ee8"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r5, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) 5m49.717389988s ago: executing program 1 (id=2789): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4518, &(0x7f00000004c0)={[{@minixdf}, {@block_validity}, {@quota}]}, 0x1, 0x4e1, &(0x7f0000001400)="$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") r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406441, 0x0) getdents(r1, &(0x7f0000000080)=""/37, 0x25) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)='./file0/file0\x00') 5m46.102249123s ago: executing program 1 (id=2797): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4518, &(0x7f00000004c0)={[{@minixdf}, {@block_validity}, {@quota}]}, 0x1, 0x4e1, &(0x7f0000001400)="$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") r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406441, 0x0) getdents(r1, &(0x7f0000000080)=""/37, 0x25) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)='./file0/file0\x00') 5m39.11625037s ago: executing program 1 (id=2809): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lseek(0xffffffffffffffff, 0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) 5m38.997680071s ago: executing program 37 (id=2809): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lseek(0xffffffffffffffff, 0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) 5m37.417175055s ago: executing program 6 (id=2814): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setfsuid(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000380)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, {0x0}, 0x0, 0x4}, 0xa0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0, 0x500}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) 5m33.642958733s ago: executing program 6 (id=2815): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, 0x0) dup(0xffffffffffffffff) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m31.479577176s ago: executing program 6 (id=2818): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lseek(0xffffffffffffffff, 0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x400, 0x0, 0x7, 0x9, 0x8, 0xfffffffc}) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r5}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) 5m30.469067892s ago: executing program 6 (id=2819): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4518, &(0x7f00000004c0)={[{@minixdf}, {@block_validity}, {@quota}]}, 0x1, 0x4e1, &(0x7f0000001400)="$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") r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406441, 0x0) getdents(r1, &(0x7f0000000080)=""/37, 0x25) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)='./file0/file0\x00') 5m29.032277234s ago: executing program 6 (id=2823): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000680), 0x24, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [], {}, [{0x8, 0x2}, {0x8, 0x1}, {0x8, 0x2}], {0x10, 0x7}}, 0x3c, 0x0) 5m24.183735707s ago: executing program 6 (id=2832): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) 5m22.861596218s ago: executing program 38 (id=2832): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) 5m17.271784843s ago: executing program 7 (id=2842): mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) unlink(&(0x7f0000000180)='./file1\x00') 5m16.677104592s ago: executing program 9 (id=2844): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1000004, &(0x7f0000000b00)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x2a0, &(0x7f0000000840)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) creat(0x0, 0x125) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000180)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x4000, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@cache_readahead}, {@loose}], [{@fowner_lt={'fowner<', r4}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@euid_gt}]}}) 5m15.384803832s ago: executing program 9 (id=2845): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setfsuid(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000380)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, {0x0}, 0x0, 0x4}, 0xa0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0, 0x500}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) 5m13.067638398s ago: executing program 9 (id=2846): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 5m12.91729962s ago: executing program 9 (id=2847): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="160000000000000004ffffff", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) unshare(0x8000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') 5m12.849230371s ago: executing program 9 (id=2849): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4518, &(0x7f00000004c0)={[{@minixdf}, {@block_validity}, {@quota}]}, 0x1, 0x4e1, &(0x7f0000001400)="$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") fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406441, 0x0) getdents(r2, &(0x7f0000000080)=""/37, 0x25) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)='./file0/file0\x00') 5m12.676969474s ago: executing program 7 (id=2850): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file2\x00', 0x200800, &(0x7f0000000380)={[{@lazytime}, {@gquota}, {@filestreams}, {@uqnoenforce}, {@prjquota}]}, 0x4, 0x9647, &(0x7f0000012cc0)="$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") syz_mount_image$affs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x14880, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="2c6d6f64653530303030303030303030303030303030303030303031302c6d8666732c00"], 0x1, 0x9e04, &(0x7f000001db00)="$eJwk0WMXngeDAOG0qW3bbqe2bdu2PXWf20Zt201S27Zt29Ge9+z8gflwDRvg8AGOGOA9A7x3gPcN8P4BPjDABwf40AAfHuAjA3x0gI8N8PEBPjHAJwf41ACfHuAzA3x2gM8N8PkBvjDAFwf40gBfHuArA3x1gK8N8PUBvjHANwf41gDfHuA7A3x3gO8N8P0BfjDADwf40QA/HuAnA/x0gJ8N8PMBfjHALwf41QC/HuA3A/x2gN8N8PsB/jDAHwf40wB/HuAvA/x1gL8N8PcB/jHAPwf41wD/HuA/A/x3gP8NcOQARw1w9ADHDHDsAIcEOE6A4wY4NMDxAhw/wAkCnDDAiQKcOMBJApw0wMkCnDzAKQKcMsCpApw6wGkCnDbA6QKcPsAZApwxwJkCnDnAWQKcNcDZApw9wDkCnDPAuQKcO8B5Apw3wPkCnD/ABQJcMMCFAlw4wEUCXDTAxQJcPMAlAlwywKUCJMClA1wmwGUDXC7A5QNcIcAVA1wpwJUDXCXAVQNcLcDVA1wjwDUDXCvAtQNcJ8B1A1wvwPUD3CDADQPcKMCNA9wkwE0D3CzAzQPcIsAtA9wqwK0D3CbAbQPcLsDtA9whwB0D3CnAnQPcJcBdA9wtwN0D3CPAPQPcK8C9A9wnwH0D3C/A/QM8IMADAzwowIMDPCTAQwM8LMDDAzwiwCMDPCrAowM8JsBjAzwuwOMDPCHAEwM8KcCTAzTAUwI8NcDTAjw9wDMCPDPAswI8O8BBgEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH2A5wR4boDnBXh+gBcEeGGAFwV4cYCXBHhpgJcFeHmAVwR4ZYBXBXh1gNcEeG2A1wV4fYA3BHhjgDcFeHOAtwR4a4C3BXh7gHcEeGeAdwV4d4DDAhwe4IgA7wnw3gDvC/D+AB8I8MEAHwrw4QAfCfDRAB8L8PEAnwjwyQCfCvDpAJ8J8NkAnwvw+QBfCPDFAF8K8OUAXwnw1QBfC/D1AN8I8M0A3wrw7QDfCfDdAN8L8P0APwjwwwA/CvDjAD8J8NMAPwvw8wC/CPDLAL8K8OsAvwnw2wC/C/D7AH8I8McAfwrw5wB/CfDXAH8L8PcA/wjwzwD/CvDvAP8J8N8A/wtwZICjAhwd4JgAxwY4JMRxQhw3xKEhjhfi+CFOEOKEIU4U4sQhThLipCFOFuLkIU4R4pQhThXi1CFOE+K0IU4X4vQhzhDijCHOFOLMIc4S4qwhzhbi7CHOEeKcIc4V4twhzhPivCHOF+L8IS4Q4oIhLhTiwiEuEuKiIS4W4uIhLhHikiEuFSIhLh3iMiEuG+JyIS4f4gohrhjiSiGuHOIqIa4a4mohrh7iGiGuGeJaIa4d4johrhvieiGuH+IGIW4Y4kYhbhziJiFuGuJmIW4e4hYhbhniViFuHeI2IW4b4nYhbh/iDiHuGOJOIe4c4i4h7hribiHuHuIeIe4Z4l4h7h3iPiHuG+J+Ie4f4gEhHhjiQSEeHOIhIR4a4mEhHh7iESEeGeJRIR4d4jEhHhvicSEeH+IJIZ4Y4kkhnhyiIZ4S4qkhnhbi6SGeEeKZIZ4V4tkhDkIMQgxDjEKMQ0xCTEPMQsxDLEIsQ6xCrENsQmxD7ELsQzwnxHNDPC/E80O8IMQLQ7woxItDvCTES0O8LMTLQ7wixCtDvCrEq0O8JsRrQ7wuxOtDvCHEG0O8KcSbQ7wlxFtDvC3E20O8I8Q7Q7wrxLtDHBbi8BBHhHhPiPeGeF+I94f4QIgPhvhQiA+H+EiIj4b4WIiPh/hEiE+G+FSIT4f4TIjPhvhciM+H+EKIL4b4Uogvh/hKiK+G+FqIr4f4RohvhvhWiG+H+E6I74b4Xojvh/hBiB+G+FGIH4f4SYifhvhZiJ+H+EWIX4b4VYhfh/hNiN+G+F2I34f4Q4g/hvhTiD+H+EuIv4b4W4i/h/hHiH+G+FeIf4f4T4j/hvhfiCNDHBXi6BDHhDg2xCERjhPhuBEOjXC8CMePcIIIJ4xwoggnjnCSCCeNcLIIJ49wiginjHCqCKeOcJoIp41wuginj3CGCGeMcKYIZ45wlghnjXC2CGePcI4I54xwrgjnjnCeCOeNcL4I549wgQgXjHChCBeOcJEIF41wsQgXj3CJCJeMcKkIiXDpCJeJcNkIl4tw+QhXiHDFCFeKcOUIV4lw1QhXi3D1CNeIcM0I14pw7QjXiXDdCNeLcP0IN4hwwwg3inDjCDeJcNMIN4tw8wi3iHDLCLeKcOsIt4lw2wi3i3D7CHeIcMcId4pw5wh3iXDXCHeLcPcI94hwzwj3inDvCPeJcN8I94tw/wgPiPDACA+K8OAID4nw0AgPi/DwCI+I8MgIj4rw6AiPifDYCI+L8PgIT4jwxAhPivDkCI3wlAhPjfC0CE+P8IwIz4zwrAjPjnAQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR/hORGeG+F5EZ4f4QURXhjhRRFeHOElEV4a4WURXh7hFRFeGeFVEV4d4TURXhvhdRFeH+ENEd4Y4U0R3hzhLRHeGuFtEd4e4R0R3hnhXRHeHeGwCIdHOCLCeyK8N8L7Irw/wgcifDDChyJ8OMJHInw0wscifDzCJyJ8MsKnInw6wmcifDbC5yJ8PsIXInwxwpcifDnCVyJ8NcLXInw9wjcifDPCtyJ8O8J3Inw3wvcifD/CDyL8MMKPIvw4wk8i/DTCzyL8PMIvIvwywq8i/DrCbyL8NsLvIvw+wh8i/DHCnyL8OcJfIvw1wt8i/D3CPyL8M8K/Ivw7wn8i/DfC/yIcGeGoCEdHOCbCsREOiXGcGMeNcWiM48U4fowTxDhhjBPFOHGMk8Q4aYyTxTh5jFPEOGWMU8U4dYzTxDhtjNPFOH2MM8Q4Y4wzxThzjLPEOGuMs8U4e4xzxDhnjHPFOHeM88Q4b4zzxTh/jAvEuGCMC8W4cIyLxLhojIvFuHiMS8S4ZIxLxUiMS8e4TIzLxrhcjMvHuEKMK8a4Uowrx7hKjKvGuFqMq8e4RoxrxrhWjGvHuE6M68a4Xozrx7hBjBvGuFGMG8e4SYybxrhZjJvHuEWMW8a4VYxbx7hNjNvGuF2M28e4Q4w7xrhTjDvHuEuMu8a4W4y7x7hHjHvGuFeMe8e4T4z7xrhfjPvHeECMB8Z4UIwHx3hIjIfGeFiMh8d4RIxHxnhUjEfHeEyMx8Z4XIzHx3hCjCfGeFKMJ8dojKfEeGqMp8V4eoxnxHhmjGfFeHaMgxiDGMMYoxjjGJMY0xizGPMYixjLGKsY6xibGNsYuxj7GM+J8dwYz4vx/BgviPHCGC+K8eIYL4nx0hgvi/HyGK+I8coYr4rx6hivifHaGK+L8foYb4jxxhhvivHmGG+J8dYYb4vx9hjviPHOGO+K8e4Yh8U4PMYRMd4T470x3hfj/TE+EOODMT4U48MxPhLjozE+FuPjMT4R45MxPhXj0zE+E+OzMT4X4/MxvhDjizG+FOPLMb4S46sxvhbj6zG+EeObMb4V49sxvhPjuzG+F+P7MX4Q44cxfhTjxzF+EuOnMX4W4+cxfhHjlzF+FePXMX4T47cxfhfj9zH+EOOPMf4U488x/hLjrzH+FuPvMf4R458x/hXj3zH+E+O/Mf4X48gYR8U4OsYxMY6NcUiC4yQ4boJDExwvwfETnCDBCROcKMGJE5wkwUkTnCzByROcIsEpE5wqwakTnCbBaROcLsHpE5whwRkTnCnBmROcJcFZE5wtwdkTnCPBOROcK8G5E5wnwXkTnC/B+RNcIMEFE1wowYUTXCTBRRNcLMHFE1wiwSUTXCpBElw6wWUSXDbB5RJcPsEVElwxwZUSXDnBVRJcNcHVElw9wTUSXDPBtRJcO8F1Elw3wfUSXD/BDRLcMMGNEtw4wU0S3DTBzRLcPMEtEtwywa0S3DrBbRLcNsHtEtw+wR0S3DHBnRLcOcFdEtw1wd0S3D3BPRLcM8G9Etw7wX0S3DfB/RLcP8EDEjwwwYMSPDjBQxI8NMHDEjw8wSMSPDLBoxI8OsFjEjw2weMSPD7BExI8McGTEjw5QRM8JcFTEzwtwdMTPCPBMxM8K8GzExwkGCQYJhglGCeYJJgmmCWYJ1gkWCZYJVgn2CTYJtgl2Cd4ToLnJnhegucneEGCFyZ4UYIXJ3hJgpcmeFmClyd4RYJXJnhVglcneE2C1yZ4XYLXJ3hDgjcmeFOCNyd4S4K3JnhbgrcneEeCdyZ4V4J3JzgsweEJjkjwngTvTfC+BO9P8IEEH0zwoQQfTvCRBB9N8LEEH0/wiQSfTPCpBJ9O8JkEn03wuQSfT/CFBF9M8KUEX07wlQRfTfC1BF9P8I0E30zwrQTfTvCdBN9N8L0E30/wgwQ/TPCjBD9O8JMEP03wswQ/T/CLBL9M8KsEv07wmwS/TfC7BL9P8IcEf0zwpwR/TvCXBH9N8LcEf0/wjwT/TPCvBP9O8J8E/03wvwRHJjgqwdEJjklwbIJDUhwnxXFTHJrieCmOn+IEKU6Y4kQpTpziJClOmuJkKU6e4hQpTpniVClOneI0KU6b4nQpTp/iDCnOmOJMKc6c4iwpzpribCnOnuIcKc6Z4lwpzp3iPCnOm+J8Kc6f4gIpLpjiQikunOIiKS6a4mIpLp7iEikumeJSKZLi0ikuk+KyKS6X4vIprpDiiimulOLKKa6S4qoprpbi6imukeKaKa6V4toprpPiuimul+L6KW6Q4oYpbpTixilukuKmKW6W4uYpbpHililuleLWKW6T4rYpbpfi9inukOKOKe6U4s4p7pLirinuluLuKe6R4p4p7pXi3inuk+K+Ke6X4nND8IAUD0zxoBQPTvGQFA9N8bAUD0/xiBSPTPGoFI9O8ZgUj03xuBSPT/GEFE9M8aQUT07RFE9J8dQUT0vx9BTPSPHMFM9K8ewUBykGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2KZ6T4rkpnpfi+SlekOKFKV6U4sUpXpLipSleluLlKV6R4pUpXpXi1Slek+K1KV6X4vUp3pDijSnelOLNKd6S4q0p3pbi7SnekeKdKd6V4t0pDktxeIojUrwnxXtTvC/F+1N8IMUHU3woxYdTfCTFR1N8LMXHU3wixSdTfCrFp1N8JsVn/+eR4vMpvpDiiym+lOLLKb6S4qspvpbi6ym+keKbKb6V4tspvpPiuym+l+L7KX6Q4ocpfpTixyl+kuKnKX6W4ucpfpHilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4p8p/pXi3yn+k+K/Kf6X4sgUR6U4OsUxKY5NcUiG42Q4boZDMxwvw/EznCDDCTOcKMOJM5wkw0kznCzDyTOcIsMpM5wqw6kznCbDaTOcLsPpM5whwxkznCnDmTOcJcNZM5wtw9kznCPDOTOcK8O5M5wnw3kznC/D+TNcIMMFM1wow4UzXCTDRTNcLMPFM1wiwyUzXCpDMlw6w2UyXDbD5TJcPsMVMlwxw5UyXDnDVTJcNcPVMlw9wzUyXDPDtTJcO8N1Mlw3w/UyXD/DDTLcMMONMtw4w00y3DTDzTLcPMMtMtwyw60y3DrDbTLcNsPtMtw+wx0y3DHDnTLcOcNdMtw1w90y3D3DPTLcM8O9Mtw7w30y3DfD/TLcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjw2w+MyPD7DEzI8McOTMjw5QzM8JcNTMzwtw9MzPCPDMzM8K8OzMxxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gd4TobnZnhehudneEGGF2Z4UYYXZ3hJhpdmeFmGl2d4RYZXZnhVhldneE2G12Z4XYbXZ3hDhjdmeFOGN2d4S4a3ZnhbhrdneEeGd2Z4V4Z3Zzgsw+EZjsjwngzvzfC+DO/P8IEMH8zwoQwfzvCRDB/N8LEMH8/wiQyfzPCpDJ/O8JkMn83wuQyfz/CFDF/M8KUMX87wlQxfzfC1DF/P8I0M38zwrQzfzvCdDN/N8L0M38/wgww/zPCjDD/O8JMMP83wsww/z/CLDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwz/zPCvDP/O8J8M/83wvwxHZjgqw9EZjslwbIZDchwnx3FzHJrjeDmOn+MEOU6Y40Q5TpzjJDlOmuNkOU6e4xQ5TpnjVDlOneM0OU6b43Q5Tp/jDDnOmONMOc6c4yw5zprjbDnOnuMcOc6Z41w5zp3jPDnOm+N8Oc6f4wI5LpjjQjkunOMiOS6a42I5Lp7jEjkumeNSOZLj0jkuk+OyOS6X4/I5rpDjijmulOPKOa6S46o5rpbj6jmukeOaOa6V49o5rpPjujmul+P6OW6Q44Y5bpTjxjlukuOmOW6W4+Y5bpHjljlulePWOW6T47Y5bpfj9jnukOOOOe6U48457pLjrjnuluPuOe6R45457pXj3jnuk+O+Oe6X4/45HpDjgTkelOPBOR6S46E5Hpbj4TkekeOROR6V49E5HpPjsTkel+PxOZ6Q44k5npTjyTma4yk5nprjaTmenuMZOZ6Z41k5np3jIMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+x3NyPDfH83I8P8cLcrwwx4tyvDjHS3K8NMfLcrw8xytyvDLHq3K8Osdrcrw2x+tyvD7HG3K8Mcebcrw5x1tyvDXH23K8Pcc7crwzx7tyvDvHYTkOz3FEjvfkeG+O9+V4f44P5Phgjg/l+HCOj+T4aI6P5fh4jk/k+GSOT+X4dI7P5Phsjs/l+HyOL+T4Yo4v5fhyjq/k+GqOr+X4eo5v5Phmjm/l+HaO7+T4bo7v5fh+jh/k+GGOH+X4cY6f5Phpjp/l+HmOX+T4ZY5f5fh1jt/k+G2O3+X4fY4/5Phjjj/l+HOOv+T4a46/5fh7jn/k+GeOf+X4d47/5Phvjv/lODLHUTmOznFMjmNzHFLgOAWOW+DQAscrcPwCJyhwwgInKnDiAicpcNICJytw8gKnKHDKAqcqcOoCpylw2gKnK4YO+f9wxgJnKnDmAmcpcNYCZ/vfY8iQIXMUOGeBcxU4d4HzFDhvgfMVOH+BCxS4YIELFbhwgYsUuGiBixW4eIFLFLhkgUsVSIFLF7hMgcsWuFyByxe4QoErFrhSgSsXuEqBqxa4WoGrF7hGgWsWuFaBaxe4ToHrFrhegesXuEGBGxa4UYEbF7hJgZsWuFmBmxe4RYFbFrhVgVsXuE2B2xa4XYHbF7hDgTsWuFOBOxe4S4G7FrhbgbsXuEeBexa4V4F7F7hPgfsWuF+B+xd4QIEHFnhQgQcXeEiBhxZ4WIGHF3hEgUcWeFSBRxd4TIHHFnhcgccXeEKBJxZ4UoEnF2iBpxR4aoGnFXh6gWcUeGaBZxV4doGDAoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsCzynw3ALPK/D8Ai8o8MICLyrw4gIvKfDSAi8r8PICryjwygKvKvDqAq8p8NoCryvw+gJvKPDGAm8q8OYCbynw1gJvK/D2Au8o8M4C7yrw7gKHFTi8wBEF3lPgvQXeV+D9BT5Q4IMFPlTgwwU+UuCjBT5W4OMFPlHgkwU+VeDTBT5T4LMFPlfg8wW+UOCLBb5U4MsFvlLgqwW+VuDrBb5R4JsFvlXg2wW+U+C7Bb5X4PsFflDghwV+VODHBX5S4KcFflbg5wV+UeCXBX5V4NcFflPgtwV+V+D3Bf5Q4I8F/lTgzwX+UuCvBf5W4O8F/lHgnwX+VeDfBf5T4L8F/lfgyAJHFTi6wDEFji1wSInjlDhuiUNLHK/E8UucoMQJS5yoxIlLnKTESUucrMTJS5yixClLnKrEqUucpsRpS5yuxOlLnKHEGUucqcSZS5ylxFlLnK3E2Uuco8Q5S5yrxLlLnKfEeUucr8T5S1ygxAVLXKjEhUtcpMRFS1ysxMVLXKLEJUtcqkRKXLrEZUpctsTlSly+xBVKXLHElUpcucRVSly1xNVKXL3ENUpcs8S1Sly7xHVKXLfE9Upcv8QNStywxI1K3LjETUrctMTNSty8xC1K3LLErUrcusRtSty2xO1K3L7EHUrcscSdSty5xF1K3LXE3UrcvcQ9StyzxL1K3LvEfUrct8T9Sty/xANKPLDEg0o8uMRDSjy0xMNKPLzEI0o8ssSjSjy6xGNKPLbE40o8vsQTSjyxxJNKPLlESzylxFNLPK3E00s8o8QzSzyrxLNLHJQYlBiWGJUYl5iUmJaYlZiXWJRYlliVWJfYlNiW2JXYl3hOieeWeF6J55d4QYkXlnhRiReXeEmJl5Z4WYmXl3hFiVeWeFWJV5d4TYnXlnhdideXeEOJN5Z4U4k3l3hLibeWeFuJt5d4R4l3lnhXiXeXOKzE4SWOKPGeEu8t8b4S7y/xgRIfLPGhEh8u8ZESHy3xsRIfL/GJEp8s8akSny7xmRKfLfG5Ep8v8YUSXyzxpRJfLvGVEl8t8bUSXy/xjRLfLPGtEt8u8Z0S3y3xvRLfL/GDEj8s8aMSPy7xkxI/LfGzEj8v8YsSvyzxqxK/LvGbEr8t8bsSvy/xhxJ/LPGnEn8u8ZcSfy3xtxJ/L/GPEv8s8a8S/y7xnxL/LfG/EkeWOKrE0SWOKXFsiUMqHKfCcSscWuF4FY5f4QQVTljhRBVOXOEkFU5a4WQVTl7hFBVOWeFUFU5d4TQVTlvhdBVOX+EMFc5Y4UwVzlzhLBXOWuFsFc5e4RwVzlnhXBXOXeE8Fc5b4XwVzl/hAhUuWOFCFS5c4SIVLlrhYhUuXuESFS5Z4VIVUuHSFS5T4bIVLlfh8hWuUOGKFa5U4coVrlLhqhWuVuHqFa5R4ZoVrlXh2hWuU+G6Fa5X4foVblDhhhVuVOHGFW5S4aYVblbh5hVuUeGWFW5V4dYVblPhthVuV+H2Fe5Q4Y4V7lThzhXuUuGuFe5W4e4V7lHhnhXuVeHeFe5T4b4V7lfh/hUeUOGBFR5U4cEVHlLhoRUeVuHhFR5R4ZEVHlXh0RUeU+GxFR5X4fEVnlDhiRWeVOHJFVrhKRWeWuFpFZ5e4RkVnlnhWRWeXeGgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7Ccyo8t8LzKjy/wgsqvLDCiyq8uMJLKry0wssqvLzCKyq8ssKrKry6wmsqvLbC6yq8vsIbKryxwpsqvLnCWyq8tcLbKry9wjsqvLPCuyq8u8JhFQ6vcESF91R4b4X3VXh/hQ9U+GCFD1X4cIWPVPhohY9V+HiFT1T4ZIVPVfh0hc9U+GyFz1X4fIUvVPhihS9V+HKFr1T4aoWvVfh6hW9U+GaFb1X4doXvVPhuhe9V+H6FH1T4YYUfVfhxhZ9U+GmFn1X4eYVfVPhlhV9V+HWF31T4bYXfVfh9hT9U+GOFP1X4c4W/VPhrhb9V+HuFf1T4Z4V/Vfh3hf9U+G+F/1U4ssJRFY6ucEyFYyscUuM4NY5b49Aax6tx/BonqHHCGieqceIaJ6lx0honq3HyGqeoccoap6px6hqnqXHaGqercfoaZ6hxxhpnqnHmGmepcdYaZ6tx9hrnqHHOGueqce4a56lx3hrnq3H+GheoccEaF6px4RoXqXHRGhercfEal6hxyRqXqpEal65xmRqXrXG5GpevcYUaV6xxpRpXrnGVGletcbUaV69xjRrXrHGtGteucZ0a161xvRrXr3GDGjescaMaN65xkxo3rXGzGjevcYsat6xxqxq3rnGbGretcbsat69xhxp3rHGnGneucZcad61xtxp3r3GPGvesca8a965xnxr3rXG/Gvev8YAaD6zxoBoPrvGQGg+t8bAaD6/xiBqPrPGoGo+u8Zgaj63xuBqPr/GEGk+s8aQaT67RGk+p8dQaT6vx9BrPqPHMGs+q8ewaBzUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NZ5T47k1nlfj+TVeUOOFNV5U48U1XlLjpTVeVuPlNV5R45U1XlXj1TVeU+O1NV5X4/U13lDjjTXeVOPNNd5S46013lbj7TXeUeOdNd5V4901DqtxeI0jarynxntrvK/G+2t8oMYHa3yoxodrfKTGR2t8rMbHa3yixidrfKrGp2t8psZna3yuxudrfKHGF2t8qcaXa3ylxldrfK3G12t8o8Y3a3yrxrdrfKfGd2t8r8b3a/ygxg9r/KjGj2v8pMZPa/ysxs9r/KLGL2v8qsava/ymxm9r/K7G72v8ocYfa/ypxp9r/KXGX2v8rcbfa/yjxj9r/KvGv2v8p8Z/a/yvxpE1jqpxdI1jahxb45AGx2lw3AaHNjheg+M3OEGDEzY4UYMTNzhJg5M2OFmDkzc4RYNTNjhVg1M3OE2D0zY4XYPTNzhDgzM2OFODMzc4S4OzNjhbg7M3OEeDczY4V4NzNzhPg/M2OF+D8ze4QIMLNrhQgws3uEiDiza4WIOLN7hEg0s2uFSDNLh0g8s0uGyDyzW4fIMrNLhigys1uHKDqzS4aoOrNbh6g2s0uGaDazW4doPrNLhug+s1uH6DGzS4YYMbNbhxg5s0uGmDmzW4eYNbNLhlg1s1uHWD2zS4bYPbNbh9gzs0uGODOzW4c4O7NLhrg7s1uHuDezS4Z4N7Nbh3g/s0uG+D+zW4f4MHNHhggwc1eHCDhzR4aIOHNXh4g0c0eGSDRzV4dIPHNHhsg8c1eHyDJzR4YoMnNXhygzZ4SoOnNnhag6c3eEaDZzZ4VoNnNzhoMGgwbDBqMG4waTBtMGswb7BosGywarBusGmwbbBrsG/wnAbPbfC8Bs9v8IIGL2zwogYvbvCSBi9t8LIGL2/wigavbPCqBq9u8JoGr23wugavb/CGBm9s8KYGb27wlgZvbfC2Bm9v8I4G72zwrgbvbnBYg8MbHNHgPQ3e2+B9Dd7f4AMNPtjgQw0+3OAjDT7a4GMNPt7gEw0+2eBTDT7d4DMNPtvgcw0+3+ALDb7Y4EsNvtzgKw2+2uBrDb7e4BsNvtngWw2+3eA7Db7b4HsNvt/gBw1+2OBHDX7c4CcNftrgZw1+3uAXDX7Z4FcNft3gNw1+2+B3DX7f4A8N/tjgTw3+3OAvDf7a4G8N/t7gHw3+2eBfDf7d4D8N/tvgfw2ObHBUg6MbHNPg2AaHtDhOi+O2OLTF8Vocv8UJWpywxYlanLjFSVqctMXJWpy8xSlanLLFqVqcusVpWpy2xelanL7FGVqcscWZWpy5xVlanLXF2VqcvcU5WpyzxblanLvFeVqct8X5Wpy/xQVaXLDFhVpcuMVFWly0xcVaXLzFJVpcssWlWqTFpVtcpsVlW1yuxeVbXKHFFVtcqcWVW1ylxVVbXK3F1Vtco8U1W1yrxbVbXKfFdVtcr8X1W9ygxQ1b3KjFjVvcpMVNW9ysxc1b3KLFLVvcqsWtW9ymxW1b3K7F7VvcocUdW9ypxZ1b3KXFXVvcrcXdW9yjxT1b3KvFvVvcp8V9W9yvxf1bPKDFA1s8qMWDWzykxUNbPKzFw1s8osUjWzyqxaNbPKbFY1s8rsXjWzyhxRNbPKnFk1u0xVNaPLXF01o8vcUzWjyzxbNaPLvFQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i+e0eG6L57V4fosXtHhhixe1eHGLl7R4aYuXtXh5i1e0eGWLV7V4dYvXtHhti9e1eH2LN7R4Y4s3tXhzi7e0eGuLt7V4e4t3tHhni3e1eHeLw1oc3uKIFu9p8d4W72vx/hYfaPHBFh9q8eEWH2nx0RYfa/HxFp9o8ckWn2rx6RafafHZFp9r8fkWX2jxxRZfavHlFl9p8dUWX2vx9RbfaPHNFt9q8e0W32nx3Rbfa/H9Fj9o8cMWP2rx4xY/afHTFj9r8fMWv2jxyxa/avHrFr9p8dsWv2vx+xZ/aPHHFn9q8ecWf2nx1xZ/a/H3Fv9o8c8W/2rx7xb/afHfFv9rcWSLo1oc3eKYFse2OKTDcToct8OhHY7X4fgdTtDhhB1O1OHEHU7S4aQdTtbh5B1O0eGUHU7V4dQdTtPhtB1O1+H0Hc7Q4YwdztThzB3O0uGsHc7W4ewdztHhnB3O1eHcHc7T4bwdztfh/B0u0OGCHS7U4cIdLtLhoh0u1uHiHS7R4ZIdLtUhHS7d4TIdLtvhch0u3+EKHa7Y4UodrtzhKh2u2uFqHa7e4RodrtnhWh2u3eE6Ha7b4Xodrt/hBh1u2OFGHW7c4SYdbtrhZh1u3uEWHW7Z4VYdbt3hNh1u2+F2HW7f4Q4d7tjhTh3u3OEuHe7a4W4d7t7hHh3u2eFeHe7d4T4d7tvhfh3u3+EBHR7Y4UEdHtzhIR0e2uFhHR7e4REdHtnhUR0e3eExHR7b4XEdHt/hCR2e2OFJHZ7coR2e0uGpHZ7W4ekdntHhmR2e1eHZHQ46DDoMO4w6jDtMOkw7zDrMOyw6LDusOqw7bDpsO+w67Ds8p8NzOzyvw/M7vKDDCzu8qMOLO7ykw0s7vKzDyzu8osMrO7yqw6s7vKbDazu8rsPrO7yhwxs7vKnDmzu8pcNbO7ytw9s7vKPDOzu8q8O7OxzW4fAOR3R4T4f3dnhfh/d3+ECHD3b4UIcPd/hIh492+FiHj3f4RIdPdvhUh093+EyHz3b4XIfPd/hChy92+FKHL3f4Soevdvhah693+EaHb3b4Vodvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHv3f4R4d/dvhXh393+E+H/3b4X4cjOxzV4egOx3Q4tsMhPY7T47g9Du1xvB7H73GCHifscaIeJ+5xkh4n7XGyHifvcYoep+xxqh6n7nGaHqftcboep+9xhh5n7HGmHmfucZYeZ+1xth5n73GOHufsca4e5+5xnh7n7XG+HufvcYEeF+xxoR4X7nGRHhftcbEeF+9xiR6X7HGpHulx6R6X6XHZHpfrcfkeV+hxxR5X6nHlHlfpcdUeV+tx9R7X6HHNHtfqce0e1+lx3R7X63H9HjfoccMeN+px4x436XHTHjfrcfMet+hxyx636nHrHrfpcdset+tx+x536HHHHnfqceced+lx1x5363H3Hvfocc8e9+px7x736XHfHvfrcf8eD+jxwB4P6vHgHg/p8dAeD+vx8B6P6PHIHo/q8egej+nx2B6P6/H4Hk/o8cQeT+rx5B7t8ZQeT+3xtB5P7/GMHs/s8awez+5x0GPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12Pf4zk9ntvjeT2e3+MFPV7Y40U9XtzjJT1e2uNlPV7e4xU9XtnjVT1e3eM1PV7b43U9Xt/jDT3e2ONNPd7c4y093trjbT3e3uMdPd7Z41093t3jsB6H9zii5/9YuMclTA+G2cIz4cS2bazYtm3b9gomtp/bRmwPY9u2bXPXu+s7hau6f3Y7YoAjBzhqgKMHOGaAYwd47wDvG+D9A3xggA8O8KEBPjzARwb46AAfG+DjA3xigE8O8KkBPj3AZwb47ACfG+DzA3xhgC8O8KUBvjzAVwb46gBfG+DrA3xjgG8O8K0Bvj3Adwb47gDfG+D7A/xggB8O8KMBfjzATwb46QA/G+DnA/xigF8O8KsBfj3Abwb47QC/G+D3A/xhgD8O8KcB/jzAXwb46wB/G+DvA/xjgH8O8K8B/j3Afwb47wD/G+CQAIcGOE6A4wY4XoDjBzhBgBMGOCzAiQKcOMBJApw0wMkCnDzAKQKcMsCpApw6wGkCnDbA6QKcPsAZApwxwJkCnDnAWQKcNcDZApw9wDkCnDPAuQKcO8B5Apw3wPkCnD/ABQJcMMCFAlw4wEUCXDTAxQJcPMAlAlwyQAJcKsClA1wmwGUDXC7A5QNcIcAVA1wpwJUDXCXAVQNcLcDVA1wjwDUDXCvAtQNcJ8B1A1wvwPUD3CDADQPcKMCNA9wkwE0D3CzAzQPcIsAtA9wqwK0D3CbAbQPcLsDtA9whwB0D3CnAnQPcJcBdA9wtwN0D3CPAPQPcK8C9A9wnwH0D3C/A/QM8IMADAzwowIMDPCTAQwM8LMDDAzwiwCMDPCrAowM8JsBjAzwuwOMDPCHAEwM8KUADPDnAUwI8NcDTAhwe4OkBnhHgmQGeFeDZAZ4T4LkBnhfg+QFeEOCFAV4U4MUBXhLgpQFeFuDlAV4R4JUBDgIMAgwDjAKMA0wCTAPMAswDLAIsA6wCrANsAmwD7ALsA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwBEBjgxwVICjAxwT4NgA7w3wvgDvD/CBAB8M8KH/GQ/BRwJ8NMDHAnw8wCcCfDLApwJ8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP8CHBLi0BDHCXHcEMcLcfwQJwhxwhCHhThRiBOHOEmIk4Y4WYiThzhFiFOGOFWIU4c4TYjThjhdiNOHOEOIM4Y4U4gzhzhLiLOGOFuIs4c4R4hzhjhXiHOHOE+I84Y4X4jzh7hAiAuGuFCIC4e4SIiLhrhYiIuHuESIS4ZIiEuFuHSIy4S4bIjLhbh8iCuEuGKIK4W4coirhLhqiKuFuHqIa4S4Zohrhbh2iOuEuG6I64W4fogbhLhhiBuFuHGIm4S4aYibhbh5iFuEuGWIW4W4dYjbhLhtiNuFuH2IO4S4Y4g7hbhziLuEuGuIu4W4e4h7hLhniHuFuHeI+4S4b4j7hbh/iAeEeGCIB4V4cIiHhHhoiIeFeHiIR4R4ZIhHhXh0iMeEeGyIx4V4fIgnhHhiiCeFaIgnh3hKiKeGeFqIw0M8PcQzQjwzxLNCPDvEc0I8N8TzQjw/xAv+l4sheFGIF4d4SYiXhnhZiJeHeEWIV4Y4CDEIMQwxCjEOMQkxDTELMQ+xCLEMsQqxDrEJsQ2xC7EP8aoQrw7xmhCvDfG6EK8P8YYQbwzxphBvDvGWEG8N8bYQbw/xjhDvDPGuEO8O8Z4QR4Q4MsRRIY4OcUyIY0O8N8T7Qrw/xAdCfDDEh0J8OMRHQnw0xMdCfDzEJ0J8MsSnQnw6xGdCfDbE50J8PsQXQnwxxJdCfDnEV0J8NcTXQnw9xDdCfDPEt0J8O8R3Qnw3xPdCfD/ED0L8MMSPQvw4xE9C/DTEz0L8PMQvQvwyxK9C/DrEb0L8NsTvQvw+xB9C/DHEn0L8OcRfQvw1xN9C/D3EP0L8M8S/Qvw7xH9C/DfE/0IcEuHQCMeJcNwIx4tw/AgniHDCCIdFOFGEE0c4SYSTRjhZhJNHOEWEU0Y4VYRTRzhNhNNGOF2E00c4Q4QzRjhThDNHOEuEs0Y4W4SzRzhHhHNGOFeEc0c4T4TzRjhfhPNHuECEC0a4UIQLR7hIhItGuFiEi0e4RIRLRkiES0W4dITLRLhshMtFuHyEK0S4YoQrRbhyhKtEuGqEq0W4eoRrRLhmhGtFuHaE60S4boTrRbh+hBtEuGGEG0W4cYSbRLhphJtFuHmEW0S4ZYRbRbh1hNtEuG2E20W4fYQ7RLhjhDtFuHOEu0S4a4S7Rbh7hHtEuGeEe0W4d4T7RLhvhPtFuH+EB0R4YIQHRXhwhIdEeGiEh0V4eIRHRHhkhEdFeHSEx0R4bITHRXh8hCdEeGKEJ0VohCdHeEqEp0Z4WoTDIzw9wjMiPDPCsyI8O8JzIjw3wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywkGEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYRXRXh1hNdEeG2E10V4fYQ3RHhjhDdFeHOEt0R4a4S3RXh7hHdEeGeEd0V4d4T3RDgiwpERjopwdIRjIhwb4b0R3hfh/RE+EOGDET4U4cMRPhLhoxE+FuHjET4R4ZMRPhXh0xE+E+GzET4X4fMRvhDhixG+FOHLEb4S4asRvhbh6xG+EeGbEb4V4dsRvhPhuxG+F+H7EX4Q4YcRfhThxxF+EuGnEX4W4ecRfhHhlxF+FeHXEX4T4bcRfhfh9xH+EOGPEf4U4c8R/hLhrxH+FuHvEf4R4Z8R/hXh3xH+E+G/Ef4X4ZAYh8Y4TozjxjhejOPHOEGME8Y4LMaJYpw4xklinDTGyWKcPMYpYpwyxqlinDrGaWKcNsbpYpw+xhlinDHGmWKcOcZZYpw1xtlinD3GOWKcM8a5Ypw7xnlinDfG+WKcP8YFYlwwxoViXDjGRWJcNMbFYlw8xiViXDJGYlwqxqVjXCbGZWNcLsblY1whxhVjXCnGlWNcJcZVY1wtxtVjXCPGNWNcK8a1Y1wnxnVjXC/G9WPcIMYNY9woxo1j3CTGTWPcLMbNY9wixi1j3CrGrWPcJsZtY9wuxu1j3CHGHWPcKcadY9wlxl1j3C3G3WPcI8Y9Y9wrxr1j3CfGfWPcL8b9YzwgxgNjPCjGg2M8JMZDYzwsxsNjPCLGI2M8KsajYzwmxmNjPC7G42M8IcYTYzwpRmM8OcZTYjw1xtNiHB7j6TGeEeOZMZ4V49kxnhPjuTGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTEOYgxiDGOMYoxjTGJMY8xizGMsYixjrGKsY2xibGPsYuxjvCrGq2O8JsZrY7wuxutjvCHGG2O8KcabY7wlxltjvC3G22O8I8Y7Y7wrxrtjvCfGETGOjHFUjKNjHBPj2BjvjfG+GO+P8YEYH4zxoRgfjvGRGB+N8bEYH4/xiRifjPGpGJ+O8ZkYn43xuRifj/GFGF+M8aUYX47xlRhfjfG1GF+P8Y0Y34zxrRjfjvGdGN+N8b0Y34/xgxg/jPGjGD+O8ZMYP43xsxg/j/GLGL+M8asYv47xmxi/jfG7GL+P8YcYf4zxpxh/jvGXGH+N8bcYf4/xjxj/jPGvGP+O8Z8Y/43xvxiHJDg0wXESHDfB8RIcP8EJEpwwwWEJTpTgxAlOkuCkCU6W4OQJTpHglAlOleDUCU6T4LQJTpfg9AnOkOCMCc6U4MwJzpLgrAnOluDsCc6R4JwJzpXg3AnOk+C8Cc6X4PwJLpDgggkulODCCS6S4KIJLpbg4gkukeCQIUOGDB0yZMhSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemOBJCZrgyQmekuCpCZ6W4PAET0/wjATPTPCsBM9O8JwEz03wvATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0xwkGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2Cf4FUJXp3gNQlem+B1CV6f4A0J3pjgTQnenOAtCd6a4G0J3p7gHQnemeBdCd6d4D0JjkhwZIKjEhyd4JgExyZ4b4L3JXh/gg8k+GCCDyX4cIKPJPhogo8l+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJPhlgl8l+HWC3yT4bYLfJfh9gj8k+GOCPyX4c4K/JPhrgr8l+HuCfyT4Z4J/Jfh3gv8k+G+C//2vPykOTXGcFMdNcbwUx09xghQnTHFYihOlOHGKk6Q4aYqTpTh5ilOkOGWKU6U4dYrTpDhtitOlOH2KM6Q4Y4ozpThzirOkOGuKs6U4e4pzpDhninOlOHeK86Q4b4rzpTh/igukuGCKC6W4cIqLpLhoiouluHiKS6S4ZIqkuFSKS6e4TIrLprhcisunuEKKK6a4Uoorp7hKiqumuFqKq6e4RoprprhWimunuE6K66a4Xorrp7hBihumuFGKG6e4SYqbprhZipunuEWKW6a4VYpbp7hNitumuF2K26e4Q4o7prhTijunuEuKu6a4W4q7p7hHinumuFeKe6e4T4r7prhfivuneECKB6Z4UIoHp3hIioemeFiKh6d4RIpHpnhUikeneEyKx6Z4XIrHp3hCiiemeFKKpnhyiqekeGqKp6U4PMXTUzwjxTNTPCvFs1M8J8VzUzwvxfNTvCDFC1O8KMWLU7wkxUtTvCzFy1O8IsUrUxykGKQYphilGKeYpJimmKWYp1ikWKZYpVin2KTYptil2Kd4VYpXp3hNitemeF2K16d4Q4o3pnhTijeneEuKt6Z4W4q3p3hHinemeFeKd6d4T4ojUhyZ4qgUR6c4JsWxKd6b4n0p3p/iAyk+mOJDw/HhFB9J8dEUH0vx8RSfSPHJFJ9K8ekUn0nx2RSfS/H5FF9I8cUUX0rx5RRfSfHVFF9L8fUU30jxzRTfSvHtFN9J8d0U30vx/RQ/SPHDFD9K8eMUP0nx0xQ/S/HzFL9I8csUv0rx6xS/SfHbFL9L8fsUf0jxxxR/SvHnFH9J8dcUf0vx9xT/SPHPFP9K8e8U/0nx3xT/S3FIhkMzHCfDcTMcL8PxM5wgwwkzHJbhRBlOnOEkGU6a4WQZTp7hFBlOmeFUGU6d4TQZTpvhdBlOn+EMGc6Y4UwZzpzhLBnOmuFsGc6e4RwZzpnhXBnOneE8Gc6b4XwZzp/hAhkumOFCGS6c4SIZLprhYhkunuESGS6ZIRkuleHSGS6T4bIZLpfh8hmukOGKGa6U4coZrpLhqhmuluHqGa6R4ZoZrpXh2hmuk+G6Ga6X4foZbpDhhhlulOHGGW6S4aYZbpbh5hlukeGWGW6V4dYZbpPhthlul+H2Ge6Q4Y4Z7pThzhnukuGuGe6W4e4Z7pHhnhnuleHeGe6T4b4Z7pfh/hkekOGBGR6U4cEZHpLhoRkeluHhGR6R4ZEZHpXh0Rkek+GxGR6X4fEZnpDhiRmelKEZnpzhKRmemuFpGQ7P8PQMz8jwzAzPyvDsDM/J8NwMz8vw/AwvyPDCDC/K8OIML8nw0gwvy/DyDK/I8MoMBxkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn2GV6V4dUZXpPhtRlel+H1Gd6Q4Y0Z3pThzRnekuGtGd6W4e0Z3pHhnRneleHdGd6T4YgMR2Y4KsPRGY7JcGyG92Z4X4b3Z/hAhg9m+FCGD2f4SIaPZvhYho9n+ESGT2b4VIZPZ/hMhs9m+FyGz2f4QoYvZvhShi9n+EqGr2b4WoavZ/hGhm9m+FaGb2f4TobvZvhehu9n+EGGH2b4UYYfZ/hJhp9m+FmGn2f4RYZfZvhVhl9n+E2G32b4XYbfZ/hDhj9m+FOGP2f4S4a/Zvhbhr9n+EeGf2b4V4Z/Z/hPhv9m+F+GQ3IcmuM4OY6b43g5jp/jBDlOmOOwHCfKceIcJ8lx0hwny3HyHKfIccocp8px6hynyXHaHKfLcfocZ8hxxhxnynHmHGfJcdYcZ8tx9hznyHHOHOfKce4c58lx3hzny3H+HBfIccEcF8px4RwXyXHRHBfLcfEcl8hxyRzJcakcl85xmRyXzXG5HJfPcYUcV8xxpRxXznGVHFfNcbUcV89xjRzXzHGtHNfOcZ0c181xvRzXz3GDHDfMcaMcN85xkxw3zXGzHDfPcYsct8xxq5wh/7PcJsdtc9wux+1z3CHHHXPcKcedc9wlx11z3C3H3XPcI8c9c9wrx71z3CfHfXPcL8f9czwgxwNzPCjHg3M8JMdDczwsx8NzPCLHI3M8Ksejczwmx2NzPC7H43M8IccTczwpR3M8OcdTcjw1x9NyHJ7j6TmekeOZOZ6V49k5npPjuTmel+P5OV6Q44U5XpTjxTlekuOlOV6W4+U5XpHjlTkOcgxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuxzvCrHq3O8Jsdrc7wux+tzvCHHG3O8Kcebc7wlx1tzvC3H23O8I8c7c7wrx7tzvCfHETmOzHFUjqNzHJPj2BzvzfG+HO/P8YEcH8zxoRwfzvGRHB/N8bEcH8/xiRyfzPGpHJ/O8Zkcn83xuRyfz/GFHF/M8aUcX87xlRxfzfG1HF/P8Y0c38zxrRzfzvGdHN/N8b0c38/xgxw/zPGjHD/O8ZOcof83ovfzHL/I8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/yvHnHH/J8dccf8vx9xz/yPHPHP/K8e8c/8nx3xz/y3FIgUMLHKfAcQscr8DxC5ygwAkLHFbgRAVOXOAkBU5a4GQFTl7gFAVOWeBUBU5d4DQFTlvgdAVOX+AMBc5Y4EwFzlzgLAXOWuBsBc5e4BwFzlngXAXOXeA8Bc5b4HwFzl/gAgUuWOBCBS5c4CIFLlrgYgUuXuASBS5ZIAUuVeDSBS5T4LIFLlfg8gWuUOCKBa5U4MoFrlLgqgWuVuDqBa5R4JoFrlXg2gWuU+C6Ba5X4PoFblBMMGTDAjcqcOMCNylw0wI3K3DzArcocMsCtypw6wK3KXDbArcrcPsCdyhwxwJ3KnDnAncpcNcCdytw9wL3KHDPAvcqcO8C9ylw3wL3K3D/Ag8o8MACDyrw4AIPKfDQAg8r8PACjyjwyAKPKvDoAo8p8NgCjyvw+AJPKPDEAk8q0AJPLvCUAk8t8LQChxd4eoFnFHhmgWcVeHaB5xR4boHnFXh+gRcUeGGBFxV4cYGXFHhpgZcVeHmBVxR4ZYGDAoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8q8O4C7ylwRIEjCxxV4OgCxxQ4tsB7C7yvwPsLfKDABwt8qMCHC3ykwEcLfKzAxwt8osAnC3yqwKcLfKbAZwt8rsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwL8L/KfAfwv8r8AhJQ4tcZwSxy1xvBLHL3GCEicscViJE5U4cYmTlDhpiZOVOHmJU5Q4ZYlTlTh1idOUOG2J05U4fYkzlDhjiTOVOHOJs5Q4a4mzlTh7iXOUOGeJc5U4d4nzlDhvifOVOH+JC5S4YIkLlbhwiYuUuGiJi5W4eIlLlLhkiZS4VIlLl7hMicuWuFyJy5e4QokrlrhSiSuXuEqJq5a4Womrl7hGiWuWuFaJa5e4TonrlrheieuXuEGJG5a4UYkbl7hJiZuWuFmJm5e4RYlblrhViVuXuE2J25a4XYnbl7hDiTuWuFOJO5e4S4m7lrhbibuXuEeJe5a4V4l7l7hPifuWuF+J+5d4QIkHlnhQiQeXeEiJh5Z4WImHl3hEiUeWeFSJR5d4TInHlnhciceXeEKJJ5Z4UomWeHKJp5R4aomnlTi8xNNLPKPEM0s8q8SzSzynxHNLPK/E80u8oMQLS7yoxItLvKTES0u8rMTLS7yixCtLHJQYlBiWGJUYl5iUmJaYlZiXWJRYlliVWJfYlNiW2JXYl3hViVeXeE2J15Z4XYnXl3hDiTeWeFOJN5d4S4m3lnhbibeXeEeJd5Z4V4l3l3hPiSNKHFniqBJHlzimxLEl3lvifSXeX+IDJT5Y4kMlPlziIyU+WuJjJT5e4hMlPlniUyU+XeIzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iFyV+WeJXJX5d4jclflvidyV+X+IPJf5Y4k8l/lziLyX+WuJvJf5e4h8l/lniXyX+XeI/Jf5b4n8lDqlwaIXjVDhuheNVOH6FE1Q4YYXDKpyowokrnKTCSSucrMLJK5yiwikrnKrCqSucpsJpK5yuwukrnKHCGSucqcKZK5ylwlkrnK3C2Suco8I5K5yrwrkrnKfCeSucr8L5K1ygwgUrXKjChStcpMJFK1yswsUrXKLCJSukwqUqXLrCZSpctsLlKly+whUqXLHClSpcucJVKly1wtUqXL3CNSpcs8K1Kly7wnUqXLfC9Spcv8INKtywwo0q3LjCTSrctMLNKty8wi0q3LLCrSrcusJtKty2wu0q3L7CHSrcscKdKty5wl0q3LXC3SrcvcI9Ktyzwr0q3LvCfSrct8L9Kty/wgMqPLDCgyo8uMJDKjy0wsMqPLzCIyo8ssKjKjy6wmMqPLbC4yo8vsITKjyxwpMqtMKTKzylwlMrPK3C4RWeXuEZFZ5Z4VkVnl3hORWeW+F5FZ5f4QUVXljhRRVeXOElFV5a4WUVXl7hFRVeWeGgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7Cqyq8usJrKry2wusqvL7CGyq8scKbKry5wlsqvLXC2yq8vcI7KryzwrsqvLvCeyocUeHICkdVOLrCMRWOrfDeCu+r8P4KH6jwwQofqvDhCh+p8NEKH6vw8QqfqPDJCp+q8OkKn6nw2Qqfq/D5Cl+o8MUKX6rw5QpfqfDVCl+r8PUK36jwzQrfqvDtCt+p8N0K36vw/Qo/qPDDCj+q8OMKP6nw0wo/q/DzCr+o8MsKv6rw6wq/qfDbCr+r8PsKf6jwxwp/qvDnCn+p8NcKf6vw9wr/qPDPCv+q8O8K/6nw3wr/q3BIjUNrHKfGcWscr8bxa5ygxglrHFbjRDVOXOMkNU5a42Q1Tl7jFDVOWeNUNU5d4zQ1TlvjdDVOX+MMNc5Y40w1zlzjLDXOWuNsNc5e4xw1zlnjXDXOXeM8Nc5b43w1zl/jAjUuWONCNS5c4yI1LlrjYjUuXuMSNS5ZIzUuVePSNS5T47I1Llfj8jWuUOOKNa5U48o1rlLjqjWuVuPqNa5R45o1rlXj2jWuU+O6Na5X4/o1blDjhjVuVOPGNW5S46Y1blbj5jVuUeOWNW5V49Y1blPjtjVuV+P2Ne5Q44417lTjzjXuUuOuNe5W4+417lHjnjXuVePeNe5T47417lfj/jUeUOOBNR5U48E1HlLjoTUeVuPhNR5R45E1HlXj0TUeU+OxNR5X4/E1nlDjiTWeVKM1nlzjKTWeWuNpNQ6v8fQaz6jxzBrPqvHsGs+p8dwaz6vx/BovqPHCGi+q8eIaL6nx0hovq/HyGq+o8coaBzUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NV5V49U1XlPjtTVeV+P1Nd5Q44013lTjzTXeUuOtNd5W4+013lHjnTXeVePdNd5T44gaR9Y4qsbRNY6pcWyN99Z4X4331/hAjQ/W+FCND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb/X+EeNf9b4V41/1/hPjf/W+F+NQxoc2uA4DY7b4HgNjt/gBA1O2OCwBidqcOIGJ2lw0gYna3DyBqdocMoGp2pw6ganaXDaBqdrcPoGZ2hwxgZnanDmBmdpcNYGZ2tw9gbnaHDOBudqcO4G52lw3gbna3D+BhdocMEGF2pw4QYXaXDRBhdrcPEGl2hwyQZpcKkGl25wmQaXbXC5BpdvcIUGV2xwpQZXbnCVBldtcLUGV29wjQbXbHCtBtducJ0G121wvQbXb3CDBjdscKMGN25wkwY3bXCzBjdvcIsGt2xwqwa3bnCbBrdtcLsGt29whwZ3bHCnBnducJcGd21wtwZ3b3CPBvdscK8G925wnwb3bXC/Bvdv8IAGD2zwoAYPbvCQBg9t8LAGD2/wiAaPbPCoBo9u8JgGj23wuAaPb/CEBk9s8KQGbfDkBk9p8NQGT2tweIOnN3hGg2c2eFaDZzd4ToPnNnheg+c3eEGDFzZ4UYMXN3hJg5c2eFmDlzd4RYNXNjhoMGgwbDBqMG4waTBtMGswb7BosGywarBusGmwbbBrsG/wqgavbvCaBq9t8LoGr2/whgZvbPCmBm9u8JYGb23wtgZvb/COBu9s8K4G727wngZHNDiywVENjm5wTINjG7y3wfsavL/BBxp8sMGHGny4wUcafLTBxxp8vMEnGnyywacafLrBZxp8tsHnGny+wRcafLHBlxp8ucFXGny1wdcafL3BNxp8s8G3Gny7wXcafLfB9xp8v8EPGvywwY8a/LjBTxr8tMHPGvy8wS8a/LLBrxr8usFvGvy2we8a/L7BHxr8scGfGvy5wV8a/LXB3xr8vcE/Gvyzwb8a/LvBfxr8t8H/GhzS4tAWx2lx3BbHa3H8FidoccIWh7U4UYsTtzhJi5O2OFmLk7c4RYtTtjhVi1O3OE2L07Y4XYvTtzhDizO2OFOLM7c4S4uztjhbi7O3OEeLc7Y4V4tztzhPi/O2OF+L87e4QIsLtrhQiwu3uEiLi7a4WIuLt7hEi0u2SItLtbh0i8u0uGyLy7W4fIsrtLhiiyu1uHKLq7S4aourtbh6i2u0uGaLa7W4dovrtLhui+u1uH6LG7S4YYsbtbhxi5u0uGmLm7W4eYtbtLhli1u1uHWL27S4bYvbtbh9izu0uGOLO7W4c4u7tLhri7u1uHuLe7S4Z4t7tbh3i/u0uG+L+7W4f4sHtHhgiwe1eHCLh7R4aIuHtXh4i0e0eGSLR7V4dIvHtHhsi8e1eHyLJ7R4YosntWiLJ7d4Sountnhai8NbPL3FM1o8s8WzWjy7xXNaPLfF81o8v8ULWrywxYtavLjFS1q8tMXLWry8xStavLLFQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i1e1eHWL17R4bYvXtXh9ize0eGOLN7V4c4u3tHhri7e1eHs77P9/zt7Z4l0t3t3iPS2OaHFki6NaHN3imBbHtnhvi/e1eH+LD7T4YIsPtfhwi4+0+GiLj7X4eItPtPhki0+1+HSLz7T4bIvPtfh8iy+0+GKLL7X4couvtPhqi6+1+HqLb7T4Zotvtfh2i++0+G6L77X4fosftPhhix+1+HGLn7T4aYuftfh5i1+0+GWLX7X4dYvftPhti9+1+H2LP7T4Y4s/tfhzi7+0+GuLv7X4e4t/tPhni3+1+HeL/7T4b4v/tTikw6EdjtPhuB2O1+H4HU7Q4YQdDutwog4n7nCSDiftcLIOJ+9wig6n7HCqDqfucJoOp+1wug6n73CGDmfscKYOZ+5wlg5n7XC2DmfvcI4O5+xwrg7n7nCeDuftcL4O5+9wgQ4X7HChDhfucJEOF+1wsQ4X73CJDpfskA6X6nDpDpfpcNkOl+tw+Q5X6HDFDlfqcOUOV+lw1Q5X63D1DtfocM0O1+pw7Q7X6XDdDtfrcP0ON+hwww436nDjDjfpcNMON+tw8w636HDLDrfqcOsOt+lw2w6363D7DnfocMcOd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOj+rw6A6P6fDYDo/r8PgOT+jwxA5P6tAOT+7wlA5P7fC0Dod3eHqHZ3R4ZodndXh2h+d0eG6H53V4focXdHhhhxd1eHGHl3R4aYeXdXh5h1d0eGWHgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Dq/q8OoOr+nw2g6v6/D6Dm/o8MYOb+rw5g5v6fDWDm/r8PYO7+jwzg7v6vDuDu/pcESHIzsc1eHoDsd0OLbDezu8r8P7O3ygwwc7fKjDhzt8pMNHO3ysw8c7fKLDJzt8qsOnO3ymw2c7fK7D5zt8ocMXO3ypw5c7fKXDVzt8rcPXO3yjwzc7fKvDtzt8p8N3O3yvw/c7/KDDDzv8qMOPO/ykw087/KzDzzv8osMvO/yqw687/KbDbzv8rsPvO/yhwx87/KnDnzv8pcNfO/ytw987/KPDPzv8q8O/O/ynw387/K/DIT0O7XGcHsftcbwex+9xgh4n7HFYjxP1OHGPk/Q4aY+T9Th5j1P0OGWPU/U4dY/T9Dhtj9P1OH2PM/Q4Y48z9Thzj7P0OGuPs/U4e49z9Dhnj3P1OHeP8/Q4b4/z9Th/jwv0uGCPC/W4cI+L9Lhoj4v1uHiPS/S4ZI/0uFSPS/e4TI/L9rhcj8v3uEKPK/a4Uo8r97hKj6v2uFqPq/e4Ro9r9rhWj2v3uE6P6/a4Xo/r97hBjxv2uFGPG/e4SY+b9rhZj5v3uEWPW/a4VY9b97hNj9v2uF2P2/e4Q4879rhTjzv3uEuPu/a4W4+797hHj3v2uFePe/e4T4/79rhfj/v3eECPB/Z4UI8H93hIj4f2eFiPh/d4RI9H9nhUj0f3eEyPx/Z4XI/H93hCjyf2eFKP9nhyj6f0eGqPp/U4vMfTezyjxzN7PKvHs3s8p8dzezyvx/N7vKDHC3u8qMeLe7ykx0t7vKzHy3u8oscrexz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4VY9X93hNj9f2eF2P1/d4Q4839nhTjzf3eEuPt/Z4W4+393hHj3f2eFePd/d4T48jehzZ46geR/c4psex/4+Fc+zC9GAYXKe2bVupbdu2bae2beO+bNTtoLZt225He56z719I8jkDHDrAYQMcPsARA3xsgI8P8IkBPjnApwb49ACfGeCzA3xugM8P8IUBvjjAlwb48gBfGeCrA3xtgK8P8I0BvjnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgCMHOGqAowc4ZoBjBzhOgEMCHDfA8QIcP8AJApwwwIkCnDjASQKcNMDJApw8wCkCnDLAqQKcOsBpApw2wOkCnD7AGQKcMcCZApw5wFkCnDXA2QKcPcA5ApwzwLkCnDvAeQKcN8D5Apw/wAUCXDDAhQJcOMBFAlw0wMUCXDzAJQJcMsClAlw6QAJcJsBlA1wuwOUDXCHAFQNcKcCVA1wlwFUDXC3A1QNcI8A1A1wrwLUDXCfAdQNcL8D1A9wgwA0D3CjAjQPcJMBNA9wswM0D3CLALQPcKsCtA9wmwG0D3C7A7QPcIcAdA9wpwJ0D3CXAXQPcLcDdA9wjwD0D3CvAvQPcJ8B9A9wvwP0DPCDAAwM8KMCDAzwkwEMDPCzAwwM8IsAjAzwqwKMDPCbAYwM8LsDjAzwhwBMDPCnAkwM8JUADPDXA0wI8PcAzAjwzwLMCPDvAcwI8N8DzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrArw6wGsCvDbA6wK8PsAbArwxwJsCvDnAWwK8NcDbArw9wDsCvDPAuwK8O8B7AhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4b4D3BXh/gA8E+GCADwX4cICPBPhogEMDHBbg8ABHBPhYgI8H+ESATwb4VIBPB/hMgM8G+FyAzwf4QoAvBvhSgC8H+EqArwb4WoCvB/hGgG8G+FaAbwf4ToDvBvhegO8H+EGAHwb4UYAfB/hJgJ8G+FmAnwf4RYBfBvhVgF8H+E2A3wb4XYDfB/hDgD8G+FOAPwf4S4C/BvhbgL8H+EeAfwb4V4B/B/hPgP8G+F+AIwMcFeDoAMcEODbAcUIcEuK4IY4X4vghThDihCFOFOLEIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhLhLioiEuFuLiIS4R4pIhLhXi0iES4jIhLhviciEuH+IKIa4Y4kohrhziKiGuGuJqIa4e4hohrhniWiGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFuHuIWIW4Z4lYhbh3iNiFuG+J2IW4f4g4h7hjiTiHuHOIuIe4a4m4h7h7iHiHuGeJeIe4d4j4h7hvifiHuH+IBIR4Y4kEhHhziISEeGuJhIR4e4hEhHhniUSEeHeIxIR4b4nEhHh/iCSGeGOJJIZ4c4ikhGuKpIZ4W4ukhnhHimSGeFeLZIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbi7SHeEeKdId4V4t0h3hPiIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xHtDvC/E+0N8IMQHQ3woxIdDfCTER0McGuKwEIeHOCLEx0J8PMQnQnwyxKdCfDrEZ0J8NsTnQnw+xBdCfDHEl0J8OcRXQnw1xNdCfD3EN0J8M8S3Qnw7xHdCfDfE90J8P8QPQvwwxI9C/DjET0L8NMTPQvw8xC9C/DLEr0L8OsRvQvw2xO9C/D7EH0L8McSfQvw5xF9C/DXE30L8PcQ/QvwzxL9C/DvEf0L8N8T/QhwZ4qgQR4c4JsSxIY4T4ZAIx41wvAjHj3CCCCeMcKIIJ45wkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCGeOcJYIZ41wtghnj3COCOeMcK4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNcLEIF49wiQiXjHCpCJeOkAiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I14lw3QjXi3D9CDeIcMMIN4pw4wg3iXDTCDeLcPMIt4hwywi3inDrCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICI+K8OgIj4nw2AiPi/D4CE+I8MQIT4rw5AhPidAIT43wtAhPj/CMCM+M8KwIz47wnAjPjfC8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCK+O8JoIr43wugivj/CGCG+M8KYIb47wlghvjfC2CG+P8I4I74zwrgjvjvCeCAcRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hHeG+F9Ed4f4QMRPhjhQxE+HOEjET4a4dAIh0U4PMIRET4W4eMRPhHhkxE+FeHTET4T4bMRPhfh8xG+EOGLEb4U4csRvhLhqxG+FuHrEb4R4ZsRvhXh2xG+E+G7Eb4X4fsRfhDhhxF+FOHHEX4S4acRfhbh5xF+EeGXEX4V4dcRfhPhtxF+F+H3Ef4Q4Y8R/hThzxH+EuGvEf4W4e8R/hHhnxH+FeHfEf4T4b8R/hfhyAhHRTg6wjERjo1wnBiHxDhujOPFOH6ME8Q4YYwTxThxjJPEOGmMk8U4eYxTxDhljFPFOHWM08Q4bYzTxTh9jDPEOGOMM8U4c4yzxDhrjLPFOHuMc8Q4Z4xzxTh3jPPEOG+M88U4f4wLxLhgjAvFuHCMi8S4aIyLxbh4jEvEuGSMS8W4dIzEuEyMy8a4XIzLx7hCjCvGuFKMK8e4SoyrxrhajKvHuEaMa8a4Voxrx7hOjOvGuF6M68e4QYwbxrhRjBvHuEmMm8a4WYybx7hFjFvGuFWMW8e4TYzbxrhdjNvHuEOMO8a4U4w7x7hLjLvGuFuMu8e4R4x7xrhXjHvHuE+M+8a4X4z7x3hAjAfGeFCMB8d4SIyHxnhYjIfHeESMR8Z4VIxHx3hMjMfGeFyMx8d4QownxnhSjCfHeEqMxnhqjKfFeHqMZ8R4ZoxnxXh2jOfEeG6M58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8V4dYzXxHhtjNfFeH2MN8R4Y4w3xXhzjLfEeGuMt8V4e4x3xHhnjHfFeHeM98Q4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GP8d4Y74vx/hgfiPHBGB+K8eEYH4nx0RiHxjgsxuExjojxsRgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYv4zxqxi/jvGbGL+N8bsYv4/xhxh/jPGnGH+O8ZcYf43xtxh/j/GPGP+M8a8Y/47xnxj/jfG/GEfGOCrG0TGOiXFsjOMkOCTBcRMcL8HxE5wgwQkTnCjBiROcJMFJE5wswckTnCLBKROcKsGpE5wmwWkTnC7B6ROcIcEZE5wpwZkTnCXBWROcLcHZE5wjwTkTnCvBuROcJ8F5E5wvwfkTXCDBBRNcKMGFE1wkwUUTXCzBxRNcIsElE1wqwaUTJMFlElw2weUSXD7BFRJcMcGVElw5wVUSXDXB1RJcPcE1ElwzwbUSXDvBdRJcN8H1Elw/wQ0S3DDBjRLcOMFNEtw0wc0S3DzBLRLcMsGtEtw6wW0S3DbB7RLcPsEdEtwxwZ0S3DnBXRLcNcHdEtw9wT0S3DPBvRLcO8F9Etw3wf0S3D/BAxI8MMGDEjw4wUMSPDTBwxI8PMEjEjwywaMSPDrBYxI8NsHjEjw+wRMSPDHBkxI8OcFTEjTBUxM8LcHTEzwjwTMTPCvBsxM8J8FzEzwvwfMTvCDBCxO8KMGLE7wkwUsTvCzByxO8IsErE7wqwasTvCbBaxO8LsHrE7whwRsTvCnBmxO8JcFbE7wtwdsTvCPBOxO8K8G7E7wnwUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYL3Jnhfgvcn+ECCDyb4UIIPJ/hIgo8mODTBYQkOT3BEgo8l+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJPhlgl8l+HWC3yT4bYLfJfh9gj8k+GOCPyX4c4K/JPhrgr8l+HuCfyT4Z4J/Jfh3gv8k+G+C/yU4MhniqARHJzgmwbEJjpPikBTHTXG8FMdPcYIUJ0xxohQnTnGSFCdNcbIUJ09xihSnTHGqFKdOcZoUp01xuhSnT3GGFGdMcaYUZ05xlhRnTXG2FGdPcY4U50xxrhTnTnGeFOdNcb4U509xgRQXTHGhFBdOcZEUF01xsRQXT3GJFJdMcakUl06RFJdJcdkUl0tx+RRXSHHFFFdKceUUV0lx1RRXS3H1FNdIcc0U10px7RTXSXHdFNdLcf0UN0hxwxQ3SnHjFDdJcdMUN0tx8xS3SHHLFLdKcesUt0lx2xS3S3H7FHdIcccUd0px5xR3SXHXFHdLcfcU90hxzxT3SnHvFPdJcd8U90tx/xQPSPHAFA9K8eAUD0nx0BQPS/HwFI9I8cgUj0rx6BSPSfHYFI9L8fgUT0jxxBRPSvHkFE9J0RRPTfG0FE9P8YwUz0zxrBTPTvGcFM9N8bwUz0/xghQvTPGiFC9O8ZIUL03xshQvT/GKFK9M8aoUr07xmhSvTfG6FK9P8YYUb0zxphRvTvGWFG9N8bYUb0/xjhTvTPGuFO9O8Z4UBykGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2Kd6b4n0p3p/iAyk+mOJDKT6c4iMpPpri0BSHpTg8xREpPpbi4yk+keKTKT6V4tMpPpPisyk+l+LzKb6Q4ospvpTiyym+kuKrKb6W4uspvpHimym+leLbKb6T4rspvpfi+yl+kOKHKX6U4scpfpLipyl+luLnKX6R4pcpfpXi1yl+k+K3KX6X4vcp/pDijyn+lOLPKf6S4q8p/pbi7yn+keKfKf6V4t8p/pPivyn+l+LIFEelODrFMSmOTXGcDIdkOG6G42U4foYTZDhhhhNlOHGGk2Q4aYaTZTh5hlNkOGWGU2U4dYbTZDhthtNlOH2GM2Q4Y4YzZThzhrNkOGuGs2U4e4ZzZDhnhnNlOHeG82Q4b4bzZTh/hgtkuGCGC2W4cIaLZLhohotluHiGS2S4ZIZLZbh0hmS4TIbLZrhchstnuEKGK2a4UoYrZ7hKhqtmuFqGq2e4RoZrZrhWhmtnuE6G62a4XobrZ7hBhhtmuFGGG2e4SYabZrhZhptnuEWGW2a4VYZbZ7hNhttmuF2G22e4Q4Y7ZrhThjtnuEuGu2a4W4a7Z7hHhntmuFeGe2e4T4b7ZrhfhvtneECGB2Z4UIYHZ3hIhodmeFiGh2d4RIZHZnhUhkdneEyGx2Z4XIbHZ3hChidmeFKGJ2d4SoZmeGqGp2V4eoZnZHhmhmdleHaG52R4bobnZXh+hhdkeGGGF2V4cYaXZHhphpdleHmGV2R4ZYZXZXh1htdkeG2G12V4fYY3ZHhjhjdleHOGt2R4a4a3ZXh7hndkeGeGd2V4d4b3ZDjIMMgwzDDKMM4wyTDNMMswz7DIsMywyrDOsMmwzbDLsM/w3gzvy/D+DB/I8MEMH8rw4QwfyfDRDIdmOCzD4RmOyPCxDB/P8IkMn8zwqQyfzvCZDJ/N8LkMn8/whQxfzPClDF/O8JUMX83wtQxfz/CNDN/M8K0M387wnQzfzfC9DN/P8IMMP8zwoww/zvCTDD/N8LMMP8/wiwy/zPCrDL/O8JsMv83wuwy/z/CHDH/M8KcMf87wlwx/zfC3DH/P8I8M/8zwrwz/zvCfDP/N8L8MR2Y4KsPRGY7JcGyG4+Q4JMdxcxwvx/FznCDHCXOcKMeJc5wkx0lznCzHyXOcIscpc5wqx6lznCbHaXOcLsfpc5whxxlznCnHmXOcJcdZc5wtx9lznCPHOXOcK8e5c5wnx3lznC/H+XNcIMcFc1wox4VzXCTHRXNcLMfFc1wixyVzXCrHpXMkx2VyXDbH5XJcPscVclwxx5VyXDnHVXJcNcfVclw9xzVyXDPHtXJcO8d1clw3x/VyXD/HDXLcMMeNctw4x01y3DTHzXLcPMctctwyx61y3DrHbXLcNsftctw+xx1y3DHHnXLcOcddctw1x91y3D3HPXLcM8e9ctw7x31y3DfH/XLcP8cDcjwwx4NyPDjHQ3I8NMfDcjw8xyNyPDLHo3I8Osdjcjw2x+NyPD7HE3I8MceTcjw5x1NyNMdTczwtx9NzPCPHM3M8K8ezczwnx3NzPC/H83O8IMcLc7wox4tzvCTHS3O8LMfLc7wixytzvCrHq3O8Jsdrc7wux+tzvCHHG3O8Kcebc7wlx1tzvC3H23O8I8c7c7wrx7tzvCfHQY5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY59jvfmeF+O9+f4QI4P5vhQjg/n+EiOj+Y4NMdhOQ7PcUSOj+X4eI5P5Phkjk/l+HSOz+T4bI7P5fh8ji/k+GKOL+X4co6v5Phqjq/l+HqOb+T4Zo5v5fh2ju/k+G6O7+X4fo4f5Phhjh/l+HGOn+T4aY6f5fh5jl/k+GWOX+X4dY7f5Phtjt/l+H2OP+T4Y44/5fhzjr/k+GuOv+X4e45/5Phnjn/l+HeO/+T4b47/5Tgyx1E5js5xTI5jcxynwCEFjlvgeAWOX+AEBU5Y4EQFTlzgJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBS5a4GIFLl7gEgUuWeBSBS5dIAUuU+CyBS5X4PIFrlDgigWuVODKBa5S4KoFrlbg6gWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmBW5W4OYFblHglgVuVeDWBW5T4LYFblfg9gXuUOCOBe5U4M4F7lLgrgXuVuDuBe5R4J4F7lXg3gXuU+C+Be5X4P4FHlDggQUeVODBBR5S4KEFHlbg4QUeUeCRBR5V4NEFHlPgsQUeV+DxBZ5Q4IkFnlTgyQWeUqAFnlrgaQWeXuAZBZ5Z4FkFnl3gOQWeW+B5BZ5f4AUFXljgRQVeXOAlBV5a4GUFXl7gFQVeWeBVBV5d4DUFXlvgdQVeX+ANBd5Y4E0F3lzgLQXeWuBtBd5e4B0F3lngXQXeXeA9BQ4KDAoMC4wKjAtMCkwLzArMCywKLAusCqwLbApsC+wK7Au8t8D7Cry/wAcKfLDAhwp8uMBHCny0wKEFDitweIEjCnyswMcLfKLAJwt8qsCnC3ymwGcLfK7A5wt8ocAXC3ypwJcLfKXAVwt8rcDXC3yjwDcLfKvAtwt8p8B3C3yvwPcL/KDADwv8qMCPC/ykwE8L/KzAzwv8osAvC/yqwK8L/KbAbwv8rsDvC/yhwB8L/KnAnwv8pcBfC/ytwN8L/KPAPwv8q8C/C/ynwH8L/K/AkQWOKnB0gWMKHFvgOCUOKXHcEscrcfwSJyhxwhInKnHiEicpcdISJytx8hKnKHHKEqcqceoSpylx2hKnK3H6EmcoccYSZypx5hJnKXHWEmcrcfYS5yhxzhLnKnHuEucpcd4S5ytx/hIXKHHBEhcqceESFylx0RIXK3HxEpcocckSlypx6RIpcZkSly1xuRKXL3GFElcscaUSVy5xlRJXLXG1ElcvcY0S1yxxrRLXLnGdEtctcb0S1y9xgxI3LHGjEjcucZMSNy1xsxI3L3GLErcscasSty5xmxK3LXG7ErcvcYcSdyxxpxJ3LnGXEnctcbcSdy9xjxL3LHGvEvcucZ8S9y1xvxL3L/GAEg8s8aASDy7xkBIPLfGwEg8v8YgSjyzxqBKPLvGYEo8t8bgSjy/xhBJPLPGkEk8u8ZQSLfHUEk8r8fQSzyjxzBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEu8q8e4S7ylxUGJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2Jf4r0l3lfi/SU+UOKDJT5U4sMlPlLioyUOLXFYicNLHFHiYyU+XuITJT5Z4lMlPl3iMyU+W+JzJT5f4gslvljiSyW+XOIrJb5a4mslvl7iGyW+WeJbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J/JY4scVSJo0scU+LYEsepcEiF41Y4XoXjVzhBhRNWOFGFE1c4SYWTVjhZhZNXOEWFU1Y4VYVTVzhNhdNWOF2F01c4Q4UzVjhThTNXOEuFs1Y4W4WzVzhHhXNWOFeFc1c4T4XzVjhfhfNXuECFC1a4UIULV7hIhYtWuFiFi1e4RIVLVrhUhUtXSIXLVLhshctVuHyFK1S4YoUrVbhyhatUuGqFq1W4eoVrVLhmhWtVuHaF61S4boXrVbh+hRtUuGGFG1W4cYWbVLhphZtVuHmFW1S4ZYVbVbh1hdtUuG2F21W4fYU7VLhjhTtVuHOFu1S4a4W7Vbh7hXtUuGeFe1W4d4X7VLhvhftVuH+FB1R4YIUHVXhwhYdUeGiFh1V4eIVHVHhkhUdVeHSFx1R4bIXHVXh8hSdUeGKFJ1V4coWnVGiFp1Z4WoWnV3hGhWdWeFaFZ1d4TvX/ezivwvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrK7yqwqsrvKbCayu8rsLrK7yhwhsrvKnCmyu8pcJbK7ytwtsrvKPCOyu8q8K7K7ynwkGFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYX3VnhfhfdX+ECFD1b4UIUPV/hIhY9WOLTCYRUOr3BEhY9V+HiFT1T4ZIVPVfh0hc9U+GyFz1X4fIUvVPhihS9V+HKFr1T4aoWvVfh6hW9U+GaFb1X4doXvVPhuhe9V+H6FH1T4YYUfVfhxhZ9U+GmFn1X4eYVfVPhlhV9V+HWF31T4bYXfVfh9hT9U+GOFP1X4c4W/VPhrhb9V+HuFf1T4Z4V/Vfh3hf9U+G+F/1U4ssJRFY6ucEyFY//nu8YhNY5b43g1jl/jBDVOWONENU5c4yQ1TlrjZDVOXuMUNU5Z41Q1Tl3jNDVOW+N0NU5f4ww1zljjTDXOXOMsNc5a42w1zl7jHDXOWeNcNc5d4zw1zlvjfDXOX+MCNS5Y40I1LlzjIjUuWuNiNS5e4xI1LlnjUjUuXSM1LlPjsjUuV+PyNa5Q44o1rlTjyjWuUuOqNa5W4+o1rlHjmjWuVePaNa5T47o1rlfj+jVuUOOGNW5U48Y1blLjpjVuVuPmNW5R45Y1blXj1jVuU+O2NW5X4/Y17lDjjjXuVOPONe5S46417lbj7jXuUeOeNe5V49417lPjvjXuV+P+NR5Q44E1HlTjwTUeUuOhNR5W4+E1HlHjkTUeVePRNR5T47E1Hlfj8TWeUOOJNZ5U48k1nlKjNZ5a42k1nl7jGTWeWeNZNZ5d4zk1nlvjeTWeX+MFNV5Y40U1XlzjJTVeWuNlNV5e4xU1XlnjVTVeXeM1NV5b43U1Xl/jDTXeWONNNd5c4y013lrjbTXeXuMdNd5Z41013l3jPTUOagxqDGuMaoxrTGpMa8xqzGssaixrrGqsa2xqbGvsauxrvLfG+2q8v8YHanywxodqfLjGR2p8tMahNQ6rcXiNI2p8rMbHa3yixidrfKrGp2t8psZna3yuxudrfKHGF2t8qcaXa3ylxldrfK3G12t8o8Y3a3yrxrdrfKfGd2t8r8b3a/ygxg9r/KjGj2v8pMZPa/ysxs9r/KLGL2v8qsava/ymxm9r/K7G72v8ocYfa/ypxp9r/KXGX2v8rcbfa/yjxj9r/KvGv2v8p8Z/a/yvxpE1jqpxdI1jahxb4zgNDmlw3AbHa3D8BidocMIGJ2pw4gYnaXDSBidrcPIGp2hwygananDqBqdpcNoGp2tw+gZnaHDGBmdqcOYGZ2lw1gZna3D2BudocM4G52pw7gbnaXDeBudrcP4GF2hwwQYXanDhBhdpcNEGF2tw8QaXaHDJBpdqcOkGaXCZBpdtcLkGl29whQZXbHClBlducJUGV21wtQZXb3CNBtdscK0G125wnQbXbXC9BtdvcIMGN2xwowY3bnCTBjdtcLMGN29wiwa3bHCrBrducJsGt21wuwa3b3CHBndscKcGd25wlwZ3bXC3BndvcI8G92xwrwb3bnCf//H/v+nj/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ2e1ODJDZ7SoA2e2uBpDZ7e4BkNntngWQ2e3eA5DZ7b4HkNnt/gBQ1e2OBFDV7c4CUNXtrgZQ1e3uAVDV7Z4FUNXt3gNQ1e2+B1DV7f4A0N3tjgTQ3e3OAtDd7a4G0N3t7gHQ3e2eBdDd7d4D0NDhoMGgwbjBqMG0waTBvMGswbLBosG6warBtsGmwb7BrsG7y3wfsavL/BBxp8sMGHGny4wUcafLTBoQ0Oa3B4gyMafKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8E/G/yrwb8b/KfBfxv8r8GRDY5qcHSDYxoc2+A4LQ5pcdwWx2tx/BYnaHHCFidqceIWJ2lx0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2hxyRaXanHpFmlxmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s8aQWT27xlBZt8dQWT2vx9BbPaPHMFs9q8ewWz2nx3BbPa/H8Fi9o8cIWL2rx4hYvafHSFi9r8fIWr2jxyhavavHqFq9p8doWr2vx+hZvaPHGFm9q8eYWb2nx1hZva/H2Fu9o8c4W72rx7hbvaXHQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt/ivS3e1+L9LT7Q4oMtPtTiwy0+0uKjLQ5tcViLw1sc0eJjLT7e4hMtPtniUy0+3eIzLT7b4nMtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+2eJXLX7d4jctftvidy1+3+IPLf7Y4k8t/tziLy3+2uJvLf7e4h8t/tniXy3+3eI/Lf7b4n8tjmxxVIujWxzT4tgWx+lwSIfjdjheh+N3OEGHE3Y4UYcTdzhJh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHM3c4S4ezdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh0t2uFSHS3dIh8t0uGyHy3W4fIcrdLhihyt1uHKHq3S4aoerdbh6h2t0uGaHa3W4dofrdLhuh+t1uH6HG3S4YYcbdbhxh5t0uGmHm3W4eYdbdLhlh1t1uHWH23S4bYfbdbh9hzt0uGOHO3W4c4e7dLhrh7t1uHuHe3S4Z4d7dbh3h/t0uG+H+3W4f4cHdHhghwd1eHCHh3R4aIeHdXh4h0d0eGSHR3V4dIfHdHhsh8d1eHyHJ3R4YocndXhyh6d0aIendnhah6d3eEaHZ3Z4Vodnd3hOh+d2eF6H53d4QYcXdnhRhxd3eEmHl3Z4WYeXd3hFh1d2eFWHV3d4TYfXdnhdh9d3eEOHN3Z4U4c3d3hLh7d2eFuHt3d4R4d3dnhXh3d3eE+Hgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Du/t8L4O7+/wgQ4f7PChDh/u8JEOH+1waIfDOhze4YgOH+vw8Q6f6PDJDp/q8OkOn+nw2Q6f6/D5Dl/o8MUOX+rw5Q5f6fDVDl/r8PUO3+jwzQ7f6vDtDt/p8N0O3+vw/Q4/6PDDDj/q8OMOP+nw0w4/6/DzDr/o8MsOv+rw6w6/6fDbDr/r8PsOf+jwxw5/6vDnDn/p8NcOf+vw9w7/6PDPDv/q8O8O/+nw3w7/63Bkh6M6HN3hmA7HdjhOj0N6HLfH8Xocv8cJepywx4l6nLjHSXqctMfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1l6nLXH2Xqcvcc5epyzx7l6nLvHeXqct8f5epy/xwV6XLDHhXpcuMdFely0x8V6XLzHJXpcsselely6R3pcpsdle1yux+V7XKHHFXtcqceVe1ylx1V7XK3H1Xtco8c1e1yrx7V7XKfHdXtcr8f1e9ygxw173KjHjXvcpMdNe9ysx8173KLHLXvcqsete9ymx2173K7H7Xvcoccde9ypx5173KXHXXvcrcfde9yjxz173KvHvXvcp8d9e9yvx/17PKDHA3s8qMeDezykx0N7PKzHw3s8oscjezyqx6N7PKbHY3s8rsfjezyhxxN7PKnHk3s8pUd7PLXH03o8vcczejyzx7N6PLvHc3o8t8fzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserery6x2t6vLbH63q8vscberyxx5t6vLnHW3q8tcfbery9xzt6vLPHu3q8u8d7ehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4b4/39Xh/jw/0+GCPD/X4cI+P9Phoj0N7HNbj8B5H9P+PhXPsw7wAFOVWW7ubbds12bZt2/Zk27btnr+NbNu2ubq/e875CvN6ZrAdYDfAfoBPDvCpAT49wGcG+OwAnxvg8wN8YYAvDvClAb48wFcG+OoAXxvg6wN8Y4BvDvCtAb49wHcG+O4A3xvg+wP8YIAfDvCjAX48wE8G+OkAPxvg5wP8YoBfDvCrAX49wG8G+O0Avxvg9wP8YYA/DvCnAf48wF8G+OsAfxvg7wP8Y4B/DvCvAf49wH8G+O8A/xvgyAGOGuDoAY4Z4NgBDglwnADHDXC8AIcGOH6AEwQ4LMDhAY4IcMIAJwpw4gAnCXDSACcLcPIApwhwygCnCnDqAKcJcNoApwtw+gBnCHDGAGcKcOYAZwlw1gBnC3D2AOcIcM4A5wpw7gDnCXDeAOcLcP4AFwhwwQAXCnDhABcJcNEAFwtw8QAJcIkAlwxwqQCXDnCZAJcNcLkAlw9whQBXDHClAFcOcJUAVw1wtQBXD3CNANcMcK0A1w5wnQDXDXC9ANcPcIMANwxwowA3DnCTADcNcLMANw9wiwC3DHCrALcOcJsAtw1wuwC3D3CHAHcMcKcAdw5wlwB3DXC3AHcPcI8A9wxwrwD3DnCfAPcNcL8A9w/wgAAPDPCgAA8O8JAADw3wsAAPD/CIAI8M8KgAjw7wmACPDfC4AI8P8IQADfDEAE8K8OQATwnw1ABPC/D0AM8I8MwAzwrw7ADPCfDcAM8L8PwALwjwwgAvCvDiAC8J8NIALwvw8gCvCPDKAK8K8OoArwnw2gCvC/D6AG8I8MYAbwrw5gBvCfDWAG8L8PYA7wjwzgDvCvDuAO8J8N4A7wvw/gAfCPDBAB8K8OEAHwnw0QAfC/DxAJ8IcBBgEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH+CTAT4V4NMBPhPgswE+F+DzAb4Q4IsBvhTgywG+EuCrAb4W4OsBvhHgmwG+FeDbAb4T4LsBvhfg+wF+EOCHAX4U4McBfhLgpwF+FuDnAX4R4JcBfhXg1wF+E+C3AX4X4PcB/hDgjwH+FODPAf4S4K8B/hbg7wH+EeCfAf4V4N8B/hPgvwH+F+DIAEcFODrAMQGODXBIiOOEOG6I44U4NMTxQ5wgxGEhDg9xRIgThjhRiBOHOEmIk4Y4WYiThzhFiFOGOFWIU4c4TYjThjhdiNOHOEOIM4Y4U4gzhzhLiLOGOFuIs4c4R4hzhjhXiHOHOE+I84Y4X4jzh7hAiAuGuFCIC4e4SIiLhrhYiIuHSIhLhLhkiEuFuHSIy4S47DBcLsTlQ1whxBVDXCnElUNcJcRVQ1wtxNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IURDPDHEk0I8OcRTQjw1xNNCPD3EM0I8M8SzQjw7xHNCPDfE80I8P8QLQrwwxItCvDjES0K8NMTLQrw8xCtCvDLEq0K8OsRrQrw2xOtCvD7EG0K8McSbQrw5xFtCvDXE20K8PcQ7QrwzxLtCvDvEe0K8N8T7Qrw/xAdCfDDEh0J8OMRHQnw0xMdCfDzEJ0IchBiEGIYYhRiHmISYhpiFmIdYhFiGWIVYh9iE2IbYhdiH+GSIT4X4dIjPhPhsiM+F+HyIL4T4YogvhfhyiK+E+GqIr4X4eohvhPhmiG+F+HaI74T4bojvhfh+iB+E+GGIH4X4cYifhPhpiJ+F+HmIX4T4ZYhfhfh1iN+E+G2I34X4fYg/hPhjiD+F+HOIv4T4a4i/hfh7iH+E+GeIf4X4d4j/hPhviP+FODLEUSGODnFMiGNDHBLhOBGOG+F4EQ6NcPwIJ4hwWITDIxwR4YQRThThxBFOEuGkEU4W4eQRThHhlBFOFeHUEU4T4bQRThfh9BHOEOGMEc4U4cwRzhLhrBHOFuHsEc4R4ZwRzhXh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hES4RIRLhnhUhEuHeEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa4Z4VoRrh3hOhGuG+F6Ea4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRGuGJEZ4U4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+G5EZ4X4fkRXhDhhRFeFOHFEV4S4aURXhbh5RFeEeGVEV4V4dURXhPhtRFeF+H1Ed4Q4Y0R3hThzRHeEuGtEd4W4e0R3hHhnRHeFeHdEd4T4b0R3hfh/RE+EOGDET4U4cMRPhLhoxE+FuHjET4R4SDCIMIwwijCOMIkwjTCLMI8wiLCMsIqwjrCJsI2wi7CPsInI3wqwqcjfCbCZyN8LsLnI3whwhcjfCnClyN8JcJXI3wtwtcjfCPCNyN8K8K3I3wnwncjfC/C9yP8IMIPI/wowo8j/CTCTyP8LMLPI/wiwi8j/CrCryP8JsJvI/wuwu8j/CHCHyP8KcKfI/wlwl8j/C3C3yP8I8I/I/wrwr8j/CfCfyP8L8KREY6KcHSEYyIcG+GQGMeJcdwYx4txaIzjxzhBjMNiHB7jiBgnjHGiGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePkRiXiHHJGJeKcekYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYN4lx0xg3i3HzGLcYMnTI/2e5VYxbx7hNjNvGuF2M28e4Q4w7xrhTjDvHuEuMu8a4W4y7x7hHjHvGuFeMe8e4T4z7xrhfjPvHeECMB8Z4UIwHx3hIjIfGeFiMh8d4RIxHxnhUjEfHeEyMx8Z4XIzHx3hCjMZ4YownxXhyPOJ/frmnxnhajKfHeEaMZ8Z4Voxnx3hOjOfGeF6M58d4QYwXxnhRjBfHeEmMl8Z4WYyXx3hFjFfGeFWMV8d4TYzXxnhdjNfHeEOMN8Z4U4w3x3hLjLfGeFuMt8d4R4x3xnhXjHfHeE+M98Z4X4z3x/hAjA/G+FCMD8f4SIyPxvhYjI/H+ESMgxiDGMMYoxjjGJMY0xizGPMYixjLGKsY6xibGNsYuxj7GJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYv4zxqxi/jvGbGL+N8bsYv4/xhxh/jPGnGH+O8ZcYf43xtxh/j/GPGP+M8a8Y/47xnxj/jfG/GEfGOCrG0TGOiXFsjEMSHCfBcRMcL8GhCY6f4AQJDktweIIjEpwwwYkSnDjBSRKcNMHJEpw8wSkSnDLBqRKcOsFpEpw2wekSnD7BGRKcMcGZEpw5wVkSnDXB2RKcPcE5EpwzwbkSnDvBeRKcN8H5Epw/wQUSXDDBhRJcOMFFElw0wcUSXDxBElwiwSUTXCrBpRNcJsFlE1wuweUTXCHBFRNcKcGVE1wlwVUTXC3B1RNcI8E1E1wrwbUTXCfBdRNcL8H1E9wgwQ0T3CjBjRPcJMFNE9wswc0T3CLBLRPcKsGtE9wmwW0T3C7B7RPcIcEdE9wpwZ0T3CXBXRPcLcHdE9wjwT0T3CvBvRPcJ8F9E9wvwf0TPCDBAxM8KMGDEzwkwUMTPCzBwxM8IsEjEzwqwaMTPCbBYxM8LsHjEzwhQRM8McGTEjw5wVMSPDXB0xI8PcEzEjwzwbMSPDvBcxI8N8HzEjw/wQsSvDDBixK8OMFLErw0wcsSvDzBKxK8MsGrErw6wWsSvDbB6xK8PsEbErwxwZsSvDnBWxK8NcHbErw9wTsSvDPBuxK8O8F7Erw3wfsSvD/BBxJ8MMGHEnw4wUcSfDTBxxJ8PMEnEhwkGCQYJhglGCeYJJgmmCWYJ1gkWCZYJVgn2CTYJtgl2Cf4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJPhlgl8l+HWC3yT4bYLfJfh9gj8k+GOCPyX4c4K/JPhrgr8l+HuCfyT4Z4J/Jfh3gv8k+G+C/yU4MsFRCY5OcEyCYxMckuI4KY6b4ngpDk1x/BQnSHFYisNTHJHihClOlOLEKU6S4qQpTpbi5ClOkeKUKU6V4tQpTpPitClOl+L0Kc6Q4owpzpTizCnOkuKsKc6W4uwpzpHinCnOleLcKc6T4rwpzpfi/CkukOKCKS6U4sIpLpLioikuluLiKZLiEikumeJSKS6d4jIpLpvicikun+IKKa6Y4koprpziKimumuJqKa6e4hoprpn+r4OzdorrpLhuiuuluH6KG6S4YYobpbhxipukuGmKm6W4eYpbpLhliluluHWK26S4bYrbpbh9ijukuGOKO6W4c4q7pLhriruluHuKe6S4Z4p7pbh3ivukuG+K+6W4f4oHpHhgigeleHCKh6R4aIqHpXh4ikekeGSKR6V4dIrHpHhsiseleHyKJ6RoiiemeFKKJ6d4SoqnpnhaiqeneEaKZ6Z4Vopnp3hOiuemeF6K56d4QYoXpnhRiheneEmKl6Z4WYqXp3hFilemeFWKV6d4TYrXpnhditeneEOKN6Z4U4o3p3hLiremeFuKt6d4R4p3pnhXineneE+K96Z4X4r3p/hAig+m+FCKD6f4SIqPpvhYio+n+ESKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FJ9M8akUn07xmRSfTfG5FJ9P8YUUX0zxpRRfTvGVFF9N8bUUX0/xjRTfTPGtFN9O8Z0U303xvRTfT/GDFD9M8aMUP07xkxQ/TfGzFD9P8YsUv0zxqxS/TvGbFL9N8bsUv0/xhxR/TPGnFH9O8ZcUf03xtxR/T/GPFP9M8a8U/07xnxT/TfG/FEemOCrF0SmOSXFsikMyHCfDcTMcL8OhGY6f4QQZDstweIYjMpwww4kynDjDSTKcNMPJMpw8wykynDLDqTKcOsNpMpw2w+kynD7DGTKcMcOZMpw5w1kynDXD2TKcPcM5Mpwzw7kynDvDeTKcN8P5Mpw/wwUyXDDDhTJcOMNFMlw0w8UyXDxDhg9xiQyXzHCpDJfOcJkMl81wuQyXz3CFDFfMcKUMV85wlQxXzXC1DFfPcI0M18xwrQzXznCdDNfNcL0M189wgww3zHCjDDfOcJMMN81wsww3z3CLDLfMcKsMt85wmwy3zXC7DLfPcIcMd8xwpwx3znCXDHfNcLcMd89wjwz3zHCvDPfOcJ8M981wvwz3z/CADA/M8KAMD87wkAwPzfCwDA/P8IgMj8zwqAyPzvCYDI/N8LgMj8/whAzN8MQMT8rw5AxPyfDUDE/L8PQMz8jwzAzPyvDsDM/J8NwMz8vw/AwvyPDCDC/K8OIML8nw0gwvy/DyDK/I8MoMr8rw6gyvyfDaDK/L8PoMb8jwxgxvyvDmDG/J8NYMb8vw9gzvyPDODO/K8O4M78nw3gzvy/D+DB/I8MEMH8rw4QwfyfDRDB/L8PEMn8hwkGGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2Gf4ZMZPpXh0xk+k+GzGT6X4fMZvpDhixm+lOHLGb6S4asZvpbh6xm+keGbGb6V4dsZvpPhuxm+l+H7GX6Q4YcZfpThxxl+kuGnGX6W4ecZfpHhlxl+leHXGX6T4bcZfpfh9xn+kOGPGf6U4c8Z/pLhrxn+luHvGf6R4Z8Z/pXh3xn+k+G/Gf6X4cgMR2U4OsMxGY7NcEiO4+Q4bo7j5Tg0x/FznCDHYTkOz3FEjhPmOFGOE+c4SY6T5jhZjpPnOEWOU+Y4VY5T5zhNjtPmOF2O0+c4Q44z5jhTjjPnOEuOs+Y4W46z5zhHjnPmOFeOc+c4T47z5jhfjvPnuECOC+a4UI4L57hIjovmuFiOi+dIjkvkuGSOS+W4dI7L5LhsjsvluHyOK+S4Yo4r5bhyjqvkuGqOq+W4eo5r5LhmjmvluHaO6+S4bo7r5bh+jhvkuGGOG+W4cY6b5LhpjpvluHmOW+S4ZY5b5bh1jtvkuG2O2+W4fY475LhjjjvluHOOu+S4a4675bh7jnvkuGeOe+W4d4775LhvjvvluH+OB+R4YI4H5XhwjofkeGiOh+V4eI5H5HhkjkfleHSOx+R4bI7H5Xh8jifkaI4n5nhSjifneEqOp+Z4Wo6n53hGjmfmeFaOZ+d4To7n5nhejufneEGOF+Z4UY4X53hJjpfmeFmOl+d4RY5X5nhVjlfneE2O1+Z4XY7X53hDjjfmeFOON+d4S4635nhbjrfneEeOd+Z4V45353hPjvfmeF+O9+f4QI4P5vhQjg/n+EiOj+b4WI6P5/hEjoMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+xyfzPGpHJ/O8Zkcn83xuRyfz/GFHF/M8aUcX87xlRxfzfG1HF/P8Y0c38zxrRzfzvGdHN/N8b0c38/xgxw/zPGjHD/O8ZMcP83xsxw/z/GLHL/M8ascv87xmxy/zfG7HL/P8Yccf8zxpxx/zvGXHH/N8bccf8/xjxz/zPGvHP/O8Z8c/83xvxxH5jgqx9E5jslxbI5DChynwHELHK/AoQWOX+AEBQ4rcHiBIwqcsMCJCpy4wEkKnLTAyQqcvMApCpyywKkKnLrAaQqctsDpCpy+wBkKnLHAmQqcucBZCpy1wNkKnL3AOQqcs8C5Cpy7wHkKnLfA+Qqcv8AFClywwIUKXLjARQpctMDFCly8QApcosAlC1yqwKULXKbAZQtcrsDlC1yhwBULXKnAlQtcpcBVC1ytwNULXKPANQtcq8C1C1ynwHULXK/A9QvcoMANC9yowI0L3KTATQvcrMDNC9yiwC0L3KrArQvcpsBtC9yuwO0L3KHAHQvcqcCdC9ylwF0L3K3A3Qvco8A9C9yrwL0L3KfAfQvcr8D9CzygwAMLPKjAgws8pMBDCzyswMMLPKLAIws8qsCjCzymwGMLPK7A4ws8oUALPLHAkwo8ucBTCjy1wNMKPL3AMwo8s8CzCjy7wHMKPLfA8wo8v8ALCrywwIsKvLjASwq8tMDLCry8wCsKvLLAqwq8usBrCry2wOsKvL7AGwq8scCbCry5wFsKvLXA2wq8vcA7CryzwLsKvLvAewq8t8D7Cry/wAcKfLDAhwp8uMBHCny0wMcKfLzAJwocFBgUGBYYFRgXmBSYFpgVmBdYFFgWWBVYF9gU2BbYFdgX+GSBTxX4dIHPFPhsgc8V+HyBLxT4YoEvFfhyga8U+GqBrxX4eoFvFPhmgW8V+HaB7xT4boHvFfh+gR8U+GGBHxX4cYGfFPhpgZ8V+HmBXxT4ZYFfFfh1gd8U+G2B3xX4fYE/FPhjgT8V+HOBvxT4a4G/Ffh7gX8U+GeBfxX4d4H/FPhvgf8VOLLAUQWOLnBMgWMLHFLiOCWOW+J4JQ4tcfwSJyhxWInDSxxR4oQlTlTixCVOUuKkJU5W4uQlTlHilCVOVeLUJU5T4rQlTlfi9CXOUOKMJc5U4swlzlLirCXOVuLsJc5R4pwlzlXi3CXOU+K8Jc5X4vwlLlDigiUuVOLCJS5S4qIlLlbi4iVS4hIlLlniUiUuXeIyJS5b4nIlLl/iCiWuWOJKJa5c4iolrlriaiWuXuIaJa5Z4lolrl3iOiWuW+J6Ja5f4gYlbljiRiVuXOImJW5a4mYlbl7iFiVuWeJWJW5d4jYlblvidiVuX+IOJe5Y4k4l7lziLiXuWuJuJe5e4h4l7lniXiXuXeI+Je5b4n4l7l/iASUeWOJBJR5c4iElHlriYSUeXuIRJR5Z4lElHl3iMSUeW+JxJR5f4gklWuKJJZ5U4sklnlLiqSWeVuLpJZ5R4pklnlXi2SWeU+K5JZ5X4vklXlDihSVeVOLFJV5S4qUlXlbi5SVeUeKVJV5V4tUlXlPitSVeV+L1Jd5Q4o0l3lTizSXeUuKtJd5W4u0l3lHinSXeVeLdJd5T4r0l3lfi/SU+UOKDJT5U4sMlPlLioyU+VuLjJT5R4qDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9L/KrEr0v8psRvS/yuxO9L/KHEH0v8qcSfS/ylxF9L/K3E30v8o8Q/S/yrxL9L/KfEf0v8r8SRJY4qcXSJY0ocW+KQCsepcNwKx6twaIXjVzhBhcMqHF7hiAonrHCiCieucJIKJ61wsgonr3CKCqescKoKp65wmgqnrXC6CqevcIYKZ6xwpgpnrnCWCmetcLYKZ69wjgrnrHCuCueucJ4K561wvgrnr3CBChescKEKF65wkQoXrXCxChevkAqXqHDJCpeqcOkKl6lw2QqXq3D5CleocMUKV6pw5QpXqXDVClercPUK16hwzQrXqnDtCtepcN0K16tw/Qo3qHDDCjeqcOMKN6lw0wo3q3DzCreocMsKt6pw6wq3qXDbCrercPsKd6hwxwp3qnDnCnepcNcKd6tw9wr3qHDPCveqcO8K96lw3wr3q3D/Cg+o8MAKD6rw4AoPqfDQCg+r8PAKj6jwyAqPqvDoCo+p8NgKj6vw+ApPqNAKT6zwpApPrvCUCk+t8LQKT6/wjArPrPCsCs+u8JwKz63wvArPr/CCCi+s8KIKL67wkgovrfCyCi+v8IoKr6zwqgqvrvCaCq+t8LoKr6/whgpvrPCmCm+u8JYKb63wtgpvr/COCu+s8K4K767wngrvrfC+Cu+v8IEKH6zwoQofrvCRCh+t8LEKH6/wiQoHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeFXFX5d4TcVflvhdxV+X+EPFf5Y4U8V/lzhLxX+WuFvFf5e4R8V/lnhXxX+XeE/Ff5b4X8VjqxwVIWjKxxT4dgKh9Q4To3j1jhejUNrHL/GCWocVuPwGkfUOGGNE9U4cY2T1DhpjZPVOHmNU9Q4ZY1T1Th1jdPUOG2N09U4fY0z1DhjjTPVOHONs9Q4a42z1Th7jXPUOGeNc9U4d43z1DhvjfPVOH+NC9S4YI0L1bhwjYvUuGiNi9W4eI3UuESNS9a4VI1L17hMjcvWuFyNy9e4Qo0r1rhSjSvXuEqNq9a4Wo2r17hGjWvWuFaNa9e4To3r1rhejevXuEGNG9a4UY0b17hJjZvWuFmNm9e4RY1b1rhVjVvXuE2N29a4XY3b17hDjTvWuFONO9e4S4271rhbjbvXuEeNe9a4V41717hPjfvWuF+N+9d4QI0H1nhQjQfXeEiNh9Z4WI2H13hEjUfWeFSNR9d4TI3H1nhcjcfXeEKN1nhijSfVeHKNp9R4ao2n1Xh6jWfUeGaNZ9V4do3n1HhujefVeH6NF9R4YY0X1XhxjZfUeGmNl9V4eY1X1HhljVfVeHWN19R4bY3X1Xh9jTfUeGONN9V4c4231HhrjbfVeHuNd9R4Z4131Xh3jffUeG+N99V4f40P1PhgjQ/V+HCNj9T4aI2P1fh4jU/UOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/HJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6nx0xo/q/HzGr+o8csav6rx6xq/qfHbGr+r8fsaf6jxxxp/qvHnGn+p8dcaf6vx9xr/qPHPGv+q8e8a/6nx3xr/q3FkjaNqHF3jmBrH1jikwXEaHLfB8Roc2uD4DU7Q4LAGhzc4osEJG5yowYkbnKTBSRucrMHJG5yiwSkbnKrBqRucpsFpG5yuwekbnKHBGRucqcGZG5ylwVkbnK3B2Ruco8E5G5yrwbkbnKfBeRucr8H5G1ygwQUbXKjBhRtcpMFFG1yswcUbpMElGlyywaUaXLrBZRpctsHlGly+wRUaXLHBlRpcucFVGly1wdUaXL3BNRpcs8G1Gly7wXUaTvm/HN/1G9ygwQ0b3KjBjRvcpMFNG9yswc0b3KLBLRvcqsGtG9ymwW0b3K7B7RvcocEdG9ypwZ0b3KXBXRvcrcHdG9yjwT0b3KvBvRvcp8F9G9yvwf0bPKDBAxs8qMGDGzykwUMbPKzBwxs8osEjGzyqwaMbPKbBYxs8rsHjGzyhQRs8scGTGjy5wVMaPLXB0xo8vcEzGjyzwbMaPLvBcxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsavLPBuxq8u8F7Gry3wfsavL/BBxp8sMGHGny4wUcafLTBxxp8vMEnGhw0GDQYNhg1GDeYNJg2mDWYN1g0WDZYNVg32DTYNtg12Df4ZINPNfh0g880+GyDzzX4fIMvNPhigy81+HKDrzT4aoOvNfh6g280+GaDbzX4doPvNPhug+81+H6DHzT4YYMfNfhxg580+GmDnzX4eYNfNPhlg181+HWD3zT4bYPfNfh9gz80+GODPzX4c4O/NPhrg781+HuDfzT4Z4N/Nfh3g/80+G+D/zU4ssFRDY5ucEyDYxsc0uI4LY7b4ngtDm1x/BYnaHFYi8NbHNHihC1O1OLELU7S4qQtTtbi5C1O0eKULU7V4tQtTtPitC1O1+L0Lc7Q4owtztTizC3O0uKsLc7W4uwtztHinC3O1eLcLc7T4rwtztfi/C0u0OKCLS7U4sItLtLioi0u1uLiLdLiEi0u2eJSLS7d4jItLtvici0u3+IKLa7Y4kotrtziKi2u2uJqLa7e4hotrtniWi2u3eI6La7b4notrt/iBi1u2OJGLW7c4iYtbtriZi1u3uIWLW7Z4lYtbt3iNi1u2+J2LW7f4g4t7tjiTi3u3OIuLe7a4m4t7t7iHi3u2eJeLe7d4j4t7tvifi3u3+IBLR7Y4kEtHtziIS0e2uJhLR7e4hEtHtniUS0e3eIxLR7b4nEtHt/iCS3a4oktntTiyS2e0uKpLZ7W4uktntHimS2e1eLZLZ7T4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKdLd7V4t0t3tPivS3e1+L9LT7Q4oMtPtTiwy0+0uKjLT7W4uMtPtHioMWgxbDFqMW4xaTFtMWsxbzFosWyxarFusWmxbbFrsW+xSdbfKrFp1t8psVnW3yuxedbfKHFF1t8qcWXW3ylxVdbfK3F11t8o8U3W3yrxbdbfKfFd1t8r8X3W/ygxQ9b/KjFj1v8pMVPW/ysxc9b/KLFL1v8qsWvW/ymxW9b/K7F71v8ocUfW/ypxZ9b/KXFX1v8rcXfW/yjxT9b/KvFv1v8p8V/W/yvxZEtjmpxdItjWhzb4pAOx+lw3A7H63Boh+N3OEGHwzoc3uGIDifscKIOJ+5wkg4n7XCyDifvcIoOp+xwqg6n7nCaDqftcLoOp+9whg5n7HCmDmfucJYOZ+1wtg5n73CODufscK4O5+5wng7n7XC+DufvcIEOF+xwoQ4X7nCRDhftcLEOF++QDpfocMkOl+pw6Q6X6XDZDpfrcPkOV+hwxQ5X6nDlDlfpcNUOV+tw9Q7X6HDNDtfqcO0O1+lw3Q7X63D9DjfocMMON+pw4w436XDTDjfrcPMOt+hwyw636nDrDrfpcNsOt+tw+w536HDHDnfqcOcOd+lw1w5363D3DvfocM8O9+pw7w736XDfDvfrcP8OD+jwwA4P6vDgDg/p8NAOD+vw8A6P6PDIDo/q8OgOj+nw2A6P6/D4Dk/o0A5P7PCkDk/u8JQOT+3wtA5P7/CMDs/s8KwOz+7wnA7P7fC8Ds/v8IIOL+zwog4v7vCSDi/t8LIOL+/wig6v7PCqDq/u8JoOr+3wug6v7/CGDm/s8KYOb+7wlg5v7fC2Dm/v8I4O7+zwrg7v7vCeDu/t8L4O7+/wgQ4f7PChDh/u8JEOH+3wsQ4f7/CJDgcdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h0+2eFTHT7d4TMdPtvhcx0+3+ELHb7Y4UsdvtzhKx2+2uFrHb7e4RsdvtnhWx2+3eE7Hb7b4Xsdvt/hBx1+2OFHHX7c4ScdftrhZx1+3uEXHX7Z4Vcdft3hNx1+2+F3HX7f4Q8d/tjhTx3+3OEvHf7a4W8d/t7hHx3+2eFfHf7d4T8d/tvhfx2O7HBUh6M7HNPh2A6H9DhOj+P2OF6PQ3scv8cJehzW4/AeR/Q4YY8T9Thxj5P0OGmPk/U4eY9T9Dhlj1P1OHWP0/Q4bY/T9Th9jzP0OGOPM/U4c4+z9Dhrj7P1OHuPc/Q4Z49z9Th3j/P0OG+P8/U4f48L9Lhgjwv1uHCPi/S4aI+L9bh4j/S4RI9L9rhUj0v3uEyPy/a4XI/L97hCjyv2uFKPK/e4So+r9rhaj6v3uEaPa/a4Vo9r97hOj+v2uF6P6/e4QY8b9rhRjxv3uEmPm/a4WY+b97hFj1v2uFWPW/e4TY/b9rhdj9v3uEOPO/a4U48797hLj7v2uFuPu/e4R4979rhXj3v3uE+P+/a4X4/793hAjwf2eFCPB/d4SI+H9nhYj4f3eESPR/Z4VI9H93hMj8f2eFyPx/d4Qo/2eGKPJ/V4co+n9Hhqj6f1eHqPZ/R4Zo9n9Xh2j+f0eG6P5/V4fo8X9Hhhjxf1eHGPl/R4aY+X9Xh5j1f0eGWPV/V4dY/X9Hhtj9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4/39Xh/jw/0+GCPD/X4cI+P9Phoj4/1+HiPT/Q46PH/BQAA///PjtUy") syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x400000, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 5m11.849214566s ago: executing program 9 (id=2852): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000540)={[{@data_err_abort}, {@data_err_abort}, {@dax}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xf6, 0x47a, &(0x7f0000000680)="$eJzs3M1vFOUfAPDvzLbl7cevFfEFBKmikfjS0vIiBy8aTThoYqIHjKfaFlJZqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzszpSy7ZVu2Xeh+Psl0n2fn6T7Pd2ae2Wfm2d0AetZw9ieJ+F9E/B4Rg3n21gLD+cONaxcn/752cTKJWu2tv5J6uevXLk6WRcv/25ZnarUiv6lJvZfejZioVqfPFfnR+TMfjM6dv/DCzJmJU9Onps+OHzt2+NDegaPjRzoSZxbX9d0fz+7Zdfydy29Mnrj83k9JX+RxR0McnTKcb92mnu50ZV22fUm6vmEX7fvlZrrZkUA3VSIi21399f4/GJXYsrhuMF77rKuNA9ZUrVarLXNWXqgBG1gS3W4B0B3lG312/Vsu6zT0uCdcfTm/AMrivlEs+Zq+SPPEvv6G69tOGo6IEwv/fJUtsUb3IQAAlvouG/8832z8l8bDeWIg+/P/Yg5lKCIeiIgdEfFgROyMiIci6mUfiYhHV1h/4wzJ7eOf9Mqqg2tDNv57qZjbunX8l5ZFhipFbns9/v5YOr1xIPo3nZxJpseWqeP7V3/7otW6peO/bMnqL8eCRTuu9DXcoJuamJ9YTazNXP00Yndfs/iTxTiTiNgVEbtXWcfMs30t1905/mW0ftm21b6OeCbf/wvREH8paTk/Ofbi0fEjo5ujOn1w9ORMdfpg0zp+/vXSm63qX3X8HZpKy/b/1qbH/2L8Q8nmiLnzF07X52vnVl7HpT8+b3lNs8Lj//j24vgfSN6un48GihUfTczPnxuLGEher+dveX785quV+bJ8Fv+B/c37/464uSUei4g9EbE3Ih7PLgqLtj8REU9GxP5l4v/xlafeX3n86zNXmsU/daf9H0v3/8oTldM/fNtQbeX2+DdHRKv9f7ieOlA80875r90G3u32AwAAgPtBWv8MfJKOLKbTdGQk/wz/ztiaVmfn5p87Ofvh2an8s/JD0Z+Wd7ry+8H9SZYfK+4Nl/nxhvyh4r7xl5Ut9fzI5Gx1qtvBQ4/b1qL/Z/6sdLt1wJrrwDwacJ/S/6F36f/QmxL9H3qa/g+9q1n//6Rl6ZFv1rQxwLry/g+9q43+v5A/tB4VAPcn7//Qu/R/6Ektvxuf3tVX/tc98W/xe4b3Sns2fiLSe6IZGz/R1/aPWZy/cLrs13cqXBvMy2XPbGpaposnJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA76LwAA///J9uCF") prlimit64(0x0, 0xe, &(0x7f0000000780)={0x1, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000100}, 0x400c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f00000000c0), 0x5005) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xd, 0x0, 0x4}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x200048c4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) 5m11.665227419s ago: executing program 39 (id=2852): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000540)={[{@data_err_abort}, {@data_err_abort}, {@dax}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xf6, 0x47a, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000780)={0x1, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000100}, 0x400c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f00000000c0), 0x5005) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xd, 0x0, 0x4}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x200048c4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) 5m10.9180805s ago: executing program 7 (id=2856): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lseek(0xffffffffffffffff, 0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x400, 0x0, 0x7, 0x9, 0x8, 0xfffffffc}) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) recvmmsg(r4, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 5m9.025944109s ago: executing program 7 (id=2859): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="160000000000000004ffffff", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) unshare(0x8000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') 5m8.585275286s ago: executing program 7 (id=2860): mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) unlink(&(0x7f0000000180)='./file1\x00') 5m7.749337909s ago: executing program 7 (id=2863): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10000000001) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r6, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xa45) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"1322030de361dd494234901b30ca190b6505c85c0e8c361eb4b7a5331d24bb0d", r7}) prctl$PR_SET_TIMERSLACK(0x1d, 0x3ff00000000) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 5m7.129280348s ago: executing program 40 (id=2863): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10000000001) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r6, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xa45) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"1322030de361dd494234901b30ca190b6505c85c0e8c361eb4b7a5331d24bb0d", r7}) prctl$PR_SET_TIMERSLACK(0x1d, 0x3ff00000000) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 11.654785803s ago: executing program 8 (id=3680): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x10000010}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = epoll_create(0x2) r6 = openat$null(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) dup3(r4, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xc}) syz_clone(0x410c2000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.618647129s ago: executing program 2 (id=3685): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 9.697513272s ago: executing program 3 (id=3690): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 9.012517843s ago: executing program 8 (id=3693): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r1, 0x0, 0x0) 8.849365985s ago: executing program 8 (id=3695): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 8.714473597s ago: executing program 4 (id=3697): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x0, &(0x7f0000000240)}) r1 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) timerfd_settime(r1, 0x2, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xb4, 0x0, 0x2000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.857674041s ago: executing program 2 (id=3698): io_uring_setup(0x5ae4, &(0x7f0000005840)) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000180)={[{@force}, {@nodecompose}, {@uid}, {@gid={'gid', 0x3d, 0xee01}}, {@nobarrier}, {}, {@nls={'nls', 0x3d, 'default'}}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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") socket$unix(0x1, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 7.727473402s ago: executing program 4 (id=3699): syz_open_dev$radio(&(0x7f0000000080), 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r4}, 0x8) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r6, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x103000) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x4, 0x4000, 0x6}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r10 = socket$packet(0x11, 0x2, 0x300) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x24, 0x0, r10, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b6d78c33b1e4f5fe68f73bc6bfc927e15d40e313c0196da0dccb82f0f73013f62347c375784cf895f678fbf0d52bd7d23cbbe2b8343a9c857a523d83a4c3d728cbe81f51a5640708850e2f8ed566", 0x4e}, {&(0x7f00000005c0)="b8c2403e58d4daaf8e92440382561619f15ca62a1489928e8828582885820a50f604e8be379ca6f75336ae7ccdab707989fe0d0277d1eb41c0c50e0b897092596b25b65271d30aa78d0a965e68a9277a5f673fc92355849422b150bece713310b2f86ec25e4a567fcbfab7b168c49e9e27fb7c77c163c624872e76dbf182d90a7df12aac844894a1cf4b52ef0302e648060dc4f29b2831b27cfa93411d7d91b3583d3b53eb796b164770d093edce59cd69d44653894c18be7d637168", 0xbc}], 0x2, &(0x7f00000006c0)=[{0x30, 0x104, 0x81, "9381dfac00a80aa605912fe6a099fe306698b7ed289e6c0dbb5eee94a532995627c1c0"}, {0x2c, 0x10f, 0x65e, "0e14de5101ad9b5b19b504527d0c90568982f66a4962443ab890368f77fe18"}], 0x5c}, 0x0, 0x40090, 0x0, {0x0, r11}}) io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ppoll(&(0x7f00000001c0)=[{r12}], 0x1, 0x0, 0x0, 0x0) 7.659807083s ago: executing program 2 (id=3700): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x4, 0x0, 0x9d, 0x0, 0x6, 0x7, 0x9, 0x5e, 0x5, 0x6, 0xfd, 0xd, 0x0, 0x8650, 0x9, 0x3, 0x27, 0x52, 0x55, '\x00', 0xff, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) munmap(&(0x7f0000f9a000/0x3000)=nil, 0x3000) 7.147217591s ago: executing program 3 (id=3701): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000880)={0x40, 0x13, 0x2, "b49a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000040)={0x20, 0x11}, 0x0, 0x0}) 7.017277933s ago: executing program 4 (id=3702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) creat(0x0, 0x125) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000180)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x4000, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@cache_readahead}, {@loose}], [{@fowner_lt={'fowner<', r4}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@euid_gt={'euid>', r5}}]}}) 6.259665255s ago: executing program 4 (id=3703): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0xfffffffffffffdb5}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40002141) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000320, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) r6 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r6, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) 6.109282347s ago: executing program 2 (id=3704): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x10000010}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = epoll_create(0x2) r6 = openat$null(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) dup3(r4, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xc}) syz_clone(0x410c2000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.053215873s ago: executing program 0 (id=3707): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 4.949865065s ago: executing program 0 (id=3708): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) fsopen(&(0x7f0000000080)='squashfs\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 4.729525609s ago: executing program 8 (id=3709): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x0, &(0x7f0000000240)}) r1 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) timerfd_settime(r1, 0x2, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xb4, 0x0, 0x2000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.789197813s ago: executing program 8 (id=3710): io_uring_setup(0x5ae4, &(0x7f0000005840)) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000180)={[{@force}, {@nodecompose}, {@uid}, {@gid={'gid', 0x3d, 0xee01}}, {@nobarrier}, {}, {@nls={'nls', 0x3d, 'default'}}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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") socket$unix(0x1, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 3.787707923s ago: executing program 3 (id=3711): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0xfffffffffffffdb5}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40002141) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000320, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) r6 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r6, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) accept4(r6, 0x0, 0x0, 0x0) 3.056008524s ago: executing program 2 (id=3712): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 2.200789747s ago: executing program 8 (id=3713): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000001c0)={&(0x7f00000000c0)=[{0x1, 0x3800, 0x0, 0x0}, {0x9, 0x1, 0xff0, &(0x7f0000001280)="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"}], 0x2}) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0x10c, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1.539385567s ago: executing program 0 (id=3714): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.410265969s ago: executing program 4 (id=3715): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x4, 0x0, 0x9d, 0x0, 0x6, 0x7, 0x9, 0x5e, 0x5, 0x6, 0xfd, 0xd, 0x0, 0x8650, 0x9, 0x3, 0x27, 0x52, 0x55, '\x00', 0xff, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) munmap(&(0x7f0000f9a000/0x3000)=nil, 0x3000) 1.33819704s ago: executing program 0 (id=3716): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 1.085271884s ago: executing program 0 (id=3717): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x40040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="4000ba"], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 498.893063ms ago: executing program 3 (id=3718): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x44, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x27}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 389.613705ms ago: executing program 3 (id=3719): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 286.759326ms ago: executing program 2 (id=3720): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) syz_open_dev$vim2m(0x0, 0x0, 0x2) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="c463a1681f00b805000000b9000000000f01c1410f005f0166b819000f00d08fe850cc270966baf80cb8c87f0085ef66bafc0cb8a3000000efc7442400ec000000c74424024c830000ff1c24c4425d9a0f0f090f01b9d7fbaeac", 0x5a}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000040)=0x1) syz_usb_connect(0x0, 0x33, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402010102"], 0x0) mmap$snddsp_status(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r4, 0x82000000) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x6}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 180.270548ms ago: executing program 3 (id=3721): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0xfffffffffffffdb5}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40002141) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000320, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) r6 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r6, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) 1.837351ms ago: executing program 0 (id=3722): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) syz_open_dev$vim2m(0x0, 0x0, 0x2) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="c463a1681f00b805000000b9000000000f01c1410f005f0166b819000f00d08fe850cc270966baf80cb8c87f0085ef66bafc0cb8a3000000efc7442400ec000000c74424024c830000ff1c24c4425d9a0f0f090f01b9d7fbaeac", 0x5a}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000040)=0x1) syz_usb_connect(0x0, 0x33, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402010102"], 0x0) mmap$snddsp_status(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r4, 0x82000000) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x6}) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 0s ago: executing program 4 (id=3723): io_uring_setup(0x5ae4, &(0x7f0000005840)) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000180)={[{@force}, {@nodecompose}, {@uid}, {@gid={'gid', 0x3d, 0xee01}}, {@nobarrier}, {}, {@nls={'nls', 0x3d, 'default'}}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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") socket$unix(0x1, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) kernel console output (not intermixed with test programs): .051295][T19045] syz.4.3043 (19045): drop_caches: 2 [ 1630.082925][T19045] syz.4.3043 (19045): drop_caches: 2 [ 1631.718236][T19070] syz.8.3049 (19070): drop_caches: 2 [ 1631.724978][T19070] syz.8.3049 (19070): drop_caches: 2 [ 1632.075268][T19073] syz.0.3050 (19073): drop_caches: 2 [ 1632.106270][T19073] syz.0.3050 (19073): drop_caches: 2 [ 1632.983499][T19086] syz.0.3053 (19086): drop_caches: 2 [ 1632.990261][T19086] syz.0.3053 (19086): drop_caches: 2 [ 1633.522296][T17156] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1633.631177][T19089] syz.0.3055 (19089): drop_caches: 2 [ 1633.637586][T19089] syz.0.3055 (19089): drop_caches: 2 [ 1633.713487][T19092] loop0: detected capacity change from 0 to 512 [ 1633.853832][T19092] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1633.864038][T17156] usb 4-1: Using ep0 maxpacket: 16 [ 1633.951563][T19092] EXT4-fs (loop0): 1 truncate cleaned up [ 1633.971788][T19092] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1634.022422][T17156] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1634.029291][T17156] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1634.182216][T17156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.026069][T15455] Bluetooth: hci4: command 0x0406 tx timeout [ 1635.718124][T17156] usb 4-1: config 0 descriptor?? [ 1635.797935][T19111] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3060'. [ 1635.893184][T19105] syz.4.3059 (19105): drop_caches: 2 [ 1635.899521][T19105] syz.4.3059 (19105): drop_caches: 2 [ 1636.040950][T19121] syz.0.3061 (19121): drop_caches: 2 [ 1636.052665][T17156] usbhid 4-1:0.0: can't add hid device: -71 [ 1636.053686][T19121] syz.0.3061 (19121): drop_caches: 2 [ 1636.058847][T17156] usbhid: probe of 4-1:0.0 failed with error -71 [ 1636.159987][T17156] usb 4-1: USB disconnect, device number 7 [ 1636.626438][T19129] syz.8.3064 (19129): drop_caches: 2 [ 1636.859429][T19129] syz.8.3064 (19129): drop_caches: 2 [ 1637.343357][T19137] syz.4.3066 (19137): drop_caches: 2 [ 1637.413793][T19137] syz.4.3066 (19137): drop_caches: 2 [ 1637.812820][T19147] syz.3.3067 (19147): drop_caches: 2 [ 1637.819911][T19147] syz.3.3067 (19147): drop_caches: 2 [ 1638.044795][T19150] syz.2.3071 (19150): drop_caches: 2 [ 1638.050794][T19150] syz.2.3071 (19150): drop_caches: 2 [ 1638.873498][T19157] loop2: detected capacity change from 0 to 512 [ 1639.364750][T19162] syz.4.3074 (19162): drop_caches: 2 [ 1639.372932][T19161] syz.3.3073 (19161): drop_caches: 2 [ 1639.380547][T19161] syz.3.3073 (19161): drop_caches: 2 [ 1639.447985][T19162] syz.4.3074 (19162): drop_caches: 2 [ 1639.459654][T19157] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1639.660888][T19157] EXT4-fs (loop2): 1 truncate cleaned up [ 1639.685954][T19157] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1639.695304][T19142] loop0: detected capacity change from 0 to 32768 [ 1639.720183][T19170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3075'. [ 1640.565770][T19142] XFS (loop0): Mounting V5 Filesystem [ 1640.965887][T19142] XFS (loop0): Ending clean mount [ 1640.984352][T19142] XFS (loop0): Quotacheck needed: Please wait. [ 1641.003879][T19189] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1641.235559][T19196] syz.2.3078 (19196): drop_caches: 2 [ 1641.404465][T19196] syz.2.3078 (19196): drop_caches: 2 [ 1641.490333][T19142] XFS (loop0): Quotacheck: Done. [ 1641.661213][T17989] XFS (loop0): Unmounting Filesystem [ 1641.801352][T19206] syz.3.3081 (19206): drop_caches: 2 [ 1641.832456][ T4567] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1641.901200][T19206] syz.3.3081 (19206): drop_caches: 2 [ 1642.112383][ T4567] usb 9-1: Using ep0 maxpacket: 16 [ 1642.143214][T19212] syz.2.3083 (19212): drop_caches: 2 [ 1642.213156][T19212] syz.2.3083 (19212): drop_caches: 2 [ 1642.242705][ T4567] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1642.249759][ T4567] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1642.280935][ T4567] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.349226][ T4567] usb 9-1: config 0 descriptor?? [ 1642.754612][T19216] syz.4.3084 (19216): drop_caches: 2 [ 1643.012351][ T4567] usbhid 9-1:0.0: can't add hid device: -71 [ 1643.018449][ T4567] usbhid: probe of 9-1:0.0 failed with error -71 [ 1643.026767][T19216] syz.4.3084 (19216): drop_caches: 2 [ 1643.066749][ T4567] usb 9-1: USB disconnect, device number 10 [ 1645.102341][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 1646.961136][T19254] syz.3.3092 (19254): drop_caches: 2 [ 1646.986638][T19254] syz.3.3092 (19254): drop_caches: 2 [ 1648.589680][T19264] ALSA: mixer_oss: invalid OSS volume 'P×}VIN' [ 1649.703491][T19273] syz.2.3096 (19273): drop_caches: 2 [ 1649.710305][T19273] syz.2.3096 (19273): drop_caches: 2 [ 1651.031113][T19289] syz.2.3099 (19289): drop_caches: 2 [ 1651.100968][T19294] syz.4.3100 (19294): drop_caches: 2 [ 1651.208637][T19289] syz.2.3099 (19289): drop_caches: 2 [ 1651.217097][T19297] syz.3.3102 (19297): drop_caches: 2 [ 1651.220341][T19294] syz.4.3100 (19294): drop_caches: 2 [ 1651.398233][T19297] syz.3.3102 (19297): drop_caches: 2 [ 1653.006758][T19308] syz.3.3106 (19308): drop_caches: 2 [ 1653.164310][T19308] syz.3.3106 (19308): drop_caches: 2 [ 1653.259945][T19316] syz.8.3107 (19316): drop_caches: 2 [ 1653.350362][T19316] syz.8.3107 (19316): drop_caches: 2 [ 1653.787339][T19322] syz.0.3109 (19322): drop_caches: 2 [ 1653.794208][T19322] syz.0.3109 (19322): drop_caches: 2 [ 1653.934371][T19324] ax25_connect(): syz.0.3110 uses autobind, please contact jreuter@yaina.de [ 1654.024872][T19324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1654.065365][T19324] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1654.091693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1654.247903][T19327] loop2: detected capacity change from 0 to 32768 [ 1654.288417][T19327] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3112 (19327) [ 1654.400888][T19327] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1654.409990][T19327] BTRFS info (device loop2): enabling auto defrag [ 1654.416595][T19327] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1654.425539][T19327] BTRFS info (device loop2): use no compression [ 1654.431914][T19327] BTRFS info (device loop2): force clearing of disk cache [ 1654.439233][T19327] BTRFS info (device loop2): turning on flush-on-commit [ 1654.446406][T19327] BTRFS info (device loop2): max_inline at 4096 [ 1654.452941][T19327] BTRFS info (device loop2): disabling free space tree [ 1654.459931][T19327] BTRFS info (device loop2): has skinny extents [ 1654.872200][T19327] BTRFS info (device loop2): enabling ssd optimizations [ 1654.899885][T19327] BTRFS info (device loop2): clearing free space tree [ 1654.907998][T19327] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1654.918494][T19327] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1655.242217][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 1657.126503][T19350] loop4: detected capacity change from 0 to 32768 [ 1657.391070][T19385] syz.3.3118 (19385): drop_caches: 2 [ 1657.502906][T19385] syz.3.3118 (19385): drop_caches: 2 [ 1657.898736][T19350] XFS (loop4): Mounting V5 Filesystem [ 1657.942869][T19350] XFS (loop4): log mount failed [ 1658.178877][T19417] syz.8.3121 (19417): drop_caches: 2 [ 1658.256188][T19417] syz.8.3121 (19417): drop_caches: 2 [ 1658.418900][T19423] syz.2.3119 (19423): drop_caches: 2 [ 1658.473143][T19423] syz.2.3119 (19423): drop_caches: 2 [ 1660.031322][T19443] loop3: detected capacity change from 0 to 512 [ 1660.160158][T19442] syz.0.3128 (19442): drop_caches: 2 [ 1660.169730][T19442] syz.0.3128 (19442): drop_caches: 2 [ 1660.198091][T19443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1660.362384][T19408] Bluetooth: hci1: command 0x0406 tx timeout [ 1660.834700][T19443] EXT4-fs (loop3): 1 truncate cleaned up [ 1660.840389][T19443] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1661.058512][T19454] ax25_connect(): syz.4.3129 uses autobind, please contact jreuter@yaina.de [ 1661.119977][T19459] ax25_connect(): syz.2.3130 uses autobind, please contact jreuter@yaina.de [ 1661.129918][T19454] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1661.155942][T19459] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1661.289358][T19463] loop3: detected capacity change from 0 to 512 [ 1661.380232][T19463] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1661.407446][T19469] syz.0.3132 (19469): drop_caches: 2 [ 1661.439527][T19463] EXT4-fs (loop3): 1 truncate cleaned up [ 1661.462363][T19463] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1661.592191][T19469] syz.0.3132 (19469): drop_caches: 2 [ 1661.875240][T19479] ax25_connect(): syz.4.3135 uses autobind, please contact jreuter@yaina.de [ 1662.113221][T19479] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1665.812729][T19520] ax25_connect(): syz.4.3143 uses autobind, please contact jreuter@yaina.de [ 1665.833942][T19520] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1666.373817][T19528] syz.4.3144 (19528): drop_caches: 2 [ 1666.462689][T19528] syz.4.3144 (19528): drop_caches: 2 [ 1666.517222][T19514] loop2: detected capacity change from 0 to 32768 [ 1666.664656][T19537] ax25_connect(): syz.0.3145 uses autobind, please contact jreuter@yaina.de [ 1666.750236][T19514] XFS (loop2): Mounting V5 Filesystem [ 1666.829129][T19549] loop3: detected capacity change from 0 to 512 [ 1666.857736][T19548] ax25_connect(): syz.8.3147 uses autobind, please contact jreuter@yaina.de [ 1666.875922][T19548] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1666.901785][T19514] XFS (loop2): Ending clean mount [ 1666.907935][T19549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1666.938451][T19514] XFS (loop2): Quotacheck needed: Please wait. [ 1666.977012][T19549] EXT4-fs (loop3): 1 truncate cleaned up [ 1666.999252][T19549] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1667.045657][T19514] XFS (loop2): Quotacheck: Done. [ 1667.098777][ T26] audit: type=1800 audit(1743342708.400:1970): pid=19514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3152" name="bus" dev="loop2" ino=9292 res=0 errno=0 [ 1667.142598][ T26] audit: type=1804 audit(1743342708.400:1971): pid=19514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3152" name="/newroot/49/file2/bus" dev="loop2" ino=9292 res=1 errno=0 [ 1667.162159][T17932] XFS (loop2): Unmounting Filesystem [ 1667.639600][T19566] afs: Bad value for 'source' [ 1668.712143][T17890] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1668.842306][T19585] loop0: detected capacity change from 0 to 256 [ 1670.072478][T17890] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.296530][T17890] usb 9-1: config 0 has no interfaces? [ 1670.332209][T17890] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1670.363111][T17890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.532575][T17890] usb 9-1: config 0 descriptor?? [ 1670.843314][ T4211] usb 9-1: USB disconnect, device number 11 [ 1670.905070][T19607] syz.3.3156 (19607): drop_caches: 2 [ 1671.030896][T19607] syz.3.3156 (19607): drop_caches: 2 [ 1671.961094][T19613] syz.0.3157 (19613): drop_caches: 2 [ 1672.000401][T19613] syz.0.3157 (19613): drop_caches: 2 [ 1672.069794][T19620] loop8: detected capacity change from 0 to 512 [ 1672.700598][T19625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3162'. [ 1672.779460][T19620] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1672.983282][T19620] EXT4-fs (loop8): 1 truncate cleaned up [ 1673.002233][T19620] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1673.068365][T19599] loop2: detected capacity change from 0 to 32768 [ 1673.141533][T19633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3163'. [ 1673.344154][T19640] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1673.528681][T19646] loop0: detected capacity change from 0 to 256 [ 1673.658359][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.664799][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.967329][T19659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3170'. [ 1677.216468][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3171'. [ 1678.285265][T19679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3174'. [ 1679.399175][T19690] loop3: detected capacity change from 0 to 512 [ 1679.439027][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3179'. [ 1679.506548][T19695] device bridge0 entered promiscuous mode [ 1679.515615][T19689] ax25_connect(): syz.4.3177 uses autobind, please contact jreuter@yaina.de [ 1679.540012][T19695] device macvtap1 entered promiscuous mode [ 1679.551254][T19690] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1679.580046][T19701] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3180'. [ 1679.602901][T19701] device ip6gretap0 entered promiscuous mode [ 1679.609476][T19701] device macvtap1 entered promiscuous mode [ 1679.620515][T19696] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1679.634495][T19690] EXT4-fs (loop3): 1 truncate cleaned up [ 1679.695462][T19690] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1680.715866][T19712] loop0: detected capacity change from 0 to 1024 [ 1680.865845][T19719] ax25_connect(): syz.2.3182 uses autobind, please contact jreuter@yaina.de [ 1681.192369][T19722] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1681.367674][T19731] ax25_connect(): syz.4.3187 uses autobind, please contact jreuter@yaina.de [ 1681.431770][T19728] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3185'. [ 1681.438230][T19731] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1681.505394][ T4274] hfsplus: b-tree write err: -5, ino 4 [ 1681.884259][T19743] loop0: detected capacity change from 0 to 1024 [ 1682.720048][T19745] loop2: detected capacity change from 0 to 1024 [ 1683.022842][ T1235] hfsplus: b-tree write err: -5, ino 4 [ 1683.064791][T19750] loop8: detected capacity change from 0 to 32768 [ 1683.329071][T19750] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.3190 (19750) [ 1683.962897][T19750] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1683.971740][T19750] BTRFS info (device loop8): enabling auto defrag [ 1683.978344][T19750] BTRFS info (device loop8): setting nodatacow, compression disabled [ 1683.986589][T19750] BTRFS info (device loop8): use no compression [ 1683.993037][T19750] BTRFS info (device loop8): force clearing of disk cache [ 1684.000400][T19750] BTRFS info (device loop8): turning on flush-on-commit [ 1684.007563][T19750] BTRFS info (device loop8): max_inline at 4096 [ 1684.014726][T19750] BTRFS info (device loop8): disabling free space tree [ 1684.021718][T19750] BTRFS info (device loop8): has skinny extents [ 1684.085338][ T144] hfsplus: b-tree write err: -5, ino 4 [ 1684.191675][T19759] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1685.395116][T19786] loop0: detected capacity change from 0 to 512 [ 1685.430217][T19782] loop2: detected capacity change from 0 to 1024 [ 1685.449373][T19786] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1685.685642][T19786] EXT4-fs (loop0): 1 truncate cleaned up [ 1685.879496][T19786] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1685.900604][ C0] vkms_vblank_simulate: vblank timer overrun [ 1686.597596][T19750] BTRFS error (device loop8): open_ctree failed: -12 [ 1686.600483][ T4317] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by udevd (4317) [ 1686.736679][T19816] ax25_connect(): syz.8.3201 uses autobind, please contact jreuter@yaina.de [ 1686.749080][ T4386] hfsplus: b-tree write err: -5, ino 4 [ 1686.813200][T19821] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1686.872574][T19820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3200'. [ 1686.890994][T19818] loop4: detected capacity change from 0 to 1024 [ 1686.942661][T19820] device ip6gretap0 entered promiscuous mode [ 1686.968618][T19820] device macvtap1 entered promiscuous mode [ 1687.273763][ T4585] hfsplus: b-tree write err: -5, ino 4 [ 1687.431518][T19831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3214'. [ 1687.484587][T19797] loop3: detected capacity change from 0 to 32768 [ 1687.501706][T19831] device bridge0 entered promiscuous mode [ 1687.608124][T19831] device macvtap2 entered promiscuous mode [ 1687.745578][T19833] loop4: detected capacity change from 0 to 32768 [ 1687.862752][T19833] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1687.871483][T19833] BTRFS info (device loop4): enabling auto defrag [ 1687.878116][T19833] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1687.886433][T19833] BTRFS info (device loop4): use no compression [ 1687.892753][T19833] BTRFS info (device loop4): force clearing of disk cache [ 1687.899922][T19833] BTRFS info (device loop4): turning on flush-on-commit [ 1687.908754][T19833] BTRFS info (device loop4): max_inline at 4096 [ 1687.915115][T19833] BTRFS info (device loop4): disabling free space tree [ 1687.921978][T19833] BTRFS info (device loop4): has skinny extents [ 1687.987880][T19797] XFS (loop3): Mounting V5 Filesystem [ 1688.677552][T19797] XFS (loop3): Ending clean mount [ 1688.696232][T19833] BTRFS info (device loop4): enabling ssd optimizations [ 1688.707958][T19833] BTRFS info (device loop4): clearing free space tree [ 1688.715090][T19833] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1688.725734][T19833] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1688.759796][T19875] loop2: detected capacity change from 0 to 1024 [ 1688.775971][T19797] XFS (loop3): Quotacheck needed: Please wait. [ 1689.408881][T19886] loop8: detected capacity change from 0 to 1024 [ 1690.127734][T19797] XFS (loop3): Quotacheck: Done. [ 1690.398676][T17710] XFS (loop3): Unmounting Filesystem [ 1690.423372][ T4585] hfsplus: b-tree write err: -5, ino 4 [ 1690.445815][ T4585] hfsplus: b-tree write err: -5, ino 4 [ 1690.702945][T19903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3213'. [ 1690.966235][T19911] loop8: detected capacity change from 0 to 1024 [ 1691.445790][T19907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3213'. [ 1691.456096][ T9] hfsplus: b-tree write err: -5, ino 4 [ 1691.804454][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3217'. [ 1691.867504][T19932] device bridge0 entered promiscuous mode [ 1691.873716][T19932] device macvtap2 entered promiscuous mode [ 1692.236077][T19941] loop8: detected capacity change from 0 to 1024 [ 1692.352321][T19950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3221'. [ 1692.385136][T19950] device macvtap3 entered promiscuous mode [ 1693.782742][T11480] hfsplus: b-tree write err: -5, ino 4 [ 1693.834993][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3224'. [ 1693.983844][T19965] device bridge0 entered promiscuous mode [ 1694.002495][T19965] device macvtap1 entered promiscuous mode [ 1694.152710][T19970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'. [ 1694.276295][T19973] loop8: detected capacity change from 0 to 1024 [ 1694.365128][T19975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3227'. [ 1694.446219][T19982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3227'. [ 1694.574102][T11480] hfsplus: b-tree write err: -5, ino 4 [ 1696.024245][T20001] bond1 (unregistering): Released all slaves [ 1696.252195][ T4211] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1696.336942][T20008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3233'. [ 1696.477518][T20016] loop0: detected capacity change from 0 to 512 [ 1696.542209][ T4211] usb 9-1: Using ep0 maxpacket: 16 [ 1696.667919][ T4211] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.704243][T20016] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1696.761139][ T4211] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1697.102803][ T4211] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1697.188675][ T4211] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.227297][T20016] EXT4-fs (loop0): 1 truncate cleaned up [ 1697.318925][T20016] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1697.370003][ T4211] usb 9-1: Product: syz [ 1697.564079][T20027] loop3: detected capacity change from 0 to 32768 [ 1697.571162][ T4211] usb 9-1: Manufacturer: syz [ 1697.575950][ T4211] usb 9-1: SerialNumber: syz [ 1697.636285][T20027] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.3236 (20027) [ 1697.706335][T20027] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1697.715476][T20027] BTRFS info (device loop3): enabling auto defrag [ 1697.721901][T20027] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1697.730110][T20027] BTRFS info (device loop3): use no compression [ 1697.736973][T20027] BTRFS info (device loop3): force clearing of disk cache [ 1697.744129][T20027] BTRFS info (device loop3): turning on flush-on-commit [ 1697.751124][T20027] BTRFS info (device loop3): max_inline at 4096 [ 1697.757475][T20027] BTRFS info (device loop3): disabling free space tree [ 1697.764375][T20027] BTRFS info (device loop3): has skinny extents [ 1697.902424][ T4211] usb 9-1: 0:2 : does not exist [ 1698.058441][ T4211] usb 9-1: USB disconnect, device number 12 [ 1698.072432][T20027] BTRFS info (device loop3): enabling ssd optimizations [ 1698.080845][T20027] BTRFS info (device loop3): clearing free space tree [ 1698.087875][T20027] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1698.097620][T20027] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1698.995548][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1699.525986][ T26] audit: type=1326 audit(1743342740.830:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20089 comm="syz.2.3244" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff487e8169 code=0x0 [ 1699.920416][T20105] kvm [20104]: vcpu0, guest rIP: 0x1a3 disabled perfctr wrmsr: 0xc1 data 0x8000 [ 1700.111997][T17156] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1700.382392][T17156] usb 9-1: Using ep0 maxpacket: 16 [ 1700.512672][T17156] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.626520][T17156] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1700.992757][T17156] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1701.046814][T17156] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.102015][T17156] usb 9-1: Product: syz [ 1701.112357][T17156] usb 9-1: Manufacturer: syz [ 1701.126815][T20131] loop2: detected capacity change from 0 to 512 [ 1701.136963][T17156] usb 9-1: SerialNumber: syz [ 1701.193467][T20131] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1701.221885][T20137] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3251'. [ 1701.286633][T20131] EXT4-fs (loop2): 1 truncate cleaned up [ 1701.304701][T20131] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1701.552544][T17156] usb 9-1: 0:2 : does not exist [ 1701.620048][T17156] usb 9-1: USB disconnect, device number 13 [ 1701.934671][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1702.129547][T20163] loop2: detected capacity change from 0 to 32768 [ 1702.172285][ T4157] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1702.267122][T20163] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3253 (20163) [ 1702.450939][T20163] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1702.459718][T20163] BTRFS info (device loop2): enabling auto defrag [ 1702.466243][T20163] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1702.474507][T20163] BTRFS info (device loop2): use no compression [ 1702.474558][ T4157] usb 4-1: Using ep0 maxpacket: 16 [ 1702.480764][T20163] BTRFS info (device loop2): force clearing of disk cache [ 1702.480824][T20163] BTRFS info (device loop2): turning on flush-on-commit [ 1702.480871][T20163] BTRFS info (device loop2): max_inline at 4096 [ 1702.506387][T20163] BTRFS info (device loop2): disabling free space tree [ 1702.513293][T20163] BTRFS info (device loop2): has skinny extents [ 1702.622731][ T4157] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.643681][ T4157] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1702.803898][T20163] BTRFS info (device loop2): enabling ssd optimizations [ 1702.812236][T20163] BTRFS info (device loop2): clearing free space tree [ 1702.819125][T20163] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1702.829585][T20163] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1702.882494][ T4157] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1702.912216][ T4157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.930604][ T4157] usb 4-1: Product: syz [ 1702.935223][ T4157] usb 4-1: Manufacturer: syz [ 1702.939955][ T4157] usb 4-1: SerialNumber: syz [ 1702.992262][T17156] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1703.190561][T20221] netlink: 'syz.4.3261': attribute type 1 has an invalid length. [ 1703.790996][T20227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1703.825665][T20227] bond1: (slave bond2): making interface the new active one [ 1703.857831][T20227] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1703.887289][T20221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3261'. [ 1703.960160][T20221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1703.997181][ T4157] usb 4-1: 0:2 : does not exist [ 1704.091961][ T4157] usb 4-1: USB disconnect, device number 8 [ 1704.169903][T17156] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.170265][T20237] loop4: detected capacity change from 0 to 512 [ 1704.238053][T17156] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1704.323460][T20237] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1704.393677][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1704.437090][T20243] netlink: 'syz.3.3265': attribute type 1 has an invalid length. [ 1704.448438][T20237] EXT4-fs (loop4): 1 truncate cleaned up [ 1704.452747][T17156] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1704.465151][T17156] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.483618][T20237] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1704.492143][T17156] usb 9-1: Product: syz [ 1704.509609][T17156] usb 9-1: Manufacturer: syz [ 1704.514493][T17156] usb 9-1: SerialNumber: syz [ 1704.681143][T20249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1704.707523][T20249] bond1: (slave bond2): making interface the new active one [ 1704.722802][T20249] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1704.744959][T20243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3265'. [ 1704.759582][T20243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1704.770039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1704.795559][T20199] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1705.037730][ T26] audit: type=1326 audit(1743342746.340:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20268 comm="syz.3.3267" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe514cbb169 code=0x0 [ 1705.470206][T20199] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1705.702546][T17156] cdc_mbim 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1705.713776][T17156] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1705.740822][T17156] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 1705.917324][T17156] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 1706.061861][T17156] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 1706.104038][T17156] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 42:42:42:42:42:42 [ 1706.175865][T17156] usb 9-1: USB disconnect, device number 14 [ 1706.187036][T17156] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 1706.442256][ T4244] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1706.812449][ T4244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.839359][ T4244] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1706.887432][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.943315][ T4244] usb 4-1: config 0 descriptor?? [ 1707.004461][ T4244] pwc: Askey VC010 type 2 USB webcam detected. [ 1707.214196][ T4244] pwc: send_video_command error -71 [ 1707.219467][ T4244] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1707.236706][ T4244] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 1707.272367][ T4244] usb 4-1: USB disconnect, device number 9 [ 1707.832288][ T4244] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1708.202384][ T4244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.232963][ T4244] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1708.263283][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.303097][ T4244] usb 4-1: config 0 descriptor?? [ 1708.362256][ T4387] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1708.370658][ T4244] pwc: Askey VC010 type 2 USB webcam detected. [ 1708.772267][ T4387] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.792252][ T4244] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1708.799102][ T4387] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1708.799137][ T4387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.810208][ T4387] usb 5-1: config 0 descriptor?? [ 1708.882196][ T4244] pwc: recv_control_msg error -32 req 02 val 2700 [ 1708.884030][ T4387] pwc: Askey VC010 type 2 USB webcam detected. [ 1708.912285][ T4157] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1708.922465][ T4244] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1708.962224][ T4244] pwc: recv_control_msg error -32 req 04 val 1000 [ 1709.002428][ T4244] pwc: recv_control_msg error -32 req 04 val 1300 [ 1709.045443][ T4244] pwc: recv_control_msg error -32 req 04 val 1400 [ 1709.082214][ T4244] pwc: recv_control_msg error -32 req 02 val 2000 [ 1709.082406][ T4387] pwc: send_video_command error -71 [ 1709.104337][ T4387] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1709.118893][ T4387] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 1709.122477][ T4244] pwc: recv_control_msg error -32 req 02 val 2100 [ 1709.139766][ T4387] usb 5-1: USB disconnect, device number 6 [ 1709.182347][ T4244] pwc: recv_control_msg error -32 req 04 val 1500 [ 1709.192284][ T4157] usb 3-1: Using ep0 maxpacket: 16 [ 1709.232367][ T4244] pwc: recv_control_msg error -32 req 02 val 2500 [ 1709.333035][ T4157] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.361592][ T4157] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1709.502407][ T4244] pwc: recv_control_msg error -32 req 02 val 2600 [ 1709.567688][ T4244] pwc: recv_control_msg error -32 req 02 val 2900 [ 1709.582584][ T4157] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1709.592373][ T4157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.600547][ T4157] usb 3-1: Product: syz [ 1709.605889][ T4157] usb 3-1: Manufacturer: syz [ 1709.610586][ T4157] usb 3-1: SerialNumber: syz [ 1709.692287][ T4570] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1709.769326][ T4387] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1709.832258][ T4244] pwc: recv_control_msg error -71 req 04 val 1100 [ 1709.852407][ T4244] pwc: recv_control_msg error -71 req 04 val 1200 [ 1709.871216][ T4244] pwc: Registered as video103. [ 1709.882758][ T4244] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 1709.948088][ T4244] usb 4-1: USB disconnect, device number 10 [ 1709.984209][ T4157] usb 3-1: 0:2 : does not exist [ 1710.010199][ T4157] usb 3-1: USB disconnect, device number 7 [ 1710.072627][ T4570] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.102480][ T4570] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1710.115657][ T4570] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.127446][ T4570] usb 9-1: config 0 descriptor?? [ 1710.184755][ T4570] pwc: Askey VC010 type 2 USB webcam detected. [ 1710.191253][ T4387] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.210884][ T4387] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1710.228309][ T4387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.248605][ T4387] usb 5-1: config 0 descriptor?? [ 1710.299716][ T4387] pwc: Askey VC010 type 2 USB webcam detected. [ 1710.402350][ T4570] pwc: send_video_command error -71 [ 1710.407696][ T4570] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1710.416171][ T4570] Philips webcam: probe of 9-1:0.0 failed with error -71 [ 1710.443872][ T4570] usb 9-1: USB disconnect, device number 15 [ 1710.712460][ T4387] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1710.752305][ T4387] pwc: recv_control_msg error -32 req 02 val 2700 [ 1710.799784][ T4387] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1710.852394][ T4387] pwc: recv_control_msg error -32 req 04 val 1000 [ 1710.892300][ T4387] pwc: recv_control_msg error -32 req 04 val 1300 [ 1710.942400][ T4387] pwc: recv_control_msg error -32 req 04 val 1400 [ 1710.982280][ T4387] pwc: recv_control_msg error -32 req 02 val 2000 [ 1711.032463][ T4387] pwc: recv_control_msg error -32 req 02 val 2100 [ 1711.039079][ T4570] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1711.092452][ T4387] pwc: recv_control_msg error -32 req 04 val 1500 [ 1711.132348][ T4387] pwc: recv_control_msg error -32 req 02 val 2500 [ 1711.392484][ T4387] pwc: recv_control_msg error -32 req 02 val 2600 [ 1711.443074][ T4387] pwc: recv_control_msg error -32 req 02 val 2900 [ 1711.462638][ T4570] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.483109][ T4570] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1711.509317][ T4570] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.535668][ T4570] usb 9-1: config 0 descriptor?? [ 1711.594773][ T4570] pwc: Askey VC010 type 2 USB webcam detected. [ 1711.702262][ T4387] pwc: recv_control_msg error -71 req 04 val 1100 [ 1711.732674][ T4387] pwc: recv_control_msg error -71 req 04 val 1200 [ 1711.757111][ T4387] pwc: Registered as video103. [ 1711.775951][ T4387] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 1711.826474][ T4387] usb 5-1: USB disconnect, device number 7 [ 1712.025781][ T4570] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1712.096753][ T4570] pwc: recv_control_msg error -32 req 02 val 2700 [ 1712.112211][ T4244] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1712.152334][ T4570] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1712.199872][ T4570] pwc: recv_control_msg error -32 req 04 val 1000 [ 1712.252395][ T4570] pwc: recv_control_msg error -32 req 04 val 1300 [ 1712.312471][ T4570] pwc: recv_control_msg error -32 req 04 val 1400 [ 1712.360733][ T4570] pwc: recv_control_msg error -32 req 02 val 2000 [ 1712.412449][ T4570] pwc: recv_control_msg error -32 req 02 val 2100 [ 1712.479354][ T4570] pwc: recv_control_msg error -32 req 04 val 1500 [ 1712.482437][ T4244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.506636][ T4244] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1712.516311][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.533482][ T4570] pwc: recv_control_msg error -32 req 02 val 2500 [ 1712.539361][ T4244] usb 4-1: config 0 descriptor?? [ 1712.582539][ T4570] pwc: recv_control_msg error -32 req 02 val 2400 [ 1712.594579][ T4244] pwc: Askey VC010 type 2 USB webcam detected. [ 1712.600991][ T4278] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1712.632312][ T4570] pwc: recv_control_msg error -32 req 02 val 2600 [ 1712.672505][ T4570] pwc: recv_control_msg error -32 req 02 val 2900 [ 1712.812256][ T4244] pwc: send_video_command error -71 [ 1712.818057][ T4244] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1712.832273][ T4244] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 1712.842373][ T4278] usb 5-1: Using ep0 maxpacket: 16 [ 1712.852600][ T4244] usb 4-1: USB disconnect, device number 11 [ 1712.932393][ T4570] pwc: recv_control_msg error -71 req 04 val 1100 [ 1712.962401][ T4278] usb 5-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 1712.972308][ T4570] pwc: recv_control_msg error -71 req 04 val 1200 [ 1712.976658][T20518] kvm: vcpu 0: requested 176 ns lapic timer period limited to 200000 ns [ 1712.993811][ T4278] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1712.999179][ T4570] pwc: Registered as video103. [ 1713.020026][ T4570] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input29 [ 1713.085620][ T4570] usb 9-1: USB disconnect, device number 16 [ 1713.172466][ T4278] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1713.191821][ T4278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.214408][ T4278] usb 5-1: Product: syz [ 1713.218612][ T4278] usb 5-1: Manufacturer: syz [ 1713.228618][ T4278] usb 5-1: SerialNumber: syz [ 1713.432232][ T4244] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1713.572449][ T4278] usb 5-1: 0:2 : does not exist [ 1713.644703][ T4278] usb 5-1: USB disconnect, device number 8 [ 1713.702297][ T4570] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1713.710386][T20548] kvm: vcpu 0: requested 176 ns lapic timer period limited to 200000 ns [ 1713.792320][ T4244] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.823596][ T4244] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1713.839390][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.863035][ T4244] usb 4-1: config 0 descriptor?? [ 1713.873069][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1713.924527][ T4244] pwc: Askey VC010 type 2 USB webcam detected. [ 1714.092700][ T4570] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.112323][ T4570] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1714.126120][ T4570] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.140657][ T4570] usb 3-1: config 0 descriptor?? [ 1714.214994][ T4570] pwc: Askey VC010 type 2 USB webcam detected. [ 1714.362314][ T4244] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1714.402306][ T4244] pwc: recv_control_msg error -32 req 02 val 2700 [ 1714.432295][ T4570] pwc: send_video_command error -71 [ 1714.437743][ T4570] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1714.467869][ T4570] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1714.472363][ T4244] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1714.505996][ T4570] usb 3-1: USB disconnect, device number 8 [ 1714.537811][ T4244] pwc: recv_control_msg error -32 req 04 val 1000 [ 1714.582313][ T4244] pwc: recv_control_msg error -32 req 04 val 1300 [ 1714.632255][ T4244] pwc: recv_control_msg error -32 req 04 val 1400 [ 1714.672233][ T4244] pwc: recv_control_msg error -32 req 02 val 2000 [ 1714.712537][ T4244] pwc: recv_control_msg error -32 req 02 val 2100 [ 1714.752307][ T4244] pwc: recv_control_msg error -32 req 04 val 1500 [ 1714.802347][ T4244] pwc: recv_control_msg error -32 req 02 val 2500 [ 1714.842252][ T4244] pwc: recv_control_msg error -32 req 02 val 2400 [ 1715.054508][ T4570] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1715.062239][ T4278] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1715.102271][ T4244] pwc: recv_control_msg error -32 req 02 val 2900 [ 1715.215820][ T26] audit: type=1326 audit(1743342756.520:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20608 comm="syz.0.3311" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f835220d169 code=0x0 [ 1715.362383][ T4244] pwc: recv_control_msg error -71 req 04 val 1100 [ 1715.382640][ T4244] pwc: recv_control_msg error -71 req 04 val 1200 [ 1715.396691][ T4244] pwc: Registered as video103. [ 1715.404138][ T4244] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 1715.442293][ T4278] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.458361][ T4244] usb 4-1: USB disconnect, device number 12 [ 1715.470914][ T4278] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1715.472633][ T4570] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.503336][ T4570] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1715.533720][ T4570] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.580827][ T4570] usb 3-1: config 0 descriptor?? [ 1715.642138][ T4570] pwc: Askey VC010 type 2 USB webcam detected. [ 1715.652369][ T4278] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1715.682037][ T4278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.700995][ T4278] usb 5-1: Product: syz [ 1715.705673][ T4278] usb 5-1: Manufacturer: syz [ 1715.710316][ T4278] usb 5-1: SerialNumber: syz [ 1715.976892][T20595] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1716.062267][ T4570] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1716.122459][ T4570] pwc: recv_control_msg error -32 req 02 val 2700 [ 1716.165723][ T4570] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1716.222267][ T4570] pwc: recv_control_msg error -32 req 04 val 1000 [ 1716.284981][T20642] lo speed is unknown, defaulting to 1000 [ 1716.290186][ T4570] pwc: recv_control_msg error -32 req 04 val 1300 [ 1716.332334][ T4570] pwc: recv_control_msg error -32 req 04 val 1400 [ 1716.366713][T16467] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1716.392258][ T4570] pwc: recv_control_msg error -32 req 02 val 2000 [ 1716.441837][T20642] lo speed is unknown, defaulting to 1000 [ 1716.452518][ T4570] pwc: recv_control_msg error -32 req 02 val 2100 [ 1716.504402][ T4570] pwc: recv_control_msg error -32 req 04 val 1500 [ 1716.542375][ T4570] pwc: recv_control_msg error -32 req 02 val 2500 [ 1716.662378][T16467] usb 4-1: Using ep0 maxpacket: 32 [ 1716.669824][T20595] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1716.812303][ T4570] pwc: recv_control_msg error -32 req 02 val 2600 [ 1716.819143][T16467] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1716.832979][T16467] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1716.841697][T16467] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1716.853216][T16467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1716.863285][ T4570] pwc: recv_control_msg error -32 req 02 val 2900 [ 1716.871339][T16467] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1716.881196][T16467] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1716.896519][T16467] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1716.902521][ T4278] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1716.905829][T16467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.921140][ T4278] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1716.923448][T16467] usb 4-1: config 0 descriptor?? [ 1716.939773][ T4278] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 1717.124410][ T4278] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 1717.142700][ T4570] pwc: recv_control_msg error -71 req 04 val 1100 [ 1717.143196][ T4278] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 1717.176096][ T4570] pwc: recv_control_msg error -71 req 04 val 1200 [ 1717.184622][ T4278] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42 [ 1717.197412][ T4570] pwc: Registered as video103. [ 1717.208398][ T4278] usb 5-1: USB disconnect, device number 9 [ 1717.219509][T16467] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1717.243922][ T4570] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 1717.249113][ T4278] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 1717.286050][T16467] usb 4-1: USB disconnect, device number 13 [ 1717.312599][ T4570] usb 3-1: USB disconnect, device number 9 [ 1717.348787][T16467] usblp1: removed [ 1717.682003][T20702] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3315'. [ 1717.839751][T20706] loop4: detected capacity change from 0 to 1024 [ 1717.852543][T16467] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1717.867897][T20702] team0 (unregistering): Port device team_slave_0 removed [ 1717.929726][T20702] team0 (unregistering): Port device team_slave_1 removed [ 1717.975076][ T9] hfsplus: b-tree write err: -5, ino 4 [ 1718.042277][ T4244] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1718.120818][T16467] usb 4-1: Using ep0 maxpacket: 32 [ 1718.263768][T16467] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1718.282304][T16467] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1718.295520][T16467] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1718.318416][T16467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1718.340042][T16467] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1718.367330][T16467] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1718.395874][T16467] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1718.415638][T16467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.429259][ T4244] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.448065][T16467] usb 4-1: config 0 descriptor?? [ 1718.472150][ T4244] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1718.481390][ T4244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.504194][ T4244] usb 3-1: config 0 descriptor?? [ 1718.546858][ T4244] pwc: Askey VC010 type 2 USB webcam detected. [ 1718.676093][ T26] audit: type=1326 audit(1743342759.980:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20736 comm="syz.4.3322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb83306e169 code=0x0 [ 1718.727278][T16467] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1718.752189][ T4244] pwc: send_video_command error -71 [ 1718.757426][ T4244] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1718.785428][ T4244] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1718.823738][ T4244] usb 3-1: USB disconnect, device number 10 [ 1718.997535][T16467] usb 4-1: USB disconnect, device number 14 [ 1719.002235][ C0] usblp0: nonzero read bulk status received: -71 [ 1719.013743][T20634] usblp0: error -71 reading from printer [ 1719.132284][ T4278] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1719.372297][ T4244] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1719.493017][ T4278] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.516677][ T4278] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1719.548260][ T4278] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.584159][ T4278] usb 9-1: config 0 descriptor?? [ 1719.626086][ T4278] pwc: Askey VC010 type 2 USB webcam detected. [ 1719.755755][ T4244] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.779611][ T4244] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1719.808007][ T4244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.832324][ T4278] pwc: send_video_command error -71 [ 1719.837773][ T4278] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1719.871239][ T4244] usb 3-1: config 0 descriptor?? [ 1719.882593][ T4278] Philips webcam: probe of 9-1:0.0 failed with error -71 [ 1719.935195][ T4244] pwc: Askey VC010 type 2 USB webcam detected. [ 1719.947969][ T4278] usb 9-1: USB disconnect, device number 17 [ 1720.250519][T20630] usblp0: removed [ 1720.350740][T20774] mmap: syz.4.3325 (20774) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 1720.385800][ T4244] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1720.392640][ T4278] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1720.407126][T20780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3325'. [ 1720.462265][ T4244] pwc: recv_control_msg error -32 req 02 val 2700 [ 1720.513743][ T4244] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1720.566212][ T4244] pwc: recv_control_msg error -32 req 04 val 1000 [ 1720.612315][ T4244] pwc: recv_control_msg error -32 req 04 val 1300 [ 1720.662381][ T4244] pwc: recv_control_msg error -32 req 04 val 1400 [ 1720.665049][T20780] team0 (unregistering): Port device team_slave_0 removed [ 1720.712525][ T4244] pwc: recv_control_msg error -32 req 02 val 2000 [ 1720.727576][T20780] team0 (unregistering): Port device team_slave_1 removed [ 1720.752393][ T4278] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.763074][ T4244] pwc: recv_control_msg error -32 req 02 val 2100 [ 1720.781611][ T4278] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1720.801120][ T4278] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.809404][ T4244] pwc: recv_control_msg error -32 req 04 val 1500 [ 1720.834844][ T4278] usb 9-1: config 0 descriptor?? [ 1720.852348][ T4244] pwc: recv_control_msg error -32 req 02 val 2500 [ 1720.890466][ T4278] pwc: Askey VC010 type 2 USB webcam detected. [ 1720.897789][T20784] lo speed is unknown, defaulting to 1000 [ 1721.112351][ T4244] pwc: recv_control_msg error -32 req 02 val 2600 [ 1721.152204][ T4244] pwc: recv_control_msg error -32 req 02 val 2900 [ 1721.205311][T20784] lo speed is unknown, defaulting to 1000 [ 1721.326592][ T4278] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1721.372347][ T4278] pwc: recv_control_msg error -32 req 02 val 2700 [ 1721.412284][ T4244] pwc: recv_control_msg error -71 req 04 val 1100 [ 1721.418882][ T4278] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1721.442358][ T4244] pwc: recv_control_msg error -71 req 04 val 1200 [ 1721.453142][ T4244] pwc: Registered as video103. [ 1721.462254][ T4278] pwc: recv_control_msg error -32 req 04 val 1000 [ 1721.481097][ T4244] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 1721.502344][ T4278] pwc: recv_control_msg error -32 req 04 val 1300 [ 1721.539952][ T4244] usb 3-1: USB disconnect, device number 11 [ 1721.546514][ T4278] pwc: recv_control_msg error -32 req 04 val 1400 [ 1721.595311][ T4278] pwc: recv_control_msg error -32 req 02 val 2000 [ 1721.652290][ T4278] pwc: recv_control_msg error -32 req 02 val 2100 [ 1721.692284][ T4278] pwc: recv_control_msg error -32 req 04 val 1500 [ 1721.732209][ T4278] pwc: recv_control_msg error -32 req 02 val 2500 [ 1721.772358][ T4278] pwc: recv_control_msg error -32 req 02 val 2400 [ 1722.032464][ T4278] pwc: recv_control_msg error -71 req 02 val 2900 [ 1722.055400][T20828] loop2: detected capacity change from 0 to 1024 [ 1722.068405][ T4278] pwc: recv_control_msg error -71 req 02 val 2800 [ 1722.092426][ T4278] pwc: recv_control_msg error -71 req 04 val 1100 [ 1722.123681][ T4278] pwc: recv_control_msg error -71 req 04 val 1200 [ 1722.145098][ T4278] pwc: Registered as video103. [ 1722.156085][ T4278] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input33 [ 1722.179125][ T4278] usb 9-1: USB disconnect, device number 18 [ 1722.272416][ T4274] hfsplus: b-tree write err: -5, ino 4 [ 1722.282507][T16467] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1722.475697][T20842] kvm: vcpu 0: requested 176 ns lapic timer period limited to 200000 ns [ 1722.673484][T20853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3332'. [ 1722.692413][T16467] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.752304][T16467] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1722.864817][T20853] team0 (unregistering): Port device team_slave_0 removed [ 1722.951197][T20853] team0 (unregistering): Port device team_slave_1 removed [ 1723.024773][T16467] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1723.045642][T16467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.099071][T16467] usb 4-1: Product: syz [ 1723.129434][T16467] usb 4-1: Manufacturer: syz [ 1723.162974][T16467] usb 4-1: SerialNumber: syz [ 1723.362609][ T26] audit: type=1326 audit(1743342764.670:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20869 comm="syz.0.3335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f835220d169 code=0x0 [ 1723.492243][T20825] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1723.618828][T20879] kvm [20877]: vcpu0, guest rIP: 0x1a3 disabled perfctr wrmsr: 0xc2 data 0x8000 [ 1724.012310][T20862] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3333'. [ 1724.146583][T20862] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3333'. [ 1724.164325][T20825] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1724.422439][T16467] cdc_mbim 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1724.432546][T16467] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1724.460176][T16467] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 1724.637646][T16467] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 1724.651197][T16467] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 1724.712515][T16467] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 42:42:42:42:42:42 [ 1724.765725][T20908] afs: Bad value for 'source' [ 1724.775315][T16467] usb 4-1: USB disconnect, device number 15 [ 1724.803975][T16467] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1725.392192][T19404] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1725.762268][T19404] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.781551][T19404] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1725.846996][T19404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.859353][T20938] kvm: vcpu 0: requested 176 ns lapic timer period limited to 200000 ns [ 1725.890195][T19404] usb 3-1: config 0 descriptor?? [ 1725.928419][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3340'. [ 1725.986454][T19404] pwc: Askey VC010 type 2 USB webcam detected. [ 1726.032488][T20937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'. [ 1726.202244][T19404] pwc: send_video_command error -71 [ 1726.207581][T19404] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1726.264395][T19404] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1726.313313][T19404] usb 3-1: USB disconnect, device number 12 [ 1726.429122][T20937] team0 (unregistering): Port device team_slave_0 removed [ 1726.438370][ T26] audit: type=1326 audit(1743342767.740:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20949 comm="syz.8.3346" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd338903169 code=0x0 [ 1726.530138][T20937] team0 (unregistering): Port device team_slave_1 removed [ 1726.641037][T20918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3341'. [ 1726.762564][T19404] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1727.122561][T19404] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.174525][T19404] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1727.206583][T19404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.244226][T19404] usb 3-1: config 0 descriptor?? [ 1727.317596][T19404] pwc: Askey VC010 type 2 USB webcam detected. [ 1727.752318][T19404] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1727.792256][T19404] pwc: recv_control_msg error -32 req 02 val 2700 [ 1727.799658][ T4570] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1727.832232][T19404] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1727.886539][T19404] pwc: recv_control_msg error -32 req 04 val 1000 [ 1727.982213][T19404] pwc: recv_control_msg error -32 req 04 val 1300 [ 1728.032246][T19404] pwc: recv_control_msg error -32 req 04 val 1400 [ 1728.072280][T19404] pwc: recv_control_msg error -32 req 02 val 2000 [ 1728.082269][ T4570] usb 9-1: Using ep0 maxpacket: 16 [ 1728.142505][T19404] pwc: recv_control_msg error -32 req 02 val 2100 [ 1728.194323][T19404] pwc: recv_control_msg error -32 req 04 val 1500 [ 1728.202500][ T4570] usb 9-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 1728.222417][T20986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3347'. [ 1728.261966][ T4570] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1728.272408][T19404] pwc: recv_control_msg error -32 req 02 val 2500 [ 1728.307930][T20978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3348'. [ 1728.317138][T19404] pwc: recv_control_msg error -32 req 02 val 2400 [ 1728.482497][ T4570] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1728.507129][ T4570] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.528984][ T4570] usb 9-1: Product: syz [ 1728.538729][ T4570] usb 9-1: Manufacturer: syz [ 1728.548804][T20978] team0 (unregistering): Port device team_slave_0 removed [ 1728.560747][ T4570] usb 9-1: SerialNumber: syz [ 1728.582975][T19404] pwc: recv_control_msg error -71 req 02 val 2900 [ 1728.612358][T19404] pwc: recv_control_msg error -71 req 02 val 2800 [ 1728.629502][T20978] team0 (unregistering): Port device team_slave_1 removed [ 1728.646500][T19404] pwc: recv_control_msg error -71 req 04 val 1100 [ 1728.685947][T19404] pwc: recv_control_msg error -71 req 04 val 1200 [ 1728.730868][T19404] pwc: Registered as video103. [ 1728.768750][T19404] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 1728.836825][T19404] usb 3-1: USB disconnect, device number 13 [ 1728.932717][ T4570] usb 9-1: 0:2 : does not exist [ 1728.981943][ T4570] usb 9-1: USB disconnect, device number 19 [ 1729.294177][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1729.556983][T21023] loop8: detected capacity change from 0 to 1024 [ 1729.625506][T21003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3352'. [ 1729.773598][ T4274] hfsplus: b-tree write err: -5, ino 4 [ 1730.269367][T21038] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3356'. [ 1730.443831][T21040] bond3 (unregistering): Released all slaves [ 1730.577495][T21045] kvm: vcpu 0: requested 176 ns lapic timer period limited to 200000 ns [ 1730.765129][ T26] audit: type=1326 audit(1743342772.070:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.3.3360" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe514cbb169 code=0x0 [ 1731.718719][T21084] loop4: detected capacity change from 0 to 1024 [ 1731.905210][ T4386] hfsplus: b-tree write err: -5, ino 4 [ 1732.885542][T21119] bond1 (unregistering): Released all slaves [ 1733.022363][T21117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3367'. [ 1733.094681][T21128] loop8: detected capacity change from 0 to 512 [ 1733.118509][T21117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3367'. [ 1733.181669][T21128] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1733.256056][T21128] EXT4-fs (loop8): 1 truncate cleaned up [ 1733.264533][T21128] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1734.787636][T21165] loop2: detected capacity change from 0 to 1024 [ 1735.039543][ T4274] hfsplus: b-tree write err: -5, ino 4 [ 1735.142689][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.149035][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.810244][T21185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3376'. [ 1736.034679][T21163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3376'. [ 1736.340471][T21194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3378'. [ 1736.533716][T21194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3378'. [ 1736.674734][T21180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3380'. [ 1736.904442][T21211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3381'. [ 1737.032015][T21189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3381'. [ 1738.050258][T21240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3382'. [ 1738.163495][T21225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3382'. [ 1739.071667][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3385'. [ 1739.741608][ T26] audit: type=1326 audit(1743342781.040:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21284 comm="syz.2.3390" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff487e8169 code=0x0 [ 1740.246994][T21295] kvm [21294]: vcpu0, guest rIP: 0x1a3 disabled perfctr wrmsr: 0xc2 data 0x8000 [ 1741.353250][T21326] bridge0: port 3(vlan2) entered blocking state [ 1741.381187][T21326] bridge0: port 3(vlan2) entered disabled state [ 1741.411230][T21326] device vlan2 entered promiscuous mode [ 1741.430755][T21326] device bond0 entered promiscuous mode [ 1741.459698][T21326] device bond_slave_0 entered promiscuous mode [ 1741.476115][T21326] device bond_slave_1 entered promiscuous mode [ 1741.498331][T21326] bridge0: port 3(vlan2) entered blocking state [ 1741.505427][T21326] bridge0: port 3(vlan2) entered forwarding state [ 1741.697043][T21327] __nla_validate_parse: 3 callbacks suppressed [ 1741.697056][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3395'. [ 1742.888815][T21383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3407'. [ 1742.974797][T21386] netlink: 'syz.8.3406': attribute type 3 has an invalid length. [ 1743.025137][T21386] netlink: 'syz.8.3406': attribute type 3 has an invalid length. [ 1743.118452][T21386] netlink: 'syz.8.3406': attribute type 3 has an invalid length. [ 1743.129196][T21386] netlink: 'syz.8.3406': attribute type 3 has an invalid length. [ 1743.148158][T21386] netlink: 'syz.8.3406': attribute type 3 has an invalid length. [ 1743.169838][T21386] netlink: 'syz.8.3406': attribute type 3 has an invalid length. [ 1743.189277][T21386] netlink: 'syz.8.3406': attribute type 3 has an invalid length. [ 1743.202555][T21386] netlink: 'syz.8.3406': attribute type 3 has an invalid length. [ 1743.210955][T21386] netlink: 'syz.8.3406': attribute type 3 has an invalid length. [ 1743.223678][T21386] netlink: 'syz.8.3406': attribute type 3 has an invalid length. [ 1743.351714][T21394] device syzkaller0 entered promiscuous mode [ 1743.432164][ T4570] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1743.576287][T21406] lo speed is unknown, defaulting to 1000 [ 1743.702109][ T4570] usb 5-1: Using ep0 maxpacket: 8 [ 1743.844305][ T4570] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1743.895564][ T4570] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1744.002142][ T4570] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1744.072619][ T4570] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1744.099906][T21406] lo speed is unknown, defaulting to 1000 [ 1744.174719][ T4570] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1744.211083][ T4570] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1744.245899][ T4570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.659510][T16467] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1744.679856][T21434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3410'. [ 1744.764487][T21434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3410'. [ 1744.789249][ T4570] usb 5-1: GET_CAPABILITIES returned 0 [ 1744.797588][ T4570] usbtmc 5-1:16.0: can't read capabilities [ 1744.855851][T19404] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1744.932512][T16467] usb 3-1: Using ep0 maxpacket: 8 [ 1745.035735][T16528] usb 5-1: USB disconnect, device number 10 [ 1745.052439][T16467] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1745.070993][T16467] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1745.096740][T16467] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1745.112281][T19404] usb 4-1: Using ep0 maxpacket: 16 [ 1745.127357][T16467] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1745.155825][T16467] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1745.188226][T16467] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1745.215991][T16467] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.232348][T19404] usb 4-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 1745.259331][T19404] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1745.442218][T19404] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1745.454844][T19404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.471342][T19404] usb 4-1: Product: syz [ 1745.482276][T16467] usb 3-1: GET_CAPABILITIES returned 0 [ 1745.487817][T16467] usbtmc 3-1:16.0: can't read capabilities [ 1745.501844][T19404] usb 4-1: Manufacturer: syz [ 1745.519212][T19404] usb 4-1: SerialNumber: syz [ 1745.707341][T16467] usb 3-1: USB disconnect, device number 14 [ 1745.862731][T19404] usb 4-1: 0:2 : does not exist [ 1745.953692][T19404] usb 4-1: USB disconnect, device number 16 [ 1746.203986][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1746.474062][T21492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3423'. [ 1749.024668][T21545] device syzkaller0 entered promiscuous mode [ 1749.061657][T17156] syzkaller0: tun_net_xmit 48 [ 1749.072253][ T4244] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1749.112328][T16528] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1749.322232][ T4244] usb 4-1: Using ep0 maxpacket: 8 [ 1749.362451][T16528] usb 3-1: Using ep0 maxpacket: 8 [ 1749.442535][ T4244] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1749.462723][ T4244] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1749.479244][T21555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3430'. [ 1749.482414][T16528] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1749.506565][ T4244] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1749.526830][T16528] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1749.546001][ T4244] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1749.564128][T16528] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1749.580279][ T4244] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1749.599534][T16528] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1749.620546][T21561] validate_nla: 42 callbacks suppressed [ 1749.620560][T21561] netlink: 'syz.0.3436': attribute type 3 has an invalid length. [ 1749.644343][ T4244] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1749.646109][T21561] netlink: 'syz.0.3436': attribute type 3 has an invalid length. [ 1749.654528][T16528] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1749.687216][T21561] netlink: 'syz.0.3436': attribute type 3 has an invalid length. [ 1749.715157][T21561] netlink: 'syz.0.3436': attribute type 3 has an invalid length. [ 1749.725169][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.747237][T21561] netlink: 'syz.0.3436': attribute type 3 has an invalid length. [ 1749.759852][T21561] netlink: 'syz.0.3436': attribute type 3 has an invalid length. [ 1749.780600][T16528] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1749.790689][T21561] netlink: 'syz.0.3436': attribute type 3 has an invalid length. [ 1749.805315][T16528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.816273][T21561] netlink: 'syz.0.3436': attribute type 3 has an invalid length. [ 1749.830941][T21561] netlink: 'syz.0.3436': attribute type 3 has an invalid length. [ 1749.843412][T21561] netlink: 'syz.0.3436': attribute type 3 has an invalid length. [ 1749.864658][T21528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3430'. [ 1750.032305][ T4244] usb 4-1: GET_CAPABILITIES returned 0 [ 1750.037935][ T4244] usbtmc 4-1:16.0: can't read capabilities [ 1750.112247][T16528] usb 3-1: GET_CAPABILITIES returned 0 [ 1750.117878][T16528] usbtmc 3-1:16.0: can't read capabilities [ 1750.276976][T16528] usb 4-1: USB disconnect, device number 17 [ 1750.395248][T19404] usb 3-1: USB disconnect, device number 15 [ 1750.711237][T21574] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3435'. [ 1750.820491][T21552] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3435'. [ 1750.931761][T21597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3440'. [ 1751.045390][T21597] bridge0: port 3(vlan2) entered blocking state [ 1751.070628][T21597] bridge0: port 3(vlan2) entered disabled state [ 1751.105555][T21597] device vlan2 entered promiscuous mode [ 1751.117077][T21597] device bond0 entered promiscuous mode [ 1751.134346][T21597] device bond_slave_0 entered promiscuous mode [ 1751.164087][T21597] device bond_slave_1 entered promiscuous mode [ 1751.213861][T21597] bridge0: port 3(vlan2) entered blocking state [ 1751.220346][T21597] bridge0: port 3(vlan2) entered forwarding state [ 1751.320403][T21606] loop4: detected capacity change from 0 to 1024 [ 1752.420347][ T4386] hfsplus: b-tree write err: -5, ino 4 [ 1752.591377][T21623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3445'. [ 1752.721531][T21623] bridge0: port 3(vlan2) entered blocking state [ 1752.740174][T21623] bridge0: port 3(vlan2) entered disabled state [ 1752.747021][ T4387] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1752.777035][T21623] device vlan2 entered promiscuous mode [ 1752.799833][T21623] device bond0 entered promiscuous mode [ 1752.847126][T21623] device bond_slave_0 entered promiscuous mode [ 1752.864941][T21623] device bond_slave_1 entered promiscuous mode [ 1752.877658][T21623] bridge0: port 3(vlan2) entered blocking state [ 1752.884032][T21623] bridge0: port 3(vlan2) entered forwarding state [ 1753.012449][ T4387] usb 3-1: Using ep0 maxpacket: 8 [ 1753.311441][T21649] device syzkaller0 entered promiscuous mode [ 1753.319402][ T4567] syzkaller0: tun_net_xmit 48 [ 1753.331689][ T4387] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1753.344112][ T4387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.370510][ T4387] usb 3-1: Product: syz [ 1753.372331][T19404] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1753.381637][ T4387] usb 3-1: Manufacturer: syz [ 1753.387150][ T4387] usb 3-1: SerialNumber: syz [ 1753.430628][ T4387] usb 3-1: config 0 descriptor?? [ 1753.635479][T19404] usb 4-1: Using ep0 maxpacket: 8 [ 1753.742158][ T4387] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1753.753018][T19404] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1753.761235][T19404] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1753.804680][T19404] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1753.851036][T19404] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1753.881805][T19404] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1753.929181][T21670] loop4: detected capacity change from 0 to 1024 [ 1753.972278][T19404] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1754.001828][T19404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.198871][ T5518] hfsplus: b-tree write err: -5, ino 4 [ 1754.596497][T21644] lo speed is unknown, defaulting to 1000 [ 1754.623535][T19404] usb 4-1: GET_CAPABILITIES returned 0 [ 1754.629097][T19404] usbtmc 4-1:16.0: can't read capabilities [ 1754.938852][T21698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3459'. [ 1755.030011][T21701] validate_nla: 149 callbacks suppressed [ 1755.030025][T21701] netlink: 'syz.8.3460': attribute type 3 has an invalid length. [ 1755.099673][T21701] netlink: 'syz.8.3460': attribute type 3 has an invalid length. [ 1755.121504][T21701] netlink: 'syz.8.3460': attribute type 3 has an invalid length. [ 1755.137029][T21701] netlink: 'syz.8.3460': attribute type 3 has an invalid length. [ 1755.154204][T21701] netlink: 'syz.8.3460': attribute type 3 has an invalid length. [ 1755.170874][T21701] netlink: 'syz.8.3460': attribute type 3 has an invalid length. [ 1755.180282][T21701] netlink: 'syz.8.3460': attribute type 3 has an invalid length. [ 1755.209981][T21701] netlink: 'syz.8.3460': attribute type 3 has an invalid length. [ 1755.224579][T21701] netlink: 'syz.8.3460': attribute type 3 has an invalid length. [ 1755.254237][T21701] netlink: 'syz.8.3460': attribute type 3 has an invalid length. [ 1755.270707][T21644] lo speed is unknown, defaulting to 1000 [ 1755.361648][T21706] device syzkaller0 entered promiscuous mode [ 1755.451461][T19404] syzkaller0: tun_net_xmit 48 [ 1756.632359][ T4387] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1756.681672][ T4387] usb 3-1: USB disconnect, device number 16 [ 1757.014485][T21742] loop8: detected capacity change from 0 to 128 [ 1757.887716][T21742] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1758.221859][ T26] audit: type=1326 audit(1743342799.520:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.2.3466" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff487e8169 code=0x0 [ 1758.848664][T19404] usb 4-1: USB disconnect, device number 18 [ 1758.964093][T21762] loop8: detected capacity change from 0 to 1024 [ 1759.202826][ T144] hfsplus: b-tree write err: -5, ino 4 [ 1759.276282][T21773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3474'. [ 1760.847106][T21813] device syzkaller0 entered promiscuous mode [ 1760.922224][T19404] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1761.172323][T19404] usb 9-1: Using ep0 maxpacket: 16 [ 1761.282138][ T4211] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1761.292316][T19404] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.323143][T19404] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1761.338075][T21822] loop3: detected capacity change from 0 to 1024 [ 1761.410418][T21827] loop0: detected capacity change from 0 to 512 [ 1761.522251][T19404] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1761.556625][T19404] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.598285][T19404] usb 9-1: Product: syz [ 1761.614622][T19404] usb 9-1: Manufacturer: syz [ 1761.633403][T21827] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1761.653862][T19404] usb 9-1: SerialNumber: syz [ 1761.672290][ T4211] usb 3-1: config 0 has no interfaces? [ 1761.747655][ T4274] hfsplus: b-tree write err: -5, ino 4 [ 1761.775632][T21827] EXT4-fs (loop0): 1 truncate cleaned up [ 1761.781325][T21827] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1761.842268][ T4211] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1761.912707][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.920751][ T4211] usb 3-1: Product: syz [ 1761.966348][ T4211] usb 3-1: Manufacturer: syz [ 1761.982373][T19404] usb 9-1: 0:2 : does not exist [ 1762.013483][ T4211] usb 3-1: SerialNumber: syz [ 1762.333033][ T4211] usb 3-1: config 0 descriptor?? [ 1762.353222][T19404] usb 9-1: USB disconnect, device number 20 [ 1762.545877][T21842] bond4 (unregistering): Released all slaves [ 1762.912224][T19404] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1763.162251][T19404] usb 9-1: Using ep0 maxpacket: 8 [ 1763.282415][T19404] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1763.310699][T19404] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1763.328789][T21869] validate_nla: 42 callbacks suppressed [ 1763.328879][T21869] netlink: 'syz.4.3489': attribute type 3 has an invalid length. [ 1763.357963][T19404] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1763.388409][T21869] netlink: 'syz.4.3489': attribute type 3 has an invalid length. [ 1763.398242][T19404] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1763.417412][T21869] netlink: 'syz.4.3489': attribute type 3 has an invalid length. [ 1763.439181][T21869] netlink: 'syz.4.3489': attribute type 3 has an invalid length. [ 1763.453362][T19404] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1763.468877][T21869] netlink: 'syz.4.3489': attribute type 3 has an invalid length. [ 1763.500312][T19404] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1763.514914][T21869] netlink: 'syz.4.3489': attribute type 3 has an invalid length. [ 1763.540046][T19404] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.545776][T21869] netlink: 'syz.4.3489': attribute type 3 has an invalid length. [ 1763.589523][T21869] netlink: 'syz.4.3489': attribute type 3 has an invalid length. [ 1763.624080][T21869] netlink: 'syz.4.3489': attribute type 3 has an invalid length. [ 1763.656805][T21869] netlink: 'syz.4.3489': attribute type 3 has an invalid length. [ 1763.832393][T19404] usb 9-1: GET_CAPABILITIES returned 0 [ 1763.837956][T19404] usbtmc 9-1:16.0: can't read capabilities [ 1764.063341][T17156] usb 9-1: USB disconnect, device number 21 [ 1765.225184][ T4211] usb 3-1: USB disconnect, device number 17 [ 1765.732187][ T4570] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1766.032237][ T4570] usb 3-1: Using ep0 maxpacket: 16 [ 1766.152448][ T4570] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.181894][ T4570] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1766.392629][ T4570] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1766.442266][ T4570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.618517][ T4570] usb 3-1: Product: syz [ 1766.638475][ T4570] usb 3-1: Manufacturer: syz [ 1766.688399][ T4570] usb 3-1: SerialNumber: syz [ 1767.372352][ T4570] usb 3-1: 0:2 : does not exist [ 1767.387684][ T4570] usb 3-1: USB disconnect, device number 18 [ 1767.620569][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1767.682171][ T4157] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1767.682171][ T4211] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1767.922170][ T4211] usb 5-1: Using ep0 maxpacket: 8 [ 1768.012237][ T4157] usb 4-1: Using ep0 maxpacket: 8 [ 1768.202382][ T4211] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1768.222408][ T4211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.260145][T21958] kvm: vcpu 0: requested 176 ns lapic timer period limited to 200000 ns [ 1768.266509][ T4211] usb 5-1: Product: syz [ 1768.288876][ T4211] usb 5-1: Manufacturer: syz [ 1768.294103][ T4211] usb 5-1: SerialNumber: syz [ 1768.302462][ T4157] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1768.311636][ T4157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.320599][ T4211] usb 5-1: config 0 descriptor?? [ 1768.352986][ T4157] usb 4-1: Product: syz [ 1768.357324][ T4157] usb 4-1: Manufacturer: syz [ 1768.376495][ T4157] usb 4-1: SerialNumber: syz [ 1768.385138][ T4157] usb 4-1: config 0 descriptor?? [ 1768.602466][ T4211] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1768.652379][ T4157] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1769.570314][ T26] audit: type=1326 audit(1743342810.870:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21996 comm="syz.8.3510" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd338903169 code=0x0 [ 1769.784401][T22010] loop2: detected capacity change from 0 to 1024 [ 1769.913181][ T4274] hfsplus: b-tree write err: -5, ino 4 [ 1770.635397][T22029] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3517'. [ 1770.902370][ T4211] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1770.933654][ T4211] usb 5-1: USB disconnect, device number 11 [ 1771.212471][ T4157] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1771.240065][ T4157] usb 4-1: USB disconnect, device number 19 [ 1771.680095][T22048] kvm: vcpu 0: requested 176 ns lapic timer period limited to 200000 ns [ 1771.933500][ T26] audit: type=1326 audit(1743342813.240:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22061 comm="syz.4.3520" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb83306e169 code=0x0 [ 1772.348748][T22079] loop2: detected capacity change from 0 to 1024 [ 1772.547599][ T4274] hfsplus: b-tree write err: -5, ino 4 [ 1773.299919][T22092] loop3: detected capacity change from 0 to 512 [ 1773.414345][ T26] audit: type=1326 audit(1743342814.720:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22090 comm="syz.4.3526" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb83306e169 code=0x0 [ 1773.498063][T22092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1774.555451][T22092] EXT4-fs (loop3): 1 truncate cleaned up [ 1774.564897][T22092] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1774.649783][T22104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3530'. [ 1775.673218][T22108] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1775.739864][T22110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3532'. [ 1775.840597][T22110] bridge0: port 3(vlan2) entered blocking state [ 1775.858418][T22110] bridge0: port 3(vlan2) entered disabled state [ 1775.870899][T22110] device vlan2 entered promiscuous mode [ 1775.885123][T22110] device bond0 entered promiscuous mode [ 1775.891266][T22110] device bond_slave_0 entered promiscuous mode [ 1775.901518][T22110] device bond_slave_1 entered promiscuous mode [ 1775.970104][T22110] bridge0: port 3(vlan2) entered blocking state [ 1775.976599][T22110] bridge0: port 3(vlan2) entered forwarding state [ 1777.148864][ T26] audit: type=1326 audit(1743342818.450:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22132 comm="syz.4.3537" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb83306e169 code=0x0 [ 1777.420832][T22135] validate_nla: 95 callbacks suppressed [ 1777.420848][T22135] netlink: 'syz.3.3536': attribute type 3 has an invalid length. [ 1777.505829][T22135] netlink: 'syz.3.3536': attribute type 3 has an invalid length. [ 1777.516162][T22135] netlink: 'syz.3.3536': attribute type 3 has an invalid length. [ 1777.526029][T22135] netlink: 'syz.3.3536': attribute type 3 has an invalid length. [ 1777.544931][T22135] netlink: 'syz.3.3536': attribute type 3 has an invalid length. [ 1777.579973][T22135] netlink: 'syz.3.3536': attribute type 3 has an invalid length. [ 1777.601233][T22135] netlink: 'syz.3.3536': attribute type 3 has an invalid length. [ 1777.702673][T22135] netlink: 'syz.3.3536': attribute type 3 has an invalid length. [ 1777.730838][T22135] netlink: 'syz.3.3536': attribute type 3 has an invalid length. [ 1777.769906][T22135] netlink: 'syz.3.3536': attribute type 3 has an invalid length. [ 1779.519868][T22168] kvm: vcpu 0: requested 176 ns lapic timer period limited to 200000 ns [ 1779.557106][T22169] loop8: detected capacity change from 0 to 512 [ 1779.600733][T22162] device syzkaller0 entered promiscuous mode [ 1779.653798][T22169] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1779.755721][T22169] EXT4-fs (loop8): 1 truncate cleaned up [ 1779.765108][T22169] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1780.802167][T16467] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1781.135957][T16467] usb 4-1: Using ep0 maxpacket: 8 [ 1781.582434][T16467] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1781.679483][T16467] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1782.042362][T16467] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1782.215425][T16467] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1782.241596][T16467] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1782.364662][T16467] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1782.622371][T16467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.142232][T16467] usb 4-1: GET_CAPABILITIES returned 0 [ 1783.397442][T16467] usbtmc 4-1:16.0: can't read capabilities [ 1783.765783][ T26] audit: type=1326 audit(1743342825.070:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22206 comm="syz.2.3550" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff487e8169 code=0x0 [ 1783.815171][T16467] usb 4-1: USB disconnect, device number 20 [ 1784.552299][T16467] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1785.002694][T16467] usb 9-1: config 0 has no interfaces? [ 1785.242362][T16467] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1785.303152][T16467] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.350376][T16467] usb 9-1: Product: syz [ 1785.373253][T16467] usb 9-1: Manufacturer: syz [ 1785.382465][T16467] usb 9-1: SerialNumber: syz [ 1785.511404][T16467] usb 9-1: config 0 descriptor?? [ 1786.227069][ T26] audit: type=1326 audit(1743342827.530:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22248 comm="syz.4.3555" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb83306e169 code=0x0 [ 1789.322674][T22274] device syzkaller0 entered promiscuous mode [ 1789.502786][T22275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3556'. [ 1790.041285][T22281] loop3: detected capacity change from 0 to 512 [ 1790.132355][T22281] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1790.251794][T22281] EXT4-fs (loop3): 1 truncate cleaned up [ 1790.260677][T22281] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1790.682534][T17890] usb 9-1: USB disconnect, device number 22 [ 1790.920602][T22293] kvm: vcpu 0: requested 176 ns lapic timer period limited to 200000 ns [ 1790.937678][ T26] audit: type=1326 audit(1743342832.240:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22296 comm="syz.2.3563" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff487e8169 code=0x0 [ 1792.093110][T22334] validate_nla: 43 callbacks suppressed [ 1792.093124][T22334] netlink: 'syz.2.3570': attribute type 3 has an invalid length. [ 1792.137823][T22334] netlink: 'syz.2.3570': attribute type 3 has an invalid length. [ 1792.159872][T22334] netlink: 'syz.2.3570': attribute type 3 has an invalid length. [ 1792.172258][ T4244] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1792.190928][T22334] netlink: 'syz.2.3570': attribute type 3 has an invalid length. [ 1792.212283][T22334] netlink: 'syz.2.3570': attribute type 3 has an invalid length. [ 1792.226734][T22334] netlink: 'syz.2.3570': attribute type 3 has an invalid length. [ 1792.244323][T22334] netlink: 'syz.2.3570': attribute type 3 has an invalid length. [ 1792.269994][T22334] netlink: 'syz.2.3570': attribute type 3 has an invalid length. [ 1792.282996][T22334] netlink: 'syz.2.3570': attribute type 3 has an invalid length. [ 1792.291829][T22334] netlink: 'syz.2.3570': attribute type 3 has an invalid length. [ 1792.353471][T19404] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1792.422477][ T4211] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1792.457846][T22343] loop2: detected capacity change from 0 to 512 [ 1792.567116][T22343] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1792.592679][ T4244] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.613648][T22343] EXT4-fs (loop2): 1 truncate cleaned up [ 1792.619452][T22343] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 1792.647183][ T4244] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1792.657134][ T4244] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.676807][ T4244] usb 9-1: config 0 descriptor?? [ 1792.712472][ T4211] usb 5-1: Using ep0 maxpacket: 8 [ 1792.743763][ T4244] pwc: Askey VC010 type 2 USB webcam detected. [ 1793.333114][ T4244] pwc: send_video_command error -71 [ 1793.341860][ T4244] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1793.387331][ T4244] Philips webcam: probe of 9-1:0.0 failed with error -71 [ 1793.395400][T19404] usb 4-1: config 0 has no interfaces? [ 1793.484742][ T4244] usb 9-1: USB disconnect, device number 23 [ 1793.552472][ T4211] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1793.570718][ T4211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.590215][T19404] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1793.624443][T19404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.650325][ T4211] usb 5-1: Product: syz [ 1793.664360][T19404] usb 4-1: Product: syz [ 1793.669856][ T4211] usb 5-1: Manufacturer: syz [ 1793.679709][T19404] usb 4-1: Manufacturer: syz [ 1793.689695][ T4211] usb 5-1: SerialNumber: syz [ 1793.703982][T19404] usb 4-1: SerialNumber: syz [ 1793.727972][ T4211] usb 5-1: config 0 descriptor?? [ 1793.736134][T19404] usb 4-1: config 0 descriptor?? [ 1793.922164][ T4244] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1794.032322][ T4211] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1794.372714][ T4244] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.405637][ T4244] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1794.461902][ T4244] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.513199][ T4244] usb 9-1: config 0 descriptor?? [ 1794.554475][ T4244] pwc: Askey VC010 type 2 USB webcam detected. [ 1794.698265][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3573'. [ 1794.879356][T22364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3573'. [ 1794.982269][ T4244] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1795.042218][ T4244] pwc: recv_control_msg error -32 req 02 val 2700 [ 1795.178875][ T4244] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1795.294695][ T4244] pwc: recv_control_msg error -32 req 04 val 1000 [ 1795.422309][ T4244] pwc: recv_control_msg error -32 req 04 val 1300 [ 1795.612626][ T4244] pwc: recv_control_msg error -32 req 04 val 1400 [ 1795.772238][ T4244] pwc: recv_control_msg error -32 req 02 val 2000 [ 1795.812449][ T4244] pwc: recv_control_msg error -32 req 02 val 2100 [ 1795.942173][ T4244] pwc: recv_control_msg error -32 req 04 val 1500 [ 1796.222718][ T4244] pwc: recv_control_msg error -32 req 02 val 2500 [ 1796.383862][ T4211] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1796.393414][ T4211] usb 5-1: USB disconnect, device number 12 [ 1796.524914][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.531273][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.552263][ T4244] pwc: recv_control_msg error -32 req 02 val 2600 [ 1796.802793][ T4244] pwc: recv_control_msg error -71 req 02 val 2800 [ 1796.865626][ T4244] pwc: recv_control_msg error -71 req 04 val 1100 [ 1796.892186][ T4244] pwc: recv_control_msg error -71 req 04 val 1200 [ 1797.020722][ T4244] pwc: Registered as video103. [ 1797.176951][ T4244] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input35 [ 1797.479785][ T4244] usb 9-1: USB disconnect, device number 24 [ 1797.702671][T16528] usb 4-1: USB disconnect, device number 21 [ 1799.352229][T19404] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1799.623433][T19404] usb 5-1: Using ep0 maxpacket: 16 [ 1799.752321][T19404] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.792103][T19404] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1800.022378][T19404] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1800.053557][T19404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.102303][T19404] usb 5-1: Product: syz [ 1800.114222][T19404] usb 5-1: Manufacturer: syz [ 1800.169412][T19404] usb 5-1: SerialNumber: syz [ 1800.450175][T22459] validate_nla: 43 callbacks suppressed [ 1800.450195][T22459] netlink: 'syz.0.3587': attribute type 3 has an invalid length. [ 1800.508021][T22459] netlink: 'syz.0.3587': attribute type 3 has an invalid length. [ 1800.519393][T19404] usb 5-1: 0:2 : does not exist [ 1800.531541][T22459] netlink: 'syz.0.3587': attribute type 3 has an invalid length. [ 1800.549382][T22459] netlink: 'syz.0.3587': attribute type 3 has an invalid length. [ 1800.563127][T22459] netlink: 'syz.0.3587': attribute type 3 has an invalid length. [ 1800.574441][T22459] netlink: 'syz.0.3587': attribute type 3 has an invalid length. [ 1800.591496][T22459] netlink: 'syz.0.3587': attribute type 3 has an invalid length. [ 1800.602127][T22459] netlink: 'syz.0.3587': attribute type 3 has an invalid length. [ 1800.613724][T22459] netlink: 'syz.0.3587': attribute type 3 has an invalid length. [ 1800.614587][T19404] usb 5-1: USB disconnect, device number 13 [ 1800.645001][T22459] netlink: 'syz.0.3587': attribute type 3 has an invalid length. [ 1800.733882][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1801.112111][ T4244] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1801.672301][ T4244] usb 9-1: Using ep0 maxpacket: 8 [ 1802.002256][ T4244] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1802.572171][ T4244] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.580209][ T4244] usb 9-1: Product: syz [ 1802.585222][ T4244] usb 9-1: Manufacturer: syz [ 1802.589851][ T4244] usb 9-1: SerialNumber: syz [ 1802.597878][ T4244] usb 9-1: config 0 descriptor?? [ 1802.642853][ T26] audit: type=1326 audit(1743342843.950:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22481 comm="syz.0.3592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f835220d169 code=0x0 [ 1802.862399][ T4244] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1803.912225][T19404] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1804.182336][T19404] usb 5-1: Using ep0 maxpacket: 8 [ 1804.303721][T19404] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1804.312282][T19404] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1804.329985][T19404] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1804.372455][T19404] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1804.451606][T19404] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1804.609700][T19404] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1804.619632][T19404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.112314][T19404] usb 5-1: GET_CAPABILITIES returned 0 [ 1805.119124][T19404] usbtmc 5-1:16.0: can't read capabilities [ 1805.189899][ T26] audit: type=1326 audit(1743342846.490:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22544 comm="syz.2.3602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff487e8169 code=0x0 [ 1805.343892][T19404] usb 5-1: USB disconnect, device number 14 [ 1805.682321][ T4244] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 1805.708504][ T4244] usb 9-1: USB disconnect, device number 25 [ 1807.322306][ T8403] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1807.495516][T22572] device syzkaller0 entered promiscuous mode [ 1807.544005][ T4211] syzkaller0: tun_net_xmit 48 [ 1807.734230][ T8403] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.754674][ T8403] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1807.782719][T22578] validate_nla: 96 callbacks suppressed [ 1807.782733][T22578] netlink: 'syz.2.3609': attribute type 3 has an invalid length. [ 1807.792150][ T8403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.820994][T22578] netlink: 'syz.2.3609': attribute type 3 has an invalid length. [ 1807.842426][T22578] netlink: 'syz.2.3609': attribute type 3 has an invalid length. [ 1807.862216][T22578] netlink: 'syz.2.3609': attribute type 3 has an invalid length. [ 1807.873235][T22578] netlink: 'syz.2.3609': attribute type 3 has an invalid length. [ 1807.890089][T22578] netlink: 'syz.2.3609': attribute type 3 has an invalid length. [ 1807.902289][T22578] netlink: 'syz.2.3609': attribute type 3 has an invalid length. [ 1807.911141][ T8403] usb 5-1: config 0 descriptor?? [ 1807.938637][T22578] netlink: 'syz.2.3609': attribute type 3 has an invalid length. [ 1807.955004][T22578] netlink: 'syz.2.3609': attribute type 3 has an invalid length. [ 1807.971337][T22578] netlink: 'syz.2.3609': attribute type 3 has an invalid length. [ 1807.985387][ T8403] pwc: Askey VC010 type 2 USB webcam detected. [ 1808.206897][ T8403] pwc: send_video_command error -71 [ 1808.268735][ T8403] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1808.276525][ T8403] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 1808.294842][ T8403] usb 5-1: USB disconnect, device number 15 [ 1808.412223][T19404] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1808.792161][ T8403] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1808.872260][T19404] usb 4-1: Using ep0 maxpacket: 16 [ 1809.022186][T19404] usb 4-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 1809.034029][T19404] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1809.222771][T19404] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1809.279543][ T8403] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.289785][T19404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.307461][ T8403] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1809.316664][T19404] usb 4-1: Product: syz [ 1809.320862][T19404] usb 4-1: Manufacturer: syz [ 1809.326306][ T8403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.402782][T19404] usb 4-1: SerialNumber: syz [ 1809.526556][ T8403] usb 5-1: config 0 descriptor?? [ 1809.576353][ T8403] pwc: Askey VC010 type 2 USB webcam detected. [ 1809.625833][ T26] audit: type=1326 audit(1743342850.930:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22595 comm="syz.8.3615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd338903169 code=0x0 [ 1809.863014][T19404] usb 4-1: 0:2 : does not exist [ 1810.012257][ T8403] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1810.065734][T19404] usb 4-1: USB disconnect, device number 22 [ 1810.072532][ T8403] pwc: recv_control_msg error -32 req 02 val 2700 [ 1810.152743][ T8403] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1810.317997][ T8403] pwc: recv_control_msg error -32 req 04 val 1000 [ 1810.426038][ T8403] pwc: recv_control_msg error -32 req 04 val 1300 [ 1810.472216][ T8403] pwc: recv_control_msg error -32 req 04 val 1400 [ 1810.522260][ T8403] pwc: recv_control_msg error -32 req 02 val 2000 [ 1810.724741][ T8403] pwc: recv_control_msg error -32 req 02 val 2100 [ 1810.782194][ T8403] pwc: recv_control_msg error -32 req 04 val 1500 [ 1811.020856][ T8403] pwc: recv_control_msg error -32 req 02 val 2500 [ 1811.060411][ T4780] udevd[4780]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1811.302420][ T8403] pwc: recv_control_msg error -32 req 02 val 2600 [ 1811.369327][ T4278] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1811.582392][ T8403] pwc: recv_control_msg error -71 req 02 val 2800 [ 1811.632337][ T8403] pwc: recv_control_msg error -71 req 04 val 1100 [ 1811.670104][ T8403] pwc: recv_control_msg error -71 req 04 val 1200 [ 1811.687822][ T8403] pwc: Registered as video103. [ 1811.712221][ T8403] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36 [ 1811.738639][ T4278] usb 9-1: Using ep0 maxpacket: 8 [ 1811.764573][ T8403] usb 5-1: USB disconnect, device number 16 [ 1811.872483][ T4278] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1811.890982][ T4278] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1812.390781][ T4278] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1812.440470][ T4278] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1812.572215][ T4278] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1812.605770][ T4278] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1812.621628][ T4278] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.892289][ T4278] usb 9-1: GET_CAPABILITIES returned 0 [ 1812.897847][ T4278] usbtmc 9-1:16.0: can't read capabilities [ 1813.123170][T16467] usb 9-1: USB disconnect, device number 26 [ 1813.270544][ T26] audit: type=1326 audit(1743342854.570:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22660 comm="syz.4.3627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb83306e169 code=0x0 [ 1813.407297][T22661] device syzkaller0 entered promiscuous mode [ 1813.420068][T16467] syzkaller0: tun_net_xmit 48 [ 1813.427502][T22673] syzkaller0: create flow: hash 341647192 index 1 [ 1813.565004][T22661] syzkaller0: delete flow: hash 341647192 index 1 [ 1815.030061][T22695] kvm: vcpu 0: requested 176 ns lapic timer period limited to 200000 ns [ 1815.202140][T17890] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1815.672129][T17890] usb 4-1: Using ep0 maxpacket: 8 [ 1815.982262][T17890] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1816.001722][T17890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.409864][T17890] usb 4-1: Product: syz [ 1816.420627][T17890] usb 4-1: Manufacturer: syz [ 1816.702165][T17890] usb 4-1: SerialNumber: syz [ 1816.715487][T17890] usb 4-1: config 0 descriptor?? [ 1817.062278][T17890] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1817.186325][T22710] device syzkaller0 entered promiscuous mode [ 1817.374324][T16467] syzkaller0: tun_net_xmit 48 [ 1818.712230][T22742] validate_nla: 95 callbacks suppressed [ 1818.712243][T22742] netlink: 'syz.8.3643': attribute type 3 has an invalid length. [ 1819.587821][T22742] netlink: 'syz.8.3643': attribute type 3 has an invalid length. [ 1819.597171][T22742] netlink: 'syz.8.3643': attribute type 3 has an invalid length. [ 1819.610758][T22742] netlink: 'syz.8.3643': attribute type 3 has an invalid length. [ 1819.618891][T22742] netlink: 'syz.8.3643': attribute type 3 has an invalid length. [ 1819.628125][T22742] netlink: 'syz.8.3643': attribute type 3 has an invalid length. [ 1819.637635][T22742] netlink: 'syz.8.3643': attribute type 3 has an invalid length. [ 1819.645793][T22742] netlink: 'syz.8.3643': attribute type 3 has an invalid length. [ 1819.653931][T22742] netlink: 'syz.8.3643': attribute type 3 has an invalid length. [ 1819.662504][T22742] netlink: 'syz.8.3643': attribute type 3 has an invalid length. [ 1819.805319][ T26] audit: type=1326 audit(1743342861.110:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22754 comm="syz.2.3645" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff487e8169 code=0x0 [ 1819.972243][T17890] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1820.000133][T17890] usb 4-1: USB disconnect, device number 23 [ 1820.075153][T22764] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3647'. [ 1820.279858][T22761] device syzkaller0 entered promiscuous mode [ 1820.303218][ T4211] syzkaller0: tun_net_xmit 48 [ 1820.445068][T22761] syzkaller0: create flow: hash 341647192 index 1 [ 1820.504559][T22761] syzkaller0: delete flow: hash 341647192 index 1 [ 1820.742339][ T4211] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1821.022165][ T4211] usb 4-1: Using ep0 maxpacket: 8 [ 1821.199116][ T4211] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1821.250556][ T4211] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1821.260737][ T4211] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1821.274727][ T4211] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1821.284878][ T4211] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1821.298202][ T4211] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1821.307783][ T4211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.592228][ T4211] usb 4-1: GET_CAPABILITIES returned 0 [ 1821.597761][ T4211] usbtmc 4-1:16.0: can't read capabilities [ 1821.935246][ T4211] usb 4-1: USB disconnect, device number 24 [ 1825.142125][ T4211] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1825.427580][ T4211] usb 3-1: Using ep0 maxpacket: 8 [ 1825.762828][ T4211] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1825.771913][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.822128][ T4211] usb 3-1: Product: syz [ 1825.839576][ T4211] usb 3-1: Manufacturer: syz [ 1825.855683][ T4211] usb 3-1: SerialNumber: syz [ 1825.894934][ T4211] usb 3-1: config 0 descriptor?? [ 1826.173132][ T4211] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1828.442231][ T4211] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 1828.465891][ T4211] usb 3-1: USB disconnect, device number 19 [ 1829.692210][T19404] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1830.092440][T19404] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.351278][T19404] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1830.369401][T19404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.390191][T19404] usb 4-1: config 0 descriptor?? [ 1830.395292][T15480] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1830.444274][T19404] pwc: Askey VC010 type 2 USB webcam detected. [ 1830.642146][T15480] usb 5-1: Using ep0 maxpacket: 16 [ 1830.662175][T19404] pwc: send_video_command error -71 [ 1830.667714][T19404] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1830.675604][T19404] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 1830.684610][T19404] usb 4-1: USB disconnect, device number 25 [ 1830.777383][T15480] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.792309][T15480] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1830.862917][T22923] loop2: detected capacity change from 0 to 1024 [ 1830.952248][T15480] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1830.982109][T15480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.000534][T15480] usb 5-1: Product: syz [ 1831.010640][T15480] usb 5-1: Manufacturer: syz [ 1831.025511][T15480] usb 5-1: SerialNumber: syz [ 1831.097118][ T4250] hfsplus: b-tree write err: -5, ino 4 [ 1831.222207][T19404] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1831.382405][T15480] usb 5-1: 0:2 : does not exist [ 1831.421902][T15480] usb 5-1: USB disconnect, device number 17 [ 1831.652472][T22941] kvm: vcpu 0: requested 176 ns lapic timer period limited to 200000 ns [ 1831.672451][T19404] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.684469][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1831.716367][T19404] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1831.745777][T19404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.800216][T19404] usb 4-1: config 0 descriptor?? [ 1831.914352][T19404] pwc: Askey VC010 type 2 USB webcam detected. [ 1832.088788][ T26] audit: type=1326 audit(1743342873.390:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22955 comm="syz.0.3682" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f835220d169 code=0x0 [ 1832.329241][T19404] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1832.356608][ T4244] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1832.386628][T19404] pwc: recv_control_msg error -32 req 02 val 2700 [ 1832.437347][T19404] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1832.488002][T19404] pwc: recv_control_msg error -32 req 04 val 1000 [ 1832.534611][T19404] pwc: recv_control_msg error -32 req 04 val 1300 [ 1832.602439][T19404] pwc: recv_control_msg error -32 req 04 val 1400 [ 1832.638445][ T4244] usb 9-1: Using ep0 maxpacket: 8 [ 1832.669239][T19404] pwc: recv_control_msg error -32 req 02 val 2000 [ 1832.726825][T19404] pwc: recv_control_msg error -32 req 02 val 2100 [ 1832.777485][T19404] pwc: recv_control_msg error -32 req 04 val 1500 [ 1832.802315][ T4244] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1832.815506][ T4244] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1832.825672][T19404] pwc: recv_control_msg error -32 req 02 val 2500 [ 1832.851284][ T4244] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1832.878398][ T4244] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1832.898875][ T4244] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1832.942107][ T4244] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1832.961539][ T4244] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.094673][T19404] pwc: recv_control_msg error -32 req 02 val 2600 [ 1833.127791][T23008] loop0: detected capacity change from 0 to 1024 [ 1833.252474][ T4244] usb 9-1: GET_CAPABILITIES returned 0 [ 1833.258291][ T4244] usbtmc 9-1:16.0: can't read capabilities [ 1833.339412][ T4585] hfsplus: b-tree write err: -5, ino 4 [ 1833.382274][T19404] pwc: recv_control_msg error -71 req 02 val 2800 [ 1833.428125][T19404] pwc: recv_control_msg error -71 req 04 val 1100 [ 1833.616997][ T4387] usb 9-1: USB disconnect, device number 27 [ 1833.807771][T19404] pwc: recv_control_msg error -71 req 04 val 1200 [ 1833.918624][T19404] pwc: Registered as video103. [ 1833.969897][T19404] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 1834.066539][T19404] usb 4-1: USB disconnect, device number 26 [ 1834.815946][T19404] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1835.014358][ T26] audit: type=1326 audit(1743342876.320:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23054 comm="syz.4.3697" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb83306e169 code=0x0 [ 1835.042252][ T4205] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1835.102407][T19404] usb 4-1: Using ep0 maxpacket: 16 [ 1835.272398][T19404] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.296087][T19404] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1835.332303][ T4205] usb 9-1: Using ep0 maxpacket: 8 [ 1835.512394][T19404] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1835.531644][T19404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.555923][T19404] usb 4-1: Product: syz [ 1835.572561][T19404] usb 4-1: Manufacturer: syz [ 1835.589624][T19404] usb 4-1: SerialNumber: syz [ 1835.652959][ T4205] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1835.673591][ T4205] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.698446][ T4205] usb 9-1: Product: syz [ 1835.715199][ T4205] usb 9-1: Manufacturer: syz [ 1835.734806][ T4205] usb 9-1: SerialNumber: syz [ 1835.774039][ T4205] usb 9-1: config 0 descriptor?? [ 1835.844583][T23074] loop2: detected capacity change from 0 to 1024 [ 1835.942276][T19404] usb 4-1: 0:2 : does not exist [ 1836.132247][ T4205] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1836.157430][T19404] usb 4-1: USB disconnect, device number 27 [ 1836.240943][T11448] hfsplus: b-tree write err: -5, ino 4 [ 1836.436619][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1836.942177][T16528] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1837.662502][T16528] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.676194][T16528] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1837.686973][T16528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.708097][T16528] usb 4-1: config 0 descriptor?? [ 1837.754300][T16528] pwc: Askey VC010 type 2 USB webcam detected. [ 1837.965692][ T4211] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1837.997718][T16528] pwc: send_video_command error -71 [ 1838.013497][T16528] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1838.039767][T16528] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 1838.079413][T16528] usb 4-1: USB disconnect, device number 28 [ 1838.222549][ T4211] usb 3-1: Using ep0 maxpacket: 8 [ 1838.302422][ T4205] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 1838.320871][ T4205] usb 9-1: USB disconnect, device number 28 [ 1838.362521][ T4211] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1838.404735][ T4211] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1838.428768][ T4211] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1838.447629][ T4211] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1838.466202][ T4211] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1838.491056][ T4211] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1838.504781][ T4211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.612569][T16528] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1838.792233][ T4211] usb 3-1: GET_CAPABILITIES returned 0 [ 1838.882147][ T4211] usbtmc 3-1:16.0: can't read capabilities [ 1838.918045][ T26] audit: type=1326 audit(1743342880.220:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.8.3709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd338903169 code=0x0 [ 1839.004302][ T4211] usb 3-1: USB disconnect, device number 20 [ 1839.047026][T16528] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.097837][T16528] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1839.286694][T16528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.462204][T16528] usb 4-1: config 0 descriptor?? [ 1839.514883][T16528] pwc: Askey VC010 type 2 USB webcam detected. [ 1839.832204][T16528] pwc: send_video_command error -71 [ 1839.846645][T16528] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1839.982211][T16528] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 1840.034659][T16528] usb 4-1: USB disconnect, device number 29 [ 1840.511607][T23165] loop8: detected capacity change from 0 to 1024 [ 1841.505864][T11480] hfsplus: b-tree write err: -5, ino 4 [ 1841.552182][ T4211] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1841.812096][ T4211] usb 3-1: Using ep0 maxpacket: 16 [ 1841.952337][ T4211] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1842.071444][ T4211] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1842.322417][T19404] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1842.342370][ T4211] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1842.355428][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.412533][ T4211] usb 3-1: Product: syz [ 1842.417210][ T4211] usb 3-1: Manufacturer: syz [ 1842.422378][ T4211] usb 3-1: SerialNumber: syz [ 1842.782365][ T4211] usb 3-1: 0:2 : does not exist [ 1842.787604][T19404] usb 9-1: config 0 has no interfaces? [ 1842.838067][ T4211] usb 3-1: USB disconnect, device number 21 [ 1842.897694][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1843.303658][T19404] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1843.355475][T19404] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.437745][T19404] usb 9-1: Product: syz [ 1843.472421][T19404] usb 9-1: Manufacturer: syz [ 1843.477114][T19404] usb 9-1: SerialNumber: syz [ 1843.539352][T19404] usb 9-1: config 0 descriptor?? [ 1843.872289][ T8403] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1843.991619][T23223] loop4: detected capacity change from 0 to 1024 [ 1844.216381][ T4250] hfsplus: b-tree write err: -5, ino 4 [ 1844.492236][ T8403] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1844.532212][ T8403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.582116][ T8403] usb 3-1: Product: syz [ 1844.586453][ T8403] usb 3-1: Manufacturer: syz [ 1844.653755][ T8403] usb 3-1: SerialNumber: syz [ 1844.924611][T23215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3720'. [ 1845.194550][ T8403] usb 3-1: Found UVC 0.00 device syz (093a:2476) [ 1845.208510][ T8403] usb 3-1: No valid video chain found. [ 1845.236703][ T8403] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1845.282177][ T8403] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1845.310768][ T8403] usb 3-1: USB disconnect, device number 22 [ 1845.565300][ T4211] usb 9-1: USB disconnect, device number 29 [ 1847.277974][ T26] audit: type=1326 audit(1743342888.580:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23268 comm="syz.8.3728" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd338903169 code=0x0 [ 1857.965644][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1857.972388][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.405643][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.412287][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1980.846617][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1980.853182][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1990.442243][ T27] INFO: task kworker/1:5:16187 blocked for more than 143 seconds. [ 1990.450179][ T27] Not tainted 5.15.179-syzkaller #0 [ 1990.462671][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1990.471379][ T27] task:kworker/1:5 state:D stack:25016 pid:16187 ppid: 2 flags:0x00004000 [ 1990.480643][ T27] Workqueue: usb_hub_wq hub_event [ 1990.485744][ T27] Call Trace: [ 1990.489041][ T27] [ 1990.492029][ T27] __schedule+0x12c4/0x45b0 [ 1990.502965][ T27] ? do_raw_spin_lock+0x14a/0x370 [ 1990.508199][ T27] ? mark_lock+0x98/0x340 [ 1990.513202][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1990.519275][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1990.525557][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 1990.530878][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1990.536283][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 1990.541583][ T27] schedule+0x11b/0x1f0 [ 1990.545885][ T27] usb_kill_urb+0x1c9/0x300 [ 1990.550483][ T27] ? usb_unlink_urb+0xa0/0xa0 [ 1990.555365][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 1990.560590][ T27] ? init_wait_entry+0xd0/0xd0 [ 1990.565491][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 1990.570781][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1990.576223][ T27] usb_start_wait_urb+0x1ac/0x510 [ 1990.581363][ T27] ? usb_api_blocking_completion+0xa0/0xa0 [ 1990.587360][ T27] usb_control_msg+0x2ad/0x4c0 [ 1990.592351][ T27] ? usb_anchor_empty+0x40/0x40 [ 1990.597307][ T27] ? kmem_cache_alloc_trace+0x143/0x290 [ 1990.605954][ T27] ? hub_port_init+0x150/0x28c0 [ 1990.610922][ T27] hub_port_init+0xb44/0x28c0 [ 1990.615833][ T27] ? _raw_spin_unlock+0x40/0x40 [ 1990.620740][ T27] hub_event+0x28ed/0x54c0 [ 1990.628586][ T27] ? led_work+0x700/0x700 [ 1990.633194][ T27] ? read_lock_is_recursive+0x10/0x10 [ 1990.638632][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1990.644729][ T27] ? sched_core_share_pid+0x470/0x740 [ 1990.650200][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 1990.655570][ T27] process_one_work+0x8a1/0x10c0 [ 1990.660607][ T27] ? worker_detach_from_pool+0x260/0x260 [ 1990.666399][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1990.672066][ T27] ? kthread_data+0x4e/0xc0 [ 1990.676662][ T27] ? wq_worker_running+0x97/0x170 [ 1990.681752][ T27] worker_thread+0xaca/0x1280 [ 1990.686580][ T27] kthread+0x3f6/0x4f0 [ 1990.690728][ T27] ? rcu_lock_release+0x20/0x20 [ 1990.695784][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1990.701653][ T27] ret_from_fork+0x1f/0x30 [ 1990.714290][ T27] [ 1990.717632][ T27] [ 1990.717632][ T27] Showing all locks held in the system: [ 1990.726417][ T27] 1 lock held by khungtaskd/27: [ 1990.731281][ T27] #0: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 1990.740706][ T27] 2 locks held by getty/3926: [ 1990.745445][ T27] #0: ffff88802c632098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1990.755287][ T27] #1: ffffc900025c62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 1990.765471][ T27] 3 locks held by kworker/1:3/4157: [ 1990.770693][ T27] 5 locks held by kworker/1:5/16187: [ 1990.776072][ T27] #0: ffff888141fc8d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 1990.786947][ T27] #1: ffffc90005aa7d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 1990.798236][ T27] #2: ffff888148845220 (&dev->mutex){....}-{3:3}, at: hub_event+0x208/0x54c0 [ 1990.808538][ T27] #3: ffff8881488985c0 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2238/0x54c0 [ 1990.819007][ T27] #4: ffff888148851368 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2260/0x54c0 [ 1990.829054][ T27] [ 1990.831435][ T27] ============================================= [ 1990.831435][ T27] [ 1990.840347][ T27] NMI backtrace for cpu 0 [ 1990.844716][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.179-syzkaller #0 [ 1990.852714][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1990.862867][ T27] Call Trace: [ 1990.866171][ T27] [ 1990.869133][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 1990.873827][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1990.879454][ T27] ? panic+0x860/0x860 [ 1990.883521][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 1990.888635][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 1990.893556][ T27] ? __wake_up_klogd+0xd5/0x100 [ 1990.898396][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 1990.904542][ T27] ? _printk+0xd1/0x120 [ 1990.908724][ T27] ? panic+0x860/0x860 [ 1990.912813][ T27] ? __wake_up_klogd+0xcc/0x100 [ 1990.917684][ T27] ? panic+0x860/0x860 [ 1990.921767][ T27] ? __rcu_read_unlock+0x92/0x100 [ 1990.926792][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1990.932878][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 1990.938868][ T27] watchdog+0xe72/0xeb0 [ 1990.943029][ T27] kthread+0x3f6/0x4f0 [ 1990.947101][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1990.952130][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1990.956726][ T27] ret_from_fork+0x1f/0x30 [ 1990.961162][ T27] [ 1990.965443][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1990.970687][ C1] NMI backtrace for cpu 1 [ 1990.970699][ C1] CPU: 1 PID: 11480 Comm: kworker/u4:16 Not tainted 5.15.179-syzkaller #0 [ 1990.970718][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1990.970729][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1990.970767][ C1] RIP: 0010:check_preemption_disabled+0x19/0x110 [ 1990.970787][ C1] Code: cc 48 c7 c7 20 fa f9 8a 48 c7 c6 60 fa f9 8a eb 00 41 57 41 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 <65> 8b 1d 28 02 c2 75 65 8b 05 91 5c c2 75 a9 ff ff ff 7f 74 22 65 [ 1990.970801][ C1] RSP: 0018:ffffc900034a78a8 EFLAGS: 00000082 [ 1990.970814][ C1] RAX: e901ccfe48102100 RBX: ffffc900034a7940 RCX: ffffffff8162e19c [ 1990.970828][ C1] RDX: 0000000000000000 RSI: ffffffff8aab3860 RDI: ffffffff8af9fa80 [ 1990.970839][ C1] RBP: ffffc900034a7a40 R08: dffffc0000000000 R09: fffffbfff1c153f6 [ 1990.970852][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000694f24 [ 1990.970863][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246 [ 1990.970874][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1990.970888][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1990.970917][ C1] CR2: 000055d2b7ecd8d0 CR3: 00000000245b2000 CR4: 00000000003506e0 [ 1990.970932][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1990.970942][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1990.970952][ C1] Call Trace: [ 1990.970958][ C1] [ 1990.970964][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 1990.970983][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1990.971003][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 1990.971021][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 1990.971047][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1990.971066][ C1] ? nmi_handle+0xf7/0x370 [ 1990.971084][ C1] ? check_preemption_disabled+0x19/0x110 [ 1990.971104][ C1] ? default_do_nmi+0x62/0x150 [ 1990.971124][ C1] ? exc_nmi+0xa8/0x100 [ 1990.971141][ C1] ? end_repeat_nmi+0x16/0x31 [ 1990.971174][ C1] ? lock_acquire+0xcc/0x4f0 [ 1990.971190][ C1] ? check_preemption_disabled+0x19/0x110 [ 1990.971207][ C1] ? check_preemption_disabled+0x19/0x110 [ 1990.971225][ C1] ? check_preemption_disabled+0x19/0x110 [ 1990.971242][ C1] [ 1990.971247][ C1] [ 1990.971254][ C1] lock_acquire+0x1a0/0x4f0 [ 1990.971272][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1990.971290][ C1] ? rcu_lock_release+0x5/0x20 [ 1990.971306][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 1990.971325][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 1990.971344][ C1] ? batadv_iv_ogm_schedule+0x649/0x1000 [ 1990.971366][ C1] rcu_lock_acquire+0x2a/0x30 [ 1990.971383][ C1] ? rcu_lock_acquire+0x5/0x30 [ 1990.971399][ C1] batadv_iv_ogm_schedule+0x429/0x1000 [ 1990.971438][ C1] ? skb_push+0x93/0x100 [ 1990.971460][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 1990.971491][ C1] ? batadv_send_skb_packet+0x3bc/0x5f0 [ 1990.971517][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6fa/0x800 [ 1990.971546][ C1] process_one_work+0x8a1/0x10c0 [ 1990.971573][ C1] ? worker_detach_from_pool+0x260/0x260 [ 1990.971594][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1990.971610][ C1] ? kthread_data+0x4e/0xc0 [ 1990.971627][ C1] ? wq_worker_running+0x97/0x170 [ 1990.971646][ C1] worker_thread+0xaca/0x1280 [ 1990.971664][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1990.971692][ C1] kthread+0x3f6/0x4f0 [ 1990.971708][ C1] ? rcu_lock_release+0x20/0x20 [ 1990.971725][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1990.971754][ C1] ret_from_fork+0x1f/0x30 [ 1990.971780][ C1] [ 1990.985784][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1991.331392][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.179-syzkaller #0 [ 1991.339358][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1991.349409][ T27] Call Trace: [ 1991.352773][ T27] [ 1991.355735][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 1991.360474][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1991.366124][ T27] ? panic+0x860/0x860 [ 1991.370205][ T27] panic+0x318/0x860 [ 1991.374091][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1991.379733][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 1991.385891][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 1991.391080][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1991.397154][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 1991.403329][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 1991.409515][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 1991.415670][ T27] watchdog+0xeb0/0xeb0 [ 1991.419842][ T27] kthread+0x3f6/0x4f0 [ 1991.423913][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1991.428961][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1991.433563][ T27] ret_from_fork+0x1f/0x30 [ 1991.437995][ T27] [ 1991.441677][ T27] Kernel Offset: disabled [ 1991.446007][ T27] Rebooting in 86400 seconds..