last executing test programs: 14m36.987582891s ago: executing program 32 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x241, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='p:myevent ./file0:0', 0x13) openat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing/uprobe_events\x00', 0xe242, 0x48) 14m20.805666151s ago: executing program 33 (id=134): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f0000000080)={'wlan1\x00'}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, &(0x7f00000006c0)={0x14, &(0x7f0000000580)={0x0, 0x23, 0xf, {0xf, 0x8, "5ea685e607c7c57316d90e035b"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f0000000c40)={0x1c, &(0x7f0000000700)={0x40, 0xd, 0x48, "d251793b7c822b2a17536686973cb9fe5d79eafe10e0ceded9e7815064726edc02dfd82806178b56d0d3e90b6274e1217e1b484424748d7d6e19d58004cc768ace34ddcffe5dd428"}, &(0x7f00000007c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c00)}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8d0) 14m18.556707876s ago: executing program 34 (id=146): memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m2.808488365s ago: executing program 35 (id=208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x23) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x3, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) splice(r1, 0x0, r3, 0x0, 0x10500, 0x0) 13m49.652525639s ago: executing program 36 (id=266): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8094) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffc7b8) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) close(0x3) 13m43.596469009s ago: executing program 37 (id=302): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x169442, 0x1e8) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) unshare(0x20000400) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x20) fchown(r0, 0xffffffffffffffff, 0x0) lseek(r0, 0x80000000008, 0x0) 13m33.582131756s ago: executing program 38 (id=353): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='timerslack_ns\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 12m52.712330345s ago: executing program 39 (id=564): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8541, 0x84) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r0, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x20008841) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8201, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @window={0x3, 0x0, 0x4}], 0x3) 11m47.967195562s ago: executing program 40 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0xba) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000d0c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x170, 0x0, 0xfd, [{{0x1, 0x2, 0x3, 0x8, 0x9, 0x8, {0x204, 0x6, 0xfffffffffffff534, 0x7, 0x8000000000000000, 0x1, 0x3, 0x4, 0x7fff, 0xc000, 0xfffff843, r2, r3, 0x6, 0x200003}}, {0x0, 0xc7b, 0x10, 0x6, '.'}}, {{0x6, 0x0, 0x7d, 0xfff, 0x6, 0x3, {0x83, 0x4, 0x2b6a, 0x0, 0x4, 0x5, 0x7, 0x100, 0x5, 0x8000, 0x4, 0x0, r3, 0x0, 0x6}}, {0x1, 0x2b96, 0x25, 0x4, '(\\\xab\x12(>D=t\v\x92\b\x9f\x8a\xf5\a\xa5\xdf\x80\xaf\x84\x83\x14(ouv\xab6\x1e\xe3\x92i\xf06\xbc!'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) read$FUSE(r0, &(0x7f00000083c0)={0x2020}, 0x2020) 11m25.698060042s ago: executing program 41 (id=1064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x3, {0x1, 0x0, 0x4}, 0x1}, 0x18) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 9m41.358020477s ago: executing program 0 (id=1417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) rt_sigpending(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x7b35, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) 9m40.191231195s ago: executing program 0 (id=1419): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) r1 = socket(0x2, 0x1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x41, 0x1, 0x7fffc, 0x4, {0x2}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x4, 0x0, 0x0) 9m38.39132555s ago: executing program 0 (id=1425): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x40800) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x7, 0x4, 0x34524742, 0x8, 0xc, [{0xfffffffe, 0xb}, {0x40, 0x7}, {0x800, 0x100}, {0x8, 0x1}, {0xfffffffb, 0x676e7560}, {0xc2f8, 0x5}, {0x3, 0x1}, {0x4, 0x165}], 0xe, 0x6, 0x7, 0x0, 0x3}}) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r4, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$GETZCNT(r4, 0x2, 0xf, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x123, 0x233, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa6}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x72}]}, 0x2c}}, 0x0) 9m36.307249561s ago: executing program 0 (id=1432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x106f) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r7, 0x0) 9m34.835331918s ago: executing program 0 (id=1435): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0x83) splice(r1, 0x0, r0, 0x0, 0xfea5, 0xa) 9m32.234593492s ago: executing program 0 (id=1439): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0xa}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3123, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x1, 0x2000000000, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x4, 0xffffffffffffffff, 0x2, 0x0, 0x80000000000, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x3, 0x1, 0x42, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r6}, 0x38) 9m16.48745588s ago: executing program 42 (id=1439): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0xa}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3123, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x1, 0x2000000000, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x4, 0xffffffffffffffff, 0x2, 0x0, 0x80000000000, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x3, 0x1, 0x42, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r6}, 0x38) 8m0.143406455s ago: executing program 6 (id=1834): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x439, 0x0, 0x4000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x23}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000240)='?', 0x1, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 7m59.825524342s ago: executing program 6 (id=1836): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pwritev2(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="edcb", 0x2}], 0x1, 0x800, 0x5, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m59.478152941s ago: executing program 6 (id=1839): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000c850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[], 0x0) 7m59.223316787s ago: executing program 6 (id=1842): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x4}, 0x1c) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x2f) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="79ee7c2eea00", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 7m58.975345233s ago: executing program 6 (id=1846): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) syz_clone3(&(0x7f0000000540)={0x200103000, &(0x7f0000000140), 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 7m57.935369689s ago: executing program 6 (id=1856): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto(r0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 7m41.65690289s ago: executing program 43 (id=1856): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto(r0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 7m40.629636666s ago: executing program 7 (id=1983): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000400)="91", 0x1}], 0x1) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='0\x00'], 0x30}], 0x1, 0x0) 7m40.307389614s ago: executing program 7 (id=1984): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m38.930035818s ago: executing program 7 (id=1993): r0 = syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000009880), 0x0, 0xd4a0, &(0x7f00000098c0)="$eJzs3QtsleX9wPG3lFZq1PxNTPRvYoYgojhFWhWZCrQ4WAWLyJQKAyTSFRGvEAduURZDNjWLGJdtxkXHZnSbZMsuKNuSDWcAwagwDYwsgTGNl6mAceMyDV3OrbSH0tgHn6dDPp+Enr7v6e9pOd8+77EmhzaPndyQZX2zgsVZufrvrt+0/rVxP1g+4c8nPjjnll8Vzo4eXby7f/H29OLtgCy/WP7uPoVTNdlvV/TJHfTpuO6xNTUVJ2TZScXD0nrDCzd3rit9XFuZ4un/K92fX7Qi/+b+wp92NfnPc23lrI7rFD664uC/6FGquX7c2NIj2KFbZfHuigP35W/7Fv6MWp9lo9Zmh/z+6FW5r3PxSY99fGVvfyFHgub6cY1l/UcXO1cU92P/8j14NCr/Pm/92aYtxYewossL5xGiuX7shKybfTxy1vzL2wrXzaosy6qzLDsmy7J+vd2DT0d9Q11D7ppfOi5mL+3/xV19X8zY++EbWZYdX3yeGFF6LgCOLPUNdWO62P/V3e3/0Y1P/Mv+hyNfY31DXW6vl+3/ft3t/9dWDjuh+LP/8MLU/t79SwAAAAAAXZq/6K6bZs2b13KHd7zjHe+0v9PbVyYgtgObvre/EiC1FP850dt/RwAAADjaNTbVv19Z0elUZceD015qyd9esKd5zn2rlqws3RbvHt/Fkp1e59/W1tZ2347q0utjjyl7vWy/8uHc+nOPG7K0eNi//PUHVfmzVdn1X71xXsv5uU81sCpbmDsYllv3zKpsae6gNncwuCr7ae6gLn9Qk63KHZx3w63zZudOnBX4iH22NDYtzio7Fcs6fTd07D/3uEk/Kt12s2Rptfw/KpHrv2LFgifL7is5RP/29U//H/z3BT5TetZ/enPptpslD9r/t//6L/Vd3Xfo/u3rD9A/ri6u/50alV/3y67//btYsn3+mYWtM3P9H51xbGn/9/0k1/8O6w8s759fvP36n1vqjNL1P/fcMuiwHoyjUGPTN9/vbv9337/vqcUP69Nhtn21sRM3Lcr1X7fwe8uLp6p62P+M7vZ/Rf+Drif0UGPTsray/d+D/tngLpZsb7K0etqJuf7brz57aof7etJ/UHn/oQtuvm3o/EV3nXvjzbNaW1pbbqmrHXHhxRfUjqgdMTR/SSi8PbwH5ShyePs/O7ZspiLLBrXPv/v2hsty/S9c/dGa4ql+Pex/Zrf7//rOXysdDOiTVVdnC2ctWHDHsMLb0mFt4W3hw7ro34Pn/4GlH6JqircVWXZK+/w9H//uqlz/feueXFY8Vd3D/oO761994PMS6DD3/+yymU79T3vqkadz/adPaLiieKqnz/9ndbv/F9v/h6uxqex/+HzKcv1bdr64MHD8bD//xZWi/8i2tScGjg/RP64U/ffsev6iwPFz9I8rRf9vb9v2fOD45/WPK0X/+g1/eyNw/Fz940rR/9RVm78TOH6e/nGl6P/qK6/+PHB8qP5xpejfuu/R/w8cP1//uFL0/8Xux0cGjg/TP64U/f/95sNTAsdr9Y8rRf9L3/n+bYHjdfrHlaL/mDUPLAkcv0D/uFL0v3/dgz8OHL9Q/7hS9N+45d4XA8cv0j+uFP1P2fSt9wLHh+sfV4r+Wz+Yckbg+MX6x5Wi/8n7J4d+ihH6x5Wi/4QdM+cGjn9B/7hS9F+yfVro7+K8RP+4UvT/z8vjVgaOX6p/XCn61z035vHA8cv0jytF/zkbJ+4OHB+pf1wp+i/bOn5j4Pgo/eNK0f+FfX+6O3B8tP5xpehfsfsP1wWO1+sfV4r+U998NvQFmQ36x5Wi/8Pv/ObkwPEx+seVov97a375j8Dxy/WPK0X/QeueXh04/kX940rR/+4tTy0PHB+rf1wp+j+76ScPBI6P0z+uFP1v/2D+mMDxL+kfV4r+K/d/bXbgeKP+caXo//qOrx8fOH6F/nGl6D9k+z1DAsfH6x9Xiv7XvHzDtsDxCfrHlaL/D59r3Rs4fqX+caXov3bjTQ8FjjfpH1eK/idsvfWZwPGJ+seVov/v3x5cFTh+lf5xpeg//62BAwLHJ+kfV4r+Z+0Z2tXvCfkkrtY/rhT9t+89J/S3yU/WP64U/R/bPPyRwPEv6x9Xiv5T/lr3x8Dxa/SPK0X/414YtTlw/Fr940rRf/XaS3YFjk/RP64U/Sv//u7FgePN+seVov/6nTs/Fzh+nf5xpej/UNvrdwaOT9U/rhT9m3e9NSlwfJr+caXoP3jbR08Ejn9F/7hS9N+xoe3ewPHp+seVov+KVR/+M3B8hv5xpej/jVf2vBQ4PlN/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOwHbdC4Y938/Yx37lqRk3/edrENI1iwlFLIXUkloG0qFRKEoa4hQIbuSpDASFdoslX3f92X+x5gZSafe3vft+Pn3nud5HM993dcy1/O9v5/rup6bqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqr/i2225sarDQYTjlsb+Q/7Rxw+6sZR16915BnrXjbtITvtdtbYrauuOm73bKNf1eClk720e9jYQ4YPzjl52JiVYa8872TDhw9NNRiagUe155P/xbCnGf/mpZMOvfRy4Niflxs+5mWfixfa+L84l7rNRqy15rgZHHqF2wTjdg+Nn91xywnH/izz1GCwzKWD17w+Xv9uOvuk9V7vMfwntNmItdZ+lf9gnPNL7q++v629+jr/1Kqjdn9d4f5NbTZizXXHWL/WfXzDdQ8MHz32uT7RYDCYeDAYTDIYDCZ9vT3q39OI1ZZcbcwzf/z6WPWR478Q0PN9aGij47cc9/d12cFg+Krj/xZU1X9WI1ZbcnW4/yd+eT/c/7Pe9tS63f9V//mtPWK1JQev+J4/duvIScfvp/v/qmMuWOr1G3FVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVvR69+MBFlwwGg6HBYDBsMHh+MO79K5eD0aNHjx6zfual1133ug30/x8NjTh81I2jrl/ryDPWvWzaQ3ba7ay/zdJ/bP/5n6D+N43xn/S02QaD3TZ9vYdSr0Pd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uxQcuumTcNTBsMHh+MO79yPHLKRa67OBxh859y7GX7/fqfz9m26T/z0f9ujU04vBRN466fq0jz1j3smkP2Wm3s/4P3D3/+Z+g/je95L/z0Nh7eTAYTLPzYDBYf8RGm8w3GAz2u/zYW+YYvLxvuTH7VphugsEEL/3T+V56nfs1TjzbK5eTvXyOM186/9qjT5hg6FWDeEUX7H/pATtt9tRSr17O+9qfY9j4N9NuMfGho0ePHv13G8f1Ws+q8ecf/1lefZ+PG/t8Y8a+6B677r7ox/beZ+Gdd91mx+133H63JZdYfunlllpi+SWWX3SHnXfZfrGxr68xZ2NnZc5/Zc4mfvWcPTDilXP26s/2WnM22z+fs5fOuNWOe503fs4m/G/O2Zz/fM5m23n8WGebaLD1S1Mz5lfONdFgrzEri0/yir8tM405dsXphg0Gh/7tg455N8nL1+DQyDHHbLbmxqv9baQj/2Fs//CcfqlVV33VNM8+bjnH2I+96iumdfjgnHOHjVn5u2mebPjwoakGgxnGrY4/3/JjF7tvOv640a9q3OZpXjnxY2d+6MCxPy83fMzLrQuevfIrz/MaBP+O/kfP/3/wWm7o5YkaGvcz7pixXiPWWvtvv2vV8S8Tjtu27BiTV8/Zv7N/GO9sw16+rmm8a49Ybckxm181/y/fCnR9rfP0ESPHXVvLjv1XL/6PUfjZse5Lr691P8/2quU/e3ZM8Le3f9u6/TWzvPrZsc5rD/Hv7ovxczTJqw56rWfHoQtM8cFXPpte49mx7pixTzR45bNjzK+dc/yzY8zY55locOiYlSXGrMw70eDUMStLvrQyfHDpmJVFtv3wLtsNvfT36h+ug/mGXp6A17hu13zVdTvsFdM39Ir5Gxp3PU84GKwyajBY5Qr6XK89nRxdtxP/k/GOWG3J1ceM8VXX7fh/QuMZOmz0lTMOBoMpx32u5ceP/X8SjXfCfz7e1WC8E/6T8Q4OXv+4if/N4335PnvpWhv3mJ7vNf7N391n0/zDfbbvBK+4M/7V7zXbwfFj38/08tlOP+qUWcbP0USvOu9/9Td6/Gch//Hf+V7Z0MjB0D+bm9f6HvZ3czPVP5+bf/X7y3zjvmAM/ydzs+GFz392/NxM/N+cm3lfY25e+X34lU08GAz/+7mZcLDGmG804+Zmnn9lbqb491w3k8HxY9/P/fKmla67+77xcwNzgX//x59/nv/m3Axt/fJ1M9dL++YYNph44sFe2+yxx0cXH/s6fnWJsa///B6c61+Zy0n/PXM587inzrB/nJyXN+194wZr/k/vwbn+u3M522DY+P/nsvOrb5Z/X/33v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iXnzgokvGXQPDBoPnB2PfD41bDkbefPSCy41ZDgaDic4/eq+1Xu/xvs4NjTh81I2jrl/ryDPWvWzaQ3ba7az/A3fPf/4nqP9NL/nvPDQYjLu/p9l5MBisP2KjTeYbDAZr7XX0+cMGL++bacy+FacbNhgcOvR3J5jk5WOGRo45ZrM1N15tMJhw3BEj/+GX/sN99FKrrjpu92zjlrOPW84xeOlkL+0eNnbT8ME55w4bszLsleedbPjwoakGgxnGrY4/37JjF3teNf640a9q3OZpxu8f9vLMDB049uflho95mX6aY09+5Xn+5dn+f9T4Z/XOw/7LQ7v/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9yLD1x0ybhrYNhg8Pxg7PuhkeOWgxO3+MjwcZfIRAuOvvby13u8r3NDIw4fdeOo69c68ox1L5v2kJ12O+v/wN3zn/8J6n/TS/47Dw0G4+7vaXYeDAbrj9hok/kGg8Hl145ecNjg5X0zjdm34nTDBoNDh/7uBJO8fMzQyDHHbLbmxqsNBhOOO2LkP/zSf7iPXmrVVcftnm3ccvZxyzkGL53spd3Dxm4aPjjn3GFjVoa98ryTDR8+NNVgMMO41fHnW3bsYs+rxh83+lWN2zzN+P3DXp6ZoQPH/rzc8DEvC1+9+a6vPM+/PNv/jxr/rN552H95aPe/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vxgYsuGXcNDBsMnh+MfT9s3HJo5KIPnzn/mOWY9dsnOujI13u8r3NDIw4fdeOo69c68ox1L5v2kJ12O+v/wN3zn/8J6n/TGP9JT5ttMNht09d7KPU61P3vLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4l584KJLxr0d9retw0Z2XWBDIw4fdeOo69c68ox1L5v2kJ12O+v1HtD/ttfw3zd/zOK/X/6Yxf9z+WMW/8/nj1n8988fs/h/IX/M4v/F/DGL/5fyxyz+B+SPWfwPzB+z+B+UP2bx/3L+mMX/4Pwxi/9X8scs/ofkj1n8D80fs/h/NX/M4v+1/DGL/2H5Yxb/w/PHLP5H5I9Z/L+eP2bx/0b+mMX/yPwxi/9R+WMW/2/mj1n8v5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8v50/ZvE/MX/M4n9S/pjF/+T8MYv/d/LHLP6n5I9Z/E/NH7P4fzd/zOJ/Wv6Yxf/0/DGL/xn5Yxb/7+WPWfy/nz9m8f9B/pjF/8z8MYv/WfljFv+z88cs/j/MH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/j/KH/M4v/j/DGL/yX5Yxb/n+SPWfwvzR+z+P80f8zif1n+mMX/Z/ljFv/L88cs/j/PH7P4/yJ/zOJ/Rf6Yxf/K/DGL/1X5Yxb/UfljFv+r88cs/r/MH7P4X5M/ZvH/Vf6Yxf/a/DGL/3X5Yxb/X+ePWfx/kz9m8f9t/pjF//r8MYv/DfljFv8b88cs/r/LH7P4/z5/zOL/h/wxi/8f88cs/n/KH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/n/PHLP5/yR+z+P81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+o/PHJP4TDPLHLP5D+WMW/2H5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf3j+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5vyB+z+M+YP2bxf2P+mMV/pvwxi/+b8scs/jPnj1n835w/ZvF/S/6YxX+W/DGL/1vzxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxf1v+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxH5E/ZvFfLX/M4r96/pjF/+35Yxb/NfLHLP5r5o9Z/NfKH7P4vyN/zOK/dv6Yxf+d+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6Yxf9d+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bxf3f+mMX/PfljFv/N8scs/u/NH7P4b54/ZvHfIn/M4r9l/pjF/335Yxb/9+ePWfy3yh+z+G+dP2bx3yZ/zOL/gfwxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6Yxf+D+WMW/w/lj1n8d8kfs/jvmj9m8d8tf8zi/+H8MYv/7vljFv+P5I9Z/D+aP2bx/1j+mMV/j/wxi//H88cs/nvmj1n8P5E/ZvHfK3/M4r93/pjFf5/8MYv/J/PHLP6fyh+z+H86f8zi/5n8MYv/Z/PHLP4j88cs/vvmj1n898sfs/h/Ln/M4v/5/DGL//75Yxb/L+SPWfy/mD9m8f9S/pjF/4D8MYv/gfljFv+D8scs/l/OH7P4H5w/ZvH/Sv6Yxf+Q/DGL/6H5Yxb/r+aPWfy/lj9m8T8sf8zif3j+mMX/iPwxi//X88cs/t/IH7P4H5k/ZvE/Kn/M4v/N/DGL/7fyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/7fzxyz+J+aPWfxPyh+z+J+cP2bx/07+mMX/lPwxi/+p+WMW/+/mj1n8T8sfs/ifnj9m8T8jf8zi/738MYv/9/PHLP4/yB+z+J+ZP2bxPyt/zOJ/dv6Yxf+H+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/H+WPWfx/nD9m8b8kf8zi/5P8MYv/pfljFv+f5o9Z/C/LH7P4/yx/zOJ/ef6Yxf/n+WMW/1/kj1n8r8gfs/hfmT9m8b8qf8ziPyp/zOJ/df6Yxf+X+WMW/2vyxyz+v8ofs/hfmz9m8b8uf8zi/+v8MYv/b/LHLP6/zR+z+F+fP2bxvyF/zOJ/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6Yxf9P+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bx/3P+mMX/L/ljFv+/5o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjFf3T+mMR/wkH+mMV/KH/M4j8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+A/PH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/DfljFv8Z88cs/m/MH7P4z5Q/ZvF/U/6YxX/m/DGL/5vzxyz+b8kfs/jPkj9m8X9r/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/m/LH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/iPyxyz+q+WPWfxXzx+z+L89f8ziv0b+mMV/zfwxi/9a+WMW/3fkj1n8184fs/i/M3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/i/K3/M4r9R/pjFf+P8MYv/JvljFv9N88cs/u/OH7P4vyd/zOK/Wf6Yxf+9+WMW/83zxyz+W+SPWfy3zB+z+L8vf8zi//78MYv/VvljFv+t88cs/tvkj1n8P5A/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/h/MH/M4v+h/DGL/y75Yxb/XfPHLP675Y9Z/D+cP2bx3z1/zOL/kfwxi/9H88cs/h/LH7P475E/ZvH/eP6YxX/P/DGL/yfyxyz+e+WPWfz3zh+z+O+TP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMV/ZP6YxX/f/DGL/375Yxb/z+WPWfw/nz9m8d8/f8zi/4X8MYv/F/PHLP5fyh+z+B+QP2bxPzB/zOJ/UP6Yxf/L+WMW/4Pzxyz+X8kfs/gfkj9m8T80f8zi/9X8MYv/1/LHLP6H5Y9Z/A/PH7P4H5E/ZvH/ev6Yxf8b+WMW/yPzxyz+R+WPWfy/mT9m8f9W/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8f92/pjF/8T8MYv/SfljFv+T88cs/t/JH7P4n5I/ZvE/NX/M4v/d/DGL/2n5Yxb/0/PHLP5n5I9Z/L+XP2bx/37+mMX/B/ljFv8z88cs/mflj1n8z84fs/j/MH/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zi/6P8MYv/j/PHLP6X5I9Z/H+SP2bxvzR/zOL/0/wxi/9l+WMW/5/lj1n8L88fs/j/PH/M4v+L/DGL/xX5Yxb/K/PHLP5X5Y9Z/Eflj1n8r84fs/j/Mn/M4n9N/pjF/1f5Yxb/a/PHLP7X5Y9Z/H+dP2bx/03+mMX/t/ljFv/r88cs/jfkj1n8b8wfs/j/Ln/M4v/7/DGL/x/yxyz+f8wfs/j/KX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/n/OH7P4/yV/zOL/1/wxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+I/OH5P4TzTIH7P4D+WPWfyH5Y9Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/h+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4vyF/zOI/Y/6Yxf+N+WMW/5nyxyz+b8ofs/jPnD9m8X9z/pjF/y35Yxb/WfLHLP5vzR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf9t+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX9E/pjFf7X8MYv/6vljFv+3549Z/NfIH7P4r5k/ZvFfK3/M4v+O/DGL/9r5Yxb/d+aPWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/d+WPWfw3yh+z+G+cP2bx3yR/zOK/af6Yxf/d+WMW//fkj1n8N8sfs/i/N3/M4r95/pjFf4v8MYv/lvljFv/35Y9Z/N+fP2bx3yp/zOK/df6YxX+b/DGL/wfyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/D+aPWfw/lD9m8d8lf8ziv2v+mMV/t/wxi/+H88cs/rvnj1n8P5I/ZvH/aP6Yxf9j+WMW/z3yxyz+H88fs/jvmT9m8f9E/pjFf6/8MYv/3vljFv998scs/p/MH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4j8wfs/jvmz9m8d8vf8zi/7n8MYv/5/PHLP77549Z/L+QP2bx/2L+mMX/S/ljFv8D8scs/gfmj1n8D8ofs/h/OX/M4n9w/pjF/yv5Yxb/Q/LHLP6H5o9Z/L+aP2bx/1r+mMX/sPwxi//h+WMW/yPyxyz+X88fs/h/I3/M4n9k/pjF/6j8MYv/N/PHLP7fyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP7fzh+z+J+YP2bxPyl/zOJ/cv6Yxf87+WMW/1Pyxyz+p+aPWfy/mz9m8T8tf8zif3r+mMX/jPwxi//38scs/t/PH7P4/yB/zOJ/Zv6Yxf+s/DGL/9n5Yxb/H+aPWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/H+UP2bx/3H+mMX/kvwxi/9P8scs/pfmj1n8f5o/ZvG/LH/M4v+z/DGL/+X5Yxb/n+ePWfx/kT9m8b8if8zif2X+mMX/qvwxi/+o/DGL/9X5Yxb/X+aPWfyvyR+z+P8qf8zif23+mMX/uvwxi/+v88cs/r/JH7P4/zZ/zOJ/ff6Yxf+G/DGL/435Yxb/3+WPWfx/nz9m8f9D/pjF/4/5Yxb/P+WPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf/P+WMW/7/kj1n8/5o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv/R+WMS/4kH+WMW/6H8MYv/sPwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bxnzR/zOI/PH/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/zfkj1n8Z8wfs/i/MX/M4j9T/pjF/035Yxb/mfPHLP5vzh+z+L8lf8ziP0v+mMX/rfljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/i/LX/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/iPyB+z+K+WP2bxXz1/zOL/9vwxi/8a+WMW/zXzxyz+a+WPWfzfkT9m8V87f8zi/878MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8zi/678MYv/RvljFv+N88cs/pvkj1n8N80fs/i/O3/M4v+e/DGL/2b5Yxb/9+aPWfw3zx+z+G+RP2bx3zJ/zOL/vvwxi//788cs/lvlj1n8t84fs/hvkz9m8f9A/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8zi/8H8MYv/h/LHLP675I9Z/HfNH7P475Y/ZvH/cP6YxX/3/DGL/0fyxyz+H80fs/h/LH/M4r9H/pjF/+P5Yxb/PfPHLP6fyB+z+O+VP2bx3zt/zOK/T/6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/5H5Yxb/ffPHLP775Y9Z/D+XP2bx/3z+mMV///wxi/8X8scs/l/MH7P4fyl/zOJ/QP6Yxf/A/DGL/0H5Yxb/L+ePWfwPzh+z+H8lf8zif0j+mMX/0Pwxi/9X88cs/l/LH7P4H5Y/ZvE/PH/M4n9E/pjF/+v5Yxb/b+SPWfyPzB+z+B+VP2bx/2b+mMX/W/ljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/2/ljFv8T88cs/iflj1n8T84fs/h/J3/M4n9K/pjF/9T8MYv/d/PHLP6n5Y9Z/E/PH7P4n5E/ZvH/Xv6Yxf/7+WMW/x/kj1n8z8wfs/iflT9m8T87f8zi/8P8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/+P8scs/j/OH7P4X5I/ZvH/Sf6Yxf/S/DGL/0/zxyz+l+WPWfx/lj9m8b88f8zi//P8MYv/L/LHLP5X5I9Z/K/MH7P4X5U/ZvEflT9m8b86f8zi/8v8MYv/NfljFv9f5Y9Z/K/NH7P4X5c/ZvH/df6Yxf83+WMW/9/mj1n8r88fs/jfkD9m8b8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8zi/6f8MYv/TfljFv+b88cs/rfkj1n8b80fs/j/OX/M4v+X/DGL/1/zxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOI/On9M4j/JIH/M4j+UP2bxH5Y/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8h+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+G/DGL/4z5Yxb/N+aPWfxnyh+z+L8pf8ziP3P+mMX/zfljFv+35I9Z/GfJH7P4vzV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/t+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/EfljFv/V8scs/qvnj1n8354/ZvFfI3/M4r9m/pjFf638MYv/O/LHLP5r549Z/N+ZP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/N+VP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/d+ePWfzfkz9m8d8sf8zi/978MYv/5vljFv8t8scs/lvmj1n835c/ZvF/f/6YxX+r/DGL/9b5Yxb/bfLHLP4fyB+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/D+YP2bx/1D+mMV/l/wxi/+u+WMW/93yxyz+H84fs/jvnj9m8f9I/pjF/6P5Yxb/j+WPWfz3yB+z+H88f8ziv2f+mMX/E/ljFv+98scs/nvnj1n898kfs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4j8yf8ziv2/+mMV/v/wxi//n8scs/p/PH7P4758/ZvH/Qv6Yxf+L+WMW/y/lj1n8D8gfs/gfmD9m8T8of8zi/+X8MYv/wfljFv+v5I9Z/A/JH7P4H5o/ZvH/av6Yxf9r+WMW/8Pyxyz+h+ePWfyPyB+z+H89f8zi/438MYv/kfljFv+j8scs/t/MH7P4fyt/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4fzt/zOJ/Yv6Yxf+k/DGL/8n5Yxb/7+SPWfxPyR+z+J+aP2bx/27+mMX/tPwxi//p+WMW/zPyxyz+38sfs/h/P3/M4v+D/DGL/5n5Yxb/s/LHLP5n549Z/H+YP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvH/Uf6Yxf/H+WMW/0vyxyz+P8kfs/hfmj9m8f9p/pjF/7L8MYv/z/LHLP6X549Z/H+eP2bx/0X+mMX/ivwxi/+V+WMW/6vyxyz+o/LHLP5X549Z/H+ZP2bxvyZ/zOL/q/wxi/+1+WMW/+vyxyz+v84fs/j/Jn/M4v/b/DGL//X5Yxb/G/LHLP435o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/P+UP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/P+ePWfz/kj9m8f9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8R+ePSfwnHeSPWfyH8scs/sPyxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL//D8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfzfkD9m8Z8xf8zi/8b8MYv/TPljFv835Y9Z/GfOH7P4vzl/zOL/lvwxi/8s+WMW/7fmj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8zi/7b8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziPyJ/zOK/Wv6YxX/1/DGL/9vzxyz+a+SPWfzXzB+z+K+VP2bxf0f+mMV/7fwxi/8788cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/+78scs/hvlj1n8N84fs/hvkj9m8d80f8zi/+78MYv/e/LHLP6b5Y9Z/N+bP2bx3zx/zOK/Rf6YxX/L/DGL//vyxyz+788fs/hvlT9m8d86f8ziv03+mMX/A/ljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8H88cs/h/KH7P475I/ZvHfNX/M4r9b/pjF/8P5Yxb/3fPHLP4fyR+z+H80f8zi/7H8MYv/HvljFv+P549Z/PfMH7P4fyJ/zOK/V/6YxX/v/DGL/z75Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/z+aPWfxH5o9Z/PfNH7P475c/ZvH/XP6Yxf/z+WMW//3zxyz+X8gfs/h/MX/M4v+l/DGL/wH5Yxb/A/PHLP4H5Y9Z/L+cP2bxPzh/zOL/lfwxi/8h+WMW/0Pzxyz+X80fs/h/LX/M4n9Y/pjF//D8MYv/EfljFv+v549Z/L+RP2bxPzJ/zOJ/VP6Yxf+b+WMW/2/lj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/2/nj1n8T8wfs/iflD9m8T85f8zi/538MYv/KfljFv9T88cs/t/NH7P4n5Y/ZvE/PX/M4n9G/pjF/3v5Yxb/7+ePWfx/kD9m8T8zf8zif1b+mMX/7Pwxi/8P88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+P8ofs/j/OH/M4n9J/pjF/yf5Yxb/S/PHLP4/zR+z+F+WP2bx/1n+mMX/8vwxi//P88cs/r/IH7P4X5E/ZvG/Mn/M4n9V/pjFf1T+mMX/6vwxi/8v88cs/tfkj1n8f5U/ZvG/Nn/M4n9d/pjF/9f5Yxb/3+SPWfx/mz9m8b8+f8zif0P+mMX/xvwxi//v8scs/r/PH7P4/yF/zOL/x/wxi/+f8scs/jflj1n8b84fs/jfkj9m8b81f8zi/+f8MYv/X/LHLP5/zR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/+j8MYn/8EH+mMV/KH/M4j8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+A/PH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/DfljFv8Z88cs/m/MH7P4z5Q/ZvF/U/6YxX/m/DGL/5vzxyz+b8kfs/jPkj9m8X9r/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/m/LH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/iPyxyz+q+WPWfxXzx+z+L89f8ziv0b+mMV/zfwxi/9a+WMW/3fkj1n8184fs/i/M3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/i/K3/M4r9R/pjFf+P8MYv/JvljFv9N88cs/u/OH7P4vyd/zOK/Wf6Yxf+9+WMW/83zxyz+W+SPWfy3zB+z+L8vf8zi//78MYv/VvljFv+t88cs/tvkj1n8P5A/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/h/MH/M4v+h/DGL/y75Yxb/XfPHLP675Y9Z/D+cP2bx3z1/zOL/kfwxi/9H88cs/h/LH7P475E/ZvH/eP6YxX/P/DGL/yfyxyz+e+WPWfz3zh+z+O+TP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMV/ZP6YxX/f/DGL/375Yxb/z+WPWfw/nz9m8d8/f8zi/4X8MYv/F/PHLP5fyh+z+B+QP2bxPzB/zOJ/UP6Yxf/L+WMW/4Pzxyz+X8kfs/gfkj9m8T80f8zi/9X8MYv/1/LHLP6H5Y9Z/A/PH7P4H5E/ZvH/ev6Yxf8b+WMW/yPzxyz+R+WPWfy/mT9m8f9W/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8f92/pjF/8T8MYv/SfljFv+T88cs/t/JH7P4n5I/ZvE/NX/M4v/d/DGL/2n5Yxb/0/PHLP5n5I9Z/L+XP2bx/37+mMX/B/ljFv8z88cs/mflj1n8z84fs/j/MH/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zi/6P8MYv/j/PHLP6X5I9Z/H+SP2bxvzR/zOL/0/wxi/9l+WMW/5/lj1n8L88fs/j/PH/M4v+L/DGL/xX5Yxb/K/PHLP5X5Y9Z/Eflj1n8r84fs/j/Mn/M4n9N/pjF/1f5Yxb/a/PHLP7X5Y9Z/H+dP2bx/03+mMX/t/ljFv/r88cs/jfkj1n8b8wfs/j/Ln/M4v/7/DGL/x/yxyz+f8wfs/j/KX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/n/OH7P4/yV/zOL/1/wxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+I/OH5P4TzbIH7P4D+WPWfyH5Y9Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/h+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4vyF/zOI/Y/6Yxf+N+WMW/5nyxyz+b8ofs/jPnD9m8X9z/pjF/y35Yxb/WfLHLP5vzR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf9t+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX9E/pjFf7X8MYv/6vljFv+3549Z/NfIH7P4r5k/ZvFfK3/M4v+O/DGL/9r5Yxb/d+aPWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/d+WPWfw3yh+z+G+cP2bx3yR/zOK/af6Yxf/d+WMW//fkj1n8N8sfs/i/N3/M4r95/pjFf4v8MYv/lvljFv/35Y9Z/N+fP2bx3yp/zOK/df6YxX+b/DGL/wfyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/D+aPWfw/lD9m8d8lf8ziv2v+mMV/t/wxi/+H88cs/rvnj1n8P5I/ZvH/aP6Yxf9j+WMW/z3yxyz+H88fs/jvmT9m8f9E/pjFf6/8MYv/3vljFv998scs/p/MH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4j8wfs/jvmz9m8d8vf8zi/7n8MYv/5/PHLP77549Z/L+QP2bx/2L+mMX/S/ljFv8D8scs/gfmj1n8D8ofs/h/OX/M4n9w/pjF/yv5Yxb/Q/LHLP6H5o9Z/L+aP2bx/1r+mMX/sPwxi//h+WMW/yPyxyz+X88fs/h/I3/M4n9k/pjF/6j8MYv/N/PHLP7fyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP7fzh+z+J+YP2bxPyl/zOJ/cv6Yxf87+WMW/1Pyxyz+p+aPWfy/mz9m8T8tf8zif3r+mMX/jPwxi//38scs/t/PH7P4/yB/zOJ/Zv6Yxf+s/DGL/9n5Yxb/H+aPWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/H+UP2bx/3H+mMX/kvwxi/9P8scs/pfmj1n8f5o/ZvG/LH/M4v+z/DGL/+X5Yxb/n+ePWfx/kT9m8b8if8zif2X+mMX/qvwxi/+o/DGL/9X5Yxb/X+aPWfyvyR+z+P8qf8zif23+mMX/uvwxi/+v88cs/r/JH7P4/zZ/zOJ/ff6Yxf+G/DGL/435Yxb/3+WPWfx/nz9m8f9D/pjF/4/5Yxb/P+WPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf/P+WMW/7/kj1n8/5o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv/R+WMS/8kH+WMW/6H8MYv/sPwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bxnzR/zOI/PH/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/zfkj1n8Z8wfs/i/MX/M4j9T/pjF/035Yxb/mfPHLP5vzh+z+L8lf8ziP0v+mMX/rfljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/i/LX/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/iPyB+z+K+WP2bxXz1/zOL/9vwxi/8a+WMW/zXzxyz+a+WPWfzfkT9m8V87f8zi/878MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8zi/678MYv/RvljFv+N88cs/pvkj1n8N80fs/i/O3/M4v+e/DGL/2b5Yxb/9+aPWfw3zx+z+G+RP2bx3zJ/zOL/vvwxi//788cs/lvlj1n8t84fs/hvkz9m8f9A/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8zi/8H8MYv/h/LHLP675I9Z/HfNH7P475Y/ZvH/cP6YxX/3/DGL/0fyxyz+H80fs/h/LH/M4r9H/pjF/+P5Yxb/PfPHLP6fyB+z+O+VP2bx3zt/zOK/T/6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/5H5Yxb/ffPHLP775Y9Z/D+XP2bx/3z+mMV///wxi/8X8scs/l/MH7P4fyl/zOJ/QP6Yxf/A/DGL/0H5Yxb/L+ePWfwPzh+z+H8lf8zif0j+mMX/0Pwxi/9X88cs/l/LH7P4H5Y/ZvE/PH/M4n9E/pjF/+v5Yxb/b+SPWfyPzB+z+B+VP2bx/2b+mMX/W/ljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/2/ljFv8T88cs/iflj1n8T84fs/h/J3/M4n9K/pjF/9T8MYv/d/PHLP6n5Y9Z/E/PH7P4n5E/ZvH/Xv6Yxf/7+WMW/x/kj1n8z8wfs/iflT9m8T87f8zi/8P8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/+P8scs/j/OH7P4X5I/ZvH/Sf6Yxf/S/DGL/0/zxyz+l+WPWfx/lj9m8b88f8zi//P8MYv/L/LHLP5X5I9Z/K/MH7P4X5U/ZvEflT9m8b86f8zi/8v8MYv/NfljFv9f5Y9Z/K/NH7P4X5c/ZvH/df6Yxf83+WMW/9/mj1n8r88fs/jfkD9m8b8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8zi/6f8MYv/TfljFv+b88cs/rfkj1n8b80fs/j/OX/M4v+X/DGL/1/zxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOI/On9M4j/FIH/M4j+UP2bxH5Y/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8h+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+G/DGL/4z5Yxb/N+aPWfxnyh+z+L8pf8ziP3P+mMX/zfljFv+35I9Z/GfJH7P4vzV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/t+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/EfljFv/V8scs/qvnj1n8354/ZvFfI3/M4r9m/pjFf638MYv/O/LHLP5r549Z/N+ZP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/N+VP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/d+ePWfzfkz9m8d8sf8zi/978MYv/5vljFv8t8scs/lvmj1n835c/ZvF/f/6YxX+r/DGL/9b5Yxb/bfLHLP4fyB+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/D+YP2bx/1D+mMV/l/wxi/+u+WMW/93yxyz+H84fs/jvnj9m8f9I/pjF/6P5Yxb/j+WPWfz3yB+z+H88f8ziv2f+mMX/E/ljFv+98scs/nvnj1n898kfs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4j8yf8ziv2/+mMV/v/wxi//n8scs/p/PH7P4758/ZvH/Qv6Yxf+L+WMW/y/lj1n8D8gfs/gfmD9m8T8of8zi/+X8MYv/wfljFv+v5I9Z/A/JH7P4H5o/ZvH/av6Yxf9r+WMW/8Pyxyz+h+ePWfyPyB+z+H89f8zi/438MYv/kfljFv+j8scs/t/MH7P4fyt/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4fzt/zOJ/Yv6Yxf+k/DGL/8n5Yxb/7+SPWfxPyR+z+J+aP2bx/27+mMX/tPwxi//p+WMW/zPyxyz+38sfs/h/P3/M4v+D/DGL/5n5Yxb/s/LHLP5n549Z/H+YP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvH/Uf6Yxf/H+WMW/0vyxyz+P8kfs/hfmj9m8f9p/pjF/7L8MYv/z/LHLP6X549Z/H+eP2bx/0X+mMX/ivwxi/+V+WMW/6vyxyz+o/LHLP5X549Z/H+ZP2bxvyZ/zOL/q/wxi/+1+WMW/+vyxyz+v84fs/j/Jn/M4v/b/DGL//X5Yxb/G/LHLP435o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/P+UP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/P+ePWfz/kj9m8f9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8R+ePSfynHOSPWfyH8scs/sPyxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL//D8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfzfkD9m8Z8xf8zi/8b8MYv/TPljFv835Y9Z/GfOH7P4vzl/zOL/lvwxi/8s+WMW/7fmj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8zi/7b8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziPyJ/zOK/Wv6YxX/1/DGL/9vzxyz+a+SPWfzXzB+z+K+VP2bxf0f+mMV/7fwxi/8788cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/+78scs/hvlj1n8N84fs/hvkj9m8d80f8zi/+78MYv/e/LHLP6b5Y9Z/N+bP2bx3zx/zOK/Rf6YxX/L/DGL//vyxyz+788fs/hvlT9m8d86f8ziv03+mMX/A/ljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8H88cs/h/KH7P475I/ZvHfNX/M4r9b/pjF/8P5Yxb/3fPHLP4fyR+z+H80f8zi/7H8MYv/HvljFv+P549Z/PfMH7P4fyJ/zOK/V/6YxX/v/DGL/z75Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/z+aPWfxH5o9Z/PfNH7P475c/ZvH/XP6Yxf/z+WMW//3zxyz+X8gfs/h/MX/M4v+l/DGL/wH5Yxb/A/PHLP4H5Y9Z/L+cP2bxPzh/zOL/lfwxi/8h+WMW/0Pzxyz+X80fs/h/LX/M4n9Y/pjF//D8MYv/EfljFv+v549Z/L+RP2bxPzJ/zOJ/VP6Yxf+b+WMW/2/lj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/2/nj1n8T8wfs/iflD9m8T85f8zi/538MYv/KfljFv9T88cs/t/NH7P4n5Y/ZvE/PX/M4n9G/pjF/3v5Yxb/7+ePWfx/kD9m8T8zf8zif1b+mMX/7Pwxi/8P88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+P8ofs/j/OH/M4n9J/pjF/yf5Yxb/S/PHLP4/zR+z+F+WP2bx/1n+mMX/8vwxi//P88cs/r/IH7P4X5E/ZvG/Mn/M4n9V/pjFf1T+mMX/6vwxi/8v88cs/tfkj1n8f5U/ZvG/Nn/M4n9d/pjF/9f5Yxb/3+SPWfx/mz9m8b8+f8zif0P+mMX/xvwxi//v8scs/r/PH7P4/yF/zOL/x/wxi/+f8scs/jflj1n8b84fs/jfkj9m8b81f8zi/+f8MYv/X/LHLP5/zR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/+j8MYn/VIP8MYv/UP6YxX9Y/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8R+eP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/G/LHLP4z5o9Z/N+YP2bxnyl/zOL/pvwxi//M+WMW/zfnj1n835I/ZvGfJX/M4v/W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/N+WP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/Efkj1n8V8sfs/ivnj9m8X97/pjFf438MYv/mvljFv+18scs/u/IH7P4r50/ZvF/Z/6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvF/V/6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/N+dP2bxf0/+mMV/s/wxi/9788cs/pvnj1n8t8gfs/hvmT9m8X9f/pjF//35Yxb/rfLHLP5b549Z/LfJH7P4fyB/zOK/bf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/HfKH7P475w/ZvH/YP6Yxf9D+WMW/13yxyz+u+aPWfx3yx+z+H84f8ziv3v+mMX/I/ljFv+P5o9Z/D+WP2bx3yN/zOL/8fwxi/+e+WMW/0/kj1n898ofs/jvnT9m8d8nf8zi/8n8MYv/p/LHLP6fzh+z+H8mf8zi/9n8MYv/yPwxi/+++WMW//3yxyz+n8sfs/h/Pn/M4r9//pjF/wv5Yxb/L+aPWfy/lD9m8T8gf8zif2D+mMX/oPwxi/+X88cs/gfnj1n8v5I/ZvE/JH/M4n9o/pjF/6v5Yxb/r+WPWfwPyx+z+B+eP2bxPyJ/zOL/9fwxi/838scs/kfmj1n8j8ofs/h/M3/M4v+t/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4v/t/DGL/4n5Yxb/k/LHLP4n549Z/L+TP2bxPyV/zOJ/av6Yxf+7+WMW/9Pyxyz+p+ePWfzPyB+z+H8vf8zi//38MYv/D/LHLP5n5o9Z/M/KH7P4n50/ZvH/Yf6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/0f5Yxb/H+ePWfwvyR+z+P8kf8zif2n+mMX/p/ljFv/L8scs/j/LH7P4X54/ZvH/ef6Yxf8X+WMW/yvyxyz+V+aPWfyvyh+z+I/KH7P4X50/ZvH/Zf6Yxf+a/DGL/6/yxyz+1+aPWfyvyx+z+P86f8zi/5v8MYv/b/PHLP7X549Z/G/IH7P435g/ZvH/Xf6Yxf/3+WMW/z/kj1n8/5g/ZvH/U/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/P+cP2bx/0v+mMX/r/ljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8R+dPybxn3qQP2bxH8ofs/gPyx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/SfPHLP7D88cs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxf0P+mMV/xvwxi/8b88cs/jPlj1n835Q/ZvGfOX/M4v/m/DGL/1vyxyz+s+SPWfzfmj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi//b8scs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/+I/DGL/2r5Yxb/1fPHLP5vzx+z+K+RP2bxXzN/zOK/Vv6Yxf8d+WMW/7Xzxyz+78wfs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+78ofs/hvlD9m8d84f8ziv0n+mMV/0/wxi/+788cs/u/JH7P4b5Y/ZvF/b/6YxX/z/DGL/xb5Yxb/LfPHLP7vyx+z+L8/f8ziv1X+mMV/6/wxi/82+WMW/w/kj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O/x979GAAiIEAAfBt3Nu2Gdu2bZxtxbZt27Zt27adNLAVZGdaGP9Ry/9A/1HL/yD/Ucv/YP9Ry/8Q/1HL/1D/Ucv/MP9Ry/9w/1HL/wj/Ucv/SP9Ry/8o/1HL/2j/Ucv/GP9Ry/9Y/1HL/zj/Ucv/eP9Ry/8E/1HL/0T/Ucv/JP9Ry/9k/1HL/xT/Ucv/VP9Ry/80/1HL/3T/Ucv/Jv6jlv9N/Uct/5v5j1r+N/cftfxv4T9q+d/Sf9Tyv5X/qOV/a/9Ry/82/qOW/239Ry3/2/mPWv639x+1/O/gP2r539F/1PK/k/+o5X9n/1HL/y7+o5b/Xf1HLf+7+Y9a/nf3H7X87+E/avnf03/U8r+X/6jlf2//Ucv/Pv6jlv99/Uct//v5j1r+9/cftfwf4D9q+T/Qf9Tyf5D/qOX/YP9Ry/8h/qOW/0P9Ry3/h/mPWv4P9x+1/B/hP2r5P9J/1PJ/lP+o5f9o/1HL/zH+o5b/Y/1HLf/H+Y9a/o/3H7X8n+A/avk/0X/U8n+S/6jl/2T/Ucv/Kf6jlv9T/Uct/6f5j1r+T/cftfyf4T9q+T/Tf9Tyf5b/qOX/bP9Ry/85/qOW/3P9Ry3/5/mPWv7P9x+1/F/gP2r5v9B/1PJ/kf+o5f9i/1HL/yX+o5b/S/1HLf+X+Y9a/i/3H7X8X+E/avm/0n/U8n+V/6jl/2r/Ucv/Nf6jlv9r/Uct/9f5j1r+r/cftfzf4D9q+b/Rf9Tyf5P/qOX/Zv9Ry/8t/qOW/1v9Ry3/t/mPWv5v9x+1/N/hP2r5v9N/1PJ/l/+o5f9u/1HL/z3+o5b/e/1HLf/3+Y9a/u/3H7X8P+A/avl/0H/U8v+Q/6jl/2H/Ucv/I/6jlv9H/Uct/4/5j1r+H/cftfw/4T9q+X/Sf9Ty/5T/qOX/af9Ry/8z/qOW/2f9Ry3/z/mPWv6f9x+1/L/gP2r5f9F/1PL/kv+o5f9l/1HL/yv+o5b/V/1HLf+v+Y9a/l/3H7X8v+E/avl/03/U8v+W/6jl/23/Ucv/O/6jlv93/Uct/+/5j1r+3/cftfx/4D9q+f/Qf9Ty/5H/qOX/Y/9Ryf+Az/iPWv4/6z9q+f+c/6jl//P+o5b/L/iPWv6/6D9q+f+S/6jl/8v+o5b/r/iPWv6/6j9q+f+a/6jl/+v+o5b/b/iPWv6/6T9q+f+W/6jl/9v+o5b/Af6jlv/v+I9a/r/rP2r5/57/qOX/+/6jlv8f+I9a/n/oP2r5/5H/qOX/x/6jlv+f+I9a/n/qP2r5/5n/qOX/5/6jlv9f+I9a/n/pP2r5/5X/qOX/1/6jlv/f+I9a/n/rP2r5/53/qOX/9/6jlv8/+I9a/v/oP2r5/5P/qOX/z/6jlv+/+I9a/v/qP2r5/5v/qOX/7/6jlv9/+I9a/v/pP2r5/5f/qOX/3/6jlv//+I9a/v/rP2r5/5//qOX///6jlv8Z/Ect/zP6j1r+Z/IftfzP7D9q+Z/Ff9TyP6v/qOV/Nv9Ry//s/qOW/zn8Ry3/c/qPWv7n8h+1/M/tP2r5n8d/1PI/r/+o5X8+/1HL//z+o5b/BfxHLf8L+o9a/hfyH7X8L+w/avlfxH/U8r+o/6jlfzH/Ucv/4v6jlv8l/Ect/0v6j1r+l/Iftfwv7T9q+V/Gf9Tyv6z/qOV/Of9Ry//y/qOW/xX8Ry3/K/qPWv5X8h+1/K/sP2r5X8V/1PK/qv+o5X81/1HL/+r+o5b/NfxHLf9r+o9a/tfyH7X8r+0/avlfx3/U8r+u/6jlfz3/Ucv/+v6jlv8N/Ect/xv6j1r+N/Iftfxv7D9q+R/oP2r5H+Q/avkf7D9q+R/iP2r5H+o/avkf5j9q+R/uP2r5H+E/avkf6T9q+R/lP2r5H+0/avkf4z9q+R/rP2r5H+c/avkf7z9q+Z/gP2r5n+g/avmf5D9q+Z/sP2r5n+I/avmf6j9q+Z/mP2r5n+4/+tT9AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfMIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADxwIAAAAAwvyts+jaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBfAQAA//+ME5Qw") r1 = openat(r0, &(0x7f0000000040)='file1\x00', 0x42, 0x1ff) fsetxattr(r1, &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000001000), 0x3e8, 0x0) unlinkat(r0, &(0x7f0000000040)='file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/fs/xfs/loop0\x00', 0x0, 0x0) close(r1) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000000)={0x1}) 7m36.147081007s ago: executing program 7 (id=2009): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2804c0e, &(0x7f0000000cc0)={[{@debug}, {@oldalloc}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@debug}, {@barrier_val={'barrier', 0x3d, 0x3}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x85b400, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) chdir(0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 7m34.272684243s ago: executing program 7 (id=2022): statx(0xffffffffffffffff, 0x0, 0x400, 0x10, &(0x7f0000000300)) setsockopt(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='nv', 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x12, 0x301, 0x0, 0x1000000, {0x23, 0x6, 0x0, 0xfb, {0x4e23, 0x0, [0x7fff, 0x2, 0x81, 0xfffffffe], [0x1, 0xfffffffd, 0x10000, 0xaf9e], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x6d}, 0x1, 0x0, 0x0, 0x20044190}, 0x40004) 7m33.792970334s ago: executing program 7 (id=2023): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}], 0x1}}], 0x1, 0x40044c0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 7m33.404881734s ago: executing program 44 (id=2023): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}], 0x1}}], 0x1, 0x40044c0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 7m14.536279509s ago: executing program 1 (id=2132): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r2, 0x10}, 0x8) 7m13.809992608s ago: executing program 1 (id=2135): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x9, 0xb, 0x4, 0x8c45, 0x200}, 0x5b, 0xf}, [{0x5c, 0x71e, 0x3, 0xfffffffe, 0x6, 0x1}, {0x5, 0x40, 0x2, 0xd, 0x401}, {0x5, 0xc, 0x8, 0xfffffffb, 0x3, 0xfffffffb}, {0x8, 0xfffffffc, 0x16, 0x9, 0x2, 0x9}, {0x0, 0x80000000, 0x3, 0x1, 0x76}, {0x10001, 0x459e, 0x5, 0xb8a5, 0x5, 0x8}, {0x8, 0x2, 0x1ff, 0xfffffffa, 0x8, 0x3}, {0x1b, 0x8, 0x900000, 0xfffffff8, 0x5, 0x8}, {0x9, 0x1, 0x9, 0x10, 0x4}, {0x0, 0xcc, 0x3, 0xffff, 0x7, 0x7}, {0x8, 0x6, 0xdc5, 0x3, 0x3, 0xfffffffa}, {0xa8, 0x5, 0x10000, 0xffffffff, 0x6b0c, 0x8e2}, {0x6, 0x8, 0x200, 0x1, 0x0, 0xffffffff}, {0x2, 0x3, 0x9, 0x0, 0x1, 0x8}, {0x7, 0x30000000, 0x4, 0xb, 0x5, 0x7}, {0x7fff, 0x6, 0x3, 0x6, 0x64, 0x6}, {0xa, 0x9, 0x6, 0x8, 0xfb}, {0xb1, 0xa37, 0xfffffeff, 0x100, 0x200, 0x7fff}, {0x100, 0x3, 0x8, 0x9, 0x7, 0x8}, {0x4e91, 0x7, 0xffffffff, 0x40f, 0x11, 0x1b}, {0xffff, 0x2, 0xfffffff0, 0x101, 0x7ff, 0x6}, {0x1, 0xb, 0x3, 0x5, 0xfffffffc, 0x5}, {0x2, 0x2, 0x400, 0x1a76, 0xa, 0x800}, {0xa578, 0x5, 0x5, 0x9c, 0x675, 0x88b}, {0xfffff221, 0x101, 0x5, 0xfffffff9, 0x80000000, 0x81}, {0x5, 0x0, 0x7, 0x0, 0xb, 0x3}, {0x3, 0xc11, 0x400, 0x6, 0x53f, 0x9}, {0x3, 0x7, 0x6, 0x4, 0x4, 0x4}, {0x5, 0x401, 0x1, 0x6, 0x4, 0x1ff}, {0xffffffff, 0x40089cf3, 0x5, 0x3, 0x9, 0x800}, {0x0, 0x5, 0x4, 0x9, 0x2}, {0x29f, 0xca, 0x0, 0x1, 0x5, 0xfffffffa}, {0x10001, 0x10001, 0x10, 0x4, 0x10000, 0x6}, {0xae7, 0x800, 0x80000001, 0xf, 0x6, 0x6}, {0x4, 0x4, 0x8, 0x2, 0x9, 0x4c}, {0x4, 0x1, 0xfffffff7, 0xcc, 0x7ff, 0xeb9a}, {0x8001, 0x3, 0x2bd2, 0x1621, 0x3, 0x2}, {0x8, 0xfffffe00, 0x9, 0xd5e, 0x5, 0x2}, {0x6, 0x4, 0x6, 0x11f, 0xc, 0x1}, {0x5, 0x101, 0x721, 0x100, 0x908, 0x8}, {0x2597, 0xa, 0x9, 0x8, 0x80000001, 0x4}, {0x3, 0x7fffffff, 0x200, 0x8ad, 0xd34e}, {0x7fff, 0x800, 0x6, 0x2, 0x7, 0xb2f6}, {0x4, 0xc7, 0x6c, 0xfffffd20, 0x6, 0x1}, {0x401, 0x5, 0x3, 0xdf, 0x8, 0x5}, {0x5, 0x1, 0xe, 0x2, 0x6, 0xa2fe}, {0xfffff685, 0xfff, 0x4, 0xa6c, 0x9, 0x5}, {0x10, 0xc771, 0x1, 0x37, 0xe3f, 0x3ff}, {0x7, 0x0, 0xa, 0x1000, 0x6, 0x401}, {0x5, 0x3ff, 0x5, 0xff, 0x10000, 0x3}, {0x2, 0x9, 0xafa5, 0x0, 0x1, 0x4}, {0x4, 0x40, 0x2, 0xa, 0x2, 0xfffffff7}, {0xb, 0x1, 0x3, 0x100, 0xb, 0x7}, {0x100, 0x995, 0x374e, 0x9, 0x1000, 0xffffdb76}, {0x3, 0x4, 0xa6de, 0x9bf4, 0x3, 0x6}, {0x7ff, 0x0, 0x9, 0x0, 0xfffffffa, 0x1}, {0x7, 0x929, 0x7f, 0xe0000, 0x2, 0x81}, {0x1, 0x34, 0x0, 0x5, 0xe22, 0x6}, {0xfffffffc, 0xaadf, 0xbc7, 0x6, 0x8, 0x2}, {0x6ef, 0x3, 0x9, 0x7, 0x4, 0x8000}, {0x2, 0x1, 0x2, 0xc3c1, 0x7, 0x4bbd}, {0x3ff, 0x4, 0xfffffffe, 0x100, 0x7fffffff, 0x3}, {0x7, 0x2, 0xff, 0x9, 0xb5a1, 0x2}, {0x9, 0x9, 0xffff, 0x100, 0xf8000000, 0x8000}, {0x0, 0xfff, 0x7, 0x7, 0xffffffff, 0xfffffffe}, {0x5, 0x9, 0x80, 0x9, 0x6, 0x9250}, {0x3, 0x5, 0x81, 0x4, 0x1, 0x6}, {0x6, 0x7fffffff, 0x0, 0x1b, 0x39, 0x4}, {0x5, 0x3ff, 0x40, 0xbe, 0xffff, 0x5}, {0x24, 0x53956696, 0x81, 0x4, 0x3, 0x5}, {0x80000001, 0x7, 0x0, 0x5, 0x2, 0x8001}, {0x10000, 0x400, 0x4, 0x1, 0x618, 0x1}, {0xf1, 0x5, 0xfffffbff, 0x5, 0x400, 0xa6}, {0x4, 0x7ff, 0x5, 0x8, 0x800, 0x8}, {0x8, 0x1, 0x1000, 0x100, 0x4, 0x45f2}, {0xd8, 0x8, 0x5, 0xf8b, 0x6, 0xb5}, {0x6, 0x7, 0xe9, 0x80, 0x5, 0xa}, {0x2, 0x0, 0x4, 0x400, 0x1, 0x6}, {0xfa9, 0x3, 0x0, 0xffff, 0x0, 0x3}, {0x99, 0x9, 0x6, 0x3, 0x5, 0x10000}, {0x7fff, 0x4, 0x6, 0x2, 0x48, 0x5}, {0xffffb1c7, 0x7, 0x80000001, 0x1, 0x3, 0xb54f}, {0x2, 0x1, 0x1000, 0x101, 0x9, 0xf7}, {0xfffff000, 0x7, 0x7, 0x6ba, 0x6}, {0x6, 0x0, 0x5, 0x6a7a, 0x545, 0x7}, {0xfffffffc, 0x2c04, 0x7, 0x8000000, 0x4, 0x8000}, {0xffff, 0x7fff, 0x3, 0x3, 0x4, 0x8}, {0x100, 0x400, 0x4800000, 0x835, 0x4, 0x52}, {0x4, 0x7b, 0xff, 0xfff, 0x1, 0x9}, {0x18000000, 0x9, 0x833b, 0xfffff251, 0x5, 0xa}, {0xf, 0x1, 0x8, 0x2, 0x5}, {0x40, 0xfffffffc, 0x4, 0x7f, 0x7, 0x3}, {0x2e, 0x80000001, 0x7fff, 0x3, 0x3, 0x401}, {0x9, 0xacc, 0xd, 0x1, 0x95e, 0x5}, {0x9c2, 0x6, 0x4, 0xffffffff, 0x1000}, {0x7b8, 0x5, 0xb, 0xa, 0x8, 0x200}, {0xf, 0xb7a, 0xe, 0x6, 0xc1, 0x7}, {0x7, 0x5f6b0af1, 0x6, 0x54, 0x0, 0xfff}, {0x78f6, 0x46000000, 0x0, 0x6, 0x8, 0xee96}, {0xfffffffe, 0x7, 0x80000001, 0xff, 0x0, 0x3}, {0x40, 0xf29, 0x9, 0xb, 0xcb, 0x1}, {0x91cb, 0x3, 0x0, 0x7, 0x3}, {0x9, 0xd0f, 0x8, 0xfffffffb, 0x8, 0x2}, {0x401, 0x7fffffff, 0x800, 0xfffff001, 0xc}, {0x6, 0x9, 0xc000, 0x0, 0x8000, 0x7fff}, {0x69, 0xffff, 0x1, 0x6, 0x80, 0x8}, {0x8c7, 0x2, 0xd0, 0x0, 0x4, 0x3}, {0x3ff, 0x4, 0x7, 0xffff, 0x1, 0xff}, {0x4, 0x1ff, 0xd, 0x9, 0x9, 0x2}, {0x7, 0x1, 0xc2, 0x7, 0x4}, {0x22b, 0x7, 0x704e, 0x3, 0x9, 0x6}, {0x80000001, 0x2, 0xffffd611, 0x8, 0x7}, {0x8000, 0x80, 0x9, 0xffff, 0x0, 0x2}, {0x6783edc, 0xaf2, 0x7, 0x8, 0x1, 0xff000000}, {0x7, 0x1, 0x140000, 0x4, 0xd, 0x200}, {0xb, 0x2, 0x8, 0xa, 0x1}, {0x7, 0x69a5, 0x100, 0x236, 0x4, 0x10001}, {0x3, 0xffff0000, 0x144, 0x2, 0x81, 0x8}, {0xde8, 0x2, 0x6, 0x9b, 0x88db, 0x401}, {0x0, 0x6, 0x40, 0x0, 0x9, 0xc9}, {0x2bd1272, 0x59, 0x3921, 0x57, 0x6, 0x80000000}, {0x3, 0x7, 0xb861, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x8, 0x9, 0x4, 0x8}, {0x0, 0x7, 0x80, 0xed2, 0x80000000, 0x8}, {0x2, 0xfffffc01, 0xfc3, 0x8d5, 0x8001, 0x3fffc000}, {0x8d, 0x6, 0x0, 0x5, 0x4, 0x1}, {0x6, 0x9, 0xeec6, 0x6, 0x7, 0x9}, {0x80000000, 0xd6187927, 0x1, 0x2a, 0xa, 0x7fffffff}], [{0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5, 0xd716e616b6744d43}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3, 0xb4d2ea9c256b621e}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xe270aa78089fc197}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7m12.950258819s ago: executing program 1 (id=2138): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x19}, {@local, 0x4e20, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7m12.687902426s ago: executing program 1 (id=2140): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4c9, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000100)='?', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) 7m11.67938242s ago: executing program 1 (id=2146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') r3 = socket$inet(0x2, 0x1, 0x0) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) listen(r3, 0x0) read$FUSE(r2, &(0x7f0000005dc0)={0x2020}, 0x2020) 7m10.383382882s ago: executing program 1 (id=2156): syz_open_dev$vim2m(&(0x7f0000001440), 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 7m9.549376263s ago: executing program 45 (id=2156): syz_open_dev$vim2m(&(0x7f0000001440), 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2m20.348208897s ago: executing program 3 (id=3238): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="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", 0x5a5) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m16.380589566s ago: executing program 3 (id=3263): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) r0 = epoll_create(0x33) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x80000002}) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xa1c08, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x210509d, 0x0) 2m16.055446374s ago: executing program 3 (id=3267): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000}, @empty, @rand_addr=0x64010100, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044}, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[], 0x20) 2m15.459403219s ago: executing program 3 (id=3271): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='p:my_probe ./file0:0x0\n', 0x17) 2m15.283026523s ago: executing program 3 (id=3272): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0x4, 0xa}, {0x4, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x61}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80d0}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2m13.503445917s ago: executing program 3 (id=3277): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) mincore(&(0x7f000061b000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x2, 0xff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m12.910509172s ago: executing program 46 (id=3277): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) mincore(&(0x7f000061b000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x2, 0xff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m16.050677003s ago: executing program 5 (id=3541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r2, 0x204) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1m14.948559881s ago: executing program 5 (id=3545): sync() sync() sync() sync() sync() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') clock_adjtime(0x0, 0x0) preadv(r1, 0x0, 0x0, 0xa3, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r3) 1m14.16633841s ago: executing program 5 (id=3547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x7, 0x17, 0x2, 0x1e, 0x0, 0x800000e, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x55de}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m13.527349336s ago: executing program 5 (id=3550): syz_open_dev$ttys(0xc, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x11, 0x0, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x20], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 1m13.449616638s ago: executing program 8 (id=3552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 1m12.476372072s ago: executing program 5 (id=3553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) kcmp(r1, r2, 0x300, 0xffffffffffffffff, 0xffffffffffffffff) 1m11.480944046s ago: executing program 8 (id=3555): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1m11.474345756s ago: executing program 5 (id=3556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) 1m10.026992972s ago: executing program 8 (id=3558): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) semop(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000180)='./file0/file0/../file0\x00', 0x8) 1m9.663415022s ago: executing program 8 (id=3561): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000"], 0x0}, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000e80)=ANY=[@ANYBLOB="7f454c4604ff7823360200000000000003003e00cd000000cb030000000000004000000000000000ea020100000000000080000005003800010006006404010403000000810000000200000000000080f50f0000000800000080ffffff0900"/112], 0x78) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, 0x0, 0x0, 0x141, 0xfffffffc) socket(0x840000000002, 0x5, 0xff) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x1a\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) 1m6.821434892s ago: executing program 8 (id=3568): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) openat$vcsu(0xffffffffffffff9c, 0x0, 0x241, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='dummy_udc.0', 0xb) 1m6.548175518s ago: executing program 8 (id=3570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 55.087938093s ago: executing program 47 (id=3556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) 51.705619547s ago: executing program 4 (id=3596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 50.003069909s ago: executing program 48 (id=3570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 47.919358441s ago: executing program 4 (id=3602): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") openat(0xffffffffffffff9c, 0x0, 0x800c4, 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x640000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r1 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) poll(&(0x7f0000000580)=[{r0, 0x4600}], 0x1, 0xfffffffc) wait4(r1, 0x0, 0x8, 0x0) 46.686063152s ago: executing program 4 (id=3604): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000140)=0xa, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 43.9007523s ago: executing program 4 (id=3608): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x210805, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x584, &(0x7f0000000700)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@setneightbl={0x12, 0x43, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) 41.89255138s ago: executing program 4 (id=3610): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = socket$kcm(0x2, 0x1, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1}}}], 0x20}, 0x4008804) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x27) r1 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000100)={0x980900, 0x80000003, @name="9aec031a3b13602100d3d3027ec51b3dfd835e7adf3aecf9b5b6899b87f7a9a1"}) socket$l2tp6(0xa, 0x2, 0x73) 40.895325275s ago: executing program 4 (id=3611): syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x100, 0x1, 0x2, 0xc, 0x5, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000000010002", 0x7) socket(0x2, 0x3, 0xff) clock_getres(0x6, 0x0) syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c90001"], 0x18) 40.418962937s ago: executing program 49 (id=3611): syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x100, 0x1, 0x2, 0xc, 0x5, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000000010002", 0x7) socket(0x2, 0x3, 0xff) clock_getres(0x6, 0x0) syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c90001"], 0x18) 15.015287038s ago: executing program 2 (id=3648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000010001b6f00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(0xffffffffffffffff) mknod(0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) 13.190849643s ago: executing program 2 (id=3651): openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x10) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 12.07775528s ago: executing program 2 (id=3655): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, 0x0}, 0x94) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 10.202190117s ago: executing program 2 (id=3656): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000, 0xfffffffffffffffe}, 0x7, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 9.165078983s ago: executing program 2 (id=3657): syz_emit_ethernet(0x5a, &(0x7f0000000400)=ANY=[], 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x44000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, r0, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.003668356s ago: executing program 2 (id=3659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r3, &(0x7f0000000040)=0x800000000001e8, 0x12) r4 = socket$inet(0x2, 0x2, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, 0x0) sendmsg$inet(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x24008004) ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x81, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001a00010129bd700000ffffff"], 0x20}}, 0x0) 2.492119598s ago: executing program 9 (id=3662): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4004401) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_sctp(0xa, 0x1, 0x84) 2.325467623s ago: executing program 9 (id=3663): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(0x0, 0xffffffffffffff9c, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4}, 0x1c) r3 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 1.392294186s ago: executing program 9 (id=3664): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'wg1\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0x0, 0x2}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.266608229s ago: executing program 9 (id=3665): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, &(0x7f0000000040)="a226ed379b12c4c5f9d335f0e2891999f886aa3eb97fbdee54166856ddc1f2730dab15b7fc938964ccc66a1a2ed4e7deb7b4e3bc6187d14950f4d80e25ccc2deabf96aa4c655d52fe06afb164950357132ca8a3100abf8acf5c5df0327c86178cbfc256c0a59", 0x66, 0x40, &(0x7f0000000280)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x80) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109341) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0x0, 0xb, 0x0}) 264.032144ms ago: executing program 9 (id=3666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x20, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10) write(r4, &(0x7f0000000800)='file *evio.c +', 0xe) 0s ago: executing program 9 (id=3667): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000340), 0x1000) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) write(r3, &(0x7f0000000400)='40', 0x2) write(0xffffffffffffffff, &(0x7f0000000440)='4\x00', 0x2) read(0xffffffffffffffff, &(0x7f00000004c0), 0x1000) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) r5 = syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) close(0x3) kernel console output (not intermixed with test programs): ce number 9 using dummy_hcd [ 265.011430][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.025836][ T5946] usb 5-1: not running at top speed; connect to a high speed hub [ 265.054713][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.067885][ T8358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.090352][ T5946] usb 5-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice= 0.00 [ 265.125482][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.160486][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.194848][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.280619][ T5946] usb 5-1: Direct firmware load for f2255usb.bin failed with error -2 [ 265.316721][ T5946] usb 5-1: Falling back to sysfs fallback for: f2255usb.bin [ 265.489114][ T5946] s2255 5-1:1.0: Firmware invalid. [ 265.527209][ T5946] Sensoray 2255 driver load failed: 0xffffffed [ 265.631703][ T4290] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 266.027924][ T5946] usb 5-1: USB disconnect, device number 9 [ 266.890786][ T8613] loop0: detected capacity change from 0 to 1024 [ 266.960905][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1011'. [ 267.008198][ T8613] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 267.032204][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.059625][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.093661][ T8358] device veth0_vlan entered promiscuous mode [ 267.130837][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.222579][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.264811][ T8358] device veth1_vlan entered promiscuous mode [ 267.415511][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.465792][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.516429][ T8358] device veth0_macvtap entered promiscuous mode [ 267.555679][ T8358] device veth1_macvtap entered promiscuous mode [ 267.622312][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.675528][ T5946] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 267.696022][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.739146][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.796091][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.858549][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.869346][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 267.892937][ T5946] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 267.931558][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.947650][ T5946] usb 5-1: config 0 has no interface number 0 [ 267.973508][ T5946] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 267.992709][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.032626][ T5946] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 268.055435][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.100636][ T5946] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 268.138238][ T8358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.167825][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.184722][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.224398][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.232049][ T5946] usb 5-1: Product: syz [ 268.252106][ T5946] usb 5-1: Manufacturer: syz [ 268.277459][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.287089][ T5946] usb 5-1: SerialNumber: syz [ 268.331723][ T5946] usb 5-1: config 0 descriptor?? [ 268.340461][ T8642] overlayfs: failed to clone upperpath [ 268.348541][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.372593][ T8624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 268.404343][ T8624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 268.420501][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.487559][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.538531][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.588041][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.634080][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1022'. [ 268.666384][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.679836][ T8624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 268.720313][ T8624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 268.752906][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.799776][ T8358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.864573][ T8358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.922013][ T8358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.983246][ T5946] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 268.996438][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.027196][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.078211][ T8358] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.127699][ T8358] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.198577][ T8358] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.255457][ T8358] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.515276][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.555492][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.636415][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 269.676088][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.728977][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.778415][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.822757][ T5946] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 270.882503][ T5946] asix: probe of 5-1:0.34 failed with error -71 [ 270.923371][ T5946] usb 5-1: USB disconnect, device number 10 [ 271.727743][ T8712] netlink: 'syz.4.1033': attribute type 1 has an invalid length. [ 271.943364][ T8717] bond3: (slave veth3): Enslaving as an active interface with a down link [ 272.105813][ T8712] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 272.422049][ T8727] loop2: detected capacity change from 0 to 512 [ 272.501350][ T8727] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1037: bg 0: block 5: invalid block bitmap [ 272.649230][ T8727] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 272.712752][ T8727] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1037: invalid indirect mapped block 3 (level 2) [ 272.837188][ T8727] EXT4-fs (loop2): 1 orphan inode deleted [ 272.867618][ T8727] EXT4-fs (loop2): 1 truncate cleaned up [ 272.910838][ T8727] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 273.061870][ T8727] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 273.208935][ T8358] EXT4-fs (loop2): unmounting filesystem. [ 274.053502][ T5946] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 274.272549][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 274.289602][ T5946] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.355544][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 274.395008][ T5946] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 274.474382][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.545363][ T5946] usb 5-1: config 0 descriptor?? [ 274.957198][ T8790] netlink: 'syz.9.1051': attribute type 10 has an invalid length. [ 275.011911][ T5946] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 275.108851][ T8790] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.117537][ T8790] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.381547][ T8804] device-mapper: ioctl: Invalid ioctl structure: uuid 4, name , dev 716673 [ 275.450192][ T5946] usb 5-1: USB disconnect, device number 11 [ 275.811171][ T8813] loop4: detected capacity change from 0 to 256 [ 275.858208][ T8813] exfat: Deprecated parameter 'namecase' [ 275.894453][ T8813] exfat: Deprecated parameter 'utf8' [ 275.949429][ T8813] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 276.415889][ T8790] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.424643][ T8790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.433240][ T8790] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.440313][ T8790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.808597][ T8790] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 276.998410][ T8835] netlink: 'syz.0.1060': attribute type 10 has an invalid length. [ 277.241089][ T8835] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 277.468832][ T4859] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.768625][ T4859] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.997182][ T4859] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.595481][ T4859] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.725883][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.739893][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.751231][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.766157][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.774950][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.782070][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.870563][ T8875] lo speed is unknown, defaulting to 1000 [ 280.769779][ T8903] netlink: 'syz.2.1080': attribute type 4 has an invalid length. [ 280.879553][ T8875] chnl_net:caif_netlink_parms(): no params data found [ 280.966776][ T8905] netlink: 'syz.2.1080': attribute type 4 has an invalid length. [ 281.130730][ T8908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.154526][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1083'. [ 281.310744][ T8908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.486429][ T8875] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.539038][ T8875] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.581082][ T8875] device bridge_slave_0 entered promiscuous mode [ 281.700444][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.721831][ T8875] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.758902][ T8875] device bridge_slave_1 entered promiscuous mode [ 281.790069][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 281.853521][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 281.940329][ T8875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.327228][ T8875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.357840][ T8948] netlink: 'syz.8.1087': attribute type 3 has an invalid length. [ 282.685808][ T8954] device syzkaller0 entered promiscuous mode [ 282.721890][ T8875] team0: Port device team_slave_0 added [ 282.748421][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 282.757080][ T8959] device bridge_slave_0 left promiscuous mode [ 282.763378][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.797774][ T8959] device bridge_slave_1 left promiscuous mode [ 282.804069][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.824527][ T8959] bond1: (slave veth0_to_bond): Releasing active interface [ 282.837962][ T8964] loop0: detected capacity change from 0 to 512 [ 282.853551][ T8959] bond0: (slave bond_slave_0): Releasing backup interface [ 282.865637][ T8959] bond0: (slave bond_slave_1): Releasing backup interface [ 282.878277][ T8959] team0: Port device team_slave_0 removed [ 282.887804][ T8959] team0: Port device team_slave_1 removed [ 282.893915][ T8959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.901746][ T8959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.915898][ T8961] team0: Mode changed to "loadbalance" [ 282.970267][ T4859] device hsr_slave_0 left promiscuous mode [ 283.001380][ T4859] device hsr_slave_1 left promiscuous mode [ 283.051500][ T4859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.110878][ T8964] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1093: bg 0: block 5: invalid block bitmap [ 283.134366][ T4859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.174594][ T4859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.209041][ T4859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.257308][ T4859] device bridge_slave_1 left promiscuous mode [ 283.293602][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.338146][ T8964] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 283.351842][ T4859] device bridge_slave_0 left promiscuous mode [ 283.381448][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.439686][ T8964] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1093: invalid indirect mapped block 3 (level 2) [ 283.511965][ T4859] device veth1_macvtap left promiscuous mode [ 283.537724][ T4859] device veth0_macvtap left promiscuous mode [ 283.559816][ T4859] device veth1_vlan left promiscuous mode [ 283.577393][ T8964] EXT4-fs (loop0): 1 orphan inode deleted [ 283.588806][ T4859] device veth0_vlan left promiscuous mode [ 283.629473][ T8964] EXT4-fs (loop0): 1 truncate cleaned up [ 283.690914][ T8964] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 283.932633][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 283.968837][ T8964] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 284.058957][ T4859] bond3 (unregistering): (slave veth3): Releasing active interface [ 284.118461][ T4859] bond3 (unregistering): Released all slaves [ 284.225614][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 284.922243][ T4859] bond1 (unregistering): (slave bond2): Releasing backup interface [ 284.947346][ T4859] bond2 (unregistering): Released all slaves [ 285.317466][ T4859] bond1 (unregistering): Released all slaves [ 285.366493][ T4859] team0 (unregistering): Port device vlan2 removed [ 286.016962][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 286.065763][ T4859] team0 (unregistering): Port device team_slave_1 removed [ 286.127883][ T4859] team0 (unregistering): Port device team_slave_0 removed [ 286.218231][ T4859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.358019][ T4859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.858328][ T4859] bond0 (unregistering): Released all slaves [ 287.011078][ T8875] team0: Port device team_slave_1 added [ 287.180340][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.269268][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.459795][ T8875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.598123][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.672513][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.892458][ T8875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.088886][ T8875] device hsr_slave_0 entered promiscuous mode [ 288.095362][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 288.193978][ T8875] device hsr_slave_1 entered promiscuous mode [ 289.059414][ T8875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.084113][ T8875] Cannot create hsr debugfs directory [ 289.323640][ T9060] loop0: detected capacity change from 0 to 1024 [ 289.469398][ T9060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.642965][ T9060] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.851482][ T9060] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 290.596534][ T9088] unsupported nlmsg_type 40 [ 290.749683][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 290.953496][ T9099] tipc: Enabling of bearer rejected, failed to enable media [ 291.316365][ T8875] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 291.388292][ T9110] netlink: 'syz.8.1127': attribute type 10 has an invalid length. [ 291.441226][ T9110] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 291.505279][ T8875] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 291.557098][ T8875] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 291.665417][ T8875] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 291.815108][ T9122] loop2: detected capacity change from 0 to 1024 [ 291.889772][ T9122] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 291.966693][ T8875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.075205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.119428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.171011][ T8875] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.241658][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.271429][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.316028][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.323176][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.459484][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.482182][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.531602][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.577791][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.584936][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.652272][ T9141] loop0: detected capacity change from 0 to 512 [ 292.670797][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.715937][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.811165][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.864055][ T9141] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 292.915657][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.984631][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.060216][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.126862][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.154640][ T9141] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 293.195021][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.255185][ T8875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.301127][ T9141] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 293.324691][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.371658][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.423858][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.476043][ T9141] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 293.496155][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.606905][ T9141] EXT4-fs (loop0): group descriptors corrupted! [ 294.402133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.440503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.478038][ T8875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.989324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.016919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.080895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.109690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.155815][ T8875] device veth0_vlan entered promiscuous mode [ 296.196775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.256123][ T5951] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 296.293094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.352248][ T8875] device veth1_vlan entered promiscuous mode [ 296.456181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 296.472710][ T5951] usb 3-1: Using ep0 maxpacket: 8 [ 296.490533][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.518877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 296.555235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.567870][ T5951] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.617532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.638101][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.677819][ T8875] device veth0_macvtap entered promiscuous mode [ 296.696327][ T5951] usb 3-1: config 0 descriptor?? [ 296.737638][ T8875] device veth1_macvtap entered promiscuous mode [ 296.896234][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.959583][ T5951] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 297.001905][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.094043][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.172221][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.238895][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.270918][ T5954] usb 3-1: USB disconnect, device number 3 [ 297.276984][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 297.306801][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.330049][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.360095][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.430929][ T8875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.469172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.487240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.513853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.539976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.575218][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.641364][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.792524][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.033856][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.091424][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.162075][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.230390][ T8875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.290774][ T8875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.350819][ T8875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.399661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.441277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.486255][ T8875] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.586117][ T8875] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.632343][ T8875] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.690554][ T8875] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.949446][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.036317][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.150666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 299.187096][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.228748][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.290030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 299.308625][ T9303] Set syz1 is full, maxelem 1029 reached [ 302.591078][ T9374] netlink: 'syz.0.1184': attribute type 1 has an invalid length. [ 302.943188][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1184'. [ 302.966564][ T9386] file system registered [ 303.084020][ T9386] ffs_data_put(): freeing [ 303.185761][ T9392] loop7: detected capacity change from 0 to 256 [ 303.261295][ T9369] bond1: (slave veth3): Enslaving as an active interface with a down link [ 303.289764][ T9392] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 304.412379][ C0] sched: RT throttling activated [ 304.776619][ T9384] bond1: (slave veth0_to_bond): making interface the new active one [ 304.955698][ T9384] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 305.025852][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1184'. [ 305.108498][ T9388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.420786][ T9413] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1195'. [ 305.585122][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 305.727298][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1198'. [ 306.836953][ T9423] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.846260][ T9423] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.855069][ T9423] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.863791][ T9423] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.706756][ T9443] smc: net device veth0 applied user defined pnetid SYZ0 [ 309.052741][ T9471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.432097][ T9475] device wlan0 entered promiscuous mode [ 309.445173][ T9478] overlayfs: failed to clone upperpath [ 309.560064][ T9479] exfat: Deprecated parameter 'debug' [ 309.628894][ T9483] netlink: 'syz.8.1214': attribute type 1 has an invalid length. [ 309.658915][ T9479] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 309.682454][ T5952] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 309.771329][ T9479] exFAT-fs (loop0): unable to read boot sector [ 309.782176][ T9493] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1217'. [ 309.822286][ T9479] exFAT-fs (loop0): failed to read boot sector [ 309.873501][ T9479] exFAT-fs (loop0): failed to recognize exfat type [ 309.895463][ T5952] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 309.936980][ T5952] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 310.006316][ T5952] usb 8-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 310.054645][ T5952] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.195530][ T5952] usb 8-1: Product: syz [ 310.393586][ T5952] usb 8-1: Manufacturer: syz [ 310.423305][ T5952] usb 8-1: SerialNumber: syz [ 310.451950][ T9505] netlink: 'syz.9.1220': attribute type 1 has an invalid length. [ 310.555223][ T9505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 310.661607][ T9505] bond2: (slave syz_tun): making interface the new active one [ 310.687801][ T9505] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 310.700063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 310.766257][ T5952] usb 8-1: Can't get UAC3 power state for id 10 [ 310.799907][ T9510] device bond2 entered promiscuous mode [ 310.811684][ T5952] usb 8-1: 2:0: failed to get current value for ch 0 (-71) [ 310.831487][ T9510] device syz_tun entered promiscuous mode [ 310.848004][ T5952] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 311.103638][ T5952] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 311.184131][ T5952] usb 8-1: USB disconnect, device number 2 [ 311.406506][ T9528] overlayfs: failed to clone upperpath [ 311.450925][ T9529] loop0: detected capacity change from 0 to 2048 [ 311.463121][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.772199][ T9538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.860229][ T9538] device batadv_slave_1 entered promiscuous mode [ 311.917404][ T9529] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.288738][ T9548] loop7: detected capacity change from 0 to 40427 [ 313.390466][ T9548] F2FS-fs (loop7): invalid crc value [ 313.445623][ T9548] F2FS-fs (loop7): Found nat_bits in checkpoint [ 313.663421][ T9548] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 313.845293][ T9571] nvme nvme0: failed to connect socket: -512 [ 314.129630][ T9595] overlayfs: failed to clone upperpath [ 314.316185][ T8875] syz-executor: attempt to access beyond end of device [ 314.316185][ T8875] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 315.031737][ T9613] mac80211_hwsim hwsim18 wlan99: renamed from wlan0 [ 317.082733][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.089054][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.441649][ T9663] xt_CT: No such helper "netbios-ns" [ 317.720879][ T9677] device wlan0 entered promiscuous mode [ 318.718887][ T9700] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 320.442706][ T9723] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 320.677092][ T9723] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 320.760866][ T9723] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 320.792510][ T5952] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 320.821601][ T9723] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 320.901595][ T9723] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 320.972316][ T9723] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 321.103832][ T5952] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.332253][ T9723] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 321.335708][ T5952] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.439133][ T5952] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.520347][ T5952] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.562132][ T5952] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.612114][ T5952] usb 8-1: config 0 descriptor?? [ 322.053068][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.097861][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.141191][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.201546][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.250374][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.331996][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.407475][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.457325][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.535038][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.580217][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.626870][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.665051][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.692306][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.715870][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.742507][ T5952] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 322.764786][ T5952] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 322.799059][ T5952] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 322.863148][ T5952] usb 8-1: USB disconnect, device number 3 [ 323.806634][ T9778] fido_id[9778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 327.055669][ T9847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.063535][ T9847] IPv6: NLM_F_CREATE should be set when creating new route [ 331.627184][ T9850] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.634560][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.321516][ T9895] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 336.497324][ T9850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.551145][ T9850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.063883][ T9850] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.076084][ T9850] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.086758][ T9850] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.101760][ T9850] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.216125][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 338.269263][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 338.329538][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 338.369486][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 338.391357][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 338.491160][ T9890] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 338.534238][ T9909] device syzkaller0 entered promiscuous mode [ 341.778985][ T9946] Set syz1 is full, maxelem 6117 reached [ 341.982556][ T9964] MTD: Couldn't look up './dev/mtdblock0': -2 [ 343.426144][ T9976] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.520201][ T9987] tipc: Enabling of bearer rejected, failed to enable media [ 344.096860][ T9996] netlink: 232 bytes leftover after parsing attributes in process `syz.9.1327'. [ 344.560524][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1329'. [ 346.987732][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1324'. [ 346.999179][T10034] device erspan1 entered promiscuous mode [ 348.148724][T10050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.146974][T10067] mmap: syz.2.1342 (10067): VmData 37470208 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 350.237404][T10078] device syzkaller0 entered promiscuous mode [ 350.307638][T10078] tipc: Started in network mode [ 350.336551][T10078] tipc: Node identity 6ad9f15e60a2, cluster identity 4711 [ 350.372650][T10078] tipc: Enabled bearer , priority 0 [ 350.480511][T10078] tipc: Resetting bearer [ 351.539834][ T5952] tipc: Node number set to 175894878 [ 351.678128][T10076] tipc: Resetting bearer [ 351.901704][T10076] tipc: Disabling bearer [ 352.272213][T10110] xt_TCPMSS: Only works on TCP SYN packets [ 352.429193][T10112] overlayfs: failed to clone upperpath [ 354.532737][T10137] loop0: detected capacity change from 0 to 1024 [ 354.633064][T10137] ext4: Unknown parameter 'rootcontext' [ 355.290818][T10142] cgroup: No subsys list or none specified [ 357.345950][ T27] audit: type=1326 audit(1786180889.842:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.2.1361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feceab9e0d9 code=0x7ffc0000 [ 357.596025][ T27] audit: type=1326 audit(1786180889.872:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.2.1361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feceab9e0d9 code=0x7ffc0000 [ 358.245777][ T27] audit: type=1326 audit(1786180889.882:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.2.1361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feceab9e0d9 code=0x7ffc0000 [ 358.642674][ T27] audit: type=1326 audit(1786180889.882:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.2.1361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feceab9e0d9 code=0x7ffc0000 [ 358.848485][ T27] audit: type=1326 audit(1786180889.882:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.2.1361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feceab5e90e code=0x7ffc0000 [ 359.262888][ T27] audit: type=1326 audit(1786180889.882:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.2.1361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feceab5e90e code=0x7ffc0000 [ 359.383250][ T27] audit: type=1326 audit(1786180889.882:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.2.1361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feceab9e0d9 code=0x7ffc0000 [ 359.479288][ T27] audit: type=1326 audit(1786180889.882:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.2.1361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feceab9e0d9 code=0x7ffc0000 [ 359.959567][ T27] audit: type=1326 audit(1786180889.882:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.2.1361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feceab9e0d9 code=0x7ffc0000 [ 361.530326][ T27] audit: type=1326 audit(1786180889.882:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.2.1361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feceab9e0d9 code=0x7ffc0000 [ 363.450353][ T5951] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 364.286133][ T5951] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 365.070499][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.078584][ T5951] usb 1-1: Product: syz [ 365.167076][ T5951] usb 1-1: Manufacturer: syz [ 365.220960][ T5951] usb 1-1: SerialNumber: syz [ 365.344792][ T5951] usb 1-1: can't set config #1, error -71 [ 365.405613][ T5951] usb 1-1: USB disconnect, device number 12 [ 367.204038][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 367.211778][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 367.231716][T10270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.337205][T10289] fuse: Unknown parameter 'GPL' [ 368.357729][T10287] netlink: 'syz.8.1381': attribute type 1 has an invalid length. [ 368.872485][T10295] bond2: (slave veth7): Enslaving as an active interface with a down link [ 369.241519][T10287] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 369.551225][T10295] device macvlan2 entered promiscuous mode [ 370.034299][T10295] device bond2 entered promiscuous mode [ 370.366312][T10295] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 370.881483][T10295] device bond2 left promiscuous mode [ 372.085056][T10333] netlink: 'syz.2.1398': attribute type 2 has an invalid length. [ 373.877030][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1403'. [ 374.854679][T10353] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.053018][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 375.053100][ T27] audit: type=1326 audit(1786180907.553:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10360 comm="syz.7.1404" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc10f59e0d9 code=0x0 [ 375.273289][T10353] device bridge_slave_0 left promiscuous mode [ 375.336340][T10353] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.361310][T10368] fuse: Bad value for 'fd' [ 375.637352][T10373] loop0: detected capacity change from 0 to 1024 [ 376.843782][T10373] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 377.126816][T10373] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 378.625258][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.631971][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.885280][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 378.931414][T10396] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 379.187635][T10396] CIFS: Attempting to mount \\127.0.0.1\share [ 379.271294][T10396] CIFS: VFS: No username specified [ 379.741375][T10353] bond0: (slave bridge0): Releasing backup interface [ 381.249389][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 384.476112][T10504] overlayfs: failed to clone upperpath [ 384.580772][T10507] CIFS: Attempting to mount \\127.0.0.1\share [ 384.740030][T10507] CIFS: VFS: Error connecting to socket. Aborting operation. [ 385.019445][T10507] CIFS: VFS: cifs_mount failed w/return code = -22 [ 385.291923][T10522] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 385.291923][T10522] The task syz.0.1425 (10522) triggered the difference, watch for misbehavior. [ 385.446307][T10513] syz.7.1414 (10513) used greatest stack depth: 17040 bytes left [ 386.083849][T10539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.727435][T10551] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1428'. [ 398.379347][T10627] tipc: Enabling of bearer rejected, failed to enable media [ 401.268218][T10662] loop7: detected capacity change from 0 to 131072 [ 401.342953][T10662] F2FS-fs (loop7): Segment count (31) mismatch with total segments from devices (0) [ 401.352493][T10662] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 401.365685][T10662] F2FS-fs (loop7): invalid crc value [ 401.393538][T10662] F2FS-fs (loop7): Found nat_bits in checkpoint [ 401.431355][T10662] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 401.438808][T10662] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 401.793174][T10662] F2FS-fs (loop7): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903 [ 405.745441][T10691] loop7: detected capacity change from 0 to 512 [ 405.932011][T10691] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 406.000844][T10691] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.667806][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 409.074809][ T8875] EXT4-fs (loop7): unmounting filesystem. [ 409.292137][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 409.302897][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 409.311461][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 409.428892][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.436213][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 409.443637][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.792029][T10719] lo speed is unknown, defaulting to 1000 [ 410.256772][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1468'. [ 411.527616][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 412.950120][T10719] chnl_net:caif_netlink_parms(): no params data found [ 413.219595][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.226715][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.440214][T10719] device bridge_slave_0 entered promiscuous mode [ 413.478274][T10719] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.674750][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 413.723140][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.771454][T10719] device bridge_slave_1 entered promiscuous mode [ 413.885115][T10719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.974906][T10719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.242559][T10719] team0: Port device team_slave_0 added [ 414.444535][T10719] team0: Port device team_slave_1 added [ 414.561861][T10719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.619269][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.816231][T10719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.912003][T10719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.989494][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.249924][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 416.371593][T10719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.839230][T10803] lo speed is unknown, defaulting to 1000 [ 418.050474][T10719] device hsr_slave_0 entered promiscuous mode [ 418.098485][T10719] device hsr_slave_1 entered promiscuous mode [ 418.169599][T10719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.327117][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 419.169584][T10719] Cannot create hsr debugfs directory [ 425.142093][ T5954] Process accounting resumed [ 430.600371][ T4344] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.663404][ T4344] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.745999][T10907] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1506'. [ 430.947294][T10911] fuse: Unknown parameter '' [ 431.069179][ T4344] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.440002][ T4344] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.869989][ T4344] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.796627][ T4344] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.894372][T10719] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 432.904586][ T4290] Bluetooth: Wrong link type (-57) [ 434.000289][T10719] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 434.066003][ T4290] Bluetooth: hci4: unexpected event 0x01 length: 6 > 1 [ 434.398023][ T4344] bond0: (slave netdevsim0): Releasing backup interface [ 435.442308][ T4344] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.552245][ T4344] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.601521][T10719] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 436.692234][T10719] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 437.199073][T10719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.277573][ T4344] tipc: Left network mode [ 437.333855][ T8562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 437.361853][ T8562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 437.397564][T10971] mmap: syz.9.1525 (10971) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 437.413340][ T4290] Bluetooth: Unknown LE signaling command 0x00 [ 437.419689][ T4290] Bluetooth: Wrong link type (-22) [ 437.484581][T10719] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.063547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 438.107523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 438.154151][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.161301][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.585793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 439.806214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 439.859763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 439.917294][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.924413][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.934236][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.941053][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.038763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 440.089654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 440.145711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 440.209104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 440.270460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 440.310831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 440.539076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 440.591698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 440.642078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 442.065292][T10719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.132355][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 442.346169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 442.384381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 443.201763][T11048] UBIFS error (pid: 11048): cannot open "(null)", error -22 [ 444.805382][T11062] tmpfs: Unknown parameter 'quota' [ 445.145228][ T4344] IPVS: stopping backup sync thread 5125 ... [ 445.539959][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.587206][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.660060][T10719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.718635][T11088] netlink: 'syz.2.1559': attribute type 10 has an invalid length. [ 445.751504][T11091] loop7: detected capacity change from 0 to 128 [ 445.761219][T11088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1559'. [ 445.819232][T11091] ufs: ufstype=nextstep-cd is supported read-only [ 445.830769][T11088] device macvlan1 entered promiscuous mode [ 445.866229][T11088] batman_adv: batadv0: Adding interface: macvlan1 [ 445.917136][T11088] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.103507][T11088] batman_adv: batadv0: Interface activated: macvlan1 [ 446.516782][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'. [ 446.633050][ T4290] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 446.642021][ T4290] Bluetooth: hci1: Injecting HCI hardware error event [ 446.652299][ T4288] Bluetooth: hci1: hardware error 0x00 [ 446.695127][ T4344] device hsr_slave_0 left promiscuous mode [ 446.842461][ T4344] device hsr_slave_1 left promiscuous mode [ 446.879069][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.929309][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.028702][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.103461][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.183617][ T4344] device bridge_slave_1 left promiscuous mode [ 447.218699][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.264368][ T4344] device bridge_slave_0 left promiscuous mode [ 447.303853][T11144] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1573'. [ 447.317717][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.457282][ T4344] device veth1_macvtap left promiscuous mode [ 447.485132][ T4344] device veth0_macvtap left promiscuous mode [ 447.497891][T11151] loop7: detected capacity change from 0 to 512 [ 447.512893][ T4344] device veth1_vlan left promiscuous mode [ 447.541471][ T4344] device veth0_vlan left promiscuous mode [ 447.549093][T11151] EXT4-fs (loop7): 1 truncate cleaned up [ 447.575787][T11151] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 447.649741][T11151] EXT4-fs (loop7): shut down requested (1) [ 447.753901][ T8875] EXT4-fs (loop7): unmounting filesystem. [ 447.987706][ T4344] bond1 (unregistering): (slave veth3): Releasing active interface [ 448.008180][ T4344] bond1 (unregistering): (slave veth3): the permanent HWaddr of slave - f6:81:81:fd:6d:90 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 448.055975][ T4344] device veth0_to_bond entered promiscuous mode [ 448.341898][ T4344] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 448.352972][ T4344] device veth0_to_bond left promiscuous mode [ 448.359677][ T4344] bond1 (unregistering): Released all slaves [ 448.756020][ T4288] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 449.141954][ T4366] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 449.331674][ T4344] team0 (unregistering): Port device team_slave_1 removed [ 449.346501][ T4366] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.370193][ T4366] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 449.383171][ T4366] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.403712][ T4366] usb 8-1: config 0 descriptor?? [ 449.427581][ T4366] pwc: Askey VC010 type 2 USB webcam detected. [ 449.463113][ T4344] team0 (unregistering): Port device team_slave_0 removed [ 449.527758][ T4344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.593313][ T4344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.863012][ T4366] pwc: recv_control_msg error -32 req 02 val 2b00 [ 450.031961][ T4288] Bluetooth: hci4: adv larger than maximum supported [ 450.032005][ T4288] Bluetooth: hci4: Unknown advertising packet type: 0x2540 [ 450.041202][ T4288] Bluetooth: hci4: Malformed LE Event: 0x0d [ 450.082991][ T4366] pwc: recv_control_msg error -71 req 02 val 2c00 [ 450.118655][ T4366] pwc: recv_control_msg error -71 req 04 val 1000 [ 450.140368][ T4366] pwc: recv_control_msg error -71 req 04 val 1300 [ 450.163823][ T4366] pwc: recv_control_msg error -71 req 04 val 1400 [ 450.170783][ T4366] pwc: recv_control_msg error -71 req 02 val 2000 [ 450.203231][ T4366] pwc: recv_control_msg error -71 req 02 val 2100 [ 450.213447][ T4344] bond0 (unregistering): Released all slaves [ 450.221330][ T4366] pwc: recv_control_msg error -71 req 04 val 1500 [ 450.257258][ T4366] pwc: recv_control_msg error -71 req 02 val 2500 [ 450.275480][ T4366] pwc: recv_control_msg error -71 req 02 val 2400 [ 450.304596][ T4366] pwc: recv_control_msg error -71 req 02 val 2600 [ 450.321684][ T4366] pwc: recv_control_msg error -71 req 02 val 2900 [ 450.353274][ T4366] pwc: recv_control_msg error -71 req 02 val 2800 [ 450.369259][ T4366] pwc: recv_control_msg error -71 req 04 val 1100 [ 450.384684][ T4366] pwc: recv_control_msg error -71 req 04 val 1200 [ 450.410238][ T4366] pwc: Registered as video103. [ 450.431495][ T4366] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input11 [ 450.471930][ T4366] usb 8-1: USB disconnect, device number 4 [ 450.662484][T11144] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1573'. [ 451.153383][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 451.210127][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 451.327226][T10719] device veth0_vlan entered promiscuous mode [ 451.408209][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 451.445032][T11196] loop7: detected capacity change from 0 to 256 [ 451.455904][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 451.534694][T10719] device veth1_vlan entered promiscuous mode [ 451.645950][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 451.697817][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 451.789313][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 451.797236][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 451.958946][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 452.012997][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 452.063426][T10719] device veth0_macvtap entered promiscuous mode [ 452.128878][T10719] device veth1_macvtap entered promiscuous mode [ 452.235491][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.306654][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.368052][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.436390][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.498993][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.562691][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.639456][T10719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.700404][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 452.736108][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 452.816947][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 452.897989][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.961831][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.017299][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.073950][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.115073][T10719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.158122][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1602'. [ 453.227877][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1602'. [ 453.273953][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1602'. [ 453.313986][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1602'. [ 453.356744][T11226] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 453.378305][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1602'. [ 453.409512][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1602'. [ 453.449852][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1602'. [ 453.480315][T11226] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 453.564439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 453.592348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 453.639681][T10719] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.697854][T10719] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.739095][T10719] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.779634][T10719] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.822213][T11235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: macvlan1 [ 453.886011][T11235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.927999][T11235] device macvlan1 entered promiscuous mode [ 453.958823][T11235] device macvlan1 left promiscuous mode [ 454.000405][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1613'. [ 454.298670][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.337389][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.390885][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.413590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 454.449393][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.528989][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 456.573774][T11283] lo speed is unknown, defaulting to 1000 [ 457.229562][T11311] loop6: detected capacity change from 0 to 1024 [ 457.303733][T11311] EXT4-fs: Ignoring removed mblk_io_submit option [ 457.401014][T11311] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 457.623770][T11324] loop7: detected capacity change from 0 to 1024 [ 457.683970][T10719] EXT4-fs (loop6): unmounting filesystem. [ 457.707108][T11324] EXT4-fs: inline encryption not supported [ 457.820491][T11324] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 457.900595][T11324] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.072550][T11338] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1635: bg 0: block 112: padding at end of block bitmap is not set [ 458.396651][ T4344] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: block 3: comm kworker/u4:7: lblock 3 mapped to illegal pblock 3 (length 3) [ 458.520037][ T4344] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 458.624774][ T4344] EXT4-fs (loop7): This should not happen!! Data will be lost [ 458.624774][ T4344] [ 458.694095][ T4344] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 2) [ 458.741252][T11352] loop6: detected capacity change from 0 to 2048 [ 458.802138][ T4344] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 2 with error 117 [ 458.849264][T11352] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 458.888131][T11359] 9pnet_fd: Insufficient options for proto=fd [ 458.909844][T11352] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.926364][ T4344] EXT4-fs (loop7): This should not happen!! Data will be lost [ 458.926364][ T4344] [ 458.967768][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1647'. [ 459.020805][ T8875] EXT4-fs (loop7): unmounting filesystem. [ 459.216377][T10719] EXT4-fs (loop6): unmounting filesystem. [ 460.448500][T11375] loop6: detected capacity change from 0 to 40427 [ 460.534610][T11375] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 460.610769][T11375] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 460.670487][T11375] F2FS-fs (loop6): invalid crc value [ 460.734523][T11375] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 460.913779][ T5954] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 460.992573][T11375] F2FS-fs (loop6): recover fsync data on readonly fs [ 461.097363][T11375] F2FS-fs (loop6): checkpoint=disable on readonly fs [ 461.159624][ T5954] usb 8-1: Using ep0 maxpacket: 8 [ 461.182089][ T5954] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.266049][ T5954] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 461.342400][ T5954] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.403286][ T5954] usb 8-1: config 0 descriptor?? [ 461.667047][ T5954] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 462.030272][ T5954] usb 8-1: USB disconnect, device number 5 [ 462.342330][T11423] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 462.429001][T11423] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 463.002463][T11448] loop6: detected capacity change from 0 to 256 [ 463.870164][T11471] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1678'. [ 464.208263][T11458] loop7: detected capacity change from 0 to 32768 [ 464.319958][T11458] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 464.319958][T11458] [ 464.439101][T11458] xtLookup: xtSearch returned -5 [ 464.499705][T11458] free_index: error reading directory table [ 464.570096][T11458] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 464.570096][T11458] [ 464.633446][T11458] xtLookup: xtSearch returned -5 [ 464.670389][T11458] free_index: error reading directory table [ 464.676314][T11458] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 464.676314][T11458] [ 464.778372][T11458] xtLookup: xtSearch returned -5 [ 464.815624][T11458] free_index: error reading directory table [ 464.882201][T11458] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 464.882201][T11458] [ 464.950191][T11458] xtLookup: xtSearch returned -5 [ 464.955176][T11458] free_index: error reading directory table [ 465.027435][T11458] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 465.027435][T11458] [ 465.101866][T11458] xtLookup: xtSearch returned -5 [ 465.163292][T11458] free_index: error reading directory table [ 465.210267][T11458] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 465.210267][T11458] [ 465.288231][T11458] xtLookup: xtSearch returned -5 [ 465.293192][T11458] add_index: get/read_metapage failed! [ 465.350438][T11504] loop6: detected capacity change from 0 to 4096 [ 465.365291][T11458] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 465.365291][T11458] [ 465.417349][T11504] EXT4-fs: Ignoring removed mblk_io_submit option [ 465.453190][T11458] xtLookup: xtSearch returned -5 [ 465.496141][T11504] EXT4-fs (loop6): Test dummy encryption mode enabled [ 465.503440][T11458] free_index: error reading directory table [ 465.509349][T11458] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 465.509349][T11458] [ 465.561804][T11504] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 465.634679][T11458] xtLookup: xtSearch returned -5 [ 465.688794][T11458] free_index: error reading directory table [ 465.694735][T11458] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 465.694735][T11458] [ 465.707451][T11504] EXT4-fs (loop6): shut down requested (0) [ 465.804295][T11458] xtLookup: xtSearch returned -5 [ 465.835223][T11458] free_index: error reading directory table [ 465.869162][T10719] EXT4-fs (loop6): unmounting filesystem. [ 465.883286][T10483] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 465.904495][T11458] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 465.904495][T11458] [ 465.981018][T11458] xtLookup: xtSearch returned -5 [ 466.006971][T11458] free_index: error reading directory table [ 466.072138][T11458] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 466.072138][T11458] [ 466.153599][T11458] xtLookup: xtSearch returned -5 [ 466.191529][T11458] free_index: error reading directory table [ 466.377185][T11458] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 466.377185][T11458] [ 466.464929][T11458] xtLookup: xtSearch returned -5 [ 466.505990][T11458] add_index: get/read_metapage failed! [ 466.646124][T11538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.407476][T11571] netlink: 140 bytes leftover after parsing attributes in process `syz.8.1707'. [ 467.514988][T11571] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1707'. [ 468.017542][ T5954] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 468.159210][T11600] jffs2: notice: (11600) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 468.244175][ T5954] usb 8-1: Using ep0 maxpacket: 16 [ 468.257866][ T5954] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.354001][T11611] bridge0: port 1(geneve1) entered blocking state [ 468.384513][ T5954] usb 8-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 468.393569][ T5954] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.429384][T11611] bridge0: port 1(geneve1) entered disabled state [ 468.485007][ T5954] usb 8-1: config 0 descriptor?? [ 468.524999][T11611] device geneve1 entered promiscuous mode [ 468.932331][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 468.964475][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.003716][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.037133][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.070499][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.103177][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.135840][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.173567][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.213824][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.253647][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.300146][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.341392][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.379823][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.415620][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.444541][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.483284][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.515764][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.540236][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.572843][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.596042][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.619639][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.643831][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.668330][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.701856][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.734949][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.785153][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.821806][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.849194][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.872170][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.905974][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.930674][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.956487][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 469.979255][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 470.002347][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 470.028030][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 470.056310][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 470.078113][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 470.102577][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 470.127193][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 470.154946][ T5954] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 470.188842][ T5954] maltron 0003:058F:9410.000A: hidraw0: USB HID v0.06 Device [HID 058f:9410] on usb-dummy_hcd.7-1/input0 [ 470.241788][ T5954] usb 8-1: USB disconnect, device number 6 [ 470.453017][ T5952] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 470.490820][T11660] fido_id[11660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 470.712661][ T5952] usb 7-1: Using ep0 maxpacket: 8 [ 470.729682][T11672] 9pnet_fd: Insufficient options for proto=fd [ 470.758751][ T5952] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 470.826865][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.880766][ T5952] usb 7-1: Product: syz [ 470.900443][ T5952] usb 7-1: Manufacturer: syz [ 470.927629][ T5952] usb 7-1: SerialNumber: syz [ 471.468903][T11622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.536377][T11622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.810149][ T5952] usb 7-1: clock source 0 is not valid, cannot use [ 472.027573][ T5952] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 472.070069][ T5952] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 472.139980][ T5952] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 472.224773][ T5952] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 472.402609][ T5952] snd-usb-audio: probe of 7-1:1.2 failed with error -22 [ 472.463538][T11699] udevd[11699]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.490718][ T5952] usb 7-1: USB disconnect, device number 3 [ 472.909696][T11716] loop6: detected capacity change from 0 to 2048 [ 473.019112][T11716] EXT4-fs: Ignoring removed i_version option [ 473.135373][T11716] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 473.179522][T11716] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.505195][T10719] EXT4-fs (loop6): unmounting filesystem. [ 473.751652][T11742] jffs2: notice: (11742) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 474.362266][T11769] jffs2: notice: (11769) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 474.802978][T11786] loop6: detected capacity change from 0 to 512 [ 474.872221][T11786] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 475.057922][T11797] jffs2: notice: (11797) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 478.014061][T11886] 9pnet_fd: Insufficient options for proto=fd [ 478.190928][T11893] CIFS: Attempting to mount \\127.0.0.1\share [ 478.197314][T11893] CIFS: VFS: Error connecting to socket. Aborting operation. [ 478.299804][T11893] CIFS: VFS: cifs_mount failed w/return code = -22 [ 478.312985][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 478.950067][ T5952] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 479.190139][ T5952] usb 7-1: unable to get BOS descriptor or descriptor too short [ 479.247502][ T5952] usb 7-1: not running at top speed; connect to a high speed hub [ 479.315425][ T5952] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 479.387615][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.445882][ T5952] usb 7-1: Product: syz [ 479.470435][ T5952] usb 7-1: Manufacturer: syz [ 479.475051][ T5952] usb 7-1: SerialNumber: syz [ 480.283989][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1818'. [ 480.392221][T11943] loop7: detected capacity change from 0 to 40427 [ 480.426860][T11943] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 480.482711][T11943] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 480.546889][T11943] F2FS-fs (loop7): Found nat_bits in checkpoint [ 480.746574][T11943] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 480.798926][T11943] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 480.969450][ T5952] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 481.035014][ T5952] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 481.101513][ T5952] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 481.148245][ T5952] usb 7-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 481.212630][ T5952] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 481.282858][ T5952] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 481.342902][ T5952] usb 7-1: 2:0: failed to get current value for ch 0 (-22) [ 481.397621][ T5952] usb 7-1: 2:0: failed to get current value for ch 1 (-22) [ 481.466501][ T5952] usb 7-1: 2:0: failed to get current value for ch 1 (-22) [ 481.648425][ T5952] usb 7-1: USB disconnect, device number 4 [ 481.737173][T10962] udevd[10962]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.845887][T12006] netlink: 'syz.2.1828': attribute type 1 has an invalid length. [ 481.972148][T12006] device bond1 entered promiscuous mode [ 482.052149][T12006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.168296][T12014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.207761][T12014] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 482.277198][T12014] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 482.346844][T12014] bond1: (slave gre1): making interface the new active one [ 482.404017][T12014] device gre1 entered promiscuous mode [ 482.443500][T12014] bond1: (slave gre1): Enslaving as an active interface with an up link [ 482.499943][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 483.389772][T12049] overlayfs: failed to clone upperpath [ 483.766044][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1838'. [ 484.106100][T12075] loop7: detected capacity change from 0 to 256 [ 485.702988][T12121] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 485.890914][T12125] fuse: Bad value for 'fd' [ 486.704265][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1865'. [ 487.223514][T12155] device bridge1 entered promiscuous mode [ 487.764018][T12173] 9pnet_fd: Insufficient options for proto=fd [ 487.989919][ T27] audit: type=1326 audit(1786181017.595:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12142 comm="syz.2.1864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feceab9e0d9 code=0x0 [ 488.172168][T12189] device ip6gre1 entered promiscuous mode [ 488.199602][T12191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.238309][T12194] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 488.343660][ T5954] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 488.403715][ T5954] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 488.457989][ T5951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 489.049715][ T5951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 489.090148][ T5951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.083282][T12256] overlayfs: failed to clone upperpath [ 490.538557][ T5951] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 490.627570][ T5951] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 490.659332][T12266] loop7: detected capacity change from 0 to 4096 [ 490.758434][T12266] ext4: Unknown parameter 'fsuuid' [ 491.016872][T12273] fido_id[12273]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 491.843687][T12303] 9pnet: Could not find request transport: xen [ 492.629691][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 495.800403][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1933'. [ 496.422197][T12423] fuse: Bad value for 'fd' [ 496.918759][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1943'. [ 497.408147][T12443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.760515][T12443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.945472][T12443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.414221][T12443] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.508434][T12443] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.601725][T12443] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.740051][T12443] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.121595][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'. [ 500.195778][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1975'. [ 500.250310][T12516] netlink: 'syz.2.1975': attribute type 15 has an invalid length. [ 500.313295][T12516] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 500.321657][T12516] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 500.329745][T12516] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 500.337844][T12516] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 500.544937][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'. [ 500.597485][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1975'. [ 500.664854][T12516] netlink: 'syz.2.1975': attribute type 15 has an invalid length. [ 500.756882][T12516] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 60387 - 0 [ 500.765471][T12516] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 60387 - 0 [ 500.773751][T12516] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 60387 - 0 [ 500.782094][T12516] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 60387 - 0 [ 501.469747][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.603267][T12546] lo speed is unknown, defaulting to 1000 [ 502.265572][T12570] netlink: 'syz.2.1980': attribute type 1 has an invalid length. [ 502.412691][T12570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.614393][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 502.626547][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.636162][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 502.646313][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.653758][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 502.660905][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 502.772915][T12575] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 502.903490][ T33] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 502.973251][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 503.101286][T12582] lo speed is unknown, defaulting to 1000 [ 503.171656][ T4344] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 503.541845][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1987'. [ 504.057170][T12582] chnl_net:caif_netlink_parms(): no params data found [ 504.354629][T10483] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.665909][T10483] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.851442][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 504.898731][T10483] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.133928][T10483] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.234103][T12582] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.287138][T12582] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.342784][T12582] device bridge_slave_0 entered promiscuous mode [ 505.408487][T12648] fuse: Bad value for 'fd' [ 505.422543][T12582] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.469046][T12582] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.518026][T12582] device bridge_slave_1 entered promiscuous mode [ 505.636481][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.642810][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.679035][T12582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.825149][T12582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.966315][T12582] team0: Port device team_slave_0 added [ 506.070614][T12582] team0: Port device team_slave_1 added [ 506.235511][T12582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.267314][T12582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.321122][T12622] loop7: detected capacity change from 0 to 65536 [ 506.407709][T12622] XFS (loop7): Mounting V5 Filesystem [ 506.453593][T12582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.553345][T12622] XFS (loop7): Ending clean mount [ 506.875578][T12582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.906779][T12582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.993159][ T8875] XFS (loop7): Unmounting Filesystem [ 507.105531][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 507.117623][T12582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.449110][T12582] device hsr_slave_0 entered promiscuous mode [ 507.528937][T12582] device hsr_slave_1 entered promiscuous mode [ 507.578845][T12582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.633001][T12582] Cannot create hsr debugfs directory [ 508.020716][T12713] device bond3 entered promiscuous mode [ 508.310825][T12723] loop7: detected capacity change from 0 to 4096 [ 508.399748][T12723] EXT4-fs: Ignoring removed oldalloc option [ 508.405706][T12723] EXT4-fs: inline encryption not supported [ 508.480219][T12728] lo speed is unknown, defaulting to 1000 [ 508.547032][T12723] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 508.599494][T12723] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c1a8, mo2=0003] [ 508.666300][T12723] System zones: 0-5 [ 508.697790][T12723] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 509.131693][T11903] EXT4-fs (loop7): unmounting filesystem. [ 509.367186][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 509.743964][T10483] device hsr_slave_0 left promiscuous mode [ 509.818410][T10483] device hsr_slave_1 left promiscuous mode [ 509.863373][T10483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.905290][T10483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.938252][T10483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.987655][T10483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.035530][T10483] device bridge_slave_1 left promiscuous mode [ 510.074556][T10483] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.125733][T10483] device bridge_slave_0 left promiscuous mode [ 510.163951][T10483] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.287144][T10483] device veth1_macvtap left promiscuous mode [ 510.311147][T10483] device veth0_macvtap left promiscuous mode [ 510.336205][T10483] device veth1_vlan left promiscuous mode [ 510.359129][T10483] device veth0_vlan left promiscuous mode [ 510.442885][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 510.460679][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 510.470230][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 510.482412][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 510.490969][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 510.498480][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 511.347096][T10483] team0 (unregistering): Port device team_slave_1 removed [ 511.403480][T10483] team0 (unregistering): Port device team_slave_0 removed [ 511.464585][T10483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.524086][T10483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.621795][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 511.979386][T10483] bond0 (unregistering): Released all slaves [ 512.176505][T12775] lo speed is unknown, defaulting to 1000 [ 512.432334][T12582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 512.565786][T12582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 512.632676][T12582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 512.720105][T12582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 512.741467][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 513.046112][T12775] chnl_net:caif_netlink_parms(): no params data found [ 513.093980][T12582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.203428][T12582] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.254200][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 513.287104][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 513.376463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 513.424677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 513.468339][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.475413][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.537745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 513.575933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 513.616776][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.623931][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.665302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 513.706150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 513.756805][T12582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.808661][T12582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.926578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 513.949528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 514.014783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 514.050006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 514.093634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 514.150509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 514.179080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 514.223590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 514.262700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 514.392219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 514.409495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 514.460455][T12841] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 514.508816][T12841] 8021q: adding VLAN 0 to HW filter on device bond4 [ 514.641857][T12850] bond4: (slave geneve2): making interface the new active one [ 514.688551][T12850] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 514.799089][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 514.836026][T12775] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.864964][T12775] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.918349][T12775] device bridge_slave_0 entered promiscuous mode [ 514.971854][T12775] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.987577][T12857] fuse: Bad value for 'fd' [ 514.995389][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 515.020644][T12775] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.057031][T12775] device bridge_slave_1 entered promiscuous mode [ 515.196538][T12775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.341481][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 515.359592][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.400798][T12775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.424492][T12869] fuse: Bad value for 'fd' [ 515.449836][T12582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.561596][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 515.593921][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.744662][T12775] team0: Port device team_slave_0 added [ 515.754520][T12582] device veth0_vlan entered promiscuous mode [ 515.797615][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 515.822480][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.908413][T12775] team0: Port device team_slave_1 added [ 515.964133][T12881] device bond3 entered promiscuous mode [ 516.102068][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.139643][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.173608][T12582] device veth1_vlan entered promiscuous mode [ 516.222494][T10483] tipc: Left network mode [ 516.281370][T12775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.317859][T12775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.441777][T12775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.488681][T12582] device veth0_macvtap entered promiscuous mode [ 516.825724][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 516.878430][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 516.913257][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 516.973272][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 517.037982][T12775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.071073][T12775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.220637][T12775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.252226][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 517.269676][T12582] device veth1_macvtap entered promiscuous mode [ 517.468350][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 517.508385][T12582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.624675][T12582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.690300][T12582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.755243][T12582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.802158][T12582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.872337][T12582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.935241][T12582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.094916][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 518.130556][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 518.165687][T12582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.205391][T12582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.241780][T12582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.280538][T12582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.329012][T12582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.455007][T12775] device hsr_slave_0 entered promiscuous mode [ 518.479499][T12775] device hsr_slave_1 entered promiscuous mode [ 518.502884][T12775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.534090][T12775] Cannot create hsr debugfs directory [ 518.548262][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 518.577433][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 518.609042][T12582] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.634574][T12582] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.668202][T12582] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.700511][T12582] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.066886][T12947] overlayfs: failed to clone upperpath [ 519.351011][T10477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.398089][T10477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.483342][T10475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.491179][T10475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.503854][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 519.595965][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 519.643165][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 519.996832][T12966] loop1: detected capacity change from 0 to 1024 [ 520.022513][T12967] overlayfs: failed to clone upperpath [ 520.033641][T12966] EXT4-fs: Ignoring removed bh option [ 520.071201][T12966] EXT4-fs: Ignoring removed bh option [ 520.188672][T12966] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 520.197367][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.345179][T12966] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.1974: Invalid inode table block 5 in block_group 0 [ 520.476675][T12966] EXT4-fs (loop1): Remounting filesystem read-only [ 520.619301][T10475] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm kworker/u4:12: Invalid inode table block 5 in block_group 0 [ 520.705702][T10475] EXT4-fs (loop1): Remounting filesystem read-only [ 520.751752][T12582] EXT4-fs (loop1): unmounting filesystem. [ 521.358533][T10483] device hsr_slave_0 left promiscuous mode [ 521.393229][T10483] device hsr_slave_1 left promiscuous mode [ 521.462838][T10483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.499030][T10483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.539166][T10483] device bridge_slave_1 left promiscuous mode [ 521.593687][T10483] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.632064][T10483] device bridge_slave_0 left promiscuous mode [ 521.638251][T10483] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.376552][T10483] team0 (unregistering): Port device team_slave_1 removed [ 523.437348][T10483] team0 (unregistering): Port device team_slave_0 removed [ 523.499094][T10483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.560408][T10483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.835692][T10483] smc: removing net device veth0 with user defined pnetid SYZ0 [ 524.037496][T10483] bond0 (unregistering): Released all slaves [ 525.146547][T12775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 525.187715][T12775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 525.221724][T12775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 525.266506][T12775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 525.284991][T13042] loop1: detected capacity change from 0 to 32768 [ 525.500071][T12775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.582712][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 525.620167][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.665335][T12775] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.717185][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 525.755129][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.797096][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.804233][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.867738][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 525.905132][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 525.937840][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.961756][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.968949][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.002285][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 526.042129][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 526.059027][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 526.091066][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 526.120407][T12775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 526.155553][T12775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.185255][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 526.204220][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 526.228467][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 526.249937][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 526.273403][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 526.295127][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 526.316470][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 526.351045][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 526.705496][T13070] fuse: Bad value for 'fd' [ 527.056357][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 527.085830][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.141720][T12775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.240515][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 527.282102][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 527.385957][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 527.408856][T13089] overlayfs: failed to clone upperpath [ 527.435592][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 527.464006][T13089] overlayfs: failed to clone upperpath [ 527.488667][T12775] device veth0_vlan entered promiscuous mode [ 527.519170][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 527.555046][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 527.602140][T12775] device veth1_vlan entered promiscuous mode [ 527.728087][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 527.765829][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 527.813318][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 527.895646][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 527.960951][T12775] device veth0_macvtap entered promiscuous mode [ 528.018685][T12775] device veth1_macvtap entered promiscuous mode [ 528.090107][T13105] netlink: 'syz.9.2126': attribute type 21 has an invalid length. [ 528.098328][T13105] netlink: 'syz.9.2126': attribute type 7 has an invalid length. [ 528.143528][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.210925][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.300320][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.369408][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.447919][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.520494][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.585945][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.666430][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.738952][T12775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.746305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 528.802158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 528.853405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 528.918834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 528.981485][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.060974][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.137252][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.212213][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.283761][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.400205][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.473988][T12775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.526851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 529.571193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 529.652616][T12775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.699647][T12775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.764608][T12775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.831206][T12775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.149118][T10477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.156966][T10477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.251176][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.269725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 530.317996][T13157] ffs_data_put(): freeing [ 530.330727][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.362155][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 530.640219][T13165] loop1: detected capacity change from 0 to 512 [ 530.788348][T13165] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 530.850938][T13165] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.098452][T13165] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.2140: corrupted xattr block 32 [ 531.270138][ T27] audit: type=1800 audit(1786181057.520:418): pid=13165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2140" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 531.454887][T12582] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 4: comm syz-executor: lblock 0 mapped to illegal pblock 4 (length 1) [ 531.584773][T12582] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 531.675665][T12582] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1061109567 in block_group 0 [ 531.793362][T12582] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 531.855950][T12582] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #2: comm syz-executor: mark_inode_dirty error [ 532.032404][T10483] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm kworker/u4:16: Invalid inode table block 1061109567 in block_group 0 [ 532.120740][T12582] EXT4-fs (loop1): unmounting filesystem. [ 533.071478][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.546771][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.964819][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.282391][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.645183][T13243] device wlan99 left promiscuous mode [ 534.789270][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 534.800804][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 534.812530][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 534.822499][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 534.833616][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 534.840977][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 534.993005][T13243] device bridge1 left promiscuous mode [ 535.090532][T13243] device ip6gre1 left promiscuous mode [ 535.139005][ T5957] lo speed is unknown, defaulting to 1000 [ 535.218183][T13267] lo speed is unknown, defaulting to 1000 [ 535.678772][T13289] overlayfs: failed to clone upperpath [ 535.914822][T13267] chnl_net:caif_netlink_parms(): no params data found [ 536.628980][T13267] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.692234][T13267] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.725062][ T5954] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 536.746212][T13267] device bridge_slave_0 entered promiscuous mode [ 536.937965][T13267] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.964637][ T5954] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 536.985070][T13267] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.024569][ T5954] usb 4-1: config 0 has no interface number 0 [ 537.050707][T13267] device bridge_slave_1 entered promiscuous mode [ 537.085988][ T5954] usb 4-1: config 0 interface 41 has no altsetting 0 [ 537.104365][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 537.178148][ T5954] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 537.266214][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.341284][ T5954] usb 4-1: Product: syz [ 537.367952][ T5954] usb 4-1: Manufacturer: syz [ 537.407707][ T5954] usb 4-1: SerialNumber: syz [ 537.447642][ T5954] usb 4-1: config 0 descriptor?? [ 537.619856][T13267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.685794][T13267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.943879][T13267] team0: Port device team_slave_0 added [ 538.258560][T13267] team0: Port device team_slave_1 added [ 538.369645][ T5954] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 538.595310][T13267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.647285][T13267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.826912][T13267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.972705][T13267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.018731][T13267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.164473][T13267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.358664][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 539.382103][ T5957] libceph: connect (1)[c::]:6789 error -101 [ 539.400638][ T5957] libceph: mon0 (1)[c::]:6789 connect error [ 539.455468][ T5957] libceph: connect (1)[c::]:6789 error -101 [ 539.473529][T13267] device hsr_slave_0 entered promiscuous mode [ 539.502318][ T5957] libceph: mon0 (1)[c::]:6789 connect error [ 539.537166][T13267] device hsr_slave_1 entered promiscuous mode [ 539.559807][T13267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.603045][T13267] Cannot create hsr debugfs directory [ 539.816512][ T7] libceph: connect (1)[c::]:6789 error -101 [ 539.822948][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 539.831874][ T5954] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 539.898715][ T5954] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 539.966201][ T5954] CoreChips: probe of 4-1:0.41 failed with error -71 [ 540.034941][ T5954] usb 4-1: USB disconnect, device number 9 [ 540.280806][T13401] netlink: 'syz.2.2193': attribute type 15 has an invalid length. [ 540.322202][T13401] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2193'. [ 540.392589][T13402] netlink: 'syz.2.2193': attribute type 5 has an invalid length. [ 540.463626][T13402] netlink: 'syz.2.2193': attribute type 6 has an invalid length. [ 540.473656][ T5957] libceph: connect (1)[c::]:6789 error -101 [ 540.507746][ T5957] libceph: mon0 (1)[c::]:6789 connect error [ 540.529100][T13402] netlink: 'syz.2.2193': attribute type 7 has an invalid length. [ 540.569327][T13402] netlink: 'syz.2.2193': attribute type 11 has an invalid length. [ 540.637416][T13402] netlink: 'syz.2.2193': attribute type 15 has an invalid length. [ 540.680703][T13402] netlink: 'syz.2.2193': attribute type 16 has an invalid length. [ 540.707074][T13410] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 540.738711][T13402] netlink: 'syz.2.2193': attribute type 21 has an invalid length. [ 540.786632][T13402] netlink: 'syz.2.2193': attribute type 25 has an invalid length. [ 540.831004][T13402] netlink: 'syz.2.2193': attribute type 27 has an invalid length. [ 541.058448][T13381] ceph: No mds server is up or the cluster is laggy [ 541.409748][ T11] device hsr_slave_0 left promiscuous mode [ 541.448412][ T11] device hsr_slave_1 left promiscuous mode [ 541.471027][T13425] overlayfs: failed to clone upperpath [ 541.497128][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.538437][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.589412][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.612900][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 541.651545][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.706197][ T11] device bridge_slave_1 left promiscuous mode [ 541.831917][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.122438][ T11] device bridge_slave_0 left promiscuous mode [ 542.149135][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.300402][ T11] device veth1_macvtap left promiscuous mode [ 542.342354][ T11] device veth0_macvtap left promiscuous mode [ 542.377433][ T11] device veth1_vlan left promiscuous mode [ 542.416557][ T11] device veth0_vlan left promiscuous mode [ 542.732225][ T4288] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 542.741938][ T4288] CPU: 0 PID: 4288 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 542.749475][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 542.759517][ T4288] Workqueue: hci4 hci_rx_work [ 542.764286][ T4288] Call Trace: [ 542.767581][ T4288] [ 542.770550][ T4288] dump_stack_lvl+0x188/0x24e [ 542.775288][ T4288] ? show_regs_print_info+0x12/0x12 [ 542.780476][ T4288] ? load_image+0x410/0x410 [ 542.784987][ T4288] sysfs_create_dir_ns+0x26a/0x290 [ 542.790545][ T4288] ? __lock_acquire+0x7c40/0x7c40 [ 542.795567][ T4288] ? sysfs_warn_dup+0xa0/0xa0 [ 542.800255][ T4288] ? do_raw_spin_unlock+0x11d/0x230 [ 542.805438][ T4288] kobject_add_internal+0x617/0xca0 [ 542.810648][ T4288] kobject_add+0x160/0x230 [ 542.815050][ T4288] ? kobject_init+0x1c0/0x1c0 [ 542.819713][ T4288] ? __raw_spin_lock_init+0x41/0x100 [ 542.824999][ T4288] ? klist_children_get+0x50/0x50 [ 542.830096][ T4288] ? get_device_parent+0x121/0x3e0 [ 542.835193][ T4288] device_add+0x470/0x1050 [ 542.839595][ T4288] hci_conn_add_sysfs+0xd1/0x1e0 [ 542.844593][ T4288] le_conn_complete_evt+0xfac/0x15c0 [ 542.849866][ T4288] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 542.856111][ T4288] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 542.861808][ T4288] ? mutex_unlock+0x10/0x10 [ 542.866305][ T4288] ? skb_pull_data+0xec/0x1f0 [ 542.871017][ T4288] hci_le_conn_complete_evt+0x183/0x440 [ 542.876560][ T4288] ? hci_remote_host_features_evt+0x230/0x230 [ 542.882614][ T4288] hci_event_packet+0x7b3/0x1290 [ 542.887540][ T4288] ? __lock_acquire+0x7c40/0x7c40 [ 542.892550][ T4288] ? bis_list+0x280/0x280 [ 542.896860][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 542.902764][ T4288] ? kcov_remote_start+0x4b0/0x7e0 [ 542.907881][ T4288] ? do_machine_check+0x380/0x750 [ 542.912895][ T4288] ? hci_send_to_monitor+0x9c/0x4a0 [ 542.918112][ T4288] hci_rx_work+0x3eb/0xd40 [ 542.922517][ T4288] ? _raw_spin_unlock+0x40/0x40 [ 542.927355][ T4288] ? process_one_work+0x7b4/0x1160 [ 542.932530][ T4288] process_one_work+0x8ab/0x1160 [ 542.937458][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 542.943077][ T4288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 542.948109][ T4288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 542.953656][ T4288] ? wq_worker_running+0x97/0x190 [ 542.958732][ T4288] worker_thread+0xaf5/0x12a0 [ 542.963405][ T4288] kthread+0x29d/0x330 [ 542.967475][ T4288] ? worker_clr_flags+0x1a0/0x1a0 [ 542.972484][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 542.977053][ T4288] ret_from_fork+0x1f/0x30 [ 542.981503][ T4288] [ 542.995006][ T4288] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 543.008899][ T4288] Bluetooth: hci4: failed to register connection device [ 543.871374][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 544.664226][ T11] team0 (unregistering): Port device team_slave_1 removed [ 544.760035][ T11] team0 (unregistering): Port device team_slave_0 removed [ 544.901503][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.072571][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.729470][ T11] bond0 (unregistering): Released all slaves [ 545.900338][T13491] validate_nla: 3 callbacks suppressed [ 545.900421][T13491] netlink: 'syz.9.2219': attribute type 1 has an invalid length. [ 546.083704][T13491] 8021q: adding VLAN 0 to HW filter on device bond4 [ 546.108380][ T5946] libceph: connect (1)[c::]:6789 error -101 [ 546.123085][ T5946] libceph: mon0 (1)[c::]:6789 connect error [ 546.209404][T13492] bond4: (slave veth0_to_bond): making interface the new active one [ 546.274393][T13492] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 546.404301][T13493] device bond4 entered promiscuous mode [ 546.439730][ T5946] libceph: connect (1)[c::]:6789 error -101 [ 546.445877][T13493] device veth0_to_bond entered promiscuous mode [ 546.456711][ T5946] libceph: mon0 (1)[c::]:6789 connect error [ 546.511968][T13494] device macvlan2 entered promiscuous mode [ 546.569326][T13494] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 546.612879][T13494] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 546.795917][T13502] ceph: No mds server is up or the cluster is laggy [ 547.042685][ T5954] libceph: connect (1)[c::]:6789 error -101 [ 547.048679][ T5954] libceph: mon0 (1)[c::]:6789 connect error [ 547.402484][ T4288] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 547.422461][T13267] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.785819][T13267] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.058363][T13267] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.275309][T13267] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.990522][T13267] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 549.053522][T13267] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 549.138215][T13562] fuse: Bad value for 'fd' [ 549.145216][T13267] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 549.233426][T13267] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 549.529613][T13570] loop3: detected capacity change from 0 to 256 [ 549.544547][T13267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.631476][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 549.679341][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 549.738004][T13267] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.787947][T13573] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2233'. [ 549.881208][T13577] fuse: Bad value for 'fd' [ 549.901463][T13578] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2233'. [ 549.966756][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 550.010896][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 550.056725][T10477] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.063848][T10477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.126482][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 550.160634][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 550.203372][T10477] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.210511][T10477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.228817][ T5946] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 550.296336][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 550.330672][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 550.388614][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 550.441367][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 550.449518][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 550.466420][ T5946] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 550.524535][ T5946] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 550.547124][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 550.590746][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.634933][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 550.663830][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 550.681533][ T5946] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 550.742290][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.756788][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 550.807492][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 550.842611][ T5946] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 550.874611][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 550.909602][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.929626][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 550.960031][ T5946] usb 4-1: Product: syz [ 550.971515][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 550.985354][ T5946] usb 4-1: Manufacturer: syz [ 550.996511][ T5946] usb 4-1: SerialNumber: syz [ 551.007282][T13267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 551.028731][ T5946] usb 4-1: config 0 descriptor?? [ 551.067585][ T5946] hub 4-1:0.0: bad descriptor, ignoring hub [ 551.112154][ T5946] hub: probe of 4-1:0.0 failed with error -5 [ 551.212575][T13617] netlink: 'syz.8.2243': attribute type 1 has an invalid length. [ 551.287854][T13617] 8021q: adding VLAN 0 to HW filter on device bond3 [ 551.384557][T13617] bond2: (slave veth0_to_bond): Releasing active interface [ 551.418781][T13617] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 551.477787][ T7] usb 4-1: USB disconnect, device number 10 [ 551.505188][T13617] device bond3 entered promiscuous mode [ 551.542476][T13622] device macvlan2 entered promiscuous mode [ 551.568495][T13622] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 551.607563][T13622] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 551.732587][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 551.759248][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 551.792094][T13267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.086852][T13639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 552.162273][T13639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 552.209970][T13639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 553.003199][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2247'. [ 553.144059][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2247'. [ 553.153043][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2247'. [ 553.162791][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2247'. [ 553.171829][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2247'. [ 553.979552][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 554.125357][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 554.379850][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2252'. [ 554.489859][T13674] bond5 (unregistering): Released all slaves [ 554.569110][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 554.605867][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 554.673387][T13267] device veth0_vlan entered promiscuous mode [ 554.705213][ T5946] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 554.718532][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 554.749805][T10483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 554.808845][T13267] device veth1_vlan entered promiscuous mode [ 554.954078][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 554.970249][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 554.979427][ T5946] usb 4-1: config index 0 descriptor too short (expected 37359, got 202) [ 555.012162][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 555.033064][ T5946] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 555.044427][T13688] fuse: Bad value for 'fd' [ 555.055651][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 555.085531][ T5946] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 555.106897][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.137575][ T5946] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 555.159535][T13267] device veth0_macvtap entered promiscuous mode [ 555.180453][T10475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 555.209765][ T5946] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 555.233878][T13267] device veth1_macvtap entered promiscuous mode [ 555.260197][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.284571][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.317056][ T5946] usb 4-1: Product: syz [ 555.331328][ T5946] usb 4-1: Manufacturer: syz [ 555.347049][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.359914][ T5946] usb 4-1: SerialNumber: syz [ 555.400735][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.444083][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.508566][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.542993][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.574988][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.595760][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.613573][ T5946] usb 4-1: 0:2 : does not exist [ 555.642247][ T5946] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 555.673004][T13267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.739744][ T5946] usb 4-1: USB disconnect, device number 11 [ 555.764340][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 555.813648][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 555.883977][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.933296][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.998019][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.041833][T12861] libceph: connect (1)127.0.0.1:8080 error -22 [ 556.088928][T12861] libceph: mon0 (1)127.0.0.1:8080 connect error [ 556.098252][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.132278][T13267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.176617][T13267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.220817][T13267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.263959][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 556.309411][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 556.360454][T13267] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.403316][T13267] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.414168][ T5957] libceph: connect (1)127.0.0.1:8080 error -22 [ 556.430067][ T5957] libceph: mon0 (1)127.0.0.1:8080 connect error [ 556.452329][T13267] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.480513][T13267] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.801458][T10475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.005647][T13707] ceph: No mds server is up or the cluster is laggy [ 557.014251][ T5954] libceph: connect (1)127.0.0.1:8080 error -22 [ 557.040203][ T5954] libceph: mon0 (1)127.0.0.1:8080 connect error [ 557.047414][T10475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.107232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 557.145789][T10475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.194082][T10475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.249553][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 557.495676][T13740] pit: kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 557.621752][T13740] pit: kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 557.682003][T13740] pit: kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 557.763159][T13740] pit: kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 557.823610][T13740] pit: kvm: requested 127390 ns i8254 timer period limited to 200000 ns [ 557.882303][T13740] pit: kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 557.964608][T13740] pit: kvm: requested 139962 ns i8254 timer period limited to 200000 ns [ 558.018053][T13740] pit: kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 558.164288][T13740] pit: kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 558.188601][T13740] pit: kvm: requested 49447 ns i8254 timer period limited to 200000 ns [ 560.356411][T13786] xt_limit: Overflow, try lower: 324382443/0 [ 560.564634][T13790] smc: net device veth0 applied user defined pnetid SYZ0 [ 560.735465][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 561.272244][T13807] netem: change failed [ 563.737267][T13814] tipc: Started in network mode [ 564.607235][T13814] tipc: Node identity 3eea67046356, cluster identity 4711 [ 564.664940][T13814] tipc: Enabled bearer , priority 0 [ 564.714650][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2287'. [ 564.994145][T13840] device syzkaller0 entered promiscuous mode [ 565.046504][T13840] tipc: Started in network mode [ 565.051404][T13840] tipc: Node identity 266b1a238ea1, cluster identity 4711 [ 565.162847][T13840] tipc: Enabled bearer , priority 0 [ 565.329984][T13838] tipc: Resetting bearer [ 565.525823][T13859] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5258] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[13859] [ 565.639179][T13838] tipc: Disabling bearer [ 565.882928][ T5954] tipc: Node number set to 1572628228 [ 565.926845][T13866] device syzkaller0 entered promiscuous mode [ 567.334099][T13875] device syzkaller0 entered promiscuous mode [ 567.644200][T13875] tipc: Started in network mode [ 567.681097][T13875] tipc: Node identity 7edffce4d45e, cluster identity 4711 [ 567.723357][T13875] tipc: Enabled bearer , priority 0 [ 567.781149][T13873] tipc: Resetting bearer [ 567.920900][T13873] tipc: Disabling bearer [ 570.051517][ T5954] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 570.268335][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 570.285917][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 570.340377][ T5954] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 570.390077][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.428629][ T5954] usb 4-1: Product: syz [ 570.455075][ T5954] usb 4-1: Manufacturer: syz [ 570.477445][ T5954] usb 4-1: SerialNumber: syz [ 570.575029][T13922] loop5: detected capacity change from 0 to 32768 [ 570.585740][ T5954] usb 4-1: config 0 descriptor?? [ 570.621752][ T5954] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 570.769662][ T5954] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 570.890884][T13922] XFS (loop5): Mounting V5 Filesystem [ 571.000869][T13922] XFS (loop5): Ending clean mount [ 571.133022][ T27] audit: type=1800 audit(1786181094.299:419): pid=13922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2316" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 571.276454][ T5954] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 571.292633][T13952] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 571.377969][T13952] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 571.454471][ T27] audit: type=1800 audit(1786181094.604:420): pid=13957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2316" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 571.520845][T13952] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 571.603459][T13952] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 571.679476][T13952] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 571.741930][T13952] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 571.793914][T13965] netlink: 'syz.8.2321': attribute type 1 has an invalid length. [ 571.847611][ T5954] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 571.904093][ T5954] em28xx 4-1:0.0: board has no eeprom [ 571.913431][T13965] 8021q: adding VLAN 0 to HW filter on device bond4 [ 571.951578][T13267] XFS (loop5): Unmounting Filesystem [ 572.084724][T13964] bond4: (slave veth9): Enslaving as an active interface with a down link [ 572.203375][T13968] device bond4 entered promiscuous mode [ 572.221382][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.227684][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.294861][T13969] device macvlan2 entered promiscuous mode [ 572.337716][ T5954] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 572.345632][ T5954] em28xx 4-1:0.0: dvb set to bulk mode. [ 572.355892][T13969] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 572.725498][ T5954] em28xx 4-1:0.0: Binding DVB extension [ 572.824221][T13978] netlink: 'syz.9.2324': attribute type 10 has an invalid length. [ 573.071821][T13978] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 574.017825][T13915] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 574.358384][T12861] usb 4-1: USB disconnect, device number 12 [ 574.409505][T12861] em28xx 4-1:0.0: Disconnecting em28xx [ 574.445010][T13991] tipc: Enabling of bearer rejected, failed to enable media [ 574.484819][ T5954] em28xx 4-1:0.0: Registering input extension [ 574.852103][T12861] em28xx 4-1:0.0: Closing input extension [ 575.255434][T12861] em28xx 4-1:0.0: Freeing device [ 577.881253][T14033] netlink: 'syz.2.2334': attribute type 13 has an invalid length. [ 578.112038][T14037] No such timeout policy "syz1" [ 578.119801][T14037] loop5: detected capacity change from 0 to 256 [ 578.157816][T14033] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 578.470112][T14042] netlink: 'syz.2.2338': attribute type 1 has an invalid length. [ 578.576668][T14042] 8021q: adding VLAN 0 to HW filter on device bond5 [ 578.757442][T14046] device bridge1 entered promiscuous mode [ 578.877699][T14046] bond5: (slave bridge1): making interface the new active one [ 578.942307][T14046] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 579.039199][T10477] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 579.111924][T14055] Bluetooth: MGMT ver 1.22 [ 579.150966][T14057] device syzkaller0 entered promiscuous mode [ 579.463723][T14066] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.473196][T14066] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.481964][T14066] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.490857][T14066] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.791386][T14073] loop3: detected capacity change from 0 to 32768 [ 579.876456][T14073] XFS (loop3): Mounting V5 Filesystem [ 579.933994][T14073] XFS (loop3): Ending clean mount [ 579.945702][T14066] team0: Port device vxlan0 added [ 579.955359][T14073] XFS (loop3): Quotacheck needed: Please wait. [ 580.154191][T14073] XFS (loop3): Quotacheck: Done. [ 580.312682][ T27] audit: type=1800 audit(1786181102.769:421): pid=14091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2346" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 580.603999][T12775] XFS (loop3): Unmounting Filesystem [ 582.496955][T14127] device syzkaller0 entered promiscuous mode [ 582.588104][T14127] tipc: Enabled bearer , priority 0 [ 582.661523][T14130] tipc: Resetting bearer [ 582.715618][T14126] tipc: Resetting bearer [ 582.902309][T14126] tipc: Disabling bearer [ 587.044066][T14172] x_tables: duplicate underflow at hook 1 [ 592.073276][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2373'. [ 592.220173][T14219] device syzkaller0 entered promiscuous mode [ 592.464126][T14226] tipc: Enabled bearer , priority 0 [ 592.580192][T14215] tipc: Resetting bearer [ 592.885927][T14215] tipc: Disabling bearer [ 594.436575][T14254] 0: reclassify loop, rule prio 0, protocol 700 [ 595.068986][T14266] device syzkaller0 entered promiscuous mode [ 597.974134][T14282] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 603.942493][T14349] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 606.107178][T14358] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.116180][T14358] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.247423][T14358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.391844][T14358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.678373][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880574c0800: rx timeout, send abort [ 609.943580][T14358] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.963572][T14358] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.981936][T14358] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.996873][T14358] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.128033][T14372] tipc: Enabling of bearer rejected, failed to enable media [ 610.220312][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044683000: rx timeout, send abort [ 610.242896][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880574c0800: abort rx timeout. Force session deactivation [ 611.236960][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044683000: abort rx timeout. Force session deactivation [ 612.445378][T14444] loop5: detected capacity change from 0 to 512 [ 615.641066][T14459] xt_TPROXY: Can be used only with -p tcp or -p udp [ 618.856570][ T27] audit: type=1326 audit(1786181138.340:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14482 comm="syz.8.2430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 619.055479][ T27] audit: type=1326 audit(1786181138.367:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14482 comm="syz.8.2430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 619.537726][ T27] audit: type=1326 audit(1786181138.367:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14482 comm="syz.8.2430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 619.804417][ T27] audit: type=1326 audit(1786181138.367:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14482 comm="syz.8.2430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ca235e90e code=0x7ffc0000 [ 621.032906][ T27] audit: type=1326 audit(1786181138.367:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14482 comm="syz.8.2430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ca235e90e code=0x7ffc0000 [ 621.523903][T14518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2423'. [ 621.810790][ T27] audit: type=1326 audit(1786181138.367:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14482 comm="syz.8.2430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 622.111917][ T27] audit: type=1326 audit(1786181138.367:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14482 comm="syz.8.2430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 623.004220][ T27] audit: type=1326 audit(1786181138.367:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14482 comm="syz.8.2430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 623.167466][T14529] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 623.174747][ T27] audit: type=1326 audit(1786181138.367:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14482 comm="syz.8.2430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 623.259165][T14529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 623.353103][ T27] audit: type=1326 audit(1786181138.367:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14482 comm="syz.8.2430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 623.381801][T14529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 623.487983][T14529] device bridge_slave_0 left promiscuous mode [ 623.603878][T14529] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.736167][T14538] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2441'. [ 623.778001][T14529] device bridge_slave_1 left promiscuous mode [ 623.858000][T14529] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.011251][T14545] loop3: detected capacity change from 0 to 512 [ 624.097780][T14545] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 624.152885][T14529] bond0: (slave bond_slave_0): Releasing backup interface [ 624.216781][T14545] EXT4-fs (loop3): 1 truncate cleaned up [ 624.252290][T14545] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 624.312368][T14529] bond0: (slave bond_slave_1): Releasing backup interface [ 625.957996][T12775] EXT4-fs (loop3): unmounting filesystem. [ 626.201146][T14529] team0: Port device team_slave_0 removed [ 626.261831][T14529] team0: Port device team_slave_1 removed [ 626.296418][T14529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.346779][T14529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.391570][T14529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.446738][T14529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.554526][T14529] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.563688][T14529] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.572567][T14529] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.581417][T14529] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.822260][T14529] team0: Port device vxlan0 removed [ 626.915637][T14587] tipc: Enabled bearer , priority 0 [ 627.006991][T14585] device syzkaller0 entered promiscuous mode [ 628.001221][T14585] tipc: Resetting bearer [ 628.451545][T14585] tipc: Disabling bearer [ 628.487823][ T5952] tipc: Node number set to 2831817251 [ 633.770518][T14646] CIFS: Attempting to mount \\127.0.0.1\share [ 633.776640][T14646] CIFS: VFS: No username specified [ 634.274084][T14653] hpfs: Bad magic ... probably not HPFS [ 634.281174][T14653] hpfs: Bad magic ... probably not HPFS [ 634.872505][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 634.872515][ T27] audit: type=1326 audit(1786181153.121:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.8.2463" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ca239e0d9 code=0x0 [ 635.603511][T14666] 9pnet_fd: Insufficient options for proto=fd [ 636.637239][T14671] loop5: detected capacity change from 0 to 8192 [ 637.535577][T14671] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 637.625079][T14671] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 638.621642][T14691] futex_wake_op: syz.3.2466 tries to shift op by 144; fix this program [ 638.634563][T14691] loop3: detected capacity change from 0 to 128 [ 638.662610][T14691] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 638.740175][T14671] REISERFS (device loop5): using ordered data mode [ 638.844563][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 638.860595][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 638.879661][T14671] reiserfs: using flush barriers [ 638.941055][T10488] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 638.955278][T14671] REISERFS warning (device loop5): journal-1256 journal_init: unable to get memory for journal structure [ 639.726870][ T5952] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 641.193018][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 641.221550][ T5952] usb 6-1: config 206 has an invalid interface number: 66 but max is 0 [ 641.258089][ T5952] usb 6-1: config 206 has no interface number 0 [ 641.295819][ T5952] usb 6-1: config 206 interface 66 has no altsetting 0 [ 641.360700][ T5952] usb 6-1: string descriptor 0 read error: -22 [ 641.408793][ T5952] usb 6-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 641.479532][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.638702][ T5952] dw2102: su3000_identify_state [ 641.851530][ T5952] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 641.889901][ T5952] dw2102: su3000_power_ctrl: 1, initialized 0 [ 641.933862][ T5952] dvb-usb: bulk message failed: -22 (2/0) [ 641.999584][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 642.174745][ T5952] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 642.208534][ T5952] usb 6-1: media controller created [ 642.507218][ T5952] dvb-usb: bulk message failed: -22 (6/0) [ 642.547921][ T5952] dw2102: i2c transfer failed. [ 642.685405][ T5952] dvb-usb: bulk message failed: -22 (6/0) [ 642.718318][ T5952] dw2102: i2c transfer failed. [ 642.950863][ T27] audit: type=1326 audit(1786181160.567:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.8.2476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ca239e0d9 code=0x0 [ 642.982483][ T5952] dvb-usb: bulk message failed: -22 (6/0) [ 643.003844][ T5952] dw2102: i2c transfer failed. [ 643.140638][ T5952] dvb-usb: bulk message failed: -22 (6/0) [ 643.160228][ T5952] dw2102: i2c transfer failed. [ 643.177580][ T5952] dvb-usb: bulk message failed: -22 (6/0) [ 643.392461][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.414583][ T5952] dw2102: i2c transfer failed. [ 643.431788][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.441053][ T5952] dvb-usb: bulk message failed: -22 (6/0) [ 643.524660][ T5952] dw2102: i2c transfer failed. [ 643.545261][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.559344][ T5952] dvb-usb: MAC address: 02:02:02:02:02:02 [ 643.593877][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.637856][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 643.648680][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.690025][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.750395][ T5952] dvb-usb: bulk message failed: -22 (1/0) [ 643.772086][ T5952] dw2102: command 0x51 transfer failed. [ 644.109998][T14756] loop3: detected capacity change from 0 to 256 [ 645.308067][ T5952] DVB: Unable to find symbol m88rs2000_attach() [ 645.372429][ T5952] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 645.535686][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2482'. [ 645.692780][T14777] loop5: detected capacity change from 0 to 128 [ 646.086551][T14777] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 646.126023][T14767] udevd[14767]: incorrect ext4 checksum on /dev/loop5 [ 646.281586][ T5952] rc_core: IR keymap rc-su3000 not found [ 646.311063][ T5952] Registered IR keymap rc-empty [ 647.318807][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 647.355189][ T5952] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 647.687930][ T5952] input: TeVii S632 USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input13 [ 649.330329][ T5952] dvb-usb: schedule remote query interval to 150 msecs. [ 649.337345][ T5952] dw2102: su3000_power_ctrl: 0, initialized 1 [ 649.451786][ T5952] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 649.520588][ T5952] usb 6-1: USB disconnect, device number 2 [ 650.772062][ T5952] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 650.999833][T14805] loop5: detected capacity change from 0 to 128 [ 651.124536][T14805] FAT-fs (loop5): invalid media value (0x07) [ 651.176541][T14805] FAT-fs (loop5): Can't find a valid FAT filesystem [ 652.391877][T14808] loop5: detected capacity change from 0 to 2048 [ 652.398820][T14808] UDF-fs: bad mount option "sk Eth Pid" or missing value [ 652.475271][T14771] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 653.696571][T14822] overlayfs: missing 'lowerdir' [ 653.763229][T14823] ubi0: attaching mtd0 [ 653.770729][T14823] ubi0: scanning is finished [ 653.775497][T14823] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 653.884643][T14823] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 654.049046][ T5951] Process accounting resumed [ 654.874421][T14837] loop3: detected capacity change from 0 to 256 [ 656.508401][ T5952] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 656.840303][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 657.003548][ T5952] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 657.295049][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.423230][ T5952] usb 4-1: config 0 descriptor?? [ 657.495231][ T5952] usb 4-1: can't set config #0, error -71 [ 657.574279][ T5952] usb 4-1: USB disconnect, device number 13 [ 659.186466][T14866] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 659.195727][T14866] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 659.203108][T14866] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 659.210905][T14866] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 659.217433][T14866] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 659.224033][T14866] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 659.232172][T14866] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 659.240146][T14866] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 659.246636][T14866] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 659.254415][T14866] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 659.261119][T14866] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 659.268211][T14866] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 659.274683][T14866] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 659.281526][T14866] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 659.288412][T14866] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 659.295565][T14866] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 659.302262][T14866] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 659.309240][T14866] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 659.315885][T14866] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 659.322379][T14866] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 659.329049][T14866] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 659.335818][T14866] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 659.342606][T14866] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 659.349295][T14866] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 659.355826][T14866] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 659.362332][T14866] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 659.748909][T14875] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 659.936572][T14878] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 662.627472][T14894] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 663.873827][T14909] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 665.243765][T14923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2516'. [ 667.598754][T14940] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 667.606229][T14940] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 667.613761][T14940] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 667.627169][T14940] Error parsing options; rc = [-22] [ 668.980791][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 671.387398][T14962] futex_wake_op: syz.5.2521 tries to shift op by 36; fix this program [ 671.396549][T14962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2521'. [ 672.113371][T14976] loop3: detected capacity change from 0 to 32768 [ 672.240227][T14976] XFS (loop3): Mounting V5 Filesystem [ 672.288680][T14976] XFS (loop3): Ending clean mount [ 672.295501][T14976] XFS (loop3): Quotacheck needed: Please wait. [ 672.483126][T14976] XFS (loop3): Quotacheck: Done. [ 672.897765][ T27] audit: type=1800 audit(1786181188.156:494): pid=14988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2530" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 673.013929][T12775] XFS (loop3): Unmounting Filesystem [ 673.252748][T14996] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2526'. [ 673.371129][T14996] ksmbd: Unknown IPC event: 0, ignore. [ 675.333086][T15012] set match dimension is over the limit! [ 675.365447][T15011] ip6t_srh: unknown srh match flags FF3F [ 676.997927][ T5946] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 679.086918][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 681.242271][T15029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2536'. [ 682.262550][ T5946] usb 4-1: device descriptor read/all, error -71 [ 682.712125][T15041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 687.213628][T15080] loop3: detected capacity change from 0 to 512 [ 687.287161][T15080] EXT4-fs (loop3): orphan cleanup on readonly fs [ 687.334774][T15080] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 687.398457][T15080] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 687.689544][T15080] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2548: attempt to clear invalid blocks 2 len 1 [ 687.819011][T15080] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2548: invalid indirect mapped block 1819239214 (level 0) [ 687.833653][T15087] overlayfs: missing 'lowerdir' [ 687.931914][T15080] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2548: invalid indirect mapped block 1819239214 (level 1) [ 688.042253][T15080] EXT4-fs (loop3): 1 truncate cleaned up [ 688.047938][T15080] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 689.919984][T12775] EXT4-fs (loop3): unmounting filesystem. [ 689.935025][T15090] lo speed is unknown, defaulting to 1000 [ 691.322306][T15110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 691.432888][T15112] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2552'. [ 691.924455][ T5952] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 692.173765][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 692.952606][ T5952] usb 6-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 693.021204][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.069438][ T5952] usb 6-1: Product: syz [ 693.095721][ T5952] usb 6-1: Manufacturer: syz [ 693.254427][ T5952] usb 6-1: SerialNumber: syz [ 693.260493][ T5952] usb 6-1: config 0 descriptor?? [ 693.466485][T15142] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 693.536990][ T5952] safe_serial 6-1:0.0: safe_serial converter detected [ 693.580858][ T5952] usb 6-1: safe_serial converter now attached to ttyUSB0 [ 693.593653][T15145] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2560'. [ 693.739716][ T5952] usb 6-1: USB disconnect, device number 3 [ 693.788027][ T5952] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 693.844834][ T5952] safe_serial 6-1:0.0: device disconnected [ 695.851023][T15184] netlink: 'syz.9.2569': attribute type 2 has an invalid length. [ 695.918766][T15184] netlink: 'syz.9.2569': attribute type 1 has an invalid length. [ 699.584015][ T4288] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 699.593042][ T4288] Bluetooth: hci4: Injecting HCI hardware error event [ 699.604081][ T48] Bluetooth: hci4: hardware error 0x00 [ 700.372769][T15288] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2601'. [ 700.389212][ T27] audit: type=1326 audit(1786181213.567:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.8.2602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 700.508663][T15259] loop5: detected capacity change from 0 to 32768 [ 700.536804][ T27] audit: type=1326 audit(1786181213.613:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.8.2602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 700.638372][T15289] lo speed is unknown, defaulting to 1000 [ 700.674327][T15259] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2589 (15259) [ 700.934437][T15259] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 700.996063][ T27] audit: type=1326 audit(1786181214.130:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.8.2602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 701.048727][T15259] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 701.147922][T15259] BTRFS info (device loop5): using free space tree [ 701.242474][ T27] audit: type=1326 audit(1786181214.158:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.8.2602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 702.377655][ T48] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 702.402331][T15259] BTRFS info (device loop5): enabling ssd optimizations [ 702.579801][ T27] audit: type=1326 audit(1786181214.462:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15317 comm="syz.9.2611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb534d9e0d9 code=0x7ffc0000 [ 702.861352][T13267] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 702.913951][ T27] audit: type=1326 audit(1786181214.601:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15317 comm="syz.9.2611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb534d9e0d9 code=0x7ffc0000 [ 702.954559][ T5952] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 703.120483][ T27] audit: type=1326 audit(1786181214.601:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15317 comm="syz.9.2611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb534d9e0d9 code=0x7ffc0000 [ 703.203784][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 703.237861][ T5952] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 703.319801][ T5952] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 703.361209][ T27] audit: type=1326 audit(1786181214.601:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15317 comm="syz.9.2611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb534d9e0d9 code=0x7ffc0000 [ 704.175594][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.223248][ T5952] usb 4-1: Product: syz [ 704.227423][ T5952] usb 4-1: Manufacturer: syz [ 704.297480][ T5952] usb 4-1: SerialNumber: syz [ 704.338484][ T5952] usb 4-1: config 0 descriptor?? [ 704.389398][T15343] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 704.443437][ T5952] hub 4-1:0.0: bad descriptor, ignoring hub [ 704.464779][ T5952] hub: probe of 4-1:0.0 failed with error -5 [ 704.511827][ T5952] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 705.229087][T15364] tipc: Enabling of bearer rejected, failed to enable media [ 705.327639][ T4366] usb 4-1: USB disconnect, device number 16 [ 705.333756][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 705.396281][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 705.402598][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 706.004330][T15406] SET target dimension over the limit! [ 706.122348][T15407] loop3: detected capacity change from 0 to 4096 [ 706.299101][T15416] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 707.218616][T15436] loop5: detected capacity change from 0 to 2048 [ 707.358173][T15436] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 707.418037][T15436] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.699993][T13267] EXT4-fs (loop5): unmounting filesystem. [ 707.720951][T15425] loop3: detected capacity change from 0 to 32768 [ 707.777850][T15425] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.2636 (15425) [ 708.230770][T15425] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 708.301564][T15425] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 708.371430][T15425] BTRFS info (device loop3): using free space tree [ 708.553602][T15425] BTRFS info (device loop3): enabling ssd optimizations [ 708.652344][ T27] audit: type=1800 audit(1786181221.189:503): pid=15425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2636" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 708.899084][T12775] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 710.882188][ T27] audit: type=1326 audit(1786181223.256:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.8.2658" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 711.052903][ T27] audit: type=1326 audit(1786181223.283:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.8.2658" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 711.131150][T15492] loop5: detected capacity change from 0 to 65536 [ 711.261364][ T27] audit: type=1326 audit(1786181223.283:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.8.2658" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 711.308141][T15492] XFS (loop5): Mounting V5 Filesystem [ 711.402180][T15492] XFS (loop5): Ending clean mount [ 711.471774][T15537] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 711.488571][T15492] XFS (loop5): Quotacheck needed: Please wait. [ 711.523900][ T27] audit: type=1326 audit(1786181223.283:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.8.2658" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 711.567131][T15509] loop3: detected capacity change from 0 to 32768 [ 711.598614][T15537] bridge_slave_0: default FDB implementation only supports local addresses [ 711.611109][T10475] XFS (loop5): Metadata corruption detected at xfs_dinode_verify+0x2d4/0x1120, inode 0x25 dinode [ 711.758152][T10475] XFS (loop5): Unmount and run xfs_repair [ 711.790850][ T27] audit: type=1326 audit(1786181223.302:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.8.2658" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 711.831122][T10475] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 711.895522][T10475] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 711.974264][T10475] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 712.025859][ T27] audit: type=1326 audit(1786181223.302:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.8.2658" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 712.078720][T10475] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 712.149368][T10475] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 712.202357][T10475] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 712.235155][ T27] audit: type=1326 audit(1786181223.302:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.8.2658" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca239e0d9 code=0x7ffc0000 [ 712.292437][T10475] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 712.368782][T10475] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 712.400168][T15557] loop3: detected capacity change from 0 to 512 [ 712.428576][T10475] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 712.488536][T15557] EXT4-fs (loop3): orphan cleanup on readonly fs [ 713.559423][T15564] futex_wake_op: syz.2.2669 tries to shift op by 144; fix this program [ 713.621429][T15557] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 713.764931][T15492] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 713.841530][T15557] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.2670: corrupted inode contents [ 714.014365][T13267] XFS (loop5): Unmounting Filesystem [ 714.029273][T15557] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #15: comm syz.3.2670: mark_inode_dirty error [ 714.131734][T15557] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.2670: corrupted inode contents [ 714.238224][T15557] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2947: inode #15: comm syz.3.2670: mark_inode_dirty error [ 714.336975][T15557] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2950: inode #15: comm syz.3.2670: mark inode dirty (error -117) [ 714.457354][T15557] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 714.533601][T15557] EXT4-fs (loop3): 1 orphan inode deleted [ 714.600815][T15557] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 714.902197][T12775] EXT4-fs (loop3): unmounting filesystem. [ 715.616591][T15618] device syzkaller0 entered promiscuous mode [ 715.628639][ T5951] hid-generic 0000:0000:0006.000C: unknown main item tag 0x0 [ 715.677005][ T5951] hid-generic 0000:0000:0006.000C: unknown main item tag 0x0 [ 715.705696][ T5951] hid-generic 0000:0000:0006.000C: unknown main item tag 0x0 [ 715.750930][ T5951] hid-generic 0000:0000:0006.000C: unknown main item tag 0x0 [ 715.785698][ T5951] hid-generic 0000:0000:0006.000C: unknown main item tag 0x0 [ 715.838346][ T5951] hid-generic 0000:0000:0006.000C: hidraw0: HID v0.0d Device [syz0] on syz1 [ 716.128749][T15629] fido_id[15629]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 717.455756][T15383] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 717.695670][T15383] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 717.736203][T15383] usb 6-1: config 0 has no interface number 0 [ 717.889578][T15383] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 718.135679][T15383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.196294][T15383] usb 6-1: Product: syz [ 718.228443][T15383] usb 6-1: Manufacturer: syz [ 718.255202][T15383] usb 6-1: SerialNumber: syz [ 718.293822][T15383] usb 6-1: config 0 descriptor?? [ 718.349314][T15383] usb 6-1: selecting invalid altsetting 1 [ 718.392196][T15383] dvb_ttusb_budget: ttusb_init_controller: error [ 718.434405][T15383] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 718.816228][T15383] DVB: Unable to find symbol stv0299_attach() [ 719.109446][T15383] DVB: Unable to find symbol tda8083_attach() [ 719.158362][T15383] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 719.248636][T15383] usb 6-1: USB disconnect, device number 4 [ 720.995352][T15703] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 723.584947][T15717] loop5: detected capacity change from 0 to 32768 [ 723.680018][T15717] XFS (loop5): Mounting V5 Filesystem [ 723.777681][T15717] XFS (loop5): Ending clean mount [ 724.296492][T13267] XFS (loop5): Unmounting Filesystem [ 724.582079][T15764] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2721'. [ 724.656305][T15768] loop3: detected capacity change from 0 to 1024 [ 724.841656][ T27] audit: type=1800 audit(1786181236.127:511): pid=15768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2723" name="file2" dev="loop3" ino=25 res=0 errno=0 [ 725.539072][T15798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2730'. [ 725.604918][T15798] ksmbd: Unknown IPC event: 0, ignore. [ 726.061508][T15806] loop5: detected capacity change from 0 to 32768 [ 726.130094][T15806] XFS (loop5): Mounting V5 Filesystem [ 726.180990][T15806] XFS (loop5): Ending clean mount [ 726.195898][T15806] XFS (loop5): Quotacheck needed: Please wait. [ 726.363669][T15806] XFS (loop5): Quotacheck: Done. [ 726.783541][ T27] audit: type=1800 audit(1786181237.871:512): pid=15818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2733" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0 [ 726.847788][T13267] XFS (loop5): Unmounting Filesystem [ 727.407367][T15803] loop3: detected capacity change from 0 to 32768 [ 727.944308][T15836] loop3: detected capacity change from 0 to 4096 [ 728.095375][T15836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 728.465604][T12775] EXT4-fs (loop3): unmounting filesystem. [ 728.681617][T15865] jffs2: notice: (15865) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 729.637791][T15865] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 731.222184][T15873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2747'. [ 732.153701][T15907] loop5: detected capacity change from 0 to 512 [ 732.246313][T15907] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 732.356221][T15907] EXT4-fs (loop5): shut down requested (2) [ 732.524363][T13267] EXT4-fs (loop5): unmounting filesystem. [ 732.891145][ T27] audit: type=1800 audit(1786181243.564:513): pid=15924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2759" name="attr_allow_any_host" dev="configfs" ino=74863 res=0 errno=0 [ 734.486535][T15890] loop3: detected capacity change from 0 to 65536 [ 734.543180][T15890] XFS (loop3): Mounting V5 Filesystem [ 734.589371][T15890] XFS (loop3): Ending clean mount [ 734.617382][T15890] XFS (loop3): Quotacheck needed: Please wait. [ 734.681698][T14277] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2d4/0x1120, inode 0x25 dinode [ 734.734892][T14277] XFS (loop3): Unmount and run xfs_repair [ 734.761595][T14277] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 734.790658][T14277] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 734.824743][T14277] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 734.854930][T14277] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 734.896888][T14277] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 734.957051][T14277] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 735.329195][T14277] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 735.641058][T14277] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 735.713594][T14277] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 735.840898][T15890] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 735.969520][T12775] XFS (loop3): Unmounting Filesystem [ 737.454101][T15987] loop3: detected capacity change from 0 to 256 [ 738.965967][T16011] md: loop1 has zero or unknown size, marking faulty! [ 740.726669][T16059] loop5: detected capacity change from 0 to 512 [ 740.827103][T16059] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 740.902926][T16059] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 741.203668][T13267] EXT4-fs (loop5): unmounting filesystem. [ 743.045310][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2797'. [ 743.207871][T16092] bridge0: port 1(syz_tun) entered blocking state [ 743.245727][T16092] bridge0: port 1(syz_tun) entered disabled state [ 743.303519][T16092] device syz_tun entered promiscuous mode [ 743.350783][T16092] bridge0: port 1(syz_tun) entered blocking state [ 743.357342][T16092] bridge0: port 1(syz_tun) entered forwarding state [ 743.722097][T16106] loop5: detected capacity change from 0 to 128 [ 743.804792][T16106] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 744.142904][T16116] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 745.235190][T16141] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 747.557122][T16175] device syzkaller1 entered promiscuous mode [ 747.710996][T16178] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.720385][T16178] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.729124][T16178] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.737820][T16178] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.501863][T16178] team0: Port device vxlan0 added [ 750.324828][T16215] loop5: detected capacity change from 0 to 4096 [ 750.373479][T16215] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 750.561074][T16215] ntfs: volume version 3.1. [ 750.852491][T16215] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 751.012657][T16215] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 751.183907][T16215] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to map page. [ 751.230265][T16215] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 751.340504][T16215] ntfs: (device loop5): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 751.576067][ T27] audit: type=1800 audit(1786181260.800:514): pid=16239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2837" name="file1" dev="loop5" ino=67 res=0 errno=0 [ 751.656865][T16261] loop3: detected capacity change from 0 to 512 [ 751.841570][T16261] EXT4-fs: Ignoring removed nobh option [ 751.881641][T13267] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 752.099105][T16261] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 752.221052][T16261] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 752.336921][T16261] EXT4-fs (loop3): 1 truncate cleaned up [ 752.368492][T16261] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 753.363193][ T27] audit: type=1800 audit(1786181262.452:515): pid=16261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2848" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 753.459441][T16283] lo speed is unknown, defaulting to 1000 [ 753.507487][T12775] EXT4-fs (loop3): unmounting filesystem. [ 753.813840][T16295] overlayfs: failed to clone upperpath [ 754.238691][ T5946] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 754.460891][ T5946] usb 4-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 754.508068][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.963095][T16328] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 755.032964][T16328] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 755.199870][T16328] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 755.328480][T16328] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 755.449578][T16328] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 755.584834][T16328] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 755.706957][T16328] bond2: (slave syz_tun): Releasing active interface [ 755.829844][T16328] device syz_tun left promiscuous mode [ 755.918764][ T5946] usb 4-1: 1:1: cannot set freq 48000 to ep 0x81 [ 756.017531][ T5946] usb 4-1: USB disconnect, device number 17 [ 757.579690][T16363] MTD: Couldn't look up './dev/mtdblock0': -2 [ 757.588960][T16328] bond4: (slave veth0_to_bond): Releasing active interface [ 757.677709][T16328] device veth0_to_bond left promiscuous mode [ 757.766919][T16328] bond0: (slave bond_slave_0): Releasing backup interface [ 757.879156][T16328] bond0: (slave bond_slave_1): Releasing backup interface [ 758.046737][T16328] team0: Port device team_slave_0 removed [ 758.112026][T16328] team0: Port device team_slave_1 removed [ 758.129182][T16328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.148953][T16365] loop3: detected capacity change from 0 to 32768 [ 758.175148][T16328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.224405][T16365] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 758.240298][T16328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.318345][T16328] bond0: (slave wlan1): Releasing backup interface [ 758.402281][T16328] bond1: (slave veth3): Releasing active interface [ 758.472838][T16328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 758.516177][T12775] ocfs2: Unmounting device (7,3) on (node local) [ 758.638571][T16328] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.647778][T16328] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.656793][T16328] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.665675][T16328] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.806902][T16384] loop5: detected capacity change from 0 to 32768 [ 758.821016][T16328] team0: Port device vxlan0 removed [ 758.841451][T16384] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.2883 (16384) [ 758.924287][T16384] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 759.014215][T16384] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 759.087598][T16384] BTRFS info (device loop5): using free space tree [ 759.247909][T16384] BTRFS info (device loop5): enabling ssd optimizations [ 760.143081][T16438] lo speed is unknown, defaulting to 1000 [ 760.320025][T13267] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 760.911154][T16446] loop3: detected capacity change from 0 to 32768 [ 761.171163][T16446] JBD2: Ignoring recovery information on journal [ 762.366522][T16446] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 762.516285][T16446] (syz.3.2892,16446,0):ocfs2_file_write_iter:2446 ERROR: status = -27 [ 762.763217][T12775] ocfs2: Unmounting device (7,3) on (node local) [ 763.840085][T16508] loop5: detected capacity change from 0 to 128 [ 763.919123][T16508] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 763.966971][T16508] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 764.387465][T13267] EXT4-fs (loop5): unmounting filesystem. [ 764.630120][T16528] lo speed is unknown, defaulting to 1000 [ 764.644335][ T5946] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 764.724730][T16531] loop5: detected capacity change from 0 to 256 [ 764.886245][ T5946] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 764.950031][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.000274][ T5946] usb 4-1: Product: syz [ 765.020245][ T5946] usb 4-1: Manufacturer: syz [ 765.046419][T16537] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 765.059707][ T5946] usb 4-1: SerialNumber: syz [ 765.551758][ T5946] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 767.320455][T16565] usblp0:failed reading printer status (-32) [ 767.364846][ T5951] usb 4-1: USB disconnect, device number 18 [ 767.409768][ T5951] usblp0: removed [ 767.673284][T16576] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 767.828687][T16584] overlayfs: failed to clone upperpath [ 767.859912][T16584] overlayfs: failed to clone upperpath [ 770.481673][T16610] lo speed is unknown, defaulting to 1000 [ 770.723126][T16638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 770.730365][T16638] IPv6: NLM_F_CREATE should be set when creating new route [ 771.231791][T16647] loop5: detected capacity change from 0 to 4096 [ 771.798650][T16660] overlayfs: failed to clone upperpath [ 771.971657][T16663] loop3: detected capacity change from 0 to 1024 [ 771.982710][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 771.989059][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.131774][T16663] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 772.239067][T16663] EXT4-fs error (device loop3): ext4_get_max_inline_size:116: inode #18: comm syz.3.2951: can't get inode location 18 [ 772.324965][T16663] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Out of memory [ 773.789184][T16663] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #18: comm syz.3.2951: mark_inode_dirty error [ 773.910358][T16663] EXT4-fs warning (device loop3): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 7278273066370725442 [ 774.034832][T16663] EXT4-fs warning (device loop3): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 7278273066370725442 [ 774.058528][T16692] xt_bpf: check failed: parse error [ 774.131396][T16663] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Out of memory [ 774.191341][T16663] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #18: comm syz.3.2951: mark_inode_dirty error [ 774.285083][T16663] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Out of memory [ 774.349447][T16663] EXT4-fs error (device loop3): ext4_ext_truncate:4475: inode #18: comm syz.3.2951: mark_inode_dirty error [ 774.425158][T16663] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Out of memory [ 774.500339][T16663] EXT4-fs error (device loop3): ext4_truncate:4325: inode #18: comm syz.3.2951: mark_inode_dirty error [ 774.662661][T12775] EXT4-fs (loop3): unmounting filesystem. [ 774.856345][T16713] overlayfs: failed to clone upperpath [ 774.952035][T16716] overlayfs: failed to clone lowerpath [ 775.110286][T16719] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 775.365136][T16735] using random self ethernet address [ 775.387769][T16735] using random host ethernet address [ 775.447686][ T27] audit: type=1800 audit(1786181282.825:516): pid=16735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2970" name="UDC" dev="configfs" ino=77446 res=0 errno=0 [ 776.698506][ T27] audit: type=1326 audit(1786181283.979:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16783 comm="syz.8.2984" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ca239e0d9 code=0x0 [ 777.554219][T16805] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 777.642931][T16805] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 777.740219][T16805] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 777.748214][ T5946] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 777.861179][T16805] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 777.980976][T16805] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 777.989912][ T5946] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 778.022971][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.113053][ T5946] usb 4-1: config 0 has no interfaces? [ 778.121254][T16805] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 778.168406][ T5946] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 778.224351][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.242503][T16805] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 778.282911][ T5946] usb 4-1: config 0 descriptor?? [ 778.501535][T16805] bond2: (slave dummy0): Removing an active aggregator [ 778.569001][ T5951] usb 4-1: USB disconnect, device number 19 [ 778.578600][T10486] bond2: Warning: Found an uninitialized port [ 778.670328][T16805] bond2: (slave dummy0): Releasing backup interface [ 780.126407][T16805] device bridge_slave_0 left promiscuous mode [ 780.181305][T16805] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.237417][T16805] device bridge_slave_1 left promiscuous mode [ 780.237495][T16805] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.253896][T16805] bond0: (slave bond_slave_0): Releasing backup interface [ 780.277344][T16805] bond0: (slave bond_slave_1): Releasing backup interface [ 780.437242][T16805] team0: Port device team_slave_0 removed [ 780.462743][T16805] team0: Port device team_slave_1 removed [ 780.463120][T16805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.463152][T16805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.463939][T16805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.463958][T16805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.468145][T16805] batman_adv: batadv0: Interface deactivated: macvlan1 [ 780.468168][T16805] batman_adv: batadv0: Removing interface: macvlan1 [ 780.487522][T16805] bond1: (slave gre1): Releasing backup interface [ 780.489721][T16805] device gre1 left promiscuous mode [ 780.519451][T16805] bond4: (slave geneve2): Releasing active interface [ 780.534627][T16805] bond5: (slave bridge1): Releasing active interface [ 780.827089][T16849] overlayfs: failed to clone upperpath [ 783.456882][T16895] xt_bpf: check failed: parse error [ 783.819501][T16906] loop5: detected capacity change from 0 to 4096 [ 783.973722][T16906] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 784.205041][T15385] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 784.443371][T15385] usb 4-1: Using ep0 maxpacket: 16 [ 784.469619][T15385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.555041][T15385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.619580][T15385] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 784.695779][T15385] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 784.730157][T16942] 9pnet_fd: Insufficient options for proto=fd [ 784.744578][T15385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.792433][T15385] usb 4-1: config 0 descriptor?? [ 784.847994][T13267] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 785.265359][T15385] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 785.296244][T15385] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 785.340392][T15385] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 785.376101][T15385] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 785.424315][T15385] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000D/input/input15 [ 785.577819][T15385] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 785.683457][T15385] usb 4-1: USB disconnect, device number 20 [ 785.767802][T16972] overlayfs: failed to clone upperpath [ 785.988244][T16971] fido_id[16971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 787.520717][T16989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 787.640793][T16990] device bridge_slave_0 left promiscuous mode [ 787.668434][T16990] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.777467][T16990] device bridge_slave_1 left promiscuous mode [ 787.798036][T16997] loop5: detected capacity change from 0 to 4096 [ 787.868261][T16990] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.895687][T17004] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 788.111542][T16990] bond0: (slave bond_slave_0): Releasing backup interface [ 788.212251][T16990] bond0: (slave bond_slave_1): Releasing backup interface [ 788.369800][T16990] team0: Port device team_slave_0 removed [ 788.415603][ T27] audit: type=1800 audit(1786181294.793:518): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3045" name="file1" dev="loop5" ino=16 res=0 errno=0 [ 788.468959][T16990] team0: Port device team_slave_1 removed [ 788.509730][T16990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.572110][T16990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.622010][T17089] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 795.954323][T15384] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 796.174957][T15384] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 796.206727][T15384] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 796.278010][T15384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.336526][T17125] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 796.392535][T15384] opticon 4-1:1.0: opticon converter detected [ 796.423352][T17144] netlink: 'syz.8.3080': attribute type 29 has an invalid length. [ 796.438468][T15384] usb 4-1: opticon converter now attached to ttyUSB0 [ 796.480215][T17144] netlink: 'syz.8.3080': attribute type 29 has an invalid length. [ 796.533838][T17146] netlink: 'syz.8.3080': attribute type 29 has an invalid length. [ 796.581079][T17149] netlink: 'syz.8.3080': attribute type 29 has an invalid length. [ 796.665093][T17144] netlink: 'syz.8.3080': attribute type 29 has an invalid length. [ 797.158920][T15384] usb 4-1: USB disconnect, device number 21 [ 797.198279][T15384] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 797.267082][T15384] opticon 4-1:1.0: device disconnected [ 797.815599][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3094'. [ 797.862503][T17169] loop5: detected capacity change from 0 to 32768 [ 797.918796][T17169] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.3088 (17169) [ 798.040498][T17169] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 798.130838][T17169] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 798.218005][T17169] BTRFS info (device loop5): setting nodatacow, compression disabled [ 798.308394][T17169] BTRFS info (device loop5): setting datasum, datacow enabled [ 798.344131][T17169] BTRFS info (device loop5): setting nodatasum [ 798.415934][T17169] BTRFS info (device loop5): force clearing of disk cache [ 798.488836][T17169] BTRFS info (device loop5): enabling ssd optimizations [ 798.550132][T17169] BTRFS info (device loop5): using spread ssd allocation scheme [ 798.596017][T17209] Bluetooth: MGMT ver 1.22 [ 798.616466][T17169] BTRFS info (device loop5): turning on sync discard [ 798.679781][T17169] BTRFS info (device loop5): turning on flush-on-commit [ 798.755209][T17169] BTRFS info (device loop5): not using ssd optimizations [ 798.799289][T17169] BTRFS info (device loop5): not using spread ssd allocation scheme [ 798.860992][T17169] BTRFS info (device loop5): using free space tree [ 799.013673][T17169] BTRFS info (device loop5): rebuilding free space tree [ 799.495135][T17243] lo speed is unknown, defaulting to 1000 [ 799.540016][T17256] loop3: detected capacity change from 0 to 512 [ 799.601611][ T27] audit: type=1804 audit(1786181305.108:519): pid=17251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3088" name="/newroot/153/file0/bus" dev="loop5" ino=263 res=1 errno=0 [ 799.692561][T17256] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 799.741747][T17256] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 799.813158][ T27] audit: type=1804 audit(1786181305.182:520): pid=17254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3088" name="/newroot/153/file0/bus" dev="loop5" ino=263 res=1 errno=0 [ 799.843327][T17256] EXT4-fs (loop3): orphan cleanup on readonly fs [ 799.889263][T17256] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #13: comm syz.3.3103: iget: bad i_size value: 12154761577498 [ 800.002810][T17256] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.3103: couldn't read orphan inode 13 (err -117) [ 800.080821][T17256] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 800.231255][T17256] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.3103: dx entry: limit 65535 != root limit 120 [ 800.309028][T13267] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 800.378877][T17256] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3103: Corrupt directory, running e2fsck is recommended [ 800.475908][T17256] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.3103: dx entry: limit 65535 != root limit 120 [ 800.562015][T17256] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3103: Corrupt directory, running e2fsck is recommended [ 800.629977][T17271] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.3103: dx entry: limit 65535 != root limit 120 [ 800.725345][T17271] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3103: Corrupt directory, running e2fsck is recommended [ 800.805380][T17272] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.3103: dx entry: limit 65535 != root limit 120 [ 800.869381][T17272] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3103: Corrupt directory, running e2fsck is recommended [ 800.938689][ T48] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 800.947369][ T48] Bluetooth: hci2: command 0x0401 tx timeout [ 800.960261][T17274] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.3103: dx entry: limit 65535 != root limit 120 [ 801.039971][T17274] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3103: Corrupt directory, running e2fsck is recommended [ 801.228369][T12775] EXT4-fs (loop3): unmounting filesystem. [ 801.786909][ T4366] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 802.012685][ T4366] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 802.088950][ T4366] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 802.188923][ T4366] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 802.258272][ T4366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.320972][ T4366] usb 4-1: Product: syz [ 802.354665][ T4366] usb 4-1: Manufacturer: syz [ 802.383395][ T4366] usb 4-1: SerialNumber: syz [ 802.432552][ T4366] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 802.496126][ T4366] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 802.562810][ T4366] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 804.322550][T17293] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 804.431474][ T4366] usb 4-1: USB disconnect, device number 22 [ 804.477859][ T4366] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 804.557908][ T4366] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 804.638693][ T4366] ti_usb_3410_5052 4-1:2.0: device disconnected [ 808.425362][T17461] lo speed is unknown, defaulting to 1000 [ 809.915681][T17531] overlayfs: failed to clone lowerpath [ 810.138691][T17506] loop3: detected capacity change from 0 to 32768 [ 810.233542][T17541] overlayfs: failed to clone upperpath [ 810.307567][T17506] JBD2: Ignoring recovery information on journal [ 810.457872][T17506] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 810.551681][T15384] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 810.715763][T17549] (syz.3.3152,17549,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 810.826952][T15384] usb 6-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 810.894219][T15384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.988591][T15384] mos7720 6-1:1.0: Moschip 2 port adapter converter detected [ 811.070371][T12775] ocfs2: Unmounting device (7,3) on (node local) [ 811.261478][T15384] usb 6-1: mos7720: usb_control_msg() failed: 0 [ 811.295891][T15384] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 811.384169][T15384] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 811.922194][T17568] xs_local_setup_socket: unhandled error (91) connecting to /var/run/gssproxy.sock [ 812.547268][T17592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3176'. [ 813.893090][T15384] usb 6-1: USB disconnect, device number 5 [ 813.898970][ C0] usb 6-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 814.017417][T17607] loop3: detected capacity change from 0 to 32768 [ 814.026548][T15384] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 814.103168][T15384] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 814.190770][T15384] mos7720 6-1:1.0: device disconnected [ 814.274089][T17607] XFS (loop3): Mounting V5 Filesystem [ 814.520783][T17607] XFS (loop3): Ending clean mount [ 814.836274][T17660] rdma_rxe: rxe_register_device failed with error -23 [ 814.928026][T17660] rdma_rxe: failed to add syz_tun [ 815.086123][T17654] XFS (loop3): User initiated shutdown received. [ 815.120974][T17654] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489). Shutting down filesystem. [ 815.229955][T17654] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 816.763908][T12775] XFS (loop3): Unmounting Filesystem [ 817.549887][T17706] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3205'. [ 818.375180][T17736] netlink: 'syz.9.3212': attribute type 1 has an invalid length. [ 818.469979][T17736] 8021q: adding VLAN 0 to HW filter on device bond5 [ 818.618424][T17741] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 818.691839][T10486] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 818.717645][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 818.750853][T17736] netlink: 'syz.9.3212': attribute type 10 has an invalid length. [ 818.856900][T17736] bond5: (slave dummy0): Removing an active aggregator [ 818.892130][T17736] bond5: (slave dummy0): Releasing backup interface [ 818.980206][T17736] team0: Port device dummy0 added [ 819.326826][T17765] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 819.326826][T17765] [ 819.426647][T17765] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 819.518157][T17765] CIFS: Attempting to mount \\127.0.0.1\share [ 819.579094][T17765] CIFS: VFS: Error connecting to socket. Aborting operation. [ 819.635273][T17765] CIFS: VFS: cifs_mount failed w/return code = -22 [ 822.126401][T17814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3229'. [ 822.194289][T17814] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.203300][T17814] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.211987][T17814] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.220712][T17814] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.261308][T17821] loop3: detected capacity change from 0 to 1024 [ 822.327786][T17821] EXT4-fs: Ignoring removed orlov option [ 822.414330][T17821] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 822.527967][ T4324] wlan1: Trigger new scan to find an IBSS to join [ 822.555949][T17820] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3229'. [ 822.837570][ T4324] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm kworker/u4:5: Invalid inode table block 5 in block_group 0 [ 822.999448][T12775] EXT4-fs (loop3): unmounting filesystem. [ 823.089352][T17846] lo speed is unknown, defaulting to 1000 [ 823.600200][ T5957] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 825.120595][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 825.146468][ T5957] usb 4-1: config 0 has no interfaces? [ 825.171903][ T5957] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 825.240318][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.309647][ T5957] usb 4-1: config 0 descriptor?? [ 826.739092][ T5957] usb 4-1: USB disconnect, device number 23 [ 827.366909][T17954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.490601][T17954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.619154][T17954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.137558][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 831.152173][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 831.161972][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 831.178900][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 831.188376][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 831.195527][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 831.294167][T18013] lo speed is unknown, defaulting to 1000 [ 831.352164][T18016] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 831.877254][T18013] chnl_net:caif_netlink_parms(): no params data found [ 833.451960][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 833.468562][T18013] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.530904][T18013] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.625269][T18013] device bridge_slave_0 entered promiscuous mode [ 833.661938][T18013] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.728407][T18013] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.743470][T18053] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 833.785729][T18013] device bridge_slave_1 entered promiscuous mode [ 833.813487][T18053] overlayfs: failed to set xattr on upper [ 833.861422][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3293'. [ 833.884615][T18063] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 833.914837][T18013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.943485][T18053] overlayfs: ...falling back to index=off,metacopy=off. [ 833.973025][T18013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.982223][T18063] overlayfs: failed to set xattr on upper [ 834.005067][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3293'. [ 834.024538][T18053] overlayfs: conflicting lowerdir path [ 834.058375][T18063] overlayfs: ...falling back to index=off,metacopy=off. [ 834.111351][T18013] team0: Port device team_slave_0 added [ 834.170385][T18013] team0: Port device team_slave_1 added [ 834.285132][T18013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.334111][T18013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.460383][T18013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.529417][T18013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.553467][T18013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.639194][T18013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.830891][T18013] device hsr_slave_0 entered promiscuous mode [ 834.879695][T18013] device hsr_slave_1 entered promiscuous mode [ 834.928904][T18013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 834.993786][T18013] Cannot create hsr debugfs directory [ 835.706119][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 836.307423][T18119] loop5: detected capacity change from 0 to 512 [ 836.394833][T18119] EXT4-fs: Ignoring removed oldalloc option [ 836.443821][T18119] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 836.555895][T18119] EXT4-fs (loop5): 1 truncate cleaned up [ 836.613868][T18119] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 836.730733][T18127] overlayfs: failed to clone upperpath [ 837.138907][T13267] EXT4-fs (loop5): unmounting filesystem. [ 837.599202][T18013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 837.669237][T18013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 837.737346][T18013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 837.807336][T18013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 837.871664][T18163] loop5: detected capacity change from 0 to 16 [ 837.940872][T18163] erofs: (device loop5): mounted with root inode @ nid 36. [ 837.960508][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 838.027224][T18163] syz.5.3322: attempt to access beyond end of device [ 838.027224][T18163] loop5: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 838.117167][T18013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.140871][T18163] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -6 in[63, 4033] out[4096] [ 838.193853][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 838.224954][T10486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 838.250272][ T27] audit: type=1800 audit(1786181340.771:521): pid=18163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3322" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 838.328291][T18013] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.387574][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 838.434320][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 838.506602][T10489] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.513743][T10489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.569827][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.576133][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 838.655382][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 838.729287][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 838.804295][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 838.870107][T10489] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.877246][T10489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.966093][T18189] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 838.999211][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 839.063198][T18013] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 839.181477][T18013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 839.270269][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 839.317996][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 839.422778][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 839.485050][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 839.551579][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 839.610499][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 839.665571][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 839.719965][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 839.765386][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 839.826849][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 839.893726][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 840.215205][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 840.249834][T18228] binder: 18225:18228 ioctl c0306201 200000000080 returned -14 [ 840.339597][T18228] binder: 18225:18228 ioctl c0306201 2000000003c0 returned -14 [ 840.731219][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 840.761598][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 840.818074][T18013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.380780][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 842.483028][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 842.600140][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 842.643318][T18264] loop5: detected capacity change from 0 to 1024 [ 842.686238][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 842.716045][T18264] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 842.745351][T18013] device veth0_vlan entered promiscuous mode [ 842.777511][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 842.826983][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 842.838611][T18013] device veth1_vlan entered promiscuous mode [ 842.977656][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 843.028675][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 843.081739][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 843.128624][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 843.174292][T18013] device veth0_macvtap entered promiscuous mode [ 843.224875][T18013] device veth1_macvtap entered promiscuous mode [ 843.314860][T18013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.385147][T18013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.446564][T18013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.487334][T14277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 843.525330][T14277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 843.584698][T14277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 843.635453][T14277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 843.694857][T18013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.774937][T18013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.861108][T18013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.928030][T14277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 843.969757][T14277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 844.044257][T18013] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.140281][T18013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.192103][T18013] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.241157][T18013] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.527028][T10488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.559007][T10488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.600184][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 844.621853][T10485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.645801][T10485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.670993][T10488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 844.868413][T18324] tipc: Failed to remove unknown binding: 66,0,0/0:774698663/774698664 [ 844.928533][T18328] tipc: Failed to remove unknown binding: 66,0,0/0:774698663/774698664 [ 845.919872][T18340] lo speed is unknown, defaulting to 1000 [ 846.705017][T18390] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3372'. [ 847.663061][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3379'. [ 848.201373][T18425] lo speed is unknown, defaulting to 1000 [ 848.244672][T18409] loop5: detected capacity change from 0 to 32768 [ 848.377625][T18409] XFS (loop5): Mounting V5 Filesystem [ 848.516060][T18409] XFS (loop5): Ending clean mount [ 848.972107][T13267] XFS (loop5): Unmounting Filesystem [ 849.474149][T18469] loop4: detected capacity change from 0 to 256 [ 849.693645][T18469] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb2f9d067, utbl_chksum : 0xe619d30d) [ 850.796185][T18489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3398'. [ 852.928483][T18530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3412'. [ 854.333571][T18560] device syzkaller0 entered promiscuous mode [ 856.620221][T18608] loop5: detected capacity change from 0 to 512 [ 856.691622][T18608] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 856.824474][T18608] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 856.942551][T18608] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 857.363660][T13267] EXT4-fs (loop5): unmounting filesystem. [ 860.982236][T18684] loop5: detected capacity change from 0 to 512 [ 861.038900][T18684] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 861.165613][T18684] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.3455: bad orphan inode 15 [ 861.224278][T18684] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 861.704480][T13267] EXT4-fs (loop5): unmounting filesystem. [ 862.300895][T18719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.383194][T18728] device syzkaller0 entered promiscuous mode [ 862.448145][T18719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.721111][T18763] device syzkaller0 entered promiscuous mode [ 872.876955][T18864] loop4: detected capacity change from 0 to 2048 [ 872.920829][T18864] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=11586, location=11586 [ 872.972486][T18864] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 873.104552][T18864] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 877.423767][T18890] futex_wake_op: syz.9.3512 tries to shift op by 144; fix this program [ 877.763272][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3516'. [ 879.382712][T18898] netlink: 'syz.9.3516': attribute type 2 has an invalid length. [ 880.997009][T18933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 881.458715][T18935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.729126][T18976] loop4: detected capacity change from 0 to 64 [ 885.971044][T18980] netlink: 'syz.5.3538': attribute type 1 has an invalid length. [ 886.206412][T18980] netlink: 'syz.5.3538': attribute type 7 has an invalid length. [ 886.246039][T18980] netlink: 'syz.5.3538': attribute type 8 has an invalid length. [ 886.368220][T18980] device syzkaller0 entered promiscuous mode [ 888.329896][T19030] CIFS: Attempting to mount \\::1\share [ 888.470610][T19016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.172290][T19030] CIFS: VFS: Error connecting to socket. Aborting operation. [ 889.197355][T19065] device syzkaller0 entered promiscuous mode [ 889.286729][T19030] CIFS: VFS: cifs_mount failed w/return code = -4 [ 895.875467][T19138] device syzkaller0 entered promiscuous mode [ 895.900770][ T4366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.953328][T19138] tipc: Started in network mode [ 895.959869][T19138] tipc: Node identity de49116ecc83, cluster identity 4711 [ 896.010698][T19138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.085129][T19138] tipc: Enabled bearer , priority 0 [ 896.124702][T19137] tipc: Resetting bearer [ 896.250634][T19137] tipc: Disabling bearer [ 896.492264][T19145] device syzkaller0 entered promiscuous mode [ 905.319283][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.325579][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 909.224770][T19282] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[18013] was attempted by ""[19282] [ 909.368591][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 910.449747][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 910.462787][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 910.473568][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 910.481200][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 910.489355][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 910.889060][T19294] jffs2: notice: (19294) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 912.697702][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 913.647606][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 913.666101][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 913.675491][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 913.683035][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 913.692516][ T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 913.699883][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 914.277588][T19309] tipc: Enabled bearer , priority 0 [ 914.320942][T19307] device syzkaller0 entered promiscuous mode [ 914.380641][T19286] lo speed is unknown, defaulting to 1000 [ 914.477376][T19322] lo speed is unknown, defaulting to 1000 [ 914.912944][T19307] tipc: Resetting bearer [ 914.953254][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 915.075359][T19307] tipc: Disabling bearer [ 915.334848][T19336] loop4: detected capacity change from 0 to 512 [ 915.449327][T19336] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 915.602769][T19336] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.3602: iget: bad i_size value: 38620345925642 [ 915.697240][T19336] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.3602: couldn't read orphan inode 15 (err -117) [ 915.734897][T19286] chnl_net:caif_netlink_parms(): no params data found [ 915.793855][T19345] netlink: 'syz.2.3603': attribute type 1 has an invalid length. [ 915.814251][T19336] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 915.905492][ T48] Bluetooth: hci6: command 0x0409 tx timeout [ 915.963403][T19345] 8021q: adding VLAN 0 to HW filter on device bond6 [ 915.997672][T19144] bridge0: port 1(syz_tun) entered disabled state [ 916.116485][T19144] device syz_tun left promiscuous mode [ 916.137553][T19144] bridge0: port 1(syz_tun) entered disabled state [ 916.262849][ T4859] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.462694][T19347] bond6: (slave veth3): Enslaving as an active interface with a down link [ 916.491871][T18013] EXT4-fs (loop4): unmounting filesystem. [ 916.521956][T19322] chnl_net:caif_netlink_parms(): no params data found [ 916.745856][T19350] bond6: (slave veth5): Enslaving as an active interface with a down link [ 916.816411][T19352] device bond6 entered promiscuous mode [ 917.025140][ T4859] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.261972][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 918.167216][ T48] Bluetooth: hci6: command 0x041b tx timeout [ 920.255655][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 920.732012][ T48] Bluetooth: hci6: command 0x040f tx timeout [ 920.774466][T19385] loop4: detected capacity change from 0 to 1024 [ 920.799219][ T4859] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 920.830066][T19385] EXT4-fs: Ignoring removed bh option [ 920.895775][T19385] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 921.136233][ T4859] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.245063][T18013] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /48/file2/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 921.310647][T19286] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.360744][T19286] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.405139][T19286] device bridge_slave_0 entered promiscuous mode [ 921.437017][T18013] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /48/file2/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 921.499333][T19286] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.541349][T19286] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.577115][T19286] device bridge_slave_1 entered promiscuous mode [ 921.711960][T19286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.825366][T19322] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.832513][T19322] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.880522][T19322] device bridge_slave_0 entered promiscuous mode [ 922.035570][T19286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.053748][T19322] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.076368][T19322] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.106803][T19322] device bridge_slave_1 entered promiscuous mode [ 922.160012][T19395] EXT4-fs (loop4): unmounting filesystem. [ 922.277352][T19322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.368388][T19286] team0: Port device team_slave_0 added [ 922.417866][T19322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.466474][T19286] team0: Port device team_slave_1 added [ 922.752912][T19322] team0: Port device team_slave_0 added [ 922.928423][ T48] Bluetooth: hci6: command 0x0419 tx timeout [ 922.935307][T19286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.262580][T19286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.500557][T19417] netlink: 232 bytes leftover after parsing attributes in process `syz.9.3614'. [ 923.597400][T19286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.650414][T19322] team0: Port device team_slave_1 added [ 924.454690][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 924.470323][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 924.479623][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 924.490795][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 924.498156][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 924.505677][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 924.561395][T19286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.583124][T19286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.681658][T19286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.908543][T19432] lo speed is unknown, defaulting to 1000 [ 924.975496][T19322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.001250][T19322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.006111][T19441] x_tables: duplicate underflow at hook 1 [ 926.102707][T19322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.265145][T19322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.306134][T19322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.430392][T19322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.510526][T19286] device hsr_slave_0 entered promiscuous mode [ 926.546488][T19286] device hsr_slave_1 entered promiscuous mode [ 926.734985][T19286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 926.747564][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 926.782444][T19286] Cannot create hsr debugfs directory [ 927.417225][T19322] device hsr_slave_0 entered promiscuous mode [ 927.445100][T19322] device hsr_slave_1 entered promiscuous mode [ 927.477882][T19322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 927.566447][T19322] Cannot create hsr debugfs directory [ 929.007469][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 932.142751][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 934.154528][ T4859] device hsr_slave_0 left promiscuous mode [ 934.176967][ T4859] device hsr_slave_1 left promiscuous mode [ 934.229752][ T4859] device geneve1 left promiscuous mode [ 934.247955][ T4859] bridge0: port 1(geneve1) entered disabled state [ 934.373627][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 934.455401][ T4859] bond4 (unregistering): (slave veth9): Releasing active interface [ 935.181018][ T4859] bond4 (unregistering): Released all slaves [ 935.647942][ T4859] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 935.670199][ T4859] bond3 (unregistering): Released all slaves [ 935.774510][ T4859] bond2 (unregistering): (slave veth7): Releasing active interface [ 935.787698][ T4859] bond2 (unregistering): Released all slaves [ 936.040884][ T4859] bond1 (unregistering): Released all slaves [ 937.609037][ T4859] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 937.622766][ T4859] bond0 (unregistering): Released all slaves [ 937.794687][T19531] tipc: Enabling of bearer rejected, failed to enable media [ 937.858403][T19432] chnl_net:caif_netlink_parms(): no params data found [ 938.703181][T19432] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.751184][T19432] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.777294][T19432] device bridge_slave_0 entered promiscuous mode [ 938.822743][T19432] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.848395][T19432] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.899743][T19432] device bridge_slave_1 entered promiscuous mode [ 939.716498][T19432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.010029][T19432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.449476][T19432] team0: Port device team_slave_0 added [ 940.683688][T19432] team0: Port device team_slave_1 added [ 941.262253][ T4859] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.637913][ T4859] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.688936][T19432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.735486][T19432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.859630][T19432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.979493][ T4859] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.098042][T19432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.129600][T19432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.240751][T19432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.289670][T19598] netlink: 'syz.9.3637': attribute type 1 has an invalid length. [ 942.456459][T19598] 8021q: adding VLAN 0 to HW filter on device bond6 [ 942.723575][ T4859] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.747938][T19602] bond6: (slave vlan3): Opening slave failed [ 942.938277][T19432] device hsr_slave_0 entered promiscuous mode [ 942.965445][T19432] device hsr_slave_1 entered promiscuous mode [ 943.122975][T19286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 943.353551][T19286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 943.408352][T19286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 943.847366][T19286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 943.953616][ T4859] tipc: Left network mode [ 944.681969][T19322] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 945.795972][T19322] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 946.633879][T19322] netdevsim netdevsim6 netdevsim2: renamed from eth2 Stopping sshd: stopped /usr/sbin/sshd (pid 4030) OK Stopping crond: stopped /usr/sbin/crond (pid 4011) OK [ 948.689273][T19652] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.717570][T19652] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.757180][T19652] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.785204][T19652] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3932) [ 948.976161][T19652] tipc: Resetting bearer Stopping network: [ 949.692308][T19322] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 949.753770][T19668] netlink: 'syz.2.3648': attribute type 1 has an invalid length. [ 950.834023][T19286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.855662][ T27] audit: type=1326 audit(1786181700.740:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.9.3654" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb534d9e0d9 code=0x0 [ 951.153291][T19286] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.220291][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 951.247831][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 953.942054][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 953.969096][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 954.035419][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.042518][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.164416][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 954.222111][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 954.271570][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.278646][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.352180][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready OK Stopping iptables: [ 954.644176][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 954.667616][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 954.723925][T19286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network OK [ 954.828531][T19286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 954.917444][T19322] 8021q: adding VLAN 0 to HW filter on device bond0 Stopping system message bus: [ 955.342013][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 956.169392][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 956.210501][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 956.270265][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 956.299194][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 956.385706][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 956.421873][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 956.473694][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 956.581622][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 956.589434][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 956.660200][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 956.717894][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 956.794143][T19322] 8021q: adding VLAN 0 to HW filter on device team0 done [ 957.293014][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 957.338716][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 957.411769][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.418886][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.501093][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 957.551321][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 957.607960][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.615104][ T4324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.700077][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 957.731720][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 957.764213][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 957.810918][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 957.893504][ T4859] device hsr_slave_0 left promiscuous mode [ 957.912182][ T4859] device hsr_slave_1 left promiscuous mode [ 957.999120][ T4859] device veth1_macvtap left promiscuous mode [ 958.023267][ T4859] device veth0_macvtap left promiscuous mode [ 958.047644][ T4859] device veth1_vlan left promiscuous mode [ 958.068119][ T4859] device veth0_vlan left promiscuous mode Stopping klogd: OK Stopping acpid: [ 960.576441][T19757] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3661'. OK Stopping syslogd: stopped /sbin/syslogd (pid 3620) OK umount: can't remount debugfs read-only umount: can't remount tmpfs read-only [ 963.408433][ T4859] smc: removing net device veth0 with user defined pnetid SYZ0 umount: can't remount sysfs read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.1.132 closed by remote host. Sent SIGTERM to all processes [ 964.190528][ T4859] bond0 (unregistering): Released all slaves [ 964.393606][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 964.401468][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready Sent SIGKILL to all processes Requesting system poweroff [ 967.239609][ T4859] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 967.251218][ T4859] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 967.263638][ T4859] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.316084][ T4859] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 967.329519][ T4859] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 967.341015][ T4859] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.390197][ T4859] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 967.403004][ T4859] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 967.419092][T19782] kvm: exiting hardware virtualization [ 967.433147][ T4859] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.447562][T19782] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 967.464644][T19782] ACPI: PM: Preparing to enter system sleep state S5 [ 967.477985][T19782] reboot: Power down [ 967.484469][ T4859] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 serialport: VM disconnected.