last executing test programs: 1m2.739900582s ago: executing program 3 (id=286): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000001040)={{0x2, 0x0, 0x7f, 0x0, 0x0, 0xffff}, 0x375, [0x4, 0x0, 0x1ff, 0x0, 0x2, 0x952d, 0x4, 0x8000, 0xffffffff, 0x3565, 0x70ec, 0x5, 0x0, 0xffffffc0, 0x46, 0x6, 0xfffffbff, 0x1, 0xfa, 0xd7, 0x0, 0x0, 0x6, 0x40, 0xa581, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x2, 0xc0, 0x0, 0x4, 0x401, 0xeb, 0x0, 0x3, 0x7, 0x6, 0x8, 0xbe7b, 0x2, 0x0, 0x7d5d, 0x3c8, 0x7, 0x3, 0x0, 0x9, 0x7, 0x3, 0xe, 0x5, 0x2, 0x9, 0x7a, 0x0, 0x6, 0x4, 0x1, 0xfffffffe, 0x0, 0x3, 0x3, 0x0, 0x4, 0x1, 0x80000000, 0x6, 0x5, 0x40, 0x80000001, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x400, 0x8, 0xfe7, 0x7fff, 0x400, 0xff, 0x6, 0x0, 0x3, 0x65, 0xbe, 0xff, 0x1, 0x9c40000, 0x8, 0x0, 0x0, 0x1, 0x101, 0x10001, 0x1c, 0x0, 0x200, 0x2, 0xa, 0x0, 0x900b, 0xff, 0xc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f, 0x9, 0x2, 0x1, 0xfff, 0x8, 0xda, 0x0, 0x7fffffff, 0x0, 0x576, 0x3, 0x3, 0x0, 0x4, 0x3, 0x7, 0xfffffff8, 0x0, 0x7, 0x3, 0x4, 0x6e6a, 0x3c3, 0x0, 0x3db8, 0x6, 0x8, 0x9000000, 0x9, 0x9, 0xffff, 0x9e, 0x8, 0x8a33, 0x5aee, 0x9, 0x0, 0x1, 0x80000001, 0xfff, 0x6, 0xfffffffa, 0x3, 0x8, 0xfffffeff, 0x4, 0x4, 0x8, 0x1, 0x8, 0x10, 0x200, 0x4, 0x0, 0x0, 0x10, 0x8001, 0x1ffe, 0x2, 0xb4, 0x0, 0x1, 0x4, 0x7c89, 0x1, 0x8, 0x4, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6ac, 0x5, 0x7, 0xa, 0x40000, 0x3, 0x8, 0x4, 0xfe30, 0x1, 0x8ec9, 0xed, 0x6, 0x0, 0xfffffff3, 0x7, 0x8, 0x2, 0x80000000, 0x0, 0x285, 0x800, 0x9, 0x8, 0x0, 0x0, 0x10000, 0x80000001, 0xffff2743, 0x700000, 0x0, 0x2, 0x80000001, 0x0, 0x8, 0xc13c, 0x7, 0x0, 0x7, 0x5, 0x8, 0x6, 0x1, 0x7fff, 0x6, 0x2, 0x9, 0xffff, 0x6, 0x7, 0x7e94, 0x5, 0x9, 0xf, 0x6, 0x5, 0x4, 0x3, 0xfffffff8, 0x10001, 0x8, 0x6, 0x101, 0x3, 0x2, 0x1, 0x10001, 0xe1c, 0x1, 0x1, 0xfff, 0x9, 0x6, 0x39d, 0x0, 0x10000, 0x3, 0xd, 0x9, 0x5, 0x7fff, 0x7fffffff, 0x8, 0x96, 0xfffffffb, 0x9, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x3, 0x0, 0x3ff, 0x0, 0xcf5, 0x6, 0x0, 0x7, 0x188, 0x1, 0x0, 0x0, 0x0, 0xa21264e3, 0x401, 0x1e0, 0x1, 0xed, 0x5, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff843, 0x22d2, 0x0, 0x3, 0x0, 0x8, 0x3, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x6f9a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40, 0x0, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, 0x7, 0x76, 0x1, 0x0, 0x0, 0xffffffff, 0x7, 0x4, 0x0, 0x0, 0x295, 0x6, 0x10001, 0x0, 0x48, 0x2, 0x81, 0xfffffff9, 0x0, 0x7, 0xd4ed, 0x9, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1a6, 0xb, 0x479d, 0x0, 0x3, 0x2, 0x2, 0x2, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x6, 0xc, 0x0, 0x7, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xa9, 0x0, 0x9, 0x1, 0x0, 0x8001, 0x516, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x9, 0x6, 0xff, 0x4, 0x1, 0x0, 0xb879, 0x8c1, 0x7, 0x9a, 0x2, 0x0, 0x5, 0x0, 0x9, 0x0, 0x80000001, 0x0, 0x2, 0x6, 0x2, 0x0, 0x3, 0x7, 0x9, 0x2, 0xf5c, 0x7, 0x0, 0x8, 0x6, 0xfffffff7, 0x7c29, 0x0, 0x7ff, 0x200, 0x24d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0xa0, 0xf6cc, 0x40, 0x9, 0x0, 0xd3c9, 0xa, 0x3, 0x7, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe, 0x0, 0x1, 0x0, 0x0, 0x890, 0x5, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x6, 0x0, 0x50c, 0x6, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x8, 0xa57, 0x10, 0x0, 0x2, 0x0, 0x1, 0x7fffffff, 0x2, 0xfffffff8, 0x8, 0x0, 0x7, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5, 0x0, 0xb, 0x1, 0x1, 0xc, 0x9, 0x5, 0x9, 0x401, 0x0, 0x5, 0x7, 0x2c2e, 0x400, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x69, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x5, 0x0, 0x8, 0x800, 0x0, 0x0, 0x0, 0xf51, 0x3, 0xffffffff, 0x1, 0x5, 0x400, 0x3, 0x0, 0x0, 0x1, 0x8, 0x0, 0x9, 0x0, 0xfffffff7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7ff, 0x5, 0x0, 0x0, 0x1ff, 0x7, 0x9, 0x8, 0x9, 0x6, 0x67e, 0x1000, 0x0, 0x4ee8, 0xb, 0x80, 0x4, 0x0, 0xce1, 0x2, 0x1, 0x1, 0x6, 0x6, 0x8, 0x0, 0x66d4823c, 0x8, 0xb, 0x5, 0x3, 0x9, 0x0, 0x0, 0x2, 0x0, 0xd, 0x5, 0x0, 0xff, 0x40, 0x9, 0x8, 0x4, 0x9, 0x0, 0x400, 0x8, 0x0, 0x0, 0x80000001, 0x633f, 0xff, 0x9b6, 0x9, 0x3, 0x9, 0x0, 0x7ff, 0x8, 0x7, 0xa2d, 0x7, 0x7, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x4, 0x1, 0x5, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0xb, 0x61aa, 0xd, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7e21, 0x0, 0x2, 0x3, 0x5, 0x2, 0x0, 0x0, 0x0, 0x30b, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x3ff, 0x0, 0x0, 0x6, 0x4, 0x1, 0x401, 0x0, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x8000, 0x7, 0x0, 0x7fffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x2, 0x3dd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x60d52fdd, 0x100, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7322, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x5b4, 0x0, 0xfffffff7, 0x10000, 0x2, 0x0, 0xfffffff7, 0x0, 0x0, 0x3, 0x100, 0x8, 0x5, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x6, 0x2, 0x81, 0x0, 0x0, 0xefa, 0x0, 0x2, 0x6, 0xff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9984, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x3, 0x0, 0x8, 0x3, 0xfffffff8, 0x8, 0xc74e, 0x2a53a0f9, 0x0, 0x0, 0x0, 0x3, 0x24a, 0x25, 0xfffffffc, 0x0, 0x3, 0xc, 0x1800000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x270bc00, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0xd65d, 0x1, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x3ff, 0x8, 0x8, 0xc20, 0x0, 0x400, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81, 0x3, 0x5, 0x0, 0xb, 0x8, 0x8, 0x0, 0x0, 0xe, 0x2, 0x4, 0x0, 0x6, 0x3ea3, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x3, 0x0, 0xfffffff7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x7, 0x3, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfbd1, 0x0, 0x10001, 0x1, 0x3, 0x895, 0x0, 0x0, 0x0, 0x5, 0xd18c, 0x7, 0x7, 0x9, 0x1ff, 0x6, 0x0, 0x0, 0x3ff, 0x6ba6, 0x0, 0x0, 0xa, 0x6, 0x0, 0x3, 0x0, 0x5ad, 0x2, 0x0, 0xffff0000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400, 0x0, 0xc5b2, 0x9, 0x7ff, 0x6, 0x0, 0xffff8000, 0x400, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x4d94, 0xe, 0xe]}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) close(0x3) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3369}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000040)=0xc000000, 0x4) 59.396672514s ago: executing program 3 (id=292): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}}}, 0x30) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8}, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001640), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000002740)=ANY=[@ANYRESOCT=r3, @ANYRES16=r2, @ANYBLOB="0400fefffffffddbdf2511000000080015000000000008001500c100000008001500c000000008000100", @ANYBLOB="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", @ANYBLOB="402d83398a09d925756aaa8782b43b1e94b1c98cd87d13b742c91d5780c2f565b1e670ba1ca38148d9b7871e2a050b709c76b3d43bedaab5e41586a9c11988e6d1b9bcf6262f9d80cf8acfecbc63183b2611e1c3e9b6ffae944b268b12405f6a7de08af374dc981dbe90729fd3ad7f0cd3f05e96f1"], 0x34}}, 0x80808) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8de853fe007a3b24600000000000000fc000000000000000000000000000000fc00000000000000000000000000110000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3ba}, {}, 0xffffffff}}, 0xb8}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffe39}]}) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r6, 0x890c, &(0x7f0000000100)={@null, 0x0, 'lo\x00'}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 55.853378333s ago: executing program 3 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_sock_diag(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x200000100000011, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$kcm(0xa, 0x0, 0x87) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000002780)={0x0}) close(r4) r8 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000001c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000200)='\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r7, 0x3, r5}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x8, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket(0x15, 0x5, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES8=0x0, @ANYBLOB="0000000000000000000000000000000018000100000800825f302b8b0a399e90d921a814d237ee1b"], 0x64}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x2}, 0x8) socket$rds(0x15, 0x5, 0x0) syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000005140)='./file0\x00', 0x1000884, &(0x7f0000000100)={[{@nospace_cache}, {@nodatacow}, {@nossd_spread}, {@noautodefrag}, {@space_cache}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@usebackuproot}]}, 0x1, 0x5100, &(0x7f000000f3c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xcV30A8LPP2ZfXm0BFSBEsUMe44PXaDg+1qVinqYpCKeuSElWIYmOvw+INNrZTcATIsYNSFCVNSyT40CiOEKrzIalFggJNoriRMIqaB0rViCRKRFoniCg0DaCkEAlXs/ee2Tvn7jxs7zre9PeTvHNm/ud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/4cjX/3C3zaLP/Dbi554+tKJz+7fcOkLX77o7EdCmJx9vCMLdwxcc9PEL2678Pb9d6+7+c5jF7+7Ny+Xx8Ng9U9nfufqWOuxZSHc1RFCdxpYPZQFevL7Q7G+twyFcFaYC9RKTA1kJdKGww/6QzgY5gK1qr7fH8JQIXDJo/ffd101cWN/CCtCCJW0jacqWRv9aeC83iwwkAZ2dGeBV45naoHvdWYBOGXxzVB70R+erM8wMn+5Bq+/ngXr2GsrHV5XTIw0zvfzDYvcqYLe9IHJU3raStWxKEpvjyPebUvg3Vbazjd42opfpPJvKMfnQpXQuXVq2+YrZvbERzrD2FhXo5oW6Xl+/KUvbTmR9JJ5HcYOjCzI6/D6h1fc1rXqIw/duXrFc4fec+D5U+3mjwubtJhebJWQv+aWzPMYTfg8WQJvv9K3pFFfukII2z7zex9tFi/N/0eaz//jyznedtbljrW+OpzNzeMjQzHx4nA2NwcAAIAlYynsNd0xdu8HmtVXmv+Ptnf8Px7yzyfz2WiPhDAxmziwPIRzZh/PArfG5j69PIS3z6Ym6wMbksCREN48m1hVqyop0RdLjCaBnw7ngYkkcDQGJpPAt2PghiRwdQwcTgJbYuBIErgwBsJ0/Th+fzgfR9uB/hjYlG3Ew/EshF8Ox9aSbfVkrSoAAIAFks8Oe+rvFs51ONUMcXp5uL9VhngGdsMMlaSGdAZbm1Y1rKG7VQ2drWqojXtf8+GXau5oVXPpNIyO+gw3/epvPhaaKM3/x5vP/yvzdKSjdPw/hI2zf2PuzjwyU4tvmqzLAAAAAJyCwf995lvN4qX5/0R75//HfSJdhczhwbgbYvvyEMbrA1m1f1gOZEe9B/MAAAAALAW14/G1Y+HT+W12inY6ny7nnzzB/PHA/8S8+XuP3LOpWX9L8//J9s7/H6i/zTpxNPbi68tD6CsEfhh7WQ3MGo2Bn3ywPpCP/2jcANfGqvITE2pVXRtLbIqB8SRwsFGJH9VKnFMfyJ+sWuMHauOYzksUAgAAAHDaxd0B8bh8PP//Hb9Z94Vm5Urz/00ndv7/7Dy4dHr/zGAIa7pD6Ep/GPDgQLYwYAwMdeSJeweyurrSqq4aCOGC6sDSqp7J1//vTtcYfLQ/qyoGznnHoZfOqya+1R/CmmLgsU/c8t5qYk8SqDX+l/0hvK062rTx7/ZljfekjX+jL4S3FgK1qj7dF0K1sd60qvsr+XUM0qr+uRLCGwqBWlXvq4SwNwCwRMX/SrcWH9y998rtm2dmpnYtYiLuw+8P26Znpsa27JjZWmnQp61Jn+uWMbqqPKZ2r3zzZL5E0cfv2DjUTrr2O8HxYlv5fvzSiYP5/fhdqGd2nOt66u6uT4f8rneWmwiFb1KNhty5yEMeKFYy9ySW6o/5e8Ng6Lti99SusS9u3rNn19rsb7vZ12V/42GmbFutTbfVwHx9a+Pl0XC1rMTJbquVxUrW7Ll855rde69cPX355sumLpv63Nr3rRs/f3z9+PvPX1Md1Xj2t8VQV85XdTLU47e0Oa4FHOq53YVKTsenhoSExFJL7Bhc2fT/5NL8f2fz+X/81Imf/Pn6DI2O/4/Ew/zZ43OH+TfFwMF2j/+PNDqaXzsxYDQJ7IuBfQ7zAwAA8PoQJ/lxb2bcK/2zVd99rlm50vx/X3u//1+g9f9rS9df3GiZ/1WxxHij9f/TZf5r6//va7T+f7rMf239/4Ovwfr/V9QCySb5pfX/AQCA14MFXP+/+lCT9f9bLu+fXiCglKHl8v7pBQJKGVou49/uBQJOeP3/p/7zr/47NFGa/9/Q3vzfwv0AAABw5vjKn33hd5rFS/P/g+3N/0//+n+h0fn/o40Ck40WBrT+HwAAAEtUo/X/Rq4Z+FSzcqX5/+H25v+vHM901uWOtb46nK1pF9I17V4crv1kAAAAAJaGzjA21tNm3rqVUTecfJuP50uBNksXPfMnx07s/P8j7c3/636Xcf3DK27rWvWRh169c/WK5w6958Dzc8f/AQAAgMXT7n4JAAAAAAAAAAAAAADgtffMf+xf3yxe+v1/2Dj7eKPf/8fr/sXfF7yxLnestfX6f/n9Sz58+97ZJQsfHA7hncXA9v3bzwr5tflXFgP3fXLVm6qJ/WmJe56+8Nlq4lNp4EOrz365mrggCWyKiyS+OQ3Eqyq+vCwJxOUV/z0NxO1xOA305oGvLcvG0ZFuq58NZduqI91WTwyFsLwQqG2ru4ayNjrSAd6YBGoD/HwaiAP88zzQmfbq9sGsVzEwFIvePJj1CgCAM1b8FtgTtk3PTI3Hr/Dx9tzu+tuobsmyq8rVdrTZ/JP50mQfv2PjUDvprvS76Ny1xntCpTqEtaWvq8UsHbOjXJhaWmy6NzYYcqvV3joblEud6KbrbTyi/mxEY1t2zGztaTnw9a2zrOtumWVtabJTzNI5u0nbqKWNvrQxoja3TRtdjvc7w9hYV5LrD2JwJNRp9Ypo9/f6xXX+Gr0Kink+d+zAK83qK83/R9qb/1eK43o5vxjAvnhlvb9bbpl/AAAAWFxf2/Drb8Z/H7vmgcea5S3N/0fbm//HPVj5oeBsb8eReP3/A8tDmL20/kgWuDU29+nlIbx9NjUZS2QX1L84lhjPArfGHSarYolNk/VV9cXA4STw0+E8cCQJHI2BfC/FoZDvyvn74RDeO5vaWF9iZywxkgQ+GgOjSWAsBsaTwLIYmEgCLyzLA5NJ4N9iIEzXb6s7luXbCgAA4ETk86ye+rshnecd7m6VoaNVhoFWGTpbZai0ytBoFPH+d2KGnuTklY5Cpp601v6kllKGeDH8E+5XKUP4UX3OtGCp6Xj+Qe18g476DHd/oLsSmijN/8fbm/8P1N9mrR+N8/+56/9lgR/G7n09njo+GgM/+WB9IN8xcDROdq+tVTWZl8gn7dfGEhMxMJoEdsbARBLYtDEPHHxTfSCfadcaP1BrfDovUQgAAADAaRd3EMTdNHH+f/Purw42K1ea/0+0N/+P7Q0WG7s61npsWQh3dcz1phZYPZQF4n6Mofjz+LcMhXBWYQdHrcTUQFaiN2k4/KA/+4V6b1rV9/uzHx/E+5c8ev9911UTN/aHsKKw96XWxlOVrI3+NHBebxYYSAM7urNA3PNTC3yvMwvAKavtFYwvqPxUl5qR+cs1eP29Xq4Jmg6vtA90nnzz/eZqsZR2uOb7VGtO7Glruv+WBVN6exzxbluK77YR77biF6n8G8rxuVAldG6d2rb5ipk98ZHiL1lLFul5Lv5KtZ30ArwO9518b1urpB0YTz4+xucvN//rsCNWd/3DK27rWvWRh+5cvaL6lD7fdjcaiD8Uvv/L/zr048LmXWyVkL/mltznyaTPk6X438Copy2EsPGFb1zbLF6a/0+2N//vTm5n/TpuzN3LQ3hXYeM+GDf/Hy/PPgcLgexT8g3lQHbI/b+GG35yAgAAwEKr7e6o7S+Yzm+zE8LTeXI5/+QJ5o/7Kybmzd9uvwf++pMrmsVL8/9Nzef/fUk3Hf93/J+F0ld/1/H/eZ3pu6L70gf2ndKu6FJ1LArH/+d1pr/bHP+fl+P/r7vj/88des8Bx/8Xm+P/8zrTn7bSt6SdvnSFEJ77o3ufaBYvzf93tjf/t/7f/Iv21db/29Ro/b+djdb/22f9PwAAYFE1WGguneeVVu8rZUhX7ytlaLlAYMslBq3/d8Lr/z177lO/CU2U5v/72pv/x5fDYLH1pbL+3+jGBlXdEAM7LQwIAADAmajRDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeW3f/w/9sbRZ/4LcXPfH0pROf3b/h0he+fNHZj4QwPft4RxbuGLjmpolf3Hbh7fvvXnfznccufnclL9eT3/5uXe5Y66vDIRwsPDIUEy8OV+/MBS758O17u6uJB4dDeGcxsH3/9rNCOF759nAIK4uB+z656k3VxP60xD1PX/hsNfGpNPCh1We/XE1ckAc60u7+47Ksux1pd69bFsLyQqDW3c8uq6+q1saf5oHOtI1/GsraiIGhWPSbQ1kbMTATS0z3hbCmO4SutKoHKllVXWlV/1LJqupKq/pKJYQLQgjdaVVP92ZVdacjf6Q3qyoGznnHoZfOqyYO9oawphh47BO3vLea+HwSqDX+F70hvK36kkkb/05P1nhP2viNPSG8NYTQm5b4VXdWojct8Ux3CG8oBGqNf6Y7hL2B14X44VP3ibZ775XbN8/MTO1axERv3lZ/2DY9MzW2ZcfM1krSp0Y6CunjV5382J986Utbqrcfv2PjUDvp7rxcz2yX1/XU3V1/pvc+9mugWMnc81Gqv1Lr7mDou2L31K6xL27es2fX2uxvo+yhtz77uuxvVx7NttXapbKtVhYrWbPn8p1rdu+9cvX05Zsvm7ps6nNr37du/Pzx9ePvP39NdVTj2d+FGOotp3+o53YXKjkdHwASEhJLLdFZ9+k2fqZ/kJe+6M91tCdUZj+gS9OKYpaO2VEuxKA3nOSIT+Z7SssRrS1NHEpZ1rXOsr40mZjL0p9lmf1eV5ocFmvqnN2k8X5nGBvrarQdRurvFjfvz09h8z6eb7p20wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBQAA//+4TB3h") 50.85271067s ago: executing program 3 (id=304): r0 = syz_io_uring_complete(0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f00000000c0)) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, 0x0, 0x0) accept4$ax25(r0, &(0x7f0000000180)={{0x3, @null}, [@remote, @null, @remote, @netrom, @remote, @null, @bcast, @netrom]}, &(0x7f0000000280)=0x48, 0x800) r6 = openat$vcs(0xffffffffffffff9c, 0x0, 0x6080, 0x0) ioctl$VIDIOC_G_AUDIO(r6, 0x80345621, &(0x7f0000000080)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f00000000c0)={0x3}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @private2}}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) 16.670771353s ago: executing program 4 (id=353): ioperm(0x0, 0x3, 0x0) eventfd2(0x0, 0xc0801) bind$xdp(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) lchown(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r1, 0x0, 0x4) readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1) vmsplice(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x10005) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2$watch_queue(0x0, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@nl=@unspec, 0x80) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='blacklist\x00', &(0x7f00000002c0)='-^\x00') setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) 12.7699959s ago: executing program 4 (id=360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x88, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, @in6={0xa, 0x0, 0x0, @remote}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @remote}]}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500280008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200"], 0xfdef) 10.759659124s ago: executing program 1 (id=364): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff5f282828882fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xe0}], 0x1}, 0x0) 9.900215934s ago: executing program 4 (id=366): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) read$FUSE(r0, &(0x7f0000001340)={0x2020}, 0x2020) 9.621743337s ago: executing program 1 (id=367): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000040)="1002d7d957c9dc8dda937c7b61567297207adb3029e20544ec044c2fbb6bf865c9331165cb94d9fcb78cb57f9b40b11393c0030046c2e390f91dbd9ddf7accf1295f9abfb2b534ba", 0x0, 0x48) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x0, 0x6, 0x0) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="a6cd9106d7dd98ba867d7478bd665438923fc50e491eef6cb10b5ffc24c92b772e2af819e3d9bd3ab05a4bbe279dbf84f2f4f731cbd5d8a9df0f8cc34b5c6a85af810e564329ec6f", 0x0, 0x48) 9.134634487s ago: executing program 1 (id=368): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x65) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="e3", 0x1}, {&(0x7f0000000140)="cd1de4ea9b5c798fc37d3de6", 0xc}, {&(0x7f00000001c0)="2904fe324eef70be9f3042fd2ebc9fd3f337467b2074f3149e7554445577a1d344a971067a00002afb6b4bb3e135a93bc983559ac7cbb311ac23f57150cecc36f26bcbf39aaa21aabe5f3229e9db0c0c602bdb33d56688d2937ad618f60d5175fb42ca1635a396567e81462d9d928b6726ca293517fb70a052c43ab7f1cdde", 0x7f}], 0x3}}], 0x1, 0x8004) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 8.775972746s ago: executing program 2 (id=369): ioperm(0x0, 0x3, 0x0) eventfd2(0x0, 0xc0801) bind$xdp(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) lchown(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r1, 0x0, 0x4) readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1) vmsplice(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x10005) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2$watch_queue(0x0, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@nl=@unspec, 0x80) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='blacklist\x00', &(0x7f00000002c0)='-^\x00') setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) 8.765928656s ago: executing program 1 (id=370): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 8.699796572s ago: executing program 0 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x94, &(0x7f0000000540)=ANY=[], 0x0, 0x9eb8, &(0x7f0000001600)="$eJxEmnPwJ/fyd7+bbLKxbVsntm3btn3ifMZGbNu2bdu2jX1qf/feevqfqZmaelV3n1dXTfV7bhngrQO8bYC3D/COAd45wLsGePcA7xngvQO8b4D3D/CBAT44wIcG+PAAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D/CPAf45wL8G+PcA/xngvwMcOcChAIcFOFqAowc4PMAxAhwzwBEBjhXg2AGOE+C4AY4X4PgBThDghAFOFODEAU4S4KQBThbg5AFOEeCUAU4V4NQBThPgtAFOF+D0Ac4Q4IwBzhTgzAHOEuCsAc4W4OwBzhHgnAHOFeDcAc4T4LwBzhfg/AEuEOCCAS4UIAEuHOAiAS4a4GIBLh7gEgEuGeBSAS4d4DIBLhvgcgEuH+AKAa4Y4EoBrhzgKgGuGuBqAa4e4BoBrhngWgGuHeA6Aa4b4HoBrh/gBgFuGOBGAW4c4CYBbhrgZgFuHuAWAW4Z4FYBbh3gNgFuG+B2AW4f4A4B7hjgTgHuHOAuAe4a4G4B7h7gHgHuGeBeAe4d4D4B7hvgfgHuH+ABAR4Y4EEBHhyM6SEBHhrgYQEeHuARAR4Z4FEBHh2gAR4T4LEBHhcw+ij2JwR4YoAnBXhygIMAgwDDAKMA4wCTANMAswDzAIsAywCrAOsAmwDbALuAoVGapwR4aoCnBXh6gGcEeGaAZwV4doDnBHhugOcFeH6AFwR4YYAXBXhxgJcEeGmAlwV4eYBXBHhlgFcFeHWA1wR4bYDXBXh9gDcEeGOANwV4c4C3BHhrMNbQ0BDeHuAdAd4Z4F0B3h3gPQHeG+B9Ad4f4AMBPhjgQwE+PGoOwqGhR0ex/WLo/+KJAJ8Mhv+f3tMBPjOqd/8Jnw/whQBfDPClAF8O8JUAXw3wtQBfD/CNAN8M8K0A3w7wnQDfDfC9AN8P8IMAPwzwowA/DvCTAD8N8LMAPw/wiwC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8A/wzwrwD/DvCfAP8NcGSAQyEOC3G0cFTdODzEMUIcM8QRIY4V4tghjhPiuCGOFzL7+CFOEOKEIU4U4sQhThLipCFOFuLkIU4R4pQhThXi1CFOE+K0IU4X4vT/1Z0xxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQiTEhUNcJMRFQ1wsxMVDXCLEJUNcKsSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3Gm0oaFRHHYJcdcQdwtx9xD3CHHPEPcKce8Q9wlx3xD3C3H/EA8I8cAQDwrx4BAPCfHQEA8L8fAQjwjxyBCPCvHoEA3xmBCPDfG4EI8P8YQQTwzxpBBPDnEQYhBiGGIU/n+fpyFmIeYhFiGWIVYh1iE2IbYhdiH2IZ4S4qkhnhbi6SGeEeKZIZ4V4tkhnhPiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNo9htNu/QsKGhoVtCvDXE20K8PcQ7QrwzxLtCvDvEe0K8N8T7Qrw/xAdCfDDEh0J8eJTfh/DREB8L8fEQnwjxyRCfCvHpEJ8J8dkQnwvx+RBfCPHFEF8K8eUQXwnx1RBfC/H1EN8I8c0Q3wrx7RDfCfHdEN8L8f0QPwjxwxA/CvHjED8J8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CvHvEP8J8d8QR4Y4FOGwCEeLcPQIh0c4RoRjRjgiwrEiHDvCcSIcN8LxIhw/wgkinDDCiSKcOMJJIpw0wskinDzCKSKcMsKpIpw6wmkinDbC6SKcPsIZIpwxwpkinDnCWSKcNcLZIpw9wjkinDPCuSKcO8J5Ipw3wvkinD/CBSJcMMKFIiTChSNcJMJFI1wswsUjXCLCJSNcKsKlI1wmwmUjXC7C5SNcIcIVI1wpwpUjXCXCVSNcLcLVI1wjwjUjXCvCtSNcJ8J1I1wvwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM0wmMiPDbC4yI8PsITIjwxwpMiPDnCQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hKdEeGqEp0V4eoRnRHhmhGdFeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYRXRXh1hNdEeG2E10V4fYQ3RHhjhDdFeHOEt0QjvDXC2yK8PcI7IrwzwrsivDvCeyK8N8L7Irw/wgcifDDChyJ8OMJHInw0wscifDzCJyJ8MsKnInw6wmcifDbC5yJ8PsIXInwxwpcifDnCVyJ8NcLXInw9wjcifDPCtyJ8O8J3Inw3wvcifD/CDyL8MMKPIvw4wk8i/DTCzyL8PMIvIvwywq8i/DrCbyL8NsLvIvw+wh8i/DHCnyL8OcJfIvw1wt8i/D3CPyL8M8K/Ivw7wn8i/DfCkREOxTgsxtFiHD3G4TGOEeOYMY6IcawYx45xnBjHjXG8GMePcYIYJ4xxohgnjnGSGCeNcbIYJ49xihinjHGqGKeOcZoYp41xuhinj3GGGGeMcaYYZ45xlhhnjXG2GGePcY4Y54xxrhjnjnGeGOeNcb74kwnnj3GBGBeMcaEYiXHhGBeJcdEYF4tx8RiXiHHJGJcac8ilY1wmxmVjXC7G5WNcIcYVY1wpxpVjXCXGVWNcLcbVY1wjxjVjXCvGtWNcJ8Z1Y1wvxvVj3CDGDWPcKMaNY9wkxk1j3CzGzWPcIsYtY9wqxq1j3CZmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjNMZjYjw2xuNiPD7GE2I8McaTYjw5xkGMQYxhjFGMcYxJjGmMWYx5jEWMZYxVjHWMTYxtjF2MfYynxHhqjKfFeHqMZ8R4ZoxnxXh2jOfEeG6M58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8V4dYzXxHhtjNfFeH2MN8R4Y4w3xXhzjLfEeGuMt8V4e4x3xHhnjHfFeHeM98R4b4z3xXh/jA/E+GCMD8X4cIyPxPhojI/F+HiMT8T4ZIxPxfh0jM/E+GyMz8X4fIwvxPhijC/F+HKMr8T4aoyvxfh6jG/E+Oaofg/h2zG+E+O7Mb4X4/sxfhDjhzF+FOPHMX4S46cxfhbj5zF+EeOXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzH+EuOvMf4W4+8x/hHjnzH+FePfMf4T478xjoxxKMFhCY6W4OgJDk9wjATHTHBEgmMlOHaC4yQ4boLjJTh+ghMkOGGCEyU4cYKTJDhpgpMlOHmCUyQ4ZYJTJTh1gtMkOG2C0yU4fYIzJDhjgjMlOHOCsyQ4a4KzJTh7gnMkOGeCcyU4d4LzJDhvgvMlOH+CCyS4YIILJUiCCye4SIKLJrhYgosnuESCSya4VIJLJ7hMgssmuFyCyye4QoIrJrhSgisnuEqCqya4WoKrJ7hGgmsmuFaCaye4ToLrJrhegusnuEGCGya4UYIbJ7hJgpsmuFmCmye4RYJbJrhVglsnuE2C2ya4XYLbJ7hDgjsmuFOCOye4S4K7JrhbgrsnuEeCeya4V4J7J7hPgvsmuF+C+yd4QIIHJnhQggcneEiChyZ4WIKHJ3hEgkcmeFSCRydogsckeGyCxyV4fIInJHhigicleHKCgwSDBMMEowTjBJME0wSzBPMEiwTLBKsE6wSbBNsEuwT7BE9J8NQET0vw9ATPSPDMBM9K8OwEz0nw3ATPS/D8BC9I8MIEL0rw4gQvGeXDoaGhyxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfB+xK8P8EHEnwwwYcSfDjBRxJ8NMHHEnw8wScSfDLBpxJ8OsFnEnw2wecSfD7BFxJ8McGXEnw5wVcSfDXB1xJ8PcE3EnwzwbcSfDvBdxJ8N8H3Enw/wQ8S/DDBjxL8OMFPEvw0wc8S/DzBLxL8MsGvEvw6wW8S/DbB7xL8PsEfEvwxwZ8S/DnBXxL8NcHfEvw9wT8S/DPBvxL8O8F/Evw3wZEJDqU4LMXRUhw9xeEpjpHimCmOSHGsFMdOcZwUx01xvBTHT3GCFCdMcaIUJ05xkhQnTXGyFCdPcYoUp0xxqhSnTnGaFKdNcboUp09xhhRnTHGmFGdOcZYUZ01xthRnT3GOFOdMca4U505xnhTnTXG+FOdPcYEUF0xxoRRJceEUF0lx0RQXS3HxFJdIcckUl0px6RSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdUUV0tx9RTXSHHNFNdKce0U10lx3RTXS3H9FDdIccMUN0px4xQ3SXHTFDdLcfMUt0hxyxS3SnHrFLdJcdsUkxS3T3GHFHdMcacUd05xlxR3TXG3FHdPcY8U90xxrxT3TnGfFPdNcb8U90/xgBQPTPGgFA9O8ZAUD03xsBQPT/GIFI9M8agUj07RFI9J8dgUj0vx+BRPSPHEFE9K8eQUBykGKYYpRinG/803TTFLMU+xSLFMsUqxTrFJsU2xS7FP8ZQUT03xtBRPT/GMFM9M8awUz07xnBTPTfG8FM9P8YIUL0zxohQvTvGSFC9N8bIUL0/xihSvTPGqFK9O8ZoUr03xuhSvT/GGFG9M8aYUb07xlhRvTfG2FG9P8Y4U70zxrhTvTvGeFO9N8b4U70/xgRQfTPGhFB9O8ZEUH03xsRQfT/GJFJ9M8akUn07xmRSfTXHkyJEjn0/xhRRfTPGlFF9O8ZUUX03xtRRfT/GNFN9M8a0U307xnRTfTfG9FN9P8YMUP0zxoxQ/TvGTFD9N8bMUP0/xixS/TPGrFL9O8ZsUv03xuxS/T/GHFH9M8acUf07xlxR/TfG3FH9P8Y8U/0zxrxT/TvGfFP8dlX+KQxkOy3C0DEfPcHiGY2Q4ZoYjMhwrw7EzHCfDcTMcL8PxM5wgwwkznCjDiTOcJMNJM5wsw8kznCLDKTOcKsOpM5wmw2kznC7D6TOcIcMZM5wpw5kznGV0nDXD2TKcPcM5MpwzHxoald/cGc6T4bwZzpfh/BkukOGCGS6UIRkunOEiGS6a4WIZLp7hEhkumeFSGS6d4TIZLpvhchkun+EKGa6Y4UoZrpzhKhmumuFqGa6e4RoZrpnhWhmuneE6Ga6b4XoZrp/hBhlumOFGGW6c4SYZbprhZqOeHzc0tEWGW2a4VYZbZ7hNhttmuF2G22e4Q4Y7ZrhThjtnuEuGu2a4W4a7Z7hHhntmuFeGe2e4T4b7ZrhfhvtneECGB2Z4UIYHZ3hIhodmeFiGh2d4RIZHZnhUhkdnaIbHZHhshsdleHyGJ2R4YoYnZXhyhoMMgwzDDKMM4wyTDNMMswzzDIsMywyrDOsMmwzbDLsM+wxPyfDUDE/L8PQMz8jwzAzPyvDsDM/J8NwMz8vw/AwvyPDCDC/KGPrfvvHSDC/L8PIMr8jwygyvyhh5dYbXZHhthtdleH3G8FEeuTHDmzK8OcNbMrw1w9syvD3DOzK8M8O7Mrw7w3syvDfD+zK8P8MHMnwww4cyfDjDRzJ8NMPHMnw8wycyfDLDpzJ8OsNnMnw2w+cyfD7DFzJ8McOXMnw5w1cyfDXD1zJ8PcM3Mnwzw7cyfDvDdzJ8N8P3Mnw/ww8y/DDDjzL8OMNPMvxz5H/i8wy/yPDLDL/K8OsMv8n+cxbxXYbfZ/hDhj9m+FOGP2f4S4a/Zvhbhr9n+McovQz/yvDvDP/J8N8MR2Y4lOOwHEfLcfQch+c4Ro5j5jgix7FyHDvHcXIcN8fxchw/xwlynDDHiXKcOMdJcpw0x8lynDzHKXKcMsepcpw6x2lynDbH6XKcPscZcpwxx5lynDnHWXKcNcfZcpw9xznyUfOPc+U4d47z5DhvjvPlOH+OC+S4YI4L5UiOC+e4SI6L5rhYjovnuESOS+a4VI5L57hMjsvmuFyOy+e4Qo4r5rhSjivnuEqOq+a4Wo6r57hGjmvmuFaOa+e4To7r5rhejuvnuEGOG+a4UY4b57hJjpvmuFmOm+e4RY5b5rhVjlvnuE2O2+a4XY7b57hDjjvmuFOOO+e4S4675rhbjrvnuEeOe+a4V45757hPjvvmuF+O++d4QI4H5nhQjgfneEiOh+Z4WI6H53hEjkfmeFSOR+dojsfkeGyOx+V4fI4n5HhijifleHKOgxyDHMMcoxzjHJMc0xyzHPMcixzLHKsc6xybHNscuxz7HE/J8dQcT8vx9BzPyPHMHM/K8ewcz8nx3BzPy/H8HC/I8cIcL8rx4hwvyfHSHC/L8fIcr8jxyhyvyvHqHK/J8docr8vx+hxvyPHGHG/K8eYcb8nx1hxvy/H2HO/I8c4c78rx7hzvyfHeHO/L8f4cH8jxwRwfyvHhHB/J8dEcH8vx8RyfyPHJHJ/K8ekcn8nx2Ryfy/H5HF/I8cUcX8rx5RxfyfHVHF/L8fUc38jxzRzfyvHtHN/J8d0c38vx/Rw/yPHDP0b6UY4f5/hJjp/m+FmOn+f4RY5f5vhVjl/n+E2O3+b4XY7f5/hDjj/m+FOOQxMNDf2S4685/pbj7zn+keOfOf6V4985/pPjvzmOHPV+gcMKHK3A0QscXuAYBY5Z4IgCxypw7ALHKXDcAscrcPwCJyhwwgInKnDiAicpcNICJytw8gKnKHDKAqcqcOoCpylw2gKnK3D6AmcocMYCZypw5gJnKXDWAmcrcPYC5yhwzgLnKnDuAucpcN4C5ytw/gIXKHDBAhcqkAIXLnCRAhctcLECFy9wiQKXLHCpApcucJmCoVH1Llfg8gWuUOCKBa5U4MoFrlLgqgWuVuDqBa5R4JoFrlXg2gWuU+C6Ba5X4PoFblDghgVuVODGBW5S4KYFblbg5gVuUeCWBW5V4NYFblPgtgVuV+D2Be5Q4I4F7lTgzgXuUuCuBe5W4O4F7lHgngXuVeDeBe5T4L4F7lfg/gUeUOCBBR5U4MEFHlLgoQUeVuDhBR5R/OcbdeTIkccfXaAFHlPgsQUeV+DxBZ5Q4IkFnlTgyQUOCgwKDAuMCowLTApMC8wKzAssCiwLrAqsC2wKbAvsCuwLPKXAUws8rcDTCzyjwDMLPKvAsws8p8BzCzyvwPMLvKDACwu8qMCLC7ykwEsLvKzAywu8osArC7yqwKsLvKbAawu8rsDrC7yhwBsLvKnAmwu8pcBbC7ytwNsLvKPAOwu8q8C7C7ynwHsLvK/A+wt8oMAHC3yowIcLfKTARwt8rMDHC3yiwCcLfKrApwt8psBnC3yuwOcLfKHAFwt8qcCXC3ylwFcLfK3A1wt8o8A3C3yrwLcLfKfAdwt8r8D3C/ygwA8L/KjAjwv8pMBPC/yswM8L/KLALwv8qsCvC/ymwG8L/K7A7wv8ocAfC/ypwJ8L/KXAXwv8rcDfC/yjwD8L/KvAvwv8p8B/R3mjwKESh5U4Womjlzi8xDFKHLPEESWOVeLYJY5T4rgljlfi+CVOUOKEJU5U4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlQiJS5c4iIlLlriYiUuXuISJS5Z4lIlLl3iMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDuUwdyxxpxJ3LnGXEnctcbcSdy9xjxL3LHGvEvcucZ8S9y1xvxL3L/GAEg8s8aASDy7xkBIPLfGwEg8v8YgSjyzxqBKPLtESjynx2BKPK/H4Ek8o8cQSTyrx5BIHJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYlnlLiqSWeVuLpJZ5R4pklnlXi2SWeU+K5JZ5X4vklXlDihSVeVOLFJV5S4qUlXlbi5SVeUeKVJV5V4tUlXlPitSVeV+L1Jd5Q4o0l3lTizSXeUuKtJd5W4u0l3lHinSXeVeLdJd5T4r0l3lfi/SU+UOKDJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4p8l/lXi3yX+U+K/JY4scajCYRWOVuHoFQ6vcIwKx6xwRIVjVTh2heNUOG6F41U4foUTVDhhhRNVOHGFk1Q4aYWTVTh5hVNUOGWFU1U4dYXTVDhthdNVOH2FM1Q4YzXW0EwVzlzhLBXOWuFsFc5e4RwVzlnhXBXOXeE8Fc5b4XwVzl/hAhUuWOFCFVLhwhUuUuGiFS5W4eIVLlHhkhUuNTR8aFSdy1S4bIXLVbh8hStUuGKFK1W4coWrVLhqhatVuHqFa1S4ZoVrVbh2hetUuG6F61W4foUbVLhhhRtVuHGFm1S4aYWbVbh5hVtUuGWFW1W4dYXbVLhthdtVuH2FO1S4Y4U7VbhzhbtUuGuFu1W4e4V7VLhnhXtVuHeF+1S4b4X7Vbh/hQdUeGCFB1V4cIWHVHhohYdVeHiFR1R4ZIVHVXh0hVZ4TIXHVnhchcdXeEKFJ1Z4UoUnVzioMKgwrDCqMK4wqTCtMKswr7CosKywqrAe5ZMhbCvsKuwrPKXCUys8rcLTKzyjwjMrPKvCsys8p8JzKzyvwvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrK7yqwqsrvKbCayu8rsLrK7yhwhsrvKnCmyu8pcJbK7ytwtsrvKPCOyu8q8K7K7ynwnsrvK/C+yt8oMIHK3yowocrfKTCRyt8rMLHK3yiwicrfKrCpyt8psJnKxw5Ymjo+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N9R+Vc4VOOwGkercfQah9c4Ro1j1jiixrFqHLvGcWoct8bxahy/xglqnLDGiWqcuMZJapy0xslqnLzGKWqcssapapy6xmlqnLbG6WqcvsYZapyxxplqnLnGWWqctcbZapy9xjlqnLPGuWqcu8Z5apy3xvlqnL/GBWpcsMaFamRUDUNDQ4vUuGiNi9W4eI1L1LhkjUvVuHSNy9S4bI3L1bh8jSvUuGKNK9W4co2r1LhqjavVuHqNa9S4Zo1r1bh2jevUuG6N69W4fo0b1LhhjRvVuHGNm9S4aY2b1bh5jVvUuGWNW9W4dY3b1LhtjdvVuH2NO9S4Y4071bhzjbvUuGuNu9W4+7BhJwwN4Z417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1WuMxNR5b43E1Hl/jCTWeWONJNZ5c46DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7GvsZTajy1xtNqPL3GM2o8s8azajy7xnNqPLfG82o8v8YLarywxotqvLjGS2q8tMbLary8xitqvLLGq2q8usZrary2xutqvL7GG2q8scabary5xltqvLVmpqGhIW+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrPGhGh+u8ZEaH63xsRofr/GJGp+s8akan67xmRqfrfG5Gp+v8YUaX6zxpRpfrvGVGl+t8bUaX6/xjRrfrPGtGt+u8Z0a363xvRrfr/GDGj+s8aMaP67xkxo/rfGzGj+v8Ysav/zvbH5d4zc1flvjdzV+X+MPNf5Y4081/lzjLzX+WuNvNf5e4x81/lnjXzX+XeM/Nf5b48gahxoc1uBoDY7e4PAGx2hwzAZHNDhWg2M3OE6D4zY4XoPjNzhBgxM2OFGDEzc4SYOTNjhZg5M3OEWDUzY4VbPyf1e6OG2D0zU4fYMzNDhjgzM1OHODszQ4a4OzNTh7g3M0OGeDczU4d4PzNDhvg/M1OH+DCzS4YIMLNUiDCze4SIOLNrhYg4s3uESDSza4VINLN7hMg8s2uFyDy4/SfABXbHClBlducJUGV21wtQZXb3CNBtdscK0G125wnQbXbXC9BtdvcIMGN2xwowY3bnCTBjdtcLMGN29wiwa3bHCrBrducJsGt21wuwa3b3CHBndscKcGd25wlwZ3bXC3BndvcI8G92xwrwb3bnCfBvdtcL8G92/wgAYPbPCgBg9u8JAGD23wsAYPb/CIBo9s8KgGj27QBo9p8NgGj2vw+AZPaPDEBk9q8OQGBw0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNjvzrP8uGUxo8tcHTGjy9wTMa/N9i/+wGz2nw3AbPa/D8Bi9o8MIGL2rw4uF4SYOXNnhZg5c3jPzvT8he1eDVDV7T4LUNXtfg9Q3e0DDif+cGNzd4S4O3Nnhbg7c3eEeDdzZ4V4N3N3hPg/c2eF+D9zf4QIMPNvhQgw83+EiDjzb4WIOPN/hEg082+FSDTzf4TIPPNvhcg883+EKDLzb4UoMvN/hKg682+FqDrzf4RoNvNvhWg283+E6D7zb4XoPvN/hBgx82+FGDHzf4SYOfNvhZg583+EWDXzb4VYNfN/hNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg382+FeDfzf4T4P/Dh9y5CguLQ5rcbQWR29xeItjtDhmiyNaHGvUdeSE/+lui+O1OH6LE4wc+X/3E7U4cYuTtDhpi5O1OHmLU7Q4ZYtTtTh1i9O0OG2L07U4fYsztDhjizO1OHOLs7Q4a8tooxjO3uIcLc7Z4lwtzt3iPC3O2+J8Lc7f4gItLtjiQi3S4sItLtLioi0u1uLiLS7R4pItLtXi0i0u0+KyLS7X4vItrtDiii2u1OLKLa7S4qotrtbi6i2u0eKaLa7V4totrtPiui2u1+L6LW7Q4oYtbtTixi1u0uKmLW7W4uYtbtHili1u1eLWLW7T4rYtbtfi9i3u0OKOLe7U4s4t7tLiri3u1uLuLe7R4p4t7tXi3i3u0+K+Le7X4v4tHtDigS0e1OLBLR7S4qEtHtbi4S0e0eKRLR7V4tEt2uIxLR7b4nEtHt/iCS2e2OJJLZ7c4qDFoMWwxajFuMWkxbTFrMW8xaLFssWqxbrFpsW2xa7FvsVTWjy1xdNaPL3FM1o8s8WzWjy7xXNaPLfF81o8v8ULWrywxYtavLjFS1q8tMXLWry8xStavLLFq1q8usVrWry2xetavL7FG1q8scWbWry5xVtavLXF21q8vcU7WryzxbtavLvFe1q8t8X7Wry/xQdafLDFh1p8uMVHWny0xcdafLzFJ1p8ssWnWny6xWdafLbF51p8vsUXWnyxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxa9a/LrFb1r8tsXvWvy+xR9a/LHFn1r8ucVfWvy1xd9a/L3FP1r8s8W/Wvy7xX9a/LfFkS0OdTisw9E6HL3D4R2O0eGYHY7ocKwOx+5wnA7H7XC8DsfvcIIOJ+xwog4n7nCSDiftcLIOJ+9wig6n7HCqDqfucJoOp+1wug6n73CGDmfscKYOZ+5wlg5n7XC2DmfvcI4O5+xwrg7n7nCeDuftcL4O5+9wgQ4X7HChDulw4Q4X6XDRDhfrcPEOl+hwyQ6X6nDpDpfpcNkOl+tw+Q5X6HDFDlfqcOUOV+lw1Q5X63D1DtfocM0O1+pw7Q7X6XDdDtfrcP0ON+hwww436nDjDjfpcNMON+tw8w636HDLDrfqcOsOt+lw22FDbtfh9h3u0OGOHe7U4c4d7tLhrh3u1uHuHe7R4Z4d7tXh3h3u0+G+He7X4f4dHtDhgR0e1OHBHR7S4aEdHtbh4R0e0eGRHR7V4dEd2uExHR7b4XEdHt/hCR2e2OFJHZ7c4aDDoMOww6jDuMOkw7TDrMO8w6LDssOqw7rDpsO2w67DvsNTOjy1w9M6PL3DMzo8s8OzOjy7w3M6PLfD8zo8v8MLOryww4s6vLjDSzq8tMPLOry8wys6vLLDqzq8usNrOry2w+s6vL7DGzq8scObOry5w1s6vLXD2zq8vcM7Oryzw7s6vLvDezq8t8P7Ory/wwc6fLDDhzp8uMNHOny0w8c6fLzDJzp8ssOnOny6w2c6fLbD5zp8vsMXOnyxw5c6fLnDVzp8tcPXOny9wzc6fLPDtzp8u8N3Ony3w/c6fL/DDzr8sMOPOvy4w086/LTDzzr8vMMvOvyyw686/LrDbzr8tsPvOvy+wx86/LHDnzr8ucNfOvy1w986/L3DPzr8s8O/Ovy7w386/LfDkR0O9Tisx9F6HL3H4T2O0eOYPY7ocawex+5xnB7H7XG8HsfvcYIeJ+xxoh4n7nGSHiftcbIeJ+9xih6n7HGqHqfucZoep+1xuh6n73GGHmfscaYeZ+5xlh5n7XG2HmfvcY4e5+xxrh7n7nGeHuftcb4e5+9xgR4X7HGhHulx4R4X6XHRHhfrcfEel+hxyR6X6nHpHpfpcdkel+tx+R5X6HHFHlfqceUeV+lx1R5X63H1Htfocc0e1+px7R7X6XHdHtfrcf0eN+hxwx436nHjHjfpcdMeN+tx8x636HHLHrfqceset+lx25lwux6373GHHnfscaced+5xlx537XG3nj9H9rhHj3v2uFePe/e4T4/79rhfj/v3eECPB445NDSK4cE9HtLjoT0e1uPhPR7R45E9HtXj0T3a4zE9HtvjcT0e3+MJPZ7Y40k9ntzjoMegx7DHqMe4x6THtMesx7zHoseyx6rHusemx7bHrse+x1N6PLXH03o8vcczejyzx7N6PLvHc3o8t8fzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserery6x2t6vLbH63q8vscberyxx5t6vLnHW3q8tcfbery9xzt6vLPHu3q8u8d7ery3x/t6vL/HB3p8sMeHeny4x0d6fLTHx3p8vMcnenyyx6d6fLrHZ3p8tsfneny+xxd6fHHoPxxe7vGVHl/t8bUeX+/xjR7f7PGtHt/u8Z0e3+3xvR7f7/GDHj/s8aMeP+7xk/7/EXXO0WNd3dZO0jRNatt2+9S2bdu2n7ZJbf+OjdS2bdu2bSTf6Pu9997/z1jjrD3n2GvNufbYGz8dwM8G8PMB/GIAvxzArwbw6wH8ZgC/HcDvBvD7AfxhAH8cwJ8G8OcB/GUAfx3A3wbw9wH8YwD/HMC/BvDvAfxnAMcM4L8cGxTg4ACHBDhOgEMDHDfAYQGOF+DwAEcEOH6AEwQ4YYATBThxgJMEOGmAkwU4eYBTBDhlgFMFOHWA0wQ4bYDTBTh9gDMEOGOAMwU4c4CzBDhrwPB//2H2AOcIcM4A5wpw7gDnCXDeAOcLcP4AFwhwwQAXCnDhABcJcNEACXCxABcPcIkAlwxwqQCXDnCZAJcNcLkAlw9whQBXDHClAFcOcJUAVw1wtQBXD3CNANcMcK0A1w5wnQDXDXC9ANcPcIMANwxwowA3DnCTADcNcLMANw9wiwC3DHCrALcOcJsAtw1wuwC3D3CHAHcMcKcAdw5wlwB3DXC3AHcPcI8A9wxwrwD3DnCfAPcNcL8A9w/wgAAPDPCgAA8O8JAADw3wsAAPD/CIAI8M8KgAjw5GDTomwGMDPC5AAzw+wBMCPDHAkQGOCvCkAE8O8JQATw3wtABPD/CMAM8M8KwAzw7wnADPHflfpR3gBQFeGOBFAV4c4CUBDgQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYBzg6wEsDvCzAywO8IsArA7wqwKsDxv0frX9dgNcHeEOANwZ4U4A3B3hLgLcGeFuAtwd4R4B3BnhXgHcHeE+A9wZ4X4D3B/hAgA8G+FCADwf4SICPBvhYgI8H+ESATwb4VIBPB/hMgM8G+FyAzwf4QoAvBvhSgC8H+EqArwb4WoCvB/hGgG8G+FaAbwf4ToDvBvhegO8H+EGAHwb4UYAfB/hJgJ8G+FmAnwf4RYBfBvhVgF8H+E2A3wb4XYDfB/hDgD8G+FOAPwf4S4C/BvhbgL8H+EeAfwb4V4B/B/hPgGMCHBvgoBAHhzgkxHFCHBriuCEOC3G8EIeHOCLE8UOcIMQJQ5woxIlDnCTESUOcLMTJQ5wixClDnCrEqUOcJsRpQ5wuxOlDnCHEGUOcKcSZQ5wlxFlDnC3E2UOcI8Q5Q5wrxLlDnCfEeUOcL8T5Q1wgxAVDXCjEhUNcJMRFQyTExUJcPMQlQlwyxKVCXDrEZUJcNsTlQlw+xBXCEf/rR64c4iohrhriaiGuHuIaIa4Z4lohrh3iOiGuG+J6Ia4f4gYhbhjiRiFuHOImIW4a4mYhbh7iFiFuGeJWIW4d4jYhbhvidiFuH+IOIe4Y4k4h7hziLiHuGuJuIe4e4h4h7hniXiHuHeI+Ie4b4n4h7h/iASEeGOJBIR4c4iEhHhriYSEeHuIRIR4Z4lEhHh3iMSEeG+JxIRri8SGeEOKJIY4McVSIJ4V4coinhHhqiKeFeHqIZ4R4ZohnhXh2iOeEeG6I54V4fogXhHhhiBeFeHGIl4Q4EGIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2If4ugQLw3xshAvD/GKEK8M8aoQrw7xmhCvDfG6EK8P8YYQbwzxphBvDvGWEG8N8bYQBz3vOHeEeGeId4V4d4j3hHhviPeFeH+ID4T4YIgPhfhwiI+E+GiIj4X4eIhPhPhkiE+F+HSIz4T4bIjPhfh8iC+E+GKIL4X4coivhPhqiK+F+HqIb4T4Zohvhfh2iO+E+G6I74X/2cv8IMQPQ/woxI9D/CTET0P8LMTPw8F+EeKXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIf4W4u8h/hHinyH+FeLfIf4T4pgQx/67PhEOjnBIhONEODTCcSMcFuF4EQ6PcESE40c4QYQTRjhRhBNHOEmEk0Y4WYSTRzhFhFNGOFWEU0c4TYTTRjhdhNNHOEOEM0Y4U4QzRzhLhLNGOFuEs0c4R4RzRjhXhHNHOE+E80Y4X4TzR7hAhAtGuFCEC0e4SISLRkiEi0W4eIRLRLhkhEtFuHSEy0S4bITLRbh8hCtEuGKEK0W4coSrRLhqhKtFuHqEa0S4ZoRrRbh2hOtEuG6E60W4foQbRLhhhBtFuHGEm0S4aYSbRbh5hFtEuGWEW0W4dYTbRLhthNtFuH2EO0S4Y4Q7RbhzhLtEuGuEu0W4e4R7RLhnhHtFuHeE+0S4b4T7Rbh/hAdEeGCEB0V4cISHRHhohIdFeHiER0R4ZIRHRXh0hMdEeGyEx0VohMdHeEKEJ0Y4MsJREZ4U4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+FfEZ4X4fkRXhDhhRFeFOHFEV4S4UCEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYSjI7w0wssivDzCKyK8MsKrIrw6wmsivDbC6yK8PsIbIrwxwpsivDnCWyK8NcLbIrw9wjsivDPCuyK8O8J7Irw3wvsivD/CByJ8MMKHInw4wkcifDTCx6Jh/6kTT0T4ZIRPRfh0hM9E+GyEz0X4fDTkP9+8GOFLEb4c4SsRvhrhaxG+HuEbEb4Z4VsRvh3hOxG+G+F7Eb4f4QcRfhjhRxF+HOEnEX4a4WcRfh7hFxF+GeFXEX4d4TcRfhvhdxF+H+EPEf4Y4U8R/hzhLxH+GuFvEf4e4R8R/vlf7P6O8J8Ix0Q4NsJBMQ6OcUiM48Q4NMZxYxwW43gxDo9xRIzjxzhBjBPGOFGME8c4SYyTxjhZ/MGgyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjXCTGRWMkxsViXDzGJWJcMsalYlw6xmViXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjw2xuNiNMbjYzwhxhNjHBnjqBhPivHkGE+J8dQYT4vx9BjPiPHMGM+K8ewYz4nx3BjPi/H8GC+I8cIYL4rx4hgviXEgxiDGMMYoxjjGJMY0xizGPMYixjLGKsY6xibGNsYuxj7G0TFeGuNlMV4e4xUxXhnjVTFeHeM1MV4b43UxXh/jDTHeGONNMd4c4y0x3hrjbTHeHuMdMd4Z410x3h3jPTHeG+N9Md4f4wMxPhjjQzE+HOMjMT4a42MxPh7jEzE+GeNTMT4d4zMxPhvjczE+H+MLMb4Y40sxvhzjKzG+GuNrMb4e4xsxvhnjWzG+HeM7Mb4b43sxvh/jBzF+GONHMX4c4ycxfhrjZzF+HuMXMX4Z41cxfh3jNzF+G+N3MX4f4w8x/hjjTzH+HOMvMf4a428x/h7jHzH+GeNfMf4d4z8xjolxbIyDEhyc4JAEx0lwaILjJjgswfESHJ7giATHT3CCZLL/7Z0nTnCSBCdNcLIEJ09wigSnTHCqBKdOcJoEp01wugSnT3CGBGdMcKYEZ05wlgRnTXC2BGdPcI4E50xwrgTnTnCeBOdNcL4E509wgQQXTHChBBdOcJEEF02QBBdLcPEEl0hwyQSXSnDpBJdJcNkEl0tw+QRXSHDFBFdKcOUEV0lw1QRXS3D1BNdIcM0E10pw7QTXSXDdBNdLcP0EN0hwwwQ3SnDjBDdJcNMEN0tw8wS3SHDLBLdKcOsEt0lw2wS3S3D7BHdIcMcEd0pw5wR3SXDXBHdLcPcE90hwzwT3SnDvBPdJcN8E90tw/wQPSPDABA9K8OAED0nw0AQPS/DwBI9I8MgEj0rw6ASPSfDYBI9L0ASPT/CEBE9McGSCoxI8KcGTEzwlwVMTPC3B0xM8I8EzEzwrwbMTPCfBcxM8L8HzE7wgwQsTvCjBixO8JMGBBIMEwwSjBOMEkwTTBLME8wSLBMsEqwTrBJsE2wS7BPsERyd4aYKXJXh5glckeGWCVyV4dYLXJHhtgtcleH2CNyR4Y4I3JXhzgrckeGuCtyV4e4J3JHhngncleHeC9yR4b4L3JXh/gg8k+GCCDyX4cIKPJPhogo8l+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJPhlgl8l+HWC3yT4bYLfJfh9gj8k+GOCPyX4c4K/JPhrgr8l+HuCfyT4Z4J/Jfh3gv8kOCbBsQkOSnFwikNSHCfFoSmOm+KwFMdLcXiKI1IcP8UJUpwwxYlSnDjFSVKcNMX1hg8aNHmKU6Q4ZYpTpTh1itOkOG2K06U4fYozpDhjijOlOHOKs6Q4a4qzpTh7inMMG+ScKc6V4twpzpPivCnOl+L8KS4wCBdMcaEUF05xkRQXTZEUF0tx8RSXSHHJFJdKcekUl0lx2RSXS3H5FFdIccUUV0px5RRXSXHVFFdLcfUU10hxzRTXSnHtFNdJcd1/c0xx/RQ3SHHDFDdKceMUN0lx0xQ3S3HzFLdIccsUt0px6xS3SXHbFLdLcfsUd0hxxxR3SnHnFHdJcdcUd0tx9xT3SHHPFPdKce8U90lx3xT3S3H/FA9I8cAUD0rx4BQPSfHQFA9L8fAUj0jxyBSPSvHoFI9J8dgUj0vRFI9P8YQUT0xxZIqjUjwpxZNTPCXFU1M8LcXTUzwjxTNTPCvFs1M8J8VzUzwvxfNTvCDFC1O8KMWLU7wkxYEUgxTDFKMU4xSTFNMUsxTzFIsUyxSrFOsUmxTbFLsU+xRHp3hper2XpXh5ilekeGWKV6V4dYrXpHhtiteleH2KN6R4Y4o3pXhzirekeGuKt6V4e4p3pHhnineleHeK96R4b4r3pXh/ig+k+GCKD6X4cIqPpPhoio+l+HiKT6T4ZIpPpfh0is+k+GyKz6X4fIovpPhiii+l+HKKr6T4aoqvpfh6im+k+GaKb6X4dorvpPhuiu+l+H6KH6T4YYofpfhxip+k+GmKn6X4eYpfpPhlil+l+HWK36T4bYrfpfh9ij+k+GOKP6X4c4q/pPhrir+l+HuKf6T4Z4p/pfh3iv+kOCbFsSkOynBwhkMyHCfDoRmOm+GwDMfLcHiGIzIcP8MJMpwww4kynDjDSTKcNMPJMpw8wykynDLDqTKcOsNpMpw2w+kynD7DGTKcMcOZMpw5w1kynDXD2TKcPcM5Mpwzw7kynDvDeTKcN8P5Mpw/wwUyXDDDhTJcOMNFMlw0QzJcLMPFM1wiwyUzXCrDpTNcJsNlM1wuw+UzXCHDFTNcKcOVM1wlw1UzXC3D1TNcI8M1M1wrw7UzXCfDdTNcL8P1M9wgww0z3CjDjTPcJMNNM9wsw80z3CLDLTPcKsOtM9wmw20z3C7D7TPcIcMdM9wpw50z3CXDXTPcLcPdM9wjG+meGe6V4d4Z7pPhvhnul+H+GR6Q4YEZHpThwRkekuGhGR6W4eEZHpHhkRkeleHRGR6T4bEZHpehGR6f4QkZnpjhyAxHZXhShidneEqGp2Z4WoanZ3hGhmdmeFaGZ2d4TobnZnhehudneEGGF2Z4UYYXZ3hJhgMZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ9hmOzvDSDC/L8PIMr8jwygyvyvDqDK/J8NoMr8vw+gxvyPDGDG/K8OYMb8nw1gxvy/D2DO/I8M4M78rw7gzvyfDeDO/L8P4MH8jwwQwfyvDhDB/J8NEMH8vw8QyfyPDJDJ/K8OkMn8nw2Qyfy/D5DF/I8MUMX8rw5QxfyfDVDF/L8PUM38jwzQzfyvDtDN/J8N0M38vw/Qw/yPDDDD/K8OMMP8nw0ww/y/DzDL/I8MsMv8rw6wy/yfDbDL/L8PsMf8jwxwx/yvDnDH/J8NcMf8vw9wz/yPDPDP/K8O8M/8lwTIZjMxyU4+Ach+Q4To5Dcxw3x2E5jpev4vAcR+Q4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnjnPlOHeO8+Q4b47z5Th/jgvkuGCOC+W4cI6L5LhojuS4WI6L57hEjkvmuFSOS+e4TI7L5rhcjsvnuEKOK+a4Uo4r57hKjqvmuFqOq+e4Ro5r5rhWjmvnuE6O6+a4Xo7r57hBjhvmuFGOG+e4SY6b5rhZjpvnuEWOW+YMHvrfGdU2OW6b43Y5bp/jDjnumONOOe6c4y457prjbjnunuMeOe6Z41457p3jPjnum+N+Oe6f4wE5HpjjQTkenOMhOR6a42E5Hp7jETkemeNROR6d4zE5HpvjcTma4/E5npDjiTmOzHFUjifleHKOp+R4ao6n5Xh6jmfkeGaOZ+U4duyYsefkeG6O5+V4fo4X5HhhjhfleHGOl+Q4kGOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2Of4+gcL83xshwvz/GKHK/M8aocr87xmhyvzfG6HK/P8YYcb8zxphxvzvGWHG/N8bYcb8/xjhzvzPGuHO/O8Z4c783xvhzvz/GBHB/M8aEcH87xkRwfzfGxHB/P8Ykcn8zxqRyfzvGZHJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387xnRzfzfG9HN/P8YMcP8zxoxw/zvGTHD/N8bMcP8/xixy/zPGrHL/O8Zscv83xuxy/z/GHHH/M8accf87xlxx/zfG3HH/P8Y8c/8zxrxz/zvGfHMf8i2mOgwocXOCQAscpcGiB4xY4rMDxChxe4IgCxy9wggInLHCiAicucJICJy1wsgInL3CKAqcscKoCpy5wmgKnLXC6AqcvcIYCZyxwpgJnLnCWAmctcLYCZy9wjgLnLHCuAucucJ4C5y1wvgLnL3CBAhcscKECFy5wkQIXLZACFytw8QKXKHDJApcqcOkClylw2QKXK3D5AlcocMUCVypw5QJXKXDVAlcrcPUC1yhwzQLXKnDtAtcpcN0C1ytw/QI3KHDDAjcqcOMCNylw0wI3K3DzArcocMsCtypw6wK3KXDbArcrcPsCdyhwxwJ3KnDnAncpGPw/8+zdC9yjwD0L3KvAvQvcp8B9C9yvwP0LPKDAAws8qMCDCzykwEMLPKzAwws8osAjCzyqwKMLPKbAYws8rkALPL7AEwo8scCRBY4q8KQCTy7wlAJPLfC0Ak8v8IwCzyzwrALPLvCcAs8t8LwCzy/wggIvLPCiAi8u8JICBwoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsCxxd4KUFXlbg5QVeUeCVBV5V4NUFXlPgtQVeV+D1Bd5Q4I0F3lQw5OYCbynw1gJvK/D2Au8o8M4C7yrw7gLvKfDeAu8r8P4CHyjwwQIfKvDhAh8p8NECHyvw8QKfKPDJAp8q8OkCnynw2QKfK/D5Al8o8MUCXyrw5QJfKfDVAl8r8PUC3yjwzQLfKvDtAt8p8N0C3yvw/QI/KPDDAj8q8OMCPynw0wI/K/DzAr8o8MsCvyrw6wK/KfDbAr8r8PsCfyjwxwJ/KvDnAn8p8NcCfyvw9wL/KPDPAv8q8O8C/ylwTIFjCxxU4uASh5Q4TolDSxy3xGEljlfi8BJHlDh+iROUOGGJE5U4cYmTlDhpiZOVOHmJU5Q4ZYlTlTh1idOUOG2J05U4/QicocQZS5ypxJlLnKXEWUucrcTZS5yjxDlLnKvEuUucp8R5S5yvxPlLXKDEBUtcqMSFS1ykxEVLpMTFSly8xCVKXLLEpUpcusRlSly2xOVKXL7EFUpcscSVSly5xFVKXLXE1UpcvcQ1SlyzxLVKXLvEdUpct8T1Sly/xA1K3LDEjUrcuMRNSty0xM1K3LzELUrcssStSty6xG1K3LbE7UrcvsQdStyxxJ1K3LnEXUrctcTdSty9xD1K3PNfDAYNGrR3ifuUuG+J+5W4f4kHlHhgiQeVeHCJh5R4aImHlXh4iUeUeGSJR5V4dInHlHhsiceVaInHl3hCiSeWOLLEUSWeVOLJJZ5S4qklnlbi6SWeUeKZJZ5V4tklnlPiuSWeV+L5JV5Q4oUlXlTixSVeUuJAiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2Jo0u8tMTLSry8xCtKvLLEq0q8usRrSry2xOtKvL7EG0q8scSbyv97r+DWEm8r8fYS7yjxzhLvKvHuEu8p8d4S7yvx/hIfKPHBEh8q8eESHynx0RIfK/HxEp8o8ckSnyrx6RKfKfHZEp8bhc+X+EKJL5b4Uokvl/hKia+W+FqJr5f4RolvlvhWiW+X+E6J75b4Xonvl/hBiR+W+FGJH5f4SYmflvhZiZ+X+EWJX5b4VYlfl/hNid+W+F05duz/+PE/lvhTiT+X+EuJv5b4W4m/l/hHiX+W+FeJf5f4T4ljShxb4qAKB1c4pMJxKhxa4bgVDqtwvAqHVziiwvErnKDCCSucqMKJK5ykwkkrnKzCySucosIpK5yqwqkrnKbCaSucrsLpK5zh33iDBg2aqcKZK5ylwlkrnK3C2Suco8I5K5yrwrkrnKfCeSucr8L5K1ygwgUrXKjChStcpMJFK6TCxSpcvPr/98YuWeFSFS5d4TIVLlvhchUuX+EKFa5Y4UoVrlzhKhWuWuFqFa5e4RoVrlnhWhWuXeE6Fa5b4XoVrl/hBhVuWOFGFW5c4SYVblrhZhVuXuEWFW5Z4VYVbl3hNhVuW+F2FW5f4Q4V7ljhThXuXOEuFe5a4W4V7l7hHhXuWeFeFe5d4T4V7lvhfhXuX+EBFR5Y4UEVHlzhIRUeWuFhFR5e4REVHlnhURUeXeExFR5b4XEVWuHxFZ5Q4YkVjqxwVIUnVXhyhadUeGqFp1V4eoVnVHhmhWdVeHaF51R4boXnVXh+hRdUeGGFF1V4cYWXVDhQYVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV/h6AovrfCyCi+v8IoKr6zwqgqvrvCaCq+t8LoKr6/whgpvrPCmCm+u8JYKb63wtgpvr/COCu+s8K4K767wngrvrfC+Cu+v8IEKH6zwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCr+s8KsKv67wmwq/rfC7Cr+v8IcKf6zwpwp/rvCXCn+t8LcKf6/wjwr/rPCvCv+u8J8Kx1Q4tsJBNQ6ucUiN49Q4tMZxaxxW43g1Dq9xRI3j1zhBjRPWOFGNE9c4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWSI2L1bh4jUvUuGSNS9W4dI3L1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1WiNx9d4Qo0n1jiyxlE1nlTjyTWeUuOpNZ5W4+k1nlHjmTWeVePZNZ5T47k1nlfj+TVeUOOFNV5U48U1XlLjQI1BjWG9yn/qUlxjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/j6BovrfGyGi+v8Yoar6zxqhqvrvGaGq+t8boar6/xhhpvrPGmGm+u8ZYab63xthpvr/GOGu+s8a4a767xnhrvrfG+Gu+v8YEaH6zxoRofrvGRGh+t8bEaH6/xiRqfrPGpGp+u8Zkan63xuRqfr/GFGl+s8aUaX67xlRpfrfG1Gl+v8Y0a36zxrRrfrvGdGt+t8b0a36/xgxo/rPGjGj+u8ZMaP63xsxo/r/GLGr+s8asav67xmxq/rfG7Gr+v8Ycaf6zxpxp/rvGXGn+t8bcaf6/xjxr/rPGvGv+u8Z8ax9Q4tsZBDQ5ucEiD4zQ4tMFxGxzW4HgNDm9wRIPjNzhBgxM2OFGDEzc4SYOTNjhZg5M3OEWDUzY4VYNTNzhNg9M2OF2D0zc4Q4MzNjhTgzM3OEuDszY4W4OzNzhHg3M2OFeDczc4T4PzNjhfg/M3uECDCza4UIMLN7hIg4s2SIOLNbh4g0s0uGSDSzW4dDP+4dnk/78/Wq7B5RtcocEVG1ypwZUbXKXBVRtcrcHVG1yjwTUbXKvBtRtcp2H4ug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfgoKG4Q4M7NrhTgzs3uEuDuza4W4O7N7hHg3s2uFeDeze4T4P7Nrhfg/s3eECDBzZ4UIMHN3hIg4c2eFiDhzd4RINHNnhUg0c3eEyDxzZ4XIM2eHyDJzR4YoMjGxzV4EkNntzgKQ2e2uBpDZ7e4BkNntngWQ2e3eA5DZ7b4HkNnt/gBQ1e2OBFDV7c4CUNDjQYNBg2GDUYN5g0mM6dmDWYN1g0WDZYNVg32DTYNtg12Dc4usFLG7yswcsbvKLBKxu8qsGrG7ymwWsbvK7B6xu8ocEbG7ypwZsbvKXBWxu8rcHbG7yjwTsbvKvBu4cMGvQv5+9t8L4G72/wgQYfbPChBh9u8JEGH23wsQYfb/CJBp9s8KkGn27wmQafbfC5Bp9v8IUGX2zwpQZfbvCVBl9t8LUGX2/wjQbfbPCtBt9u8J0G323wvQbfb/CDBj9s8KMGP27wkwY/bfCzBj9v8IsGv2zwqwa/bvCbBr9t8LsGv2/whwZ/bPCnBn9u8JcGf23wtwZ/b/CPBv9s8K8G/27wnwbHNDj2X062OLjFIS2O0+LQFsdtcViL47U4vMURLY7f4gQtTtjiRC1O3OIkLU7a4mQtTt7iFC1O2eJULU493iCnaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFmlxsRYXb3GJFpdscakWl25xmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBZt8fgWT2jxxBZHtjiqxZNaPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWjy3xfNaPL/FC1q8sMWLWry4xUtaHGgxaDFsMWoxbjFpMW0xazFvsWixbLFqsW6xabFtsWuxb3F0i5e2eFmLl7d4RYtXtnhVi1e3eE2L17Z4XYvXt3hDize2eFOLN7d4S4u3tnhbi7e3eEeLd7Z4V4t3t3hPi/e2eF+L97f4QIsPtvhQiw+3+EiLj7b4WIuPt/hEi0+2+FSLT7f4TIvPtvhci8+3+EKLL7b4Uosvt/hKi6+2+FqLr7f4RotvtvhWi2+3+E6L77b4Xovvt/hBy7+y2I9a/LjFT1r8tMXPWvy8xS/aoX7Z4lctft3iNy1+2+J3LX7f4g8t/tjiTy3+3OIvLf7a4m8t/t7iHy3+2eJfLf7d4j8tjmlxbIuDOhzc4ZAOx+lwaIfjdjisw/E6HN7hiA7H73CCDifscKIOJ+5wkg4n7XCyDifvcIoOp+xwqg6n7nCaDqftcLoOp+9whg5n7HCmDmfucJYOZ+1wtg5n73CODufscK4O5+5wng7n7XC+DufvcIEOF+xwoQ4X7nCRDhftkA4X63DxDpfocMnu/zz1ZTpctsPlOgb9m+sKHa7Y4UodrtzhKh2u2uFqHa7e4RodrtnhWh2u3eE6Ha7b4Xodrt/hBh1u2OFGHW7c4SYdbtrhZh1u3uEWHW7Z4VYdbt3hNh1u2+F2HW7f4Q4d7tjhTh3u3OEuHe7a4W4d7t7hHh3u2eFeHe7d4T4d7tvhfh3u3+EBHR7Y4UEdHtzhIR0e2uFhHR7e4REdHtnhUR0e3eExHR7b4XEd2uHxHZ7Q4YkdjuxwVIcndXhyh6d0eGqHp3V4eodndHhmh2d1eHaH53R4bofndXh+hxd0eGGHF3V4cYeXdDjQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd/h6A4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/sBv/v2dV7Ory3w/s6vL/DBzp8sMOHOny4w0c6fLTDxzp8vMMnOnyyw6c6fLrDZzp8tsPnOny+wxc6fLHDlzp8ucNXOny1w9c6fL3DNzp8s8O3Ony7w3c6fLfD9zp8v8MPOvyww486/LjDTzr8tMPPOvy8wy86/LLDrzr8usNvOvy2w+86/L7DHzr8scOfOvy5w186/LXD3zr8vcM/Ovyzw786/LvDfzoc0+HYDgf1OLjHIT2O0+PQHsftcViP4/U4vMcRPY7f4wQ9TtjjRD1O3OMkPU7a42Q9Tt7jFD1O2eNUPU7d4zQ9TtvjdD1O3+MMPc7Y40w9ztzjLP+NP1uPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/e4SI+L9kiPi/W4eI9L9Lhkj0v1uHSPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0eGyPx/Voj8f3eEKPJ/Y4ssdRPZ7U48k9ntLjqT2e1uPpPZ7R45k9ntXj2T2e0+O5PZ7X4/k9XtDjhT1e1OPFPV7S40CPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12PfY+je7z0v/hc3uMVPV7Z41U9Xt3jNT1e2+N1PV7f4w093tjjTT3e3OMtPd7a42093t7jHT3e2eNdPd7d4z093tvjfT3e3+MDPT7Y40M9PtzjIz0+2uNjPT7e4xM9PtnjUz0+3eMzPT7b43M9Pt/jCz2+2ONLPb7c4ys9vtrjaz2+3uMbPb7Z41s9vt3jOz2+2+N7Pb7f4wc9ftjjRz1+3OMnPX7a42c9ft7jFz1+2eNXPX7d4zc9ftvjdz1+3+MPPf7Y4089/tzjLz3+2uNvPf7e4x89/tnjXz3+3eM/PY7pcWyPg0bj4NE4ZDSOMxqHjsZxR+Ow0TjeaBw+GkeMxvFH4wSj/x9R7xw0+BF0bd8bbLSxbfOKbWdjc8ON7VybZDe2bf1s3LFt27bt/Srv87zvN//PTHXXOVUzXX364LAAJw1wsgAnD3CKAKcMcKoApw5wmgCnDXC6AKcPcIYAZwxwpgBnDnCWAGcNcLYAZw9wjgDnDP7fnPqx8wQ4b4DzBTh/gAsEuGCACwW4cICLBLhogIsFuHiASwRIgEsGuFSASwe4TMA4/8W1XIDLB7hCgCsGuFKAKwe4SoCrBrhagKsHuEaAawa4VoBrB7hOgOsGuF6A6we4QYAbBrhRgMMD3DjATQLcNMDNAtw8wC0C3DLArQLcOsBtAtw2wO0C3D7AHQLcMcCdAtw5wF0CHBHgrgHuFuDuAe4R4J4B7hXgyAD3DnCfAPcNcL8A9w/wgAAPDPCgAA8O8JAADw3wsAAPD/CIAI8M8KgAjw7wmACPDfC4AA1wVIDHB3hCgCcGODrAMQGeFODJAZ4S4KkBnhbg6QGeEeCZAZ4V4NkBnhPguQGeF+D5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBXhfg9QHeEOCNAd4U4M0B3hJgEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH+BggLcGeFuAtwd4R4B3BnhXgHcHeE+A9wZ4X4D3B/hAgA8G+FCADwf4SICPBvhYgI8H+ESATwb4VIBPB/hMgM8G+FyAzwf4QoAvBvhSgC8H+EqArwb4WoCvB/hGgG8G+FaAbwf4ToDvBvhegO8H+EGAHwb4UYAfB/hJgJ8G+FmAnwf4RYBfBvhVgF8H+E2A3wb4XYDfB/hDgD8G+FOAPwf4S4C/BvhbgL8H+EeAfwb4V4B/B/hPgP/+x7kAB0IcEuI4IY4b4nghjh/i0BAnCHHCECcKceIQJwlxWIiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Q4gzhjhTiDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T8jI/97t84U4f4gLhLhgiAuFuHCIi4S4aIiLhbh4iEuESIhLhrhUiEuHuEyIy4a4XIjLh7hCiCuGuFKIK4e4SoirhrhaiKuHuEaIa4a4Vohrh7hOiOuGuF6I64e4QYgbhrhRiMND3DjETULcNMTNQtw8xC1C3DLErULcOsRtQtw2xO1C3D7EHULcMcSdQtw5xF1CHBHiriHuFuLuIe4R4p4h7hXiyBD3DnGfEPcNcb8Q9w/xgBAPDPGgEA8O8ZAQDw3xsBAPD/GIEI8M8agQjw7xmBCPDfG4EA1xVIjHh3hCiCeGODrEMSGeFOLJIZ4S4qkhnhbi6SGeEeKZIZ4V4tkhnhPiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNId4U4s0h3hJiEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH+JgiLeGeFuIt4d4R4h3hnhXiHeHeE+I94Z4X4j3h/hAiA+G+FCID4f4SIiPhvhYiI+H+ESIT4b4VDjg0yE+E+KzIT4X4vMhvhDiiyG+FOLLIb4S4qshvhbi6yG+EeKbIb4V4tshvhPiuyG+F+L7IX4Q4ochfhTixyF+EuKnIX4W4uchfhHilyF+FeLXIX4T4rchfhfi9yH+EOKPIf4U4s8h/hLiryH+FuLvIf4R4p8h/hXi3yH+E+K/IY4NcSDCIRGOE+G4EY4X4fgRDo1wgggnjHCiCCeOcJIIh0U4aYSTRTh5hFNEOGWEU0U4dYTTRDhthNNFOH2EM0Q4Y4QzRThzhLNEOGuEs0U4e4RzRDhnhHNFOHeE80Q4b4TzRTh/hAtEuGCEC0W4cISLRLhohItFuHiES0RIhEtGuFSES0e4TITLRrhchMtHuEKEK0a4UoQrR7hKhKtGuFqEq0e4RoRrRrhWhGtHuE6E60a4XoTrR7hBhBtGuFGEwyPcOMJNItw0ws0i3DzCLSLcMsKtItw6wm0i3DbC7SLcPsIdItwxwp0i3DnCXSIcEeGuEe4W4e4R7hHhnhHuNXasIyPcO8J9Itw3wv0i3D/CAyI8MMKDIjw4wkMiPDTCwyI8PMIjIjwywqMiPDrCYyI8NsLjIjTCUREeH+EJEZ4Y4egIx0R4UoQnR3hKhKdGeFqEp0d4RoRnRnhWhGdHeE6E50Z4XoTnR3hBhBdGeFGEF0d4SYSXRnhZhJdHeEWEV0Z4VYRXR3hNhNdGeF2E10d4Q4Q3RnhThDdHeEuEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYSDEd4a4W0R3h7hHRHeGeFdEd4d4T0R3hvhfRHeH+EDET4Y4UMRPhzhIxE+GuFjET4e4RMRPhnhUxE+HeEzET4b4XMRPh/hCxG+GOFLEb4c4SsRvhrhaxG+HuEbEb4Z4VsRvh3hOxG++78cez/CDyL8MMKPIvw4wk8i/DTCzyL8PMIvIvwywq8i/DrCbyL8NsLvIvw+wh8i/DHCnyL8OcJfIvw1wt8i/D3CPyL8M8K/Ivw7wn8i/DfCsREOxDgkxnFiHDfG8WIcP8ahMU4Q44QxThTjxDFOEuOwGCcdGBj4b9/kMU4R45QxY6aKceoYp4lx2hini3H6GGeIGTLwP6UXZ45xlhhnjXG2GGePcY4Y54xxrhjnjnGeGOeNcb4Y549xgRgXjHGhGBeOcZEYF41xsRgXj3GJGIlxyRiXinHpGJeJcdkYl4tx+RhXiHHFGFeKceUYV4lx1RhXi3H1GNeIcc0Y14px7RjXiXHdGNeLcf0YN4hxwxg3inF4jBvHuEmMm8a4WYybx7hFjFvGuFWMW8e4TYzbxrhdjNvHuEOMO8a4U4w7x7hLjCNi3DXG3WLcPcY9Ytwzxr1iHBnj3jHuE+O+Me4X4/4xHhDjgTEeFOPBMR4S46ExHhbj4TEeEeORMR4V49ExHhPjsTEeF6Mxjorx+Ph//BL+W6NjHBPjSTGeHOMpMZ4a42kxnh7jGTGeGeNZMZ4dD/WcGM+N8bwYz4/xghgvjPGiGC+O8ZIYL43xshgvj/GKGK+M8aoYr47xmhivjfG6GK+P8YYYb4zxphhvjvGWGIP/8DcwMBDFGMeYxJjGmMWYx1jEWMZYxVjH2MTYxtjF2Mc4GOOtMd4W4+0x3hHjnTHeFePdMd4T470x3hfj/TE+EOODMT4U48MxPhLjozE+FuPjMT4R45MxPhXj0zE+E+OzMT4X4/MxvhDjizG+FOPLMb4S46sxvhbj6zG+EeObMb4V49sxvhPjuzG+F+P7MX4Q44cxfhTjxzF+EuOnMX4W4+cxfhHjlzF+FePXMX4T47cxfhfj9zH+EOOPMf4U488x/hLjrzH+FuPvMf4R458x/hXj3zH+E+O/MY4dDwcSHJLgOAmOm+B4CY6f4NAEJ0hwwgQnSnDiBCdJcFiCkyY4WYKTJzhFglMmOFWCUyc4TYLTJjhdgtMnOEOCMyY4U4IzJzhLgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIKLJrhYgosnuESCJLhkgksluHTCqGUSXDbB5RJcPsEVElwxwZUSXDnBVRJcNcHVElw9wTUSXDPBtRJcO8F1Elw3wfUSXD/BDRLcMMGNEhye4MYJbpLgpgluluDmCW6R4JYJbpXg1gluk+C2CW6X4PYJ7pDgjgnulODOCe6S4IgEd01wtwR3T3CPBPdMcK8ERya4d4L7JLhvgvsluH+CByR4YIIHJXhwgockeGiChyV4eIJHJHhkgkcleHSCxyR4bILHJWiCoxI8PsETEjwxwdEJjknwpARPTvCUBE9N8LQET0/wjATPTPCsBM9O8JwEz03wvATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTvCaBK9N8LoEr0/whgRvTPCmBG9O8JYEgwTDBKME4wSThLH/O3bQPMEiwTLBKsE6wSbBNsEuwT7BwQRvTfC2BG9P8I4E70zwrgTvTvCeBO9N8L4E70/wgQQfTPChBB9O8JEEH03wsQQfT/CJBJ9M8KkEn07wmQSfTfC5BJ9P8IUEX0zwpQRfTvCVBF9N8LUEX0/wjQTfTPCtBN9O8J0E303wvQTfT/CDBD9M8KMEP07wk7En+mmCnyX4eYJfJPhlgl8l+HWC3yT4bYLfJfh9gj8k+GOCPyX4c4K/JPhrgr8l+HuCfyT4Z4J/Jfh3gv8k+G+CYxMcSHFIiuOkOG6K46U4fopDU5wgxQlTnCjFiVOcJMVhKU6a4mQpTp7iFClOmeJUKU6d4jQpTpvidClOn+IMKc6Y4kwpzpziLCnOmuJsKc6e4hwpzpniXCnOneI8Kc6b4nwpzp/iAikumOJCKS6c4iIpLpriYikunuISKZLikikuleLSKS6T4rIpLpfi8imukOKKKa6U4soprpLiqimuluLqKa6RMmR0imuluHaK66S4borrpbh+ihukuGGKG6U4PMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcURKe6a4m4p7p7iHinumeJeKY5Mce8U90lx3xT3S3H/FA9I8cAUD0rx4BQPSfHQFA9L8fAUj0jxyBSPSvHoFI9J8dgUj0vRFEeleHyKJ6R4Yor/xT0mxZNSPDnFU1I8NcXTUjw9xTNSPDPFs1I8O8VzUjw3xfNSPD/FC1K8MMWLUrw4xUtSvDTFy1K8PMUrUrwyxatSvDrFa1K8NsXrUrw+xRtSvDHFm1K8Od1v2C0pBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ikOpnhrireleHuKd6R4Z4p3pXh3ivekeG+K96V4f4oPpPhgig+l+HCKj6T4aIqPpfh4ik+k+GSKT6X4dIrPpPhsis+l+HyKL6T4Yoovpfhyiq+k+GqKr6X4eopvpPhmim+l+HaK76T4borvpfh+ih+k+GGKH6X4cYqfpPhpip+lqw98nuIXKX6Z4lcpfp3iNyl+m+J3KX6f4g8p/pjiTyn+nOIvKf6a4m8p/p7iHyn+meJfKf6d4j8p/pvi2BQHMhyS4TgZjpvheBmOn+HQDCfIcMIMJ8pw4gwnyXBYhpNmOFmGk2c4RYZTZjhVhlNnOE2G02Y4XYbTZzhDhjNmOFOGM2c4S4azZjhbhrNnOEeGc2Y4V4ZzZzhPhvNmOF+G82e4QIYLZrhQhgtnuEiGi2aMWSzDxTNcIkMyXDLDpTJcOsNlMlw2w+UyXD7DFTJcMcOVMlw5w1UyXDXD1TJcPcM1Mlwzw7UyXDvDdTJcN8P1Mlw/ww0y3DDDjTIcnuHGGW6SMWTTDDfLcPMMt8hwywy3ynDrDLfJcNsMt8tw+wx3yHDHDHfKcOcMd8lwRIa7ZrhbhrtnuEeGe2a4V4YjM9w7w30y3DfD/TLcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjw2w+MyNMNRGR6f4QkZnpjh6AzHZHhShidneEqGp2Z4WoanZ3hGhmdmeFaGZ2d4TobnZnhehudneEGGF2Z4UYYXZ3hJhpdmeFmGl2d4RYZXZnhVhldneE2G12Z4XYbXZ3hDhjdmeFOGN2d4S4ZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ9hoMZ3prhbRnenuEdGd6Z4V0Z3p3hPRnem+F9Gd6f4QMZPpjhQxk+nOEjGT6a4WMZPp7hExk+meFTGT6d4TMZPpvhcxk+n+ELGb6Y4UsZvpzhKxm+muFrGb6e4RsZvpnhWxm+neE7Gb6b4XsZvp/hBxl+mOFHGX6c4ScZfprhZxl+nuEXGX6Z4VcZfp3hNxl+m+F3GX6f4Q8Z/pjhTxn+nOEvGf6a4W8Z/p7hHxn+meFfGf6d4T8Z/pvh2AwHchyS4zg5jpvjeDmOn+PQHCfIccIcJ8px4hwnyXFYjpPmOFmOk+c4RY5T5jhVjlPnOE2O0+Y4XY7T5zhDzkwLDgw4U44z5zhLjrPmOFuOs+c4R45z5jhXjnPnOE+O8+Y4X47z57hAjgvmuFCOC+e4SI6L5rhYjovnuESO5LhkjkvluHSOy+S4bI7L5bh8jivkuGKOK+W4co6r5LhqjqvluHqOa+S4Zo5r5bh2juvkuG6O6+W4fo4b5LhhjhvlODzHjXPcJMdNc9wsx81z3CLHLXPcKsetc9wmx21z3C7H7XPcIccdc9wpx51z3CXHETnumuNuOe6e4x457pnjXjmOzHHvHPfJcd8c98tx/xwPyPHAHA/K8eAcD8nx0BwPy/HwHI/I8cgcj8rx6ByPyfHYHI/L0RxH5Xh8jifkeGKOo3Mck+NJOZ6c4yk5nprjaTmenuMZOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn2OQ7meGuOt+V4e4535HhnjnfleHeO9+R4b4735Xh/jg/k+GCOD+X4cI6P5Phojo/l+HiOT+T4ZI5P5fh0js/k+GyOz+X4fI4v5Phiji/l+HKOr+T4ao6v5fh6jm/k+GaOb+X4dj7Gd3J8N8f3cnw/xw9y/DDHj3L8OMdPcvw0x89y/DzHL3L8Msevcvw6x29y/DbH73L8Pscfcvwxx59y/DnHX3L8Ncffcvw9xz9y/DPHv3L8O8d/cvw3x7E5DhQ4pMBxChy3wPEKHL/AoQVOUOCEBU5U4MQFTlLgsAInLXCyAicvcIoCpyxwqgKnLnCaAqctcLoCpy9whgJnLHCmAmcucJYCZy1wtgJnL3COAucscK4C5y5wngLnLXC+AucvcIECFyxwoQIXLnCRAhctcLECFy9wiQIpcMkClxo7duyJBS5T4LIFLlfg8gWuUOCKBa5U4MoFrlLgqgWuVuDqBa5R4JoFrlXg2gWuU+C6Ba5X4PoFblDghgVuVODwAjcucJMCNy1wswI3L3CLArcscKsCty5wmwK3LXC7ArcvcIcCdyxwpwJ3LnCXAkcUuGuBuxW4e4F7FLhngXsVOLLAvQvcp8B9CxwzMDCwf4EHFHhggQcVeHCBhxR4aIGHFXh4gUcUeGSBRxV4dIHHFHhsgccVaIGjCjy+wBMK/C9Xo/87u8CTCjy5wFMKPLXA0wo8vcAzCjyzwLMKPLvAcwo8t8DzCjy/wAsKvLDAiwq8uMBLCry0wMsKvLzAKwq8ssCrCry6wGsKvLbA6wq8vsAbCryxmOD/9ebdMjDEoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsDBAm8t8LYCby/wjgLvLPCuAu8u8J4C7y3wvgLvL/CBAh8s8KECHy7wkQIfLfCxAh8v8IkCnyzwqQKfLvCZAp8t8LkCny/whQJfLPClAl8u8JUCXy3wtQJfL/CNAt8s8K0C3y7wnQLfLfC9At8v8IMCPyzwowI/LvCTAj8t8LMCPy/wiwK/LPCrAr8u8JsCvy3wuwK/L/CHAn8s8KcCfy7wlwJ/LfC3An8v8I8C/yzwrwL/LvCfAv8tcGyBAyUOKXGcEsctcbwSxy9xaIkTlDhhiROVOHGJk5Q4rMRJS5ysxMlLnKLEKUucqsSpS5ymxGlLnK7E6UucocQZS5ypxJlLnKX8/zXas5c4R4lzljhXiXOXOE+J85Y4X4nzl7hAiQuWuFCJC5e4SImLlrhYiYuXuESJlLhkiUuVuHSJy5S4bInLlbh8iSuUuGKJK5W4comrlLhqiauVuHqJa5S4Zolrlbh2ieuUuG6J65W4fokblLhhiRuVOLzEjUvcpMRNS9ysxM1L3KLELUvcqsStS9ymxG1L3K7E7UvcocQdS9ypxJ1L3KXEESXuWuJuJe5e4h4l7lniXiWOLHHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r0RJHlXh8iSeUeGKJo0scU+JJJZ5c4iklnlriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSUGJYYlRiXGJSYlpiVmJeYlFiWW5f/t8R5tU2JbYldiX+JgibeWeFuJt5d4R4l3lnhXiXeXeE+J95Z4X4n3l/hAiQ+W+FCJD5f4SImPlvhYiY+X+ESJT5b4VIlPl/hMic+W+FyJz5f4QokvlvhSiS+X+EqJr5b4Womvl/hGiW+W+FaJb5f4Tonvlvheie+X+EGJH5b4UYkfl/hJiZ+W+FmJn5f4RYlflvhViV+X+E2J35b4XYnfl/hDiT+W+FOJP5f4S4m/lvhbib+X+EeJf5b4V4l/l/hPif+WOLbEgQqHVDhOheNWOF6F41c4tMIJKpywwokqnLjCSaqhDqtw0gonq3DyCqeocMoKp6pw6gqnqXDaCqercPoKZ6hwxgpnqnDmCmepcNYKZ6tw9grnqHDOCueqcO4K5/nf++ercP4KF6hwwQoXqnDhChepcNEKF6tw8QqXqJAKl6xwqQqXrnCZCpetcLkKl69whQpXrHClCleucJUKV61wtQpXr3CNCtescK0K165wnQrXrXC9CtevcIMKN6xwowqHV7hxhZtUuGmFm1W4eYVbVLhlhVtVuHWF21S4bYXbVbh9hTtUuGOFO1W4c4W7VDiiwl0r3K3C3Svco8I9K9yrwpEV7l3hPhXuW+F+Fe5f4QEVHljhQRUeXOEhFR5a4WEVHl7hERUeWeFRFR5d4TEVHlvhcRVa4agKj6/whApPrHB0hWMqPKnCkys8pcJTKzytwtMrPKPCMys8q8KzKzynwnMrPK/C8yu8oMILK7yowosrvKTCSyu8rGLgP2xdUeGVFV5V4dUVXlPhtRVeV+H1Fd5Q4Y0V3lThzRXeUmFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2Ff4WCFt1Z4W4W3V3hHhXdWeFeFd1d4T4X3VnhfhfdX+ECFD1b4UIUPV/hIhY9W+FiFj1f4RIVPVvhUhU9X+EyFz1b4XIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhR9X+EmFn1b4WYWfV/hFhV9W+FWFX1f4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9W+FuFv1f4R4V/VvhXhX9X+E+F//7H9wEcqHFIjePUOG6N49U4fo1Da5ygxglrnKjGiWucpMZhNU5a42Q1Tl7jFDVOWeNUNU5d4zQ1TlvjdDVOX+MMNc5Y40w1zlzjLDXOWuNsNc5e4xw1zlnjXDXOXeM8Nc5b43w1zl/jAjUuWONCNS5c4yI1LlrjYjUuXuMSNVLjkjUuVePSNS5T47I1Llfj8jWuUOOKNa5U48o1rlLjqjWuVuPqNa5R45o1rlXj2jWuU+O6Na5X4/o1blDjhjVuVOPwGjeucZMaN61xsxo3r3GLGrescasat65xmxq3rXG7GrevcYcad6xxpxp3rnGXGkfUuGuNu9W4e4171Ou7Z4171Tiyxr1r3KfGfWvcr8b9azygxgNrPKjGg2s8pMZDazysxsNrPKLGI2s8qsajazymxmNrPK5GaxxV4/E1nlDjiTWOrnFMjSfVeHKNp9R4ao2n1Xh6jWfUeGaNZ9V4do3n1HhujefVeH6NF9R4YY0X1XhxjZfUeGmNl9V4eY1X1HhljVfVeHWN19R4bY3X1Xh9jTfUeGONN9V4c4231BjUGNYY1RjXmNSY1pjVmNdY1FjWWNVY19jU2NbY1djXOFjjrTXeVuPtNd5R45013lXj3TXeU+O9Nd5X4/01PlDjgzU+VOPDNT5S46M1Plbj4zU+UeOTNT5V49M1PlPjszMOGfiPO8/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNf9f4T43/1ji2xoEGhzQ4ToPjNjheg+M3OLTBCRqcsMGJGpy4wUkaHNbgpA1O1uDkDU7R4JQNTtXg1A1O0+C0DU7X4PQNztDgjA3O1ODMDc7S4KwNztbg7A3O0eCcDc7V4NwNztPgvA3O1+D8DS7Q4IINLtTgwg0u0uCiDS7W4OINLtEgDS7Z4FINLt3gMg0u2+ByDS7f4AoNrtjgSg2u3OAqDa7a4GoNrt7gGv/lYMjAwFoNrt3gOg2u2+B6Da7f4AYNbtjgRg0Ob3DjBjdpcNMGN2tw8wa3aHDLBrdqcOsGt2lw2wa3a3D7BndocMcGd2pw5wZ3aXBEg7s2uFuDuze4R4N7NrhXgyMb3LvBfRrct8H9Gty/wQMaPLDBgxo8uMFDGjy0wcMaPLzBIxo8ssGjGjy6wWMaPLbB4xq0wVENHt/gCQ2e2ODoBsc0eFKDJzd4SoOnNnhag6c3eEaDZzZ4VoNnN3hOg+c2eF6D5zd4QYMXNnhRgxc3eEmDlzZ4WYOXN3hFg1c2eFWDVzd4TYPXNnhdg9c3eEODNzZ4U4M3NwyMHhgwaDBsMGowbjBpMG0wazBvsGiwbLBqsG6wabBtsGuwb3CwwVsbvK3B2xu8o8E7G7yrwbsbvKfBexu8r8H7G3ygwQcbfKjBhxt8pMFHG3yswccbfKLBJxt8qsGnG3ymwWcbfK7B5xt8ocEXG3ypwZcbfKXBVxt8rcHXG3yjwTcbfKvBtxt8p8F3G3yvwfcb/KDBDxv8qMGPG/ykwU8b/KzBzxv8osEvG/yqwa8b/KbBbxv8rsHvG/yhwR8b/KnBnxv8pcFfG/ytwd8b/KPBPxv8q8G/G/ynwX8bHNvgQItDWhynxXFbHK/F8Vsc2v4fTfL/+adP1OLELU7S4rAWJ21xshYnb3GKFqdscaoWp25xmhanbXG6FqdvcYYWZ2xxphZnbnGWFmdtcbYWZ29xjhbnbHGuFuducZ4W521xvhbn/79WfS0u1OLCLS7S4qItLtbi4i0u0SItLtniUi0u3eIyLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi0Ob3HjFjdpcdMWN2tx8xa3aHHLFrdqcesWt2lx2xa3a3H7FndocccWd2px5xZ3aXFEi7u2uFuLu7e4R4t7trhXiyNbnGBgYGCfFvdtcb8W92/xgBYPbPGgFg9u8ZAWD22HDBzW4uEtHtHikS0e1eLRLR7T4rEtHteiLY5q8fgWT2jxxBZHtzimnWjgpBZPbvGUFk9t8bQWT2/xjBbPbPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWgxbDFqMW4xaTFtMWsxbzFosWyxarFusWmxbbFrsW+xYHW7y1xdtavL3FO1q8s8W7Wry7xXtavLfF+1q8v8UHWnywxYdafLjFR1p8tMXHWny8xSdafLLFp1p8usVnWny2xedafL7FF1p8scWXWny5xVdafLXF11p8vcU3WnyzxbdafLvFd1p8t8X3Wny/xQ9a/LDFj1r8uMVPWvy0xc9a/LzFL1r8ssWvWvy6xW9a/LbF71r8vsUfWvyxxZ9a/LnFX1r8tcXfWvy9xT9a/LPFv1r8u8V/Wvy3xbEtDnQ4pMNxOhy3w/E6HL/DoR1O0OGEHU7U4cQdTtLhsA4n7XCyDifvcIoOp+xwqg6n7nCaDqftcLoOp+9whg5n7HCmDmfucJYOZ+1wtm7EJAMDOEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh3S4ZIdLdbh0h8t0uGyHy3W4fIcrdLhihyt1uHKHq3S4aoerdbh6h2t0uGaHa3W4dofrdLhuh+t1uH6HG3S4YYcbdTi8w4073KTDTTvcrMPNO9yiwy073KrDrTvcpsNtO9yuw+073KHDHTvcqcOdO9ylwxEd7trhbh3u3uEeHe7Z4V4djuxw7w736XDfDvfrcP8OD+jwwA4P6vDgDg/p8NAOD+vw8A6P6PDIDo/q8OgOj+nw2A6P69AOR3V4fIcndHhih6M7HNPhSR2e3OEpHZ7a4Wkdnt7hGR2e2eFZHZ7d4TkdntvheR2e3+EFHV7Y4UUdXtzhJR1e2uFlHV7e4RUdXtkx5D9cXd3hNR1e2+F1HV7f4Q0d3tjhTR3e3OEtHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYdDnZ4a4e3dXh7h3d0eGeHd3V4d4f3dHhvh/d1eH+HD3T4YIcPdfhwh490+GiHj3X4eIdPdPhkh091+HSHz3T4bIfPdfh8hy90+GKHL3X4coevdPhqh691+HqHb3T4Zodvdfh2h+90+G6H73X4focfdPhhhx91+HGHn3T4aYefdfh5h190+GWHX3X4dYffdPhth991+H2HP3T4Y4c/dfhzh790+GuHv3X4e4d/dPhnh391+HeH/3T4b4djOxzocUiP4/Q4bo/j9Th+j0N7nKDHCXucqMeJe5ykx2E9TtrjZD1O3uMUPU7Z41Q9Tt3jND1O2+N0PU7f4ww9ztjjTD3O3OMsPc7a42w9zt7jHD3O2eNcPc7d4zw9ztvjfD3O3+MCw3HBHhfqceEeF+lx0R4X63HxHpfokR6X7HGpHpfucZkel+1xuR6X73GFHlfscaUeV+5xlR5X7XG1HlfvcY0e1+xxrR7X7nGdHtftcb0e1+9xgx437HGjHof3uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0OKLHXXvcrcfde9yjxz173KvHkT3u3eM+Pe7b43497t/jAT0e2ONBPR7c4yE9HtrjYT0e3uMRPR7Z41E9Ht3jMT0e2+NxPdrjqB6P7/GEHk/scXSPY3o8qceTezylx1N7PK3H03s8o8czezyrx7N7PKfHc3s8r8fze7ygxwt7vKjHi3u8pMdLe7ysx8t7vKLHK3u8qsere7ymx2t7vK7H63u8occbe7ypx5t7vKXHoMewx6jHuMekx7THrMe8x6LHsseqx3r8gYH/MNz22PXY9zjY46093tbj7T3e0eOdPd7V4939/2gL7u3xvh7v7/GBHh/s8aEeH+7xkR4f7fGxHh/v8Yken+zxqR6f7vGZHp/t8bken+/xhR5f7PGlHl/u8ZUeX+3xtR5f7/GNHt/s8a0e3+7xnR7f7fG9Ht/v8YMeP+zxox4/7vGTHj/t8bMeP+/xix6/7PGrHr/u8Zsev+3xux6/7/GHHn/s8acef+7xlx5/7fG3Hn/v8Y8e/+zxrx7/7vGfHv/tcWyPA4M4ZBDHGcRxB3G8QRx/EIcO4gSDOOEgTjSIEw/iJIM4bBAnHcTJBnHyQZxiEKccxKkGcepBnGYQpx3E6QZx+kGcYRBnHMSZBnHmQZxlEGcdxNkGcfZBnGMQ5xzEuQZx7kGcZxDnHcT5BnH+QVxgEBccxIUG+f9oOsfwMY6Ha/+StE1t29Zd225Tpk5tm3fbJLVt227XRm3bto28V563//k232YPdq+zO3vGhQJcOMBFAlw0wMUCXDxAAlwiwCUDXCrApQNcJsBlA1wuwOUDXCHAFQNcKcCVA1wlwFUDXC3A1QNcI8A1A1wrwLUDXCfAdQNcL8D1A9wgwA0D3CjAYQFuHOAmAW4a4GYBbr7qwMBYLIcHuGWAWwW4dYDbBLhtgNsFuH2AIwLcIcAdA9wpwJ0D3CXAXQPcLcDdA9wjwD0D3CvAvQPcJ8B9A9wvwP0DPCDAAwM8KMCDAzwkwEMDPCzAwwM8IsAjAzwqwKMDPCbAYwM0wOMCPD7AEwIcGeCoAEcHeGKAJwV4coCnBHhqgKcFeHqAZwR4ZoBnBXh2gOcEeG7w/7uWx44LArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7ArwzwLsCvDvAewK8N8D7Arw/YMxfAT4Y4EMBPhxgEGA4lt//1pcEmAaY/ae3IsAywCrAOsAmwDbALsA+wEcCfDTAxwJ8PMAnAnwywKcCfDrAZwJ8NsDnAnw+wBcCfDHAlwJ8OcBXAnw1wNcCfD3ANwJ8M8C3Anw7wHcCfDfA9wJ8P/i/b5gzDh7AjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAsTj9HeA/Af4b4JgAB0IcFOLgEIeEOE6I44Y4XohDQxw/xAlCnDDEiUKcOMRJQpw0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxHBh/phBnDnGWEGcNcbYQZw9xjhDnDHGuEOcOcZ4Q5w1xvhDnD3GBEBcMcaEQFw5xkRAXDXGxEBcPkRCXCHHJEJcKcekQlwlx2RCXC3H5EFcIccUQVwpx5RBXCXHVEFcLcfUQ1whxzRDXCnHtENcJcd0Q1wtx/RA3CHHDEDcKcViIG4e4SYibhrhZiJuHuEWIw0PcMsStQtw6xG1C3DbE7ULcPsQRIe4Q4o4h7hTiziHuEuKuIe4W4u4h7hHiniHuFeLeIe4T4r4h7hfi/iEeEOKBIR4U4sEhHhLioSEeFuLhIR4R4pEhHhXi0SEeE+KxIRricSEeH+IJIY4McVSIo0M8McSTQjw5xFNCPDXE00I8PcQzQjwzxLNCPDvEc0I8N8TzQjw/xAtCvDDEi0K8OMRLQrw0xMtCvDzEK0K8MsSrQrw6xGtCvDbE60K8PsQbQrwxxJtCvDnEW0K8NcTbQrw9xDtCvDPEu0K8O8R7Qrw3xPtCvD/EB0J8MMSHQnw4xCDEMBwzdGy+jENMQkxDzELMQyxCLEOsQqxDbEJsQ+xC7EN8JMRHQ3wsxMdDfCLEJ0N8KsSnQ3wmxGdDfC7E50N8IcQXQ3wpxJdDfCXEV0N8LcTXQ3wjxDdDfGuCgYGxfnsnxHdDfC/E90P8IMQPQ/woxI9D/CTET0P8LMTPQ/wixC9D/CrEr0P8JsRvQ/wuxO9D/CHEH0P8KcSfQ/wlxF9D/C3E30P8I8Q/Q/wrxL9D/CfEf0McE+JAhIMiHBzhkAjHiXDcCMeLcGiE40c4QYQTRjhRhBNHOEmEk0Y4WYSTRzhFhFNGOFWEU0c4TYTTRjhdhNNHOEOEM0Y4U4QzRzhLhLNG+GWEs0c4R4RzRrjWZDh3hPNEOG+E80U4f4QLRLhghAtFuHCEi0S4aISLRbh4hES4RIRLRrhUhEtHuEyEy0a4XITLR7hChCtGuFKEK0e4SoSrRrhahKtHuEaEa45dQ4RrR7hOhOtGuF6E60e4QYQbRrhRhMMi3DjCTSLcNMLNItw8wi0iHB7hlhFuFeHWEW4T4bYRbhfh9hGOiHCHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjdAIj4vw+AhPiHBkhKMiHB3hiRGeFOHJEZ4S4akRnhbh6RGeEeGZEZ4V4dkRnhPhuRGeF+H5EV4Q4YVj9TKAF0d4SYSXRnhZhJdHeEWEV0Z4VYRXR3hNhNdGeF2E10d4Q4Q3RnhThDdHeEuEt0Z4W4S3R3hHhHdGeFeEd0d4T4T3RnhfhPdH+ECED0b4UIQPRxhEGEYYRRhHmESYRphFmEdYRFhGWEVYR9hE2EbYRdhH+EiEj0b4WISPR/hEhE9G+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+NFYnw0MDHwS4acRfhbh5xGDv/jPK19F+HWE30T4bYTfRfh9hD9E+GOEP0X4c4S/RPhrhL9F+HuEf0T4Z4R/Rfh3hP9E+G+EYyIciHFQjINjHBLjODGOG+N4MQ6NcfwYJ4hxwhgninHiGCeJcdIYJ4tx8hiniHHKGKeKceoYp4lx2hini3H6GGeIccYYZ4px5hhniXHWGGeLcfYY54hxzhjninHuGOeJcd4Y54tx/hgXiHHBGBeKceEYF4lx0RgXi3HxGIlxiRiXjHGpGJeOcZkYl41xuRiXj3GFGFeMcaUYV45xlRhXjXG1GFePcY0Y14xxrRjXjnGdGNeNcb0Y149xgxg3jHGjGIfFuHGMm8S4aYybxbh5jFvEODzGLWPcKsatY9wmxm1j3C7G7WMcEeMOMe4Y404x7hzjLjHuGuNuMe4e4x4x7hnjXjHuHeM+Me4b434x7h/jATEeGONBMR4c4yExHhrjYWODbYxHxHhkjEfFeHSMx8R4bIzGeFyMx8d4QowjYxwV4+gYT4zxpBhPjvGUGE+N8bQYT4/xjBjPjPGsGM+O8ZwYz43xvBjPj/GCGC+M8aIYL47xkhgvjfGyGC+P8YoYr4zxqhivjvGamBHXxnhdjNfHeEOMN8Z4U4w3x3hLjLfGeFuMt8d4R4x3xnhXjHfHeE+M98Z4X4z3xwwMDBrwwRgfivHhGIMYwxijGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsYH4nx0Rgfi/HxGJ+I8ckYn4rx6RififHZGJ+L8fkYX4jxxRhfivHlGF+J8dUYX4vx9RjfiPHNGN+K8e0Y34nx3Rjfi/H9GD+I8cMYP4rx4xg/ifHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4rx7xj/ifHfGMfEOJDgoAQHJzgkYejY+bgJjpfg0ATHT3CCBCdMcKIEJ05wkgQnTXCyBCdPcIoEp0xwqgSnTnCaBKdNcLoEp09whgRnTHCmBGdOcJYEZ01wtgRnT3COBOdMcK4E505wngTnTXC+BOdPcIEEF0xwoQQXTnCRBBdNcLEEF0+QBJdIcMkEl0pw6QSXSXDZBJdLcPkEV0hwxQRXSnDlBFdJcNUEV0tw9QTXSHDNBNdKcO0E10lw3QTXS3D9BDdIcMMEN0pwWIIbJ7hJgpsmuFmCmye4RYLDE9wywa0S3DrBbRLcNsHtEtw+wREJ7pDgjgnulODOCe6S4K4J7pbg7gnukeCeCe6V4N4J7pPgvgnul+D+CR6Q4IEJHpTgwQkekuChCR6W4OEJHpHgkQkeleDRCR6T4LEJmuBxCR6f4AkJjkxwVIKjEzwxwZP+tzM7wVMTPC3B0xM8I8EzEzwrwbMTPCfBcxM8L8HzE7wgwQsTvCjBixO8JMFLE7wswcsTvCLBKxO8KsGrE7wmwWsTvC7B6xO8IcEbE7wpwZsTvCXBWxO8LcHbE7wjwTsTvCvBuxO8J8F7E7wvwfsTfCDBBxN8KMGHEwwSDBOMEowTTBJME8wSzBMsEiwTrBKsE2wSbBPsEuwTfCTBRxN8LMHHE3wiwScTfCrBpxN8JsFnE3wuwecTfCHBFxN8KcGXE3wlwVcTfC3B1xN8I8E3E3wrwbcTfCfBdxN8L8H3E/wgwQ8T/CjBjxP8JMFPE/wswc8T/CLBLxP8KsGvE/wmwW8T/C7B7xP8IcEfE/wpwZ8T/CXBXxP8LcHfE/wjwT8T/CvBvxP8J8F/ExyT4ECKg1IcnOKQFMdJcdwUx0txaIrjpzhBihOmOFGKE6c4SYqTpjhZipOnOEWKU6Y4VYpTpzhNitOmOF2K06c4Q4ozpjhTijOnOEuKs6Y4W4qzpzhHytgnl3OlOHeK86Q4b4rzpTh/igukuGCKC6W4cIqLpLhoiouluHiKpLhEikumuFSKS6e4TIrLprhcisunuEKKK6a4Uoorp7hKiqumuFqKq6e4RoprprhWimunuE6K66a4Xorrp7hBihumuFGKw1LcOMVNUtw0xc1S3DzFLVIcnuKWKW6V4tYpbpPitilul+L2KY5IcYcUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOh7hPivumuF+K+6d4QIoHpnhQigeneEiKh6Z4WIqHp3hEikemeFSKR6d4TIrHpmiKx6V4fIonpDgyxVEpjk7xxBRPSvHkFE9J8dQUT0vx9BTPSPHMFM9K8ewUz0nx3BTPS/H8FC9I8cIUL0rx4hQvSfHSFC9L8fIUr0jxyhSvSvHqFK9J8doUr0vx+hRvSPHGFG9K8eYUb0nx1hRvS/H2FO9I8c4U70rx7hTvSfHeFO9L8f4UH0jxwRQfSvHhFIMUw3SC//ufKE4xSTFNMUsxT7FIsUyxSrFOsUmxTbFLsU/xkRQfTfGxFB9P8YkUn0zxqRSfTvGZFJ9N8bkUn0/xhRRfTPGlFF9O8ZUUX03xtRRfT/GNFN9M8a0U307xnRTfTfG9FN9P8YMUP0zxoxQ/TvGTFD9N8bMUP0/xixS/TPGrFL9O8ZsUv03xuxS/H+uz/27bP6X4c4q/pPhrir+l+HuKf6T4Z4p/pfh3iv+k+G+KY1IcyHBQhoMzHJLhOBmOm+F4GQ7NcPwMJ8hwwgwnynDiDCfJcNIMJ8tw8gynyHDKDKfKcOoMp8lw2gyny3D6DGfIcMYMZ8pw5gxnyXDWDGfLcPYM58hwzgznynDuDOfJcN4M58tw/gwXyHDBDBfKcOEMF8lw0QwXy3DxDMlwiQyXzHCpDJfOcJkMl81wuQyXz3CFDFfMcKUMV85wlQxXzXC1DFfPcI0M18wm/z/NrJ3hOhmum+F6Ga6f4QYZbpjhRhkOy3DjDDfJcNMMN8tw8wy3yHB4hltmuFWGW2e4TYbbZrhdhttnOCLDHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8+H8v4TM8LMPDMzwiwyMzPCpj0NEZHpPhsRma4XEZHp/hCRmOzHBUhqMzPDHDkzI8OcNTMjw1w9MyPD3DMzI8M8OzMjw7w3MyPDfD8zI8P8MLMrwww4syvDjDSzK8NMPLMrw8wysyvDIbGHVVhldneE2G12Z4XYbXZ3hDhjdmeFOGN2d4S4a3ZnhbhrdneEeGd2Z4V4Z3Z3hPhvdmeN9Y3AZG/tccjQ9l+HA2aJyxHIYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn2GT6S4aMZPpbh4xk+keGTGT6V4dMZPpPhsxk+l+HzGb6Q4YsZvpThyxm+kuGrGb6W4esZvpHhmxm+leHbGb6T4bsZvpfh+xl+kOGHGX6U4ccZfpLhpxl+luHnGX6R4ZcZfpXh1xl+k+G3GX6X4fcZ/pDhjxn+lOHPGf6S4a8Z/pbh7xn+keGfGf6V4d8Z/pPhvxmOyXAgx0E5Ds5xSI7j5DhujuPlODTH8XOcIMcJc5wox4lznCTHSXOcLGfI5DlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpLjojkuluPiOZLjEjkumeNSOS6d4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOQ7LceMcN8lx0xw3y3HzHLfIcXiOW+a4VY5b57hNjtvmuF2O2+c4Iscdctwxx51y3DnHXXLcNcfdctw9xz1y3DPHvXLcO8d9ctw3x/1y3D/HA3I8MMeDcjw4x0NyPDTHw3I8PMcjcjwyx6NyPDrHY3I8NkdzPC7H43M8IceROY7KcXSOJ+Z4Uo4n53hKjqfmeFqOp+d4Ro5n5nhWjmfneE6O5/6nl/NzvCDHC3O8KMeLc7wkx0tzvCzHy3O8Iscrc7wqx6tzvCbHa3O8Lsfrc7whxxtzvCnHm8cdGBiryVtzvC3H23O8I8c7c7wrx7tzvCfHe3O8L8f7c3wgxwdzfCjHh3MMcgxzjHKMc0xyTHPMcsxzLHIsc6xyrHNscmxz7HLsc3wkx0dzfCzHx3N8Iscnc3wqx6dzfCbHZ3N8Lsfnc3whxxdzfCnHl3N8JcdXc3wtx9dzfCPHN3N8K8e3c3wnx3dzfC/H93P8IMcPc/wox49z/CTHT3P8LMfPc/wixy9z/CrHr3P8Jsdvc/wux+9z/CHHH3P8Kcefc/wlx19z/C3H33P8I8c/c/wrx79z/CfHf3Mck+NAgYMKHFzgkALHKXDcAscrcGiB4xc4wX/ziQqcuMBJCpy0wMkKnLzAKQqcssCpCpy6wGkKnLbA6QqcvsAZCpyxwJkKnLnAWQqctcDZCpy9wDkKnLPAuQqcu8B5Cpy3wPkKnL/ABQpcsMCFCly4wEUKXLTAxQpcvEAKXKLAJQtcqsClC1ymwGULXK7A5QtcocAVi//LGf+3p3mVAlctcLUCVy9wjQLXLHCtAtcucJ0C1y1wvQLXL3CDAjcscKMChxW4cYGbFLhpgZsVuHmBWxQ4vMAtC9yqwK0L3KbAbQvcrsDtCxxR4A7DBgbG4r5TgTsXuEuBuxa4W4G7F7hHgXsWuFeBexe4T4H7FrhfgfsXeECBBxZ4UIEHF3hIgYcWeFiBhxd4RIFHFnhUgUcXeEyBxxZogccVeHyBJxQ4ssBRBY4u8MQCTyrw5AJPKfDUAk8r8PQCzyjwzALPKvDsAs8p8NwCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8q8O4C7ynw3gLvK/D+Ah8o8MECHyrw4QKDAsP/iB6Lc1JgWmBWYF5gUWBZYFVgXWBTYFtgV2Bf4CMFPlrgYwU+XuATBT5Z4FMFPl3gMwU+W+BzBT5f4AsFvljgSwW+XOArxRBfLfC1Al8v8I0C3yzwrQLfLvCdAt8t8L0C3y/wgwI/LPCjAj8u8JMCPy3wswI/L/CLAr8s8KsCvy7wmwK/LfC7Ar8v8IcCfyzwpwJ/LvCXAn8t8LcCfy/wjwL/LPCvAv8u8J8C/y1wTIEDJQ4qcXCJQ0ocp8RxSxyvxKEljl/iBCVOWOJEJU5c4iQlTlriZCVOXuIUJU5Z4lQlTl3iNCVOW+J0JU5f4gwlzljiTCXOXOIsJc5a4mwlzl7iziXOWeJcJc5d4jwlzlvifCXOX+ICJS5Y4kIlLlziIiUuWuJiJS5eIiUuUeKSJS5V4tIlLlPisiUuV+LyJa5Q4oolrlTiyiWuUuKqJa5W4uolrlHimiWuVeLaJa5T4rolrlfi+iVuUOKGJW5U4rASNy5xkxI3LXGzEjcvcYsSh5cDg//XZbF1iduUuG2J25W4fYkjStyhxB1L3Om/a9+lxF1L3K3E3Uvco8Q9S9yrxL1L3KfEfUvcr8T9SzygxAPHDBkYy93BJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSVa4nElHl/iCSWOLHFUiaNLPLHEk0o8ucRTSjy1xNNKPL3EM0o8s8SzSjy7xHNKPLfE80o8v8QLSrywxItKvLjES0q8tMTLSry8xCtKvLLEq0q8usRrSry2xOtKvL7EG0q8scSbSry5xFtKvLXE20q8vcQ7SryzxLtKvLvEe0r+527vL/GBEh8s8aESHy4xKDEsMSoxLjEpMS0xKzEvsSixLLEqsS6xKbEtsSuxL/GREh8t8bESHy/xiRKfLPGpEp8u8ZkSny3xuRKfL/GFEl8s8aUSXy7xlRJfLfG1El8v8Y0S3yzxrRLfLvGdEt8t8b0S3y/xgxI/LPGjEj8u8ZMSPy3xsxI/L/GLEr8s8asSvy7xmxK/LfG7Er8v8YcSfyzxpxJ/LvGXEn8t8bcSfy/xjxL/LPGvEv8u8Z8S/y1xTIkDFQ6qcHCFQyocp8JxKxyvwqEVjl/hBBVOWOFEFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5eIRUuUeGSFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4bAKN65wkwo3rXCzCjevcIsKh1e4ZYVbVbh1hdtUuG2F21W4fYUjKtyhwh0r3KnCnSvcpcJdK9ytwt0r3KPCPSvcq8K9K9ynwn0r3K/C/Ss8oMIDKzyowoMrPKTCQys8rMLDKzyiwiMrPKrCoys8psJjK7TC4yo8vsITKhxZ4agKR1d4YoUnVXhyhadUeGqFp1V4eoVn/M9tFZ5d4TkVnlvheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRVeXeE1FV5b4XUVXl/hDRXeWOFNFd5c4S0V3lrhbRXeXuEdFd5Z4V0V3l3hPRXeW+F9Fd5f4QMVPljhQxU+XGFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2Ff4SMVPlrhYxU+XuETFT5Z4VMVPl3hMxU+Ww1/4LkKn6/whQpfrPClCl+u8JUKX63wtQpfr/CNCt+s8K0K367wnQrfrfC9Ct+v8IMKP6zwowo/rvCTCj+t8LMKP6/wiwq/rPCrCr+u8JsKv63wuwq/r/CHCn+s8KcKf67wlwp/rfC3Cn+v8I8K/6zwrwr/rvCfCv+tcEyFAzUOqnFwjUNqHKfGcWscr8ahNY5f4wQ1TljjRDVOXOMkNU5a42Q1Tl7jFDVOWeNUNU5d4zQ1TlvjdDVOX+MMNc5Y40w1zlzjLDXOWuNsNc5e4xw1zlnjXDXOXeM8Nc5b43w1zl/jAjUuWONCNS5c4yI1LlrjYjUuXiM1LlHjkjUuVePSNS5T47I1Llfj8jWuUOOKNa5U48o1rlLjqjWuVuPqNa5R45o1rlXj2jWuU+O6Na5X4/o1blDjhjVuVOOwGjeucZMaN61xsxo3r3GLGofXuGWNW9W4dY3b1LhtjdvVuH2NI2rcocYda9ypxp1r3KXGXWvcrcbda9yjxj1r3KvGvWvcp8Z9a9yvxv3HwwNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLZGazyuxuNrPKHGkTWOqnF0jSfWeFKNJ9d4So2n1nhajafXeEaNZ9Z4Vo1n13hOjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjQ/W+FCND9cY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY1/hIjY/W+FiNj9f4RI1P1vhUjU/X+EyNz9b4XI3P1/hCjS/W+FKNL9f4So2v1vhaja/X+EaNb9b4Vo1v1/hOje/W+F6N79f4QY0f1vhRjR/X+EmNn9b4WY2f1/hFjV/W+FWNX9f4TY3f1vhdjd/X+EONP9b4U40/1/hLjb/W+FuNv9f4R41/1vhXjX/X+E+N/9Y4psaBBgc1OLjBIQ2O0+C4DY7X4NAGx29wggYnbHCiBiducJIGJ21wsgYnb3CKBqdscKoGp25wmganbXC6BqdvcIYGZ2xwpgZnbnCWBmdtcLYGZ29wjgbnbHCuBuducJ4G521wvgbnb3CBBhdscKEGF25wkQYXbXCxBhdvkAaXaHDJBpdqcOkGl2lw2YZxlmtw+QZXaHDFBldqcOUGV2lw1QZXa3D1BtdocM0G12pw7QbXaXDdBtdrcP0GN2hwwwY3anBYgxs3uEmDmza4WYObN7hFg8Mb3LLBrRrcusFtGty2we0a3L7BEQ3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ3a4HENHt/gCQ2ObHBUg6MbPLHBkxo8ucFTGjy1wdMaPL3BMxo8s8GzGjy7wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxqGXt3gNQ1e2+B1DV7f4A0N3tjgTQ3e3OAtDd7a4G0N3t7gHWO5GsCxmeruBu9p8N4G72vw/gYfaPDBBh9q8OEGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wYfafDRBh9r8PEGn2jwyQafavDpBp9p8NkGn2vw+QZfaPDFBl9q8OUGX2nw1QZfa/D1Bt9o8M0G32rw7QbfafDdBt9r8P0GP2jwwwY/avDjBj9p8NMGP2vw8wa/aPDLBr9q8OsGv2nw2wa/a/D7Bn9o8McGf2rw5wZ/afDXBn9r8PcG/2jwzwb/avDvBv9p8N8GxzQ40OKgFge3OKTFcVoct8XxWhza4vgtTtDihC1O1OLELU7S4qQtTtbi5C1O0eKULU7V4tQtTtPitC1O1+L0Lc7Q4owtztTizC3O0uKsLc7W4uwtztHinC3O1eLcLc7T4rwtztfi/C0u0OKCLS7U4sItLtLioi0u1uLiLdLiEi0u2eJSLS7d4jItLtvici0u3+IKLa7Y4kotrvy/E4laXK3F1Vtco8U1W1yrxbVbXKfFdVtcr8X1W9ygxQ1b3KjFYS1u3OImLW7a4mYtbt7iFi0Ob3HLFrdqcesWt2lx2xa3a3H7Fke0uEOLO7a4U4s7t7hLi7u2uFuLu7e4R4t7trhXi3u3uE+L+7a4X4v7t3hAiwe2eFCLB7d4SIuHtnhYi4e3eESLR7Z4VItHt3hMi8e2aIvHtXh8iye0OLLFUS2ObvHEFk9q8eQWT2nx1BZPa/H0Fs9o8cwWz2rx7BbPafHcFs9r8fwWL2jxwhYvavHiFi9p8dIWL2vx8havaPHKFq9qGX11i9e0eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLd7V4d4v3tHhvi/e1eH+LD7T4YIsPtfhwi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32Lj7T4aIuPtfh4i0+0+GSLT7X4dIvPtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi2NaHOhwUIeDOxzS4TgdjtvheB0O7XD8DifocMIOJ+pw4g4n6XDSDifrcPIOp+hwyg6n6nDqDqfpcNoOp+tw+g5n6HDGDmfqcOYOZ+lw1g5n63D2DufocM4O5+pw7g7n6XDeDufrcP4OF+hwwQ4X6nDhDhfpcNEOF+tw8Q7pcIkOl+xwqQ6X7nCZDpftcLkOl+9whQ5X7P5/p8bYsUo3MLBqh6t1uHqHa3S4Zodrdbh2h+t0uG6H63W4focbdLhhhxt1OKzDjTvcpMNNO9ysw8073KLD4R1u2eFWHW7d4TYdbtvhdh1u3+GIDnfocMcOd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOj+rw6A6P6fDYDu3wuA6P7/CEDkd2OKrD0R2e2OFJHZ7c4SkdntrhaR2e3uEZHZ7Z4Vkdnt3hOR2e2+F5HZ7f4QUdXtjhRR1e3OElHV7a4WUdXt7hFR1e2eFVHV7d4TUdXtvhdR1e3+ENqw54Y8f/2l68pcNbO7ytw9s7vKPDOzu8q8O7O7ynw3s7vK/D+zt8oMMHO3yow4c7DDoMO4w6jDtMOkw7zDrMOyw6LDusOqw7bDpsO+w67Dt8pMNHO3ysw8c7fKLDJzt8qsOnO3ymw2c7fK7D5zt8ocMXO3ypw5c7fKXDVzt8rcPXO3yjwzc7fKvDtzt8p8N3O3yvw/c7/KDDDzv8qMOPO/ykw087/KzDzzv8osMvO/yqw687/KbDbzv8rsPvO/yhwx87/KnDnzv8pcNfO/ytw987/KPDPzv8q8O/O/ynw387HNPhQI+Dehzc45Aex+lx3B7H63Foj+P3OEGPE/Y4UY8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L90iPS/S4ZI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9Tisx4173KTHTXvcrMfNe9yix+E9btnjVj1u3eM2PW7b43Y9bt/jiB536HHHHnfqceced+lx1x5363H3Hvfocc8e9+px7x736XHfcXC/Hvfv8YAeD+zxoB4P7vGQ8QcGxvJ4WI+H93hEj0f2eFSPR/d4TI/H9miPx/V4fI8n9Diyx1E9ju7xxB5P6vHkHk/p8dQeT+vx9B7P6PHMHs/q8ewez+nx3B7P6/H8Hi/o8cIeL+rx4h4v6fHSHi/r8fIer+jxyh6v6vHqHq/p8doer+vx+h5v6PHGHm/q8eYeb+nx1h5v6/H2Hu/o8c4e7+rx7h7v6fHeHu/r8f4eH+jxwR4f6vHhHv9fAAAA//8vgQKF") 5.849818514s ago: executing program 0 (id=372): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc9}}}, 0x8) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='\r', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=ANY=[], 0xb0}}], 0x2, 0x400c878) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000180)='2\x00', 0x2) write(r2, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close(r1) 5.849279274s ago: executing program 4 (id=373): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/242, 0xf2}], 0x1, 0x4, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_io_uring_setup(0x9cb, &(0x7f0000000500)={0x0, 0x3c1, 0x800, 0x0, 0x303, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x6}, @noop, @timestamp={0x44, 0x4}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) sigaltstack(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x22, 0x2, 0x4) getpeername$inet(r5, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x4020940d, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x25, 0x0, "67d401136a26f0e201537ab118c4aab19a0ea93185087ed1128770039bdeda45de723fb17a76a2b9e404fff84d36c7e40044956b12258f3c61799f79b1c06b4a0433dae1ad3b8ea0d9fc8cd629ba56e3"}, 0xd8) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12017002000000202312073f4000010203f6ac541376abd188c0200904000601030105068921018081012224060905810340008306070905020310007f00f3"], &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0xd1, 0x2, 0x40, 0x7e}, 0x40, &(0x7f0000000280)={0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x4, 0x3f, 0x401, 0x36}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "89042ec390675ef9409c659b9aa56173"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0x3, 0x907e}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xc0, 0x7, 0x895}]}, 0x2, [{0x20, &(0x7f00000002c0)=@string={0x20, 0x3, "2f8b629134e41ba55736933fde75a4add741356fbe07419ff709aa0fd0a6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.601802634s ago: executing program 2 (id=374): r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r0, &(0x7f00000002c0), 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 5.021441942s ago: executing program 1 (id=375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x88, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, @in6={0xa, 0x0, 0x0, @remote}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @remote}]}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500280008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200"], 0xfdef) 5.020895512s ago: executing program 2 (id=376): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff5f282828882fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xe0}], 0x1}, 0x0) 4.038986272s ago: executing program 2 (id=377): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000040)="1002d7d957c9dc8dda937c7b61567297207adb3029e20544ec044c2fbb6bf865c9331165cb94d9fcb78cb57f9b40b11393c0030046c2e390f91dbd9ddf7accf1295f9abfb2b534ba", 0x0, 0x48) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000), 0x6, 0x0) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="a6cd9106d7dd98ba867d7478bd665438923fc50e491eef6cb10b5ffc24c92b772e2af819e3d9bd3ab05a4bbe279dbf84f2f4f731cbd5d8a9df0f8cc34b5c6a85af810e564329ec6f", 0x0, 0x48) 3.827888649s ago: executing program 2 (id=378): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x20, &(0x7f0000000080)) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) ppoll(&(0x7f00000008c0)=[{}], 0x1, &(0x7f0000000980), 0x0, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000001c0)={0x24, @short}, 0x14) syz_usb_connect(0x2, 0x79, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100157e389205a0828001001010203010902670001400000000904bc000047a2a5100a24010200020201020c240202010104fc06000ef80b24050608b5d20ef349080b240600001c5cfd0300ae05240002040d240f010000000000000600000c241bfb0316030777bac660c437dfdda1ef17d2e60f0600070c241b0200080002075c0705"], 0x0) ptrace$getsig(0x4202, r1, 0x8, &(0x7f0000000200)) 3.492937246s ago: executing program 0 (id=379): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x65) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="e3", 0x1}, {&(0x7f0000000140)="cd1de4ea9b5c798fc37d3de6", 0xc}, {&(0x7f00000001c0)="2904fe324eef70be9f3042fd2ebc9fd3f337467b2074f3149e7554445577a1d344a971067a00002afb6b4bb3e135a93bc983559ac7cbb311ac23f57150cecc36f26bcbf39aaa21aabe5f3229e9db0c0c602bdb33d56688d2937ad618f60d5175fb42ca1635a396567e81462d9d928b6726ca293517fb70a052c43ab7f1cdde", 0x7f}], 0x3}}], 0x1, 0x8004) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 3.274193594s ago: executing program 3 (id=318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x205}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.900781984s ago: executing program 0 (id=380): r0 = syz_io_uring_complete(0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f00000000c0)) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, 0x0, 0x0) accept4$ax25(r0, &(0x7f0000000180)={{0x3, @null}, [@remote, @null, @remote, @netrom, @remote, @null, @bcast, @netrom]}, &(0x7f0000000280)=0x48, 0x800) openat$vcs(0xffffffffffffff9c, 0x0, 0x6080, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @private2}}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) 1.84931403s ago: executing program 4 (id=381): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgid(0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000080)) 1.838986101s ago: executing program 0 (id=382): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) read$FUSE(r0, &(0x7f0000001340)={0x2020}, 0x2020) 1.631620668s ago: executing program 1 (id=383): ioperm(0x0, 0x3, 0x0) eventfd2(0x0, 0xc0801) bind$xdp(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) lchown(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r1, 0x0, 0x4) readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1) vmsplice(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x10005) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2$watch_queue(0x0, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@nl=@unspec, 0x80) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='blacklist\x00', &(0x7f00000002c0)='-^\x00') setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) 308.827215ms ago: executing program 0 (id=384): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) fchown(0xffffffffffffffff, 0x0, 0x0) 308.437655ms ago: executing program 4 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 256.2µs ago: executing program 3 (id=386): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff5f282828882fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xe0}], 0x1}, 0x0) 0s ago: executing program 2 (id=387): r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) kernel console output (not intermixed with test programs): 95966][ T4054] R13: 00007fe252c13ec0 R14: 00000000000125e9 R15: 0000000020000040 [ 99.203959][ T4054] [ 99.287052][ T4054] gfs2: fsid=syz:syz.0: can't find local "sc" file#0: -5 [ 99.461981][ T4114] loop1: detected capacity change from 0 to 256 [ 99.532693][ T3597] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 99.594263][ T4116] loop4: detected capacity change from 0 to 4096 [ 99.619231][ T27] audit: type=1800 audit(1720243827.477:2): pid=4114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.119" name="file2" dev="loop1" ino=1048596 res=0 errno=0 [ 99.962970][ T3597] usb 1-1: config 64 has an invalid interface number: 188 but max is 0 [ 100.009935][ T3597] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 100.133517][ T3597] usb 1-1: config 64 has an invalid interface descriptor of length 2, skipping [ 100.203021][ T3597] usb 1-1: config 64 has an invalid descriptor of length 196, skipping remainder of the config [ 100.233363][ T3597] usb 1-1: config 64 has no interface number 0 [ 100.417744][ T3597] usb 1-1: New USB device found, idVendor=085a, idProduct=0028, bcdDevice= 1.10 [ 100.447246][ T3597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.470934][ T4116] netlink: 'syz.4.122': attribute type 11 has an invalid length. [ 100.479207][ T3597] usb 1-1: Product: syz [ 100.489646][ T3597] usb 1-1: Manufacturer: syz [ 100.497053][ T3597] usb 1-1: SerialNumber: syz [ 100.810717][ T3597] usb-storage 1-1:64.188: USB Mass Storage device detected [ 101.027465][ T3597] usb-storage 1-1:64.188: Quirks match for vid 085a pid 0028: 4 [ 101.510755][ T3933] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 101.518464][ T3938] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.552779][ T3597] usb 1-1: USB disconnect, device number 3 [ 101.824585][ T3938] usb 2-1: Using ep0 maxpacket: 16 [ 102.622533][ T3933] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 102.630635][ T3933] usb 3-1: config 0 has no interface number 0 [ 102.650448][ T3933] usb 3-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x30, skipping [ 102.715141][ T3938] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.726233][ T3938] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.748026][ T3938] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.782650][ T3933] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 102.801956][ T3933] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 102.811368][ T3933] usb 3-1: Product: syz [ 102.822422][ T3933] usb 3-1: SerialNumber: syz [ 102.843159][ T3933] usb 3-1: config 0 descriptor?? [ 102.895038][ T3933] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 102.904680][ T4143] loop3: detected capacity change from 0 to 40427 [ 102.932645][ T3938] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.948206][ T4143] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 102.952466][ T3938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.965079][ T4143] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 102.982660][ T3936] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.001514][ T3938] usb 2-1: Product: syz [ 103.011990][ T3938] usb 2-1: Manufacturer: syz [ 103.025135][ T3938] usb 2-1: SerialNumber: syz [ 103.036878][ T4143] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.152638][ T4143] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 103.162018][ T4143] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 103.206736][ T3933] usb 3-1: USB disconnect, device number 3 [ 103.252885][ T3936] usb 1-1: Using ep0 maxpacket: 32 [ 103.358055][ T4127] loop1: detected capacity change from 0 to 512 [ 103.392819][ T3936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.414312][ T3936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.474615][ T4127] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 103.494008][ T3936] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 103.494259][ T4127] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff) [ 103.514314][ T3936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.567098][ T3936] usb 1-1: config 0 descriptor?? [ 103.608601][ T3936] hub 1-1:0.0: USB hub found [ 103.822500][ T4152] netlink: 104 bytes leftover after parsing attributes in process `syz.0.131'. [ 103.952856][ T3936] hub 1-1:0.0: 1 port detected [ 104.962206][ T4170] sched: RT throttling activated [ 105.322634][ T3936] hub 1-1:0.0: activate --> -90 [ 105.892524][ T3936] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 105.922594][ T3936] usb 1-1-port1: cannot reset (err = -71) [ 106.914542][ T3936] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad? [ 106.955110][ T3938] usb 2-1: USB disconnect, device number 3 [ 106.965109][ T3936] usb 1-1-port1: cannot disable (err = -71) [ 107.023323][ T3936] usb 1-1-port1: cannot reset (err = -71) [ 107.052653][ T3936] usb 1-1-port1: cannot reset (err = -71) [ 107.058449][ T3936] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad? [ 107.089125][ T3937] usb 1-1: USB disconnect, device number 4 [ 107.112717][ T3936] usb 1-1-port1: cannot disable (err = -71) [ 107.118744][ T3936] usb 1-1-port1: attempt power cycle [ 107.303320][ T3664] udevd[3664]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.974254][ T3549] EXT4-fs (loop1): unmounting filesystem. [ 108.073051][ T4190] sp0: Synchronizing with TNC [ 108.298260][ T3937] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 108.308564][ T4143] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 108.321468][ T4143] syz.3.130: attempt to access beyond end of device [ 108.321468][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.331152][ T4196] loop1: detected capacity change from 0 to 4096 [ 108.338758][ T4143] syz.3.130: attempt to access beyond end of device [ 108.338758][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 108.360870][ T4143] syz.3.130: attempt to access beyond end of device [ 108.360870][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.375738][ T4143] syz.3.130: attempt to access beyond end of device [ 108.375738][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 108.392064][ T4143] syz.3.130: attempt to access beyond end of device [ 108.392064][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.406749][ T4143] syz.3.130: attempt to access beyond end of device [ 108.406749][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 108.423103][ T4143] syz.3.130: attempt to access beyond end of device [ 108.423103][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.438694][ T4143] syz.3.130: attempt to access beyond end of device [ 108.438694][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 108.455760][ T4143] syz.3.130: attempt to access beyond end of device [ 108.455760][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.471930][ T4143] syz.3.130: attempt to access beyond end of device [ 108.471930][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 109.315494][ T4196] netlink: 'syz.1.137': attribute type 11 has an invalid length. [ 109.402894][ T3937] usb 5-1: config 64 has an invalid interface number: 188 but max is 0 [ 109.424090][ T3937] usb 5-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 109.473153][ T3937] usb 5-1: config 64 has an invalid interface descriptor of length 2, skipping [ 109.509134][ T3937] usb 5-1: config 64 has an invalid descriptor of length 196, skipping remainder of the config [ 109.580988][ T3937] usb 5-1: config 64 has no interface number 0 [ 109.922859][ T3937] usb 5-1: New USB device found, idVendor=085a, idProduct=0028, bcdDevice= 1.10 [ 109.940872][ T3937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.033664][ T3937] usb 5-1: Product: syz [ 110.060211][ T3937] usb 5-1: Manufacturer: syz [ 110.112339][ T3937] usb 5-1: SerialNumber: syz [ 110.422689][ T3938] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 110.443466][ T3937] usb-storage 5-1:64.188: USB Mass Storage device detected [ 110.677055][ T3937] usb-storage 5-1:64.188: Quirks match for vid 085a pid 0028: 4 [ 110.738037][ T3937] usb 5-1: USB disconnect, device number 4 [ 111.652621][ T3938] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 111.662270][ T3938] usb 1-1: config 0 has no interface number 0 [ 111.696801][ T3938] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x30, skipping [ 111.902796][ T3938] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 111.919329][ T3938] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 112.200009][ T3938] usb 1-1: Product: syz [ 112.210129][ T3938] usb 1-1: SerialNumber: syz [ 113.325219][ T4143] bio_check_eod: 1919 callbacks suppressed [ 113.325265][ T4143] syz.3.130: attempt to access beyond end of device [ 113.325265][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 113.356176][ T4143] syz.3.130: attempt to access beyond end of device [ 113.356176][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.373202][ T4143] syz.3.130: attempt to access beyond end of device [ 113.373202][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 113.398155][ T4143] syz.3.130: attempt to access beyond end of device [ 113.398155][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.415165][ T4143] syz.3.130: attempt to access beyond end of device [ 113.415165][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 113.431974][ T4143] syz.3.130: attempt to access beyond end of device [ 113.431974][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.448702][ T4143] syz.3.130: attempt to access beyond end of device [ 113.448702][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 113.465923][ T4143] syz.3.130: attempt to access beyond end of device [ 113.465923][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.481145][ T4143] syz.3.130: attempt to access beyond end of device [ 113.481145][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 113.497386][ T4143] syz.3.130: attempt to access beyond end of device [ 113.497386][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.976299][ T3938] usb 1-1: config 0 descriptor?? [ 113.992669][ T3938] usb 1-1: can't set config #0, error -71 [ 114.013467][ T4234] sp0: Synchronizing with TNC [ 114.163061][ T3564] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.181462][ T3564] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.190104][ T3564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.198525][ T3565] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.207854][ T3564] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 114.218928][ T3565] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.367435][ T3938] usb 1-1: USB disconnect, device number 9 [ 114.981708][ T4243] loop4: detected capacity change from 0 to 4096 [ 115.289379][ T4243] netlink: 'syz.4.153': attribute type 11 has an invalid length. [ 116.473699][ T3564] Bluetooth: hci5: command tx timeout [ 116.580773][ T4237] chnl_net:caif_netlink_parms(): no params data found [ 118.334000][ T4143] bio_check_eod: 2072 callbacks suppressed [ 118.334054][ T4143] syz.3.130: attempt to access beyond end of device [ 118.334054][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.366034][ T4143] syz.3.130: attempt to access beyond end of device [ 118.366034][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 118.383368][ T4143] syz.3.130: attempt to access beyond end of device [ 118.383368][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.408855][ T4143] syz.3.130: attempt to access beyond end of device [ 118.408855][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 118.426385][ T4143] syz.3.130: attempt to access beyond end of device [ 118.426385][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.454111][ T4143] syz.3.130: attempt to access beyond end of device [ 118.454111][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 118.471412][ T4143] syz.3.130: attempt to access beyond end of device [ 118.471412][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.497242][ T4143] syz.3.130: attempt to access beyond end of device [ 118.497242][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 118.518623][ T4143] syz.3.130: attempt to access beyond end of device [ 118.518623][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.536555][ T4143] syz.3.130: attempt to access beyond end of device [ 118.536555][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 118.597748][ T3564] Bluetooth: hci5: command tx timeout [ 118.763430][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.770580][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.865316][ T4237] device bridge_slave_0 entered promiscuous mode [ 118.899426][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.937534][ T4237] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.967526][ T4237] device bridge_slave_1 entered promiscuous mode [ 119.056530][ T4237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.082501][ T3597] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.091862][ T3806] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 119.316835][ T4237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.465843][ T4237] team0: Port device team_slave_0 added [ 119.485807][ T4281] loop1: detected capacity change from 0 to 128 [ 119.539086][ T4281] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 119.555975][ T4237] team0: Port device team_slave_1 added [ 119.583949][ T4281] sysv_free_block: trying to free block not in datazone [ 119.618540][ T4281] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 119.652859][ T3806] usb 1-1: config 64 has an invalid interface number: 188 but max is 0 [ 119.661462][ T3597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 119.673008][ T3806] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 119.725839][ T3806] usb 1-1: config 64 has an invalid interface descriptor of length 2, skipping [ 119.776137][ T3806] usb 1-1: config 64 has an invalid descriptor of length 196, skipping remainder of the config [ 119.808462][ T3806] usb 1-1: config 64 has no interface number 0 [ 119.839704][ T4237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.851333][ T4237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.881157][ T3597] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 119.904005][ T3597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.953799][ T3597] usb 5-1: Product: syz [ 119.956149][ T4237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.968565][ T3597] usb 5-1: Manufacturer: syz [ 119.974253][ T3597] usb 5-1: SerialNumber: syz [ 120.000534][ T3597] usb 5-1: config 0 descriptor?? [ 120.006066][ T3806] usb 1-1: New USB device found, idVendor=085a, idProduct=0028, bcdDevice= 1.10 [ 120.022487][ T3806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.041089][ T3806] usb 1-1: Product: syz [ 120.061442][ T3806] usb 1-1: Manufacturer: syz [ 120.076790][ T3806] usb 1-1: SerialNumber: syz [ 120.467000][ T4273] netlink: 'syz.4.160': attribute type 16 has an invalid length. [ 120.475032][ T4273] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.160'. [ 120.485543][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 120.505845][ T4237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.531602][ T4237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.672744][ T3564] Bluetooth: hci5: command tx timeout [ 120.699681][ T4237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.106057][ T4237] device hsr_slave_0 entered promiscuous mode [ 121.145272][ T4237] device hsr_slave_1 entered promiscuous mode [ 121.172161][ T4237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.240400][ T4237] Cannot create hsr debugfs directory [ 121.983167][ T3806] usb-storage 1-1:64.188: USB Mass Storage device detected [ 121.993607][ T3597] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 122.983351][ T3558] Bluetooth: hci5: command tx timeout [ 123.182689][ T4237] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.342553][ T4143] bio_check_eod: 2419 callbacks suppressed [ 123.342574][ T4143] syz.3.130: attempt to access beyond end of device [ 123.342574][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.364359][ T4143] syz.3.130: attempt to access beyond end of device [ 123.364359][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.380666][ T4143] syz.3.130: attempt to access beyond end of device [ 123.380666][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.396112][ T4143] syz.3.130: attempt to access beyond end of device [ 123.396112][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.412502][ T4143] syz.3.130: attempt to access beyond end of device [ 123.412502][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.428938][ T4143] syz.3.130: attempt to access beyond end of device [ 123.428938][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.445635][ T4143] syz.3.130: attempt to access beyond end of device [ 123.445635][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.461210][ T4143] syz.3.130: attempt to access beyond end of device [ 123.461210][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.477474][ T4143] syz.3.130: attempt to access beyond end of device [ 123.477474][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.477773][ T4237] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.493008][ T4143] syz.3.130: attempt to access beyond end of device [ 123.493008][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.710253][ T4299] loop4: detected capacity change from 0 to 4096 [ 123.965826][ T3597] usb 5-1: USB disconnect, device number 5 [ 123.976713][ T3664] udevd[3664]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.994254][ T3806] usb-storage 1-1:64.188: Quirks match for vid 085a pid 0028: 4 [ 125.639875][ T4299] netlink: 'syz.4.169': attribute type 11 has an invalid length. [ 125.968203][ T4237] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.042162][ T4320] loop1: detected capacity change from 0 to 128 [ 126.068424][ T4320] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 126.261871][ T4320] sysv_free_block: trying to free block not in datazone [ 126.351446][ T4320] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 126.965849][ T3806] usb 1-1: USB disconnect, device number 10 [ 127.975068][ T4237] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.360387][ T4143] bio_check_eod: 2132 callbacks suppressed [ 128.360435][ T4143] syz.3.130: attempt to access beyond end of device [ 128.360435][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.383976][ T4143] syz.3.130: attempt to access beyond end of device [ 128.383976][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.410866][ T4143] syz.3.130: attempt to access beyond end of device [ 128.410866][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.428875][ T4143] syz.3.130: attempt to access beyond end of device [ 128.428875][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.457074][ T4143] syz.3.130: attempt to access beyond end of device [ 128.457074][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.474865][ T4143] syz.3.130: attempt to access beyond end of device [ 128.474865][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.500908][ T4143] syz.3.130: attempt to access beyond end of device [ 128.500908][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.519106][ T4143] syz.3.130: attempt to access beyond end of device [ 128.519106][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.547974][ T4143] syz.3.130: attempt to access beyond end of device [ 128.547974][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.565464][ T4143] syz.3.130: attempt to access beyond end of device [ 128.565464][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 129.827394][ T4237] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 129.870406][ T4237] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 129.958460][ T4237] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.083416][ T4237] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 131.472888][ T4237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.615458][ T4237] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.692681][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.700822][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.788328][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.807722][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.858274][ T3933] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.865500][ T3933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.932139][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.969230][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.006323][ T3933] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.013648][ T3933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.048550][ T3933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.237439][ T4237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.361357][ T4237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.965904][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.972254][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.363738][ T4143] bio_check_eod: 2092 callbacks suppressed [ 133.363760][ T4143] syz.3.130: attempt to access beyond end of device [ 133.363760][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.384298][ T4143] syz.3.130: attempt to access beyond end of device [ 133.384298][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.400683][ T4143] syz.3.130: attempt to access beyond end of device [ 133.400683][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.415446][ T4143] syz.3.130: attempt to access beyond end of device [ 133.415446][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.430891][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.432746][ T4143] syz.3.130: attempt to access beyond end of device [ 133.432746][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.453326][ T4143] syz.3.130: attempt to access beyond end of device [ 133.453326][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.469291][ T4143] syz.3.130: attempt to access beyond end of device [ 133.469291][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.483991][ T4143] syz.3.130: attempt to access beyond end of device [ 133.483991][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.499606][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.500144][ T4143] syz.3.130: attempt to access beyond end of device [ 133.500144][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.522218][ T4143] syz.3.130: attempt to access beyond end of device [ 133.522218][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.573194][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.631233][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.707219][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.773608][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.782337][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.066823][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.093606][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.114174][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.139646][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.205776][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.350428][ T4376] loop4: detected capacity change from 0 to 128 [ 134.447124][ T4376] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 134.493538][ T4376] sysv_free_block: trying to free block not in datazone [ 134.541473][ T4376] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 136.003318][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.010872][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.093616][ T4237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.267324][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.311047][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.382771][ T3936] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 136.418843][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.643427][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.425499][ T4237] device veth0_vlan entered promiscuous mode [ 137.449118][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.456666][ T4391] sp0: Synchronizing with TNC [ 137.463006][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.476794][ T4237] device veth1_vlan entered promiscuous mode [ 137.509388][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.563625][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.582928][ T3936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 137.846942][ T4237] device veth0_macvtap entered promiscuous mode [ 137.865777][ T4237] device veth1_macvtap entered promiscuous mode [ 137.886459][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.979580][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.989642][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.382051][ T4143] bio_check_eod: 2262 callbacks suppressed [ 138.382097][ T4143] syz.3.130: attempt to access beyond end of device [ 138.382097][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.405950][ T4143] syz.3.130: attempt to access beyond end of device [ 138.405950][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.440990][ T4143] syz.3.130: attempt to access beyond end of device [ 138.440990][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.455946][ T4143] syz.3.130: attempt to access beyond end of device [ 138.455946][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.472236][ T4143] syz.3.130: attempt to access beyond end of device [ 138.472236][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.486935][ T4143] syz.3.130: attempt to access beyond end of device [ 138.486935][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.503578][ T4143] syz.3.130: attempt to access beyond end of device [ 138.503578][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.518284][ T4143] syz.3.130: attempt to access beyond end of device [ 138.518284][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.537536][ T4143] syz.3.130: attempt to access beyond end of device [ 138.537536][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.552445][ T4143] syz.3.130: attempt to access beyond end of device [ 138.552445][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.797084][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.902515][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.963357][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.222978][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.962491][ T3936] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 139.971604][ T3936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.167280][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.222256][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.461073][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.565254][ T4237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.671458][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.956896][ T3936] usb 1-1: Product: syz [ 140.963979][ T3936] usb 1-1: config 0 descriptor?? [ 140.975656][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.985875][ T3936] usb 1-1: can't set config #0, error -71 [ 141.615981][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.627674][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.637944][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.649179][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.659478][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.670609][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.680859][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.691943][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.723775][ T3936] usb 1-1: USB disconnect, device number 11 [ 141.795722][ T4237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.840270][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.856958][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.951987][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.001711][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.329314][ T4417] loop0: detected capacity change from 0 to 40427 [ 143.384599][ T4143] bio_check_eod: 2194 callbacks suppressed [ 143.384620][ T4143] syz.3.130: attempt to access beyond end of device [ 143.384620][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.394771][ T4417] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 143.405238][ T4143] syz.3.130: attempt to access beyond end of device [ 143.405238][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.428512][ T4143] syz.3.130: attempt to access beyond end of device [ 143.428512][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.443435][ T4143] syz.3.130: attempt to access beyond end of device [ 143.443435][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.459906][ T4143] syz.3.130: attempt to access beyond end of device [ 143.459906][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.474577][ T4143] syz.3.130: attempt to access beyond end of device [ 143.474577][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.490926][ T4143] syz.3.130: attempt to access beyond end of device [ 143.490926][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.502458][ T4417] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 143.505574][ T4143] syz.3.130: attempt to access beyond end of device [ 143.505574][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.529740][ T4143] syz.3.130: attempt to access beyond end of device [ 143.529740][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.545033][ T4143] syz.3.130: attempt to access beyond end of device [ 143.545033][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.623983][ T4417] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.922317][ T4425] loop1: detected capacity change from 0 to 32768 [ 143.960703][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.971096][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.110463][ T4237] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.122903][ T4425] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.210 (4425) [ 144.172428][ T4237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.256917][ T4237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.514236][ T4237] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.983137][ T4425] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.462637][ T4425] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 145.542833][ T4425] BTRFS info (device loop1): setting nodatacow, compression disabled [ 145.583457][ T4425] BTRFS info (device loop1): enabling auto defrag [ 145.612176][ T4425] BTRFS info (device loop1): max_inline at 0 [ 145.642601][ T4425] BTRFS info (device loop1): using free space tree [ 145.858089][ T4425] BTRFS error (device loop1): open_ctree failed [ 148.092843][ T4026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.130277][ T4026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.392734][ T4143] bio_check_eod: 2377 callbacks suppressed [ 148.392755][ T4143] syz.3.130: attempt to access beyond end of device [ 148.392755][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.414878][ T4143] syz.3.130: attempt to access beyond end of device [ 148.414878][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.432125][ T4143] syz.3.130: attempt to access beyond end of device [ 148.432125][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.448750][ T4143] syz.3.130: attempt to access beyond end of device [ 148.448750][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.453526][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.463507][ T4143] syz.3.130: attempt to access beyond end of device [ 148.463507][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.487498][ T4143] syz.3.130: attempt to access beyond end of device [ 148.487498][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.502145][ T4143] syz.3.130: attempt to access beyond end of device [ 148.502145][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.518531][ T4143] syz.3.130: attempt to access beyond end of device [ 148.518531][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.533213][ T4143] syz.3.130: attempt to access beyond end of device [ 148.533213][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.549505][ T4143] syz.3.130: attempt to access beyond end of device [ 148.549505][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.552865][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.783182][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.741718][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.972479][ T3933] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 151.006163][ T4489] sp0: Synchronizing with TNC [ 152.622875][ T936] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.892531][ T936] usb 4-1: Using ep0 maxpacket: 16 [ 153.052881][ T936] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.091099][ T936] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.181659][ T936] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.404958][ T4143] bio_check_eod: 2085 callbacks suppressed [ 153.404979][ T4143] syz.3.130: attempt to access beyond end of device [ 153.404979][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.426955][ T4143] syz.3.130: attempt to access beyond end of device [ 153.426955][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.443703][ T4143] syz.3.130: attempt to access beyond end of device [ 153.443703][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.459678][ T4143] syz.3.130: attempt to access beyond end of device [ 153.459678][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.476017][ T4143] syz.3.130: attempt to access beyond end of device [ 153.476017][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.490230][ T936] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.490656][ T4143] syz.3.130: attempt to access beyond end of device [ 153.490656][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.515586][ T4143] syz.3.130: attempt to access beyond end of device [ 153.515586][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.518293][ T936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.530220][ T4143] syz.3.130: attempt to access beyond end of device [ 153.530220][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.554824][ T4143] syz.3.130: attempt to access beyond end of device [ 153.554824][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.569501][ T4143] syz.3.130: attempt to access beyond end of device [ 153.569501][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.602854][ T936] usb 4-1: Product: syz [ 153.617449][ T936] usb 4-1: Manufacturer: syz [ 153.639097][ T936] usb 4-1: SerialNumber: syz [ 153.822210][ T4500] loop0: detected capacity change from 0 to 32768 [ 153.858523][ T4500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.226 (4500) [ 154.009501][ T4500] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.086233][ T4500] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 154.232473][ T4500] BTRFS info (device loop0): setting nodatacow, compression disabled [ 154.241165][ T4500] BTRFS info (device loop0): enabling auto defrag [ 154.353052][ T4500] BTRFS info (device loop0): max_inline at 0 [ 154.359272][ T4500] BTRFS info (device loop0): using free space tree [ 155.624354][ T4500] BTRFS error (device loop0): open_ctree failed [ 158.412967][ T4143] bio_check_eod: 1881 callbacks suppressed [ 158.413013][ T4143] syz.3.130: attempt to access beyond end of device [ 158.413013][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.444720][ T4143] syz.3.130: attempt to access beyond end of device [ 158.444720][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.464289][ T4143] syz.3.130: attempt to access beyond end of device [ 158.464289][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.489620][ T4143] syz.3.130: attempt to access beyond end of device [ 158.489620][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.506995][ T4143] syz.3.130: attempt to access beyond end of device [ 158.506995][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.535164][ T4143] syz.3.130: attempt to access beyond end of device [ 158.535164][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.552740][ T4143] syz.3.130: attempt to access beyond end of device [ 158.552740][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.578611][ T4143] syz.3.130: attempt to access beyond end of device [ 158.578611][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.596002][ T4143] syz.3.130: attempt to access beyond end of device [ 158.596002][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.619919][ T4143] syz.3.130: attempt to access beyond end of device [ 158.619919][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 159.105949][ T936] usb 4-1: USB disconnect, device number 4 [ 160.057761][ T3664] udevd[3664]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.342473][ T3734] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 161.602868][ T3734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 161.792812][ T3734] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 161.806142][ T4567] Falling back ldisc for ttyS3. [ 161.842563][ T3734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.881301][ T3734] usb 1-1: Product: syz [ 161.893881][ T3734] usb 1-1: Manufacturer: syz [ 161.898532][ T3734] usb 1-1: SerialNumber: syz [ 161.983148][ T3734] usb 1-1: config 0 descriptor?? [ 161.996051][ T4570] device batadv0 entered promiscuous mode [ 162.661183][ T4577] netlink: 'syz.0.234': attribute type 16 has an invalid length. [ 162.671716][ T4577] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.234'. [ 162.682155][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 163.425802][ T4143] bio_check_eod: 2023 callbacks suppressed [ 163.425823][ T4143] syz.3.130: attempt to access beyond end of device [ 163.425823][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.448178][ T4143] syz.3.130: attempt to access beyond end of device [ 163.448178][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.465148][ T4143] syz.3.130: attempt to access beyond end of device [ 163.465148][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.479764][ T4143] syz.3.130: attempt to access beyond end of device [ 163.479764][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.496001][ T4143] syz.3.130: attempt to access beyond end of device [ 163.496001][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.511259][ T4143] syz.3.130: attempt to access beyond end of device [ 163.511259][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.527559][ T4143] syz.3.130: attempt to access beyond end of device [ 163.527559][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.542303][ T4143] syz.3.130: attempt to access beyond end of device [ 163.542303][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.558621][ T4143] syz.3.130: attempt to access beyond end of device [ 163.558621][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.573251][ T4143] syz.3.130: attempt to access beyond end of device [ 163.573251][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.987157][ T3558] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 165.212706][ T3558] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 165.221145][ T3565] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 165.230795][ T3558] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 165.239897][ T3558] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 165.247777][ T3558] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 165.258544][ T3734] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 165.336982][ T3734] usb 1-1: USB disconnect, device number 13 [ 165.467862][ T4596] loop4: detected capacity change from 0 to 2048 [ 165.552591][ T3803] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.603856][ T3664] udevd[3664]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.871466][ T4596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 166.702828][ T3803] usb 3-1: Using ep0 maxpacket: 16 [ 167.033583][ T3803] usb 3-1: device descriptor read/all, error -71 [ 167.632192][ T3558] Bluetooth: hci6: command tx timeout [ 168.226991][ T4616] syz.0.257 uses obsolete (PF_INET,SOCK_PACKET) [ 168.434271][ T4143] bio_check_eod: 2106 callbacks suppressed [ 168.434293][ T4143] syz.3.130: attempt to access beyond end of device [ 168.434293][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.456105][ T4143] syz.3.130: attempt to access beyond end of device [ 168.456105][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.472030][ T4143] syz.3.130: attempt to access beyond end of device [ 168.472030][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.486401][ T4143] syz.3.130: attempt to access beyond end of device [ 168.486401][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.502818][ T4143] syz.3.130: attempt to access beyond end of device [ 168.502818][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.517389][ T4143] syz.3.130: attempt to access beyond end of device [ 168.517389][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.534053][ T4143] syz.3.130: attempt to access beyond end of device [ 168.534053][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.549634][ T4143] syz.3.130: attempt to access beyond end of device [ 168.549634][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.565370][ T4143] syz.3.130: attempt to access beyond end of device [ 168.565370][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.580105][ T4143] syz.3.130: attempt to access beyond end of device [ 168.580105][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.984873][ T4611] bridge0: port 3(macvlan1) entered blocking state [ 168.992225][ T4611] bridge0: port 3(macvlan1) entered disabled state [ 169.001782][ T4611] device macvlan1 entered promiscuous mode [ 169.009152][ T4611] bridge0: port 3(macvlan1) entered blocking state [ 169.016342][ T4611] bridge0: port 3(macvlan1) entered forwarding state [ 169.953418][ T3558] Bluetooth: hci6: command tx timeout [ 170.122602][ T3557] EXT4-fs (loop4): unmounting filesystem. [ 170.326901][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.571582][ T3803] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 171.319776][ T3327] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 171.375597][ T4632] device batadv0 entered promiscuous mode [ 171.839636][ T4636] loop0: detected capacity change from 0 to 128 [ 171.902641][ T4636] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 171.964007][ T4636] sysv_free_block: trying to free block not in datazone [ 171.982488][ T3558] Bluetooth: hci6: command tx timeout [ 172.009180][ T4636] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 173.300653][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.444180][ T4143] bio_check_eod: 2292 callbacks suppressed [ 173.444199][ T4143] syz.3.130: attempt to access beyond end of device [ 173.444199][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.465580][ T4143] syz.3.130: attempt to access beyond end of device [ 173.465580][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.481899][ T4143] syz.3.130: attempt to access beyond end of device [ 173.481899][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.496522][ T4143] syz.3.130: attempt to access beyond end of device [ 173.496522][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.512928][ T4143] syz.3.130: attempt to access beyond end of device [ 173.512928][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.527906][ T4143] syz.3.130: attempt to access beyond end of device [ 173.527906][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.544129][ T4143] syz.3.130: attempt to access beyond end of device [ 173.544129][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.558770][ T4143] syz.3.130: attempt to access beyond end of device [ 173.558770][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.575752][ T4143] syz.3.130: attempt to access beyond end of device [ 173.575752][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.590574][ T4143] syz.3.130: attempt to access beyond end of device [ 173.590574][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.604042][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 173.842554][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 173.867249][ T4586] chnl_net:caif_netlink_parms(): no params data found [ 173.964636][ T22] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.009628][ T22] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.211117][ T3558] Bluetooth: hci6: command tx timeout [ 174.251711][ T22] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.265681][ T3327] usb 4-1: device not accepting address 5, error -71 [ 175.056188][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.309300][ T4586] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.337047][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.358581][ T4586] device bridge_slave_0 entered promiscuous mode [ 175.378730][ T4586] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.410347][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.440033][ T4586] device bridge_slave_1 entered promiscuous mode [ 175.542971][ T4586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.592720][ T4586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.699592][ T4586] team0: Port device team_slave_0 added [ 175.752310][ T4586] team0: Port device team_slave_1 added [ 175.847111][ T4586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.874931][ T4586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.942385][ T4586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.989841][ T4586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.009951][ T4586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.098222][ T4586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.255065][ T4586] device hsr_slave_0 entered promiscuous mode [ 176.270530][ T4586] device hsr_slave_1 entered promiscuous mode [ 176.303948][ T4656] loop2: detected capacity change from 0 to 32768 [ 176.327160][ T4586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.391043][ T4656] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.268 (4656) [ 176.412408][ T4586] Cannot create hsr debugfs directory [ 176.988312][ T4656] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.994802][ T4662] loop4: detected capacity change from 0 to 2048 [ 177.978819][ T4656] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 177.992486][ T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.059638][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.092814][ T4656] BTRFS info (device loop2): disabling free space tree [ 178.100873][ T4662] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 178.122535][ T3327] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.154264][ T4656] BTRFS info (device loop2): setting nodatacow, compression disabled [ 178.469733][ T4143] bio_check_eod: 2266 callbacks suppressed [ 178.469875][ T4143] syz.3.130: attempt to access beyond end of device [ 178.469875][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.493072][ T4143] syz.3.130: attempt to access beyond end of device [ 178.493072][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.519134][ T4143] syz.3.130: attempt to access beyond end of device [ 178.519134][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.538353][ T4143] syz.3.130: attempt to access beyond end of device [ 178.538353][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.569039][ T4143] syz.3.130: attempt to access beyond end of device [ 178.569039][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.583669][ T4143] syz.3.130: attempt to access beyond end of device [ 178.583669][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.599940][ T4143] syz.3.130: attempt to access beyond end of device [ 178.599940][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.615256][ T4143] syz.3.130: attempt to access beyond end of device [ 178.615256][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.632043][ T4143] syz.3.130: attempt to access beyond end of device [ 178.632043][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.646900][ T4143] syz.3.130: attempt to access beyond end of device [ 178.646900][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.945164][ T3557] EXT4-fs (loop4): unmounting filesystem. [ 178.980310][ T4656] BTRFS info (device loop2): enabling disk space caching [ 178.982479][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.193304][ T4656] BTRFS info (device loop2): use no compression [ 179.242651][ T4656] BTRFS info (device loop2): disabling disk space caching [ 179.267323][ T4656] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 179.285604][ T22] usb 5-1: Product: syz [ 179.325181][ T4656] BTRFS info (device loop2): trying to use backup root at mount time [ 179.372514][ T4656] BTRFS error (device loop2): cannot disable free space tree [ 179.422776][ T22] usb 5-1: can't set config #1, error -71 [ 179.456518][ T22] usb 5-1: USB disconnect, device number 6 [ 179.984800][ T4656] BTRFS error (device loop2): open_ctree failed [ 180.621397][ T4671] device batadv0 entered promiscuous mode [ 183.473794][ T4143] bio_check_eod: 2201 callbacks suppressed [ 183.473813][ T4143] syz.3.130: attempt to access beyond end of device [ 183.473813][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.495806][ T4143] syz.3.130: attempt to access beyond end of device [ 183.495806][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.511115][ T4143] syz.3.130: attempt to access beyond end of device [ 183.511115][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.527510][ T4143] syz.3.130: attempt to access beyond end of device [ 183.527510][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.543834][ T4143] syz.3.130: attempt to access beyond end of device [ 183.543834][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.560143][ T4143] syz.3.130: attempt to access beyond end of device [ 183.560143][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.574804][ T4143] syz.3.130: attempt to access beyond end of device [ 183.574804][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.590114][ T4586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 183.590993][ T4143] syz.3.130: attempt to access beyond end of device [ 183.590993][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.611476][ T4143] syz.3.130: attempt to access beyond end of device [ 183.611476][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.627619][ T4143] syz.3.130: attempt to access beyond end of device [ 183.627619][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.678296][ T4586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 183.727806][ T4586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 183.804571][ T4586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 183.954365][ T936] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 184.183054][ T3597] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 184.316229][ T4718] loop0: detected capacity change from 0 to 2048 [ 184.423162][ T3597] usb 5-1: Using ep0 maxpacket: 16 [ 184.510215][ T4586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.534757][ T4718] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 184.545380][ T3597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 184.577635][ T3597] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 184.870044][ T3597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.899592][ T3327] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 185.419634][ T3597] usb 5-1: config 0 descriptor?? [ 185.676114][ T4715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.282'. [ 185.711788][ T27] audit: type=1326 audit(1720243913.567:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafef975bd9 code=0x7ffc0000 [ 185.812872][ T27] audit: type=1326 audit(1720243913.607:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fafef975bd9 code=0x7ffc0000 [ 185.961709][ T27] audit: type=1326 audit(1720243913.607:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafef975bd9 code=0x7ffc0000 [ 186.016055][ T4724] bridge0: port 3(macvlan1) entered blocking state [ 186.023219][ T4724] bridge0: port 3(macvlan1) entered disabled state [ 186.031923][ T4724] device macvlan1 entered promiscuous mode [ 186.039041][ T4724] bridge0: port 3(macvlan1) entered blocking state [ 186.046069][ T4724] bridge0: port 3(macvlan1) entered forwarding state [ 186.186821][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.207213][ T4715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.231226][ T3550] EXT4-fs (loop0): unmounting filesystem. [ 186.253662][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.284994][ T4715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.303220][ T27] audit: type=1326 audit(1720243913.607:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafef975bd9 code=0x7ffc0000 [ 186.342754][ T4715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.410346][ T4586] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.421879][ T4715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.503600][ T27] audit: type=1326 audit(1720243913.607:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafef975bd9 code=0x7ffc0000 [ 186.545275][ T3597] hid (null): invalid report_size 53675 [ 186.552050][ T3597] hid (null): unknown global tag 0xd [ 186.605757][ T3597] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 186.634566][ T27] audit: type=1326 audit(1720243913.607:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafef975bd9 code=0x7ffc0000 [ 186.667213][ T3597] hid-generic 0003:0158:0100.0001: unexpected long global item [ 186.703459][ T3597] hid-generic: probe of 0003:0158:0100.0001 failed with error -22 [ 186.771215][ T27] audit: type=1326 audit(1720243913.607:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafef975bd9 code=0x7ffc0000 [ 186.794855][ T3597] usb 5-1: USB disconnect, device number 7 [ 186.939662][ T27] audit: type=1326 audit(1720243913.607:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fafef975bd9 code=0x7ffc0000 [ 187.188097][ T27] audit: type=1326 audit(1720243913.607:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafef975bd9 code=0x7ffc0000 [ 187.569198][ T27] audit: type=1326 audit(1720243913.607:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafef975bd9 code=0x7ffc0000 [ 188.484506][ T4143] bio_check_eod: 2315 callbacks suppressed [ 188.484533][ T4143] syz.3.130: attempt to access beyond end of device [ 188.484533][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.505081][ T4143] syz.3.130: attempt to access beyond end of device [ 188.505081][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.521485][ T4143] syz.3.130: attempt to access beyond end of device [ 188.521485][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.538390][ T4143] syz.3.130: attempt to access beyond end of device [ 188.538390][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.554702][ T4143] syz.3.130: attempt to access beyond end of device [ 188.554702][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.569383][ T4143] syz.3.130: attempt to access beyond end of device [ 188.569383][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.585654][ T4143] syz.3.130: attempt to access beyond end of device [ 188.585654][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.600279][ T4143] syz.3.130: attempt to access beyond end of device [ 188.600279][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.616509][ T4143] syz.3.130: attempt to access beyond end of device [ 188.616509][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.631574][ T4143] syz.3.130: attempt to access beyond end of device [ 188.631574][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.963606][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.980273][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.974199][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.981353][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.152453][ T3327] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 190.453144][ T3601] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 190.484476][ T936] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 190.573182][ T3327] usb 5-1: config 64 has an invalid interface number: 188 but max is 0 [ 190.590345][ T3327] usb 5-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 190.599986][ T3327] usb 5-1: config 64 has an invalid interface descriptor of length 2, skipping [ 190.618324][ T3327] usb 5-1: config 64 has an invalid descriptor of length 196, skipping remainder of the config [ 190.632039][ T3327] usb 5-1: config 64 has no interface number 0 [ 190.732795][ T3601] usb 4-1: Using ep0 maxpacket: 32 [ 190.742850][ T936] usb 1-1: Using ep0 maxpacket: 16 [ 190.802612][ T3327] usb 5-1: New USB device found, idVendor=085a, idProduct=0028, bcdDevice= 1.10 [ 190.813304][ T3327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.821340][ T3327] usb 5-1: Product: syz [ 190.834739][ T3327] usb 5-1: Manufacturer: syz [ 190.841676][ T3327] usb 5-1: SerialNumber: syz [ 190.882757][ T3601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.894286][ T936] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.912455][ T936] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.924303][ T3601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.942832][ T936] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.956569][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.961813][ T3601] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 190.965685][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.983582][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.985754][ T3601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.990681][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.022275][ T3601] usb 4-1: config 0 descriptor?? [ 191.073970][ T3601] hub 4-1:0.0: USB hub found [ 191.143658][ T3327] usb-storage 5-1:64.188: USB Mass Storage device detected [ 191.156570][ T3327] usb-storage 5-1:64.188: Quirks match for vid 085a pid 0028: 4 [ 191.168027][ T936] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.190690][ T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.200646][ T936] usb 1-1: Product: syz [ 191.212219][ T936] usb 1-1: Manufacturer: syz [ 191.218376][ T936] usb 1-1: SerialNumber: syz [ 191.244244][ T3327] usb 5-1: USB disconnect, device number 8 [ 191.285578][ T4764] netlink: 104 bytes leftover after parsing attributes in process `syz.3.292'. [ 191.333054][ T3601] hub 4-1:0.0: 1 port detected [ 191.570472][ T4773] loop0: detected capacity change from 0 to 512 [ 191.674440][ T4773] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 191.692312][ T4773] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038 (0x7fffffff) [ 191.901488][ T4778] loop4: detected capacity change from 0 to 2048 [ 191.909632][ T3558] Bluetooth: hci2: command 0x0406 tx timeout [ 191.916155][ T3565] Bluetooth: hci3: command 0x0406 tx timeout [ 191.922266][ T3565] Bluetooth: hci4: command 0x0406 tx timeout [ 191.972932][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.992550][ T3565] Bluetooth: hci0: command 0x0406 tx timeout [ 192.012748][ T3601] hub 4-1:0.0: activate --> -90 [ 192.021234][ T4778] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 192.279346][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.227921][ T3601] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 193.237139][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.283009][ T3601] usb 4-1-port1: cannot reset (err = -71) [ 193.288800][ T3601] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad? [ 193.328694][ T4586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.345921][ T3631] usb 4-1: USB disconnect, device number 9 [ 193.354871][ T3601] usb 4-1-port1: cannot disable (err = -71) [ 193.363678][ T3557] EXT4-fs (loop4): unmounting filesystem. [ 193.400626][ T3601] usb 4-1-port1: attempt power cycle [ 193.423643][ T4586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.493386][ T4143] bio_check_eod: 2354 callbacks suppressed [ 193.493405][ T4143] syz.3.130: attempt to access beyond end of device [ 193.493405][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.507007][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.513917][ T4143] syz.3.130: attempt to access beyond end of device [ 193.513917][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.536425][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.539253][ T4143] syz.3.130: attempt to access beyond end of device [ 193.539253][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.558999][ T4143] syz.3.130: attempt to access beyond end of device [ 193.558999][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.570743][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.575257][ T4143] syz.3.130: attempt to access beyond end of device [ 193.575257][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.595365][ T4143] syz.3.130: attempt to access beyond end of device [ 193.595365][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.601436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.619608][ T4143] syz.3.130: attempt to access beyond end of device [ 193.619608][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.634308][ T4143] syz.3.130: attempt to access beyond end of device [ 193.634308][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.650516][ T4143] syz.3.130: attempt to access beyond end of device [ 193.650516][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.665201][ T4143] syz.3.130: attempt to access beyond end of device [ 193.665201][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.691149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.717929][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.747797][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.785422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.126207][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.144981][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.229395][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.235917][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.391486][ T936] usb 1-1: USB disconnect, device number 15 [ 194.706641][ T3550] EXT4-fs (loop0): unmounting filesystem. [ 195.032966][ T3601] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 195.163348][ T11] device hsr_slave_0 left promiscuous mode [ 195.193313][ T11] device hsr_slave_1 left promiscuous mode [ 195.241787][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.441602][ T3601] usb 3-1: Using ep0 maxpacket: 16 [ 195.481410][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.292899][ T3601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 196.346490][ T3601] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 196.413682][ T3601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.660725][ T3601] usb 3-1: config 0 descriptor?? [ 197.581885][ T4814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.299'. [ 197.651149][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 197.651165][ T27] audit: type=1326 audit(1720243925.507:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe251d75bd9 code=0x7ffc0000 [ 197.719378][ T27] audit: type=1326 audit(1720243925.537:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fe251d75bd9 code=0x7ffc0000 [ 197.768795][ T27] audit: type=1326 audit(1720243925.537:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe251d75bd9 code=0x7ffc0000 [ 197.836499][ T27] audit: type=1326 audit(1720243925.537:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe251d75bd9 code=0x7ffc0000 [ 197.869008][ T27] audit: type=1326 audit(1720243925.537:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe251d75bd9 code=0x7ffc0000 [ 197.912913][ T27] audit: type=1326 audit(1720243925.537:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe251d75bd9 code=0x7ffc0000 [ 197.971200][ T27] audit: type=1326 audit(1720243925.557:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe251d75bd9 code=0x7ffc0000 [ 198.037057][ T27] audit: type=1326 audit(1720243925.557:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fe251d75bd9 code=0x7ffc0000 [ 198.094073][ T4799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.117465][ T27] audit: type=1326 audit(1720243925.557:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe251d75bd9 code=0x7ffc0000 [ 198.151525][ T4799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.184543][ T4799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.211952][ T4799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.228511][ T27] audit: type=1326 audit(1720243925.557:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe251d75bd9 code=0x7ffc0000 [ 198.290147][ T3601] hid (null): invalid report_size 53675 [ 198.301089][ T3601] hid (null): unknown global tag 0xd [ 198.330247][ T3601] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 198.355064][ T3601] hid-generic 0003:0158:0100.0002: unexpected long global item [ 198.377885][ T3601] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 198.503150][ T4143] bio_check_eod: 2192 callbacks suppressed [ 198.503169][ T4143] syz.3.130: attempt to access beyond end of device [ 198.503169][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.523734][ T4143] syz.3.130: attempt to access beyond end of device [ 198.523734][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.540112][ T4143] syz.3.130: attempt to access beyond end of device [ 198.540112][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.554797][ T4143] syz.3.130: attempt to access beyond end of device [ 198.554797][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.570933][ T4143] syz.3.130: attempt to access beyond end of device [ 198.570933][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.574275][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.585698][ T4143] syz.3.130: attempt to access beyond end of device [ 198.585698][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.598593][ T3601] usb 3-1: USB disconnect, device number 6 [ 198.608776][ T4143] syz.3.130: attempt to access beyond end of device [ 198.608776][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.627682][ T4143] syz.3.130: attempt to access beyond end of device [ 198.627682][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.645548][ T4143] syz.3.130: attempt to access beyond end of device [ 198.645548][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.660188][ T4143] syz.3.130: attempt to access beyond end of device [ 198.660188][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.708943][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.735598][ T11] device bridge_slave_1 left promiscuous mode [ 198.757244][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.810862][ T11] device bridge_slave_0 left promiscuous mode [ 198.825068][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.011140][ T11] device veth1_macvtap left promiscuous mode [ 199.033592][ T11] device veth0_macvtap left promiscuous mode [ 199.060507][ T11] device veth1_vlan left promiscuous mode [ 199.094630][ T11] device veth0_vlan left promiscuous mode [ 201.393490][ T3601] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 201.401216][ T3598] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 201.702547][ T3598] usb 3-1: Using ep0 maxpacket: 32 [ 201.772900][ T3601] usb 1-1: config 64 has an invalid interface number: 188 but max is 0 [ 201.781296][ T3601] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 201.799946][ T3601] usb 1-1: config 64 has an invalid interface descriptor of length 2, skipping [ 201.810272][ T3601] usb 1-1: config 64 has an invalid descriptor of length 196, skipping remainder of the config [ 201.829368][ T3601] usb 1-1: config 64 has no interface number 0 [ 201.860654][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.872208][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.890803][ T3598] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 201.900387][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.928333][ T3598] usb 3-1: config 0 descriptor?? [ 202.014749][ T3598] hub 3-1:0.0: USB hub found [ 202.033527][ T3601] usb 1-1: New USB device found, idVendor=085a, idProduct=0028, bcdDevice= 1.10 [ 202.056580][ T3601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.092587][ T3601] usb 1-1: Product: syz [ 202.115185][ T3601] usb 1-1: Manufacturer: syz [ 202.130260][ T3601] usb 1-1: SerialNumber: syz [ 202.228268][ T4828] netlink: 104 bytes leftover after parsing attributes in process `syz.2.307'. [ 202.286595][ T3598] hub 3-1:0.0: 1 port detected [ 202.459735][ T3938] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 202.472730][ T3601] usb-storage 1-1:64.188: USB Mass Storage device detected [ 202.501688][ T3601] usb-storage 1-1:64.188: Quirks match for vid 085a pid 0028: 4 [ 202.572805][ T3601] usb 1-1: USB disconnect, device number 16 [ 202.722554][ T3938] usb 5-1: Using ep0 maxpacket: 16 [ 202.811545][ T11] team0 (unregistering): Port device team_slave_1 removed [ 202.862898][ T3938] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 202.889053][ T3938] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.909159][ T3938] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.955896][ T11] team0 (unregistering): Port device team_slave_0 removed [ 202.967120][ T3601] hub 3-1:0.0: activate --> -90 [ 203.053758][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.102822][ T3938] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.129076][ T3938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.346938][ T3938] usb 5-1: Product: syz [ 203.351371][ T3938] usb 5-1: Manufacturer: syz [ 203.359369][ T3938] usb 5-1: SerialNumber: syz [ 203.512403][ T4143] bio_check_eod: 2131 callbacks suppressed [ 203.512449][ T4143] syz.3.130: attempt to access beyond end of device [ 203.512449][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.545714][ T4143] syz.3.130: attempt to access beyond end of device [ 203.545714][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.563215][ T4143] syz.3.130: attempt to access beyond end of device [ 203.563215][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.589071][ T4143] syz.3.130: attempt to access beyond end of device [ 203.589071][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.606478][ T4143] syz.3.130: attempt to access beyond end of device [ 203.606478][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.632563][ T4143] syz.3.130: attempt to access beyond end of device [ 203.632563][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.650101][ T4143] syz.3.130: attempt to access beyond end of device [ 203.650101][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.674273][ T4143] syz.3.130: attempt to access beyond end of device [ 203.674273][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.691668][ T4143] syz.3.130: attempt to access beyond end of device [ 203.691668][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.718036][ T4143] syz.3.130: attempt to access beyond end of device [ 203.718036][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 204.203644][ T3327] usb 3-1: USB disconnect, device number 7 [ 204.222667][ T3598] usb 3-1-port1: cannot reset (err = -71) [ 204.231078][ T3598] usb 3-1-port1: attempt power cycle [ 204.273007][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.455376][ T4850] loop2: detected capacity change from 0 to 128 [ 205.480697][ T4852] loop4: detected capacity change from 0 to 512 [ 205.510093][ T4850] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 205.518717][ T4850] sysv_free_block: trying to free block not in datazone [ 205.530302][ T4850] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 208.171527][ T11] bond0 (unregistering): Released all slaves [ 208.523564][ T4143] bio_check_eod: 2305 callbacks suppressed [ 208.523581][ T4143] syz.3.130: attempt to access beyond end of device [ 208.523581][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.545078][ T4143] syz.3.130: attempt to access beyond end of device [ 208.545078][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.561366][ T4143] syz.3.130: attempt to access beyond end of device [ 208.561366][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.575722][ T4143] syz.3.130: attempt to access beyond end of device [ 208.575722][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.591970][ T4143] syz.3.130: attempt to access beyond end of device [ 208.591970][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.606327][ T4143] syz.3.130: attempt to access beyond end of device [ 208.606327][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.622380][ T4143] syz.3.130: attempt to access beyond end of device [ 208.622380][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.636881][ T4143] syz.3.130: attempt to access beyond end of device [ 208.636881][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.652311][ T4143] syz.3.130: attempt to access beyond end of device [ 208.652311][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.666712][ T4143] syz.3.130: attempt to access beyond end of device [ 208.666712][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.985514][ T3664] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.066973][ T4823] device batadv0 entered promiscuous mode [ 209.189407][ T4586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.322395][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 209.342503][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 209.372379][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 209.468500][ T4586] device veth0_vlan entered promiscuous mode [ 209.601154][ T3938] usb 5-1: USB disconnect, device number 9 [ 209.615135][ T4586] device veth1_vlan entered promiscuous mode [ 209.663712][ T3659] udevd[3659]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.702423][ T3664] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.735166][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.760004][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.817771][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.890381][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.139491][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.003318][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.025970][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.088353][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.133652][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.374302][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.446949][ T3561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.461993][ T3561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.471016][ T3558] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.481645][ T3561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.490858][ T3561] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.498346][ T3561] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.582462][ T7] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 212.942640][ T7] usb 1-1: config 64 has an invalid interface number: 188 but max is 0 [ 212.951090][ T7] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 212.991376][ T7] usb 1-1: config 64 has an invalid interface descriptor of length 2, skipping [ 213.006889][ T4586] device veth0_macvtap entered promiscuous mode [ 213.022711][ T7] usb 1-1: config 64 has an invalid descriptor of length 196, skipping remainder of the config [ 213.056526][ T4586] device veth1_macvtap entered promiscuous mode [ 213.071168][ T7] usb 1-1: config 64 has no interface number 0 [ 213.112010][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.129809][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.140919][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.161266][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.177505][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.192045][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.212189][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.233837][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.250704][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.262151][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.282552][ T7] usb 1-1: New USB device found, idVendor=085a, idProduct=0028, bcdDevice= 1.10 [ 213.292013][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.312450][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.320634][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.339993][ T7] usb 1-1: Product: syz [ 213.344808][ T7] usb 1-1: Manufacturer: syz [ 213.349435][ T7] usb 1-1: SerialNumber: syz [ 213.362441][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.396349][ T4586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.414352][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.436005][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.451948][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.468292][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.487963][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.502924][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.522499][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.532628][ T4143] bio_check_eod: 2312 callbacks suppressed [ 213.532645][ T4143] syz.3.130: attempt to access beyond end of device [ 213.532645][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.540183][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.554050][ T4143] syz.3.130: attempt to access beyond end of device [ 213.554050][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.572177][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.580234][ T4143] syz.3.130: attempt to access beyond end of device [ 213.580234][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.595846][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.601869][ T4143] syz.3.130: attempt to access beyond end of device [ 213.601869][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.627803][ T4143] syz.3.130: attempt to access beyond end of device [ 213.627803][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.642490][ T4143] syz.3.130: attempt to access beyond end of device [ 213.642490][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.656062][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.658824][ T4143] syz.3.130: attempt to access beyond end of device [ 213.658824][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.673193][ T7] usb-storage 1-1:64.188: USB Mass Storage device detected [ 213.680562][ T4143] syz.3.130: attempt to access beyond end of device [ 213.680562][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.696866][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.703298][ T4143] syz.3.130: attempt to access beyond end of device [ 213.703298][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.725884][ T4143] syz.3.130: attempt to access beyond end of device [ 213.725884][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.727011][ T7] usb-storage 1-1:64.188: Quirks match for vid 085a pid 0028: 4 [ 213.748503][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.768916][ T4586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.795008][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.813643][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.836433][ T4586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.861157][ T4586] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.876056][ T4586] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.890612][ T4586] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.023391][ T7] usb 1-1: USB disconnect, device number 17 [ 214.976062][ T3565] Bluetooth: hci1: command tx timeout [ 215.632438][ T7] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 215.872468][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 215.993969][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.052871][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.102981][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 216.156115][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.195449][ T7] usb 1-1: config 0 descriptor?? [ 216.280574][ T7] hub 1-1:0.0: USB hub found [ 216.301878][ T4893] loop2: detected capacity change from 0 to 4096 [ 216.490196][ T4888] netlink: 104 bytes leftover after parsing attributes in process `syz.0.323'. [ 216.512825][ T7] hub 1-1:0.0: 1 port detected [ 217.023089][ T3561] Bluetooth: hci1: command tx timeout [ 217.071700][ T4893] fuse: Bad value for 'group_id' [ 217.091184][ T4893] netlink: 'syz.2.325': attribute type 11 has an invalid length. [ 217.322529][ T3631] hub 1-1:0.0: activate --> -90 [ 217.988894][ T4026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.007182][ T3327] usb 1-1: USB disconnect, device number 18 [ 218.013715][ T3631] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 218.020822][ T3631] usb 1-1-port1: attempt power cycle [ 218.063257][ T4026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.232683][ T4026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.306116][ T4879] chnl_net:caif_netlink_parms(): no params data found [ 218.320581][ T4026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.543969][ T4143] bio_check_eod: 2560 callbacks suppressed [ 218.543993][ T4143] syz.3.130: attempt to access beyond end of device [ 218.543993][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.564581][ T4143] syz.3.130: attempt to access beyond end of device [ 218.564581][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.580882][ T4143] syz.3.130: attempt to access beyond end of device [ 218.580882][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.595519][ T4143] syz.3.130: attempt to access beyond end of device [ 218.595519][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.611835][ T4143] syz.3.130: attempt to access beyond end of device [ 218.611835][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.626494][ T4143] syz.3.130: attempt to access beyond end of device [ 218.626494][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.642927][ T4143] syz.3.130: attempt to access beyond end of device [ 218.642927][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.657724][ T4143] syz.3.130: attempt to access beyond end of device [ 218.657724][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.674207][ T4143] syz.3.130: attempt to access beyond end of device [ 218.674207][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.688841][ T4143] syz.3.130: attempt to access beyond end of device [ 218.688841][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.980466][ T4879] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.022995][ T4879] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.059293][ T4879] device bridge_slave_0 entered promiscuous mode [ 219.088156][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.100848][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.109093][ T3565] Bluetooth: hci1: command tx timeout [ 219.959744][ T4879] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.979184][ T4879] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.802521][ T4879] device bridge_slave_1 entered promiscuous mode [ 221.197740][ T3565] Bluetooth: hci1: command tx timeout [ 221.957966][ T4879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.023042][ T4879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.318982][ T4879] team0: Port device team_slave_0 added [ 222.390190][ T4879] team0: Port device team_slave_1 added [ 222.614607][ T4879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.679293][ T4879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.920912][ T4879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.972009][ T4879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.017163][ T4879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.552429][ T4143] bio_check_eod: 2221 callbacks suppressed [ 223.552452][ T4143] syz.3.130: attempt to access beyond end of device [ 223.552452][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 223.574913][ T4143] syz.3.130: attempt to access beyond end of device [ 223.574913][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.589999][ T4143] syz.3.130: attempt to access beyond end of device [ 223.589999][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 223.606265][ T4143] syz.3.130: attempt to access beyond end of device [ 223.606265][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.620907][ T4143] syz.3.130: attempt to access beyond end of device [ 223.620907][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 223.637477][ T4143] syz.3.130: attempt to access beyond end of device [ 223.637477][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.653115][ T4143] syz.3.130: attempt to access beyond end of device [ 223.653115][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 223.669367][ T4143] syz.3.130: attempt to access beyond end of device [ 223.669367][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.684023][ T4143] syz.3.130: attempt to access beyond end of device [ 223.684023][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 223.700255][ T4143] syz.3.130: attempt to access beyond end of device [ 223.700255][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.718485][ T4879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.182109][ T4879] device hsr_slave_0 entered promiscuous mode [ 224.198320][ T4879] device hsr_slave_1 entered promiscuous mode [ 224.211668][ T4879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.232482][ T4879] Cannot create hsr debugfs directory [ 224.502554][ T3803] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 224.752787][ T3803] usb 5-1: Using ep0 maxpacket: 8 [ 224.872858][ T3803] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 224.932615][ T3803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.003568][ T3803] usb 5-1: config 0 descriptor?? [ 225.086929][ T3803] hso 5-1:0.0: Can't find BULK IN endpoint [ 225.260163][ T4879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.454538][ T4879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.472454][ T3734] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 225.644535][ T4879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.732499][ T3734] usb 1-1: Using ep0 maxpacket: 16 [ 225.852705][ T3734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 225.870137][ T4879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.901478][ T3734] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 225.958265][ T3734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.015630][ T3734] usb 1-1: config 0 descriptor?? [ 226.349802][ T4949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.339'. [ 226.980249][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 226.980265][ T27] audit: type=1326 audit(1720243954.837:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0323f75bd9 code=0x7ffc0000 [ 227.360247][ T3808] usb 5-1: USB disconnect, device number 10 [ 227.475983][ T27] audit: type=1326 audit(1720243955.077:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0323f75bd9 code=0x7ffc0000 [ 227.858150][ T27] audit: type=1326 audit(1720243955.107:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f0323f75bd9 code=0x7ffc0000 [ 227.975263][ T27] audit: type=1326 audit(1720243955.107:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0323f75bd9 code=0x7ffc0000 [ 228.127920][ T27] audit: type=1326 audit(1720243955.107:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0323f75bd9 code=0x7ffc0000 [ 228.162594][ T4949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.213449][ T4949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.286173][ T4949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.336734][ T27] audit: type=1326 audit(1720243955.107:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0323f75bd9 code=0x7ffc0000 [ 228.377290][ T4949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.434637][ T3734] hid (null): invalid report_size 53675 [ 228.463513][ T4879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.483939][ T3734] hid (null): unknown global tag 0xd [ 228.546447][ T27] audit: type=1326 audit(1720243955.107:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0323f75bd9 code=0x7ffc0000 [ 228.570971][ T4143] bio_check_eod: 2457 callbacks suppressed [ 228.570988][ T4143] syz.3.130: attempt to access beyond end of device [ 228.570988][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 228.576256][ T3734] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 228.577704][ T4143] syz.3.130: attempt to access beyond end of device [ 228.577704][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.614862][ T4143] syz.3.130: attempt to access beyond end of device [ 228.614862][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 228.631637][ T4143] syz.3.130: attempt to access beyond end of device [ 228.631637][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.647862][ T4143] syz.3.130: attempt to access beyond end of device [ 228.647862][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 228.663145][ T4143] syz.3.130: attempt to access beyond end of device [ 228.663145][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.679644][ T4143] syz.3.130: attempt to access beyond end of device [ 228.679644][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 228.694311][ T4143] syz.3.130: attempt to access beyond end of device [ 228.694311][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.710711][ T4143] syz.3.130: attempt to access beyond end of device [ 228.710711][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 228.725026][ T3734] hid-generic 0003:0158:0100.0003: unexpected long global item [ 228.725738][ T4143] syz.3.130: attempt to access beyond end of device [ 228.725738][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.786839][ T27] audit: type=1326 audit(1720243955.107:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0323f75bd9 code=0x7ffc0000 [ 228.820379][ T3734] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 [ 228.903461][ T3734] usb 1-1: USB disconnect, device number 23 [ 228.964205][ T27] audit: type=1326 audit(1720243955.107:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f0323f75bd9 code=0x7ffc0000 [ 228.987047][ T27] audit: type=1326 audit(1720243955.107:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0323f75bd9 code=0x7ffc0000 [ 229.985146][ T4879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.983823][ T4879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 231.045327][ T4879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.453064][ T4879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.573397][ T4143] bio_check_eod: 2144 callbacks suppressed [ 233.573419][ T4143] syz.3.130: attempt to access beyond end of device [ 233.573419][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.593979][ T4143] syz.3.130: attempt to access beyond end of device [ 233.593979][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 233.596654][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.610316][ T4143] syz.3.130: attempt to access beyond end of device [ 233.610316][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.629681][ T4143] syz.3.130: attempt to access beyond end of device [ 233.629681][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 233.645967][ T4143] syz.3.130: attempt to access beyond end of device [ 233.645967][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.660630][ T4143] syz.3.130: attempt to access beyond end of device [ 233.660630][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 233.676881][ T4143] syz.3.130: attempt to access beyond end of device [ 233.676881][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.691637][ T4143] syz.3.130: attempt to access beyond end of device [ 233.691637][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 233.706553][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.707900][ T4143] syz.3.130: attempt to access beyond end of device [ 233.707900][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.728935][ T4143] syz.3.130: attempt to access beyond end of device [ 233.728935][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 234.968964][ T4879] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.465618][ T4879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.562387][ T4879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.073158][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.082064][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.090482][ T936] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 236.119288][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.124266][ T3808] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 236.126553][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.992981][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.108840][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.158603][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.165812][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.173737][ T936] usb 1-1: Using ep0 maxpacket: 16 [ 237.248017][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.309508][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.318307][ T936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 237.350199][ T936] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 237.383069][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.430564][ T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.466663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.515281][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.525460][ T936] usb 1-1: config 0 descriptor?? [ 237.773398][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.583843][ T4143] bio_check_eod: 1940 callbacks suppressed [ 238.583867][ T4143] syz.3.130: attempt to access beyond end of device [ 238.583867][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.593718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.604348][ T4143] syz.3.130: attempt to access beyond end of device [ 238.604348][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 238.613102][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.627785][ T4143] syz.3.130: attempt to access beyond end of device [ 238.627785][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.647437][ T4143] syz.3.130: attempt to access beyond end of device [ 238.647437][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 238.665536][ T4143] syz.3.130: attempt to access beyond end of device [ 238.665536][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.680256][ T4143] syz.3.130: attempt to access beyond end of device [ 238.680256][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 238.696652][ T4143] syz.3.130: attempt to access beyond end of device [ 238.696652][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.711383][ T4143] syz.3.130: attempt to access beyond end of device [ 238.711383][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 238.727788][ T4143] syz.3.130: attempt to access beyond end of device [ 238.727788][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.744778][ T4143] syz.3.130: attempt to access beyond end of device [ 238.744778][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 238.821639][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.832568][ T936] usbhid 1-1:0.0: can't add hid device: -71 [ 238.838642][ T936] usbhid: probe of 1-1:0.0 failed with error -71 [ 238.886374][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.896337][ T936] usb 1-1: USB disconnect, device number 24 [ 238.983787][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.992269][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.087052][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.038718][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.048497][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.472936][ T4879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.787132][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.814387][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.151019][ T4879] device veth0_vlan entered promiscuous mode [ 241.230769][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.244657][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.506056][ T5063] loop0: detected capacity change from 0 to 128 [ 241.533132][ T5063] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 241.540822][ T5063] sysv_free_block: trying to free block not in datazone [ 241.549414][ T5063] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 241.627996][ T4879] device veth1_vlan entered promiscuous mode [ 241.668609][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.676219][ T3598] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 241.721603][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.834139][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.853456][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.885770][ T4879] device veth0_macvtap entered promiscuous mode [ 241.930197][ T4879] device veth1_macvtap entered promiscuous mode [ 241.942643][ T3598] usb 3-1: Using ep0 maxpacket: 8 [ 242.068547][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.107211][ T3598] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 242.126700][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.146935][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.178178][ T3598] usb 3-1: config 0 descriptor?? [ 242.210397][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.253493][ T3598] hso 3-1:0.0: Can't find BULK IN endpoint [ 242.277570][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.313812][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.373906][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.406118][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.473505][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.514695][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.562594][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.601322][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.650649][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.701802][ T4879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.741963][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.751504][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.790532][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.831619][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.884244][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.912353][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.958610][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.967883][ T3664] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.969459][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.989067][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.083604][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.144677][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.218424][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.277576][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.325910][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.371314][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.420006][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.481361][ T4879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.520555][ T5061] loop1: detected capacity change from 0 to 40427 [ 243.531129][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.540529][ T3601] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 243.558286][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.586163][ T5061] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 243.594613][ T4143] bio_check_eod: 2632 callbacks suppressed [ 243.594633][ T4143] syz.3.130: attempt to access beyond end of device [ 243.594633][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 243.615170][ T4143] syz.3.130: attempt to access beyond end of device [ 243.615170][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 243.631883][ T4143] syz.3.130: attempt to access beyond end of device [ 243.631883][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 243.639639][ T5061] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 243.646656][ T4143] syz.3.130: attempt to access beyond end of device [ 243.646656][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 243.670899][ T4143] syz.3.130: attempt to access beyond end of device [ 243.670899][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 243.685815][ T4143] syz.3.130: attempt to access beyond end of device [ 243.685815][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 243.701944][ T4143] syz.3.130: attempt to access beyond end of device [ 243.701944][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 243.716761][ T4143] syz.3.130: attempt to access beyond end of device [ 243.716761][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 243.734090][ T4143] syz.3.130: attempt to access beyond end of device [ 243.734090][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 243.748926][ T4143] syz.3.130: attempt to access beyond end of device [ 243.748926][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 243.806097][ T5061] F2FS-fs (loop1): Found nat_bits in checkpoint [ 243.962977][ T3601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 244.016897][ T4879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.037218][ T4879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.051409][ T4879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.064248][ T4879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.115966][ T5061] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 244.136435][ T5061] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 244.162728][ T3601] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 244.189693][ T3601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.249199][ T3601] usb 1-1: Product: syz [ 244.269494][ T3601] usb 1-1: Manufacturer: syz [ 244.279685][ T3601] usb 1-1: SerialNumber: syz [ 244.311059][ T3601] usb 1-1: config 0 descriptor?? [ 244.330933][ T3631] usb 3-1: USB disconnect, device number 12 [ 244.860569][ T5078] netlink: 'syz.0.372': attribute type 16 has an invalid length. [ 244.868424][ T5078] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.372'. [ 244.878874][ T5078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 245.510949][ T4078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.565251][ T4078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.867421][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.930463][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.951028][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.181387][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.375851][ T3601] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 246.423368][ T3601] usb 1-1: USB disconnect, device number 25 [ 246.470925][ T3664] udevd[3664]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.652463][ T3631] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 246.962417][ T3808] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 247.930011][ T11] device hsr_slave_0 left promiscuous mode [ 247.987991][ T11] device hsr_slave_1 left promiscuous mode [ 247.994587][ T3631] usb 3-1: config 64 has an invalid interface number: 188 but max is 0 [ 248.009363][ T3631] usb 3-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 248.070077][ T3631] usb 3-1: config 64 has an invalid interface descriptor of length 2, skipping [ 248.295089][ T3631] usb 3-1: config 64 has an invalid descriptor of length 196, skipping remainder of the config [ 248.307431][ T3631] usb 3-1: config 64 has no interface number 0 [ 248.331819][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.348102][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.357110][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.368644][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.377518][ T11] device bridge_slave_1 left promiscuous mode [ 248.389229][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.429229][ T11] device bridge_slave_0 left promiscuous mode [ 248.438279][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.602636][ T4143] bio_check_eod: 2357 callbacks suppressed [ 248.602658][ T4143] syz.3.130: attempt to access beyond end of device [ 248.602658][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 248.625919][ T4143] syz.3.130: attempt to access beyond end of device [ 248.625919][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.640620][ T4143] syz.3.130: attempt to access beyond end of device [ 248.640620][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 248.656912][ T4143] syz.3.130: attempt to access beyond end of device [ 248.656912][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.669375][ T3631] usb 3-1: New USB device found, idVendor=085a, idProduct=0028, bcdDevice= 1.10 [ 248.681174][ T4143] syz.3.130: attempt to access beyond end of device [ 248.681174][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 248.697889][ T4143] syz.3.130: attempt to access beyond end of device [ 248.697889][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.712780][ T4143] syz.3.130: attempt to access beyond end of device [ 248.712780][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 248.726884][ T3631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.730751][ T4143] syz.3.130: attempt to access beyond end of device [ 248.730751][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.747027][ T3631] usb 3-1: Product: syz [ 248.759627][ T4143] syz.3.130: attempt to access beyond end of device [ 248.759627][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 248.785029][ T4143] syz.3.130: attempt to access beyond end of device [ 248.785029][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 249.479170][ T3631] usb 3-1: Manufacturer: syz [ 249.512397][ T3631] usb 3-1: SerialNumber: syz [ 249.556563][ T11] device veth1_macvtap left promiscuous mode [ 249.583061][ T11] device veth0_macvtap left promiscuous mode [ 249.590394][ T11] device veth1_vlan left promiscuous mode [ 249.598432][ T3631] usb 3-1: can't set config #64, error -71 [ 249.833784][ T3631] usb 3-1: USB disconnect, device number 13 [ 249.967410][ T11] device veth0_vlan left promiscuous mode [ 249.983321][ T28] INFO: task syz.3.130:4162 blocked for more than 144 seconds. [ 249.990917][ T28] Not tainted 6.1.97-syzkaller #0 [ 250.513373][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 250.896990][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.946309][ T28] task:syz.3.130 state:D stack:26800 pid:4162 ppid:3554 flags:0x00004004 [ 251.012468][ T28] Call Trace: [ 251.047337][ T28] [ 251.070701][ T28] __schedule+0x142d/0x4550 [ 251.107828][ T28] ? __sched_text_start+0x8/0x8 [ 251.133302][ T28] ? print_irqtrace_events+0x210/0x210 [ 251.168826][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 251.195354][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 251.220231][ T28] schedule+0xbf/0x180 [ 251.239374][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 251.264393][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 251.292184][ T28] ? down_write_killable_nested+0x90/0x90 [ 251.321285][ T28] ? read_lock_is_recursive+0x10/0x10 [ 251.356247][ T28] ? ima_lsm_policy_change+0x620/0x620 [ 251.382509][ T28] ? rwsem_write_trylock+0x166/0x210 [ 251.425496][ T28] ? clear_nonspinnable+0x60/0x60 [ 251.489490][ T28] process_measurement+0x446/0x21b0 [ 251.520577][ T28] ? mark_lock+0x9a/0x340 [ 251.562550][ T28] ? ima_file_mmap+0x1c0/0x1c0 [ 251.590881][ T28] ? dquot_initialize+0x20/0x20 [ 251.624645][ T28] ? aa_get_current_label+0x111/0x1d0 [ 251.643830][ T28] ? apparmor_current_getsecid_subj+0xac/0x110 [ 251.665096][ T28] ima_file_check+0xed/0x170 [ 251.680986][ T28] ? do_dentry_open+0xce4/0x10f0 [ 251.700577][ T28] ? ima_bprm_check+0x2b0/0x2b0 [ 251.715930][ T28] path_openat+0x2687/0x2e60 [ 251.734522][ T28] ? mark_lock+0x9a/0x340 [ 251.749593][ T28] ? do_filp_open+0x480/0x480 [ 251.765811][ T28] do_filp_open+0x230/0x480 [ 251.781765][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 251.800821][ T28] ? _raw_spin_unlock+0x24/0x40 [ 251.818430][ T28] ? alloc_fd+0x59c/0x640 [ 251.834800][ T28] do_sys_openat2+0x13b/0x500 [ 251.849915][ T28] ? do_sys_open+0x220/0x220 [ 251.867055][ T28] __x64_sys_openat+0x243/0x290 [ 251.882054][ T28] ? __ia32_sys_open+0x270/0x270 [ 251.900779][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 251.922588][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 251.945358][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 251.957308][ T28] do_syscall_64+0x3b/0xb0 [ 251.961812][ T28] ? clear_bhb_loop+0x45/0xa0 [ 251.966603][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.972575][ T28] RIP: 0033:0x7f995ed75bd9 [ 251.977042][ T28] RSP: 002b:00007f995fbc7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 251.985723][ T28] RAX: ffffffffffffffda RBX: 00007f995ef04038 RCX: 00007f995ed75bd9 [ 251.993789][ T28] RDX: 0000000000183341 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 252.077475][ T28] RBP: 00007f995ede4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 252.108843][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.138736][ T28] R13: 000000000000006e R14: 00007f995ef04038 R15: 00007fffc6dba9b8 [ 252.157102][ T5114] loop0: detected capacity change from 0 to 32768 [ 252.168284][ T28] [ 252.174954][ T28] INFO: task syz.3.130:4163 blocked for more than 146 seconds. [ 252.196013][ T5114] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.384 (5114) [ 252.236370][ T28] Not tainted 6.1.97-syzkaller #0 [ 252.248744][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.269318][ T28] task:syz.3.130 state:D stack:25752 pid:4163 ppid:3554 flags:0x00004004 [ 252.280346][ T28] Call Trace: [ 252.291033][ T28] [ 252.295804][ T28] __schedule+0x142d/0x4550 [ 252.300789][ T28] ? __sched_text_start+0x8/0x8 [ 252.314041][ T28] ? print_irqtrace_events+0x210/0x210 [ 252.322270][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 252.338273][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 252.349480][ T28] schedule+0xbf/0x180 [ 252.358808][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 252.368389][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 252.379458][ T28] ? down_write_killable_nested+0x90/0x90 [ 252.389124][ T28] ? read_lock_is_recursive+0x10/0x10 [ 252.399652][ T28] ? rwsem_write_trylock+0x166/0x210 [ 252.409200][ T28] ? clear_nonspinnable+0x60/0x60 [ 252.421123][ T28] f2fs_issue_checkpoint+0x2d2/0x4d0 [ 252.431653][ T28] ? f2fs_destroy_checkpoint_caches+0x20/0x20 [ 252.446381][ T28] ? d_instantiate_new+0x7b/0x110 [ 252.458796][ T28] ? f2fs_create+0x7a7/0xa10 [ 252.467515][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 252.477790][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 252.486816][ T28] ? f2fs_sync_fs+0x201/0x410 [ 252.491723][ T28] f2fs_create+0x862/0xa10 [ 252.501171][ T28] ? f2fs_lookup+0xae0/0xae0 [ 252.509928][ T28] path_openat+0x12f1/0x2e60 [ 252.526224][ T28] ? do_filp_open+0x480/0x480 [ 252.531987][ T28] do_filp_open+0x230/0x480 [ 252.545133][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 252.551738][ T28] ? _raw_spin_unlock+0x24/0x40 [ 252.567419][ T28] ? alloc_fd+0x59c/0x640 [ 252.577585][ T28] do_sys_openat2+0x13b/0x500 [ 252.585989][ T28] ? do_sys_open+0x220/0x220 [ 252.590812][ T28] __x64_sys_openat+0x243/0x290 [ 252.600941][ T28] ? __ia32_sys_open+0x270/0x270 [ 252.610360][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 252.624794][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 252.632156][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 252.647047][ T28] do_syscall_64+0x3b/0xb0 [ 252.656930][ T28] ? clear_bhb_loop+0x45/0xa0 [ 252.661824][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.671913][ T28] RIP: 0033:0x7f995ed75bd9 [ 252.687395][ T28] RSP: 002b:00007f995fba6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.704684][ T28] RAX: ffffffffffffffda RBX: 00007f995ef04110 RCX: 00007f995ed75bd9 [ 252.719034][ T28] RDX: 00000000000026e1 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 252.731435][ T28] RBP: 00007f995ede4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 252.747203][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.760658][ T28] R13: 000000000000006e R14: 00007f995ef04110 R15: 00007fffc6dba9b8 [ 252.776173][ T28] [ 252.782141][ T28] [ 252.782141][ T28] Showing all locks held in the system: [ 252.801041][ T28] 6 locks held by kworker/0:0/7: [ 252.809320][ T28] 5 locks held by kworker/u4:1/11: [ 252.819964][ T28] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.842732][ T28] #1: ffffc90000107d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.861913][ T28] #2: ffffffff8e28d810 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 252.871923][ T28] #3: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe5/0x9d0 [ 252.890565][ T28] #4: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 252.901957][ T28] 1 lock held by rcu_tasks_kthre/12: [ 252.918119][ T28] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 252.938489][ T28] 1 lock held by rcu_tasks_trace/13: [ 252.945596][ T28] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 252.973645][ T28] 3 locks held by kworker/1:0/22: [ 252.978746][ T28] #0: ffff888027da0138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 252.990405][ T28] #1: ffffc900001c7d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 253.005298][ T5114] BTRFS error (device loop0): open_ctree failed [ 253.042954][ T28] #2: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 253.071726][ T28] 1 lock held by khungtaskd/28: [ 253.090390][ T28] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 253.136734][ T28] 3 locks held by kworker/0:2/936: [ 253.154313][ T28] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 253.187430][ T28] #1: ffffc90004497d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 253.220668][ T28] #2: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 253.258078][ T28] 2 locks held by getty/3310: [ 253.273094][ T28] #0: ffff888028dd9098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 253.300965][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 253.331923][ T28] 3 locks held by kworker/0:6/3598: [ 253.361558][ T28] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 253.392263][ T28] #1: ffffc90004557d20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 253.429299][ T28] #2: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 253.474616][ T28] 3 locks held by kworker/0:7/3601: [ 253.491063][ T28] #0: ffff888027da0138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 253.518456][ T28] #1: ffffc90004587d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 253.542884][ T28] #2: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 253.561394][ T28] 2 locks held by kworker/0:9/3631: [ 253.567202][ T28] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 253.589045][ T28] #1: ffffc900045d7d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 253.609285][ T28] 4 locks held by kworker/u4:11/4077: [ 253.616449][ T28] #0: ffff888143a57938 [ 253.616464][ T4143] bio_check_eod: 2381 callbacks suppressed [ 253.616481][ T4143] syz.3.130: attempt to access beyond end of device [ 253.616481][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.620830][ T28] ( [ 253.627375][ T4143] syz.3.130: attempt to access beyond end of device [ 253.627375][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 253.651473][ T28] (wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 253.660380][ T4143] syz.3.130: attempt to access beyond end of device [ 253.660380][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.673939][ T28] #1: [ 253.681080][ T4143] syz.3.130: attempt to access beyond end of device [ 253.681080][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 253.700296][ T4143] syz.3.130: attempt to access beyond end of device [ 253.700296][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.717933][ T4143] syz.3.130: attempt to access beyond end of device [ 253.717933][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 253.719031][ T28] ffffc9000a3e7d20 [ 253.735631][ T4143] syz.3.130: attempt to access beyond end of device [ 253.735631][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.756311][ T4143] syz.3.130: attempt to access beyond end of device [ 253.756311][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 253.762635][ T28] ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 253.772700][ T4143] syz.3.130: attempt to access beyond end of device [ 253.772700][ T4143] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.788920][ T28] #2: [ 253.794883][ T4143] syz.3.130: attempt to access beyond end of device [ 253.794883][ T4143] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 253.795507][ T28] ffff888018fb20e0 (&type->s_umount_key#64){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 253.842575][ T28] #3: ffff8880791c9140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4fb/0x6c0 [ 253.862205][ T28] 4 locks held by syz.3.130/4143: [ 253.867712][ T28] 2 locks held by syz.3.130/4162: [ 253.881415][ T28] #0: ffff888018fb2460 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 253.891362][ T28] #1: ffff88805d119bf0 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: process_measurement+0x446/0x21b0 [ 253.911506][ T28] 3 locks held by syz.3.130/4163: [ 253.917210][ T28] #0: ffff888018fb2460 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 253.938924][ T28] #1: ffff88805d119310 (&type->i_mutex_dir_key#13){+.+.}-{3:3}, at: path_openat+0x7b6/0x2e60 [ 253.959820][ T28] #2: ffff8880791c9140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_issue_checkpoint+0x2d2/0x4d0 [ 253.970578][ T28] 1 lock held by syz.4.385/5118: [ 253.976207][ T28] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 253.986501][ T28] 1 lock held by syz.0.384/5114: [ 253.991616][ T28] #0: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 254.002952][ T28] [ 254.005383][ T28] ============================================= [ 254.005383][ T28] [ 254.023777][ T28] NMI backtrace for cpu 1 [ 254.028210][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 254.038266][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 254.048369][ T28] Call Trace: [ 254.051672][ T28] [ 254.054631][ T28] dump_stack_lvl+0x1e3/0x2cb [ 254.059355][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 254.064850][ T28] ? panic+0x764/0x764 [ 254.068939][ T28] ? vprintk_emit+0x622/0x740 [ 254.073667][ T28] ? printk_sprint+0x490/0x490 [ 254.078490][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 254.083652][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 254.088634][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 254.094823][ T28] ? _printk+0xd1/0x111 [ 254.099088][ T28] ? panic+0x764/0x764 [ 254.103192][ T28] ? __wake_up_klogd+0xcc/0x100 [ 254.108069][ T28] ? panic+0x764/0x764 [ 254.112159][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 254.118371][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 254.124518][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 254.130551][ T28] watchdog+0xf88/0xfd0 [ 254.134764][ T28] ? watchdog+0x1f8/0xfd0 [ 254.139128][ T28] kthread+0x28d/0x320 [ 254.143229][ T28] ? hungtask_pm_notify+0x50/0x50 [ 254.148282][ T28] ? kthread_blkcg+0xd0/0xd0 [ 254.152893][ T28] ret_from_fork+0x1f/0x30 [ 254.157358][ T28] [ 254.161497][ T28] Sending NMI from CPU 1 to CPUs 0: [ 254.166972][ C0] NMI backtrace for cpu 0 [ 254.166984][ C0] CPU: 0 PID: 4143 Comm: syz.3.130 Not tainted 6.1.97-syzkaller #0 [ 254.167002][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 254.167013][ C0] RIP: 0010:check_preemption_disabled+0x59/0x110 [ 254.167042][ C0] Code: 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 c7 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f c3 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 74 c9 49 89 f6 49 89 ff 65 4c 8b 25 [ 254.167057][ C0] RSP: 0018:ffffc9000a53e818 EFLAGS: 00000046 [ 254.167072][ C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffff888023800000 [ 254.167086][ C0] RDX: 0000000000000000 RSI: ffffffff8aec0f20 RDI: ffffffff8b3d4760 [ 254.167099][ C0] RBP: 00000000ffffffff R08: ffffffff83ca773c R09: ffffc9000a53f010 [ 254.167112][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000246 [ 254.167124][ C0] R13: ffff888023800000 R14: 00000000ffffffff R15: ffffffff8d12ac80 [ 254.167137][ C0] FS: 00007f995fbe86c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 254.167153][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.167166][ C0] CR2: 0000000000000000 CR3: 0000000079f75000 CR4: 00000000003506f0 [ 254.167180][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 254.167191][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 254.167202][ C0] Call Trace: [ 254.167207][ C0] [ 254.167213][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 254.167241][ C0] ? read_lock_is_recursive+0x10/0x10 [ 254.167269][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 254.167305][ C0] ? nmi_handle+0x25/0x440 [ 254.167339][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 254.167366][ C0] ? nmi_handle+0x12e/0x440 [ 254.167392][ C0] ? nmi_handle+0x25/0x440 [ 254.167418][ C0] ? check_preemption_disabled+0x59/0x110 [ 254.167439][ C0] ? default_do_nmi+0x62/0x150 [ 254.167457][ C0] ? exc_nmi+0xa8/0x100 [ 254.167473][ C0] ? end_repeat_nmi+0x16/0x31 [ 254.167503][ C0] ? do_garbage_collect+0x218c/0x81f0 [ 254.167532][ C0] ? check_preemption_disabled+0x59/0x110 [ 254.167554][ C0] ? check_preemption_disabled+0x59/0x110 [ 254.167577][ C0] ? check_preemption_disabled+0x59/0x110 [ 254.167599][ C0] [ 254.167604][ C0] [ 254.167612][ C0] lock_is_held_type+0x76/0x180 [ 254.167634][ C0] __might_resched+0xf0/0x780 [ 254.167651][ C0] ? read_lock_is_recursive+0x10/0x10 [ 254.167679][ C0] ? __might_sleep+0xb0/0xb0 [ 254.167698][ C0] ? do_garbage_collect+0x5ce4/0x81f0 [ 254.167735][ C0] down_read+0x8a/0xa30 [ 254.167756][ C0] ? do_garbage_collect+0x22d7/0x81f0 [ 254.167788][ C0] ? __down_common+0x8b0/0x8b0 [ 254.167806][ C0] ? __up_read+0x2b9/0x690 [ 254.167828][ C0] ? up_read+0x20/0x20 [ 254.167854][ C0] do_garbage_collect+0x21ed/0x81f0 [ 254.167912][ C0] ? get_victim_by_default+0xe8a/0x6ff0 [ 254.167933][ C0] ? f2fs_gc+0x32a0/0x32a0 [ 254.167958][ C0] ? get_victim_by_default+0x6893/0x6ff0 [ 254.167981][ C0] ? mark_lock+0x9a/0x340 [ 254.168016][ C0] ? f2fs_gc+0xef4/0x32a0 [ 254.168042][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 254.168075][ C0] ? up_write+0x19d/0x580 [ 254.168096][ C0] ? get_ckpt_valid_blocks+0x260/0x260 [ 254.168115][ C0] ? __up_read+0x690/0x690 [ 254.168142][ C0] f2fs_gc+0x1169/0x32a0 [ 254.168184][ C0] ? f2fs_start_bidx_of_node+0x370/0x370 [ 254.168222][ C0] ? rwsem_write_trylock+0x166/0x210 [ 254.168255][ C0] f2fs_balance_fs+0x506/0x6c0 [ 254.168281][ C0] ? f2fs_commit_atomic_write+0x14f0/0x14f0 [ 254.168307][ C0] ? __up_read+0x2b9/0x690 [ 254.168330][ C0] ? folio_unlock+0x122/0x2f0 [ 254.168360][ C0] f2fs_map_blocks+0x2871/0x3ab0 [ 254.168398][ C0] ? f2fs_do_map_lock+0x70/0x70 [ 254.168426][ C0] expand_inode_data+0x56d/0xaf0 [ 254.168453][ C0] ? f2fs_insert_range+0x3c0/0x3c0 [ 254.168469][ C0] ? file_modified_flags+0x3e1/0x480 [ 254.168502][ C0] ? rcu_read_lock_any_held+0xb3/0x160 [ 254.168529][ C0] f2fs_fallocate+0x44a/0x9f0 [ 254.168559][ C0] vfs_fallocate+0x547/0x6b0 [ 254.168585][ C0] do_vfs_ioctl+0x222c/0x2a90 [ 254.168605][ C0] ? __x64_compat_sys_ioctl+0x80/0x80 [ 254.168622][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 254.168645][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 254.168669][ C0] ? __kmem_cache_free+0x25c/0x3c0 [ 254.168694][ C0] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 254.168714][ C0] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 254.168737][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 254.168763][ C0] ? __fget_files+0x28/0x4a0 [ 254.168790][ C0] ? __fget_files+0x28/0x4a0 [ 254.168806][ C0] ? __fget_files+0x435/0x4a0 [ 254.168823][ C0] ? __fget_files+0x28/0x4a0 [ 254.168843][ C0] ? bpf_lsm_file_ioctl+0x5/0x10 [ 254.168861][ C0] ? security_file_ioctl+0x7d/0xa0 [ 254.168880][ C0] __se_sys_ioctl+0x81/0x160 [ 254.168907][ C0] do_syscall_64+0x3b/0xb0 [ 254.168932][ C0] ? clear_bhb_loop+0x45/0xa0 [ 254.168958][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.168982][ C0] RIP: 0033:0x7f995ed75bd9 [ 254.168997][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.169011][ C0] RSP: 002b:00007f995fbe8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.169028][ C0] RAX: ffffffffffffffda RBX: 00007f995ef03f60 RCX: 00007f995ed75bd9 [ 254.169042][ C0] RDX: 00000000200000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 254.169053][ C0] RBP: 00007f995ede4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 254.169064][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.169075][ C0] R13: 000000000000000b R14: 00007f995ef03f60 R15: 00007fffc6dba9b8 [ 254.169096][ C0] [ 254.799742][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 254.806667][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 254.814527][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 254.824702][ T28] Call Trace: [ 254.828002][ T28] [ 254.830966][ T28] dump_stack_lvl+0x1e3/0x2cb [ 254.837738][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 254.843442][ T28] ? panic+0x764/0x764 [ 254.847544][ T28] ? llist_add_batch+0x160/0x1d0 [ 254.852514][ T28] ? vscnprintf+0x59/0x80 [ 254.856872][ T28] panic+0x318/0x764 [ 254.860789][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 254.866972][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 254.872371][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 254.878562][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 254.884837][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 254.891022][ T28] watchdog+0xfc7/0xfd0 [ 254.895208][ T28] ? watchdog+0x1f8/0xfd0 [ 254.899572][ T28] kthread+0x28d/0x320 [ 254.904095][ T28] ? hungtask_pm_notify+0x50/0x50 [ 254.909174][ T28] ? kthread_blkcg+0xd0/0xd0 [ 254.913798][ T28] ret_from_fork+0x1f/0x30 [ 254.918264][ T28] [ 254.921605][ T28] Kernel Offset: disabled [ 254.925966][ T28] Rebooting in 86400 seconds..